Most Popular

1500 questions
11
votes
2 answers

Why do some websites have both onion address and non onion address?

Some websites have both public address and also a onion address. By having a public address, the service is no longer a hidden service. What is the point in having a .onion address? As a user, is using .onion address more anonymous than public…
balki
  • 271
  • 2
  • 10
11
votes
3 answers

How do I add the DuckDuckGo .onion version to the Tor Browser search providers?

By default, DuckDuckGo is included in TBB's default list of search providers in the search bar. But it is only their clearnet site (duckduckgo.com), and not their hidden service version,…
portsgob
  • 111
  • 1
  • 1
  • 3
11
votes
2 answers

How does check.torproject.org know if TBB is up to date?

If all TBB versions have the same user-agent/fingerprinting, then how does torcheck check if TBB is up to date? How the "know if I'm up to date" system works?
user183001
  • 165
  • 6
11
votes
1 answer

How should I verify Tor downloads?

When I go to https://www.torproject.org/download/download.html to download the Tor Browser for Windows, how can I be sure that the package I'm downloading is genuine, and hasn't been tampered with? What are all the things that I'll need to download…
flamsmark
  • 389
  • 2
  • 12
11
votes
1 answer

How is data sent back from exit node to me?

I understand how the client sends the data through Tor to the sever. Onion routing Basically, it selects a set of nodes to form a circuit, say nodeA nodeB nodeC. It then encrypts the data this way: 1. Encrypt it using nodeC's key, append server's…
Sergio
  • 213
  • 1
  • 4
11
votes
2 answers

How reliable is setting an exit via country code?

In torrc, you can select exit nodes by country code (https://www.torproject.org/docs/faq.html.en#ChooseEntryExit) - how reliable is that selection? Could a malicious (or simply poorly-configured) exit node lie about where it was exiting traffic to?…
joncam
  • 375
  • 2
  • 9
11
votes
3 answers

HTML 5 canvas Imagedata Extraction, what does it actually mean?

I got the following when reaching github.com This website (github.com) attempted to extract HTML5 canvas image data, which may be used to uniquely identify your computer. Should Tor browser allow this website to extract HTML5 canvas image data ?…
shirish
  • 553
  • 1
  • 4
  • 16
11
votes
4 answers

Why can't Tor Browser use Adobe Flash Player?

So some games I tried on Tor need Adobe Flash Player. I've downloaded Adobe Flash Player three times now, and the game still can't be played. Any help?
user3475
  • 111
  • 1
  • 1
  • 3
11
votes
0 answers

Why does adding a Guard-Exit (EE) node in Tor yield more catch probability than adding a guard and exit node separately?

The following is the default Tor network in shadow simulator: Total BW of Guard flagged nodes=258.15 MB/S Total BW of Middle nodes=23.69 MB/S Total BW of Exit flagged nodes=13.23 MB/S Total BW of Guard+Exit flagged nodes=213.4 MB/S I…
saurav
  • 777
  • 5
  • 18
11
votes
2 answers

How can I prevent someone looking at my traffic patterns from learning that I use Tor?

Traffic pattern recognition can apparently be used to achieve a high degree of confidence of the origin of certain traffic, based on statistical analysis of exit node traffic. Is it possible to mitigate this in any way? I guess it may be possible…
barrymac
  • 213
  • 1
  • 5
11
votes
2 answers

What does NSA's attempt to deannonymize Tor mean for the average Tor user?

What do there revelations mean for us? http://www.theguardian.com/world/2013/oct/04/tor-attacks-nsa-users-online-anonymity
kurew
  • 111
  • 2
11
votes
1 answer

Can anybody explain the Advertised bandwidth, MaxAdvertisedBandwidth, Measured bandwidth, Bandwidth burst, RelayBandwidth rate?

I am confused about a few terms: AdvertisedBandwidth, MaxAdvertisedBandwidth, MeasuredBandwidth, RelayBandwidthBurst, RelayBandwidthRate, BandwidthBurst, and BandwidthRate. Can anyone please explain these terms?
saurav
  • 777
  • 5
  • 18
11
votes
1 answer

HTML5 Canvas Security Flaw

What security flaw with the HTML5 canvas is Tor Browser Bundle protecting you from when it pops up a notification about the canvas.
Mikayla Maki
  • 213
  • 2
  • 7
11
votes
1 answer

The ReachableAddresses version of FascistFirewall

Is the following the equivalent of using FascistFirewall 1? ReachableAddresses accept *:80 ReachableAddresses accept *:443 I ask this because it seems that FascistFirewall will someday be deprecated (like FirewallPorts is) for the more versatile…
Jason
  • 143
  • 6
11
votes
3 answers

Getting Tor to randomly use various Country IP's per session

I would like to have Tor use a different IP address in Canada every time I start or restart the application. Is that possible? If so, how?
Bruno Vincent
  • 211
  • 2
  • 4