Tor - Revision history

Admin: /* How To Use Tor Correctly */

2016-07-15T05:53:18Z

How To Use Tor Correctly

← Older revision		Revision as of 05:53, 15 July 2016
Line 22:		Line 22:

	==How To Use Tor Correctly==		==How To Use Tor Correctly==

	~~The hacking motto is in full effect here: Don't Fuck It Up.~~

	Most importantly, understand how Tor works: if you don't understand it, you'll use it wrong.		Most importantly, understand how Tor works: if you don't understand it, you'll use it wrong.

	When using Tor, don't use it alone. Use it with encryption (HTTPS Everywhere in Firefox) and with Privoxy or NoScript to protect you from nefarious web elements.		When using Tor, don't use it alone. Use it with encryption (HTTPS Everywhere in Firefox) and with Privoxy or NoScript to protect you from nefarious web elements. You can be tracked by web ads, so AdBlock extensions are also a great idea.

	Remember ~~that~~ the fact that you have traffic on port 9050 cannot be hidden (unless you're tunneling a connection to another machine that's ~~connecting~~ to Tor). If you're using Tor, your ISP will know, and therefore the government will know.		Remember: ''the simple fact that you have traffic on port 9050 cannot be hidden'' (unless you're tunneling a connection through another port to another machine that's tunneling that port back through to Tor). If you're using Tor, your ISP will know, and therefore the government will know, but that's all they'll know.

	Tor traffic <s>can be monitored</s> is definitely being monitored – not just by governments, but by malicious people looking for weaknesses to exploit.		Tor traffic <s>can be monitored</s> is definitely being monitored – not just by governments, but by malicious people looking for weaknesses to exploit.

Admin at 16:46, 28 August 2015

2015-08-28T16:46:49Z

← Older revision		Revision as of 16:46, 28 August 2015
Line 35:		Line 35:


	~~[[Category:Anonymous Browsing]]~~		{{AnonymousBrowsingFlag}}
	~~[[Category:Privacy]]~~
	~~[[Category:Security]]~~
	~~[[Category:Web]]~~
	~~[[Category:Browsers]]~~

Admin at 02:37, 28 August 2015

2015-08-28T02:37:12Z

← Older revision		Revision as of 02:37, 28 August 2015
Line 35:		Line 35:


			[[Category:Anonymous Browsing]]
	[[Category:Privacy]]		[[Category:Privacy]]
	[[Category:Security]]		[[Category:Security]]
	[[Category:Web]]		[[Category:Web]]
	[[Category:Browsers]]		[[Category:Browsers]]

Admin at 02:29, 28 August 2015

2015-08-28T02:29:48Z

← Older revision		Revision as of 02:29, 28 August 2015
Line 32:		Line 32:

	Tor traffic <s>can be monitored</s> is definitely being monitored – not just by governments, but by malicious people looking for weaknesses to exploit.		Tor traffic <s>can be monitored</s> is definitely being monitored – not just by governments, but by malicious people looking for weaknesses to exploit.



			[[Category:Privacy]]
			[[Category:Security]]
			[[Category:Web]]
			[[Category:Browsers]]

Admin: /* How To Use Tor Correctly */

2015-08-28T01:51:11Z

How To Use Tor Correctly

← Older revision		Revision as of 01:51, 28 August 2015
Line 23:		Line 23:
	==How To Use Tor Correctly==		==How To Use Tor Correctly==

	When using Tor, ~~be sure to~~ use ~~encrypted~~ (HTTPS) ~~websites for anything sensitive~~. ~~Bear in mind~~ that your traffic <s>~~could~~ be monitored</s> is definitely being monitored – not just by governments, but by malicious people looking for ~~your private data and know that Tor users are more likely~~ to ~~be interesting~~.		The hacking motto is in full effect here: Don't Fuck It Up.

			Most importantly, understand how Tor works: if you don't understand it, you'll use it wrong.

			When using Tor, don't use it alone. Use it with encryption (HTTPS Everywhere in Firefox) and with Privoxy or NoScript to protect you from nefarious web elements.

			Remember that the fact that you have traffic on port 9050 cannot be hidden (unless you're tunneling a connection to another machine that's connecting to Tor). If you're using Tor, your ISP will know, and therefore the government will know.

			Tor traffic <s>can be monitored</s> is definitely being monitored – not just by governments, but by malicious people looking for weaknesses to exploit.

Admin: /* What Tor Is Not */

2015-08-28T01:46:10Z

What Tor Is Not

← Older revision		Revision as of 01:46, 28 August 2015
Line 21:		Line 21:
	Very good article explaining some of the things Tor does NOT hide: http://www.howtogeek.com/142380/htg-explains-is-tor-really-anonymous-and-secure/		Very good article explaining some of the things Tor does NOT hide: http://www.howtogeek.com/142380/htg-explains-is-tor-really-anonymous-and-secure/

			==How To Use Tor Correctly==

	When using Tor, be sure to use encrypted (HTTPS) websites for anything sensitive. Bear in mind that your traffic <s>could be monitored</s> is definitely being monitored – not just by governments, but by malicious people looking for your private data and know that Tor users are more likely to be interesting.		When using Tor, be sure to use encrypted (HTTPS) websites for anything sensitive. Bear in mind that your traffic <s>could be monitored</s> is definitely being monitored – not just by governments, but by malicious people looking for your private data and know that Tor users are more likely to be interesting.

Admin: /* What Tor Is Not */

2015-08-28T01:44:06Z

What Tor Is Not

← Older revision		Revision as of 01:44, 28 August 2015
Line 23:		Line 23:


	When using Tor, be sure to use encrypted (HTTPS) websites for anything sensitive. Bear in mind that your traffic could be monitored – not just by governments, but by malicious people looking for private data.		When using Tor, be sure to use encrypted (HTTPS) websites for anything sensitive. Bear in mind that your traffic <s>could be monitored</s> is definitely being monitored – not just by governments, but by malicious people looking for your private data and know that Tor users are more likely to be interesting.

Admin: /* What Tor Is */

2015-08-28T01:39:58Z

What Tor Is

← Older revision		Revision as of 01:39, 28 August 2015
Line 5:		Line 5:
	Tor uses three steps to anonymize the origin of traffic: first, the traffic is passed into a Tor entry node, which is randomly selected. It is then passed to a Tor bridge node, also randomly chosen. Finally, Tor passes the traffic to an exit node, which is where your traffic enters the "normal" web again.		Tor uses three steps to anonymize the origin of traffic: first, the traffic is passed into a Tor entry node, which is randomly selected. It is then passed to a Tor bridge node, also randomly chosen. Finally, Tor passes the traffic to an exit node, which is where your traffic enters the "normal" web again.

	This last step is where Tor ends ~~- which~~ is ~~what some people don't realize~~, ~~leading to their~~ traffic ~~being~~ identified~~! One researcher was even able to sniff plain text~~ email~~/password combinations~~ from ~~unencrypted traffic leaving a~~ Tor node. ~~Imagine that - using~~ Tor ~~to anonymize your browsing ends up exposing you to hackers on~~ exit nodes~~! And that was just a ''single private'' researcher, governments have many more resources and~~ are ~~likely~~ sniffing ~~everything coming out~~.		This last step is where Tor ends. Tor does nothing to protect your traffic once it leaves the Tor exit node. The traffic is in the clear. At that point, Tor has served its purpose: the traffic's original source cannot be identified. But if you're sending your personal details inside of unencrypted traffic (like your email, or communications), your traffic will be sniffable from the Tor exit node. And the primary people with resources to run Tor exit nodes are state entities.

			One hacker demonstrated this by sniffing emails and passwords from a Tor exit node.

	==What Tor Is Not==		==What Tor Is Not==

Admin at 00:08, 28 August 2015

2015-08-28T00:08:13Z

← Older revision		Revision as of 00:08, 28 August 2015
Line 1:		Line 1:
			==What Tor Is==

	Tor is a tool for anonymization. It anonymizes the origin of your traffic by passing it through multiple relays.		Tor is a tool for anonymization. It anonymizes the origin of your traffic by passing it through multiple relays.

Admin: Created page with "Tor is a tool for anonymization. It anonymizes the origin of your traffic by passing it through multiple relays. Tor uses three steps to anonymize the origin of traffic: firs..."

2015-08-27T23:28:12Z

Created page with "Tor is a tool for anonymization. It anonymizes the origin of your traffic by passing it through multiple relays. Tor uses three steps to anonymize the origin of traffic: firs..."

New page

Tor is a tool for anonymization. It anonymizes the origin of your traffic by passing it through multiple relays.

Tor uses three steps to anonymize the origin of traffic: first, the traffic is passed into a Tor entry node, which is randomly selected. It is then passed to a Tor bridge node, also randomly chosen. Finally, Tor passes the traffic to an exit node, which is where your traffic enters the "normal" web again.

This last step is where Tor ends - which is what some people don't realize, leading to their traffic being identified! One researcher was even able to sniff plain text email/password combinations from unencrypted traffic leaving a Tor node. Imagine that - using Tor to anonymize your browsing ends up exposing you to hackers on exit nodes! And that was just a ''single private'' researcher, governments have many more resources and are likely sniffing everything coming out.

==What Tor Is Not==

Tor is NOT an encryption tool - your traffic is not encrypted by Tor.

This is why sniffing traffic on Tor exit nodes reveals plain text emails and passwords - the traffic is in the clear.

Tor is NOT a content filter - it does not block cookies, Javascript, Flash, or any other nefarious elements in web pages that may be used to identify and track you.

TOR ALONE IS NOT ENOUGH FOR TOTAL ANONYMITY.

Very good article explaining some of the things Tor does NOT hide: http://www.howtogeek.com/142380/htg-explains-is-tor-really-anonymous-and-secure/

When using Tor, be sure to use encrypted (HTTPS) websites for anything sensitive. Bear in mind that your traffic could be monitored – not just by governments, but by malicious people looking for private data.