/r/TOR
News and discussion about the Tor anonymity software. New to Tor? Please read the Tor FAQ!
Protect your privacy. Defend yourself against network surveillance and traffic analysis. Get Tor.
This subreddit is for news, questions, opinions and tips about Tor.
Please read our Frequently Asked Questions before posting.
Community guidelines:
This is a very frequently asked question we see in this subreddit. You generally do not need to use a VPN in conjunction with Tor, and you may even hurt your anonymity by doing so. However, a VPN may help if Tor is censored by your network. Please see the Tor Wiki for more details.
The Tor Project recommends Onion Browser. See onionbrowser.com.
If you can't access Tor Project's website: Send an email to gettor@torproject.org In the body of the mail, write the name of your operating system (such as Windows, macOS, or Linux). You will receive a reply with instructions.
The proper capitalization is "Tor". The subreddit's name is incorrectly capitalized as "TOR" and cannot be changed due to Reddit's technical limitations. Please read the Tor Project FAQ for more information.
/r/tor is not managed or endorsed by The Tor Project.
/r/TOR
I run 2 tor relays, I also host something on one relay that use the tor network for watching youtube while not being tracked, sometimes the exit ip my relay connected to is flagged by google so I have to wait for a while for ip to change to continue use, the only fast solution I can think is to send a HUP signal to tor, which can change the circuit, or NEWNYM via telnet, do the solution I mentioned affect my relay uptime?
i want to download tor just for normal internet use. but i have no experience with computers and my dad has linux mint and i have been trying all day and no matter what youtube video it never works. Can someone explain to me how i can download it (as a newbie)
As the title says, I want to install Tor for all users on my device, but when I run ./start-tor-browser.desktop --register-app
it sets up the app only for the current user. I have Fedora Linux installed. I think I should do some modifications to the shell script. May anyone explain exactly what should I do or if there is an easier way? TIA.
I got the onion browser but it said it needed to be synced to orbot. When I download orbot it says I have to configure it as a vpn on my phone. Is orbot safe? All seems fishy to me.
For now it seems its using X25565 and AES128, which are I guess fine, but who knows for how many more years. Is it not better to change to AES256 and a quantum-resistant cipher like Kyber? Perhaps both Kyber and X25565? The performance hit would not be that bad (I think at least), and Tor is not supposed to be lightning speed, it is supposed to be anonymous (and stay like that for a long time). Is there anyone on Tor already thinking about this transition, or is it something that is being left to be implement in the future?
Following this spec: https://spec.torproject.org/rend-spec/encoding-onion-addresses.html
And this video: https://youtu.be/kRQvE5x36t4?si=pfzhfeu74SDq-suU
Produces: https://pastebin.com/8YQr29UM
The base32 library is: npm install base32
What am I doing wrong?
As soon as someone finishes downloading your files, OnionShare will automatically stop the server, removing the website from the Internet. To allow multiple people to download them, uncheck the “Stop sharing after files have been sent (uncheck to allow downloading individual files)” box.
Also, if you uncheck this box, people will be able to download the individual files you share rather than a single compressed version of all the files.
I find this Onion Share checkbox option baffling and frustrating. This statement is a non-sequitor. Surely we need two checkboxes here for two different options?
So I'm not new to what it does or whats on it I know the possibilities and consequences I just am honestly asking how to "safely" browse Tor as i know it not as easy as download and go.
Why is Tor so painfully slow right now? I haven't used it in ages, and after downloading the browser again this week, I'm shocked at how incredibly sluggish it is. I know Tor isn't known for speed, but this feels extreme - pages are taking forever to load.
Hello,
I have the following problem:
I have defined an exit node with ‘India’ in the torrc file of the TORBrowser.
ExitNodes {in}
StrictNodes 1
These definitions work with countries such as Japan, Brazil, Greece, Turkey, Russia, etc. wonderfully. But if I define India as an exit node, I always end up in Moldova.
How can this happen?
Can you observe the same behaviour?
I do understand TOR doesn't make us anonymous as it only reroutes our traffic through many different servers all around the world. Is it still the best option to use on macOS Monterey than using a VPN (very limited choice of VPNs on Monterey)? I have no problem with the connection speed on my MacBook Air.
The only problem is, some websites would not work as our access to their servers would be denied. Not many websites though, just a few.
I'm using Orbot with obfs4 bridge to make my connection appears as random connections. what is the best connection for tor ? direct or using bridges?
Thanks !
Been trying to download the browser and it keeps saying the site can’t be reached
I have watched a video on how the darkweb works, the video claimed that the only way for someone else to know who you are communicating with is, that all the 3 union routers come together and compare there logs.
What they could see is that I send a message to router one and it was redirected to some server. now couldn't I just say I am an union Router and I just got this message from someone using more than 3 union routers?
I have gone through several TOR Browser hardening guides. Most of them were somewhat outdated and referenced preference names that do not exist anymore.
So I tried to put together a list of hardened about:config settings for the current version of the TOR Browser 14.0.4.
This is not a daily driver config. This is for minimizing attack vectors and securely viewing non-JS sites only.
browser.security_level.security_slider 1
javascript.enabled FALSE
app.update.auto FALSE
browser.download.forbid_open_with TRUE
browser.xul.error_pages.expert_bad_cert TRUE
browser.cache.memory.enable FALSE
browser.shell.shortcutFavicons FALSE
browser.chrome.site_icons FALSE
dom.storage.enabled FALSE
webgl.disabled TRUE
browser.display.use_document_fonts 0
gfx.downloadable_fonts.enabled FALSE
gfx.font_rendering.graphite.enabled FALSE
gfx.font_rendering.opentype_svg.enabled FALSE
svg.disabled TRUE
security.OCSP.enabled 0
permissions.default.camera 2
permissions.default.desktop-notification 2
permissions.default.geo 2
permissions.default.microphone 2
permissions.default.xr 2
network.IDN_show_punycode TRUE
media.play-stand-alone FALSE
media.autoplay.default 5
media.autoplay.blocking_policy 2
media.autoplay.block-event.enabled TRUE
media.autoplay.allow-extension-background-pages FALSE
network.websocket.max-connections 0
network.websocket.delay-failed-reconnects FALSE
network.http.response.timeout 1000
network.http.sendRefererHeader 1
network.http.referer.XOriginPolicy 1
pdfjs.enabledCache.state FALSE
pdfjs.handleOctetStream FALSE
pdfjs.disabled TRUE
pdfjs.disableAutoFetch TRUE
pdfjs.disableFontFace TRUE
pdfjs.disablePageLabels TRUE
pdfjs.disableRange TRUE
pdfjs.disableStream TRUE
privacy.donottrackheader.enabled FALSE
privacy.fingerprintingProtection TRUE
privacy.trackingprotection.enabled TRUE
privacy.trackingprotection.fingerprinting.enabled TRUE
privacy.trackingprotection.pbmode.enabled TRUE
privacy.trackingprotection.annotate_channels TRUE
privacy.trackingprotection.socialtracking.enabled TRUE
privacy.trackingprotection.cryptomining.enabled TRUE
privacy.trackingprotection.emailtracking.enabled TRUE
privacy.trackingprotection.emailtracking.pbmode.enabled TRUE
privacy.trackingprotection.emailtracking.data_collection.enabled FALSE
privacy.resistFingerprinting.spoofOsInUserAgentHeader TRUE
privacy.socialtracking.block_cookies.enabled TRUE
privacy.resistFingerprinting.pbmode TRUE
privacy.resistFingerprinting.randomization.daily_reset.enabled TRUE
privacy.resistFingerprinting.randomization.daily_reset.private.enabled TRUE
privacy.spoof_english 1
media.webm.enabled FALSE
media.mp4.enabled FALSE
media.ogg.enabled FALSE
media.wave.enabled FALSE
media.flac.enabled FALSE
media.opus.enabled FALSE
media.ffmpeg.enabled FALSE
media.encoder.webm.enabled FALSE
media.gmp.decoder.enabled FALSE
media.gmp.encoder.enabled FALSE
media.mediasource.enabled FALSE
media.media-capabilities.enabled FALSE
Please let me know if anything should be changed, added, or removed.
Thanks!
edit: Changes based on feedback
I am sent a mail to bridges@ torproject ....and got bridges and qr ...but none of them work even if I set the time zone correct ...please help me solve the issue..
I never faced this problem in the past
Building a P2P social network (shared forums) and Tor is my last option. Was going with libP2P, but following the nodejs directions on the site didn't yield results.
My new plan is generating a peerID from a Tor hidden service address and including a headless version of Tor with the project.
You'd put the server on a Raspberry Pi and access it from any Tor browser.
I'd like to know how hidden service addresses are generated. I've found a few details about sha3-256 and base-32 encoding, but Google isn't revealing its secrets.
There is nothing interesting now on the deep web, why the criminals don't use it anymore as years before.
I have this computer set up that I'm not using as much as I'd like, and I thought about volunteering it to the tor project, but I was wondering if it would slow down my Internet? I don't have the best pipe, and it's a pretty internet heavy household, so I don't want to slow down my Internet. I apologize if this is stupid.
The hackers are spamming crypto scam stuff on there. Be safe!
I tried to access an onion address (I’m on iOS) that a website publicly displays on their website and it says that I need a v3 authentication key. Does that mean it’s private or what?
so i'm trying to use proxifier and tor together to bypass my school's wifi restrictions. the problem is i don't want to use the tor browser and i just want to use tor command. do you think it's because i'm starting it in the wrong place? i added tor to path so i can access it easily. so here is my log and config
log:
Jan 30 10:37:50.394 [notice] Tor 0.4.8.13 (git-e153e72c01315f86) running on Windows 8 [or later] with Libevent 2.1.12-stable, OpenSSL 3.0.15, Zlib 1.3.1, Liblzma N/A, Libzstd N/A and Unknown N/A as libc.
Jan 30 10:37:50.394 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://support.torproject.org/faq/staying-anonymous/
Jan 30 10:37:50.411 [notice] Read configuration file "C:\Users\chicken\AppData\Roaming\tor\torrc".
Jan 30 10:37:50.411 [warn] Path for ClientOnionAuthDir (C:/Users/chicken/Desktop/TorBrowser/Browser/TorBrowser/Data/Tor/onion-auth) is relative and will resolve to C:\Users\chicken\Desktop\TorBrowser\Browser\TorBrowser\Data\Tor\onion-auth. Is this what you wanted?
Jan 30 10:37:50.411 [warn] Path for DataDirectory (C:/Users/chicken/Desktop/TorBrowser/Browser/TorBrowser/Data/Tor) is relative and will resolve to C:\Users\chicken\Desktop\TorBrowser\Browser\TorBrowser\Data\Tor. Is this what you wanted?
Jan 30 10:37:50.411 [warn] Path for GeoIPFile (C:/Users/chicken/Desktop/TorBrowser/Browser/TorBrowser/Data/Tor/geoip) is relative and will resolve to C:\Users\chicken\Desktop\TorBrowser\Browser\TorBrowser\Data\Tor\geoip. Is this what you wanted?
Jan 30 10:37:50.411 [warn] Path for GeoIPv6File (C:/Users/chicken/Desktop/TorBrowser/Browser/TorBrowser/Data/Tor/geoip6) is relative and will resolve to C:\Users\chicken\Desktop\TorBrowser\Browser\TorBrowser\Data\Tor\geoip6. Is this what you wanted?
Jan 30 10:37:50.420 [notice] Opening Socks listener on 127.0.0.1:9050
Jan 30 10:37:50.420 [notice] Opened Socks listener connection (ready) on 127.0.0.1:9050
Jan 30 10:37:50.000 [warn] CreateProcessA() failed: The system cannot find the file specified.
Jan 30 10:37:50.000 [warn] Managed proxy ""C:/Users/chicken/Desktop/TorBrowser/Browser/TorBrowser/Tor/PluggableTransports/lyrebird.exe"" process terminated with status code 0
Jan 30 10:37:50.000 [err] tor_assertion_failed_: Bug: transports.c:520: proxy_prepare_for_restart: Assertion mp->conf_state == PT_PROTO_COMPLETED failed; aborting. (on Tor 0.4.8.13 e153e72c01315f86)
Jan 30 10:37:50.000 [err] Bug: Tor 0.4.8.13 (git-e153e72c01315f86): Assertion mp->conf_state == PT_PROTO_COMPLETED failed in proxy_prepare_for_restart at transports.c:520: . (Stack trace not available) (on Tor 0.4.8.13 e153e72c01315f86)
config:
ClientTransportPlugin obfs4 exec "C:/Users/chicken/Desktop/TorBrowser/Browser/TorBrowser/Tor/PluggableTransports/lyrebird.exe"
[i have bridges here i just deleted them]
ClientOnionAuthDir C:/Users/chicken/Desktop/TorBrowser/Browser/TorBrowser/Data/Tor/onion-auth
DataDirectory C:/Users/chicken/Desktop/TorBrowser/Browser/TorBrowser/Data/Tor
GeoIPFile C:/Users/chicken/Desktop/TorBrowser/Browser/TorBrowser/Data/Tor/geoip
GeoIPv6File C:/Users/chicken/Desktop/TorBrowser/Browser/TorBrowser/Data/Tor/geoip6
UseBridges 1
is it because i'm starting it in the wrong place?
Hey guys basically I m new here try to set up and install tor on my iPhone can anybody help here I m a newbie need it urgent
hiya goons.
i got a new laptop and have for probably 3 days been trying to download tor, from their official site of course- but it has only been coming up with this screen when i attempt to load the page... i need my deepweb delving hours of the day to be occupied by their proper activity once agan...
pleas help me on my valiant deepdark netquest?
digital transcent,
dead girl
In todays world of AI, deep reinforcement learning, and machiene learning, the assumed difficulty of an analyist manually correlating Tor is automated.
To protect users, first, we should consider to add decoy traffic by default to all Tor connections.
Secondly, we should consider to make every Tor user a middle relay, to increase the number of ephemeral IPs to make mapping the Tor circuit pathes harder by being more dynamic as users will increase the IP pool.
I also think the community should audit Tors entire code base to patch security vulnerabilities, then, enhance Arti's development.
Thank you!
I downloaded the onion TOR browser but when I want to log in to my email or face book it gives me shit. i need to know how to setup my browser so that I can maintain my privacy and still function. how do I tweak my settings etc?
Is there a Linux tool like torify and alikes which uses another approach: while it shall be run as simple as
$ torwrapper myprogram
behind the curtain it creates a new Linux network namespace, sets up Tor inside it, enables firewall so all the network traffic goes through Tor only, then runs the program inside the same network namespace to force it through Tor?
Accidentally connected to university WiFi while browsing on Tor and I’m a little concerned. I know Tor hides what sites you’re browsing, but can my usage be traced back to me considering I was connected to their network?