/r/TOR

Photograph via snooOG

News and discussion about the Tor anonymity software. New to Tor? Please read the Tor FAQ!

Tor

Protect your privacy. Defend yourself against network surveillance and traffic analysis. Get Tor.

This subreddit is for news, questions, opinions and tips about Tor.

Please read our Frequently Asked Questions before posting.

Community guidelines:

  • No posts about specific .onion sites, or requesting or sharing links to onion sites or link collections – these belong in /r/onions.
  • Do not ask for or give advice about activity that may be illegal in most places.
  • Do not ask for or give advice about using Tor for abusive purposes.
  • Do not ask for or offer assistance in private (PM)
  • Do not use URL shortening services: always submit the real link.
  • Articles that do not mention Tor are usually off-topic; /r/Tor is not for general news about privacy or security.
  • No memes or low effort content.
  • System-level questions about operating systems are off-topic. Questions about installing Tails, for example, belong in /r/Tails.
  • Do not ask for or offer invites.
  • Do not share bridges or refer to unofficial bridge distribution channels.
  • Posts must be in English
  • Be excellent to each other.

Tor + VPN?

This is a very frequently asked question we see in this subreddit. You generally do not need to use a VPN in conjunction with Tor, and you may even hurt your anonymity by doing so. However, a VPN may help if Tor is censored by your network. Please see the Tor Wiki for more details.

Tor on iOS (iPhone)?

The Tor Project recommends Onion Browser. See onionbrowser.com.

How to get started

  1. Download Tor Browser
  2. Install
  3. Start it. You're done. It's that easy!

If you can't access Tor Project's website: Send an email to gettor@torproject.org In the body of the mail, write the name of your operating system (such as Windows, macOS, or Linux). You will receive a reply with instructions.

Tor or TOR?

The proper capitalization is "Tor". The subreddit's name is incorrectly capitalized as "TOR" and cannot be changed due to Reddit's technical limitations. Please read the Tor Project FAQ for more information.

Links

Related subreddits

  • /r/onions – all about Tor's hidden services
  • /r/tails – the Tails operating system helps preserve anonymity
  • /r/netsec – security news and discussion
  • /r/privacy – privacy and freedom in the information age
  • /r/PrivacyGuides – Helping you protect your data
  • /r/FreeSpeech – freedom of speech
  • /r/i2p – The Invisible Internet Project, anonymity system with similarities to Tor
  • /r/Namecoin – Namecoin, decentralized DNS

/r/tor is not managed or endorsed by The Tor Project.

/r/TOR

297,813 Subscribers

1

Tor browser (Mac)

Is anyone else still having a hard time getting tor browser to work using Mac?

6 Comments
2024/11/04
19:33 UTC

1

Issue on Andoird App

I have an issue on the Android App. I need to grant access to the position (spoofed through another app) to access in a site. But tor probably blocks the site poop up to ask permission because I got none. How to I allow it?

0 Comments
2024/11/04
17:01 UTC

2

NOScript Warning (omg)?!

Hello everyone! Today I was accessing some websites that are not allowed in my country because of some laws saying "it is bad for your democracy" 💀 anyways... I was on a forum and suddenly a windows popped up on my screen saying something similar to: "Noscript Warning Cross Site attack", it was asking me if I should block or allow the request, I tried to press BLOCK but nothing happened, so I just decided to close all windows and took off tor from my computer... am I in trouble? Please I really need to know...

7 Comments
2024/11/04
16:08 UTC

3

Tor proxy for this use case

Many apps and websites are blocked in my region. Tor opens some of them but many times those apps n websites dont work well due to tor. The use case is to use whonix or qubes then install some android emulator, then install apps like discord, telegram. As per other forums if their app is used then even if they know that you are visiting them using an exit node it works fine. The other use case is that I wanted whonix or qubes to run as live usb just like tails so that no traces are left. But as per subs of whonix and qubes that is a very tough nut to crack. But someone mentioned there to use linux, install an android emulator and then use tor proxies to route all traffic from that os throuh tor. Can anyone explain what this is and how to use it? And if all traffic from a linux will route through tor then will it be possible to get the additional benefits of tails in this linux somehow like fingerprint reduction, mac randomization and others?

0 Comments
2024/11/04
14:50 UTC

0

Help me Bypass the school firewall

My school has probably blocked TOR and I need a way to bypass it. ps: my school uses fortinet.

25 Comments
2024/11/04
04:50 UTC

0

When using a desktop computer, a ☆ is visible at the far-right side of the URL address bar. Hovering a pointer over the ☆ opens a small panel that shows "Edit this bookmark (⌘D)". How can I remove, hide, or conceal the ☆ so that it is not visible anywhere in the URL address bar?

0 Comments
2024/11/04
04:29 UTC

0

Tor os for my phone

The title says everything i search for an os for my phone thats runs tor on it like whonix

12 Comments
2024/11/03
19:46 UTC

0

Cannot load any .onion sites

So I’m using an iPhone and I’m trying to load a .onion site, im using the onion browser with orbot , when I enter a onion url it shows me a terror message that says

Error Could not connect you to the server. (Code: -1004, domain: NSURLErrorDomain)

https:// (And it jsut shows the website here, and yes I have tried many different ones)

4 Comments
2024/11/03
13:04 UTC

4

TOR doesn't work unless I completely disable my firewall.

I use Windows Defender Firewall via GPEdit w/ user override (the 'apply local firewall rules' and 'apply local connection rules' in layman terms) and am having an issue that prevents TOR as a whole from functioning.

Whitelisting the tor.exe files and the pluggable transports (lyrebird, obfs4, etc.) works on Android devices but not Windows devices. Whitelisting the entire folder (a thing you can do) doesn't work either, meaning it's some external Windows process that TOR needs to run... and, does anyone have a clue what it is or how to fix it? Disabling my entire firewall is a bad idea for so many reasons, so it's not a solution in this case. Thank you.

2 Comments
2024/11/03
06:40 UTC

0

tor error handle

hi someone knows how to handle err in tor --->>>> Nov 02 20:36:54.000 [notice] Have tried resolving or connecting to address '[scrubbed]' at 3 different places. Giving up. ---> just how to using stem lib raise err in py file ?

0 Comments
2024/11/02
19:40 UTC

2

Any iOS solution?

Has anyone figured out how to get tor to work with MacOS** again? Doing all troubleshooting doesn’t work. Is it something tor is aware of and addressing?

20 Comments
2024/11/02
17:41 UTC

6

Very low traffic on snowflake servers

I have been seeing significant declines in my server usage for some time now.

When I turned it on I remember traffic being around 1GB all the time and 1.5GB on weekends.

Now it's at 10-50mb/s and only people from uncensored countries are using it.

Is it possible that all the oppressive countries have blocked my IP address?

Or have they found a way how to detect and block snowflake.

I don't know when the drop occurred because I haven't dealt with the server lately.

4 Comments
2024/11/02
09:58 UTC

4

Cant connect to onion

Hi

I launch the Tor browser, and then it prompts me to connect to the Tor network, which goes smoothly. I can normally search using the DuckDuckGo browser, but as soon as I try to connect to the .onion network… … the Tor connection is unexpectedly terminated. It tells me that the cause might be a Tor bug, another program on my system, or faulty hardware, blah blah blah.

This happened to me starting today. Yesterday and previously, everything was fine. Im on Mac.

6 Comments
2024/11/01
23:50 UTC

3

Having issues with orbot

Using orbot on ios I can’t access certain websites is this normal, before I could access the same websites I now can’t. Can anyone help or give some advice

2 Comments
2024/11/01
18:32 UTC

8

Question about extra privacy

I'm currently using tor in tails Linux, however I don't want my ISP to know that I'm using tor, what should I do,

25 Comments
2024/11/01
11:09 UTC

1

Javascript and how to enable it

I know that as a general rule of thumb javascript poses significant risks. That is not my question.

To elaborate on my flow with the tor for now it's more or less like this:

  1. I keep tor up to date and from time to time update my bridges
  2. I access some onion resources alongside the clearnet ones.
  3. Since password management is a bit clumbersome I have a self-hosted hashicorp vault instance (for those unfamilar think of this just as a "secure web pass manager, where you don't need to trust random password managers not to leak your data") that does not by itself has access to internet in any kind of way. I use that instance both when using clearnet outside of tor, both for my work and personal.

But for many reasons vault will not work without javascript. I tried to press a few buttons in NoScript to try to enable JS globally on my domain specifically, but it doesn't seem to work, I still just get a blank page.

Trying to google how to do this doesn't give any information apart from "yes, you can configure it with noscript".

The question is how?

3 Comments
2024/11/01
10:18 UTC

10

Alleged security incident on my ionos vps middle relay

Hi u/all,

I received the following email from my hoster yesterday evening:

A security incident has been detected on your IONOS server.

We have been informed that attacks have been carried out from your server against third parties.

Host / IP of your server: MYIP address

Details of this incident can be found at the end of this email.

To restore the security of your compromised IONOS server, the following measures are necessary:

remove affected files and services

Please analyse which services, software and files have been stored or modified by third parties on your server. Remove these or correct the changes made within 48 hours.

  1. protect yourself from future attacks

Always keep the operating system and the software used on your server up to date. Also change all passwords that are or were stored on your server (e.g. for mail servers, external services, databases). It is highly likely that these were stolen by the attackers.

  1. inform us about the measures you have taken

Please always give us brief feedback after you have cleaned up the server. Please leave the ticket number [Ticket AB136070868] in your message.

Note: If the security incident is not resolved within 48 hours, we will have to take your server offline.

Tip: If it is not possible to clean up the server, please reinitialise it. We also recommend that you check your backup before restoring it.

We look forward to working with you to ensure the security of your server. Thank you for your co-operation.

Details of the incident:

30-Oct-2024 14:12:29 BLOCKED attempted-recon MYIP address 0 202.91.x.x 22

30-Oct-2024 15:03:42 BLOCKED attempted-recon MYIP-Address 0 202.91.x.x 22
30-Oct-2024 15:10:48 BLOCKED attempted-recon MYIP-Address 0 202.91.x.x 22
30-Oct-2024 15:13:21 DENIED MYIP address 18697 TCP 202.91.x.x 22
30-Oct-2024 15:32:11 DENIED MYIP address 39594 TCP 202.91.x.x 22
30-Oct-2024 15:45:53 BLOCKED attempted-recon MYIP-Address 0 202.91.x.x 22

Kind regards

Your IONOS customer service

The stupid thing is that I'm not at home at the moment and don't even have a computer available. I connected via SSH from my mobile phone and couldn't find anything suspicious.

How should I react?

I don't really want to draw ionos' attention to the relay. The safest option (in terms of ionos' reaction) would be to shut down the server a few days and then simply reinstall it.

It's a Ubuntu 22.04 with nothing more in it than Tor, so reinstalling should be don in less than a hour.

Better ideas?

Update: It seems to be a bigger thing e.g.:

https://forum.torproject.org/t/tor-relays-tor-relays-source-ips-spoofed-to-mass-scan-port-22/15498

https://www.reddit.com/r/TOR/comments/1ggl285/comment/luu4ezx/

But the question stays the same. How to react against the holster?

Update II:

Here is what I wrote to IONOS. My goal was to get rid of the problem without making it too clear that there is a Tor relay running:

Hello IONOS team,

With regard to your message about the security incident, I have checked my server extensively. I could not find any evidence that the server was compromised or that SSH login attempts were made to the IP address 202.91.x.x. I suspect that my IP address may have been the target of an IP spoofing attack. I therefore suspect that my IP address may have been the target of an IP spoofing attack.

I have taken the following Actions:

  1. checked SSH logs
  1. analyzed the syslog
  1. checked network connections
  1. searched for suspicious processes
  1. checked recent system file changes
  1. checked SSH configuration
  1. user accounts checked
  1. performed a system update

I have also installed and activated fail2ban to protect the server against unwanted access in the future.

If further measures are necessary, please let me know.

Thank you very much for your support.

6 Comments
2024/11/01
10:13 UTC

3

Is Orbot reliable for use?

My country just banned some if not all social media(YouTube included) (for political reasons) for a few weeks leading to the elections. Could I rely on Orbot just to bypass these bans? (Also , should I recommend this to my friends?)

4 Comments
2024/11/01
06:55 UTC

1

Tor Browser Utilization

Exploring the Tor Browser and its functionalities, particularly in relation to privacy and security. Could provide any resources on how to effectively explore and utilize Tor?

2 Comments
2024/11/01
04:27 UTC

10

How do i downgrade tor? The newest update isnt working on my macbook anymore for some reason.

I dont want to downgrade but i keep getting errors for mac and it keeps disconnecting me whenever i try to go on any site. Its annoying.

6 Comments
2024/10/31
18:06 UTC

7

Tor issues with Mac

Anyone else having issues with Tor while having a MacBook? Eveything was working fine until last night, and now I can only see the Home Screen but if I decided to search will tell me to restart browser and I have multiple times, I’m stuck ://

14 Comments
2024/10/31
14:36 UTC

1

Still new to Tor

I'm still new to Tor. I'd love any advice. Currently using it on my phone. I'm trying to get to the dark web. I'm looking for a few specific things

13 Comments
2024/10/31
12:27 UTC

5

First time using tor! Need Guidance!

I'm lost

4 Comments
2024/10/31
04:18 UTC

1

Where is the Location of Tor (portable) profile please?

it is not at:
TorBrowser/Data/Browser/profile

2 Comments
2024/10/30
14:05 UTC

0

is tor broken ?

21 Comments
2024/10/30
04:01 UTC

5

Tor minimal firewall config feasibility

I am interested in running a tor client with a maximally-locked-down firewall configuration to reduce the risk of compromise. My thought was to pick ten relays and allow the client to connect to those servers on the port they serve, and nothing else.

As a new user, I'm unsure how well this will work. Do the available relays rotate very often? Is 10 enough? Would 1 suffice? Thank you for any comment.

7 Comments
2024/10/30
03:44 UTC

0

Hey if you're on Linux I've got a message for you, so you know how you can download Tor from the Tor website and install Tor this way? Apparently this might be unsafe, more inside...

So first just go here and read this thread, make sure you read the comments https://www.reddit.com/r/TOR/comments/1gdcotg/i_just_installed_tor_browser_on_ubuntu_2404_and/?utm_source=share&utm_medium=web3x&utm_name=web3xcss&utm_term=1&utm_content=share_button

So yeah what's going on, can I safely ignore that message? Did you read the comments? One person told me that if you install Tor using one of the package managers then you'll be fine, that I'm getting this message because I installed Tor directly from the Tor website.

Ok so I do remember installing Tor using flatpak about a year and a half ago I'd say, or maybe even 2 years ago now, and what flatpak will do is it will install the Tor Browser launcher on your computer and then from there you can launch Tor and install it. Thing is the Tor Browser launcher was broken, it was broken for at least over a year.

Yeah the Tor Browser launcher was broken for a long time so I just gave up on it. Does it work now? Does it work on Ubuntu 24.04 LTS?

So yeah I gave up on the tor browser launcher and just started downloading Tor from the Tor website and installed it this way. In fact, many tutorials will tell you to download Tor from the Tor website and install it this way.

So yeah can I get some second opinions here? So apparently installing Tor from the package manager will fix this? Keep in mind any package manager is going to install the Tor Browser launcher though, and the Tor Browser Launcher was broken the last time I used it, did they finally fix it?

Just an FYI I'm on Ubuntu 24.04 LTS.

0 Comments
2024/10/29
22:01 UTC

Back To Top