/r/TOR
News and discussion about the Tor anonymity software. New to Tor? Please read the Tor FAQ!
Protect your privacy. Defend yourself against network surveillance and traffic analysis. Get Tor.
This subreddit is for news, questions, opinions and tips about Tor.
Please read our Frequently Asked Questions before posting.
Community guidelines:
This is a very frequently asked question we see in this subreddit. You generally do not need to use a VPN in conjunction with Tor, and you may even hurt your anonymity by doing so. However, a VPN may help if Tor is censored by your network. Please see the Tor Wiki for more details.
The Tor Project recommends Onion Browser. See onionbrowser.com.
If you can't access Tor Project's website: Send an email to gettor@torproject.org In the body of the mail, write the name of your operating system (such as Windows, macOS, or Linux). You will receive a reply with instructions.
The proper capitalization is "Tor". The subreddit's name is incorrectly capitalized as "TOR" and cannot be changed due to Reddit's technical limitations. Please read the Tor Project FAQ for more information.
/r/tor is not managed or endorsed by The Tor Project.
/r/TOR
Is anyone else still having a hard time getting tor browser to work using Mac?
I have an issue on the Android App. I need to grant access to the position (spoofed through another app) to access in a site. But tor probably blocks the site poop up to ask permission because I got none. How to I allow it?
Hello everyone! Today I was accessing some websites that are not allowed in my country because of some laws saying "it is bad for your democracy" 💀 anyways... I was on a forum and suddenly a windows popped up on my screen saying something similar to: "Noscript Warning Cross Site attack", it was asking me if I should block or allow the request, I tried to press BLOCK but nothing happened, so I just decided to close all windows and took off tor from my computer... am I in trouble? Please I really need to know...
Many apps and websites are blocked in my region. Tor opens some of them but many times those apps n websites dont work well due to tor. The use case is to use whonix or qubes then install some android emulator, then install apps like discord, telegram. As per other forums if their app is used then even if they know that you are visiting them using an exit node it works fine. The other use case is that I wanted whonix or qubes to run as live usb just like tails so that no traces are left. But as per subs of whonix and qubes that is a very tough nut to crack. But someone mentioned there to use linux, install an android emulator and then use tor proxies to route all traffic from that os throuh tor. Can anyone explain what this is and how to use it? And if all traffic from a linux will route through tor then will it be possible to get the additional benefits of tails in this linux somehow like fingerprint reduction, mac randomization and others?
My school has probably blocked TOR and I need a way to bypass it. ps: my school uses fortinet.
The title says everything i search for an os for my phone thats runs tor on it like whonix
So I’m using an iPhone and I’m trying to load a .onion site, im using the onion browser with orbot , when I enter a onion url it shows me a terror message that says
Error Could not connect you to the server. (Code: -1004, domain: NSURLErrorDomain)
https:// (And it jsut shows the website here, and yes I have tried many different ones)
Hello there,
I just installed Rethink DNS and I wanted to use orbot. For testing I just selected Vanadium but it isn't working.
Can anyone pls help me?
Thanks!
I use Windows Defender Firewall via GPEdit w/ user override (the 'apply local firewall rules' and 'apply local connection rules' in layman terms) and am having an issue that prevents TOR as a whole from functioning.
Whitelisting the tor.exe files and the pluggable transports (lyrebird, obfs4, etc.) works on Android devices but not Windows devices. Whitelisting the entire folder (a thing you can do) doesn't work either, meaning it's some external Windows process that TOR needs to run... and, does anyone have a clue what it is or how to fix it? Disabling my entire firewall is a bad idea for so many reasons, so it's not a solution in this case. Thank you.
hi someone knows how to handle err in tor --->>>> Nov 02 20:36:54.000 [notice] Have tried resolving or connecting to address '[scrubbed]' at 3 different places. Giving up. ---> just how to using stem lib raise err in py file ?
Has anyone figured out how to get tor to work with MacOS** again? Doing all troubleshooting doesn’t work. Is it something tor is aware of and addressing?
I have been seeing significant declines in my server usage for some time now.
When I turned it on I remember traffic being around 1GB all the time and 1.5GB on weekends.
Now it's at 10-50mb/s and only people from uncensored countries are using it.
Is it possible that all the oppressive countries have blocked my IP address?
Or have they found a way how to detect and block snowflake.
I don't know when the drop occurred because I haven't dealt with the server lately.
Hi
I launch the Tor browser, and then it prompts me to connect to the Tor network, which goes smoothly. I can normally search using the DuckDuckGo browser, but as soon as I try to connect to the .onion network… … the Tor connection is unexpectedly terminated. It tells me that the cause might be a Tor bug, another program on my system, or faulty hardware, blah blah blah.
This happened to me starting today. Yesterday and previously, everything was fine. Im on Mac.
Using orbot on ios I can’t access certain websites is this normal, before I could access the same websites I now can’t. Can anyone help or give some advice
I'm currently using tor in tails Linux, however I don't want my ISP to know that I'm using tor, what should I do,
I know that as a general rule of thumb javascript poses significant risks. That is not my question.
To elaborate on my flow with the tor for now it's more or less like this:
But for many reasons vault will not work without javascript. I tried to press a few buttons in NoScript to try to enable JS globally on my domain specifically, but it doesn't seem to work, I still just get a blank page.
Trying to google how to do this doesn't give any information apart from "yes, you can configure it with noscript".
The question is how?
Hi u/all,
I received the following email from my hoster yesterday evening:
A security incident has been detected on your IONOS server.
We have been informed that attacks have been carried out from your server against third parties.
Host / IP of your server: MYIP address
Details of this incident can be found at the end of this email.
To restore the security of your compromised IONOS server, the following measures are necessary:
remove affected files and services
Please analyse which services, software and files have been stored or modified by third parties on your server. Remove these or correct the changes made within 48 hours.
- protect yourself from future attacks
Always keep the operating system and the software used on your server up to date. Also change all passwords that are or were stored on your server (e.g. for mail servers, external services, databases). It is highly likely that these were stolen by the attackers.
- inform us about the measures you have taken
Please always give us brief feedback after you have cleaned up the server. Please leave the ticket number [Ticket AB136070868] in your message.
Note: If the security incident is not resolved within 48 hours, we will have to take your server offline.
Tip: If it is not possible to clean up the server, please reinitialise it. We also recommend that you check your backup before restoring it.
We look forward to working with you to ensure the security of your server. Thank you for your co-operation.
Details of the incident:
30-Oct-2024 14:12:29 BLOCKED attempted-recon MYIP address 0 202.91.x.x 22
30-Oct-2024 15:03:42 BLOCKED attempted-recon MYIP-Address 0 202.91.x.x 22
30-Oct-2024 15:10:48 BLOCKED attempted-recon MYIP-Address 0 202.91.x.x 22
30-Oct-2024 15:13:21 DENIED MYIP address 18697 TCP 202.91.x.x 22
30-Oct-2024 15:32:11 DENIED MYIP address 39594 TCP 202.91.x.x 22
30-Oct-2024 15:45:53 BLOCKED attempted-recon MYIP-Address 0 202.91.x.x 22
Kind regards
Your IONOS customer service
The stupid thing is that I'm not at home at the moment and don't even have a computer available. I connected via SSH from my mobile phone and couldn't find anything suspicious.
How should I react?
I don't really want to draw ionos' attention to the relay. The safest option (in terms of ionos' reaction) would be to shut down the server a few days and then simply reinstall it.
It's a Ubuntu 22.04 with nothing more in it than Tor, so reinstalling should be don in less than a hour.
Better ideas?
Update: It seems to be a bigger thing e.g.:
https://forum.torproject.org/t/tor-relays-tor-relays-source-ips-spoofed-to-mass-scan-port-22/15498
https://www.reddit.com/r/TOR/comments/1ggl285/comment/luu4ezx/
But the question stays the same. How to react against the holster?
Update II:
Here is what I wrote to IONOS. My goal was to get rid of the problem without making it too clear that there is a Tor relay running:
Hello IONOS team,
With regard to your message about the security incident, I have checked my server extensively. I could not find any evidence that the server was compromised or that SSH login attempts were made to the IP address 202.91.x.x. I suspect that my IP address may have been the target of an IP spoofing attack. I therefore suspect that my IP address may have been the target of an IP spoofing attack.
I have taken the following Actions:
- checked SSH logs
- analyzed the syslog
- checked network connections
- searched for suspicious processes
- checked recent system file changes
- checked SSH configuration
- user accounts checked
- performed a system update
I have also installed and activated fail2ban to protect the server against unwanted access in the future.
If further measures are necessary, please let me know.
Thank you very much for your support.
My country just banned some if not all social media(YouTube included) (for political reasons) for a few weeks leading to the elections. Could I rely on Orbot just to bypass these bans? (Also , should I recommend this to my friends?)
Exploring the Tor Browser and its functionalities, particularly in relation to privacy and security. Could provide any resources on how to effectively explore and utilize Tor?
I dont want to downgrade but i keep getting errors for mac and it keeps disconnecting me whenever i try to go on any site. Its annoying.
Anyone else having issues with Tor while having a MacBook? Eveything was working fine until last night, and now I can only see the Home Screen but if I decided to search will tell me to restart browser and I have multiple times, I’m stuck ://
I'm still new to Tor. I'd love any advice. Currently using it on my phone. I'm trying to get to the dark web. I'm looking for a few specific things
I'm lost
it is not at:
TorBrowser/Data/Browser/profile
I am interested in running a tor client with a maximally-locked-down firewall configuration to reduce the risk of compromise. My thought was to pick ten relays and allow the client to connect to those servers on the port they serve, and nothing else.
As a new user, I'm unsure how well this will work. Do the available relays rotate very often? Is 10 enough? Would 1 suffice? Thank you for any comment.
So first just go here and read this thread, make sure you read the comments https://www.reddit.com/r/TOR/comments/1gdcotg/i_just_installed_tor_browser_on_ubuntu_2404_and/?utm_source=share&utm_medium=web3x&utm_name=web3xcss&utm_term=1&utm_content=share_button
So yeah what's going on, can I safely ignore that message? Did you read the comments? One person told me that if you install Tor using one of the package managers then you'll be fine, that I'm getting this message because I installed Tor directly from the Tor website.
Ok so I do remember installing Tor using flatpak about a year and a half ago I'd say, or maybe even 2 years ago now, and what flatpak will do is it will install the Tor Browser launcher on your computer and then from there you can launch Tor and install it. Thing is the Tor Browser launcher was broken, it was broken for at least over a year.
Yeah the Tor Browser launcher was broken for a long time so I just gave up on it. Does it work now? Does it work on Ubuntu 24.04 LTS?
So yeah I gave up on the tor browser launcher and just started downloading Tor from the Tor website and installed it this way. In fact, many tutorials will tell you to download Tor from the Tor website and install it this way.
So yeah can I get some second opinions here? So apparently installing Tor from the package manager will fix this? Keep in mind any package manager is going to install the Tor Browser launcher though, and the Tor Browser Launcher was broken the last time I used it, did they finally fix it?
Just an FYI I'm on Ubuntu 24.04 LTS.