TOR and Exit Nodes

Wired and wireless telecommunications networks and devices

TOR and Exit Nodes

Post by JTX on Tue Jan 13, 2009 5:25 am
([msg=16096]see TOR and Exit Nodes[/msg])

Just opened this new topic to hear your opinion about ANONYMIZER solutions such us TOR and others regarding security risks. Many times TOR useres were compromised because of the problem regarding the exit nodes.

I think it is not unrealistic to assume some goverments, secret police, intelligence services or military intelligence services have interest to intecept such traffic through the exit nodes. As it is simple to set up an exit node in the TOR Network this makes things very easy.

How do you estimate such risks? Do you prefer other services or technologies to anonymize your traces while walking through the net?
User avatar
JTX
New User
New User
 
Posts: 10
Joined: Wed Jan 07, 2009 3:29 pm
Blog: View Blog (0)


Re: TOR and Exit Nodes

Post by ArgentPyro on Mon Feb 16, 2009 5:28 pm
([msg=18039]see Re: TOR and Exit Nodes[/msg])

For awhile, there was a site(http://www.derangedsecurity.com/), that set up 3 different computers to act as exit nodes on the TOR network. Then, they collected all packets that passed through these computers and used mail protocols, IMAP, POP3, etc. They looked for keywords such as 'military', 'government', 'legal', etc. All information that passes through TOR is encrypted for the first 2 or 3 proxies it passes through, but the exit nodes aren't. Through this method, they collected government passwords and usernames for a variety of countries, then shared them on their site. They've been shut down now of course. To come back to the point of whether or not using TOR is a risk, I'd say it varies. Things that would normally be encrypted(SSH, TLS) wouldn't be a problem, and if you're afraid that you might be caught using BitTorrent, or another P2P service, don't be. If you're planning on sending the time and date that you're going to set off a bomb to you're fellow conspirators, that is something else. Personally, I think that TOR is a pretty useful thing to use, but don't think of it as anything other than a proxy though(some of which are actually run by the government).
Image
ArgentPyro
New User
New User
 
Posts: 10
Joined: Mon Feb 09, 2009 5:28 pm
Blog: View Blog (0)


Re: TOR and Exit Nodes

Post by BuTTHeaD on Sat Feb 28, 2009 1:01 am
([msg=18851]see Re: TOR and Exit Nodes[/msg])

Tor makes everything very slooooooooooooow.
BuTTHeaD
Experienced User
Experienced User
 
Posts: 52
Joined: Tue Jul 15, 2008 4:45 pm
Blog: View Blog (0)


Re: TOR and Exit Nodes

Post by sidebottom on Sat Feb 28, 2009 2:22 am
([msg=18855]see Re: TOR and Exit Nodes[/msg])

ArgentPyro wrote:Through this method, they collected government passwords and usernames for a variety of countries, then shared them on their site.


Uh...doesn't providing identifying information such as user names when using TOR COMPLETELY defeat the purpose of TOR as an anonymizer?

It's just funny that people who have NO IDEA how something like that works use it improperly and feel safe with it.
sidebottom
Poster
Poster
 
Posts: 104
Joined: Fri Nov 21, 2008 12:09 am
Blog: View Blog (0)


Re: TOR and Exit Nodes

Post by ArgentPyro on Sat Mar 07, 2009 3:22 pm
([msg=19505]see Re: TOR and Exit Nodes[/msg])

sidebottom wrote:
Uh...doesn't providing identifying information such as user names when using TOR COMPLETELY defeat the purpose of TOR as an anonymizer?

It's just funny that people who have NO IDEA how something like that works use it improperly and feel safe with it.


Which is where the members of this site come in. 8-)
Image
ArgentPyro
New User
New User
 
Posts: 10
Joined: Mon Feb 09, 2009 5:28 pm
Blog: View Blog (0)


Re: TOR and Exit Nodes

Post by warnock on Wed Aug 25, 2010 5:25 pm
([msg=44321]see Re: TOR and Exit Nodes[/msg])

Since this is a TOR related topic, I've decided to simply ask here as opposed to starting a new post.

I was studying up on the website w3schools.com today, when something sort of caught my attention.

The 1st page of the TCP/IP tutorial ( http://w3schools.com/tcpip/default.asp) seems to display your current IP address. I was shocked to discover that it was MY regular IP.

I was using TOR at the time (yes, it was enabled), so I assumed I'd have a different IP address being displayed on the internet.

Without closing anything, I opened up a new tab, and went to "whatismyipaddress.com" to confirm that it was my IP. but that website showed my IP address as the one I got through TOR. Some IP address from the Netherlands.

Without closing or altering TOR or my network connection in any way, I went back to my original tab, opened to the 1st page of the TCP/IP tutorial, which still had my actual IP address on it, and refreshed the page.

After it refreshed, my actual IP address was gone. And the same one that was being displayed on "whatismyipaddress.com from the Netherlands was now showing.

Can someone knowledgeable about such things please tell me why MY IP address was being displayed despite the fact that I'm using TOR?
warnock
New User
New User
 
Posts: 19
Joined: Thu Jun 24, 2010 6:07 am
Blog: View Blog (0)


Re: TOR and Exit Nodes

Post by sanddbox on Wed Aug 25, 2010 5:49 pm
([msg=44322]see Re: TOR and Exit Nodes[/msg])

warnock wrote:Since this is a TOR related topic, I've decided to simply ask here as opposed to starting a new post.

I was studying up on the website w3schools.com today, when something sort of caught my attention.

The 1st page of the TCP/IP tutorial ( http://w3schools.com/tcpip/default.asp) seems to display your current IP address. I was shocked to discover that it was MY regular IP.

I was using TOR at the time (yes, it was enabled), so I assumed I'd have a different IP address being displayed on the internet.

Without closing anything, I opened up a new tab, and went to "whatismyipaddress.com" to confirm that it was my IP. but that website showed my IP address as the one I got through TOR. Some IP address from the Netherlands.

Without closing or altering TOR or my network connection in any way, I went back to my original tab, opened to the 1st page of the TCP/IP tutorial, which still had my actual IP address on it, and refreshed the page.

After it refreshed, my actual IP address was gone. And the same one that was being displayed on "whatismyipaddress.com from the Netherlands was now showing.

Can someone knowledgeable about such things please tell me why MY IP address was being displayed despite the fact that I'm using TOR?


That was a huge necro, but anyway, most likely you had already loaded the page before you connected to TOR.
Image

HTS User Composition:
95% Male
4.98% Female
.01% Monica
.01% Goat
User avatar
sanddbox
Expert
Expert
 
Posts: 2331
Joined: Sat Jul 04, 2009 5:20 pm
Blog: View Blog (0)


Re: TOR and Exit Nodes

Post by warnock on Wed Aug 25, 2010 6:35 pm
([msg=44324]see Re: TOR and Exit Nodes[/msg])

sanddbox wrote:That was a huge necro, but anyway, most likely you had already loaded the page before you connected to TOR.


I don't know all of the ins and outs of TOR, But I had it enabled since I began that internet session (which began an hour prior).

Are you saying that some pages load before TOR can accesses it?

or that I loaded the page, and afterwards, manually connected to TOR?

You should know that I didn't touch TOR in the time between getting the two IP addresses.


Wow, this was a necro bump.

In my defense, This post was still on the 1st page. 8-)
warnock
New User
New User
 
Posts: 19
Joined: Thu Jun 24, 2010 6:07 am
Blog: View Blog (0)



Return to Telecommunications

Who is online

Users browsing this forum: No registered users and 0 guests

cron