Is TOR Safe To Use?
- Thread starter pandarian
- Start date
internext2
Registered Member
- Aug 13, 2008
- 68
- 10
It is very easy to detect that you are coming from Tor. It's good for some things, you can use it to be anonymous in certain respects, and probably works for some black hat world stuff, but I think all smarter networks and players are going to be able to detect IPs from Tor and so they might ban you.
Another problem is that people using the tor network can potentially sniff exit nodes, and therefore if you are transmitting sensitive data they can potentially pick it up. I don't think that's a problem for any black hat people though, as your data is unlikely to be that sensitive.
Another problem is that people using the tor network can potentially sniff exit nodes, and therefore if you are transmitting sensitive data they can potentially pick it up. I don't think that's a problem for any black hat people though, as your data is unlikely to be that sensitive.
digitalcrew
Regular Member
- Jan 2, 2009
- 330
- 43
rcom
BANNED
- Dec 22, 2008
- 104
- 35
I have used TOR and it never harmed my pc. I still have it on there just never really use it anymore. I was NOT thrilled with having to wait over 10 seconds for pages to load though.
I just tested it for accessing ebay and adwords and it came up after 15 seconds (i counted). I have never tried it for fake adbrite clicks. Could be a win for that.
rcom
http://www.blackhatworld.com/blackhat-seo/proxies-sale/50203-exclusive-proxy-servers-exclusive-u-s-proxies.html#post483576.
I just tested it for accessing ebay and adwords and it came up after 15 seconds (i counted). I have never tried it for fake adbrite clicks. Could be a win for that.
rcom
http://www.blackhatworld.com/blackhat-seo/proxies-sale/50203-exclusive-proxy-servers-exclusive-u-s-proxies.html#post483576.
justone
BANNED
- Oct 12, 2008
- 1,520
- 1,054
This is bs root.
If you use a standard tor client it is very secure, far better than any public proxy can ever be and in general definitly more trustworthy than bulk private proxy sellers are. (not talking about any specific one, just a general note)
The Tor network is watched by the developers and its users, if any host is behaving bad or is suspicious he is flagged as evil and you will not use it anymore.
Also Tor bandwidth allocation works in a way that favors the faster servers, you will notice 80% of the time you have one of a few known IPs.
Those are large servers, often run by np-organisations dedicated to privacy and anonymity.
You think a dedicated server on a high profile datacenter is secure ? It will be sniffed by admins and sometimes even by other customers (have seen that more than once happening when switches go into hub mode or get arp-attacked)
Most honeypots sit on public proxies, Tor is too slow for most people and those using it are usually not of real interest for attackers but they are likely to be educated on proxy dangers.
As general rule: transmit your passwords using SSL instead of cleartext protocols. If you receive a certificate warning think about it instead of ignoring it.
If you use a standard tor client it is very secure, far better than any public proxy can ever be and in general definitly more trustworthy than bulk private proxy sellers are. (not talking about any specific one, just a general note)
The Tor network is watched by the developers and its users, if any host is behaving bad or is suspicious he is flagged as evil and you will not use it anymore.
Also Tor bandwidth allocation works in a way that favors the faster servers, you will notice 80% of the time you have one of a few known IPs.
Those are large servers, often run by np-organisations dedicated to privacy and anonymity.
You think a dedicated server on a high profile datacenter is secure ? It will be sniffed by admins and sometimes even by other customers (have seen that more than once happening when switches go into hub mode or get arp-attacked)
Most honeypots sit on public proxies, Tor is too slow for most people and those using it are usually not of real interest for attackers but they are likely to be educated on proxy dangers.
As general rule: transmit your passwords using SSL instead of cleartext protocols. If you receive a certificate warning think about it instead of ignoring it.
internext2
Registered Member
- Aug 13, 2008
- 68
- 10
Yes tor is more secure than other proxies. And the security is not an issue for black hatters anyway unless you are into some highly illegal stuff.
The main question for blackhatters is can it be identified as a proxy, and the answer is yes. But then almost any proxy can be identified. So the next question is if you can identify it then how easy is it to identify and I think it's reasonably easy right? You just compile a list of tor exit nodes?
The main question for blackhatters is can it be identified as a proxy, and the answer is yes. But then almost any proxy can be identified. So the next question is if you can identify it then how easy is it to identify and I think it's reasonably easy right? You just compile a list of tor exit nodes?
justone
BANNED
- Oct 12, 2008
- 1,520
- 1,054
internext2: it depends, I've a lot experience on working with exitnodes of Tor and if people use a normal tor client or public directory services they will never have an accurate list.
+ It means a company has to write a dedicated solution for one single proxy type, even most specialized proxy-detection companies do not detect Tor.
The anonymity of Tor is so far the strongest you can archive on the internet, the privacy of your data is ensured on your end. A sniffing exit is something that is a possibility for every imagineable proxy type, there is no way around it when you use a proxy.
+ It means a company has to write a dedicated solution for one single proxy type, even most specialized proxy-detection companies do not detect Tor.
The anonymity of Tor is so far the strongest you can archive on the internet, the privacy of your data is ensured on your end. A sniffing exit is something that is a possibility for every imagineable proxy type, there is no way around it when you use a proxy.
internext2
Registered Member
- Aug 13, 2008
- 68
- 10
Ok that's really interesting information. Yes the sniffing exit is no concern to me at all.
But networks being about to detect that I am using a TOR ip is a concern. Plus I want to know if someone is using TOR to access my sites. What you are saying is that it is possible to know some of the TOR exit nodes, but not to know every one. I actually have just set up a TOR detection script right now and maybe it's not really that accurate. Not sure, guess I need to use TOR and see if I'm detected
emusketeer
Registered Member
- Dec 4, 2008
- 54
- 547
Tor can now be easily detected by even whatismyipaddress.c0m(0=o) ..Its unsafe to use with companies that are well equipped with tools to detect proxies. And no, its an infamous software and its completely safe for your computer.
I encourage you not to do so ..its undoubtly risky.
cheers,
I encourage you not to do so ..its undoubtly risky.
cheers,
justone
BANNED
- Oct 12, 2008
- 1,520
- 1,054
I just tested 7 different tor nodes through cloakfish on the "advanced proxy test" of that website.
Not ONE was detected as tor node.
So where do you have your facts from to say that this site can easily detect tor nodes ?
emusketeer
Registered Member
- Dec 4, 2008
- 54
- 547
@ Justone
I used to use tor some 3-4 months back with firefox verson less than 3.0
At that time this website use to say that tor proxy is detected.
Apologize for making comments without the knowledge of updated facts.
Thanks for letting me and us know. Appreciate your effort and I take my words back/
I used to use tor some 3-4 months back with firefox verson less than 3.0
At that time this website use to say that tor proxy is detected.
Apologize for making comments without the knowledge of updated facts.
Thanks for letting me and us know. Appreciate your effort and I take my words back/
justone
BANNED
- Oct 12, 2008
- 1,520
- 1,054
I tried to explain: when you use tor it will give you one of a few ips, thousands of people share that usually.
So you can not say it detects tor in general, cloakfish as example digs out the rare used hosts, those are usually not detected at all.
So a standard tor client can usually be detected, it also changes your ip automated from time to time.
But tor in general is usually not detected, I know no website that does that.
(wikipedia is said to block tor, but I think they also use a normal blacklist with the same issues)
So you can not say it detects tor in general, cloakfish as example digs out the rare used hosts, those are usually not detected at all.
So a standard tor client can usually be detected, it also changes your ip automated from time to time.
But tor in general is usually not detected, I know no website that does that.
(wikipedia is said to block tor, but I think they also use a normal blacklist with the same issues)
justone
BANNED
- Oct 12, 2008
- 1,520
- 1,054
Depending on the country you are in you face criminal charges if they get you.
As example in most of EU you risk that (entering a non protected network without permission faces the same charges as breaking a protected network).
Wardriving is a very time consuming and more and more dangerous hobby.
+ The people get suspisious when you circle their homes slowly, it often happens that police is called.
Remembers me on those cases where kiddy-porn-addicts got caught by police using that method while wanking to some pictures or movies in their cars ^^
Depending on what you do they might catch you anyway, authorities will raid the home of the wlan user. Then they will ask people all around for people in cars with a notebook. They will analyze the ATM cams, bank cams, security cams and so on.
These days it is very hard to leave no traces once you leave your house.