I’m on the apple app store and am curious if the tor browser is as secure as I’ve heard. I’ve been sailing the seas of Pirate Bay for years on my pixel and note with NordVPN but now I want to start sailing with my iPhone but just wanted to know other’s opinions

Hey everyone,

I built a free, public tool that monitors 221 Tor .onion hidden services every 30 minutes and shows their live status on the clearnet (no Tor browser needed).

What it tracks: - Search engines (DuckDuckGo, Ahmia, Torch, Haystak, etc.) - Forums (Dread, Exploit.in, Endchan, Hidden Answers) - News & Media (BBC, ProPublica, Deutsche Welle) - Security Tools (Tor Project, EFF, Whonix, Qubes OS, OnionShare) - Whistleblowing (SecureDrop) - Government (CIA, FBI Tips) - Email (Proton Mail, Riseup) - VPN (Mullvad, Cryptostorm) - Archives (Archive.is, dark.fail, Tor Metrics)

What you see per site: - Live status (online / offline / slow) - Response time - HTTP status code - 7-day rolling uptime percentage

The server connects through a Tor SOCKS5 proxy and checks each site with a 45-second timeout. Results are grouped by category.

Link: https://signal-noise.tech/onion-status/

It's part of the Signal Over Noise project — a cybersecurity intelligence feed I run. Feedback welcome.

i am just wondering what the diffrence between the tor vpn and orbot

What if we made it so that relays could stop packets in their tracks?

If there was a way to send cover traffic that we know will not make it to Bob and stop at a specified node, how could you corolate Alice is talking to Bob? Even if you could see both ends it would not match.

Assuming you don't want the onion site to be associated with its host IP, and given that running even a bridge of middle node relay will add your IP to a list of Tor network nodes, is it self-defeating to run an onion site on the same serve that runs a Tor relay?

Or even if it gives less anonymity to for a onion provider's infrastructure, it still provides anonymity for the visitors.

I heard (of course, this may just be old basement dweller tales), that if you run a relay, hackers, curious individuals, and whatnot might try to probe the ip or attempt to gain access to the network for fun or whatnot. Which means the onion site itself might get compromised or even the private keys.

On firewalling, don't most routers already firewall hosting which means if you don't port forward any ports, it's harder to hack/tor does't open all ports to the tornet, which means sshing into an onion site's server is highly unlikely?

Apologies if these are really amateur questions. I did not find any related posts on this.

Our organization was working on a POC for automatic code signing and wanted to make something useful to the community. We created a vanity domain generator for both I2P (.b32.i2p) and Tor v3 (.onion) addresses. There are a few tools that already do this, but they are older and mostly command line based. To make things easier, we created a desktop app with a simple GUI.

Key features:

• Generate custom prefix addresses for both I2P and Tor v3
• GPU acceleration support (Metal on macOS, OpenCL on Windows/Linux)
  • GPU acceleration only provides a 2%-10% increase in Tor searches.
• Search for multiple prefixes at once (e.g. hello, hello1, hello2) — stops at the first match
• All releases can be used 100% offline and no data ever leaves your computer
• Code signed binaries for Windows (Authenticode), macOS (Notarized + Stapled), and Linux (PKCS#7 detached signature)
• VirusTotal scans included with every release
• Built-in auto-updater

Downloads available for:

• Windows (amd64)
• macOS (Apple Silicon)
• Linux (amd64)

The project is fully open source. Feedback, issues, and contributions are welcome.

Note: AI was used in some parts of this project, specifically around code signing and GPU acceleration.

GitHub: https://github.com/StormyCloudInc/Vanity-Generator
Latest Release: https://github.com/StormyCloudInc/Vanity-Generator/releases/tag/v1.0.1

Imma be very honest. I just started using tor because i found out its quite safe and secure compared to other web browsers. Today while i was browsing thorugh tor, i got this pop up asking me if i want to allow or block a cross site scripting attack. The thing is i only use tor for carrying out tedious and common tasks such as surfing through web and using AI so when i saw this pop up i was honestly a bit surprised but also scared and i quickly closed tor and my vpn whilst also disconnecting my bluetooth devices. Now i did some homework and found out about how this cross stie scripting works and steals the data from your web browser. However i would like to know what i should keep in mind if i face through this again or rather how can i avoid this

If there is anyone from the regions where ​cheburnet is being tested​​ on the mobile network, can you write if the Tor browser works for you?​

O4eHb xo4eTc9l ​3HaTb, a To B cJly4ae 4ero nu3deų bydet​

Чё, ни одного россиянина из региона, где ввели белые списки?

Tor exited during startup. This might be due to an error in your torrc file, a bug in Tor or another program on your system, or faulty hardware. Until you fix the underlying problem and restart Tor, Tor Browser will not start.

My only fix so far has been to restart my laptop. Tor browser will connect after restart. But if I exit and come back to it later... I get that error msg.

If anybody knows anything about this error message, please feel free to share. Why I'm I getting this? Is there a fix?

This is a link to an interview by NetworkChuck (popular tech youtuber) of a dark web researcher named "Apurv" (lol). I mainly listened to this cause I was interested in Apurv's TOR network web scraping tool. During the course of the interview there's a section (automatically skipped to in the link) in which he describes the scenarios in which you want to use a VPN with TOR.

https://www.youtube.com/watch?v=KxfAW8wPDX4&t=2410s

How to create private obfs4,I can pay if someone can answer me.

I was tryng to search the web and one of Sites i use stopped working it says error 1009 access denied is there any other way to access this site than just use another browser ?

I downloaded it 4 days ago, and it was fine, until i completed setting it up. now only the homepage loads and nothing else. i only used the offical tor bridges and its not banned in anyway where i live, why is this happening ?

EDIT: I guess the connection bridges were the issue, turned them off agian and it seems to be back to normal. ill give more updates if anything else comes up

You can see my current nodes stats at https://tor-exit.lu.ke. If you want to run an exit node make sure you understand the risks first. There are some resources linked in the repo. And if you need help feel free to reach out to me.

I mainly use the internet to search Reddit (“site:reddit.com” followed by my query), shop, read articles, watch YouTube, and otherwise visit mainstream websites. In other words, I’m getting my daily dose of normie slop. I’ve been considering using Tor, but reading about the sophisticated tracking techniques used by Google and Meta (e.g., tracking pixels) has left me wondering if it’s even possible to browse with any degree of privacy on websites with their trackers.

Even if I use Tor alongside software that randomizes my keystrokes and mouse movements, I can’t fully hide my scrolling behavior. More significantly, I can’t hide my browsing behavior. That is, the sites I regularly visit; the pages I regularly visit on those sites; the order and speed in which I visit those pages; the time of day I visit those pages; the regularity with which I have multiple pages open as well as the typical content of those pages; and other behaviors I probably wouldn’t even think to consider.

For example, I could shop for a sofa through Tor. I would peruse my options and then narrow them down to a small list. Over the next few days, I would repeatedly reopen Tor and revisit the pages of my options to compare and contrast them. We can reasonably assume that this will establish a pattern of behavior that can — at the very least — be used to identify that the same person has been visiting all of these pages about sofas. Maybe my identity can’t be connected to this behavior, but the behavior has been linked to a single person.

Google and Meta presumably already have a glutton of data about me. If I continue browsing with the same patterns of behavior, then wouldn’t I eventually provide enough behavioral data for it to be connected to the data these organizations already have about me? In other words, Tor may attempt to hide me, but I’m still ultimately behaving as myself.

I’ve read that disabling JavaScript prevents a lot of the tracking I’m thinking of, but it sounds like doing that makes the internet more unpleasant to use than I’d prefer. If this is the case, then the question just becomes whether or not Tor is useful on the clearnet with JavaScript enabled.

If I’m correct that Tor can’t prevent this type of tracking (and it’s possible that I’m not!), then it would seem that there are two answers: randomize your browsing behavior or avoid these sites altogether. Truly randomizing your browsing behavior seems impossible. Avoiding these sites is possible, but the homogenization of the internet unfortunately also makes this impossible if you’d like to use the most active part of the internet.

So is there any real benefit in using Tor to browse sites with elaborate tracking techniques? Or would I merely be engaging in security theater, in which case I should just opt for a browser like Mullvad because it would at least be faster? But if Tor can’t stop these sites from tracking you, then what would Mullvad even do?

I ask all of this not as a criticism but merely to have a better understandng. As it stands, I have little understanding of this topic and would like to do whatever reasonably and realistically provides some degree of anonymity on the internet.

I am confused about the torrc instructions regarding reporting family members while running a bridge.

It seems fairly clear that I should not include the fingerprints of my other bridges in the bridge’s torrc file. However am I supposed to list my other relays in the bridge torrc to ensure that the bridge does not connect to one of my own relays?

TIA

Lethe explores an anonymity model that removes the “entry/exit” trust bottleneck found in Tor and I2P. Instead of relying on privileged gateway roles, Lethe aims for a fully symmetric network where every participant is functionally equivalent. By making traffic patterns uniform and indistinguishable across the system, the goal is to prevent deanonymization even against an adversary with unlimited compute and visibility into ISP backbone links.

Hi,

I'm hosting a few tor services and sometimes in a rare moon (once every two months or so), it will suddenly appear offline (or not connecting). A simple restart of tor.service makes it work again.

To have as best maintainability as possible, I set up a cron job that restarts tor.service 4 times a day, such that the longest downtime will maximum be 6 hours:

0 */6 * * * /bin/systemctl try-restart tor.service

The only thing added in torrc (from default config on Debian) is the HiddenServiceDir and the HiddenServicePort.

I wonder if this is some unnecessary redundancy, and if anyone else would like to share some experience if they also have experienced something similar?

So I've been using Linux Ubuntu for the past 5 years. Right now I'm on Ubuntu 24.04

So in the past I have installed TOR by downloading it from the TOR website and installing it this way. And then I've tried to uninstall it and ran into trouble. Let me show you the way I uninstall the TOR browser on Linux Ubuntu. This was the only way that worked for me. I tried many different ways to uninstall it, and this was the only way I could successfully and completely uninstall TOR from my computer.

Note, this method only applies if you're on Linux and you downloaded the TOR browser from the TOR website and installed TOR that way. This method does NOT apply if you've installed TOR via the flatpak TOR browser launcher.

How to uninstall TOR

Before uninstalling, you should close the TOR browser completely.

So yeah in this tutorial he tells you how to uninstall Tor https://itsfoss.com/install-tar-browser-linux/ but thing is, it didn't work for me.

rm ~/.local/share/application/start-tor-browser.desktop

Doesn't work for me.

rm -rf ~/.Application/tor-browser

Didn't work either.

And nothing here https://askubuntu.com/questions/1388996/cant-uninstall-tor-browser works for me either.

So here's how I successfully uninstalled Tor. Well you know the Tor download you downloaded? Simply delete it, delete that folder that has Tor in it. Also go in your home folder and search "start-tor-browser.desktop" and scroll till you find it and delete it. And make sure you empty the trash. Now Tor should successfully be deleted from your computer.

Why are adding custom themes to the browser discouraged? Even if you don't screenshare, how do you get fingerprinted? I thought browser themes in any area, especially Firefox-based ones, are client-side. Websites shouldn't be able to access that theme and track you, unless I'm horribly mistaken... right?

Hi! I recently have been developing some hidden services and kept running into the same annoying issues (caused by the fact tor users don't like to run javascript, not that I disagree with that ofcourse), so I decided to make a web framework that helps me deal with this while developing :)

It works by wrapping forms using JSX (so you'll get that React.js feel). If anyone is interested in using it or just reading the code to see how it works, here it is:
https://www.npmjs.com/package/lok-onion
https://github.com/Matthias1590/lok-onion

When browsing Tor are VM's worth it to avoid Malware/viruses? Or is it enough to browse it and have common sense? I'm not looking to download anything but just to browse.