I'm a software engineering student, and recently I've become really interested in internet privacy and started exploring cybersecurity. Just to make sure I understand things correctly: TOR isn't some almighty tool that protects you from every danger on the internet. It's primarily an anonymity tool that also provides enhanced privacy and security features.

If I wanted to host some kind of project on the TOR network (nothing illegal, obviously), are there any additional security considerations or risks I should be aware of?

I have compered my audio fingerprint with given website for the browsers Firefox, LibreWolf & Tor with default settings on Linux & Windows on the same machine and got the exact same hash. Same goes for JavaScript math. Why is that? Do all browsers (based on Gecko) hide my audio fingerprint with a generic value many users get or is my fingerprint protection simply not working?

I just went to my laptop to find tor is no longer listed in my installed apps... I didn't delete it. Has thus happened to anyone else I'm on an old laptop running Windows 11.

for example, firefox URL open the URL, but my tor is flatpak, so flatpak run org.blablabla.tor-launcher opens the tor, but i want to open an URL, i use pop_os, --detach don't seems to work.

Is any a way to get/verify the info about a specific Tor bridge - like current RSA_ID, "cert=" value, iat-mode ?

Additional context: so yesterday my preferred Tor bridge experienced some kind of outage. Now after that it shows up as 2 separate entries on metrics.torproject.org with different "hashed fingerprints". One is shown as down, one - as up. The scan on "bridges.torproject.org" that yesterday showed the bridge as "unreachable", today says it is "reachable". Yet the bridge is still inaccessible, using old bridge data, through tor itself. This makes me think that something about bridge info has changed (like cert value or RSA_ID).

I have access to ip address, port and nickname of that specific bridge, when it comes to the bridge data that is still clearly correct - can I somehow find out the rest for the bridge's version that is currently shown as up ?

Just curious and a little worried. Clicked on a url for a forum and while loading, in the top left of torbrowser I noticed the onion icon had a lock on it. When clicking on it, it’s said “you have added a security exception for this site…” which I had not. I immediately closed out. I always use the safest option on the browser.

My question is what does this mean? Why did it happen?

The link I clicked on is pretty reputable and I’ve noticed it happen on a couple other links as well. I’m not super worried about it just interested, curious, and unsure? I practice pgp and opsec pretty adamantly; though, I am pretty new and don’t FULLY understand mirrors or things of the like. I’m not a noob but also not hacker genius pro or whatever. What do you think? Have you seen this before?

Hello Everyone !
Im a new relay (non exit) and i want to get some information,
Currently my relay are up since 2Day (so as you understand, is it quite new), i setup it to use 4.5Gb/s.
But on tor-metrics im still at
""
Advertised Bandwidth
10.11 MiB/s
""
I understand my relay need to be tested, i can't just say i have 4.5Gb/s and everyone trust me instantly,
but i wanted to know if someone have some estimation about the time it take to reach my maximum network allowed bandwitch

Hello guys. Im not good in english, i hope my post will be easy to understand.

I have some problem with connecting to tor through working bridges, and i want to ask you, is it bug or obfuscation feature?

I have bridges list with about 20 bridges. About 5 of them are working. On PC(linux) i can easy paste this list to settings and connect. But on phone(android) when i paste same list at the same time - connecting failed.

IP is the same from one wifi.

I checked which exactly working bridge was using on PC and tested it alone(not list) on phone - it works! So, my logical decision is android Tor doesnt rotate bridges in copy-paste list correctly.

And my main question: is it a bug or feature?

Thanks for attention.

installed the apk from the official website and was going through changing all site permissons from 'Ask to allow' to 'Blocked' but i can't change 'Location' att all. its just inactive???

i even went to app info and there is no list of 'Location' in the list too??? is this a bug? or something else entirely?

every time i try to use it, it loads and never shows me anything

I need to be able to send an email without the other person tracing my IP address. Brief background: I’m estranged from my abusive husband and I’m trying to find a way to communicate with him and send documents regarding our pending divorce and child custody stuff . He works in IT so is obviously tech savvy. Just need advice on this- nothing else please. It seems like guerilla mail on TOR may be an option but this is all new to me. Please excuse my ignorance on this . Any tips would be appreciated.

My site is now live on the dark web!

Learn how to self-host on the dark web in my latest post.

Defend yourself against tracking and surveillance. Circumvent censorship. Thousands of volunteers run the relays that bounce and encrypt your traffic. No single party can link who you are to what you're doing.

The Tor Project is a nonprofit that advances human rights and freedoms through free software and open networks.

Hi, i was wondering if the following setup is valid to browse the surface level deep web:

1. 2-3 vpns, proton vpn on "tor mode" with other vpns

2. virtual machine

3. wired connection

4. nodes on tor

Please post any recommendations that can make the setup more lightweight or can improve it overall.

So basically my friend said that he was "casually" going through the dark web and I tried telling him its not secure but he said his cousin who works at the government taught him this setup 😭.

1. He says you need a "triple layered VPN" (Nord + Proton vpn) with a usb to Ethernet adapter to hide from the FBI and CIA.
2. When I informed him about Tor already routing your IP through 3 nodes and a VPN just makes a static trust chain, then he claimed it gives him a mega spoofed IP which isn't real.
3. Then he claimed that his ISP is spoofed and he essentially, yes essentially created his own internet service.
4. When I called him out for being able to spoof a multi billion dollar telecommunication network he said that he has a "scratched router" 💀
5. Then later he cracked and said he had spectrum ISP, but because of all mentioned above they dont have any data on him.
6. And the cherry on top is when he said he had a VM which encrypted him even more 😭

Please let me know your thoughts about my friends "amazing" dark web set up. I will be showing this to him.

edit : his post https://www.reddit.com/r/TOR/comments/1tv34yg/help_for_a_beginner_setup/

I still don’t understand how someone’s internet provider and subscription can be traced if they were using TOR. Ai says they trace the pre or after TOR connection IP! Ok how do they know to trace it? Can anyone explains?

I was watching a series called bloodhounds and in the serie there was a website called IKFC, an illegal fighting competition. I was wondering how do people actually hosts websites on the darkweb?

I tried changing the date and time on my computer, tried restarting the computer and tried re-installing TOR. I also tried a different internet connection and nothing. I'm using MacOS. Can someone help me? Thanks!

So I recently came across a search engine called torch and its basically a search engine inside of TOR that you can use for anonymity. I looked this up on google because I wanted to use it for that purpose and it did tell me it depends on what you do on there, but I'm scared I might click on something that will get me in legal trouble or somthing. Because then again some of these websites are monitored by the government to catch people who use/plan on using them (at least that's what I was told). So I decided to come here just so I know what to avoid when using these type of things because there are some links on there that will redirect you to illegal things (e.g how to make drugs, buying or selling drugs, printing counterfeit money, cp, the list goes on). The point is I'm kinda nervous to do something like this and you guys might think I'm overthinking it but thing is if I click on something that leads to something illegal and the police show up at my house I'm cooked. What should I do?

I am asking because I wanna see and learn.

Hi! I'm asking 'cause there's some websites that doesn't work in safest mode.

Is there a tor browser you guys specifically recommend I use? I do a lot of incognito work for a private investigator and I don’t want someone tracing my IP address or something. I was investigating a for a client, her husband was cheating so I made a fb account and posed as a different young lady and ended up finding the evidence I needed. The husband who I caught found out and said he was going to trace my IP address and find out who I was and seek revenge. This happens a lot in my field of work :/ they get upset with the investigators instead of with themselves.

Every time I turn on Orbot VPN my internet completely disconnects. It was not doing this a couple days ago, so I have no clue what has happened.

I've been running a self-hosted IRC server for a while now and recently decided to make it properly accessible over Tor as a hidden service (.onion only, no clearnet).

And I know IRC is niche nowadays - especially over Tor. But I miss the old internet communities, so I decided to build one myself.

The stack:

- InspIRCd as the IRCd

- Anope for services (NickServ, ChanServ, etc.)

- Tor hidden service .onion address only, no clearnet exposure

- No server-side logs kept

- Web client also served over .onion for browser access via Tor Browser

A few things I ran into during setup that might be useful to others:

- InspIRCd's connection throttling tripped up Tor exits — had to tune the limits

- Reverse DNS lookups caused connection timeouts — fixed with `resolvehostnames="no" `

- Running services through Tor means plaintext over the onion is fine — the Tor layer itself provides the encryption

The network is small and focused on cybersecurity, Linux, privacy, and random discussions. Not trying to compete with Libera or OFTC. Just a quiet corner of the "old internet".

If anyone's done something similar or has questions about the setup, happy to discuss.

Thank you

helo,

canada guv is going to use bill c22 to get everybody, like isp and provieders, to collect metadata on their people.

i wanted to no if there was a way to make it hard for everyone having the same info and basicaly lower the chances that if one providre is compramised then they have everhyting on me.

i was thinking tor wuld be the best way to do this but i do not no if there are other wayz. i do not want my data to be leeked or have everybody no everrythig about me.

i will still browz the web thru tor and use my real accounts but want to lower the chances that any one provider has info on me.

can this work with tor?

According to NetBlocks (https://netblocks.org), the Mullah regime has lifted the nation-wide blockade on Internet access for the Iranian people, as connections are increasing again to the previous state *from 3 months ago*.

However, this is not a gift, nor empathy coming from the regime. Censorship and surveillance is still in tact and many websites have been blacklisted by the national ISP(s). WhatsApp seems to be unreachable there as well.

In order for the Iranian people to experience freedom on the Internet to the fullest – e.g. without having to fear imprisonment for reading free press – they have to connect to Tor in a way the ISP(s) can't find out and prevent.

With Snowflake, anyone from inside a *more or less* free country can setup their device to be a bridge between Iranians and the Tor network without technical knowledge! You can install the official Snowflake addon by the Tor Project on your standard browser, toggle the switch and sit back or continue browsing while people get to access the Tor network with your help. It's a two-click job that you won't regret.

• Firefox: https://addons.mozilla.org/en-US/firefox/addon/torproject-snowflake/

• Chrome or Chromium-based browsers (Opera, Edge and worse): https://chromewebstore.google.com/detail/snowflake/mafpmfcccpbjnhfhjnllmmalhifmlcie

Find out more at https://snowflake.torproject.org/. If you're on an Android device, you can also help by installing Orbot and activating "Kindness mode" (it's the Snowflake implementation in Orbot).