6 ms·

I know this is a little off topic but what in general are the risks of going onto the Tor network? Like I say, I know it is off topic but I can't find anything

• sgift 14y ago
  From my own tests with TOR: The hidden services architecture of TOR (i.e. services which only exist within TOR) works more or less like the Internet, so to get to an onion page you have two options: - You use the onion url of a page: You will probably not encounter anything you do not want to see (depending on the source of the link). - You use one of the hidden service search engines. These are NOT provided by TOR but by TOR users, i.e. they are TORs Google/Yahoo (especially old time yahoo with long lists of pages instead of a search). Here the risk is significantly higher: Most of these link lists/search engines have a strict "no censoring" policy, so you will at least risk to get links to such things. I've never had this problem (and I am grateful for that) but the risk exists.
• belorn 14y ago
  I am going to assume that we are talking about the tor hidden network. Normal tor usage is relative safe, through https is a major safety net. Risk and safety is hard to talk about, mostly because its hard to quantify it. I could say that the hacker risk is as risky as visiting a private hosted word press blog, through I suspect more blogs has viruses on them that tor pages has. As for seeing child porn, so long you don't go looking for it, I suspect the risk is low. Any site that allows users to upload images (like forums) or video without pre-reviewing it could have such images. To be sure, turn of images in your browser when visiting such sites.
  • chrislomax 14y ago
    I appreciate yours and sgift's response. I will probably keep away to be honest. I always see stories where we only see 5% of the internet on the surface and I wondered what the other 95% could be. I don't think I want to know to be honest, there's enough crap after page 2 on Google as it is
    • krenoten 14y ago
      I don't mean to be rude, but that mindset confines you to local optima. Life is not pain free - and we are all better for it. With no contrast, life is meaningless. Explore a little! Check out page 3 :)
    • haakon 14y ago
      Anyone who tells you that 95% of internet content is confined to Tor hidden services is either hilariously mistaken or lying.
      • chrislomax 14y ago
        I don't think it is hidden but not indexed by common methods. ie navigation is mostly POST based or JS based to avoid indexing.
        • Evbn 14y ago
          Or just password protected.
• krenoten 14y ago
  As is the case with every other part of the internet - you should probably use noscript if you are concerned about being attacked. You will never be completely safe from exploits - you need to get comfortable with that. To your browser, it's exactly the same as the rest of the WWW. Due to the bandwidth issues, most sites are not going to serve images unless they are a media site of some sort. If you don't want to see animal porn on the WWW, how on earth do you keep your virgin eyes safe? You don't seek it out.
  • TazeTSchnitzel 14y ago
    > To your browser, it's exactly the same as the rest of the WWW. You don't use your own browser for Tor, you use the Tor Browser, unless you're trying not to protect yourself.
    • dmix 14y ago
      And TorBrowser has noscript installed by default.
      • TazeTSchnitzel 14y ago
        Among other security and privacy protections.
• rst 14y ago
  In addition to what other have already noted, one other thing to keep in mind: The Tor exit node that happens to handle any particular request gets to read the relevant traffic (since it is handling the request to the actual end server on your behalf). So, for instance, if you're logging into some bulletin board via unencrypted http, the Tor exit node handling the login request gets to see your username and password on that bulletin board in cleartext (as can all the other net infrastructure between that exit node and the bboard itself). In one sense, this doesn't change your risk profile; if you're logging in over unencrypted http directly, you're also at risk of sniffing. However, the risk may be enhanced with Tor; there are persistent rumors of law enforcement and intelligence agencies (and others with darker-colored hats) running exit nodes which deliberately sniff the traffic they're proxying to see if something interesting comes up. It also might be possible for such a hostile exit node to mess with the content of unencrypted traffic, though I've personally heard no rumors of that. Note that if you're using Tor to proxy encrypted traffic (https), the exit node sees only the encrypted data stream, which is as secure as the encryption you're using --- and the official Tor browser bundle includes the "HTTPS everywhere" Firefox plugin to try to get you to use HTTPS where available. Additionally, if you're using Tor, anyone monitoring the net segments between you and the entry nodes you hit may be able to tell that you're using it (though they won't be able to tell what you're using it for). If the local secret (or other) police frown on that sort of thing in principle, it could be trouble.
  • shubb 14y ago
    What worries me is that if you want to do government work (even quite innocuous stuff), your job depends on getting security clearance. Certainly in the UK, Europe general and probably in the US, your ISP retains a list of all the IP addresses you connect to, and they supply this to the government if they have national security grounds. At least in the UK, security clearance is grounds to pull your internet records, they say so on public government websites. I think that in future, if your household connects to known TOR bridge nodes, that might well impact if you can do government work, from IT at your local tax office to army work. Probably paranoia, but I'm staying away from TOR for this reason. Which is a shame because what some ad networks do is really, really creepy.
• downrightmike 14y ago
  Its pretty much you and the fbi who'll 'just be lookin around' read some news first