Silk Road forums

Discussion => Security => Topic started by: Smoked on April 13, 2013, 08:08 pm

Title: Is visiting onion sites anonymous?
Post by: Smoked on April 13, 2013, 08:08 pm

I get using tor to visit your personal Facebook page or logging into your bank account is really dumb, especially because of MITM attacks. I also get that once the information leaves the last tor node that whatever your sending is in the clear as it reaches your destination clearnet server, unless SSL but still useless because of MITM....


But what about a hidden services sites like Silk Road or Tormail? Does my ISP or LEO know what hidden service website I'm visiting? What are the potential anonymity pitfalls in visiting onion sites. (assuming of course you don't divulge personal information).

Title: Re: Is visiting onion sites anonymous?
Post by: astor on April 13, 2013, 09:21 pm

Quote from: Smoked on April 13, 2013, 08:08 pm

But what about a hidden services sites like Silk Road or Tormail? Does my ISP or LEO know what hidden service website I'm visiting? What are the potential anonymity pitfalls in visiting onion sites. (assuming of course you don't divulge personal information).

No. The connection is encrypted and bounces around 7 relays before it gets to the hidden service. Nobody knows what site you are visiting.

There are potential timing and fingerprinting attacks that could allow someone to determine you are visiting a particular hidden service (with some level of confidence), but none of these attacks have been seen in the wild.