Silk Road forums

Discussion => Security => Topic started by: londonpride2 on May 09, 2013, 11:17 am

Title: TOR Security Question
Post by: londonpride2 on May 09, 2013, 11:17 am
It is fine to run SR over TOR in one browser whilst using another browser to access clear-net sites as per normal web browsing (at the same time).

Or am I mistaken?
Title: Re: TOR Security Question
Post by: londonpride2 on May 09, 2013, 01:08 pm
I am assuming its fine but wanted to double check. I know its a rather dumb question.
Title: Re: TOR Security Question
Post by: F250PSD on May 09, 2013, 02:12 pm
I am assuming its fine but wanted to double check. I know its a rather dumb question.

I had wondered that too. I think I know the answer but wouldn't bet money on it.
Title: Re: TOR Security Question
Post by: astor on May 09, 2013, 02:38 pm
It's technologically safe, ie TorBrowser isn't going to leak info to a clearnet browser on its own. However, the potential for human error increases. If you're accessing Google over Tor and type a search in but accidentally type it into the clearnet browser, you have leaked info. It could potentially deanonymize you.

As always, your behavior is half of your protection, and there's nothing TorBrowser can do for you if you behave in unsafe ways.
Title: Re: TOR Security Question
Post by: Holl3r on May 09, 2013, 04:16 pm
Thanks for the question, londonpride2. Definitely not a dumb question! I'm a "technical" guy and I'm still trying to wrap my head around the whole TOR network.

Another question along those lines ... how does this traffic look internally? I.E. on an internal firewall before it gets out in the wild ... from the PC running the TOR browser to the router.
Title: Re: TOR Security Question
Post by: Rastaman Vibration on May 09, 2013, 04:54 pm
It is safe to run Tor browser and a clearnet browser at the same time. Just don't access the same page at the same time from the same computer. And don't do anything silly, like login to your Facebook page or your Gmail from Tor.
Title: Re: TOR Security Question
Post by: dead salmon on May 09, 2013, 09:00 pm
I'm told its technically safe as long as you don't do anything stupid.  Just to be safe & protect against my own possibly stupidities I never run both at once.
Title: Re: TOR Security Question
Post by: throwAway5497 on May 10, 2013, 01:06 am
And don't do anything silly, like login to your Facebook page or your Gmail from Tor.

Any reason that this is silly? Or is it just silly to be using the same tor identity for SR and FB?
Title: Re: TOR Security Question
Post by: Crazy Eights on May 10, 2013, 01:48 am
I'm not a fullon tech/spec person BUT to give you the "tech talk" functionality

BUT - Why can't you wait to hear about your social network? offline in Tor

Best practice in LOG OFF - Tor

fwiw

ce
Title: Re: TOR Security Question
Post by: throwAway5497 on May 10, 2013, 02:15 am
There's no reason not to get off of Tor to check FB but from a technical standpoint I can't see much of a reason that doing this would give much away about your identity. The exit node to whatever server you're communicating with (FB) is the only place where traffic can be intercepted. So someone knows that I connected to FB using Tor, but that's about it.
Title: Re: TOR Security Question
Post by: Rastaman Vibration on May 10, 2013, 03:03 am
And don't do anything silly, like login to your Facebook page or your Gmail from Tor.

Any reason that this is silly? Or is it just silly to be using the same tor identity for SR and FB?

You should NEVER use the same identity for SR and anything clearnet.

Facebook stores all kinds of detailed information about you. If you are using Tor to log in to your Facebook account, you are not anonymous anymore. Facebook knows who you are, even though your location/IP is unknown with a Tor connection.  They also store information about your session (from when you log in till when you log out). Your ISP also stores detailed information about what you do online. Theoretically, this information could be correlated, and you could be unmasked.
Title: Re: TOR Security Question
Post by: throwAway5497 on May 10, 2013, 03:11 am
And don't do anything silly, like login to your Facebook page or your Gmail from Tor.

Any reason that this is silly? Or is it just silly to be using the same tor identity for SR and FB?

You should NEVER use the same identity for SR and anything clearnet.

Facebook stores all kinds of detailed information about you. If you are using Tor to log in to your Facebook account, you are not anonymous anymore. Facebook knows who you are, even though your location/IP is unknown with a Tor connection.  They also store information about your session (from when you log in till when you log out). Your ISP also stores detailed information about what you do online. Theoretically, this information could be correlated, and you could be unmasked.

True enough. I guess I was looking for a more detailed explanation of what kind of information I would be leaking to FB while on Tor. But, curiosity also killed the cat, maybe I should just play it safe and enjoy my comfy mask 8-)