How to use tor securely, a response to: "NSA wants you to use Tor!"

How to use tor securely, a response to: "NSA wants you to use Tor!" - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: OpSec and OSINT (https://hackforums.net/forumdisplay.php?fid=322)
+---- Thread: How to use tor securely, a response to: "NSA wants you to use Tor!" (/showthread.php?tid=4382433)

How to use tor securely, a response to: "NSA wants you to use Tor!" - Coiner - Aug 7, 2014

This is a response to: https://hackforums.net/showthread.php?tid=4377737

While everything in that thread is true, that thread doesn't tell you everything.

First of all, that thread is only about SOCKS5 use of Tor. Hidden services are safe. However, javascript based attacks are completely different and you can secure yourself from those by using "NoScript" browser addon.

Now, I will tell you how to use Tor securely even with SOCKS5 while browsing Clearnet. This is not free, the guide is but you need a VPS or Dedicated where you can host a Exit relay. Now when you have setup a exit relay, you look at vidalia logs. You will see something like:

Code 
Your Tor server's identity key fingerprint is 'Name Fingerprint'

Copy that Fingerprint and open up your torrc file. Now add these lines:

Code 
ExitNodes Fingerprint

StrictExitNodes 1

If possible, host and use more than one exit node but one is enough. Remember, it will take a couple hours before you are able to explicitly use your exit node because it wont be registered on the Relay list.

Now, why this works? This works, because the only way to deanonymize you is timing based attacks which are possible only when both Entry and Exit relay are controlled. Now you are using a 100% trusted exit relay(your own) and timing based attacks are now completely impossible and your anonymous once again.

Note:
Before anyone asks, this is not the same as using your VPS as SSH proxy. This is better. When using your VPS as a plain SSH proxy you are exposing your IP Address to your VPS, but this way you are not.

This is a must do for every Tor user.

* - jackharper - Nov 26, 2015

Seems wortha try. but makes me think why hasn't anyone commented on this thread

* - SIM-1073426 - Nov 26, 2015

What if someone gets control of your now 1 exit node?

* - __JoeL - Dec 11, 2015

Interesting share, thanks for posting this.