This is a response to: https://hackforums.net/showthread.php?tid=4377737
While everything in that thread is true, that thread doesn't tell you everything.
First of all, that thread is only about SOCKS5 use of Tor. Hidden services are safe. However, javascript based attacks are completely different and you can secure yourself from those by using "NoScript" browser addon.
Now, I will tell you how to use Tor securely even with SOCKS5 while browsing Clearnet. This is not free, the guide is but you need a VPS or Dedicated where you can host a Exit relay. Now when you have setup a exit relay, you look at vidalia logs. You will see something like:
Copy that Fingerprint and open up your torrc file. Now add these lines:
If possible, host and use more than one exit node but one is enough. Remember, it will take a couple hours before you are able to explicitly use your exit node because it wont be registered on the Relay list.
Now, why this works? This works, because the only way to deanonymize you is timing based attacks which are possible only when both Entry and Exit relay are controlled. Now you are using a 100% trusted exit relay(your own) and timing based attacks are now completely impossible and your anonymous once again.
Note:
Before anyone asks, this is not the same as using your VPS as SSH proxy. This is better. When using your VPS as a plain SSH proxy you are exposing your IP Address to your VPS, but this way you are not.
This is a must do for every Tor user.
While everything in that thread is true, that thread doesn't tell you everything.
First of all, that thread is only about SOCKS5 use of Tor. Hidden services are safe. However, javascript based attacks are completely different and you can secure yourself from those by using "NoScript" browser addon.
Now, I will tell you how to use Tor securely even with SOCKS5 while browsing Clearnet. This is not free, the guide is but you need a VPS or Dedicated where you can host a Exit relay. Now when you have setup a exit relay, you look at vidalia logs. You will see something like:
Code
Your Tor server's identity key fingerprint is 'Name Fingerprint'Copy that Fingerprint and open up your torrc file. Now add these lines:
Code
ExitNodes Fingerprint
StrictExitNodes 1If possible, host and use more than one exit node but one is enough. Remember, it will take a couple hours before you are able to explicitly use your exit node because it wont be registered on the Relay list.
Now, why this works? This works, because the only way to deanonymize you is timing based attacks which are possible only when both Entry and Exit relay are controlled. Now you are using a 100% trusted exit relay(your own) and timing based attacks are now completely impossible and your anonymous once again.
Note:
Before anyone asks, this is not the same as using your VPS as SSH proxy. This is better. When using your VPS as a plain SSH proxy you are exposing your IP Address to your VPS, but this way you are not.
This is a must do for every Tor user.
