[hack3rcon]

Hello.
In some websites you can chat with support. In the chat window, they show your IP address, if use Tor to chat with them then can they find my real IP address? If I use VPN then launch Tor?

Thank you.

[Asdethprime]

Rather than asking why not try. It won’t be able to tell your real IP address when u use tor.

For an easy test try it out. Open a normal web browser. Go to google and search what is my IP address. Save that. Then open a tor browser ; do exactly that and see how different your IP looks.

[hack3rcon]

Rather than asking why not try. It won’t be able to tell your real IP address when u use tor.

For an easy test try it out. Open a normal web browser. Go to google and search what is my IP address. Save that. Then open a tor browser ; do exactly that and see how different your IP looks.

But I guess governments can bypass Tor!!!

[Asdethprime]

But I guess governments can bypass Tor!!!

Sorry, what do you mean by "bypass" ?? Unsure what you are trying to say, would you mind elaborating?

[Mikutype]

Get into tor browser and done. This is a basic question.
Download Tor Browser. Go to website. Done. They won´t find your ip.

First vpn then tor it is a better formula though, but you do not need to be that paranoid.

Gov could potentially use deep packet inspection to find your browsing habits even behing vpn + tor or tor alone, yes.

[hack3rcon]

Sorry, what do you mean by "bypass" ?? Unsure what you are trying to say, would you mind elaborating?

I mean is "broke" Tor.

---

Get into tor browser and done. This is a basic question.
Download Tor Browser. Go to website. Done.  They won´t find your ip.

First vpn then tor it is a better formula though, but you do not need to be that paranoid.

Gov could potentially use deep packet inspection to find your browsing habits even behing vpn  + tor or tor alone, yes.

No way to protect?

[Asdethprime]

I mean is "broke" Tor.

---

No way to protect?

There is no way to get your real IP when u are using Tor.

But what they can do though is block all connection from Tor.

And unless u give out your own details even government can’t track it. Even NSA ( USA ) and GCHQ ( Uk government ) have been having trouble with Tor.

If used properly that is :)

[GutsBS]

Hello.
In some websites you can chat with support. In the chat window, they show your IP address, if use Tor to chat with them then can they find my real IP address? If I use VPN then launch Tor?

Thank you.

The fact you are using Tor is the only thing visible which you can hide with a bridge or VPN. If everything is configured correctly and you don’t land on a malicious exit node, no one can see what you’re doing. Including governments.

[hack3rcon]

The fact you are using Tor is the only thing visible which you can hide with a bridge or VPN.  If everything is configured correctly and you don’t land on a malicious exit node, no one can see what you’re doing. Including governments.

How can I sure my exit node is not malicious?

[SIM-4065785]

Tor is used a lot by hackers. The only thing to care is flash objects, your browsers special footprints

[Asdethprime]

Contrary to what people repeat here over and over again, VPN is NOT RECOMMENDED with TOR. Just don't you are not getting extra security you are risking your privacy because now there are 2 ways to track who you are from 1) break Tor or 2) break into VPN's log.

I know this sounds counterproductive, you have seen so many website, so many articles ; but the truth remains. The only viable way to knowing who you are behind tor ( provided you are using it properly) is a correlation attack; and that's checked based on VPN.

Also a malicious exit node CAN ONLY SEE what website you are visiting. In this case, a malicious exit node will be able to see someone, using Tor is visiting the government website. It won't be able to trace it back to you.

A malicious entry node would have the opposite effect, if will be able to find who you are but not find out what you are seeing.

[Scaletta]

Contrary to what people repeat here over and over again, VPN is NOT RECOMMENDED with TOR. Just don't you are not getting extra security you are risking your privacy because now there are 2 ways to track who you are from 1) break Tor or 2) break into VPN's log.

I know this sounds counterproductive, you have seen so many website, so many articles ; but the truth remains. The only viable way to knowing who you are behind tor ( provided you are using it properly) is a correlation attack; and that's checked based on VPN.  

Also a malicious exit node CAN ONLY SEE what website you are visiting. In this case, a malicious exit node will be able to see someone, using Tor is visiting the government website. It won't be able to trace it back to you.

A malicious entry node would have the opposite effect, if will be able to find who you are but not find out what you are seeing.

I vouch for what he just said. Its better to trust tor alone than a vpn over tor. Chances are higher in theory that a vpn keeps logs and co-operates with cops than a tor node.

Though i will addon 1 way to find out real ip would be through javascript or downloading files to computer if the computer is using simply tor browser and not tails. Tor browser would only protect the browsing on tor not anything else on the computer

[Asdethprime]

I vouch for what he just said. Its better to trust tor alone than a vpn over tor. Chances are higher in theory that a vpn keeps logs and co-operates with cops than a tor node.

Though i will addon 1 way to find out real ip would be through javascript or downloading files to computer if the computer is using simply tor browser and not tails. Tor browser would only protect the browsing on tor not anything else on the computer

Glad there are people who are happy to actually analyze this. Cheers man!

Though unlike normal browsers Tor does not have WebRTC so you can't normally pull the real IP behind TOR through JavaScript unlike most browser. But, yeah if someone is dumb enough to actually download javascript code and execute it than you are a sitting duck.

That being said, that's just not using Tor properly. Same with say DNS leaks, or people trying to log into website with Tor. That just gives out the address.

Tails though would be awesome, but frankly, given people I normally meet her I highly doubt if any more than 1% of people use Tails here; but they seem happy to pay VPN providers money; despite you know Tails is free and so much better than any VPN out there ( and if anyone is even questioning this, you really don't understand Tails).

[Cytax]

I vouch for what he just said. Its better to trust tor alone than a vpn over tor. Chances are higher in theory that a vpn keeps logs and co-operates with cops than a tor node.

Though i will addon 1 way to find out real ip would be through javascript or downloading files to computer if the computer is using simply tor browser and not tails. Tor browser would only protect the browsing on tor not anything else on the computer

I would like to add that you can and should disable JS from the Tor browser. Just a heads up for OP and anyone else who didn't know you could do that.

[Scaletta]

Glad there are people who are happy to actually analyze this. Cheers man!

Though unlike normal browsers Tor does not have WebRTC so you can't normally pull the real IP behind TOR through JavaScript unlike most browser. But, yeah if someone is dumb enough to actually download javascript code and execute it than you are a sitting duck.

That being said, that's just not using Tor properly. Same with say DNS leaks, or people trying to log into website with Tor. That just gives out the address.

Tails though would be awesome, but frankly, given people I normally meet her I highly doubt if any more than 1% of people use Tails here; but they seem happy to pay VPN providers money; despite you know Tails is free and so much better than any VPN out there ( and if anyone is even questioning this, you really don't understand Tails).

Tails is good but not practical for day to day stuff. If you want to search for a restaurant in your area, your exit note would pretty much be a country 10,000 miles away which means refining your search even more or dealing with exit node bans.