Tor/en

Logo

Tor is software that uses Internet anonymization technology. Tor has a long history, with the first version released on December 20, 2002.

Overview

Anonymity of the originator is achieved by passing through multiple nodes for the connection from the client to the server. The content of the communication is encrypted, but not at the exit (end) node. Journalists, activists, whistleblowers, intelligence agencies, and bad potatoes around the world use it to escape government surveillance.

In Japan, it became famous after Katayama Yusuke used it in a PC remote control incident.

It is also sometimes referred to as onion (玉ねぎ, tamanegi) because of its logo.

Relation to the turmoil

It is widely used by Koushinists as a countermeasure against disclosure. It is treated as an indispensable tool when dealing with those, such as Tanaka Kazuya, who are at high risk of suing for even mere slander, or when working with karackings and the like, which are against the law. It was also used to upload photos to Karasawa_Takahiro_BBS in the incident of the disclosure of Takahiro Karasawa's respectful face.

Even for legitimate activities that would not be troubled by disclosure, there are those who use Tor out of a thoroughly anonymous ideology, hobby, or raw IP phobia.

Anti-Kousinists may also use it for KTBBS trolling, perhaps in preparation for a response to be disclosed by board admin.

Karasawa Takahiro, a well-known pakaben, stated that it is difficult to identify the posters who use Ｔor in "obstruction of business through the Internet". In the above symposium article, only the "T" was in double-byte characters (so "Ｔ"), and there seemed to be an unnatural space between the "T" and the "or", so it was often ridiculed as "T or (/ti ɔr/)" by the Koushinists.

Software

• Tor
• Tor Browser

It is an open source browser based on Firefox, developed by The Tor Project, which is also the developer of Tor, and is a powerful anonymization method because it is very easy to use, even for amateurs. Tor Browser used to be called Tor Browser Bundle (TBB). The Tor Browser is configured to prevent communication that bypasses the Tor network, to ensure that all users look the same, to automatically clear cookies, search history, and site data when the browser is closed, and to prevent tracking by third-party trackers and advertisements, among many other measures to increase anonymity. It is also Firefox-based, so extensions can be used, but adding add-ons is not recommended as it reduces anonymity. Note that even if you use the Tor Browser, communications made by other software are not anonymized. An application is also distributed for Android smartphones.

• Orbot

Android Apps. Almost all apps can communicate via Tor.

• Orfox

Tor Browser for Android; unlike Orbot, it functions as a Tor browser and does not have the ability to make other apps go through Tor.

• Onion Browser

Tor browser for iOS. Open source. Note that most of the others are faux-VPN scam apps.。

OS

• Tails

An OS that performs all communication via the Tor network. No data is left on the computer, including the disk cache, so no evidence is left behind.. It is a favorite of many bad potatoes because of its excellent concealment. The basic method is to install the OS on a USB or DVD, but it is also possible to run it in a virtual environment using VirtualBox, etc.。

• Whonix-Gateway

Install using virtualization software called Virtual Box. It functions as an internal network for the guest OS, allowing connections only through Tor, and has DNS leakage protection. Even if the guest OS is karacking and Root privileges are taken away, the actual raw IP cannot be revealed. VPN over Tor (PC→Tor→VPN→Server) is also possible by connecting to a VPN on the guest OS.

• Whonix-Workstation

WThe OS enclosed with Whonix-Gateway, an official Whonix recommended OS that specializes in security and combines various features such as time stamp attack countermeasures.

• Kicksecure (Official page)

A sibling of Whonix, this OS offers two ways to deploy it: running in Virtual Box or replacing debian with Kicksecure. In addition to its robustness against timestamp attacks and malicious updates, this OS has many advantages, such as the ability to install Whonix with a single command, and its Live mode, which is highly hidden and leaves no traces whatsoever.

• Qubes OS

The OS that even en:Edward Snowden uses. It features the ability to run applications in parallel on a virtual environment using a virtualization technology called Xen. By installing the above Whonix, you can communicate using Tor.

• Kali Linux

Penetration test, an operating system designed to test attacks on computer systems and equipped with various attack weapontools. This is also to be installed using VirtualBox. Naturally, it must not be diverted to attacks on sites operated by third parties.

• Parrot OS

Like Kali Linux, this OS is designed for penetration testing. Unlike Kali Linux, Tor is bundled. Although it is equipped with various weapon of attack tools, including a password karacking function, it is an OS intended only for checking the vulnerability of the site you operate, and must never be diverted to attacks on sites operated by third parties. It is out of the question to think that "cuz tor is enclosed it is best suited for attack".

• BlackArch

The same Arch Linux flavor for penetration testing is bundled with native Tor and Tor Browser. While Kali Linux and Parrot OS are based on Debian, this one uses Arch Linux. Therefore, it is not possible to run Anonsurf, but instead it is possible to run a script called tor-router to make all OS communications via Tor. The tor-router has been updated so that communication anonymising can be stopped without restarting (ab272cb). This commit is also reflected in the BlackArch repository, and tor-router is always available for installation with pacman, with full stopability in the algorithm. For more information on other secret tools, see here.

Software used in conjunction

Software that is often used in conjunction with Tor-based software for improved convenience and confidentiality. Note that some of these by themselves will not be anonymized by Tor.

• PHProxy

One of the so-called Webproxy. This alone is an extremely easy way to hide your raw IP from the site, but it also makes you less anonymous. If it is routed behind Tor, it is possible to access sites that deny the IP of the Tor exit node.

• Anonsurf

A script that makes all Linux communications via Tor/I2P on the OS itself, without passing through a virtual machine such as Whonix. Officially, Kali Linux is recommended, but it is not advisable to use it to attack others, saying i can attack via tor so there's no way ill be exposed.

• GNU MAC Changer

Software for Linux that disguises your mac address. Prevents identity theft when connecting to public wifi, etc. Tails is included by default and is not required.

• HiddenVM

A tool that can be installed in Tails to use Virtualbox without leaving any evidence. It is out of the question to install Kali Linux, etc. and think that "cracking can be done in an anon env where no evidence is left behind".

Uses of Tor

Tor is supposed to be used to protect free speech, and the bad people who commit criminal acts do not deserve to use Tor.

Therefore, just because anyone can easily use Tor Browser by simply downloading it from the official site does not mean that easy misuse is acceptable.

Even more so, install Tails to leave no criminal traces on your computer, install Whonix, where all OS-wide communication goes through Tor and no IP leakage occurs, use Kali Linux, set up a bridge node to hide the fact that you are using Tor from the provider, use a web proxy such as PHProxy to hide the fact that the site is accessed from Tor. Use a web proxy, wrap with tools such as Proxifier or Proxychains to pass through a proxy, or use a no-log VPN together, etc. should not happen.

It is obvious that the bad potato who intend to abuse the system should choose a server that supports UDP to self-disclose the IP address, and it is obvious that it is not allowed to introduce a virtual environment to further increase anonymity.

It is also out of the question to use Shindan-Kun to check if you have succeeded in creating an anonymous environment, or to edit torrc to select a server in a country that is less susceptible to investigation.

Notes

Tor itself anonymizes only the communication path, and it is possible to be traced by other means than IP addresses (e.g., talking about myself). Note that Tor currently anonymizes only communications over the TCP protocol; communications using other protocols, such as the UDP protocol, will remain as raw IP.

It is possible that traces of crimes committed using Tor will be found when crimes committed using raw IP are discovered and the PCs are seized by police. (Fukuyama Hiroki is a prime example). There are also vulnerabilities in Tor-based software, such as those mentioned above, that could break anonymity, it is also important to note that if used incorrectly, anonymity can be compromised.

The leakage of raw IP from the UDP protocol mentioned above can be prevented by restricting UDP protocol communication. We recommend that you refer to here for specific measures.

Thus, just using Tor carelessly may eventually lead to painful consequences (as mentioned above, Fukuyama became a martyr because of this), so before using Tor or any software that uses it, you should thoroughly understand the various risks by reading the respective official documents

torrc

member of Convention on Cybercrime

torrc is a file included in the Tor Browser that can be configured to specify nodes to be passed through. It is also possible to avoid disclosure risks and increase anonymity by avoiding bad nodes or setting nodes through countries with short log holding periods.

Tails: /etc/tor/torrc Whonix-Gateway: /usr/local/etc/torrc.d/50_user.conf Browser: tor-browser_ja-JP/Browser/TorBrowser/Data/Tor/torrc Edit the file above with a text editor, etc. to set up the file.

Below is an example description. For other options, see Tor project. Also, use country code. If you are describing a server with an unknown country code, use {??}.

NumEntryGuards 5 #If UseEntryGuards is set to 1, the number of candidate EntryNodes is set to 5. Changing the 5 part does not change the number of nodes to go through.
ExcludeNodes SlowServer,{jp},{gb},{us},{ca},{au},{nz},{de} #Do not go through the specified node.
ExcludeExitNodes {bg},{cz},{fi},{hu},{ie},{lv},{lt},{lu},{nl},{ro},{es},{se},{ch},{ru},{hk},{il} #Do not set the specified node as Exit node
StrictNodes 1 #Strictly set Exclude or not; setting it to 0 sometimes breaks the setting.

Note that setting too many ExcludeNodes will 'conversely limit the number of nodes to be passed through, which will reduce randomness and anonymity.

See also

• 0Chiaki
• VPN
• Dark web
• Onion channel
• rawIP
• Tails
• Bad potato

External links

• Official sites
• Tor（Wikipedia）
• Twitter:@torproject
• Sec4Orpheus - A website that summarizes privacy defense techniques
• ArchWiki
• Whonix Wiki

翻訳路線 Translation Line
日本語版

匿名化技術
ツール	AnonFiles - Session - Tor - VPN
OS	GrapheneOS - Kicksecure - Parrot OS - Tails
用語	IPアドレス - 開示 - 仮想通貨 - ダークウェブ - DMCA - 生IP - 悪芋
webサイト	炎上総合Wiki - Onionちゃんねる - Kind World - 唐澤貴洋掲示板 - 唐澤貴洋殺す掲示板 - 恒心教サイバー部 - 防弾ホスティング - ヤッバイおっぱい掲示板
攻撃手法･事件	engage路線 - 贈り物路線 - お問い合わせ路線 - 片平騒動 - カラッキング(アットキャドカラッキング事件 - 国立感染症研究所カラッキング事件 - GMOカラッキング事件 - TVerカラッキング事件 - 新潟県警カラッキング事件) - カランサムウェア - Kindle路線 - 同時爆破予告事件 - 2ちゃんねる個人情報流出事件 -犯行予告 - 爆破予告 - 兵庫県警ブラクラ摘発事件 - モンストまとめ殺害予告事件
関連人物	安藤良太 - 小津晶 - 面白い愛の戦士 - 片山祐輔 - 恒心教 広報省 - さっしーえっち - 杉浦隆幸 - 0Chiaki - ダブルぬるぽ - ドナルドⅡ世 - ねそにゃ - 福山紘基 - 三上洋
企業等	サイバー犯罪対策課 - スプラウト - Novogara - Privex - 八雲セキュリティコンサルティング株式会社

恒心教徒 全般 用語と文化 恒心教 - 恒心 - 恒心教の歴史 - カラケーの文化 - 路線 - 犯行予告 - 殉教 - 模範解答 - 謁見 - 脱恒 - 臭芋 - 悪芋 - 甘芋 - 新芋 - 正大師 - 師 - 包皮民 - 非ワ - 炎上依頼 - 閉鎖主義 - 開示 - けんま - 神聖六文字 - 尊師 - ポア - 智津る - ンバホ - ターン制 - 草 - ハセ学 - ラジコン - カラッキング - 心のチンフェ - 尊閉じ - 同一人物説 ネット関係 なんJ - niconico - 例のアレ - Twitter - Tor - VPN - 仮想通貨 - DMCA 教徒一覧 事実追求 朝倉恭介 - 我狭 - 動画ニキ - 謁見ニキ - 英語に強い弁護士 - オメ学者（ドットウンフェ - おつち - ターンA - 小関歪哉 - NeqZ8y5） - へき学者（パナゴリ - 渡会淵治） けんま 厚史/赤松ニキ - マツドマッドマットマン - 陸自ニキ - 訳あり商品 - バイクに強い弁護士 - paranoid - 少年探偵団（指短ニキ - SSニキ - ハナミズキ - 臭芋祐一 - 加藤力） - 4K - 井上碧士/べえたくん 芸術教徒 大犯罪者デグニキ - 風の民 - シュワッチ - 悪芋P - 六方悟 - ドドンガ・パッカー - Altail - おまんこが壊れるわ - ルナルナ - 恒心Z - まそ - 睡魔 - くど芋 - 芸術に強い弁護士 - ネス力フェ/チカラフェ - 黒蟻大使 - 神姫プロジェクト非公式サポーター - 名無し芋 - ドレミファ貴洋 - Der Professor 殺害予告 爆破予告 dion君 - 島根君 - 大分君 - 群馬君 - 仲間邦雄/沖縄君 - 片山祐輔 - 福嶋誠也 - 安藤良太/ださいたま - 黄 - 福山紘基 - 面白い愛の戦士 - 蓬田治都 - 大熊翔 - 佐藤直 - 橋口力寿 - 長内海斗 カラケー管理人 Wiki管理人 2代目 - 佐々木小魔神 - 要塞ニキ - サンラクシャカ - ダクト飯 - カリフ - Pacal2 - 早苗総書記 - 出龍★ - かにかに - こだっく。 - Ostrich その他 長谷川お兄さん - 谷川お兄さん - 0Chiaki - 高濱芳雄 - 名古屋教徒 - Pioneer - 爆弾三勇士 - 近距離に強い弁護士 - リプシッツ構造に強い弁護士 - ゆゆうた騒動関連教徒一覧 - 中華圏教徒 - お問合せフォームマン - 石崎敦子 臭芋 コミケ路線 事務所一派（藤原太一 - 一般人 - 美濃津典史/けんまP - 野菜に強い弁護士 - 石川陸/虐殺初心 - 園田ダイキ/恒心教 広報省 - 月永皓瑛 - 郷いちい/KARACORO） - 恒神けんま（小林和奏/ガバ隊長 - チノフェ）- 恒心綜合研究所 ゆゆうた関係 鈴木悠太/ゆゆうた - 青木正/ZEUS - 山田一樹/山ちゃん - 遠坂達士 - 志和屋祐介 学術路線 しば塾 - 島田「にかい」 - 虚無呼弖 - ノヒケー管理人 - イヒケー管理人/Kind World管理人/PYU - ｶﾞｲｼﾞ滝口の武士 - 化学に強い弁護士 その他 松田正則 - 大江悠太 - 福井舜也 - 佐々木颯太朗/かぁ坊 - 坂野蒼一朗/釣る野草 - 300万 - 茂み - レい - 金打寛輝 - 宮川拓 - テランド - 伊藤隆星/ドナルドII世 - ハセカリアン - 的場洋行 - 暗黒に強い弁護士 - 珍矛 - 加藤龍河/ウミウシ - 恒心教戦略ミサイル部 - ゴールデンブラキ弁護士 - 相馬亘 - ソフバンガイジ - ねそにゃ - 小津ガイジ - 國松優樹/計弁 - 時政絢士/codex340 他 外野 JEX - ぴんくきらぶるー - revニキ - Code Monkey - ダブルぬるぽ - 安達真/shin - 三上洋 -たっくー - 結まきな - まつたけ寒天固め 斜体は評価が割れやすいことを示す。