Bitcoin Forum
December 14, 2024, 10:06:56 AM *
News: Latest Bitcoin Core release: 28.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Is Tor safe to use here?  (Read 415 times)
pereira4 (OP)
Legendary
*
Offline Offline

Activity: 1610
Merit: 1183


View Profile
October 10, 2017, 01:37:24 PM
 #1

I was just wondering if in this forum and in forums in general, it is safe to use Tor if your identity has value? for example a Legendary account has value here, because it takes years of being active and learning about BTC and people want to hack you constantly.

My worry was that since Tor uses a different IP every 10 minutes (I think), if you forget to close your session or for example your computer is rebooted due a crash and you don't log out, can someone else using Tor that's browsing bitcointalk.org stumble upon your logged in account due being assigned the same IP that you were using? Or this is impossible because he would need to have local cookies too? Im just not sure how this works exactly and I was wondering if some accounts got hacked this way since a lot of people use Tor to access this site.
Welsh
Staff
Legendary
*
Offline Offline

Activity: 3318
Merit: 4116


View Profile
October 10, 2017, 01:49:30 PM
 #2

In general, if the server which a website is hosted on doesn't offer SSL/TLS then the tor exit node will be able to see all your request data. For example; passwords.

Take a look at this link: https://www.torproject.org/download/download-easy.html.en#warning

That will provide you with the information of what not to do and what you can do. Basically, if you are worried about compromising any of your data on any website, make sure SSL/TLS is enabled. If it's not the exit node will be able to see sensitive data. Of course the likelyhood of someone seeing a bitcointalk forum account on a exit node and acting upon it might not be very likely. But, your in luck it's safe to use Tor on Bitcointalk  as https is enabled. 
pereira4 (OP)
Legendary
*
Offline Offline

Activity: 1610
Merit: 1183


View Profile
October 10, 2017, 03:30:50 PM
 #3

In general, if the server which a website is hosted on doesn't offer SSL/TLS then the tor exit node will be able to see all your request data. For example; passwords.

Take a look at this link: https://www.torproject.org/download/download-easy.html.en#warning

That will provide you with the information of what not to do and what you can do. Basically, if you are worried about compromising any of your data on any website, make sure SSL/TLS is enabled. If it's not the exit node will be able to see sensitive data. Of course the likelyhood of someone seeing a bitcointalk forum account on a exit node and acting upon it might not be very likely. But, your in luck it's safe to use Tor on Bitcointalk  as https is enabled. 

Right, so nobody could ever stumble upon your opened session in the forum because it's encrypted? because that is what I was referring too: not closing your account and someone getting the IP you were using on that session on this same website then seeing my account opened but I guess that can't happen.

I was also worried that for some reason when I log off I get this error: "Session verification failed. Please try logging out and back in again, and then try again. " It sounds like "your account is still opened, log in again and close it".
Foxpup
Legendary
*
Offline Offline

Activity: 4548
Merit: 3445


Vile Vixen and Miss Bitcointalk 2021-2023


View Profile
October 11, 2017, 02:30:41 AM
 #4

Logins are tracked with session cookies; IP addresses aren't checked at all. (It's normal for multiple people to get the same IP address, or one person's IP addresses to change during a session, whether they use Tor or not, so that would never work in the first place.)

I was also worried that for some reason when I log off I get this error: "Session verification failed. Please try logging out and back in again, and then try again. " It sounds like "your account is still opened, log in again and close it".
It actually means the opposite: that your session cookie is expired or invalid (possibly carried over from a previous session), so you're not actually logged in despite what is displayed in your browser. You need a valid cookie to log out in order to prevent other people from logging you out without your permission (which would be most annoying); the case where you can't log out because you're already logged out doesn't seem to be handled well.

Will pretend to do unspeakable things (while actually eating a taco) for bitcoins: 1K6d1EviQKX3SVKjPYmJGyWBb1avbmCFM4
I am not on the scammers' paradise known as Telegram! Do not believe anyone claiming to be me off-forum without a signed message from the above address! Accept no excuses and make no exceptions!
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!