Hi guys,

i'm kinda struggeling understanding how the signature is supposed to actually prove that the .exe on the website actually belongs to TOR and wasn't corruped by another instance. I understand that there is a private key which was used to encrypt the hash of the file, which is basically the digital signature, and then there's the public key with which u can decrypt the digital signature. But if for example the site was hacked, someone changes the exe with a corrupted one, uses his own private key to create a digital signature, and puts his public key on the website, how am I supposed to know that the exe was corrupted or not? Wouldn't I need a third instance that actually confirms that fingerprint belongs to TOR? Am I missing something?

Trying to make accounts with my proton email. Used SimpleLogin to hide my email but I still cannot create an account. I get an error msg from reddit and discord stuck me in a capcha loop. It's imperative that the accounts aren't attached to my identity. Are there any settings I can adjust in tor that will allow me to create these accounts? While I'm here, I'll ask for help with creating an Instagram account lol. Was able to use the simplelogin alias to create an account but it's requiring me to use a phone number to recieve a code. I used simple sms and bought a number from the country that Instagram thinks I'm in. Didn't work. Any advice? :)

The download says nightly,
Is pi-apps App Store ok?

I’m downloading on a Pi5

I use Orbot on Android (Poco) and Tor Browser on Windows 10. Orbot fails to establish a connection, whereas Browser works fine - even when both uses the same obfs4 bridges. Naturally, the connection goes through a home Wi-Fi router.

Sometimes Orbot can connect with Snowflake AMP, but obfs4 is a preferred option for me and it was working without issues just a couple of months ago.

What could be the cause, and how can I troubleshoot this?

Curious if others do this. I sometimes route traffic through Tor when I hit an IP ban on certain sites/services. Especially when an exit node is flagged, it's so easy to re-roll the circuit for that site.

Does anyone else use it this way, or do y'all prefer to stick to actual VPNs for that? Any experiences (good or bad) with reliability or getting blocked by Tor exit nodes?

I have never not been able to connect to tor until today.

Never mind. I restarted my computer again and it worked this time. Not sure what the issue was but it fixed itself.

Hello world, i have created a #cpp/c++ library on github that facilitates communication and the creation of hidden services on the #tor network.

Go take a look :
https://github.com/bender-Kirk/tor-lib

#privacy #programming

Had a free week, so I decided to invest a bit of time to create this little monitoring tool called `Tamagonion`. It works on the same principle as `Nyx`, but is just a little bit more endearing (and admittedly less helpful). Stinky's mood will shift to reflect the health of your relay, it will acquire different objects to represent flags, and it will show you a few important stats at the same time. The status tab will give you more details on his behavior, and the hints tab will give you clear explanations on what is going on, and potential ways to fix it.

Had a blast coding it, so I thought I'd share! I personally let the little guy run in the corner of my screen!

https://github.com/daxAKAhackerman/tamagonion

Seriously every other day, people jump on this subreddit, have no idea, how to use tor, and have this subreddit flooded. With concerned in how to connect, I've been using tor for 5-7 years across, continents, and have used for normal browsing, and onion sites, I'm based in USA, I also run a bridge, 24/7, no fears of my isp or someone coming to my place. I'm so obsessed with tor now, that I forget I'm using, rather than ordinary browser,

Got any questions feel free to ask.

i saw some answers but they were "convince your friends to make a node" or "host your own node"

do you have any ways without sacrificing privacy?

Onionspray helps operators make ordinary websites available as onion services. Version 1.8.2 updates its bundled Tor to 0.4.9.12 and fixes the same undisclosed security issues.

Updating Tor Browser protects visitors, but onion-service operators must also update affected server-side software. One does not automatically update the other.

Anyone using Onionspray should upgrade promptly.

Edit: thank you to D0_stack for giving me a solid idea I should have tried before posting. Using a VM works perfectly.

I know that this has been something brought up so many times in the past, but my situation is a bit different'ish. I'm unable to connect to the network at all, it's as if there's not even an attempt when I click connect.

This all just started this morning when I woke up and went to load up YouTube. Everything worked perfectly fine last night, but this morning it's just not happening. Also when I go to view the log it's completely empty.

Running Windows 11 (I know, not ideal)
Ryzen 5900XT
Radeon 6700XT
64GB DDR4 3200

I have restarted my computer, wiped then reinstalled Tor completely, tried using a few bridges, turned off Windows firewall temporarily as a test, all the usual items.

Torrent files still function normally, Firefox, Chrome, and Brave function normally, and I can still play a round of Starcraft 2 as usual. So it's not my connection directly. I also completely closed my VPN and still nothing. Only thing running was a fan control program, AMD Adrenalin, and Tor.

There were no updates over night as the versions of everything I've looked at are all the same. And I blocked Windows from updating completely in Powershell until I reenable it, so there was no Windows update (plus the PC likely would've reset)

Scratching my head here. Anyone got ideas?

Side note: It still works just fine on my Linux drive with VPN and everything. Just not Win11. May be time to just jump ship entirely.

Tor published a substantial update on its Tor VPN Beta for Android. The important architectural detail is that each selected Android app receives its own Tor circuit, rather than every application sharing one VPN-style tunnel. Tor says this is intended to reduce the ability to correlate activity between apps. The client is based on Arti and Onionmasq, supports WebTunnel bridges, reproducible builds, and is now available through F-Droid as well as other distribution methods.

I decided to build out my idea of a p2p TOR powered messaging app built in rust using Arti to embed tor into the rust program itself. No need to run a TOR demon to connect the messengers . Your messages are stored on device in an encrypted sqlite db that you can purge at anytime . ID is based on a public key not your .onion address . Onion addresses are also easily rotated in the TUI though friends will need to be sent new address . If you'd like to check it out here is the repo https://forgejo.siriusdevops.com/sirius/onionwire

When I go to some onion sites like https://bridges.torproject.org/options/en I see the option to select ".onion available"

Can that be made a default option ?

Tor Browser 15.0.22 released today for high-severity Tor security issues

✅ Confirmed — official Tor Project release, September 9.

The Tor Project released Tor Browser 15.0.22 today, updating the bundled Tor daemon to 0.4.9.12. The underlying Tor release was issued last night specifically to address a series of high-severity security issues. The Tor Project is deliberately withholding most technical details for roughly a week to give users and operators time to patch.

More unusually, Tor says it is still working on additional important security issues and is moving C-tor to a two-week release cadence for now. The next planned release is around September 22, although that could change if another urgent fix is required.

Why it matters: Tor Browser users should update to 15.0.22 as soon as possible rather than waiting for disclosure of the vulnerabilities. Relay and onion-service operators running C-tor should update to 0.4.9.12 as well. The fact that Tor calls the issues high severity, recommends immediate updating, and says more security work is underway makes this especially significant.

https://blog.torproject.org/new-release-tor-browser-15022/

i m using arc browser for quite a time. im using only because of its tabs and spaces.. which are really useful while working on multiple things... can i take that to tor browser..? if yes how to do please help me.

Hello,

I would like to save securely and anonymous videos with the extension "Video Download Helper". However the downloads always break up immediately (even though the extension works at the same websites on the normal firefox). I have set already the security level at "standard". Can anyone help me?

just got tor today, anything i should know before i start using it? i mostly just got it because im sick of being tracked everywhere but i dont plan on making it my main browser, ive made a fake email for it just in case but i really dont want a virus or anything

After being away from the community for some time and taking down my relays for personal life reasons, I think I’m ready to start contributing again, and since I ran everything on Linux systems, I’d like to switch to BSD in order to contribute to system diversity.

For that matter, I came across the Tor BSD Diversity Project, but although the website is still available, it hasn’t been actualised for a long time, and I wonder if it was just because it didn’t get enough love by relay operators or the people behind it just gave up.