Author

Topic: Is Tor safe to use here? (Read 394 times)

legendary
Activity: 4326
Merit: 3041
Vile Vixen and Miss Bitcointalk 2021-2023
October 10, 2017, 10:30:41 PM
#4
Logins are tracked with session cookies; IP addresses aren't checked at all. (It's normal for multiple people to get the same IP address, or one person's IP addresses to change during a session, whether they use Tor or not, so that would never work in the first place.)

I was also worried that for some reason when I log off I get this error: "Session verification failed. Please try logging out and back in again, and then try again. " It sounds like "your account is still opened, log in again and close it".
It actually means the opposite: that your session cookie is expired or invalid (possibly carried over from a previous session), so you're not actually logged in despite what is displayed in your browser. You need a valid cookie to log out in order to prevent other people from logging you out without your permission (which would be most annoying); the case where you can't log out because you're already logged out doesn't seem to be handled well.
legendary
Activity: 1610
Merit: 1183
October 10, 2017, 11:30:50 AM
#3
In general, if the server which a website is hosted on doesn't offer SSL/TLS then the tor exit node will be able to see all your request data. For example; passwords.

Take a look at this link: https://www.torproject.org/download/download-easy.html.en#warning

That will provide you with the information of what not to do and what you can do. Basically, if you are worried about compromising any of your data on any website, make sure SSL/TLS is enabled. If it's not the exit node will be able to see sensitive data. Of course the likelyhood of someone seeing a bitcointalk forum account on a exit node and acting upon it might not be very likely. But, your in luck it's safe to use Tor on Bitcointalk  as https is enabled. 

Right, so nobody could ever stumble upon your opened session in the forum because it's encrypted? because that is what I was referring too: not closing your account and someone getting the IP you were using on that session on this same website then seeing my account opened but I guess that can't happen.

I was also worried that for some reason when I log off I get this error: "Session verification failed. Please try logging out and back in again, and then try again. " It sounds like "your account is still opened, log in again and close it".
staff
Activity: 3248
Merit: 4110
October 10, 2017, 09:49:30 AM
#2
In general, if the server which a website is hosted on doesn't offer SSL/TLS then the tor exit node will be able to see all your request data. For example; passwords.

Take a look at this link: https://www.torproject.org/download/download-easy.html.en#warning

That will provide you with the information of what not to do and what you can do. Basically, if you are worried about compromising any of your data on any website, make sure SSL/TLS is enabled. If it's not the exit node will be able to see sensitive data. Of course the likelyhood of someone seeing a bitcointalk forum account on a exit node and acting upon it might not be very likely. But, your in luck it's safe to use Tor on Bitcointalk  as https is enabled. 
legendary
Activity: 1610
Merit: 1183
October 10, 2017, 09:37:24 AM
#1
I was just wondering if in this forum and in forums in general, it is safe to use Tor if your identity has value? for example a Legendary account has value here, because it takes years of being active and learning about BTC and people want to hack you constantly.

My worry was that since Tor uses a different IP every 10 minutes (I think), if you forget to close your session or for example your computer is rebooted due a crash and you don't log out, can someone else using Tor that's browsing bitcointalk.org stumble upon your logged in account due being assigned the same IP that you were using? Or this is impossible because he would need to have local cookies too? Im just not sure how this works exactly and I was wondering if some accounts got hacked this way since a lot of people use Tor to access this site.
Jump to: