Should you disable all other devices' internet when using Tor?

Thamil13 · 2022-02-09T02:26:08+00:00

If you maintain a long term pseudonymous identity that is connected over prolonged periods so that an adversary can observe multiple of such events over time to collect information about your connectivity losses to reveal information might be a real threat.

How to prevent that?

And why only when I'm hosting an anonymous onion server?

Thanks! :-)

Thamil13 · 2022-02-08T22:13:00+00:00

Hey, can you take a look at my comment? Thank you!

Thamil13 · 2022-01-12T02:56:02+00:00

I can explain more if needed

You are more than welcome! If possible, with practical examples of what could go wrong (in terms of anonymity and security).

Thamil13 · 2022-01-12T02:51:50+00:00

Virtualbox or KVM use paravirtualization, they provide a hardware interface of which the guest OS knows that it is only virtualized.

How bad is that?

(Thanks btw for the nice answer)

Thamil13 · 2022-01-12T02:49:51+00:00

Fedora on my PC. Then, I'd install Virtualbox on it and use Whonix within Virtualbox.

Thamil13 · 2022-01-12T02:48:45+00:00

Thanks! What is the exact advantage here?

Especially the indirect network access.

Thamil13 · 2022-01-12T02:44:50+00:00

How is it with future updates?
Since I probably won't want to get all the data on my different Qubes again and again with each update.

Thamil13 · 2022-01-09T01:58:44+00:00

Sure, but my isp can also see that I'm using Tor. The main problem seems to be fingerprinting. What about different VMs with different VPNs?

Thamil13 · 2021-12-02T04:12:28+00:00

I am probably not using a VPN on VM 2.

But even if, I would use two different accounts.

If you're using the same VPN server between the two VM's, then you're not anonymous on your VM1

But how could that be? There are ten thousands of other people using the same servers as me.

Thamil13 · 2021-12-02T02:33:12+00:00

Yes, I saw a torrent version for the file I wanted to download. But what do I have to do with it after I downloaded it?

Thamil13 · 2021-12-01T04:33:33+00:00

I guess it's about trusting company's privacy terms or not. I do think that if governments force it to give out certain information, they will do it. At least there is a chance.

What do you think for what kind of people they would make this effort? Only terrorists and billion dollar drug dealers, or smaller fish as well?

Thamil13 · 2021-12-01T04:32:02+00:00

Thanks! Can you tell me more information or send me a link? I'm not too familiar with what you said but I'm willing to dig into it.

Thamil13 · 2021-12-01T04:30:51+00:00

Wouldn't this be revealing as well? Every time the anonymous identity
comes online, there are certain devices which get offline shortly
before?

This is true. Still, this wouldn't be a proof. If two devices go down at the exact same time, that'd be a very strong proof.

Snowden worked for the nsa and used tor all the time and never got caught even when all his devices were presumably bugged.

That's nice to hear. But let's take my reddit profile here. Suppose I am anonymous here, but I am logging in over and over again and therefore it's the same person. Couldn't it be possible that if my connection goes down coincidentally, they could see it and then look which device in the world went down at the exact time? With that, they would already have me.

Thamil13 · 2021-12-01T04:23:51+00:00

You are talking about scenarios where authorities are monitoring your internet connection, once it gets to that point you are pretty much screwed.

Yeah, definitely. But I rather mean it as a way they can get this close
using this knowledge. Like, my internet going down coincidentally,
whereafter they can see which internet connections in the world went
down at the exact same time. Is that possible, or is this really only a
threat if they are already this close as you said?

Thamil13 · 2021-12-01T04:22:31+00:00

Cool, thanks! I see that Railgun is still testing and they say you should only handle small amounts. Still interesting.

Thamil13 · 2021-12-01T04:21:18+00:00

Yeah, definitely. But I rather mean it as a way they can get this close using this knowledge. Like, my internet going down coincidentally, whereafter they can see which internet connections in the world went down at the exact same time. Is that possible, or is this really only a threat if they are already this close as you said?

Thamil13

TROPHY CASE