Clearly, if stored your IP yesterday without TorBrowser and sees your username login from Tor exit node today, it is possible that will combine this information. Please note that the information below assumes you have a secure, encrypted connection to a router and assumes that this is a "first login" to. You have not defined "safe" but one way to think about it is to ask what information you create or leak by your two methods, login with and without use of the TorBrowser. If you're just trying to protect your account credentials: Tor at best is neutral, and at worst may bite you. If you want anonymity, Tor may help to a certain degree, but will be worthless without following general opsec practices. Depending on your risk tolerance, what the account is (and what information it has on you), what threats you're trying to prevent, etc. By logging in you are confirming to the service operator (and anyone else who can tell you've logged in) that you are the person with that account, effectively de-anonymizing you.
However, logging into anything essentially defeats the purpose of Tor. Blocking mixed content and always logging in over HTTPS can help prevent this. If some of that content is also on the same domain as your encrypted / authenticated connection, it can leak your cookies (most browsers won't warn about mixed content, or will warn you but establish the connection anyways, meaning your data has already leaked). Many websites use mixed content (some content is encrypted, some isn't). However, even if your browser does indicate that you're using HTTPS, this doesn't necessarily mean that your credentials are safe.
When using Tor, an exit operator can steal your account credentials if you log into a site without using a TLS connection.
Is it less or more safe to login to personal accounts (email, Amazon,Įtc.) when using Tor, compared to not using Tor?
0 kommentar(er)
