Changes

As the Tor developers warn users, The Onion Router "cannot help them if they use it wrong". Many Tor users have been identified because they have configured it incorrectly. For this reason, new users are advised to use pre-configured software such as the Tor Browser bundle or a specialized operating system—Tails or [[Whonix]]. There are many ways to de-anonymize users based on their behavior. ''Fingerprinting'' is the identification of a unique configuration or behavior so that it matches only one known user. ''Browser fingerprinting'' takes note of the browser, the operating system and browser settings; this can be circumvented with the Tor Browser bundle. Other behavior can be just as unique as someone's face, handwriting or fingerprint, such as his typing or mouse movement patterns.

As the Tor developers warn users, The Onion Router "cannot help them if they use it wrong". Many Tor users have been identified because they have configured it incorrectly. For this reason, new users are advised to use pre-configured software such as the Tor Browser bundle or a specialized operating system—Tails or [[Whonix]]. There are many ways to de-anonymize users based on their behavior. ''Fingerprinting'' is the identification of a unique configuration or behavior so that it matches only one known user. ''Browser fingerprinting'' takes note of the browser, the operating system and browser settings; this can be circumvented with the Tor Browser bundle. Other behavior can be just as unique as someone's face, handwriting or fingerprint, such as his typing or mouse movement patterns.

Tor, however, has a few weaknesses that must be compensated by other programs. It is possible to prevent a computer accessing the network simply by censoring all known TOR IP's. To get around this, one must configure their TOR browser to access a "bridge", an uncensored IP that permits access to the TOR network. A TOR website, if breached, can also be programed to download malware that reveals the location of your computer, allowing law enforcement or other parties to find a user's location. Other weaknesses include various programs that take advantage of capabilities given to that type of program, such as a PDF installing extra software on a user's computer.  Using antivirus software to protect against such malware is highly recommended.  It is wise to remember that TOR is the software used by criminals of all stripes, none of whom are beyond committing crimes against other users.

An exit node has complete access to and control over the content of a user's communications; the user's safeguard is that the exit node does not know his IP address. If the connection to the website is not encrypted with the HTTPS protocol, the exit node can insert malicious code into the user's browser. Malicious exit nodes, a minority of all nodes, are operated by surveilling governments or hackers; the famous [[Julian Assange]] found secrets for [[Wikileaks]] by monitoring Tor communications as an exit node.

 

It is possible for a local network operator to prevent a computer accessing the network simply by censoring all known TOR IP's. A ''bridge'' is a server that substitutes for a guard node to bypass local network interference. Some bridge protocols are automatically packaged into Tor: 'obfs4' makes it ineffective to ban bridges by simply trying to contact all of them, 'meek' pretends to be a connection to a non-suspicious website, and 'snowflake' uses regular users' computers.

 

A TOR website, if breached, can be programmed to download malware that reveals the location of the computer, allowing law enforcement or other parties to find a user's location. In a notorious case, American child pornography producer Buster Hernandez was busted by exploiting a security vulnerability on his computer, having downloaded a video via Tor. A small software development company, Facebook and the government conspired to exploit a security vulnerability. Other weaknesses include various programs that take advantage of capabilities given to that type of program, such as a PDF installing extra software on a user's computer.  Using antivirus software to protect against such malware is highly recommended, or else switching to an operating system like [[Linux]] that does not need an antivirus.  It is wise to remember that TOR is the software used by criminals of all stripes, none of whom are beyond committing crimes against other users.

== Userbase ==

== Userbase ==

The Tor project responds to the criminal use of Tor by saying: "So yes, criminals could in theory use Tor, but they already have better options, and it seems unlikely that taking Tor away from the world will stop them from doing their bad things. At the same time, Tor and other privacy measures can fight identity theft, physical crimes like stalking, and so on"<ref>{{cite web|url=https://www.torproject.org/docs/faq-abuse.html.en|title=Tor Project Abuse FAQ|accessdate=February 8, 2016}}</ref> Tor is used by a wide variety of people for both legal and illegal purposes. Tor has been used to establish online [[black market]]s and to conduct internet gambling.  It has also helped oppressed people hide their identity online and allows them to more safely speak out against tyrannical governments.

The Tor project responds to the criminal use of Tor by saying, "So yes, criminals could in theory use Tor, but they already have better options, and it seems unlikely that taking Tor away from the world will stop them from doing their bad things. At the same time, Tor and other privacy measures can fight identity theft, physical crimes like stalking, and so on"<ref>{{cite web|url=https://www.torproject.org/docs/faq-abuse.html.en|title=Tor Project Abuse FAQ|accessdate=February 8, 2016}}</ref> Tor is used by a wide variety of people for both legal and illegal purposes. Tor has been used to establish online [[black market]]s and to conduct internet gambling.  It has also helped oppressed people hide their identity online and allows them to more safely speak out against tyrannical governments.

== Surveillance ==

== Surveillance ==