# \#security

**URL:** https://forum.torproject.org/tag/security/28.md

[Latest](https://forum.torproject.org/latest.md) · [Categories](https://forum.torproject.org/categories.md) · [Tags](https://forum.torproject.org/tags.md)

---

## [AI/LLM commits and Tor security](https://forum.torproject.org/t/ai-llm-commits-and-tor-security/21641)

<div class="topic-metadata">

**Author:** [@e902490](https://forum.torproject.org/u/e902490)\
**Replies:** 6\
**Last updated:** [July 16, 2026, 3:21pm UTC](https://forum.torproject.org/t/ai-llm-commits-and-tor-security/21641 "2026-07-16T15:21:07Z")

</div>

Dear tor project, I’m a somewhat regular TOR user. I saw this: I’m also a coder, and AIs seem notably worse at introducing bugs even with human review https://medium.com/@dumaysacha/i-saw-the-horror-of-ai-and-coderab…

---

## [Tor browser as possible attack vector - review/help needed](https://forum.torproject.org/t/tor-browser-as-possible-attack-vector-review-help-needed/21781)

<div class="topic-metadata">

**Author:** [@trelip](https://forum.torproject.org/u/trelip)\
**Replies:** 0\
**Last updated:** [June 25, 2026, 11:42am UTC](https://forum.torproject.org/t/tor-browser-as-possible-attack-vector-review-help-needed/21781 "2026-06-25T11:42:46Z")

</div>

Hi. My friend is in a kind of stalking or targeted spying situation. Malicious party somehow obtained real-time info about his actions on a desktop. His browsing habits and traffic capture he did before disconnecting PC …

---

## [I am new to OpSec and want to learn more as a hobbyist](https://forum.torproject.org/t/i-am-new-to-opsec-and-want-to-learn-more-as-a-hobbyist/21750)

<div class="topic-metadata">

**Author:** [@jin](https://forum.torproject.org/u/jin)\
**Replies:** 1\
**Last updated:** [June 22, 2026, 9:39pm UTC](https://forum.torproject.org/t/i-am-new-to-opsec-and-want-to-learn-more-as-a-hobbyist/21750 "2026-06-22T21:39:30Z")

</div>

I just started out and my first project was to boot TailsOS. My Goal is to learn more about opsec and security in genal. Now I am looking for secure applications that I should use and already discovered Pidgin. Is there …

---

## [Stronger intermediary certificate for RPM repositories](https://forum.torproject.org/t/stronger-intermediary-certificate-for-rpm-repositories/21126)

<div class="topic-metadata">

**Author:** [@updatesneeded](https://forum.torproject.org/u/updatesneeded)\
**Replies:** 0\
**Last updated:** [January 20, 2026, 3:16pm UTC](https://forum.torproject.org/t/stronger-intermediary-certificate-for-rpm-repositories/21126 "2026-01-20T15:16:21Z")

</div>

Hello Tor team. I’ve tried to configure my RHEL-derived (RockyLinux) server to use stronger cryptography (so-called FUTURE crypto policies) and both the Rocky Linux and Tor rpm repositories forced me to pull back my cha…

---

## [SELinux profile for Tor Browser 14.5.5](https://forum.torproject.org/t/selinux-profile-for-tor-browser-14-5-5/20340)

<div class="topic-metadata">

**Author:** [@N0N4M3](https://forum.torproject.org/u/N0N4M3)\
**Replies:** 0\
**Last updated:** [August 10, 2025, 12:06pm UTC](https://forum.torproject.org/t/selinux-profile-for-tor-browser-14-5-5/20340 "2025-08-10T12:06:13Z")

</div>

Hi there, In Tor Browser 14.5.5 for Linux, there’s a notification linking to Firefox’s guide on creating an AppArmor profile. However, I couldn’t find any official information on how to set up something similar using SE…

---

## [How credible is "imagine" on the TorPlusVPN page?](https://forum.torproject.org/t/how-credible-is-imagine-on-the-torplusvpn-page/16079)

<div class="topic-metadata">

**Author:** [@5Oj0mZDRarEO](https://forum.torproject.org/u/5Oj0mZDRarEO)\
**Replies:** 1\
**Last updated:** [December 1, 2024, 10:42am UTC](https://forum.torproject.org/t/how-credible-is-imagine-on-the-torplusvpn-page/16079 "2024-12-01T10:42:21Z")

</div>

How credible is “imagine” on the TorPlusVPN page? it’s not difficult to imagine, that also encrypted Tor traffic hidden by a VPN’s or SSH’s could be classified. Should I treat it as “imagine by a credible expert” or …

---

## [NoScript Per Site Permissions- question about reset on restart](https://forum.torproject.org/t/noscript-per-site-permissions-question-about-reset-on-restart/14839)

<div class="topic-metadata">

**Author:** [@thermosflask](https://forum.torproject.org/u/thermosflask)\
**Replies:** 7\
**Last updated:** [September 27, 2024, 7:00pm UTC](https://forum.torproject.org/t/noscript-per-site-permissions-question-about-reset-on-restart/14839 "2024-09-27T19:00:54Z")

</div>

When using NoScript on Tor Browser for Mac is it possible to have private windows (shift-command-P) use the default settings to avoid fingerprinting, and non-private windows (command-N) use a custom set of per site permi…

---

## [Generating a ephemeral Tor control cookie?](https://forum.torproject.org/t/generating-a-ephemeral-tor-control-cookie/13679)

<div class="topic-metadata">

**Author:** [@anon49112325](https://forum.torproject.org/u/anon49112325)\
**Replies:** 0\
**Last updated:** [July 19, 2024, 8:29am UTC](https://forum.torproject.org/t/generating-a-ephemeral-tor-control-cookie/13679 "2024-07-19T08:29:55Z")

</div>

Is there a way to generate or rather recreate a new Tor control cookie every boot on unix/linux systems? Would simply pointing the CookieAuthFile to tmp given its mounted to tmpfs be enough? CookieAuthFile /tmp/tor\_…

---

## [\[virustotal\] I got 5 warnings with VirusTotal. Is tor-browser really safe?](https://forum.torproject.org/t/virustotal-i-got-5-warnings-with-virustotal-is-tor-browser-really-safe/11341)

<div class="topic-metadata">

**Author:** [@BKM](https://forum.torproject.org/u/BKM)\
**Replies:** 2\
**Last updated:** [January 29, 2024, 10:57am UTC](https://forum.torproject.org/t/virustotal-i-got-5-warnings-with-virustotal-is-tor-browser-really-safe/11341 "2024-01-29T10:57:13Z")

</div>

Hello. I have a question for the developers. I downloaded the officially distributed binary (Windows version) from Tor’s website. And scanned PluggableTransports/conjure-client.exe with VirusTotal, then I got the malwar…

---

## [Security Release 0.4.8.10](https://forum.torproject.org/t/security-release-0-4-8-10/10536)

<div class="topic-metadata">

**Author:** [@dgoulet](https://forum.torproject.org/u/dgoulet)\
**Replies:** 0\
**Last updated:** [December 8, 2023, 7:18pm UTC](https://forum.torproject.org/t/security-release-0-4-8-10/10536 "2023-12-08T19:18:28Z")

</div>

Where to Download Tarballs Gitlab Repository Bug Report Changes Below are the major changes of the released versions and links to more detailed release notes. Stable We are releasing again an important security releas…
