Can Tor Be Traced? What the Research Says

Researchers and law enforcement have documented several methods for tracing Tor users:

• Traffic correlation attacks: An adversary who can observe both the Tor entry and exit points can correlate timing and volume patterns to link traffic to a user. This requires monitoring large portions of the internet (ISP-level or nation-state capability). Academic research shows this is theoretically possible but extremely difficult at scale.
• JavaScript/browser exploits: The FBI used a zero-day JavaScript exploit ("Network Investigative Technique" or NIT) to de-anonymize users of a Tor-hosted service in 2015. The exploit ran code in Tor 瀏覽器 that reported the user's real IP 位址. This is why disabling JavaScript (最安全 mode) is critical.
• Operational security failures: Most Tor users who were identified made mistakes: logging into personal accounts, reusing usernames, sending identifiable information, or downloading files that connected outside Tor. User error is the primary cause of de-anonymization.
• 中繼-level attacks: Running a large number of Tor 中繼 allows traffic analysis. A 2014 attack confirmed that Tor 中繼 run by the same entity could correlate users with hidden services. The Tor 計畫 implemented defenses against this.

Based on leaked documents and court cases:

• NSA (US): Internal documents (leaked by Snowden) described Tor as providing "high-secure, low-latency anonymity" and admitted they "will never be able to de-anonymize all Tor users all the time." They could de-anonymize individual users through targeted attacks but not through mass surveillance.
• FBI (US): Successfully de-anonymized specific targets using browser exploits and operational security analysis. These are targeted operations against individuals, not bulk surveillance of all Tor users.
• GCHQ (UK): Documents suggest similar capabilities to the NSA - can target individuals but cannot break Tor's anonymity at scale.
• 中國/俄羅斯: Block Tor access but have not demonstrated the ability to trace Tor users who successfully connect through 橋接.

Key takeaway: If a nation-state intelligence agency specifically targets you, they may eventually identify you through a combination of technical attacks and traditional investigation. But for the vast majority of Tor users, the anonymity protections are more than sufficient.

To maximize your anonymity and make tracing practically impossible:

1. Use VPN + Tor + Tails OS: Tails routes all traffic through Tor, leaves no traces, and the VPN hides your Tor usage from your ISP. This is the strongest practical setup.
2. Disable JavaScript completely: Set Tor 瀏覽器 to "最安全" mode. This eliminates the primary exploit vector used by law enforcement.
3. Never mix identities: Keep your Tor activity completely separate from your real identity. Never log into personal accounts, use real-world payment methods, or share identifying details.
4. Use .onion sites whenever possible: .onion traffic never leaves the Tor 網絡 (no exit node), making traffic correlation much harder.
5. Rotate your behavior: Access Tor from different locations and at different times. Consistent patterns can aid correlation attacks.
6. Study your threat model: Understand who might want to trace you and what resources they have. Adjust your security measures accordingly.

For service operators, the traceability of your server is just as important as user anonymity. If your .onion service can be traced to a physical server, your users' anonymity is compromised.

AnubizHost provides untraceable Tor 主機代管:

• 離岸 servers in 冰島, 羅馬尼亞, and 芬蘭 - jurisdictions that resist international data requests
• Pay with 比特幣, 門羅幣, or other 加密貨幣 - 無 KYC, no identity trail
• Pre-configured v3 .onion addresses with proper security hardening
• DDoS 保護 to prevent traffic analysis attacks against your service
• Full root access to implement additional security measures