3

Imagine yourself connecting your personal device to your workplace wi-fi network.

Can managers, network administrators, or some other person/potential attacker see my browser's activity if I'm using Tor browser or run all my traffic through the Tor network?

schroeder
  • 123,438
  • 55
  • 284
  • 319
Mobutu Sese Seko Kuku Ngbendu
  • 85
  • 9
  • 2
    Are you using their computer? If yes, then yes. If no, then they can at least tell if you're using Tor on their network. – user Mar 11 '20 at 20:36
  • @user Edited my question to be more readable for the reader. I'm referring to situation where you are connected to that local network. – Mobutu Sese Seko Kuku Ngbendu Mar 11 '20 at 20:41
  • 3
    Always assume that anything you do on a company computer is fully monitored by the company. Because as a general rule of thumb, if they want to, they can. – Conor Mancone Mar 11 '20 at 21:05

2 Answers2

4

This answer is based on the assumption that the adversary is able to monitor the traffic to/from your device, but has not compromised your device.

In that case, the adversary may be able to see that you are using Tor, because they'll see connections from your device to nodes on the Tor network. But, that person won't be able to determine which sites on the Tor network you or visiting, and won't be able to see the information that you are exchanging with those sites.

See https://www.csoonline.com/article/3287653/what-is-the-tor-browser-how-it-works-and-how-it-can-help-you-protect-your-identity-online.html for more info.

mti2935
  • 19,868
  • 2
  • 45
  • 64
0

No, that would defeat the purpose of Tor.

If it is truly your personal device and is not running any work software, and if the Tor Browser and network behave as designed and you are following best practices, then other parties on the network will not be able see your activities over Tor.

multithr3at3d
  • 12,355
  • 3
  • 29
  • 42
  • Could you elaborate on "following best practices"? – iraleigh Apr 26 '20 at 03:28
  • @I.Raleigh sort of a catch all, covering everything from verifying the Tor executable(s) to ensuring your traffic is actually making it through Tor if not using the browser. Basically, following their docs is sufficient. – multithr3at3d Apr 26 '20 at 15:01