31–40 of 242 posts
Earlier quoted context omitted.
Good, now if only we could have bitorrent baked in... EDIT: I mean baked in in the browser like tor, not baked in tor. Although interesting, it's really not my priority.
Honest question: is bittorrent even still a thing?
> Ultimate eventual goal: Make Tor Browser obsolete, so Tor Project can focus on research instead of maintaining a fork of Firefox.
Earlier quoted context omitted.
Good, now if only we could have bitorrent baked in... EDIT: I mean baked in in the browser like tor, not baked in tor. Although interesting, it's really not my priority.
Honest question: is bittorrent even still a thing?
Earlier quoted context omitted.
I would still prefer https on a .onion. If tor itself is popped, then traffic can be routed or mirrored to another host. This has happened in a PoC and was fixed in a security update in one of the alpha releases. There are additional fixes required for HS that are coming. If the target is using https, you can see if the signature changes (there are addons for this). Digicert will sign .onion domains, though the hidde…
https://matt.traudt.xyz/posts/dont-https-your-o44SnkW2.html
To summarize, you are a dissident. I am a news reporter. You are giving me information about your government. Your life and the lives of your family members now depend 100% on the security of the Tor Proxy transport. Tor is a proxy transport and nothing more.
As a dissident, you have been trained by me to install addons that validate the signature of my HTTPS certs will not change. I also showed you how to do this using openssl s_client. When Tor is popped and routing you to your government hosts, you will see the SSL signature change. Per my instructions, you will cease all communication with me.
Without HTTPS, you are relying entirely on the transport for assurance of who you are talking to. This is neither appropriate nor acceptable for this type of communication.
PGP is not a mitigating control, because the handshake has completed and you are now downloading your state sponsored rootkit. It's too late by that point. The only thing we have to validate ID and allow or block application traffic is a certificate.
> Ultimate eventual goal: Make Tor Browser obsolete, so Tor Project can focus on research instead of maintaining a fork of Firefox.
Good, now if only we could have bitorrent baked in... EDIT: I mean baked in in the browser like tor, not baked in tor. Although interesting, it's really not my priority.
> Ultimate eventual goal: Make Tor Browser obsolete, so Tor Project can focus on research instead of maintaining a fork of Firefox.
Good, now if only we could have bitorrent baked in... EDIT: I mean baked in in the browser like tor, not baked in tor. Although interesting, it's really not my priority.
Apart from the existing ecosystem of content, are their any reasons you want BitTorrent over ipfs?
Everyone on tor AND ipfs... Now that would be something.
Earlier quoted context omitted.
Good, now if only we could have bitorrent baked in... EDIT: I mean baked in in the browser like tor, not baked in tor. Although interesting, it's really not my priority.
Honest question: is bittorrent even still a thing?
Facebook used to deploy their code using bittorent. I doubt it has changed.
A lot of blizzard video games update using bittorent as well. If you play Starcraft 2, you use bittorent.
Streaming services like stremio are basically bittorent. After netflix, it's my main source of video content.
If you want to download the internet archive, that's the saner option. Same if you are a pentester, as a lot of heavy leak or hash db are so huge only bittorent makes it practical. Too expensive to host for one small actor. It's also more resistant to take down notice.
We talked a lot about RSS lately, and how to revive it, while in comments people said it actually never died. Bittorrent is a lot like that. Great tech, great standard, it works flawlessly and fill its use case perfectly.
The only reason it's not more adopted is because it's not in the browser by default. Otherwise the hosting benefit and the dl speed is such that it would be an instant hit.
Earlier quoted context omitted.
Honest question: is bittorrent even still a thing?
It definitely still is. And with the concept of private trackers, it's not really a simple thing to turn off. Companies like IP Echelon tend to automatically bully US/cloud users, but in general they're IMHO far from killing the network. The only problem is that there's fewer and fewer torrent search engines...
Earlier quoted context omitted.
Good, now if only we could have bitorrent baked in... EDIT: I mean baked in in the browser like tor, not baked in tor. Although interesting, it's really not my priority.
Honest question: is bittorrent even still a thing?
However it is usually through VPN, not Tor.
> Ultimate eventual goal: Make Tor Browser obsolete, so Tor Project can focus on research instead of maintaining a fork of Firefox.
Good, now if only we could have bitorrent baked in... EDIT: I mean baked in in the browser like tor, not baked in tor. Although interesting, it's really not my priority.