Live data from Hacker News

Mozilla Project Fusion: Tor Integration into Firefox

trac.torproject.org

231–240 of 242 posts

Re: Mozilla Project Fusion: Tor Integration into Firefox

#231

Hi all. I am a Tor Project Developer and work at Mozilla on this project. We appreciate everyone's enthusiasm and feedback. Our ultimate goal is a long way away because of the amount of work to do and the necessity to match the safety of Tor Browser in Firefox when providing a Tor mode. There's no guarantee this will happen, but I hope it will and we will keep working towards it. If anyone is interested in assisting…

> Our ultimate goal is a long way away because of the amount of work to do and the necessity to match the safety of Tor Browser in Firefox when providing a Tor mode. If that doesn't pan out, do you expect the ongoing work on this project to reduce the size of the patches that the Tor Browser project needs to carry on top of the Firefox trunk?

Yes. This Mozilla wiki page has more information about (what Mozilla calls) the "Tor Uplift":

> The intention of Tor Uplift project is to land all Tor Browser patches so that Tor can directly use Firefox main trunk instead of a fork.

https://wiki.mozilla.org/Security/Tor_Uplift

Re: Mozilla Project Fusion: Tor Integration into Firefox

#232
post #197

Earlier quoted context omitted.

I'm not quite sure what you mean by this comment, but if you mean that their approach would be similar to MAC, in the sense that "super private browsing" would have to be enabled in about:config or through an extension: that would make sense.

This: https://support.mozilla.org/en-US/kb/containers

I know the extension, but what does that have to do with informing users about not using their account when browsing with Tor? Heck, informing users about being able to use different accounts with Multi-Account Containers was already such a hard problem that they opted into shipping it as a separate extension, so it's only used by power users.

Re: Mozilla Project Fusion: Tor Integration into Firefox

#233
post #232

Earlier quoted context omitted.

This: https://support.mozilla.org/en-US/kb/containers

I know the extension, but what does that have to do with informing users about not using their account when browsing with Tor? Heck, informing users about being able to use different accounts with Multi-Account Containers was already such a hard problem that they opted into shipping it as a separate extension, so it's only used by power users.

How I'd do it is have a warning when using Tor outside of the designated Tor container. That is, encourage the installation of the extension when enabling a "Tor" tab (permanently dismissable of course). Alternatively they could co-opt the private-browsing window (a.k.a. incognito) feature to have a tor-browsing window.

The latter might even be preferred since the former is only at the tab level and probably quite easy to forget whether you are in Tor before entering an address. It appears to be what is suggested in the notes (now that the link is up).

Re: Mozilla Project Fusion: Tor Integration into Firefox

#234
post #36

Earlier quoted context omitted.

Hey Sametmax, big fan of your site. Apart from the existing ecosystem of content, are their any reasons you want BitTorrent over ipfs? Everyone on tor AND ipfs... Now that would be something.

Thanks :) I think IFPS needs a little more field testing before being set in stone. Indeed, if you bake in something in the browsers, then those implementation will be the boundary of what is practical to do. So any innovation will then be constraint by the browsers release and good will. IFPS is a young tech, it needs time to evolve yet. Tor and bittorrent are now quite mature.

>"IFPS is a young tech, it needs time to evolve yet."

Could you share your concerns about IPFS in its current state or what you see as its limitations? Thanks.

Re: Mozilla Project Fusion: Tor Integration into Firefox

#235
post #75

Earlier quoted context omitted.

Is it even worth talking about speed without at least considering client network conditions? A lot of people have poor internet connections, many places world-over are basically mobile-internet only already, shared internet spaces with variable QoS (campuses), etc etc. Most people aren't using engineer-priced laptops/workstations or backed by enterprise-grade routing equipment, after all.

If I understand Tor correctly, last mile connectivity is not a bottleneck.

[deleted]

Re: Mozilla Project Fusion: Tor Integration into Firefox

#237

Have you considered also implementing I2P[0] in parallel with tor? It suppose to be harder to analyze traffic at nodes with I2p though it isn't as battletested as tor. [0]: https://geti2p.net/en/comparison/tor

I2P is more concerned with inward traffic rather than clearnet 'exit' traffic which is the main thing that Mozilla wants in a super private mode.

Re: Mozilla Project Fusion: Tor Integration into Firefox

#238

I am starting to feel firefox in a serious way. But im just sooo concerned that their software still sucks. I mean, we ARE talking about a company who thought it was smart to spend time trying to build a javascript OS for mobile. So let me ask again. When are you guys going to start building firefox from the ground up and make the perfect browser we all deserve? And if you disagree, please. Present your arguments. I…

They've started on it, it's called Servo.

But webstandards are evolving faster than modern browsers are, so building a browser from the ground up would require quite a bit more money, and worse know-how - you can't just buy that in unlimited amounts, than they have for Firefox right now, and they can't exactly stop developing Firefox in the meantime either.

Also, their three big competitors have most of their browser market share thanks to building an operating system underneath it. No matter how slim Mozilla's chances at success were, it would've been foolish to not try to get into the operating system market. And they built it based on web technologies, because that's where they have know-how.

Re: Mozilla Project Fusion: Tor Integration into Firefox

#239

Earlier quoted context omitted.

That said, plenty of providers use the list of tor relays (which is also public) to block traffic. Sites such as https://www.dan.me.uk/dnsbl then help people do this. That site in particular may "warn": > This DNS blacklist contains ALL tor nodes (entry, transit and exit nodes) - think carefully before choosing to use this list for blocking purposes. but anyone who doesn't understand tor simply won't understand the d…

As someone who has run a relay on my home network for years now this has never come up. At least not that I've been able to discern. I think it might be a problem if I also ran a mail server from home, but almost nobody does that anymore.

I do, and I've run a Tor relay at home as well (also exit for a while).

Re: Mozilla Project Fusion: Tor Integration into Firefox

#240
post #121

This would be amazing. The main reason I've never used Tor is the fear that it would make me look like I had something to hide (instead of just a general desire for privacy). If it were built into Firefox, I'd probably switch over from Chrome.

> it would make me look like I had something to hide

That's exactly why I use it on a regular basis!

Perhaps when looking up political or medical things (also for friends), it could be good to run that through Tor. That is not something to hide per se, but it is definitely not something that is anyone else's business, and you don't want to be bubbled.

Post reply on HN