You can also visit facebookcorewwwi.onion.
Belenarnau7
BBC News launches 'dark web' Tor mirror
291–300 of 306 posts
Re: BBC News launches 'dark web' Tor mirror
#292Earlier quoted context omitted.
I read a lot of RT. Many of their articles are just international reports like AP news and stuff. Don’t really see a lot of propaganda.
Yeah, of course they have to drop some real articles to look legit. The propaganda is what's in between Eg. Today's home page, first headline "Russia's 'secret weapon' for winning influence in Africa – and it's not what you might think". Then have a look at the op-ed pieces that are basically hit-pieces disguised as journalism. Also, there are things that they do not report (or omit) which is what you should be most…
This is in every kind of newspaper. You have to learn to discern propaganda from news and learn judgement.
Re: BBC News launches 'dark web' Tor mirror
#293Some of BBC News' .onion neighbors are forced to constantly rotate their URLs to evade DDoS attacks (notably Empire Market). Admins constantly publish new PGP-signed links to https://dark.fail . DDoS attackers then scrape this site, shift their attacks. Sites stay online, but users are trained to expect URLs to constantly change. This has resulted in a huge spike in phishing attacks. Tor hidden services are notorious…
My pet theory is that these DDOS attacks are not just other merchants. I believe state actors are DDOSing to force traffic through nodes they control to deanonymize traffic.
Flood certain gates to ease monitoring of specific nodes.
Easy ROI
Re: BBC News launches 'dark web' Tor mirror
#294Earlier quoted context omitted.
>"For starters, you shouldn't browse Tor without blocking JavaScript by default." Could you say why this is recommended?
Because JS might be used to leverage technology that can give clues on your browser and connection, it's in general one less open hole to think about when trying to stay as anonymous as possible
Not only that, but JavaScript can get you owned, and any code loaded over a non-https connection could be rewritten in transfer. Remember: all Tor exit IPs are publicly known. Tor users are easy to target.
If you use .onion services for anything... interesting, you should also be aware that the first step an advanced attacker might do with a compromised site is to try and completely own all browsers visiting.
If you run JavaScript, you're just waiting for someone to poke a hole in whatever sandbox protections the Firefox base of Tor Browser can provide. Example: https://threatpost.com/tor-browser-update-critical-flaw/1458...
Re: BBC News launches 'dark web' Tor mirror
#295Excellent initiative... would to see more of these...
Re: BBC News launches 'dark web' Tor mirror
#296Earlier quoted context omitted.
No, you're thinking of Fox News & Daily Mail. Sure, there is some criticism of BBC news, but I don't think you could ever compare it to the junk filled propaganda machine that is RT.
RT covers factual news. They just choose to cover news that makes America, et al look bad and choose to not cover news that makes Russia look bad. Opinion pieces are of course opinions, not news, and are also usually pro-Russian policy opinions.
The value of a state run news service is that the bias is fairly obvious.
I know roughly who writes the cheques at thr BBC, RT, NHK, or DW.
With privately owned media, figuring out where they're not going to be impartial is a lot more subtle. Who's buying the ads? What other companies are owned by major shareholders or key staff?
Re: BBC News launches 'dark web' Tor mirror
#297Earlier quoted context omitted.
Because JS might be used to leverage technology that can give clues on your browser and connection, it's in general one less open hole to think about when trying to stay as anonymous as possible
Not only that, but JavaScript can get you owned, and any code loaded over a non-https connection could be rewritten in transfer. Remember: all Tor exit IPs are publicly known. Tor users are easy to target. If you use .onion services for anything... interesting, you should also be aware that the first step an advanced attacker might do with a compromised site is to try and completely own all browsers visiting. If you…
Interesting point. Thanks. I have a related question. I'm assuming Tor browsers don't include any javascript engine then? And also likely include some self-contained resolver library? Are there other things that differences between a standard browser and a Tor browser worth mentioning?
Re: BBC News launches 'dark web' Tor mirror
#298Earlier quoted context omitted.
It's pretty straightforward. 1. Run the service. 2. Disable blocking onion in about:config. 3. In firefox set manual proxy and enable proxy dns for socks5. Done :D Takes all of two mins.
Even better you can start Firefox with the profile manager and have one profile configured for TOR and the other for normal browsing. That said, it's generally better to run the official TOR Browser instead. It has security nerds working over every aspect of it to make it as anonymous as reasonably possible. Deanonymization is shockingly powerful in the age of big data.
Agreed. I just switch ff to proxy when I want to bypass isp blocks for tpb and so on really.
If you want to be anon, use tor.
Re: BBC News launches 'dark web' Tor mirror
#299Earlier quoted context omitted.
Not only that, but JavaScript can get you owned, and any code loaded over a non-https connection could be rewritten in transfer. Remember: all Tor exit IPs are publicly known. Tor users are easy to target. If you use .onion services for anything... interesting, you should also be aware that the first step an advanced attacker might do with a compromised site is to try and completely own all browsers visiting. If you…
Interesting point. Thanks. I have a related question. I'm assuming Tor browsers don't include any javascript engine then? And also likely include some self-contained resolver library? Are there other things that differences between a standard browser and a Tor browser worth mentioning?
The Tor Browser enables JavaScript by default -- it would be impossible to use for most web browsing otherwise. In fact there is an argument to be made that you should not disable JavaScript because it makes your fingerprint more unique to the sites you visit (you're a Tor user with JavaScript disabled). It depends on whether you value your anonymity more than the risk of potentially being attacked by bad JavaScript.
Tor Browser is based on Firefox, and has a bunch of anti-fingerprinting measures built in to it which have been slowly upstreamed to Firefox (as well as ensuring the Firefox doesn't send anything without going through Tor -- something which historically has been hard to do as a Firefox user).
Re: BBC News launches 'dark web' Tor mirror
#300Some of BBC News' .onion neighbors are forced to constantly rotate their URLs to evade DDoS attacks (notably Empire Market). Admins constantly publish new PGP-signed links to https://dark.fail . DDoS attackers then scrape this site, shift their attacks. Sites stay online, but users are trained to expect URLs to constantly change. This has resulted in a huge spike in phishing attacks. Tor hidden services are notorious…
While it doesn't solve the problem entirely, onionbalance[1] does mean that you can have more than one server handle traffic. There's also IP load balancing.