Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tor Browser 9.5

blog.torproject.org

Post reply on HN
Print view View original

21–30 of 106 posts

Re: Tor Browser 9.5

#21

Post by MintelIE »

shadowprofile77 wrote: post #13
MintelIE wrote: post #10

I use Tor Browser for most of my day to day browsing to foil all the non-governmental corporate botnet spying. Of course I’m under no illusions that it secures you against the government. But I don’t do anything naughty so I’m not worried.

Why do you think it fails as basic security against the government? Honestly curious. And what would you suggest instead. To my knowledge many dissidents and activists around the world are specifically using TOR because it supposedly does indeed provide protection against government tracking.

It’s literally funded and made by the NSA.

Dissidents and activists have been busted using Tor and there’s always a friendly government damage control agent ready to pop up (any forum, any time of day) to remind people that Tor couldn’t possibly be backdoored or owned, it was always some other type of thing they used in parallel construction.

Over-shilling is what clued next in. You don’t get this kind of response without a massive panopticon dispatching reputation managers. Why the heck would the NSA write NSA proof software? LOL.

EDIT: this is in reply to mapgrep and his crew:

Did I say I won't use Tor Browser? Is it really necessary to put words into my mouth to make your point? I've noticed this a lot with people who are very very lightning fast, almost unbelievably fast, to defend Tor on any forum or platform on the Internet. The speed at which it occurs, and the typical over-the-top, rude, and unnecessary attempts to make people seem to say things they 100% have not.

You should apologize. Obviously the NSA has broken Tor, they made it. Forget about current funding, where'd it originate?

And why does the Tor Project publish a list of exit nodes?

Re: Tor Browser 9.5

#22

Post by seisvelas »

elliekelly wrote: post #9

I downloaded the Tor Browser a decade ago, maybe even longer, in an effort to be privacy conscious. I used it here and there but I never made the switch to using Tor by default. Some time later I remember reading the US government was tracking people, or had a list of everyone, who had simply downloaded Tor. I also vaguely remember reading about how using Tor could potentially expose you to legal risks because of the…

I highly recommend Computerphile's explanation of Onion Routing: https://www.youtube.com/watch?v=QRYzre4bf7I

After that, check out the video explaining how hidden services work.

If you want to see a simple implementation of an onion router, I built one in TypeScript: https://github.com/seisvelas/onion-router-ts

(be warned, I also did that as an exercise to learn more TypeScript. So it's not good TS. But improvements and issues are more than welcome from any TS gurus out there!)

Re: Tor Browser 9.5

#23

Post by komali2 »

shadowprofile77 wrote: post #13
MintelIE wrote: post #10

I use Tor Browser for most of my day to day browsing to foil all the non-governmental corporate botnet spying. Of course I’m under no illusions that it secures you against the government. But I don’t do anything naughty so I’m not worried.

Why do you think it fails as basic security against the government? Honestly curious. And what would you suggest instead. To my knowledge many dissidents and activists around the world are specifically using TOR because it supposedly does indeed provide protection against government tracking.

Rumors abound that the NSA runs a bunch of Tor exit nodes

Re: Tor Browser 9.5

#25

Post by [deleted] »

shadowprofile77 wrote: post #13
MintelIE wrote: post #10

I use Tor Browser for most of my day to day browsing to foil all the non-governmental corporate botnet spying. Of course I’m under no illusions that it secures you against the government. But I don’t do anything naughty so I’m not worried.

Why do you think it fails as basic security against the government? Honestly curious. And what would you suggest instead. To my knowledge many dissidents and activists around the world are specifically using TOR because it supposedly does indeed provide protection against government tracking.

[deleted]

Re: Tor Browser 9.5

#26

Post by insertnickname »

komali2 wrote: post #23
shadowprofile77 wrote: post #13

Earlier quoted context omitted.

Why do you think it fails as basic security against the government? Honestly curious. And what would you suggest instead. To my knowledge many dissidents and activists around the world are specifically using TOR because it supposedly does indeed provide protection against government tracking.

Rumors abound that the NSA runs a bunch of Tor exit nodes

It would be unreasonable to assume that they aren't. It's a cheap, easy, and low-risk way to soak up lots of interesting traffic.

Re: Tor Browser 9.5

#27

Post by teddyh »

komali2 wrote: post #23
shadowprofile77 wrote: post #13

Earlier quoted context omitted.

Why do you think it fails as basic security against the government? Honestly curious. And what would you suggest instead. To my knowledge many dissidents and activists around the world are specifically using TOR because it supposedly does indeed provide protection against government tracking.

Rumors abound that the NSA runs a bunch of Tor exit nodes

Even if this was true, it should not change anyone’s behavior; a malicious exit node should be assumed when using Tor.

I.e. either always use HTTPS sites, or .onion sites. No HTTP unencrypted sites.

Re: Tor Browser 9.5

#28

Post by taftster »

MintelIE wrote: post #10

I use Tor Browser for most of my day to day browsing to foil all the non-governmental corporate botnet spying. Of course I’m under no illusions that it secures you against the government. But I don’t do anything naughty so I’m not worried.

Right, this is important to understand. The use of Tor isn't just about subverting government information gathering. But it's just as important in the fight against corporate collection, maybe even more so.

I'm (personally) less concerned about government spying on me than I am about corporations. That's not to justify government overreach, but I don't like the prospects of corporations like google, facebook, twitter holding as much (or more) of my information as the government does.

Re: Tor Browser 9.5

#29

Post by kanox »

MintelIE wrote: post #10

I use Tor Browser for most of my day to day browsing to foil all the non-governmental corporate botnet spying. Of course I’m under no illusions that it secures you against the government. But I don’t do anything naughty so I’m not worried.

This seems very risky.

* Exit nodes might be run by malicious actors and unless you enforce always https they might snoop credentials.

* If you login to platforms like google/facebook/twitter/stock overflow it might still be possible to track you.

If you're worried that your employer is spying on you then tor can't help because they already have administrative access on your computer. I personally have a rule to never log into personal accounts from corporate devices.

Re: Tor Browser 9.5

#30

Post by vsareto »

seisvelas wrote: post #22
elliekelly wrote: post #9

I downloaded the Tor Browser a decade ago, maybe even longer, in an effort to be privacy conscious. I used it here and there but I never made the switch to using Tor by default. Some time later I remember reading the US government was tracking people, or had a list of everyone, who had simply downloaded Tor. I also vaguely remember reading about how using Tor could potentially expose you to legal risks because of the…

I highly recommend Computerphile's explanation of Onion Routing: https://www.youtube.com/watch?v=QRYzre4bf7I After that, check out the video explaining how hidden services work. If you want to see a simple implementation of an onion router, I built one in TypeScript: https://github.com/seisvelas/onion-router-ts (be warned, I also did that as an exercise to learn more TypeScript. So it's not good TS. But improvements…

I think your repo is private, I get a 404
Post reply on HN