wait! the most privacy centric iOS doesn't support Tor?! but Android does! I wonder is privacy is just Apple's PR but far from truth. The speech to text translation also they need to route via their servers. The contractors listen to recordings of Siri. Its time to unmask Apple's true face.
Tor Browser 9.5
41–50 of 106 posts
Re: Tor Browser 9.5
#42I use Tor Browser for most of my day to day browsing to foil all the non-governmental corporate botnet spying. Of course I’m under no illusions that it secures you against the government. But I don’t do anything naughty so I’m not worried.
Why do you think it fails as basic security against the government? Honestly curious. And what would you suggest instead. To my knowledge many dissidents and activists around the world are specifically using TOR because it supposedly does indeed provide protection against government tracking.
> Why do you think it fails as basic security against the government?
Tor connections against normal sites use 3 hops while they use 6 hops against onion sites. Controlling or potentially even analysing the traffic from 2 of the hops is enough to know where the user connects to (it might be 4 hops for the onion case but I am not sure). I am pretty sure that NSA has enough resources for their own nodes. I2P has a better architecture in general but it still does not solve the issue. I am looking into evaluating lokinet at the moment.
In general tor does not have a great track record. For example they took ages to upgrade from an 80-bit sha-1 truncated address scheme with dh1024 and aes128 into something more modern.
Re: Tor Browser 9.5
#43Earlier quoted context omitted.
Why do you think it fails as basic security against the government? Honestly curious. And what would you suggest instead. To my knowledge many dissidents and activists around the world are specifically using TOR because it supposedly does indeed provide protection against government tracking.
It’s literally funded and made by the NSA. Dissidents and activists have been busted using Tor and there’s always a friendly government damage control agent ready to pop up (any forum, any time of day) to remind people that Tor couldn’t possibly be backdoored or owned, it was always some other type of thing they used in parallel construction. Over-shilling is what clued next in. You don’t get this kind of response wi…
The fact that the US government, largely through Open Technology Fund, originally an arm off the State Department (via Radio Free Asia!), has arguably done more to fund core internet privacy technologies than the private sector is an indictment of the private sector, not of the U.S. government.
We should absolutely be aware of funding sources, skeptical of code written by other people, etc, but if you were to actually enforce in your life a position that you won’t use any security or privacy technology with funding ties to the USG you will quickly find yourself in quite an untenable position.
Re: Tor Browser 9.5
#44I downloaded the Tor Browser a decade ago, maybe even longer, in an effort to be privacy conscious. I used it here and there but I never made the switch to using Tor by default. Some time later I remember reading the US government was tracking people, or had a list of everyone, who had simply downloaded Tor. I also vaguely remember reading about how using Tor could potentially expose you to legal risks because of the…
I mean there are a lot of resources but they are at a very high level. I don't think much has changed. The basic idea is that with Tor, you make HTTPS connections to the "tor relay", a network of volunteers who route your traffic around the world to make it hard to track. You can use Tor in two ways: you can join the relay network and route traffic for others, or you can just use the browser and make queries. If you…
> if someone uses your exit node to post a lot of stupid crap to Reddit ...
I think there’s a lot more to worry about than reddit shitposts eg straight up criminal activity apparently coming from your router, and in way you’d have difficulty proving was tor and not you or your family.
Re: Tor Browser 9.5
#45I downloaded the Tor Browser a decade ago, maybe even longer, in an effort to be privacy conscious. I used it here and there but I never made the switch to using Tor by default. Some time later I remember reading the US government was tracking people, or had a list of everyone, who had simply downloaded Tor. I also vaguely remember reading about how using Tor could potentially expose you to legal risks because of the…
The Tor Browser is scrutinized heavily. I know that is kind of a fallacious argument, but they have a routine presence at DefCon and they are really committed to protecting people around the world. At DefCon last year, the Tor project talked about the biggest security concern as countries who monitor the entry points to the network, and the challenges with getting those IPs distributed confidentially and keeping them…
> If you don't already know, Tor does require an entry IP address list before the anonymization occurs: countries can arrest people who visit these URLs, so this is the big challenge right now.
Sorry, can you explain what this means? Would my home IP address be the "entry IP address" you're referring to?
Re: Tor Browser 9.5
#46Earlier quoted context omitted.
I mean there are a lot of resources but they are at a very high level. I don't think much has changed. The basic idea is that with Tor, you make HTTPS connections to the "tor relay", a network of volunteers who route your traffic around the world to make it hard to track. You can use Tor in two ways: you can join the relay network and route traffic for others, or you can just use the browser and make queries. If you…
How is malicious interference by exit nodes prevented for plaint-text HTTP requests?
It can't be prevented on a technological level.
However there are attempts to detect bad nodes and ban them. Since the exit node doesn't know "who" is accessing the website it can't just temper with your content. So it would be detected asymptomatically.
Re: Tor Browser 9.5
#47I use Tor Browser for most of my day to day browsing to foil all the non-governmental corporate botnet spying. Of course I’m under no illusions that it secures you against the government. But I don’t do anything naughty so I’m not worried.
This seems very risky. * Exit nodes might be run by malicious actors and unless you enforce always https they might snoop credentials. * If you login to platforms like google/facebook/twitter/stock overflow it might still be possible to track you. If you're worried that your employer is spying on you then tor can't help because they already have administrative access on your computer. I personally have a rule to neve…
Listen I'm not some Antifa here bombing the hell out of the next city over. I'm merely avoiding the botnet. How is it risky? What's the worst that could happen, I get tracked by the same people who would 100% track me without Tor Browser?
Re: Tor Browser 9.5
#48Earlier quoted context omitted.
I mean there are a lot of resources but they are at a very high level. I don't think much has changed. The basic idea is that with Tor, you make HTTPS connections to the "tor relay", a network of volunteers who route your traffic around the world to make it hard to track. You can use Tor in two ways: you can join the relay network and route traffic for others, or you can just use the browser and make queries. If you…
How is malicious interference by exit nodes prevented for plaint-text HTTP requests?
A subset of relay operators & other volunteers monitor the network for bad actors and report them to Tor Project who will then direct directory authority operators to blacklist those relays.
One of those volunteers is nusenu: https://medium.com/@nusenu/the-growing-problem-of-malicious-...
Re: Tor Browser 9.5
#49Earlier quoted context omitted.
It’s literally funded and made by the NSA. Dissidents and activists have been busted using Tor and there’s always a friendly government damage control agent ready to pop up (any forum, any time of day) to remind people that Tor couldn’t possibly be backdoored or owned, it was always some other type of thing they used in parallel construction. Over-shilling is what clued next in. You don’t get this kind of response wi…
Why do you trust literally any secure comms code?
Did you stop beating your girlfriend yet? Same question, different pose.
Re: Tor Browser 9.5
#50Earlier quoted context omitted.
I highly recommend Computerphile's explanation of Onion Routing: https://www.youtube.com/watch?v=QRYzre4bf7I After that, check out the video explaining how hidden services work. If you want to see a simple implementation of an onion router, I built one in TypeScript: https://github.com/seisvelas/onion-router-ts (be warned, I also did that as an exercise to learn more TypeScript. So it's not good TS. But improvements…
Computerphile is truly a gift to us all
It’s such an unfortunate name to use though!