Gives me a "You are not authorized to access this page." response :/ Edit: nvm it is working now.
Hopefully they are better at making safe browsers than managing weblogs.
Tor Browser 9.5
71–80 of 106 posts
Re: Tor Browser 9.5
#72"Onion Location" and "Onion Names" are very welcomed improvements. Not having memorable names makes it tough for people that use a non-persistent OS for Tor. I'm all for creating more accessible URLs.
On the topic of using Tor with a non-persistent OS, what I'd really like to see on that front is a federated encrypted bookmarking sync service integrated into the browser. Would be really neat if you could "sign-in" to the browser using a human-memorizable identifier to restore bookmarks and other settings.
Obviously that opens up additional attack surface for de-anonymization attacks, but I think it could be done reasonably securely given sufficient effort. (Hashing and key-stretching the login credentials, fetching bookmarks over a separate Tor circuit, storing the encrypted payload in a distributed database rather than a centralized server, etc.)
Done right, a system like that could potentially even lead to an open standard for synchronizing bookmarks, passwords, and other settings across different browsers.
Re: Tor Browser 9.5
#73I understand the concept of Tor but since the government is actively watching, it doesn't really fit the usecase if I understand correctly. From a privacy point of view, couldn't you use multiple VPNs?
> From a privacy point of view, couldn't you use multiple VPNs? I don't see what could be gained from nesting VPNs because you're identifying yourself to the innermost VPN. Tor is designed so that exit nodes don't know who you are.
Say you did 5 vpns, you'd need all 5 companies to respond correct?
I imagine you could pick a few Anti US government VPNs and at least 1 wouldn't cooperate.
Re: Tor Browser 9.5
#74I'm confused about how the human-readable domain names work. Are they just hard-coding certain addresses in the browser itself?
I believe they are being done with rule sets for HTTPS Everywhere which is shipped with Tor Browser Bundle.
Re: Tor Browser 9.5
#75Re: Tor Browser 9.5
#76My main takeaway is that Tor is introducing a new domain names suffix: .tor.onion
For information, there was a similar initiative by Namecoin with .bit.onion: https://www.namecoin.org/docs/tor-resolution/ncprop279/stemn...
Re: Tor Browser 9.5
#77Earlier quoted context omitted.
No, it's the IP of the first relay. Tor works pretty much like this: You -> Relay 1 -> Relay 2 -> Relay 3 -> The website Each arrow is an encrypted connection. The content of the exchange on a single arrow is the address of the next hop and the query of the next hop. Thanks to this: - Relay 1 only knows you're going through Relay 2 - Relay 2 doesn't know who's asking (you) but knows it passed through Relay 1 and is g…
Do you know if GDPR prevents EU countries from obtaining IP logs for Amazon zones located there? I was hoping I could spin up an EC2 VPN in Europe and feel more secure that my IP logs can't be obtained by the US gov't. I use RunBox for email in Norway, which has the strictest privacy laws, but there is no AWS zone there. Any thoughts? Thanks.
Maybe through the UKUSA agreement or similar.
https://en.m.wikipedia.org/wiki/UKUSA_Agreement
Re: Tor Browser 9.5
#78Earlier quoted context omitted.
How is malicious interference by exit nodes prevented for plaint-text HTTP requests?
I would have to say "it's not".. anything non-encrypted you risk being manipulated by a node of the TOR network. I bet there are people who act as relays just to try to sniff out any good non-HTTPS traffic.. although, I suppose generally anyone using TOR is mostly aware of this so there's probably not that much to gain. Complete side note.. but this just reminds me of back when I was in college in the late 90s, and o…
Pretty sure some switches (to this day) can be tricked into doing similar. eg send them a few specially crafted packets, and they fall back into broadcasting ~everything like a hub for some period of time.
Not from the point of view of "legal intercept" stuff, more like "switch gets confused and doesn't know how to route, so broadcasts as a workaround".
Re: Tor Browser 9.5
#79Earlier quoted context omitted.
No, it's the IP of the first relay. Tor works pretty much like this: You -> Relay 1 -> Relay 2 -> Relay 3 -> The website Each arrow is an encrypted connection. The content of the exchange on a single arrow is the address of the next hop and the query of the next hop. Thanks to this: - Relay 1 only knows you're going through Relay 2 - Relay 2 doesn't know who's asking (you) but knows it passed through Relay 1 and is g…
Do you know if GDPR prevents EU countries from obtaining IP logs for Amazon zones located there? I was hoping I could spin up an EC2 VPN in Europe and feel more secure that my IP logs can't be obtained by the US gov't. I use RunBox for email in Norway, which has the strictest privacy laws, but there is no AWS zone there. Any thoughts? Thanks.
The US CLOUD Act was designed specifically to enable US gov agencies to access that information:
https://en.wikipedia.org/wiki/CLOUD_Act
So, don't use EC2 or stuff hosted by other US companies for things to you want to keep private from the US gov.
Also note the US gov shares intelligence with other countries, as mentioned by a sibling post.
Re: Tor Browser 9.5
#80I'm amazing how well youtube works when using tor. I would have assumed it would vomit captchas like the rest of Google but it doesn't.
Youtube works for you using Tor?
It's never worked for me. Just shows a page with the Noscript "this is being blocked" logo.
Maybe you turned off Noscript?