41–50 of 151 posts
I'm in charge of a security for a reasonable sized company. I generally support the Tor project and the goals of having a surveillance free internet. However - if an employee would install tor browser or use tor on a company device, or a device attached to the company network, they would be fired immediately. I would then refer them to law enforcement after conducting a forensic audit. Should you make your site only…
I'm in charge of a security for a reasonable sized company. I generally support the Tor project and the goals of having a surveillance free internet. However - if an employee would install tor browser or use tor on a company device, or a device attached to the company network, they would be fired immediately. I would then refer them to law enforcement after conducting a forensic audit. Should you make your site only…
I'm in charge of a security for a reasonable sized company. I generally support the Tor project and the goals of having a surveillance free internet. However - if an employee would install tor browser or use tor on a company device, or a device attached to the company network, they would be fired immediately. I would then refer them to law enforcement after conducting a forensic audit. Should you make your site only…
Earlier quoted context omitted.
"Web" definitely meant something to people as a metaphore, for long before the internet (ex. "web of lies"). "The 'internet' is like a spider's web, but each point in the web is a different computer." vs "Tor is like an onion, where each layer of the onion represents a computer acting like a relay, in a giant network of computers, which your traffic is routed through....."
There is a scene in Shrek where he compares himself to an onion because he was emotional layers.
I'm in charge of a security for a reasonable sized company. I generally support the Tor project and the goals of having a surveillance free internet. However - if an employee would install tor browser or use tor on a company device, or a device attached to the company network, they would be fired immediately. I would then refer them to law enforcement after conducting a forensic audit. Should you make your site only…
Naive question, as I am not a security professional. Why?
For example in a hospital, there is no good reason for employee to use Tor on work computer.
CloudFlare had a much more elegant solution: the Alt-Svc HTTP header [1]. It is entirely transparent to the user. Security is guaranteed because it uses the original SSL/TLS certificate for exchange (that is, on top of the usual safety guarantees provided by a Tor hidden service). Sadly they stopped doing that a while ago [2]. If anyone has insider knowledge about the reason behind, I would be really interested to he…
Cloudflare only sends the header to clients it detects as Tor Browser. If you have tweaked your config or are running an older version, it may not detect correctly. Even if it had previously worked.
This technique is not "better than" the "Onion-Location" approach. They complement well. Use the 'Alt-Svc' header for all users with Tor Browser's user agent and send "Onion-Location" to all users. If a user decides to opt for the .onion address, they can. But they don't have to.
I'm in charge of a security for a reasonable sized company. I generally support the Tor project and the goals of having a surveillance free internet. However - if an employee would install tor browser or use tor on a company device, or a device attached to the company network, they would be fired immediately. I would then refer them to law enforcement after conducting a forensic audit. Should you make your site only…
What kind of industry do you work in where the mere act of using Tor is reasonable suspicion of a law being broken?
I am tempted to onionize my site for political (if that is the correct word) reasons. I am almost done reading The Surveillance Economy and it feels like almost an obligation to push back. (Using ProtonMail, use a large leased server in Germany at Hetzner for my routine work and writing, and using private browsing tabs when I must use Twitter or Reddit.) It looks like Onion domain hosting services are $5-$8/month, bu…
I want a short HOWTO linked from this article.
I want a short HOWTO linked from this article.