Tor Browser 10

#1

Post by Sami_Lehtinen » Wed, Sep 23, 2020, 8:21 AM UTC

Tor Browser 10
blog.torproject.org

Re: Tor Browser 10

#2

Post by nobodyshere » Wed, Sep 23, 2020, 9:05 AM UTC

You are not authorized to access this page.

edit: it finally became available a bit later

Re: Tor Browser 10

#3

Post by lysp » Wed, Sep 23, 2020, 10:17 AM UTC

nobodyshere wrote: post #2

You are not authorized to access this page. edit: it finally became available a bit later

I had the same issue.

A simple refresh after a second or two fixed it.

Re: Tor Browser 10

#4

Post by merlinscholz » Wed, Sep 23, 2020, 10:22 AM UTC

Is it worth it running the Tor Browser without Tor itself if I wanted a Firefox version without Mozilla, pocket and tracking?

Re: Tor Browser 10

#5

Post by nisuni » Wed, Sep 23, 2020, 10:26 AM UTC

What's the current status of Tor? I remember seeing in the past many de-anonymizing attacks against it.

Re: Tor Browser 10

#6

Post by Ayesh » Wed, Sep 23, 2020, 10:33 AM UTC

merlinscholz wrote: post #4

Is it worth it running the Tor Browser without Tor itself if I wanted a Firefox version without Mozilla, pocket and tracking?

Yes. It disables many (all?) mozilla integrations such as password manager and intermediate certificate preload.

I prefer to use the story network with standard Firefox because I value the mozilla features except for Pocket.

Re: Tor Browser 10

#7

Post by als0 » Wed, Sep 23, 2020, 10:53 AM UTC

nisuni wrote: post #5

What's the current status of Tor? I remember seeing in the past many de-anonymizing attacks against it.

I think it remains the best in class for private browsing. They have to make difficult trade-offs that achieve acceptable levels of performance while not leaking metadata like a sieve. They do also have a good track record of handling security vulnerabilities.

For the average user, the greatest threat is actually everything outside the Tor browser. For example, downloading certain files using Tor, then opening it in another application that leaks your address to other parties (e.g. certain video players). The chance of this happening might be a lot higher on a Windows system. Another big mistake is funneling unsanitized traffic through a Tor SOCKS proxy, because many applications leak their addresses.

It's also worth mentioning that Tor still allows plain HTTP between the exit node and the destination website, so an ordinary user may not realize that they might be sending plaintext data.

For people who may be targeted by governments, those scenarios are vastly more complicated and depend on how much of a prize you are. Tor's strength relies in numbers and on the uncooperative nature between certain countries. There will certainly be more traffic analysis based attacks.

Re: Tor Browser 10

#8

Post by encom » Wed, Sep 23, 2020, 11:09 AM UTC

Been using Tor a lot more, since Youtube started disallowing danes access to nearly all music. Get bent, Google.

Re: Tor Browser 10

#9

Post by williamtwild » Wed, Sep 23, 2020, 11:12 AM UTC

encom wrote: post #8

Been using Tor a lot more, since Youtube started disallowing danes access to nearly all music. Get bent, Google.

You can yell at google all you want but ultimately it’s the rights holders who push this initiative

Re: Tor Browser 10

#10

Post by merlinscholz » Wed, Sep 23, 2020, 11:13 AM UTC

Ayesh wrote: post #6

merlinscholz wrote: post #4

Is it worth it running the Tor Browser without Tor itself if I wanted a Firefox version without Mozilla, pocket and tracking?

Yes. It disables many (all?) mozilla integrations such as password manager and intermediate certificate preload. I prefer to use the story network with standard Firefox because I value the mozilla features except for Pocket.

Is there an extra fork for de-tored Tor Browser or do you just have to live with the warning that Tor is disabled?

I've heard that Whonix makes a custom tor based browser but I don't think it is supported anymore.