Live data from Hacker News

Tor Browser 12.0

blog.torproject.org

121–130 of 230 posts

Re: Tor Browser 12.0

#121

Earlier quoted context omitted.

This is one of the main reasons why I keep using Tor daily. The more people use Tor for normal browsing, the less interesting it becomes to be a Tor user, the better the anonymity for everyone else.

I also use Tor sometimes for the sole purpose of muddying up the waters for investigators.

I use it to get around many paywalls.

Re: Tor Browser 12.0

#122

I once spoke with someone who knew someone who ran an exit node in Europe. He told crazy stories with police knocking every once in a while. Also the legal structure to do that was tricky, because you want to avoid the police searching your house; you'd also like tl spread responsability on multiple shoulders. So you have to create a kind of non-profit organization and run the exit node through that. It's very hard w…

Do Not Run An Exit Node!

very few people have legitimate uses for an exit node. And it is a security nigthmare for everyone (you owning their crimes, them being at your MiTM attacks mercy, etc)

But Do Run A Tor Node!

everyone should join tor and it should become the main net, with only tor traffic.

Re: Tor Browser 12.0

#123

I once spoke with someone who knew someone who ran an exit node in Europe. He told crazy stories with police knocking every once in a while. Also the legal structure to do that was tricky, because you want to avoid the police searching your house; you'd also like tl spread responsability on multiple shoulders. So you have to create a kind of non-profit organization and run the exit node through that. It's very hard w…

Do Not Run An Exit Node! very few people have legitimate uses for an exit node. And it is a security nigthmare for everyone (you owning their crimes, them being at your MiTM attacks mercy, etc) But Do Run A Tor Node! everyone should join tor and it should become the main net, with only tor traffic.

An ISP doesn't own the crimes that an attacker sends through them.

Re: Tor Browser 12.0

#124
post #83

Earlier quoted context omitted.

If I may ask (provided you’re comfortable with disclosing) what kind of content do you find there that’s genuinely interesting?

A surprising number of "clarinet" (er clearnet spellcheck) sites have onion sites, if you use Brave and TOR it sometimes shows up a little onion in the right telling you there's an onion version available.

The regular tor browser does this too.

Nytimes.Com is an example.

Re: Tor Browser 12.0

#125

I once spoke with someone who knew someone who ran an exit node in Europe. He told crazy stories with police knocking every once in a while. Also the legal structure to do that was tricky, because you want to avoid the police searching your house; you'd also like tl spread responsability on multiple shoulders. So you have to create a kind of non-profit organization and run the exit node through that. It's very hard w…

I'm running exits since about 9 months. Have been running non exits for over a decade before. The exits are run by a non-profit (a Swiss Verein) and use the recommended setup like described in the blog post. The ISP knows it's an exit, it has a page on port 80 describing it and a PTR record that contains tor-exit.

No contact with the police till now.

If you would like to support the Tor network but don't want to run nodes yourself you can donate to one of the relay associations https://community.torproject.org/relay/community-resources/r...

Re: Tor Browser 12.0

#126
post #105

Earlier quoted context omitted.

It’s not a setting, it’s like their version of an incognito tab. You can right click a link to “open in tor”

Afaik, it does not use Tor from within the browser, but uses a proxy server into Tor. That could have changed though.

It would certainly make sense from a marketing perspective to claim it's using tor, and then have a tor-proxy service (think onion.cab) use tor for hidden services and also attempt to use tor for clearnet traffic but fail back to regular proxy if it fails.

If it were directly using tor then I'd have to agree that most people wouldn't use it. Only those that are technical enough to understand what's going on and the security aspects. But they wouldn't be using Brave for the Tor functionality, they'd be using Tor Browser.

Re: Tor Browser 12.0

#127

I once spoke with someone who knew someone who ran an exit node in Europe. He told crazy stories with police knocking every once in a while. Also the legal structure to do that was tricky, because you want to avoid the police searching your house; you'd also like tl spread responsability on multiple shoulders. So you have to create a kind of non-profit organization and run the exit node through that. It's very hard w…

Do Not Run An Exit Node! very few people have legitimate uses for an exit node. And it is a security nigthmare for everyone (you owning their crimes, them being at your MiTM attacks mercy, etc) But Do Run A Tor Node! everyone should join tor and it should become the main net, with only tor traffic.

Well, I’m going to burn some karma by agreeing with you.

Running an exit node is a bit like operating a no questions asked gun shop in downtown (some deprived city).

Sure, there’s perfectly legitimate reasons to own and therefore sell a gun to someone, but that particular shop will be in the business of facilitating crime - and that’s a bad thing and therefore not a moral occupation.

Re: Tor Browser 12.0

#128

Earlier quoted context omitted.

This is one of the main reasons why I keep using Tor daily. The more people use Tor for normal browsing, the less interesting it becomes to be a Tor user, the better the anonymity for everyone else.

I also use Tor sometimes for the sole purpose of muddying up the waters for investigators.

Similarly, I use it to train my internal neural net to better answer Cloudflare CAPTCHAs.

Re: Tor Browser 12.0

#129

I once spoke with someone who knew someone who ran an exit node in Europe. He told crazy stories with police knocking every once in a while. Also the legal structure to do that was tricky, because you want to avoid the police searching your house; you'd also like tl spread responsability on multiple shoulders. So you have to create a kind of non-profit organization and run the exit node through that. It's very hard w…

Do Not Run An Exit Node! very few people have legitimate uses for an exit node. And it is a security nigthmare for everyone (you owning their crimes, them being at your MiTM attacks mercy, etc) But Do Run A Tor Node! everyone should join tor and it should become the main net, with only tor traffic.

> But Do Run A Tor Node!

Just a word of caution, while running a non-exit node is obviously safer from a legal point of view, the entire list of active tor nodes isn’t secret, and there are enough people in the world that do not understand how tor works that the chance is non-zero that you’ll still end up on a block list somewhere for simply being a “tor node”, even though you never let any of the tor traffic out on the Internet.

I know for a fact this can happen because it happened to me.

Re: Tor Browser 12.0

#130
post #109

Earlier quoted context omitted.

A colleague at a former academic job was questioned by campus police because he was one of a handful of people on the university network connected to TOR when a bomb threat was submitted (I forget how, though) from an IP address running a TOR exit node. Bomb threats from students were pretty common during exams, so after the cops saw that it was our very privacy conscious dev ops guy they didn't pursue him as a suspe…

Sometimes it goes the other way too. In my high school, a handful of kids wore all black every day. They were harmless valley girls/guys if you spoke with them. I figured they _wanted_ to be seen as a threat. Why would someone make a legit bomb threat? Isn't the point of the bomb for it to explode?

I suppose some people might just want to destroy infrastructure and not kill people directly (give people an opportunity to evacuate).
Post reply on HN