A Tor proxy that runs in your browser
crypto.stanford.edu
A Tor proxy that runs in your browser
1–10 of 31 posts
Re: A Tor proxy that runs in your browser
#2> "Flash proxy" is a name that should make you think "quick" and "short-lived." Our implementation uses standard web technologies: JavaScript and WebSocket.
I get it, but there's another (widely reviled) in-browser technology that goes by the name Flash, and it's entirely plausible that this could be written with it. Sometimes you need to be able to let go of a name.
Re: A Tor proxy that runs in your browser
#3I thought I saw a similar project somewhere else on HN... interesting non the less.
Re: A Tor proxy that runs in your browser
#4that's great!
Re: A Tor proxy that runs in your browser
#5Time for a stupid question: what prevents the censor from simply blocking the facilitator? It isn't ephemeral like the "flash proxy"... so it seems like you'd have the same problem as you have with the relays.
Re: A Tor proxy that runs in your browser
#6How can I block this? For reals. I have no desire to run a Tor proxy and be shafted with CP charges.
Edit: my understanding is that this can be put into any web page and then make anyone visiting that page a Tor exit node.
Re: A Tor proxy that runs in your browser
#7How can I block this? For reals. I have no desire to run a Tor proxy and be shafted with CP charges. Edit: my understanding is that this can be put into any web page and then make anyone visiting that page a Tor exit node.
the traffic does not exit the tor network via this method. You are simply fuctioning as another intermediate node.
websockets have no ability no function as an exit node.
Re: A Tor proxy that runs in your browser
#8Time for a stupid question: what prevents the censor from simply blocking the facilitator? It isn't ephemeral like the "flash proxy"... so it seems like you'd have the same problem as you have with the relays.
It's a good question, discussed a bit in the PETS paper: https://crypto.stanford.edu/flashproxy/flashproxy.pdf (section 6). The short answer is that communicating a small amount of information outside of the censored region to a blocked facilitator is an easier problem than full connectivity.
Re: A Tor proxy that runs in your browser
#9How can I block this? For reals. I have no desire to run a Tor proxy and be shafted with CP charges. Edit: my understanding is that this can be put into any web page and then make anyone visiting that page a Tor exit node.
Same way you'd block downloading CP in general: only visit trusted sites.
Re: A Tor proxy that runs in your browser
#10Time for a stupid question: what prevents the censor from simply blocking the facilitator? It isn't ephemeral like the "flash proxy"... so it seems like you'd have the same problem as you have with the relays.
It's a good question, discussed a bit in the PETS paper: https://crypto.stanford.edu/flashproxy/flashproxy.pdf (section 6). The short answer is that communicating a small amount of information outside of the censored region to a blocked facilitator is an easier problem than full connectivity.
Yeah, it was a stupid question in that I should have read the paper ;-) Laziness on my part, sorry.
Right, their idea is to basically leverage some protocols that allow unblocked entities forward information from the client to the facilitator (which is assumed to be directly blocked always). That seems to make sense.
It seems to be that the flash proxy must be able to connect to the client directly (the client is not behind NAT), which seems like a pretty big assumption... though that might be fine in the real world use cases that they are targeting.