Tor best practices
digital-era.net
Tor best practices
1–10 of 59 posts
Re: Tor best practices
#2Or you can read this in its original form, as a StackOverflow answer: http://security.stackexchange.com/questions/43369/best-pract...
Re: Tor best practices
#3I don't think the article mentions it, but in addition to the tips in the article, stay away from wireless or bluetooth connections, remove the card(s) if possible... While it might seem tin foil hat, any over-the-air communication is fairly trackable (not saying wired isn't). And while your computer or device tries to connect to a network, The control packets sent out to channel 0 will even send a list of preferred networks you've connected to in the past...
Re: Tor best practices
#4I really don't understand any of the points in "Your Environment".
> Never use Tor from home, or near home. Never work on anything sensitive enough to require Tor from home, even if you remain offline. Computers have a funny habit of liking to be connected…
How exactly? The entire point of Tor is that such stuff should not matter since the first node doesn't know what you have requested.
> And while the jackboots are very unlikely to show up the same day you fire up Tor at Starbucks, they might show up the next day. I
Yeah, no. Wait, what?
> I recommend for the truly concerned to never use Tor more than 24 hours at any single physical location; after that, consider it burned and go elsewhere.
No?
Re: Tor best practices
#5Don't really like Whonix, a bunch of VMs stacked on each other for critical isolation. I'd rather use a hardware firewall box running openbsd or portal by thegrugq. What kind of RNG is being handed out by the Tor daemon Whonix VM that has no human interaction too.
Re: Tor best practices
#6I really don't understand any of the points in "Your Environment". > Never use Tor from home, or near home. Never work on anything sensitive enough to require Tor from home, even if you remain offline. Computers have a funny habit of liking to be connected… How exactly? The entire point of Tor is that such stuff should not matter since the first node doesn't know what you have requested. > And while the jackboots are…
Tor is far from perfect. Even if Tor does everything it's meant to. People can still compare when you're using your internet on Tor and when you doing activities online (on Tor). What this person is saying does make sense.
Re: Tor best practices
#7I don't think the article mentions it, but in addition to the tips in the article, stay away from wireless or bluetooth connections, remove the card(s) if possible... While it might seem tin foil hat, any over-the-air communication is fairly trackable (not saying wired isn't). And while your computer or device tries to connect to a network, The control packets sent out to channel 0 will even send a list of preferred…
FBI also once had a carrier OTA update somebody's internet usb stick to broadcast their location
Re: Tor best practices
#8I don't think the article mentions it, but in addition to the tips in the article, stay away from wireless or bluetooth connections, remove the card(s) if possible... While it might seem tin foil hat, any over-the-air communication is fairly trackable (not saying wired isn't). And while your computer or device tries to connect to a network, The control packets sent out to channel 0 will even send a list of preferred…
That is an issue but how do you combine this with not connecting from your home? I would hope that as long as you keep care with your preferred networks and only connect over Tor the idea of using lots of cafe wifi spots is better than just using your own wired internet?
Re: Tor best practices
#9I really don't understand any of the points in "Your Environment". > Never use Tor from home, or near home. Never work on anything sensitive enough to require Tor from home, even if you remain offline. Computers have a funny habit of liking to be connected… How exactly? The entire point of Tor is that such stuff should not matter since the first node doesn't know what you have requested. > And while the jackboots are…
Tor is far from perfect. Even if Tor does everything it's meant to. People can still compare when you're using your internet on Tor and when you doing activities online (on Tor). What this person is saying does make sense.
> People can still compare when you're using your internet on Tor and when you doing activities online (on Tor)
Ok, so what is the threat model in this case? (really want to understand)
Re: Tor best practices
#10I really don't understand any of the points in "Your Environment". > Never use Tor from home, or near home. Never work on anything sensitive enough to require Tor from home, even if you remain offline. Computers have a funny habit of liking to be connected… How exactly? The entire point of Tor is that such stuff should not matter since the first node doesn't know what you have requested. > And while the jackboots are…
Tor is far from perfect. Even if Tor does everything it's meant to. People can still compare when you're using your internet on Tor and when you doing activities online (on Tor). What this person is saying does make sense.
"using your internet on Tor" and "doing online activities (on Tor)" sound like the same thing to me.
But this whole article sounds to me like the author's expecting people to only ever use Tor when they want to hide something. What we should be doing is encouraging everyone to use Tor all the time for everything, delays be damned. That totally obliterates any correlative analysis.