Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

A Tor proxy that runs in your browser

crypto.stanford.edu

Post reply on HN
Print view View original

21–30 of 31 posts

Re: A Tor proxy that runs in your browser

#21

Post by eli »

thefreeman wrote: post #15
chx wrote: post #6

How can I block this? For reals. I have no desire to run a Tor proxy and be shafted with CP charges. Edit: my understanding is that this can be put into any web page and then make anyone visiting that page a Tor exit node.

While OP is wrong about this specific implementation, is there anything stopping someone from modifying it to make you an exit node? While the authors clearly have good intentions, the basic idea of my browser relaying traffic transparently that I am not aware of is indeed disturbing.

No, I'm pretty sure that is not technically possible.

Re: A Tor proxy that runs in your browser

#22

Post by slowpoke »

chx wrote: post #6

How can I block this? For reals. I have no desire to run a Tor proxy and be shafted with CP charges. Edit: my understanding is that this can be put into any web page and then make anyone visiting that page a Tor exit node.

It makes me extremely sad - and somewhat angry - that a lot of people just associate Tor with CP and criminals. Tor enabled and helped carry out fucking revolutions. Hundreds, if not thousands of (not only) chinese dissidents use it to communicate safely. It protects lives. Tor is a blessing upon humanity, and a big, fat, thorn in the side of every oppressive government on this planet.

The fact that some individuals use Tor for accessing child pornography is sad, but that constitutes a miniscule amount of its entire traffic. Stop looking at the few bad apples and look at the big picture.

Oh, and if you're at it, watch Jacob and Roger's talk at the 29c3 as soon as it is available. They explained this awesome piece of software a bit more in detail there, amongst all the other amazing projects related to the Tor Project.

Re: A Tor proxy that runs in your browser

#23

Post by gyom »

slowpoke wrote: post #22
chx wrote: post #6

How can I block this? For reals. I have no desire to run a Tor proxy and be shafted with CP charges. Edit: my understanding is that this can be put into any web page and then make anyone visiting that page a Tor exit node.

It makes me extremely sad - and somewhat angry - that a lot of people just associate Tor with CP and criminals. Tor enabled and helped carry out fucking revolutions. Hundreds, if not thousands of (not only) chinese dissidents use it to communicate safely. It protects lives . Tor is a blessing upon humanity, and a big, fat, thorn in the side of every oppressive government on this planet. The fact that some individuals…

I agree with you about how awesome Jacob Appelbaum makes Tor sound, but you could still make a case about not wanting your computer to be used without your consent for stuff like that.

For example, as much as cancer research can benefit from extra computing power, I wouldn't want web sites to start including secret javascript code meant to "reap the spare cpu cycles" available when I visit their site.

Re: A Tor proxy that runs in your browser

#24

Post by slowpoke »

gyom wrote: post #23
slowpoke wrote: post #22

Earlier quoted context omitted.

It makes me extremely sad - and somewhat angry - that a lot of people just associate Tor with CP and criminals. Tor enabled and helped carry out fucking revolutions. Hundreds, if not thousands of (not only) chinese dissidents use it to communicate safely. It protects lives . Tor is a blessing upon humanity, and a big, fat, thorn in the side of every oppressive government on this planet. The fact that some individuals…

I agree with you about how awesome Jacob Appelbaum makes Tor sound, but you could still make a case about not wanting your computer to be used without your consent for stuff like that. For example, as much as cancer research can benefit from extra computing power, I wouldn't want web sites to start including secret javascript code meant to "reap the spare cpu cycles" available when I visit their site.

It's equally debatable whether it's okay to put stupid advertisements or tracking technology on your website - which have infinitely less positive benefits for humanity than Tor.

Anyways, my answer wasn't about Flash-Proxy at all (which is, polemics aside, indeed debatable). I was pissed about the attitude that Tor == CP, which is a dishonest fallacy thrown around by supporters of surveillance and spying.

Re: A Tor proxy that runs in your browser

#25

Post by coopdog »

psionski wrote: post #18
javis wrote: post #14

Earlier quoted context omitted.

Doesn't the requirement that the client not be behind NAT render this somewhat useless? Isn't the vast majority of the internet behind NAT?

Two words: port forwarding :) Yes, it makes using TOR a bit more difficult, but not by very much...

Plus IPv6 could drastically reduce the need for NAT (particularly in mobile where they're basically out of IPs and basically NAT the entire mobile network)

Re: A Tor proxy that runs in your browser

#26

Post by throwaway125 »

From how I understand it this is not a javascript Tor implementation at all. It's an entirely different piece of software that allows you to create a whole lot of volatile short lived proxy servers that can then be used to connect to actual tor relays. The idea being that it will be really hard for censors to block proxy servers that only exist for a short period of time.

Re: A Tor proxy that runs in your browser

#27

Post by rz2k »

slowpoke wrote: post #24
gyom wrote: post #23

Earlier quoted context omitted.

I agree with you about how awesome Jacob Appelbaum makes Tor sound, but you could still make a case about not wanting your computer to be used without your consent for stuff like that. For example, as much as cancer research can benefit from extra computing power, I wouldn't want web sites to start including secret javascript code meant to "reap the spare cpu cycles" available when I visit their site.

It's equally debatable whether it's okay to put stupid advertisements or tracking technology on your website - which have infinitely less positive benefits for humanity than Tor. Anyways, my answer wasn't about Flash-Proxy at all (which is, polemics aside, indeed debatable). I was pissed about the attitude that Tor == CP, which is a dishonest fallacy thrown around by supporters of surveillance and spying.

There are at least three actual possibilities there:

1. People afraid of being tracked down and prosecuted because someone used their exit node for criminal behavior

2. People concerned about limiting criminal behavior

3. People who want to stop free speech

Assuming #3 seems like a stretch even if it is easy to conclude that people pushing for constraints on free speech for the sake of limiting criminal behavior under-appreciate the vital importance of vigorous anonymous public discourse, even in countries without dictators.

Re: A Tor proxy that runs in your browser

#28

Post by ceol »

slowpoke wrote: post #22
chx wrote: post #6

How can I block this? For reals. I have no desire to run a Tor proxy and be shafted with CP charges. Edit: my understanding is that this can be put into any web page and then make anyone visiting that page a Tor exit node.

It makes me extremely sad - and somewhat angry - that a lot of people just associate Tor with CP and criminals. Tor enabled and helped carry out fucking revolutions. Hundreds, if not thousands of (not only) chinese dissidents use it to communicate safely. It protects lives . Tor is a blessing upon humanity, and a big, fat, thorn in the side of every oppressive government on this planet. The fact that some individuals…

> The fact that some individuals use Tor for accessing child pornography is sad, but that constitutes a miniscule amount of its entire traffic.

Do you have a citation for this? Specifically, that illegal activities in general are a minuscule amount of its traffic?

Re: A Tor proxy that runs in your browser

#29

Post by slowpoke »

rz2k wrote: post #27
slowpoke wrote: post #24

Earlier quoted context omitted.

It's equally debatable whether it's okay to put stupid advertisements or tracking technology on your website - which have infinitely less positive benefits for humanity than Tor. Anyways, my answer wasn't about Flash-Proxy at all (which is, polemics aside, indeed debatable). I was pissed about the attitude that Tor == CP, which is a dishonest fallacy thrown around by supporters of surveillance and spying.

There are at least three actual possibilities there: 1. People afraid of being tracked down and prosecuted because someone used their exit node for criminal behavior 2. People concerned about limiting criminal behavior 3. People who want to stop free speech Assuming #3 seems like a stretch even if it is easy to conclude that people pushing for constraints on free speech for the sake of limiting criminal behavior unde…

>1. People afraid of being tracked down and prosecuted because someone used their exit node for criminal behavior

Again, Flash Proxy is not an exit node, it's a bridge. It merely helps people to access the Tor network, and does not relay traffic back out (which, as far as I know, is not even technically possible). There's zero risks involved. Also, why are you not running at least a relay, anyways?

>2. People concerned about limiting criminal behavior

Limiting criminal behavior is fine, but never at the cost of essential liberties and rights. This is inarguable. People rallying against Tor for "criminal behavior" are the very same people we need Tor to protect ourselves against.

>3. People who want to stop free speech

I you[1] are such a person, I hate you and you more than deserve to have your browser turned into a powerful weapon of the very thing you want to stop.

[1] This is the general you, I'm not talking to the parent poster specifically.

Re: A Tor proxy that runs in your browser

#30

Post by Yaggo »

jcoder wrote: post #2

> "Flash proxy" is a name that should make you think "quick" and "short-lived." Our implementation uses standard web technologies: JavaScript and WebSocket. I get it, but there's another (widely reviled) in-browser technology that goes by the name Flash, and it's entirely plausible that this could be written with it. Sometimes you need to be able to let go of a name.

I like how to name implies (accidentally or not) that term "flash" is not anymore solely bound to doomed battery-eating technology from 00s but can be used as a generic word.
Post reply on HN