Live data from Hacker News

Oniux: Kernel-level Tor isolation for any Linux app

blog.torproject.org

51–54 of 54 posts

Re: Oniux: Kernel-level Tor isolation for any Linux app

#51

Earlier quoted context omitted.

It's written in Rust. What would you need a C version for?

So I can read it to make sure it's not doing bad things.

"make sure it's not doing bad things" is never going to happen. Just look at the XZ attack (which is written in C) or the "The International Obfuscated C Code Contest" [1].

Also you might want to read "Reflections on Trusting Trust" [2].

[1] https://www.ioccc.org/

[2] https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_Ref...

Re: Oniux: Kernel-level Tor isolation for any Linux app

#52
post #44

Earlier quoted context omitted.

What do Tor Browser users do for YouTube or DNS? Also, what about HTTP/3?

DNS is already done by Tor. In fact, if you feed it a raw IP, it will warn in tor's output that it received an IP, which may indicate that the user has accidentally setup browsing via Tor, but DNS resolution via a normal, unsecured way. YouTube mainly throttles TOR hard and it's a bit of a fight uphill against a never ending avalanche of Captchas or a straight up service refusal. Bridges solve this, by going through…

Thanks.

> YouTube mainly throttles TOR

What I mean is, streaming media usually uses UDP (I don't know about YouTube, but I'd guess that's the case) and according to this thread, Tor routes only TCP and not UDP. So is YouTube and other streaming media being routed around Tor?

Re: Oniux: Kernel-level Tor isolation for any Linux app

#53
post #52

Earlier quoted context omitted.

DNS is already done by Tor. In fact, if you feed it a raw IP, it will warn in tor's output that it received an IP, which may indicate that the user has accidentally setup browsing via Tor, but DNS resolution via a normal, unsecured way. YouTube mainly throttles TOR hard and it's a bit of a fight uphill against a never ending avalanche of Captchas or a straight up service refusal. Bridges solve this, by going through…

Thanks. > YouTube mainly throttles TOR What I mean is, streaming media usually uses UDP (I don't know about YouTube, but I'd guess that's the case) and according to this thread, Tor routes only TCP and not UDP. So is YouTube and other streaming media being routed around Tor?

> (I don't know about YouTube, but I'd guess that's the case)

YouTube delivers video in chunks over the standard HTTPS port 443, as does Twitch. YouTube supports HTTP/3, so it will use UDP via QUIC if your browser and network also support it, but otherwise it will simply go over TCP.

Re: Oniux: Kernel-level Tor isolation for any Linux app

#54
post #52

Earlier quoted context omitted.

Thanks. > YouTube mainly throttles TOR What I mean is, streaming media usually uses UDP (I don't know about YouTube, but I'd guess that's the case) and according to this thread, Tor routes only TCP and not UDP. So is YouTube and other streaming media being routed around Tor?

> (I don't know about YouTube, but I'd guess that's the case) YouTube delivers video in chunks over the standard HTTPS port 443, as does Twitch. YouTube supports HTTP/3, so it will use UDP via QUIC if your browser and network also support it, but otherwise it will simply go over TCP.

Thanks!
Post reply on HN