7 ms·

I know there are good reasons why it's not fully secure, but I'd really like to be able to access `.onion` addresses in my regular browser over TOR and everythi

I know there are good reasons why it's not fully secure, but I'd really like to be able to access `.onion` addresses in my regular browser over TOR and everything else directly as usual. In _this_ I'm not over-worried about the risk of deanonymisation as my aim is on one hand access to resources I don't have access to now and on the other hand legitimisation of TOR as something that anyone could reasonably use, even (or especially!) if they have "nothing to hide".

deleted 7y ago
[deleted]
elagost 7y ago
The way to do that is just to use Tor Browser as your regular browser.
- ivankolev 7y ago
  I know it is based on Firefox, do they keep updated with upstream?
  - Santosh83 7y ago
    Yes, they base Tor browser upon the latest Firefox ESR so it has the same security fixes as that...
- Phlogi 7y ago
  No, because the Tor Browser sends all traffic through the tor network and exit nodes.
  - pbhjpbhj 7y ago
    Why is that bad, per se? In practice some sites drop Tor connections, and localisations come through wrong, but that doesn't seem to be why you said "no".
    - in1tiate 7y ago
      In my experience, the limiting factor is speed. Tor is not exactly the fastest protocol in the world, and while streaming video over Tor has gotten better over time, it's still not what I'd call ideal. For regular browsing, the loss of speed is inconvenient enough to annoy the average user, myself included.
      - pbhjpbhj 7y ago
        I've used tor-browser and Brave's tor mode quite a bit. I've not really had problems with speed nor playing 480p video (if sites default to higher res it's sometimes a problem). Captchas on some sites, for sure, sometimes a different route will fix it. Usually mainstream sites either block tor or work properly.
    - xeeeeeeeeeeenu 7y ago
      It actually reduces the security because exit nodes are likely to MITM you.
      - yjftsjthsd-h 7y ago
        So install an extension to block non-HTTPS pages and you're golden
        hombre_fatal 7y ago
        fwiw, Tor Browser comes with HTTPS Everywhere, though you need to click the add-on's icon and enable "Encrypt All Sites Eligible" to block non-HTTPS.
    - jandrese 7y ago
      Hope you like solving CAPCHAs, because you're going to be doing a lot of that. And you can forget about searching with Google. Also you'll learn to hate Cloudflare as they straight up block you from so many websites. And don't even think about trying to sign up for some free service like an email account or game account. Your account will be flagged before you finish thinking up your username.
- swirepe 7y ago
  I do this. Most of my life is just copy-pasting from stack overflow, so speed isn't a problem.
snodnipper 7y ago
you can download the brave.com browser for desktop, which supports Tor. After creating a Tor tab I could view https://www.bbcnewsv2vjtpsuy.onion/ https://www.bbcnewsv2vjtpsuy.onion/ without issue
- ColanR 7y ago
  That is fantastic. I might finally make the switch over from firefox.
- edm0nd 7y ago
  You should not use Brave Browser to access .onion websites. It makes you easier to target and identify and you stand out. Tor Browser has millions of active daily users VS Brave Browser has only a very small amount.
  - superkuh 7y ago
    Sometimes that's okay. Sometimes you don't care about privacy and just want to use a network system where people actually own their domain names instead of lease them on the whim of a corporation.
JackeJR 7y ago
If you have installed tor on your local machine, you can use an add on like proxyswitch omega (firefox and chrome) to redirect all onion websites. For a network wide approach, you will need to set up PAC and a network accessible tor proxy. The PAC would have a rule that redirects all .onion hosts to the network accessible tor proxy.
rahuldottech 7y ago
You can do this! There exist several tor2web proxies that allow you to do this. Simply go to tor_url.onion.ws in a regular browser. Keep in mind that this only protects publishers, not those accessing the website. More info: https://www.tor2web.org/ https://www.tor2web.org/
- apecat 7y ago
  These proxies can appear useful, but I'm just going to drop by here to say that this a particularly bad idea to spread among non-technical people. I've seen these proxies bleed into more problematic Tor use cases among vulnerable individuals. Defaults matter, and as technical people we should assume a bit of 'do no harm' moral responsibility for people who seek our advice. Tor Browser is painstakingly maintained to be fit for its specific purpose. If you're not authorized to install Tor Browser on a device and to emit Tor traffic on the network you're using, you generally shouldn't access Tor there. Anyone using Tor to access resources that might get them in trouble in the country they're in should look into proper operational security with Tor Project-provided infrastructure like bridges.[1] The special purpose Tails operating system can be used with bootable USB memory on common hardware like laptops without leaving a trace.[2] 1 - https://www.torproject.org/docs/bridges.html.en https://www.torproject.org/docs/bridges.html.en 2 - https://tails.boum.org/ https://tails.boum.org/
- LinuxBender 7y ago
  These do not (yet) support version 3 of Tor which is the current version.
pbhjpbhj 7y ago
Brave browser integrates Tor browsing, might be worth trying for you.
PUSH_AX 7y ago
You can do this in Firefox. Open about:config and search "dotonion". Toggle it. The other arrangements are left up to you.
- Santosh83 7y ago
  But this will need you to start the Tor deamon separately and configure the two I guess? Not as simple as just using Tor browser, or a Tor tab in Brave...
  - theelous3 7y ago
    It's pretty straightforward. 1. Run the service. 2. Disable blocking onion in about:config. 3. In firefox set manual proxy and enable proxy dns for socks5. Done :D Takes all of two mins.
    - jandrese 7y ago
      Even better you can start Firefox with the profile manager and have one profile configured for TOR and the other for normal browsing. That said, it's generally better to run the official TOR Browser instead. It has security nerds working over every aspect of it to make it as anonymous as reasonably possible. Deanonymization is shockingly powerful in the age of big data.
      - theelous3 7y ago
        Agreed. I just switch ff to proxy when I want to bypass isp blocks for tpb and so on really. If you want to be anon, use tor.
  - deleted 7y ago
    [deleted]
  - PUSH_AX 7y ago
    Hence "The other arrangements are left up to you." Also OP specified he wasn't concerned with deanonymization.
daurnimator 7y ago
I set this up at one point. I should try and find the config again....
- daurnimator 7y ago
  This uses the linux specific TPROXY mechanism, if your desktop doesn't run linux you'll need to figure out the alternative. In /etc/tor/torrc: DNSPort 127.191.0.1:53 TransPort 9040 TransProxyType TPROXY AutomapHostsOnResolve 1 Add iptables rules: iptables -t mangle -A PREROUTING -d 127.192.0.0/10 -j TPROXY --on-ip 127.0.0.1 --on-port 9040 -p tcp iptables -t mangle -A PREROUTING -d 127.192.0.0/10 -j TPROXY --on-ip 127.0.0.1 --on-port 9040 -p udp Make sure you start tor with relevant capabilities (I use systemd, so here is my override snippet): [Service] AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_NET_ADMIN Split horizon dns to send .onion lookups via the tor daemon. e.g. my dnsmasq config contains server=/onion/127.191.0.1 Note that some programs might need some coercing. e.g. firefox needs network.dns.blockDotOnion set to false in about:config (see https://twitter.com/mrphs/status/708548201800982528 https://twitter.com/mrphs/status/708548201800982528)
chewz 7y ago
Privacy Browser on Android does that - you can choose which sites are accessed over Tor and a lot more (searching with DDG via Tor, access Facebooks onion address).. Highly configurable.. https://f-droid.org/en/packages/com.stoutner.privacybrowser.standard/ https://f-droid.org/en/packages/com.stoutner.privacybrowser.... https://www.stoutner.com/privacy-browser/ https://www.stoutner.com/privacy-browser/
apecat 7y ago
You absolutely should use Tor for regular non-logged in browsing if you can bear the slowness. Exit bandwidth is limited, but I'd say being a needle in the haystack of people who actually need the privacy is a net benefit. I'd just really advise against touching Tor with a regular browser. For starters, you shouldn't browse Tor without blocking JavaScript by default. Hogging the bandwidth needed for video is also where 'normal use' turns problematic for the people who actually rely on Tor for personal safety. Tor Browser is painstakingly maintained to make it suitable for Tor. Even Brave's Tor mode is more fit for purpose than proxying Tor manually. I'd also argue that it's better for the anonymity of all to use a browser prepared to avoid fingerprinting.
- jandrese 7y ago
  Seems like you are being the haystack instead of the needle in this case.
  - mandelbrotwurst 7y ago
    Well, that or he is a rare strand of hay in a stack made mostly of needles. (I'm stretching the analogy to point out that you are correct that he is providing cover [the hay], but that most of the traffic currently is of the type that the surveilling entity is looking for [the needles]).
    - deleted 7y ago
      [deleted]
- bogomipz 7y ago
  >"For starters, you shouldn't browse Tor without blocking JavaScript by default." Could you say why this is recommended?
  - tomcooks 7y ago
    Because JS might be used to leverage technology that can give clues on your browser and connection, it's in general one less open hole to think about when trying to stay as anonymous as possible
NilsIRL 7y ago
You can use torsocks https://gitweb.torproject.org/torsocks.git https://gitweb.torproject.org/torsocks.git
justinmchase 7y ago
I think the Brave Browser has this capability. It at least will allow you to create Private + Tor windows.
p4bl0 7y ago
You can use a browser extension such as foxyproxy to specify proxy settings based on url patterns. Just tell it to use the SOCKS proxy of the Tor daemon for .onion addresses, and the I2P proxy for .i2p adresses for example.

deleted 7y ago

[deleted]

elagost 7y ago

The way to do that is just to use Tor Browser as your regular browser.

ivankolev 7y ago
I know it is based on Firefox, do they keep updated with upstream?
- Santosh83 7y ago
  Yes, they base Tor browser upon the latest Firefox ESR so it has the same security fixes as that...
Phlogi 7y ago
No, because the Tor Browser sends all traffic through the tor network and exit nodes.
- pbhjpbhj 7y ago
  Why is that bad, per se? In practice some sites drop Tor connections, and localisations come through wrong, but that doesn't seem to be why you said "no".
  - in1tiate 7y ago
    In my experience, the limiting factor is speed. Tor is not exactly the fastest protocol in the world, and while streaming video over Tor has gotten better over time, it's still not what I'd call ideal. For regular browsing, the loss of speed is inconvenient enough to annoy the average user, myself included.
    - pbhjpbhj 7y ago
      I've used tor-browser and Brave's tor mode quite a bit. I've not really had problems with speed nor playing 480p video (if sites default to higher res it's sometimes a problem). Captchas on some sites, for sure, sometimes a different route will fix it. Usually mainstream sites either block tor or work properly.
  - xeeeeeeeeeeenu 7y ago
    It actually reduces the security because exit nodes are likely to MITM you.
    - yjftsjthsd-h 7y ago
      So install an extension to block non-HTTPS pages and you're golden
      - hombre_fatal 7y ago
        fwiw, Tor Browser comes with HTTPS Everywhere, though you need to click the add-on's icon and enable "Encrypt All Sites Eligible" to block non-HTTPS.
  - jandrese 7y ago
    Hope you like solving CAPCHAs, because you're going to be doing a lot of that. And you can forget about searching with Google. Also you'll learn to hate Cloudflare as they straight up block you from so many websites. And don't even think about trying to sign up for some free service like an email account or game account. Your account will be flagged before you finish thinking up your username.
swirepe 7y ago
I do this. Most of my life is just copy-pasting from stack overflow, so speed isn't a problem.

snodnipper 7y ago

you can download the brave.com browser for desktop, which supports Tor. After creating a Tor tab I could view https://www.bbcnewsv2vjtpsuy.onion/ https://www.bbcnewsv2vjtpsuy.onion/ without issue

ColanR 7y ago
That is fantastic. I might finally make the switch over from firefox.
edm0nd 7y ago
You should not use Brave Browser to access .onion websites. It makes you easier to target and identify and you stand out. Tor Browser has millions of active daily users VS Brave Browser has only a very small amount.
- superkuh 7y ago
  Sometimes that's okay. Sometimes you don't care about privacy and just want to use a network system where people actually own their domain names instead of lease them on the whim of a corporation.

JackeJR 7y ago

If you have installed tor on your local machine, you can use an add on like proxyswitch omega (firefox and chrome) to redirect all onion websites. For a network wide approach, you will need to set up PAC and a network accessible tor proxy. The PAC would have a rule that redirects all .onion hosts to the network accessible tor proxy.

rahuldottech 7y ago

You can do this! There exist several tor2web proxies that allow you to do this. Simply go to tor_url.onion.ws in a regular browser. Keep in mind that this only protects publishers, not those accessing the website. More info: https://www.tor2web.org/ https://www.tor2web.org/

apecat 7y ago
These proxies can appear useful, but I'm just going to drop by here to say that this a particularly bad idea to spread among non-technical people. I've seen these proxies bleed into more problematic Tor use cases among vulnerable individuals. Defaults matter, and as technical people we should assume a bit of 'do no harm' moral responsibility for people who seek our advice. Tor Browser is painstakingly maintained to be fit for its specific purpose. If you're not authorized to install Tor Browser on a device and to emit Tor traffic on the network you're using, you generally shouldn't access Tor there. Anyone using Tor to access resources that might get them in trouble in the country they're in should look into proper operational security with Tor Project-provided infrastructure like bridges.[1] The special purpose Tails operating system can be used with bootable USB memory on common hardware like laptops without leaving a trace.[2] 1 - https://www.torproject.org/docs/bridges.html.en https://www.torproject.org/docs/bridges.html.en 2 - https://tails.boum.org/ https://tails.boum.org/
LinuxBender 7y ago
These do not (yet) support version 3 of Tor which is the current version.

pbhjpbhj 7y ago

Brave browser integrates Tor browsing, might be worth trying for you.

PUSH_AX 7y ago

You can do this in Firefox. Open about:config and search "dotonion". Toggle it. The other arrangements are left up to you.

Santosh83 7y ago
But this will need you to start the Tor deamon separately and configure the two I guess? Not as simple as just using Tor browser, or a Tor tab in Brave...
- theelous3 7y ago
  It's pretty straightforward. 1. Run the service. 2. Disable blocking onion in about:config. 3. In firefox set manual proxy and enable proxy dns for socks5. Done :D Takes all of two mins.
  - jandrese 7y ago
    Even better you can start Firefox with the profile manager and have one profile configured for TOR and the other for normal browsing. That said, it's generally better to run the official TOR Browser instead. It has security nerds working over every aspect of it to make it as anonymous as reasonably possible. Deanonymization is shockingly powerful in the age of big data.
    - theelous3 7y ago
      Agreed. I just switch ff to proxy when I want to bypass isp blocks for tpb and so on really. If you want to be anon, use tor.
- deleted 7y ago
  [deleted]
- PUSH_AX 7y ago
  Hence "The other arrangements are left up to you." Also OP specified he wasn't concerned with deanonymization.

daurnimator 7y ago

I set this up at one point. I should try and find the config again....

daurnimator 7y ago
This uses the linux specific TPROXY mechanism, if your desktop doesn't run linux you'll need to figure out the alternative. In /etc/tor/torrc: DNSPort 127.191.0.1:53 TransPort 9040 TransProxyType TPROXY AutomapHostsOnResolve 1 Add iptables rules: iptables -t mangle -A PREROUTING -d 127.192.0.0/10 -j TPROXY --on-ip 127.0.0.1 --on-port 9040 -p tcp iptables -t mangle -A PREROUTING -d 127.192.0.0/10 -j TPROXY --on-ip 127.0.0.1 --on-port 9040 -p udp Make sure you start tor with relevant capabilities (I use systemd, so here is my override snippet): [Service] AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_NET_ADMIN Split horizon dns to send .onion lookups via the tor daemon. e.g. my dnsmasq config contains server=/onion/127.191.0.1 Note that some programs might need some coercing. e.g. firefox needs network.dns.blockDotOnion set to false in about:config (see https://twitter.com/mrphs/status/708548201800982528 https://twitter.com/mrphs/status/708548201800982528)

chewz 7y ago

Privacy Browser on Android does that - you can choose which sites are accessed over Tor and a lot more (searching with DDG via Tor, access Facebooks onion address).. Highly configurable.. https://f-droid.org/en/packages/com.stoutner.privacybrowser.standard/ https://f-droid.org/en/packages/com.stoutner.privacybrowser.... https://www.stoutner.com/privacy-browser/ https://www.stoutner.com/privacy-browser/

apecat 7y ago

You absolutely should use Tor for regular non-logged in browsing if you can bear the slowness. Exit bandwidth is limited, but I'd say being a needle in the haystack of people who actually need the privacy is a net benefit. I'd just really advise against touching Tor with a regular browser. For starters, you shouldn't browse Tor without blocking JavaScript by default. Hogging the bandwidth needed for video is also where 'normal use' turns problematic for the people who actually rely on Tor for personal safety. Tor Browser is painstakingly maintained to make it suitable for Tor. Even Brave's Tor mode is more fit for purpose than proxying Tor manually. I'd also argue that it's better for the anonymity of all to use a browser prepared to avoid fingerprinting.

jandrese 7y ago
Seems like you are being the haystack instead of the needle in this case.
- mandelbrotwurst 7y ago
  Well, that or he is a rare strand of hay in a stack made mostly of needles. (I'm stretching the analogy to point out that you are correct that he is providing cover [the hay], but that most of the traffic currently is of the type that the surveilling entity is looking for [the needles]).
  - deleted 7y ago
    [deleted]
bogomipz 7y ago
>"For starters, you shouldn't browse Tor without blocking JavaScript by default." Could you say why this is recommended?
- tomcooks 7y ago
  Because JS might be used to leverage technology that can give clues on your browser and connection, it's in general one less open hole to think about when trying to stay as anonymous as possible

NilsIRL 7y ago

You can use torsocks https://gitweb.torproject.org/torsocks.git https://gitweb.torproject.org/torsocks.git

justinmchase 7y ago

I think the Brave Browser has this capability. It at least will allow you to create Private + Tor windows.

p4bl0 7y ago

You can use a browser extension such as foxyproxy to specify proxy settings based on url patterns. Just tell it to use the SOCKS proxy of the Tor daemon for .onion addresses, and the I2P proxy for .i2p adresses for example.