12 ms·
Tor Browser 10
- nobodyshere 6y agoYou are not authorized to access this page. edit: it finally became available a bit later
- lysp 6y agoI had the same issue. A simple refresh after a second or two fixed it.
- abdullahkhalids 6y agoMy workplace has it blocked - as well as standard Tor traffic. Have to use a bridge to access Tor at work. Yesterday, I made them unblock amnesty international's website.
- jerheinze 6y agohttps://web.archive.org/web/2020/https://blog.torproject.org/new-release-tor-browser-100 https://web.archive.org/web/2020/https://blog.torproject.org... should work.
- merlinscholz 6y agoIs it worth it running the Tor Browser without Tor itself if I wanted a Firefox version without Mozilla, pocket and tracking?
- Ayesh 6y agoYes. It disables many (all?) mozilla integrations such as password manager and intermediate certificate preload. I prefer to use the story network with standard Firefox because I value the mozilla features except for Pocket.
- merlinscholz 6y agoIs there an extra fork for de-tored Tor Browser or do you just have to live with the warning that Tor is disabled? I've heard that Whonix makes a custom tor based browser but I don't think it is supported anymore.
- ryankrage77 6y agoWaterfox is a decent de-Mozzila'd fork of Firefox
- the_duke 6y agoI adapted a user.js template [1] that hardens Firefox by disabling a lot of features, including disabling Mozilla products like Pocket. By default it is very strict though, so you will probably want to go through the config setting by setting and relax it a bit. Like enabling Webassembly and the search engine integration of the URL bar. Most settings have inline comments explaining what they do and why they are chosen. [1] https://github.com/pyllyukko/user.js https://github.com/pyllyukko/user.js
- pvg 6y agoNo. It's a hacked up, out of date, insecure version of Firefox. It is the opposite of worth it to ever run Tor Browser.
- gruez 6y agoI'm not sure where you got the idea that it's out of date. It's based on Firefox ESR and is kept up to date with upstream patches. I'm also not sure how you came to the conclusion that it's "hacked up", considering many of its privacy enhancing patches made it into Firefox.
- pvg 6y agoESR is basically a stripped and reconfigured browser for organizational deployments where the trade-offs and defaults are geared towards organizational efficiency and management issues, not individual security and privacy. It pretty much says so right on the tin. It's a weird thing to use that as a starting point for a supposedly security and privacy-focused browser. That's before they add their own cruft. Tor Browser is the browser equivalent of adding sparklers around the gas tank of a Ford Pinto and then claiming you've now got a vehicle uniquely suited for demolition derbies and bank robberies.
- birksherty 6y agoYes. There is SecBrowser from Whonix which is actually a guide do to exactly that. https://www.whonix.org/wiki/SecBrowser https://www.whonix.org/wiki/SecBrowser
- December_Stars 6y agoThere's also LibreWolf, which has a flatpak/AppImage and is more up to date with the latest Firefox - https://gitlab.com/librewolf-community/browser https://gitlab.com/librewolf-community/browser
- blendergeek 6y agoI use GNU Icecat [1]. It is Firefox ESR rebranded, without Mozilla, tracking, pocket, etc. Please note that it does come with some fairly opinionated addons. LibreJS blocks all nonfree javascript for example. You can of course disable these addons if you find them too cumbersome. [1] https://www.gnu.org/software/gnuzilla/ https://www.gnu.org/software/gnuzilla/
- nisuni 6y agoWhat's the current status of Tor? I remember seeing in the past many de-anonymizing attacks against it.
- als0 6y agoI think it remains the best in class for private browsing. They have to make difficult trade-offs that achieve acceptable levels of performance while not leaking metadata like a sieve. They do also have a good track record of handling security vulnerabilities. For the average user, the greatest threat is actually everything outside the Tor browser. For example, downloading certain files using Tor, then opening it in another application that leaks your address to other parties (e.g. certain video players). The chance of this happening might be a lot higher on a Windows system. Another big mistake is funneling unsanitized traffic through a Tor SOCKS proxy, because many applications leak their addresses. It's also worth mentioning that Tor still allows plain HTTP between the exit node and the destination website, so an ordinary user may not realize that they might be sending plaintext data. For people who may be targeted by governments, those scenarios are vastly more complicated and depend on how much of a prize you are. Tor's strength relies in numbers and on the uncooperative nature between certain countries. There will certainly be more traffic analysis based attacks.
- pabs3 6y agoThere are some ways to mitigate some of the threats that you mention. Using Qubes or Whonix could prevent network access to other programs. The unencrypted requests can be blocked by turning on the EASE option in the HTTPS-Everywhere preferences. Tor doesn't have any way to protect against global adversaries performing timing analysis or attacks though.
- als0 6y agoYeah I'm surprised HTTPSEverywhere with EASE isn't a part of the Tor browser. Maybe a contributor on here can comment?
- 6y ago
- encom 6y agoBeen using Tor a lot more, since Youtube started disallowing danes access to nearly all music. Get bent, Google.
- williamtwild 6y agoYou can yell at google all you want but ultimately it’s the rights holders who push this initiative
- encom 6y agoAll of them at once, for some reason, or is Google just covering their ass? I heard there was some boring lawyer standoff between Google and KODA, the danish music cartel, but the Google blockade goes way beyond danish music. I've seen Russian music blocked even. [1] But I see your point, though I'm not sure who is more unlikeable, Google or the music industry. Actually, let it never be said that I'm not fair: They can all get bent. [1] Never thought I'd link this on HN: https://www.youtube.com/watch?v=1t_sMynan_k https://www.youtube.com/watch?v=1t_sMynan_k
- spurgu 6y agoWhat did I just watch? :D
- emptysongglass 6y agoFellow Dane here and someone who used to work with Danish musicians: KODA is the enemy. It'd be a more worthy initiative to go yell at them: they are literally the mafia of music in Denmark.
- vaccinator 6y agoWhat is danes?
- encom 6y agoDanes are the proud people who inhabit the Kingdom of Denmark.
- als0 6y ago> Bug 11154: Disable TLS 1.0 (and 1.1) by default I'm still a little shocked by this. It's 2020 and we were still allowing these old protocols?
- throw0101a 6y agoFor general day-to-day browser of random websites for amusement, is there a particular reason why we should care? I'm not against more crypto generally to help reduce mass surveillance, but how many Wix / Square Space / free WP/Blogspot sites actually need to have TLS 1.2+?
- snazz 6y agoIf anything, websites made with drag-and-drop website builders should always use the latest TLS standard because it’s just a single change for the hosting provider to make for all of the customers. I think the hosting provider generates a certificate anyway.
- peteretep 6y agoMy understanding is that the general argument is that if we all require security for comedy browsing, the traffic of the people who require better security is better because it’s less conspicuous? See also declaring your personal pronouns as someone who thinks they will never be misgendered, or using Tor for normal browsing
- throw0101a 6y agoAs I stated: I'm not against crypto in general (even for "comedy browsing") as it helps against mass surveillance. I'm just not sure as to what disabling 1.0 in the browser does. People who really care can enable 1.2+ on their servers and the browser will use it, but someone who just has a site up 'for fun' could be cut off. In some ways it motivates people to not even bother with HTTPS because it now because higher maintenance to keep up with all the settings. This could actually encourage just leaving HTTP, which could be worse.
- abdullahkhalids 6y ago
- godelmachine 6y agoWhy do I get a “You are not authorized to access this page” when I click on the link? Has anyone else experienced this?
- haolez 6y agoIf my adversary was a state, I'd be seriously worried that the act of downloading Tor is monitored and would put me as a potential threat.
- guram11 6y agowith or without downloading Tor I say its safe to assume everyone here is already under some kind of monitoring like we're all potential customers/criminals
- Scoundreller 6y agoWe’re all on many lists. What matters is where you rank on it.
- MiroF 6y agoThere's way too much noise in this measurement for it to be seriously meaningful, unless ownership of tor was itself a crime.
- jonfw 6y agoMaybe in the west that'd be true- since we can freely trade information over the public internet, TOR doesn't have much utility. Let's say you're in a more totalitarian government that censors more information- TOR might look like a practical solution there, and might have people using it for more practical purposes.
- user764743 6y agoTrying to read this post with third party scripts and frames blocked you get: You are not authorized to access this page. How ironic.
- bilkow 6y agoI don't think this is related to script blocking or frames at all, its a long standing bug in the tor project site that anyone can trigger by just refreshing. Check other comments in this thread.
- HashingtheCode 6y agoCan someone please explain to me, why in the name of all things holy, Tor browser on Android has telemetry tracking enabled??? https://reports.exodus-privacy.eu.org/en/reports/org.torproject.torbrowser/latest/ https://reports.exodus-privacy.eu.org/en/reports/org.torproj... "The Telemetry feature provides this capability by sending performance and usage info to Mozilla. As you use Firefox, Telemetry measures and collects non-personal information, such as performance, hardware, usage and customizations. It then sends this information to Mozilla on a daily basis and we use it to improve Firefox. " Why is this not disabled in a supposed privacy browser?
- mrslave 6y agoIs it alright if the telemetry itself is sent over Tor? ;-)
- HashingtheCode 6y agono because Tor browser bills itself as privacy orientated. Sending any kind of telemetry data compromised that. Telemetry data is made up of two data sets: interaction data and technical data. Interaction data includes information about your interactions with Firefox such as number of open tabs and windows, number of webpages visited, number and type of installed Firefox Add-ons and session length, as well as Firefox features offered by Mozilla or our partners such as interaction with Firefox search features and search partner referrals. Technical data includes information about your Firefox version and language, device operating system and hardware configuration, memory, basic information about crashes and errors, outcome of automated processes like updates and safebrowsing. When Firefox sends data to us, your IP address is temporarily collected as part of our server logs.