4 ms·

Many automated tools consider tor a fraud signal - so be careful. Users sometimes believe lies online (ie bridge internet extension is OK or not noticeable) an

Many automated tools consider tor a fraud signal - so be careful. Users sometimes believe lies online (ie bridge internet extension is OK or not noticeable) and create a lot of trouble for themselves. Profile sync can bring that extension onto your work computer as an example I’m familiar with. If you are bridging tor at work not great

crtasm 5y ago
It's unfortunate that some (many?) tools treat the list of Tor nodes equally, despite only exit nodes being of actual concern in most usecases. Running a bridge with the Snowflake extension/webpage does not put your IP on the public list of Tor nodes: https://tb-manual.torproject.org/bridges/ https://tb-manual.torproject.org/bridges/ Being careful not to sync personal settings/extensions to a work machine is certainly good advice.
- onphonenow 5y ago
  But in a surprising number of situations the fact that you are bridging tor activity is leaky info. You don't just have to be on a public IP list.
  - crtasm 5y ago
    This is a very vague response and to me comes across as FUD.
    - onphonenow 5y ago
      I gave the example of syncing plugins. If you run any game with anti-cheat (which is many) most will have process monitoring. Endpoint tools can also monitor. In the past (I'm not current) you could look at connections using self signed SSL certificates on network, so network monitoring tools could be used to pick up folks pushing tor traffic over your network. You could also watch for folks connecting to tor exit nodes (this used to be public info).
      - crtasm 5y ago
        It's not "surprising" that things running on your computer can see what else is running, or that network monitoring can ... monitor a network. I fail to see what either has to do with being flagged as a fraud risk. Bridges don't connect to exit nodes.

4 ms·

Many automated tools consider tor a fraud signal - so be careful. Users sometimes believe lies online (ie bridge internet extension is OK or not noticeable) an

by onphonenow 5y ago

crtasm 5y ago
It's unfortunate that some (many?) tools treat the list of Tor nodes equally, despite only exit nodes being of actual concern in most usecases. Running a bridge with the Snowflake extension/webpage does not put your IP on the public list of Tor nodes: https://tb-manual.torproject.org/bridges/ https://tb-manual.torproject.org/bridges/ Being careful not to sync personal settings/extensions to a work machine is certainly good advice.
- onphonenow 5y ago
  But in a surprising number of situations the fact that you are bridging tor activity is leaky info. You don't just have to be on a public IP list.
  - crtasm 5y ago
    This is a very vague response and to me comes across as FUD.
    - onphonenow 5y ago
      I gave the example of syncing plugins. If you run any game with anti-cheat (which is many) most will have process monitoring. Endpoint tools can also monitor. In the past (I'm not current) you could look at connections using self signed SSL certificates on network, so network monitoring tools could be used to pick up folks pushing tor traffic over your network. You could also watch for folks connecting to tor exit nodes (this used to be public info).
      - crtasm 5y ago
        It's not "surprising" that things running on your computer can see what else is running, or that network monitoring can ... monitor a network. I fail to see what either has to do with being flagged as a fraud risk. Bridges don't connect to exit nodes.