4 ms·
Twitter was already available over Tor, via https://www.twitter.com https://www.twitter.com - Creating an onion service didn't make it any more available.
by mike-cardwell 5y ago
Twitter was already available over Tor, via https://www.twitter.com https://www.twitter.com - Creating an onion service didn't make it any more available.
- hnarn 5y agoThe entire Internet is available via Tor but only via exit nodes, saying that it "doesn't make it any more available" to offer it directly within Tor shows a fundamental lack of understanding of how Tor works. If you can access a service, any service, completely within Tor without having to exit to the Internet, this significantly improves your anonymity[1] since you no longer have to go through an exit node, and as such the amount of nodes you can "exit" from increases substantially. [1]: That is, the anonymity that Tor already provides. Obviously signing up for Twitter under your real name with your phone number will compromise your anonymity regardless, but that is not the problem that Tor solves.
- mike-cardwell 5y agoI'm pretty sure I'm right, and that I understand how Tor works. The existence of the Twitter onion service does not help a single person access Twitter that couldn't already access it anonymously without the onion service just by using Tor normally.
- MayeulC 5y agoAn exit node (or multiple ones) could block twitter. Exit nodes are rarer than other nodes, as they're difficult to host. That limits the bandwidth. An onion adress doesn't rely on DNS at all. I think this should provide better bandwidth, availability, and anonimity.
- wolverine876 5y agoAlso, if I understand correctly, exit nodes have vectors for attacking your security that are eliminated by an onion address.
- MayeulC 5y agoRight, I didn't mention it explicitly, but that was part of the anonymity guarantees. A middle node has no way of knowing what your final destination will be. An exit node can see you're contacting twitter. Luckily, traffic is mostly encrypted these days, but not always, and there are ways to attack https (looking at packet length and traffic patterns can tell you what kind of activity is being done, researchers even showed that they could tell what movie someone was watching on Netflix).
- tanduv 5y agoOne of the devs working on this already answered - https://alecmuffett.com/article/16007 https://alecmuffett.com/article/16007
- mike-cardwell 5y agoI get the arguments he's listed. But to be honest, and this may just be me being pessimistic, I suspect the real reason is that it's just a cool thing for an interested dev to want to set up, and the list of reasons at that URL is really just a list of excuses.
- deleted 5y ago[deleted]