- Skimmer ( @Skimmer@lemmy.zip ) 65•11 months ago
I just don’t think Tor Browser is currently suited as a primary browser for most people. You lose things like staying logged into websites, you can’t (or at least shouldn’t) really add extensions like a good content blocker, you generally can’t tweak or customize the browser to your liking, etc. Plus factor in things like the slow speeds, being blocked by websites, bombarded with captchas everywhere, etc, and it just becomes a harder and harder sell for a lot of average people.
Tor Browser’s great and it absolutely has its need and purpose, I’m not trying to knock it for that at all because it works damn well for what it is and what it tries to do, but I just think its hard to be using as a primary browser and daily driver in its current form, at least for a lot of people.
- amanneedsamaid ( @amanneedsamaid@sopuli.xyz ) English1•11 months ago
I dont think this article is suggesting everyone use Tor Browser as their main browser (and if they are, thats obtuse), but that people use Tor / Tor Browser at all, even for just sensitive searches or websites that dont require a login.
- shapesandstuff ( @shapesandstuff@feddit.de ) 36•11 months ago
So when I first learned about TOR almost 10 years ago in uni, it was said to be compromised to a significant extent by secret services holding entry and exit nodes.
Is that not true anymore?
- worfamerryman ( @worfamerryman@beehaw.org ) English26•11 months ago
I’ve hear something similar. I think I read that the US Air Force has a bunch of nodes or something.
Additionally I don’t really understand what I would use it for if I already have a vpn and how it might put me a risk of legal trouble if I’m using it and someone routes something bad through me while I’m using it…
I’m not even sure how to talk about it.
I am decently technical, I just don’t know this tech.
- NateSwift ( @NateSwift@beehaw.org ) English39•11 months ago
Disclaimer that I haven’t used Tor in a while, do your own research, etc
The US navy designed and open sourced the Tor network. If all the traffic meant to be anonymous was coming from the US navy it doesn’t work well as an anonymizer. There’s been various claims that they have backdoors over the years, but to my knowledge none have held water.
Unless you’re running an exit node (which requires different software than the Tor browser) other people’s traffic isn’t getting routed through you so you’re fine legally.
VPNs are not very good at protecting you from the websites or services you connect to. They’re best used to hide where you’re connecting to from your ISP. Modern fingerprinting using things like browsing habits, installed software, web browser size, cookies, etc is barely effected by VPNs and the Tor browser takes care of an minimizes lots of those tools.
The biggest issue for day to day use for me is how slow it is. Because your traffic is being routed through 3-5 nodes before getting to its destination overall speed and latency suffer a lot
- kent_eh ( @kent_eh@lemmy.ca ) English5•11 months ago
The biggest issue for day to day use for me is how slow it is. Because your traffic is being routed through 3-5 nodes before getting to its destination overall speed and latency suffer a lot
That’s why I never continued to use it after the times I experimented with Tor.
- sudo ( @sudo@lemmy.today ) 2•11 months ago
Modern fingerprinting using things like browsing habits, installed software, web browser size, cookies, etc is barely effected by VPNs and the Tor browser takes care of an minimizes lots of those tools.
But can’t you just spoof most of that if you really want to? If you’re putting in the effort to be concerned with anonymity.
- worfamerryman ( @worfamerryman@beehaw.org ) 2•11 months ago
Thanks for summarizing this for me. I think I could just use a vpn and librewolf to accomplish what you are talking about with the tor browser.
Librewolf wipes everything once it’s closer and it pretty basic if you use the default settings.
Are people using it to casually browse Lemmy and stuff?
- ReversalHatchery ( @ReversalHatchery@beehaw.org ) 6•11 months ago
I use librewolf, but for me the first thing to change was to do not delete things on exit. I’m looking for a better firefox, not a lighter tor browser
- DestroyMegacorps ( @DestroyMegacorps@lemmy.ml ) 5•11 months ago
Theres also the mullvad browser which is just tor browser without the tor part
Most of the nodes are hosted by Tor Foundation itself
- magmaus3 ( @magmaus3@szmer.info ) 4•11 months ago
[citation needed]
- shapesandstuff ( @shapesandstuff@feddit.de ) 2•11 months ago
Is there any way to check that?
Yup. You can check a lot of stat about a node on tor website. https://metrics.torproject.org/
- Cambionn ( @cambionn@feddit.nl ) 2•11 months ago
I also heared that bit about the secret service owning nodes a few years ago. It was trough a teacher that’s also really in the stuff outside of teaching, and has a network of non-teaching proffesionals in the field.
It’s something to keep in mind, at the very least. Tor already has some weaknesses anyways. You shouldn’t trust it blindly just because it’s Tor. If anything, I think it more has a false rep for how strong it is over struggling with a stigma.
- shapesandstuff ( @shapesandstuff@feddit.de ) 2•11 months ago
It was pretty much the same context for me, yeah.
Opsec always applies
- dwindling7373 ( @dwindling7373@feddit.it ) 2•11 months ago
Aren’t bridges meant to prevent that?
- shapesandstuff ( @shapesandstuff@feddit.de ) 2•11 months ago
Iirc holding both the entry and exit of a routed connection, you can in theory match traffic going through, which would let you connect a user to the server/site they are connecting to. It might still be encrypted at that point, idk the details anymore.
- itchy_lizard ( @itchy_lizard@feddit.it ) 1•11 months ago
No, bridges are meant to bypass censorship
- itchy_lizard ( @itchy_lizard@feddit.it ) 2•11 months ago
I don’t think a single credible source has shown this to be a vulnerability. You’re talking about an attack that would cost, what, millions of dollars to run per day?
- shapesandstuff ( @shapesandstuff@feddit.de ) 1•11 months ago
Dunno if it’s all that expensive when there are hundreds of nodes on several individual malicious networks confirmed https://nusenu.medium.com/how-malicious-tor-relays-are-exploiting-users-in-2020-part-i-1097575c0cac
- itchy_lizard ( @itchy_lizard@feddit.it ) 2•11 months ago
You’d need much more than hundreds of nodes.
- shapesandstuff ( @shapesandstuff@feddit.de ) 1•11 months ago
The graph tracks exit probability and the article speaks about the matter, especially what you’re referencing. Check it out.
- Gargari ( @Gargari@lemmy.ml ) English1•11 months ago
Try i2p
- krash ( @krash@lemmy.ml ) 3•11 months ago
Compare and use the right service for your needs: https://geti2p.net/en/comparison/tor
- shapesandstuff ( @shapesandstuff@feddit.de ) 1•11 months ago
Interesting, ty
- Zeth0s ( @Zeth0s@reddthat.com ) 12•11 months ago
Problem is that many sites don’t work because of anti-ddos and anti bot measures.
It is a pity
- LoafyLemon ( @LoafyLemon@kbin.social ) 4•11 months ago
Cloudflare is pretty TOR-friendly, they even offer onion routing for your website.
- itchy_lizard ( @itchy_lizard@feddit.it ) 1•11 months ago
Yeah, we need to make it illegal to block someone from doing a simple GET request just because they’re using a privacy tool.
It should only be legal to block access based on how you act, not based on how you look.
- bleistift2 ( @bleistift2@feddit.de ) English9•11 months ago
I’d feel bad using the Tor network for everyday browsing. I think it should be reserved for people who really need it to protect themselves.
No. Use it for everyday tasks. If Tor is used by only people who need them, they will be easily detected. The whole reason US Navy released Tor to public was so normal users can scramble the usage detection. One more advantage is that right now lot of website block tor users if more users will use tor then they might stop it.
- Synopsis0795 ( @Synopsis0795@lemmy.ml ) 4•11 months ago
Won’t it cause browsing to much slower than it normally is?
- Dreyns ( @Dreyns@lemmy.ml ) 14•11 months ago
More usage means more visibility which means more recognition and thus more funding
- shapesandstuff ( @shapesandstuff@feddit.de ) 4•11 months ago
Maybe, but the added obfuscation is probably worth it to the people who need it.
It’s not meant to be a high performance browser amyway
- amanneedsamaid ( @amanneedsamaid@sopuli.xyz ) English3•11 months ago
This is an incorrect, unrealistic way to view this. By using the Tor network normally (you argument certainly applies to doing overly traffic intensive tasks like torrenting over Tor) you are normalizing its use, protecting those who really rely on it. If the only people using Tor were criminals and people who needed the protection, listening on Wifi networks for connections to Tor could lead to immediate prosecution (look what the UK is trying to do with encrpytion, and that French case where all of the evidence against a suspect was use of open source technology like Tor.) By default, Tor does not hide the fact its being used from your network (thats what a bridge is for), so the more people use Tor, the safer everyone is.
If you really want to help those that need Tor’s protection, run Snowflake on your desktop or Orbot’s ‘kindness’ on Android. This allows users to use your device as a bridge, bypassing censorship in other countries / networks.
- StoicLime ( @StoicLime@lemm.ee ) 8•11 months ago
I would use it if it wasn’t so slow. I get that it’s slow because of the security, but that’s precisely the reason it can never be my primary browser.
- ComradeR ( @ComradeR@lemmy.ml ) 7•11 months ago
Sorry if my question is stupid, but can I use it as a “regular” browser (like Chrome, Mozilla, Opera, etc) on my Android smartphone?
- Into The Sky ( @intothesky@lemmy.ml ) 8•11 months ago
Yes, but you lose all data after exit
- itchy_lizard ( @itchy_lizard@feddit.it ) 1•11 months ago
Yes, that’s the point.
- ComradeR ( @ComradeR@lemmy.ml ) 1•11 months ago
Thank you for the answer! :)
- user ( @Nr97JcmjjiXZud@infosec.pub ) 2•11 months ago
You can, but you really shouldn’t.
- ComradeR ( @ComradeR@lemmy.ml ) 4•11 months ago
Why?
- Xylight (Photon dev) ( @Xylight@lemmy.xylight.dev ) English11•11 months ago
It’s meant for you to be completely anonymous. Logging in to stuff would defeat the whole purpose of TOR, as it would associate your activity with the account you logged into. When browsing sites without really needing to interact, it’s good, as the sites cannot track you easily.
- itchy_lizard ( @itchy_lizard@feddit.it ) English1•11 months ago
There are many use-cases for Tor. One is anonymity. One is to bypass censorship. The most popular website on the darknet is Facebook.
It doesn’t “defeat the purpose” of using Tor in Tibet to access a Facebook page.
- Jo Miran ( @JoMiran@lemmy.ml ) 6•11 months ago
Is there an index of Tor network only sites?
- itchy_lizard ( @itchy_lizard@feddit.it ) 2•11 months ago
Yes. Alec Muffett was the guy who setup the most popular Tor darkent site: Facebook. I think he did Twitter’s too. He maintains an excellent list.
- Spendrill ( @Spendrill@lemm.ee ) 4•11 months ago
We’ll see if Google’s new efforts manage to kill the thing.
- itchy_lizard ( @itchy_lizard@feddit.it ) 2•11 months ago
The US government would never allow Tor to die. They need it to conduct terrorism cyberwarfare