this post was submitted on 29 Jul 2023
244 points (96.2% liked)

Technology

34125 readers
358 users here now

This is the official technology community of Lemmy.ml for all news related to creation and use of technology, and to facilitate civil, meaningful discussion around it.


Ask in DM before posting product reviews or ads. All such posts otherwise are subject to removal.


Rules:

1: All Lemmy rules apply

2: Do not post low effort posts

3: NEVER post naziped*gore stuff

4: Always post article URLs or their archived version URLs as sources, NOT screenshots. Help the blind users.

5: personal rants of Big Tech CEOs like Elon Musk are unwelcome (does not include posts about their companies affecting wide range of people)

6: no advertisement posts unless verified as legitimate and non-exploitative/non-consumerist

7: crypto related posts, unless essential, are disallowed

founded 5 years ago
MODERATORS
top 45 comments
sorted by: hot top controversial new old
[–] [email protected] 88 points 1 year ago* (last edited 1 year ago) (1 children)

I just don't think Tor Browser is currently suited as a primary browser for most people. You lose things like staying logged into websites, you can't (or at least shouldn't) really add extensions like a good content blocker, you generally can't tweak or customize the browser to your liking, etc. Plus factor in things like the slow speeds, being blocked by websites, bombarded with captchas everywhere, etc, and it just becomes a harder and harder sell for a lot of average people.

Tor Browser's great and it absolutely has its need and purpose, I'm not trying to knock it for that at all because it works damn well for what it is and what it tries to do, but I just think its hard to be using as a primary browser and daily driver in its current form, at least for a lot of people.

[–] [email protected] 1 points 1 year ago

I dont think this article is suggesting everyone use Tor Browser as their main browser (and if they are, thats obtuse), but that people use Tor / Tor Browser at all, even for just sensitive searches or websites that dont require a login.

[–] [email protected] 41 points 1 year ago (5 children)

So when I first learned about TOR almost 10 years ago in uni, it was said to be compromised to a significant extent by secret services holding entry and exit nodes.

Is that not true anymore?

[–] [email protected] 3 points 1 year ago (2 children)

Aren't bridges meant to prevent that?

[–] [email protected] 6 points 1 year ago

Iirc holding both the entry and exit of a routed connection, you can in theory match traffic going through, which would let you connect a user to the server/site they are connecting to. It might still be encrypted at that point, idk the details anymore.

[–] [email protected] 1 points 1 year ago

No, bridges are meant to bypass censorship

[–] [email protected] 3 points 1 year ago (2 children)
[–] [email protected] 3 points 1 year ago

Compare and use the right service for your needs: https://geti2p.net/en/comparison/tor

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago)

Interesting, ty

[–] [email protected] 3 points 1 year ago (1 children)

I also heared that bit about the secret service owning nodes a few years ago. It was trough a teacher that's also really in the stuff outside of teaching, and has a network of non-teaching proffesionals in the field.

It's something to keep in mind, at the very least. Tor already has some weaknesses anyways. You shouldn't trust it blindly just because it's Tor. If anything, I think it more has a false rep for how strong it is over struggling with a stigma.

[–] [email protected] 2 points 1 year ago

It was pretty much the same context for me, yeah.

Opsec always applies

[–] [email protected] 2 points 1 year ago (3 children)

Most of the nodes are hosted by Tor Foundation itself

[–] [email protected] 6 points 1 year ago

[citation needed]

[–] [email protected] 2 points 1 year ago (1 children)

Is there any way to check that?

[–] [email protected] 10 points 1 year ago* (last edited 1 year ago)

Yup. You can check a lot of stat about a node on tor website. https://metrics.torproject.org/

[–] sugar_in_your_tea 1 points 1 year ago

If true, I'm not happy about that. I want lots of different owners so it's harder to compromise the network by compromising a single entity.

[–] [email protected] 2 points 1 year ago (1 children)

I don't think a single credible source has shown this to be a vulnerability. You're talking about an attack that would cost, what, millions of dollars to run per day?

[–] [email protected] 2 points 1 year ago (1 children)

Dunno if it's all that expensive when there are hundreds of nodes on several individual malicious networks confirmed https://nusenu.medium.com/how-malicious-tor-relays-are-exploiting-users-in-2020-part-i-1097575c0cac

[–] [email protected] 2 points 1 year ago (1 children)

You'd need much more than hundreds of nodes.

[–] [email protected] 1 points 1 year ago

The graph tracks exit probability and the article speaks about the matter, especially what you're referencing. Check it out.

[–] [email protected] 15 points 1 year ago (2 children)

Problem is that many sites don't work because of anti-ddos and anti bot measures.

It is a pity

[–] [email protected] 4 points 1 year ago
[–] [email protected] 1 points 1 year ago

Yeah, we need to make it illegal to block someone from doing a simple GET request just because they're using a privacy tool.

It should only be legal to block access based on how you act, not based on how you look.

[–] [email protected] 8 points 1 year ago (2 children)

I’d feel bad using the Tor network for everyday browsing. I think it should be reserved for people who really need it to protect themselves.

[–] [email protected] 50 points 1 year ago (1 children)

No. Use it for everyday tasks. If Tor is used by only people who need them, they will be easily detected. The whole reason US Navy released Tor to public was so normal users can scramble the usage detection. One more advantage is that right now lot of website block tor users if more users will use tor then they might stop it.

[–] [email protected] 7 points 1 year ago (3 children)

Won't it cause browsing to much slower than it normally is?

[–] [email protected] 19 points 1 year ago

More usage means more visibility which means more recognition and thus more funding

[–] [email protected] 9 points 1 year ago

Maybe, but the added obfuscation is probably worth it to the people who need it.

It's not meant to be a high performance browser amyway

[–] GeekyNerdyNerd 8 points 1 year ago

A slower connection is better than ending up in prison, the re-education camps or worse, beheaded.

Without average Joe's using it for nonsense Tor usage is basically a neon sign saying "I'm doing something worth hiding. Come and kill me."

[–] [email protected] 2 points 1 year ago

This is an incorrect, unrealistic way to view this. By using the Tor network normally (you argument certainly applies to doing overly traffic intensive tasks like torrenting over Tor) you are normalizing its use, protecting those who really rely on it. If the only people using Tor were criminals and people who needed the protection, listening on Wifi networks for connections to Tor could lead to immediate prosecution (look what the UK is trying to do with encrpytion, and that French case where all of the evidence against a suspect was use of open source technology like Tor.) By default, Tor does not hide the fact its being used from your network (thats what a bridge is for), so the more people use Tor, the safer everyone is.

If you really want to help those that need Tor's protection, run Snowflake on your desktop or Orbot's 'kindness' on Android. This allows users to use your device as a bridge, bypassing censorship in other countries / networks.

[–] [email protected] 8 points 1 year ago

I would use it if it wasn't so slow. I get that it's slow because of the security, but that's precisely the reason it can never be my primary browser.

[–] [email protected] 8 points 1 year ago (2 children)

Sorry if my question is stupid, but can I use it as a "regular" browser (like Chrome, Mozilla, Opera, etc) on my Android smartphone?

[–] [email protected] 11 points 1 year ago (2 children)

Yes, but you lose all data after exit

[–] [email protected] 1 points 1 year ago

Yes, that's the point.

[–] [email protected] 1 points 1 year ago

Thank you for the answer! :)

[–] [email protected] 3 points 1 year ago (1 children)

You can, but you really shouldn't.

[–] [email protected] 4 points 1 year ago (1 children)
[–] [email protected] 13 points 1 year ago (1 children)

It's meant for you to be completely anonymous. Logging in to stuff would defeat the whole purpose of TOR, as it would associate your activity with the account you logged into. When browsing sites without really needing to interact, it's good, as the sites cannot track you easily.

[–] [email protected] 1 points 1 year ago

There are many use-cases for Tor. One is anonymity. One is to bypass censorship. The most popular website on the darknet is Facebook.

It doesn't "defeat the purpose" of using Tor in Tibet to access a Facebook page.

[–] [email protected] 7 points 1 year ago (1 children)

Is there an index of Tor network only sites?

[–] [email protected] 2 points 1 year ago

Yes. Alec Muffett was the guy who setup the most popular Tor darkent site: Facebook. I think he did Twitter's too. He maintains an excellent list.

https://github.com/alecmuffett/real-world-onion-sites

[–] [email protected] 7 points 1 year ago (1 children)

We'll see if Google's new efforts manage to kill the thing.

[–] [email protected] 2 points 1 year ago

The US government would never allow Tor to die. They need it to conduct ~terrorism~ cyberwarfare

[–] CookieJarObserver -4 points 1 year ago (1 children)

Its good that not everyone uses it because otherwise the notes would run hot.

[–] [email protected] 3 points 1 year ago

If more people use it there will be more nodes made. The reason tor isn't fast or convenient is because it nitch and "underground". Using the public net doesn't have an adverse affect on the daily lives of 99.9999% of it's users, so why would anyone look for alternatives?

load more comments
view more: next ›