[–]▶ No.1034251>>1034277 >>1035181 >>1035212 >>1035418 [Watch Thread][Show All Posts]
How can I maintain an acceptable degree of privacy and anonymity while browsing the internet?
Should I chain a VPN with Tor or are obfs4 bridges are safe enough?
Which email clients are safe to use with Tor? If there isn't any, how can I configure mine to be secure?
According to Tor Browser design document[1], Tor Browser builds new circuits for each new domain and isolate all cookies, TLS session IDs and other identifying information on URL level. If this is true, then why is it widely recommended to restart Tor (or Tails) if the user wants to unlink his current activity from what he is about to do next?
Are there any known exploits that can penetrate TBB instances configured with safest options?
Are there any other browsers, text browsers especially, that can meet design requirements of TBB?[2]
Am I missing anything here that you would like to add?
1. https://www.torproject.org/projects/torbrowser/design/#identifier-linkability
2. https://www.torproject.org/projects/torbrowser/design/#DesignRequirements
▶ No.1034254>>1034255
I apologize for double posting. Can mods please delete one of my threads?
▶ No.1034255>>1034256
>>1034254
you cant delete it?
▶ No.1034256
>>1034255
I didn't set a password for the thread so, no.
▶ No.1034266>>1034271 >>1034283 >>1034475 >>1035188 >>1035418
This is kind of outdated but most of the info is still good.
▶ No.1034271
>>1034266
or just use librefox
▶ No.1034277
>>1034251 (OP)
>How can I maintain an acceptable degree of privacy and anonymity while browsing the internet?
You want to look like everybody else. That's mostly it. It's like finding someone in a crowd.
▶ No.1034283>>1034304
>>1034266
>disable referers
congratulations you just disabled posting on 8ch
you're free!
▶ No.1034304
>>1034283
browsers should have a option for disabling third party referrer sending. keeping it on the same domain would be ok but sending it to some completely unrelated domain is retarded and only useful for tracking. theres no reason for some random site to know that someone came to it from this board
▶ No.1034313>>1034330
There is no such thing as anonymity on the Internet. Sure you can disguise your IP or block fingerprinting but at the end of the day you are still a person in a large crowd. Best thing you can do is use open source software that doesn't phone home and use a VPN.
▶ No.1034327
You have to use Tor Browser with default settings (except turning security option to High) and no addons
>Which email clients are safe to use with Tor?
Thunderbird with TorBirdy addon
>If there isn't any, how can I configure mine to be secure?
you cannot. use above or webmail without javascript
if you grab random email client and set it to use Tor proxy, it might leak real IP or other data about your PC
>Are there any known exploits that can penetrate TBB instances configured with safest options?
known? don't know
but if you want higher security use one of those two:
-Whonix virtual machine. use Tor Browser inside it. https://whonix.org
-have firewall software that will block any internet access outside Tor.exe, might protect you if someone uses exploit on Tor Browser
>Are there any other browsers, text browsers especially, that can meet design requirements of TBB?[2]
If you use other browser, you could look unique, even if you configure it to send same headers and useragent that Tor Browser uses, the behavior can be different
▶ No.1034329
>Am I missing anything here that you would like to add?
What software, OS, hardware do you use?
All Intel CPUs post 2009 are hardware backdoored and will send your browsing history to Tel Aviv
All Windows starting from Vista are backdoored
▶ No.1034330
>>1034313
>There is no such thing as anonymity on the Internet.
<it's not worth hiding goyim, we will track you anyway, so you can accept our chip under your skin
>Sure you can disguise your IP or block fingerprinting but at the end of the day you are still a person in a large crowd.
and? when you hide yourself with Tor and good OPSEC they don't know who you are. and your different activities on the internet cannot be linked to a single person
>Best thing you can do is use open source software that doesn't phone home
wrong. you can use open source browser that doesn't phone home and that gives you zero anonymity, because that browser will:
-send your real IP. all IP addresses are linked to real person and home address
-send unique useragent
-allow javascript and release even more data about your computer
>and use a VPN.
extremely wrong
VPN is snakeoil and honeypot, they are shilled by VPN companies so they can earn profits from goys for false security while selling them to police anyway
▶ No.1034332
>Am I missing anything here that you would like to add?
use Full Disk Encryption
with it, even if your anonymity setup will fail and they come to your home, they won't be able to access your data and prove any crime that you did
▶ No.1034344>>1034359 >>1034370
Tor works by design, VPN "works" by trust.
also
>implying VPN company owner will risk having his business closed by FBI/CIA just to protect one of it's customers
capitalism = profit motive, not ethical motive
VPN = capitalism = wants to earn as much profits as possible without giving a fuck about ethics = scam
Tor = communism = wants to provide something for humanity without profit
▶ No.1034359>>1034379
>>1034344
Lol. Your premise is entirely incorrect. Tor is a trust network like everything. You trust that those nodes are clean regardless of the packets being encrypted.
▶ No.1034361>>1034371 >>1034379
but tor browser became almost unusable since they updated to the new firefox look. its either super slow or just hangs.
▶ No.1034370
>>1034344
Communism is reporting every packet you send to the commissar.
▶ No.1034371
>>1034361
sometimes if freezes for a while after starting it but it works after ~30 seconds
▶ No.1034379>>1034390 >>1034619 >>1035418
>>1034359
>Tor is a trust network like everything. You trust that those nodes are clean regardless of the packets being encrypted.
if one or two nodes that you use are CIA, you are not de-anonymized. you would need to get 3 CIA nodes. or just 3 nodes that all cooperate with each other.
with VPN you only need one "node" to be compromised and you are lost
and even if you had a real VPN that wouldn't sell data or cooperate with police, VPN is still shit because you get same IP for every website that you visit, so all your activities can be correlated. and if you use standard browser with VPN you will get fingerprinted with useragent and other shit
>>1034361
>but tor browser became almost unusable since they updated to the new firefox look. its either super slow or just hangs.
you can consider using older one that worked but adjusting prefs.js values to the ones in new TBB, so you get same useragent and other stuff. but behavior of browser won't be identical
can you upload your current prefs.js file somewhere and post link?
▶ No.1034390
>>1034379
It's still entirely a network of trust.
▶ No.1034451
This might help:
privacytools.io
▶ No.1034475
>>1034266
This is terrible advice, completely unsurprising given /pol/'s ignorance of anything tech related but still you should know better.
▶ No.1034619
>>1034379
>can you upload your current prefs.js file somewhere and post link?
https://ufile.io/h6ipz
▶ No.1034646>>1034662
oh boy it's another opsec argument thread
Which predictable post will (you) make?
<tor is nsa linux is nsa IP is nsa, even posting this is going to get me killed by nsa
<y so serious anon? Nobody cares about you
<using tor with several isolating proxies and seccomp sandboxing in vms running on my powermac g5 affords me a reasonable amount of security
<check out chromium
<windows xp is so old i will never get hacked
<DO YOU EVEN KNOW RING -6
<tor will get u v& pedo lol
<AAAAAAAAAAAAAAAAA
(your post here)
▶ No.1034662
>>1034646
<using tor with several isolating proxies and seccomp sandboxing in vms running on my powermac g5 affords me a reasonable amount of security
Well yes actually. Can you prove otherwise? The sandboxing is more or less useless but everything else there is sound short of writing all the software yourself.
▶ No.1034677>>1034680 >>1035811
Tor Browser Bundle
TorChat
Ricochet
OnionShare
Orbot
Orfox
Tor Browser for Android
ChatSecure
I2P
I2PSnark
iMule
Tribler
gpg4usb
Recuva
Eraser
Darik's Boot and Nuke, DBAN
VeraCrypt
Ubuntu Linux
Project Trident (FreeBSD)
They are my favorite softwares. If you use macOS, you can use GPG Suite instead of gpg4usb.
▶ No.1034680
>>1034677 I use Eraser and CCleaner to remove traces of my H.D.D.
▶ No.1034817>>1034818 >>1035169 >>1035384
Full Disk Encryption is necessary when you have Child Pornography.
▶ No.1034818>>1035175 >>1035384
>>1034817
>be non-pedophile
>make utility payments once a month
>download webpage confirmation pages as evidence, just in case
>don't use full disk encryption because not a pedophile
>computer breaks one day
>toss it and get a new one from BEST BUY
>some enterprising urban entrepreneurs dig the old computer out of the garbage to sell the RAM and take the disks
>"oh look, My Documents has a bunch of downloaded webpages."
>"HAHAHAHA WTF, the full credit card number with CCV and everything is stored in hidden fields in the webpage!"
>"this utility must've gotten a pajeet to write this shit, goddamn"
>bank account emptied
>at least I'm not a pedo
▶ No.1035169
>>1034817 I use LUKS (Linux) and VeraCrypt to encrypt my CP.
▶ No.1035175
>>1034818
just hit it with a hammer or drop it few times before you do that
▶ No.1035181
>>1034251 (OP)
Don't post, only larp.
Change IP each time you want to go to another website.
▶ No.1035188>>1035200 >>1036238
>>1034266
Can I get this in plaintext, please?.. Is there any software that can convert text in images to plaintext?
▶ No.1035200>>1035204
>>1035188
That information is pretty much outdated as the anon who posted it also said. Any modification you make on your browser such as adding another blacklist, installing another privacy extension and so on will result in a more unique fingerprint than before. Trying to craft a privacy oriented browser yourself is counter intuitive. This is why Tor Browser was created in the first place. It has a uniform fingerprint across its userbase while employing necessary safeguards to ensure anonymity and privacy. You can also increase the security level to "safest" via Torbutton if you like.
▶ No.1035204>>1035216
>>1035200
I need to add that increasing the security level will undoubtedly cause Tor Browser to have a different fingerprint than it was originally shipped with. But even then it still makes more sense than trying to tweak everything by yourself and risk messing up. Tor Browser can only have three different fingerprints if users don't make additions that are strictly advised against in TBB guidelines.
▶ No.1035212
>>1034251 (OP)
Don't bother. Most of /tech/ will agree that it isn't worth it because the kike tech companies will win over all of us anyway. We will be losers living in the eternal Google 1984 dystopia. Don't ever think otherwise.
▶ No.1035216>>1035222
>>1035204
Is umatrix allowed? Going back to a browser without it painful now. What about ublock origin?
▶ No.1035222>>1035223
>>1035216
Depends on your threat model. uMatrix trades anonymity with privacy. Crafting special rules per site makes your fingerprint more unique and harm your anonymity but blocking harmful scripts and media content will improve your privacy.
▶ No.1035223>>1035232
>>1035222
>Crafting special rules per site makes your fingerprint more unique
Only if they fingerprinted for that which is unlikely and fingerprinting through regular methods generates more and better data from more users which is generally preferable in mass surveillance.
The don't disable things, it makes you unique phrase is nearly 100% bullshit.
WebRTC can leak your IP through multiple proxies. Is your real IP worth the information that WebRTC is not disabled?
WebGL allows access to OpenGL over Javascript which could be used to fingerprint you over your graphics and allows to gain way more information then WebGL is disabled.
The list goes on. You get the idea.
▶ No.1035232>>1035237
>>1035223
Yes I do get the idea. Any modification to the regular Firefox to improve privacy harms your anonymity. Wearing a balaclava outside will hide your identity, improving privacy, but make you stick out like a sore thumb, harming your anonymity. The type of your balaclava will also be an additional identifier.
This is why I recommend using Tor Browser and configuring the security slider to the safest level. The more widespread this practice is, the better.
▶ No.1035237>>1035239 >>1035242
>>1035232
Apparently you didn't.
People on the street don't see your prostate.
When you get on an airplane you will be checked. That's where they see your prostate is made out of metal.
>using Tor Browser and configuring the security slider to the safest level.
You can even browser YT with these settings. How is that secure? Go back to where you came from.
▶ No.1035239
▶ No.1035242>>1036022
>>1035237
JavaScript is turned off at the safest level so I don't understand how you could browse YouTube when Google scripts can't run. Unless you messed up something of course.
▶ No.1035384
>>1034817
> Full Disk Encryption is necessary when you have Child Pornography.
End of story. >>1034818 gets it.
▶ No.1035418
>>1034251 (OP)
>Which email clients are safe to use with Tor? If there isn't any, how can I configure mine to be secure?
Webmail, if you use client you are one time going to forget to turn tor on and the client is going to fetch emails without tor. Trust me, it's going to happen.
>>1034266
>install these snake oil plugins and about:config hacks and get completely unique browser fingerprint
>>1034379
>with VPN you only need one "node" to be compromised and you are lost
chain vpn's together like tor or use i2p or tor alongside with vpn, easy.
▶ No.1035811
>>1034677 OnionShare is very good whey you share CP! It uses Tor network so it's very safe.
▶ No.1036022>>1036028
>>1035242
I restarted it to test that so it definitely isn't my fault.
Maybe it's dependent on noscript which I uninstalled. Or it's because of uBlock Origin which I highly doubt.
▶ No.1036028>>1036034
>>1036022
>Maybe it's dependent on noscript which I uninstalled.
Fucking dumbass, why do you even use TBB if you rip out necessary addons?
▶ No.1036034>>1036046
>>1036028
>necessary addons
This shouldn't be necessary at all since firefox has a variable to disable JS too, pajeet.
▶ No.1036046>>1036065
>>1036034
The best way to spot a LARPer is simply observing how he relentlessly defends retarded ideas that could only be conceived by someone who has no background knowledge on the subject.
▶ No.1036065>>1036078 >>1036357
>>1036046
The best way to spot a pajeet and nocoder is observing how he defends completely unnecessary decencies and shit code which doesn't even do what it claims to do.
▶ No.1036078>>1036138
>>1036065
Maybe it can't do what it claims to because you modified a browser that wasn't meant to be modified? Tor Browser can't help it if koders like you can't stop doing retarded shit.
▶ No.1036116
Write about the same subject every time and sign every post with one of several usenet quotes. No one will ever recognize you.
▶ No.1036138>>1036149
>>1036078
>modified
>uninstalling useless javascript based noscript
The browser has an internal setting that does the exact same, so why use cancer and why make a dependency on it?
>necessary addons
Sure, completely necessary. It's not just pajeets hacking some javascript 1337 H4XX0R solution together instead of using the settings of the browser.
>about:config
>javascript.enabled
>false
You don't even have to restart Firefox. It becomes effective immediately. No 1337 H4XX0R pajeet solution required. Why do you still defend that crap? Are you one of those pesky pajeets?
▶ No.1036149>>1036168
>>1036138
Click one of the links in the OP, press Crlt+F and type "noscript". You will then realize that noscript has more functionality than you think. Read the rest of the document while you are at it, for the sake of my sanity if anything.
▶ No.1036168
>>1036149 NoScript disables JavaScript, many plug-ins, and many HTML5 features.
▶ No.1036238
>>1035188
You can put it in OneNote and it allows you to copy and paste any text off an image as plain text
▶ No.1036357
>>1036065
>modifies piece of software well beyond any supported configuration
>"The software no longer works as expected, this is clearly not my fault"
Kill yourself.