jerheinze

The overwhelming majority of people don't customize their path selection in Tor, so you will always get traffic to your new guard node.

> especially if you're the only one using it

That's not how Tor nodes work. Once you setup a guard node (and it got enough reputation) you will NOT be the only person using it.

> That only works if the attacker doesn't know the guard node is you.

That's not how Tor nodes work. Once you setup a guard node (and it got enough reputation) you won't be the only person using the guard node. Also de-anonymization attacks require you to know the traffic coming to the guard node (and if you run a trustworthy one yourself and you're not dealing with a global passive adversary then there's no way the attacker will be able to see the incoming traffic to the guard node).

Instead of messing with your path selection a better strategy would be just run your own guard nodes that you trust (a guard node is the first node that you connect to in a Tor circuit) and to stick with them. Remember, de-anonymization attacks require the attacker to control both the guard node and the exit node at the same time.

> Cross-platform sandboxing for Graphite, Hunspell, and Ogg is shipping in Firefox 95, while Expat and Woff2 will ship in Firefox 96.

I wonder what the other "good candidates" that he referred to are.

NewPipe is such a nice piece of FOSS. Too bad that they decided against integrating SponsorBlock.

It's not just Chrome--all Chromium based browsers should be avoided if we don't want to end up with a single browser engine monopoly.

I think they might be checking against the online database, can you try to see if you replicate it offline? (if that's even possible)

Thanks! For those who were wondering like me check:

https://web.archive.org/web/20210320124929/https://github.co...

https://web.archive.org/web/20210125171757/https://barinsta....

> The beautiful, open source, and privacy-friendly alternative Instagram client for Android.

> If you don't upload posts or stories on Instagram, but you still have to use it to keep in touch with people and contents, you now have an alternative: Barinsta is a beautiful client that allows you to browse Instagram, while removing most of the annoyances (ads, suggestions, useless tabs) and giving you more control of your data.

What was Barinsta? I couldn't find any information on that.

Also try to alternate the instances, always solves it for me.

A really useful tool for us folks who don't use smartphones, been using it for the last 5 years to have Signal-desktop without a smartphone. Can't thank the maintainer and contributors enough!

https://ctrl.alt.coop/en/post/signal-without-a-smartphone/

> I'd be much much happier to see the material kept in a more resilient configuration (IPFS, database dumps, ...) so that other entities can back it up.

For IPFS have a look at https://libgen.fun/ and https://freeread.org/ipfs/

Also see the HN thread on those: https://news.ycombinator.com/item?id=25209246

This is why you should always stick to the Tor Browser. See for instance the Tor Browser Design Doc (a bit outdated but still has a lot of info) for how much work they put to make sure that it stays as private as possible https://2019.www.torproject.org/projects/torbrowser/design

That's why I mentioned the Invidious project which is a YouTube frontend. Also solving the ReCaptcha is for most of us not an insurmountable task, it's definitely worth the cost if you want some real privacy.

Using YouTube with Firefox Containers is in no way anonymous. Instead try to use it with the Tor Browser (also checkout the Invidious project).

TLS alone is not sufficient. Fortunately, Github is also on the HSTS preload list.

https://web.archive.org/web/2020/https://blog.torproject.org... should work.

You can use pluggable transports to camouflage your traffic (they're already built into the Tor Browser, e.g. meek, snowflake, ...).

To get Tor in the first place in a censored/risky place you can get it from the official GetTorBrowser repository on Github: https://github.com/TheTorProject/gettorbrowser (There are additional links to GitLab, Archive.Org, Google Drive)

Tor is still the king of low-latency anonymity systems.

> I understand the concept of Tor but since the government is actively watching, it doesn't really fit the usecase if I understand correctly.

You can hide the fact that you're using Tor by using bridges with or without pluggable transports.

> From a privacy point of view, couldn't you use multiple VPNs?

No amount of chained VPNs will offer you browser fingerprinting resistance or privacy by design.

Tor Browser tries to make your browser fingerprint look the same as all other Tor Browser users, while Brave does have some patches to try to handle that it's still very far from what Tor Browser offers.

There's raddle.me (although I'm not a fan of it) which has an onion service running: http://lfbg75wjgi4nzdio.onion/

Duplicate: https://news.ycombinator.com/item?id=22907103

You can get a gist of that by looking at what they do for each sponsor: https://trac.torproject.org/projects/tor/wiki/org/sponsors (e.g. https://trac.torproject.org/projects/tor/wiki/org/sponsors/S... )

Another place to look is their tor-project mailing list where in each meeting they list things to do/things done: (e.g. https://lists.torproject.org/pipermail/tor-project/2020-Apri... ) https://lists.torproject.org/pipermail/tor-project/

A couple of notes:

* You need WebRTC to be enabled in your browser for this to work, this is simply owing to how Snowflake works. The extension will display a warning if it detects that WebRTC isn't enabled.

* The addon tells you when a client is connecting using your proxy and how many clients you have helped circumvent censorship in the last 24h. However, right now Snowflake is only available for the alpha releases of the Tor Browser and then only for Linux and Mac OS, as such (see https://metrics.torproject.org/userstats-bridge-transport.ht... ), so it shouldn't be surprising for you to pass an entire 24h without having any reported client connection.

* There are other ways to run a Snowflake proxy that are outlined here: https://trac.torproject.org/projects/tor/wiki/doc/Snowflake#...

A couple of notes:

* You need WebRTC to be enabled in your browser for this to work, this is simply owing to how Snowflake works. The extension will display a warning if it detects that WebRTC isn't enabled.

* The addon tells you when a client is connecting using your proxy and how many clients you have helped circumvent censorship in the last 24h. However, right now Snowflake is only available for the alpha releases of the Tor Browser and then only for Linux and Mac OS, as such (see https://metrics.torproject.org/userstats-bridge-transport.ht... ), so it shouldn't be surprising for you to pass an entire 24h without having any reported client connection.

* There are other ways to run a Snowflake proxy that are outlined here: https://trac.torproject.org/projects/tor/wiki/doc/Snowflake#...

Since Rust is a memory safe language with nearly the same performance as C

The article forgot to mention the important fact that it's written in Rust!