2
votes
Can JavaScript get my real IP?
I'm no expert, but the most convincing answer I found is: no, JavaScript, as it is implemented in TBB, can't get your real IP.
There is a lot of confusion about that in the Web. Just do a web search ...
- 21
2
votes
Shift+Enter does not work in Facebook postings
This seems to be a general issue with keyboard input handling not being handled correctly, there's already a bugreport about it (currently unresolved) in the Tor bug tracker.
I can also confirm it ...
- 21
2
votes
Accepted
Is there a list of API's that TOR browser blocks
Tor doesn't block APIs (this is virtually impossible and probably not what you want to do), Tor blocks web pages which addresses match a given check on a blacklist or entire types of content like ...
- 310
2
votes
Javascript , some sites say it is enabled. my "shield" is set to safest,, something is amiss but have no idea how to correct
Strange to see this problem, because the "safest" security level is supposed to block Javascript with the help of NoScript.
Anyway, you can do an additional JS block by visiting about:config (enter ...
- 61
2
votes
Accepted
How don't websites easily get your IP through this method?
How would you propose this JavaScript code obtain the client's IP address?
JS running in web browsers cannot run arbitrary commands on the host machine — that would be an extreme security violation.
...
- 136
2
votes
How does one execute JavaScript using Tor network without human interaction?
I found a way to do that on linux:
apt-get install tor
download Multi-TOR from here: https://github.com/jseidl/Multi-TOR
run ./multi-tor.sh 10 for 10 socks ports (for example)
You can use selenium or ...
- 21
2
votes
Running parallel Tor servers with different exit IPs with nodejs app
I want to monitor a website without making it a priori evident that it is being monitored
Problems:
The set of exits isn't (very) large, you'll repeat after a given time scale.
The exits are ...
- 10.9k
2
votes
Are .onion sites also written in HTML?
Building onion websites is generally no different than building regular websites. The main difference is the underlying connection protocol and not the website itself. You build onion websites using ...
- 3,112
2
votes
How to disable JavaScript on Servers
I'm not sure what exactly you mean here; but if you're trying to run a onion service you don't have to deal with JavaScript at all if you don't want to. Just don't include any JavaScript code on the ...
1
vote
Enable "Standard" security level for a *single* website in Tor
I use Tor Browser with "Safer" settings. With that I went to https://account.protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion/signup and it showed me the following page:
I was ...
- 8,561
1
vote
Enable "Standard" security level for a *single* website in Tor
Use a separate browser for that, like Firefox. When you're launching Tor Browser - an instance of Tor is launched as well and you do have a proxy that listens to requests on your localhost - so just ...
- 5,915
1
vote
Does cross-site AJAX queries use the same circuit established for the origin domain?
first part: no, they will not be going separately, because the browser(a tweaked Firefox = Tor browser) can not know what to separate from what.
second part: it depends on the browser you're using. ...
- 5,915
1
vote
Accepted
How does JavaScript interfere with Tor browser anonymity?
It is possible that NoScript means allowing JavaScript to run unrestricted in general, not just in the Tor browser but also all browsers, can be very dangerous since after all, it can lead to tracking,...
- 984
1
vote
Accepted
Does Tor Browser get a unique fingerprint with JavaScript, even if HTML5 Canvas data is blocked (amiunique.org)?
Last year Tor enabled a feature which returns randomized image data when a website attempts to extract an image from the canvas. This is better seen by looking at the image on https://browserleaks.com/...
- 3,112
1
vote
Can a website read out my MAC address using JavaScript even though I use Tor?
In general this is not possible. This question was previously discussed at StackOverflow (see MAC addresses in JavaScript). Only if you are able to use signed JavaScript it is possible to get more ...
- 8,561
1
vote
How to use Tails/Tor with sites that need Javascript
I found if I do this then go to old.reddit.com it works much better. If you don't
change the about:config settings Tor won't let you connect to old.reddit.com
I cannot reproduce this. The old reddit ...
1
vote
How to show the Tor Browser, again the menu items that are hidden compared to the esr version?
If you're looking for IP address "obfuscation" rather than anonymity, you could run Tor standalone and take a normal firefox and set it's proxy settings to the socks port of Tor.
If you're ...
- 96
1
vote
alternatives to javascript for tor websites?
PHP is a popular choice. It runs entirely on the web server, but isn’t as flashy as JS. Like stated in the comment of your question though, JavaScript is not disabled by default.
- 310
1
vote
Can I2P sites run Javascript?
There's nothing inherently bad about javascript on tor or i2p, but there is a concern about using badly written javascript.
If you're using good code that doesn't 1. give away your personal ...
- 2,264
1
vote
NoScript 5.0.6 not working on TBB current build 7.0.2
Google Maps in the browser does not use Java but Javascript. No Script is great at blocking Javascript from loading and running at all.
You need to make sure No Script is set to block everything ...
- 344
1
vote
Accepted
How come Shopify recognizes my local currency with Tor browser!? (no log-in, no address entered)
CAD is the default and changing the currency in the drop down doesn't affect the displayed message at all.
The site doesn't know, it's purely a coincidence if it is accurately depicting your currency....
- 10.9k
1
vote
Javascript Clarification?
When I used the find my location feature on a few websites with JS enabled, it showed that I'm in that exit node's country. So this leads me to conclude that the chances of JS leaking the real IP is ...
- 21
1
vote
Accepted
Selective javascript
Noscript allows this functionality, you can go into it's settings and enable fine grained control of what scripts are and are not allowed.
However this is not recommended, for a couple of reasons.
...
- 10.9k
1
vote
Why do fingerprint sites say Tails uses Javascript version 1.5?
Thank you for the discussion above @canonizingironize. Summary:
Some fingerprint sites use the language attribute of the tag in html code. This was deprecated with HTML 4.0 Specification in 1997 ...
1
vote
Can JavaScript get my real IP?
yes, the JS itself is capable of making an external requests in a several ways, like simple HTTP GET "some-javascript.php" with a js content type, incorporating the IP address of the HTTP request, to ...
- 5,915
1
vote
Accepted
Why is javascript enabled by default in the Tor browser?
They weighted the pros and cons, between security and user experience.
You are right, Javascript makes your browsing unsafe. It allows a website to deanonymize Tor users. It has been used previously ...
- 460
1
vote
Can site.com attach (and access) identifying cookies to TorBrowser session if JavaScript disabled?
With or without Javascript
Tor Browser has a default policy of blocking third party cookies. Cookies can only be set or retrieved by request of domain in the URL bar, regardless of resource fetches ...
- 10.9k
Only top scored, non community-wiki answers of a minimum length are eligible