5
votes
Accepted
Iptables to prevent Webrtc IP address leaks?
Instead of blocking the access from the firewall (iptables), it is easier to block it from the browser itself. If you are using Firefox or Iceweasel, you can disable Javascript completely (using ...
- 1,195
2
votes
My Wordpress blog won't load through Tor
I've tested this on both a hosted installation, and a wordpress.com site.
The hosted installation works as it should. There's no need to turn off Noscript. Everything under http://foobar.com/wp-admin/...
- 3,125
2
votes
My Wordpress blog won't load through Tor
Try to enable noscript 'allow' for your dashboard. It may be the javascript disabled.
Or as it seems from the question and it is not browser based issue, try different relay / bridges if it is really ...
- 71
2
votes
How to use FaceBook anonymously with Tor? Is it possible to use FaceBook without JavaScript?
You can use the facebook adress onion :
https://www.facebookcorewwwi.onion/
But you still need Javascript.
- 31
2
votes
Can JavaScript get my real IP?
I'm no expert, but the most convincing answer I found is: no, JavaScript, as it is implemented in TBB, can't get your real IP.
There is a lot of confusion about that in the Web. Just do a web search ...
- 21
2
votes
No websites listed when I click the NoScript icon
Click on 'Options' (in NoScript), then click on the 'Appearance' tab: check off the options you want see. The upper right part contains the most important ones.
- 21
2
votes
Is this JavaScript code dangerous?
It looks like it attempts to learn your IP address via a WebRTC connection. That this is possible was reported a while ago, but it never affected TorBrowser users as WebRTC is disabled in TorBrowser. ...
- 2,209
2
votes
Tor Browser SWF socket
When you are using Flash (swf files), you are letting the door to your anonymity wide open. Flash can see your IP address and reveal it to the hosting site, thus de-anonymizing you.
Furthermore, ...
- 1,195
2
votes
Running parallel Tor servers with different exit IPs with nodejs app
I want to monitor a website without making it a priori evident that it is being monitored
Problems:
The set of exits isn't (very) large, you'll repeat after a given time scale.
The exits are ...
- 10.9k
2
votes
Shift+Enter does not work in Facebook postings
This seems to be a general issue with keyboard input handling not being handled correctly, there's already a bugreport about it (currently unresolved) in the Tor bug tracker.
I can also confirm it ...
- 21
2
votes
Accepted
Is there a list of API's that TOR browser blocks
Tor doesn't block APIs (this is virtually impossible and probably not what you want to do), Tor blocks web pages which addresses match a given check on a blacklist or entire types of content like ...
- 300
2
votes
Javascript , some sites say it is enabled. my "shield" is set to safest,, something is amiss but have no idea how to correct
Strange to see this problem, because the "safest" security level is supposed to block Javascript with the help of NoScript.
Anyway, you can do an additional JS block by visiting about:config (enter ...
- 61
2
votes
How does one execute JavaScript using Tor network without human interaction?
I found a way to do that on linux:
apt-get install tor
download Multi-TOR from here: https://github.com/jseidl/Multi-TOR
run ./multi-tor.sh 10 for 10 socks ports (for example)
You can use selenium or ...
- 21
2
votes
Accepted
How don't websites easily get your IP through this method?
How would you propose this JavaScript code obtain the client's IP address?
JS running in web browsers cannot run arbitrary commands on the host machine — that would be an extreme security violation.
...
- 136
2
votes
Are .onion sites also written in HTML?
Building onion websites is generally no different than building regular websites. The main difference is the underlying connection protocol and not the website itself. You build onion websites using ...
- 2,972
2
votes
How to disable JavaScript on Servers
I'm not sure what exactly you mean here; but if you're trying to run a onion service you don't have to deal with JavaScript at all if you don't want to. Just don't include any JavaScript code on the ...
1
vote
How to use Tails/Tor with sites that need Javascript
I found if I do this then go to old.reddit.com it works much better. If you don't
change the about:config settings Tor won't let you connect to old.reddit.com
I cannot reproduce this. The old reddit ...
1
vote
How to show the Tor Browser, again the menu items that are hidden compared to the esr version?
If you're looking for IP address "obfuscation" rather than anonymity, you could run Tor standalone and take a normal firefox and set it's proxy settings to the socks port of Tor.
If you're ...
- 96
1
vote
Can I2P sites run Javascript?
There's nothing inherently bad about javascript on tor or i2p, but there is a concern about using badly written javascript.
If you're using good code that doesn't 1. give away your personal ...
- 2,224
1
vote
NoScript 5.0.6 not working on TBB current build 7.0.2
Google Maps in the browser does not use Java but Javascript. No Script is great at blocking Javascript from loading and running at all.
You need to make sure No Script is set to block everything ...
- 344
1
vote
Accepted
How come Shopify recognizes my local currency with Tor browser!? (no log-in, no address entered)
CAD is the default and changing the currency in the drop down doesn't affect the displayed message at all.
The site doesn't know, it's purely a coincidence if it is accurately depicting your currency....
- 10.9k
1
vote
Javascript Clarification?
When I used the find my location feature on a few websites with JS enabled, it showed that I'm in that exit node's country. So this leads me to conclude that the chances of JS leaking the real IP is ...
- 21
1
vote
Accepted
Selective javascript
Noscript allows this functionality, you can go into it's settings and enable fine grained control of what scripts are and are not allowed.
However this is not recommended, for a couple of reasons.
...
- 10.9k
1
vote
Why do fingerprint sites say Tails uses Javascript version 1.5?
Thank you for the discussion above @canonizingironize. Summary:
Some fingerprint sites use the language attribute of the tag in html code. This was deprecated with HTML 4.0 Specification in 1997 ...
1
vote
Can a website read out my MAC address using JavaScript even though I use Tor?
In general this is not possible. This question was previously discussed at StackOverflow (see MAC addresses in JavaScript). Only if you are able to use signed JavaScript it is possible to get more ...
- 8,693
1
vote
Accepted
Why is javascript enabled by default in the Tor browser?
They weighted the pros and cons, between security and user experience.
You are right, Javascript makes your browsing unsafe. It allows a website to deanonymize Tor users. It has been used previously ...
- 460
1
vote
Can site.com attach (and access) identifying cookies to TorBrowser session if JavaScript disabled?
With or without Javascript
Tor Browser has a default policy of blocking third party cookies. Cookies can only be set or retrieved by request of domain in the URL bar, regardless of resource fetches ...
- 10.9k
1
vote
Does enabling java let my ISP find out what I am doing?
Java is not JavaScript.
Java
JavaScript
JavaScript can be probably dangerous because it can interfere (?) with your computer way more than the regular browsing without it. So servers could gain more ...
- 11
1
vote
No websites listed when I click the NoScript icon
Thanks for the suggestion, hawkeye. I tried all the options on the Appearance tab and none of them produced the desired result.
However, if I check the "Temporarily allow [...]" box on the Appearance ...
- 11
Only top scored, non community-wiki answers of a minimum length are eligible