Skip to main content
Share Your Experience: Take the 2024 Developer Survey
2 votes

Can JavaScript get my real IP?

I'm no expert, but the most convincing answer I found is: no, JavaScript, as it is implemented in TBB, can't get your real IP. There is a lot of confusion about that in the Web. Just do a web search ...
anon's user avatar
  • 21
2 votes

Shift+Enter does not work in Facebook postings

This seems to be a general issue with keyboard input handling not being handled correctly, there's already a bugreport about it (currently unresolved) in the Tor bug tracker. I can also confirm it ...
schmittlauch's user avatar
2 votes
Accepted

Is there a list of API's that TOR browser blocks

Tor doesn't block APIs (this is virtually impossible and probably not what you want to do), Tor blocks web pages which addresses match a given check on a blacklist or entire types of content like ...
Birb's user avatar
  • 310
2 votes

Javascript , some sites say it is enabled. my "shield" is set to safest,, something is amiss but have no idea how to correct

Strange to see this problem, because the "safest" security level is supposed to block Javascript with the help of NoScript. Anyway, you can do an additional JS block by visiting about:config (enter ...
PROTechThor's user avatar
2 votes
Accepted

How don't websites easily get your IP through this method?

How would you propose this JavaScript code obtain the client's IP address? JS running in web browsers cannot run arbitrary commands on the host machine — that would be an extreme security violation. ...
slondr's user avatar
  • 136
2 votes

How does one execute JavaScript using Tor network without human interaction?

I found a way to do that on linux: apt-get install tor download Multi-TOR from here: https://github.com/jseidl/Multi-TOR run ./multi-tor.sh 10 for 10 socks ports (for example) You can use selenium or ...
Aaa Zzz's user avatar
  • 21
2 votes

Running parallel Tor servers with different exit IPs with nodejs app

I want to monitor a website without making it a priori evident that it is being monitored Problems: The set of exits isn't (very) large, you'll repeat after a given time scale. The exits are ...
cacahuatl's user avatar
  • 11k
2 votes

Are .onion sites also written in HTML?

Building onion websites is generally no different than building regular websites. The main difference is the underlying connection protocol and not the website itself. You build onion websites using ...
Steve's user avatar
  • 3,142
2 votes

How to disable JavaScript on Servers

I'm not sure what exactly you mean here; but if you're trying to run a onion service you don't have to deal with JavaScript at all if you don't want to. Just don't include any JavaScript code on the ...
championquizzer's user avatar
1 vote

Enable "Standard" security level for a *single* website in Tor

I use Tor Browser with "Safer" settings. With that I went to https://account.protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion/signup and it showed me the following page: I was ...
Jens Kubieziel's user avatar
  • 8,570
1 vote

Enable "Standard" security level for a *single* website in Tor

Use a separate browser for that, like Firefox. When you're launching Tor Browser - an instance of Tor is launched as well and you do have a proxy that listens to requests on your localhost - so just ...
Alexey Vesnin's user avatar
  • 6,225
1 vote

Does cross-site AJAX queries use the same circuit established for the origin domain?

first part: no, they will not be going separately, because the browser(a tweaked Firefox = Tor browser) can not know what to separate from what. second part: it depends on the browser you're using. ...
Alexey Vesnin's user avatar
  • 6,225
1 vote
Accepted

How does JavaScript interfere with Tor browser anonymity?

It is possible that NoScript means allowing JavaScript to run unrestricted in general, not just in the Tor browser but also all browsers, can be very dangerous since after all, it can lead to tracking,...
Swangie's user avatar
  • 984
1 vote
Accepted

Does Tor Browser get a unique fingerprint with JavaScript, even if HTML5 Canvas data is blocked (amiunique.org)?

Last year Tor enabled a feature which returns randomized image data when a website attempts to extract an image from the canvas. This is better seen by looking at the image on https://browserleaks.com/...
Steve's user avatar
  • 3,142
1 vote

Can a website read out my MAC address using JavaScript even though I use Tor?

In general this is not possible. This question was previously discussed at StackOverflow (see MAC addresses in JavaScript). Only if you are able to use signed JavaScript it is possible to get more ...
Jens Kubieziel's user avatar
  • 8,570
1 vote

How to use Tails/Tor with sites that need Javascript

I found if I do this then go to old.reddit.com it works much better. If you don't change the about:config settings Tor won't let you connect to old.reddit.com I cannot reproduce this. The old reddit ...
championquizzer's user avatar
1 vote

How to show the Tor Browser, again the menu items that are hidden compared to the esr version?

If you're looking for IP address "obfuscation" rather than anonymity, you could run Tor standalone and take a normal firefox and set it's proxy settings to the socks port of Tor. If you're ...
silverstar's user avatar
1 vote

alternatives to javascript for tor websites?

PHP is a popular choice. It runs entirely on the web server, but isn’t as flashy as JS. Like stated in the comment of your question though, JavaScript is not disabled by default.
Birb's user avatar
  • 310
1 vote

Can I2P sites run Javascript?

There's nothing inherently bad about javascript on tor or i2p, but there is a concern about using badly written javascript. If you're using good code that doesn't 1. give away your personal ...
elmerjfudd's user avatar
  • 2,274
1 vote

NoScript 5.0.6 not working on TBB current build 7.0.2

Google Maps in the browser does not use Java but Javascript. No Script is great at blocking Javascript from loading and running at all. You need to make sure No Script is set to block everything ...
james-see's user avatar
  • 344
1 vote
Accepted

How come Shopify recognizes my local currency with Tor browser!? (no log-in, no address entered)

CAD is the default and changing the currency in the drop down doesn't affect the displayed message at all. The site doesn't know, it's purely a coincidence if it is accurately depicting your currency....
cacahuatl's user avatar
  • 11k
1 vote

Javascript Clarification?

When I used the find my location feature on a few websites with JS enabled, it showed that I'm in that exit node's country. So this leads me to conclude that the chances of JS leaking the real IP is ...
Natalie Lotz's user avatar
1 vote
Accepted

Selective javascript

Noscript allows this functionality, you can go into it's settings and enable fine grained control of what scripts are and are not allowed. However this is not recommended, for a couple of reasons. ...
cacahuatl's user avatar
  • 11k
1 vote

Why do fingerprint sites say Tails uses Javascript version 1.5?

Thank you for the discussion above @canonizingironize. Summary: Some fingerprint sites use the language attribute of the tag in html code. This was deprecated with HTML 4.0 Specification in 1997 ...
Gabriel Schulz's user avatar
1 vote

Can JavaScript get my real IP?

yes, the JS itself is capable of making an external requests in a several ways, like simple HTTP GET "some-javascript.php" with a js content type, incorporating the IP address of the HTTP request, to ...
Alexey Vesnin's user avatar
  • 6,225
1 vote
Accepted

Why is javascript enabled by default in the Tor browser?

They weighted the pros and cons, between security and user experience. You are right, Javascript makes your browsing unsafe. It allows a website to deanonymize Tor users. It has been used previously ...
Yuriko's user avatar
  • 460
1 vote

Can site.com attach (and access) identifying cookies to TorBrowser session if JavaScript disabled?

With or without Javascript Tor Browser has a default policy of blocking third party cookies. Cookies can only be set or retrieved by request of domain in the URL bar, regardless of resource fetches ...
cacahuatl's user avatar
  • 11k

Only top scored, non community-wiki answers of a minimum length are eligible