4

As far as I can tell this is done by: Onion-Location: http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html header when accessing https:///www.torproject.org. The header is shortly described here: https://support.torproject.org/onionservices/onion-location/ : What ".onion available" means in my browser? Onion-Location ...


3

I am not sure, but I am guessing you might be encountering a blank page? This is copy-pasted from my reddit post: https://old.reddit.com/r/TOR/comments/lmrdk6/tor_browser_safest_security_and_duckduckgo/ How to fix it Enable noscript in the NoScript options: Click on the hamburger menu (three bars in the top right corner) Add-ons The three dots for NoScript ...


3

One workaround is changing the URL from https://www.reddit.com/r/... to https://old.reddit.com/r/... As long as you don't mind using the older (and in my opinion, vastly superior) Reddit interface then this is one way to bypass the problematic pages.


2

Short: it does not send a command. It creates new connection to SocksPort, using different credentials, and sends new requests to domain through it. Details: Tor do isolates streams to different domains through different circuits. I don't know why exactly, but TBB tries to harden isolation by // __tor.isolateCircuitsByDomain()__. // For every HTTPChannel, ...


2

There is no association between the two in any form (etymological, architectural, etc). Both Tor and BitTorrent were created around the same time (early 2000s), but for entirely different purposes (peer-to-peer file sharing vs anonymous Internet connections) and using entirely different designs.


2

How Firefox Addons remove your anonymity/privacy: The addon collects data on the Tor browser user. Many addons usually collect some form of data and even if the Tor browser does protect the user to some extent, it's still going to hurt the user's privacy. Example addon: Last Pass Password Manager (there are many others) Last Pass Password Manager is a ...


2

Or if someone know a good place for buying hardware for my pc on dark web Please, do not buy hardware on the DarkWeb. It is mostly scam and when not, it is stolen property and buying it is not a good idea. Best, non-scam, up to date links you can find at http://darkfailllnkf4vf.onion/ (I don't vouch for this site, neither any sites by this link, information ...


2

It's a bug that will be fixed soon, see: https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40506


2

This got fixed as of 10.5.4 (based on Mozilla Firefox 78.13.0esr): Source: https://blog.torproject.org/new-release-tor-browser-1054


1

In case you want to protect your communication from your ISP, the best practice would be to use Tor over VPN. A VPN establishes an encrypted tunnel between your device and the VPN server, concealing your true IP address and your activities from your ISP and any hackers or malicious individuals who might be monitoring the network. Using Tor with a VPN gives ...


1

Ok it seems that pacman was the culprit here, not tor. I had a torrc.pacnew file which was causing the problem. I managed to fix it by doing the following: mv /etc/tor/torrc.pacnew /etc/tor/torrc Then I just added my personal configurations to the file


1

I'm pretty confident that there has never been an official Tor Browser version that has included malware, so I think this is just a badly written article (the rest of the article doesn't look very good either). As always, verify that the signature is correct after you download the browser to make sure you downloaded an unmodified, official version. It's also ...


1

How the Tor browser disables SVG images: The Tor browser design and implementation document states for the high security preference: This security level inherits the preferences from the Medium level, and additionally disables remote fonts (noscript.forbidFonts), completely disables JavaScript (by unsetting noscript.globalHttpsWhitelist), and disables SVG ...


1

No, even if the user is using dark mode, light mode, or some other theme (system theme or app theme), this cannot be used to fingerprint the user if they are using the Tor browser. Detecting dark mode or light mode does not even work with the Tor browser. This does not affect the user's anonymity, privacy, or security in any way. Normally you can use CSS, ...


1

I think it is: Re-entry into the network is now denied at the Exit level to all relays' ORPorts and authorities' ORPorts and DirPorts. This change should help mitgate a set of denial-of-service attacks. Closes ticket 2667. New "feature" in tor disallows Tor over Tor. Whether the "feature" works depends on if the specific exit operator ...


1

Just click on the lock icon in the top left corner and you should see the current circuit in the Tor Browser. Once you click on the lock, you should see whether the website you are using has a secure connection or not. You will also see the current circuit being used. You can click new circuit if you want to connect to the site from different servers, ...


1

After reading a bit, I've come to believe that this particular extension may or may not affect your anonymity. It's complicated and for me, I wouldn't use it. (I believe) it's just not worth the risk given that even one error can completely deanonymize you. Here's what I found: On KeePassXC-Browser extension's private policy (https://addons.mozilla.org/en-...


1

The most likely answer is: Tor Browser keeps these pages because there is no reason to remove them. Firefox is a big, complex project with lots of components that depend on each other. And it keeps changing, both to make it perform better and to keep up with changing Internet standards. It is not really possible to just pick the parts you want; you have to ...


1

It is possible to set your homepage to a file:// URL so the homepage can be loaded from a text or HTML file on your local computer (rather than a URL on the internet). If it is plain text, the links won't be clickable. When you open Tor, the new home page is used instead of the default Tor page. Make a simple HTML file with your bookmarks in it and point the ...


1

Timing Attacks: Having another non-Tor browser open will deanonymize you if it is correlated with the information the other browsers/programs provided. This means that you should avoid visiting the same websites, using the same accounts, etc. Assume that you have two accounts on a website, a public account which you access with a regular connection and a ...


1

The newest update to 10.0.13 corrected this behaviour. Unfortunately, NoScript still doesn't set javascript.enabled to true when setting the security to "safer", manual setting is needed through about:config (and when going back to "safest"). But that's a minor inconvenience, possibly safer.


1

This post on Reddit: https://www.reddit.com/r/TOR/comments/8x7dwj/why_public_wifi/ is a good source to answer this question. As one Reddit use stated, if your Internet Service Provider can see you are using Tor (assuming you directly connecting to the guard node) and is also the Internet Service Provider of the connection endpoint like the website (which is ...


1

You should use your system's default for all tcp timeouts, which is likely 60-90 seconds. A quick diff of the about:config settings matching network.http*timeout in the following two browsers: Mozilla Firefox 78.6.1esr and Tor Browser 8.5.5 (based on Mozilla Firefox 60.9.0esr) ...shows two differences network.http.connection-retry-timeout and network.http....


1

Last year Tor enabled a feature which returns randomized image data when a website attempts to extract an image from the canvas. This is better seen by looking at the image on https://browserleaks.com/canvas. Each time you refresh the webpage, the image should change. So the canvas is intentionally unique, but changes so that you cannot be tracked by it. ...


1

The Tor Browser is designed to avoid writing any sensitive data to disk unless the user changes the default settings to enable a feature that does record sensitive data. So with the default settings, Tor Browser does not save cached versions of websites. You might find this document useful (section 4.3. Disk Avoidance): https://2019.www.torproject.org/...


1

I had some local settings that caused this issue. Solved it by removing local setting folder (on Mac): sudo mv ~/Library/Application\ Support/TorBrowser-Data ~/Library/Application\ Support/TorBrowser-Data-achive-2021-01-18 I suspect it was caused by "HTTPS Everywhere" or "No Script plugin". Strangely disabling them did not fix the issue. ...


1

The software you downloaded ("tor-browser-linux64-10.0.7_en-US.tar.xz") is called Tor Browser, a browser derived from Firefox. This browser is intended not just to route your traffic through the Tor network, but also to provide extra protection from proxy-bypass bugs, browser fingerprinting, etc. The "chrome" folder is a standard Firefox ...


1

HTTPS Everywhere does not block all non-https requests since it would block a significant fraction of the Internet for users, hurting usability. Instead, it uses a ruleset to only modify requests for specific domains. You can search the list here: https://atlas.eff.org/index.html. Note that uniquemachine.org is not in the list, so the HTTPS Everywhere ...


1

What would be the issue? Logically, there are three possible answers: Facebook incorrectly recorded your logins. This seems unlikely; I am not aware of any reports of this. Facebook detected one of your logins as coming from Portugal, despite you not being in Portugal. This was addressed by cacahuatl’s answer: the most likely answer is that you logged in ...


1

As of March 2021, it appears the HARICA, a certificate authority based in Greece, also allows you to obtain an SSL certificate for a .onion domain. While HARICA offers them cheaper, To quote their website, one of the types of certificates they offer is listed as SSL DV Onion (Domain Validated - Onion): SSL/TLS Server Certificate that includes one or more ...


Only top voted, non community-wiki answers of a minimum length are eligible