Alternatives to Tor

I heard people say here and there that Tor is cyberhumped to soykaf, or something along the lines of glowies owning most Tor nodes but is this really true? And if so is there any alternatives to Tor at all? They don't even have to be good, but I am really curious if anyone in the past decade has even tried...

Also I am ngl I am very new to the board and lurk from time to time but is there like some filter that changes "p0 zzed" and "sh it" to whatever the "fU ck" cyberhumped or soykaf means?

Tor was created by the navy and is used by government agencies. It was released to the public because otherwise all Tor traffic would be easy to trace back to the feds (anonymity in numbers). In that way it's in their interest for it to work effectively (that's not to say that they haven't tried to attack the network however). People who did illegal soykaf on Tor and got caught made opsec mistakes that linked back to their real identities. If you don't dox yourself or cross pollinate with IRL then you'll be fine. There are Tor alternatives like I2P but they're much smaller and potentially more vulnerable due to being less popular (less eyes on the code).

>>50846 That's what I originally thought, according to some however people say it's compromised because of some notion of feds owning most Tor nodes or soykaf being sent to cloudflare. I tried searching this up but didn't find much, but idk maybe i'm retarded and searching the wrong terms or something :P

>>50847 It wouldn't be possible to prove or disprove how many nodes the feds have without some kind of leak, they would need to control both your entry and exit nodes to have any chance of fuarrrking you though. Tor is open source, you can verify whether any connections are made to Cloudflare or not. You often get their error pages when connecting to sites they protect, which might be what you're thinking of.

>>50846 >>50847 On the other hand, I2P's mixnet model is better than Tor's model. But it also pretty much precludes exit nodes from benefiting of it.

none of the alternatives to the pedophile tor network are good because nobody uses them. I2P is the least worst. Or just fuarrrk http entirely and use gemini exclusively.

>>50843 I've heard of lokinet, but don't think it's even used still

>>50847 >feds owning most Tor nodes You can look at nusenus OrNetStats to get an overview of who runs most nodes https://nusenu.github.io/OrNetStats/. If you think they run too much you can just run your own nodes and reduce the fed fraction. >being sent to cloudflare The only thing i know about that is that some exits use Cloudflare DNS. But according to https://lists.torproject.org/pipermail/tor-relays/2018-May/015170.html google is the bigger problem.

>>50843 Biggest issue with Tor right now IMO is that at times 1/4th of the exit nodes have been found to be malicious nodes. If you used Tor browser as a general web browser, odds are that your machine has been compromised. Here's how it works >assume you go to 10 different sites per day through DDG searches >assume 1 in 100 sites don't use HTTPS (use HTTP which is unencrypted) >at times 1/4th of the exist nodes have been found to inject modifications into the page of HTTP sites (researchers found they were doing this to steal crypto by replacing the wallets in the unencrypted requests, but could technically inject anything in the HTML payload since the exit node see the traffic and contents in HTTP requests) >within ((100 / 10) * 1 / 4) = 40 days you will have connected to a malicious node most likely >since tbb is open source, searching for vulns is much easier, especially in the JS engine >malicious node ships you a vuln in the unencrypted HTTP request, and your machine is compromised Tbb is only safe if you only traverse a whitelist of known HTTPS only sites with JS totally disabled and in a VM. While disabling JS massively reduces the attack surface, there is still a chance of a buffer overflow in the CSS or HTML parsers or renderers (although this is a much more difficult exploit to find and use than with arbitrary JS code execution vulns, but has happened recently in chrome-based browsers due to issues with the font library). Tor is inherently an unsafe network, and if you don't use it right (in a VM with JS disabled and only accessing certain known HTTPS only sites like lainchan unironically), then you will be easily compromised

>>50877 > Tbb is only safe if you only traverse a whitelist of known HTTPS only sites with JS totally disabled and in a VM. While disabling JS massively reduces the attack surface, there is still a chance of a buffer overflow in the CSS or HTML parsers or renderers (although this is a much more difficult exploit to find and use than with arbitrary JS code execution vulns, but has happened recently in chrome-based browsers due to issues with the font library). Tor is inherently an unsafe network, and if you don't use it right (in a VM with JS disabled and only accessing certain known HTTPS only sites like lainchan unironically), then you will be easily compromised There's a reason Whonix uses its workstation vs gateway model, it mitigates the consequences of that exploitation risk.

>>50878 fix Damnit, there isn't supposed to be a linereturn after that quote marker.

>>50878 you are correct, whonix is designed the mitigate much of these risks and is a good approach. IMO here is a good ranking for for tbb usage from best tier to soykaf tier: >best (schizo) tier >whonix workstation + gateway, only use tbb on workstation, keep the workstation totally isolated (never transfer files to and from it), disable JS, only go to certain sites that are known to be HTTPS only, rotate the workstation VM periodically >great (also schizo) tier >liveboot tails in a VM, disable as much passthrough devices as possible (mic, camera, etc), delete tails when done, and same rules for tbb as above >decent tier >use tbb on any linux machine with JS disabled and only going to HTTPS sites, always keep tbb up to date >soykaf tier >use tbb on a linux machine with JS enabled >pointless and waste of time tier >use tbb on windows or mac

>>50882 Qubes makes the use of disposable Whonix Workstation VMs pretty easy and seamless, for those interested in implementing best-tier without it being cumbersome. Transferring files from it can be safe as well, so long as you make sure to transfer them on networkless qubes.

>>50877 I'm fairly certain that with onion sites at least, tor connections are encrypted end-to-end even without https

>>50888 >>50890 >>50882 >>50879 I would appreciate if all lurkers read up on how Tor works: https://svn-archive.torproject.org/svn/projects/design-paper/tor-design.pdf >Alternatives to Tor The best one in existence is up-and-coming, but its test network got even more nodes than Tor, and mainnet will grow to an extreme degree. That is Nym, based on the Loopix anonymity protocol, but paired with a crypto token whose value is based on traffic mixing (you pay nodes for bandwidth). Nym - nymtech.net/ Loopix - https://arxiv.org/abs/1703.00536 Please read the PDF about Loopix- the system is so massively resistant to traffic-shaping and traffic correlation that you're going to have to be really retarded or use a really leaky protocol/implementation of some client to be deanonymized.

>>50902 For now, your best bet would be I2P, which you should read about here: http://i2p-projekt.i2p/en/docs

you guys are still bumbling around with this soykaf? > look up who writes the code for GNU Net > message them on IRC & find out the best way to support them > give them all the buttcoins you supposedly mined in 2014 < you will have the fuarrrking alternative to tor AND THE INTERNET that you built you fwarking useds

>>50902 >I would appreciate if all lurkers read up on how Tor works: https://svn-archive.torproject.org/svn/projects/design-paper/tor-design.pdf What's your point? That doesn't contradict any of that conversation, it seems to support it.

>>50904 Assuming you're not just spilling the soykaf, care to address this question of mine? >>>/Ω/50889

>>50843 >>50844 4nigger faceberg refugee comes to lainchan. Doesn't know the culture. Initiates conversation with FUD strawmen he pulled out of his glownigger ass. Asks dumb questions. Expects to be treated nicely.

>>50877 What kind of negative four digit IQ one has to possess to visit clearnet http sites and send them e-money? Your assumption is really weak because minimally technologically literate persons: a) Use Tor Browser with javascript off by default b) Kind of http sites they visit are static geocities pages c) Don't visit soykafcoin phishing pages on plain http clearnets and check market (which are located on onion domains where exit nodes do not participate) addresses at multiple sources d) Do all their payments from localhost monero wallet e) Carpet bombing this demographic at exit nodes meets law of diminishing returns, at this point it would be better to obtain server access to a website the target demographic or person visits, or create a honeypot and flock them in.

>>50912 I did not contradict, but inform.

>>50877 Isn't it kind of a logical leap from "wallet ID strings were replaced" to "hard-to-find vulnerabilities in how static content is displayed means you're probably pwned"? Seems like malicious ads on the clearnet would be an easier way to build a botnet. There would certainly be more targets. Tor Browser also uses its own fonts only, though I don't know if that's the font issue you're referring to. Do you have a link to that paper? Either way, it's always a good idea to use HTTPS, and the HTTPSEverywhere addon that ships with Tor Browser has an option to block all insecure connections.

>>50846 I wonder why I2P isn't more popular. It was aimed at use for people in governments that censor their internet. Do they just not know about it?

I dont really get all the talk about tor being compromised, seems like schizo-talk to me(as in they want to feel helpless). >>51948 Its much younger so needs a few things to be ironed out. otherwise you might as well use both no?

>>51948 There is no I2P Browser. There is a Tor Browser. It's as simple as that.

>>52275 So everyone needs spoon fed even though they should be desperate enough if theiir government censors heavy enough. Just seems odd unless most people just don't care their internet is censored because they haven't been outside that bubble before or they have and preffer it this way. >>52259 What needs ironed out exactly?

>>52297 I2P is too much difficult to configure (unless you're on Spydows, but in that case you don't search to escape from mass surveillance). It is even quite easy to find yourself faced with the total impossibility of using it. So yes, Tor wins the game easily. Between an anti-surveillance tool that is easy to use and an anti-surveillance tool that is difficult or impossible to use, everyone makes their choice easily.

>>50882 Don't use tbb. Just Don't. holy soykaf the amount of bad advice posted here is mind blowing if ur lurking and actually trying to figure out security then read through official docs and research papers don't trust randos who don't know what they're talking about/ feds trying to train people into soykafty opsec

>>52340 Why? It's perfectly fine to use it in Whonix.

>>52341 because "wah wah people need to listen to me because I act like I'm knowledgeable! You can tell because I pretend to be more paranoid than everyone else"

>>52297 >everyone needs spoon fed If your software isn't as easy to use as the competition, people will use it less. Not everyone who's afraid of the government is good at computer, and making software user-friendly is just...part of making software?