Stying Safe on TOR

I have multiple friends that have used TOR with their personal computer usually all running windows -_- I've wanted to explore the Deep Web too, but I want be far more careful. I've seen a lot of def-con videos on the deep web, but I think you can never get enough tips How do you stay safe on the deep web?

>>1818 It's Tor not TOR. >How do you stay safe on the deep web? Maybe start by telling us what you are afraid of. There is nothing special about onion sites. They are just websites that load in your browser, the same as regular ones.

>>1819 Hackers mostly, but i'm a amateur white hat so I know the basic safety tips No Java script, vpn, pgp's etc etc

People won't be able to hack you if you disable JS on Tor (and don't do dumb soykaf like running random programs you found on there etc). The hard part is actually being anonymous.

>>1821 > soykaf I got no clue what a soykaf is But yeah, i'm not downloading soykaf on TOR

>>1822 language enhancer for s hit

>>1820 >Hackers mostly, Serious blackhats go after volume. You are much more likely to get attacked from a Facebook link than an onion site. Just like how you are more likely to be attacked if you run Windows than Linux. So you just want general browsing tips? Most attacks against web browsers rely on JavaScript so disabling that is good. Tor browser already takes care of disabling additional plugins like Flash which may be vulnerable. The best thing you can do as a user is keep your browser up to date. Tor Browser already has an auto-update mechanism. Be careful how you handle files you download, especially documents like PDF and Word. The best thing to do is open them inside a virtual machine in order to limit any damage they might do.

>>1824 Thanks for the info Yeah, I know large amounts of un-encrypted stuff is more likely to be targeted, but I still wanna be secure

The Tor Browser Bundle (which you'll want to use) has a Security Slider (in the drop down menu of the Tor button). Cranking that up to the maximum value is the best way to get both security and anonymity (because you're still using very common settings).

>>1826 Sweet, thank you

I've been using Tor for 10 fuarrrking years. (Posting over Tor right now, in fact.) Here is my advice: 1.) Use Tor Browser Bundle with high security settings, and use Linux. Distro isn't important really. I recommend Debian, personally, but the main objective is to avoid the myriad of Windows malware. Use it in a dedicated stripped down VM if you're really paranoid. If you're knowledgable about Linux security you can harden it further, but if you're only interested in exploring the "Deep Web", this isn't really necessary as long as you follow point no. 2. You don't need to go crazy and use some amnesic Whonix rig unless you're up to some shady soykaf like blackhat soykaf or running a DNM. TBB is very good. 2.) Use common fuarrrking sense. As long as you're not downloading and running crazy soykaf like CP torrents and bomb instructions in Arabic (which if you are, go fuarrrk yourself), and as long as you never trust any site (e.g. enabling fuarrrking javascript) you will be fine. If you have anything to feel free to ask your answers and I will respond .

>>1828 10 years Dam Thanks I'm not looking for illegal soykaf, just mostly wanting to fuarrrk around. Already run linux, so all set on that end, and i'm a amateur hacker so I can bumb the security a bit with guides and tutorials

>>1829 pls admins close this cancer thread

>>1830 this tbh underageb&

dont enable javascript on onion pages, open pdfs in the pdfviewer, never open anything you download through tor without using a vm. don't torrent through tor, copy the magnet link for regular use. Sites that have login credentials can de-anonymize you.

This thread is closed for its poor quality. Furthermore, this thread may have been more appropriate as a post in either of these threads: >>2 >>1397