How do you browse chans and websites?

This may seem paranoid, but i am curious to know if you are comfortable using the clearnet to browse websites and chans (like this one) or you use VPNs / TOR and the reason why. I'm talking about normal everyday browsing, no illegal stuff.

>>20659 vpn + user-agent switcher.

>>20660 > user-agent switcher why? what does it do?

>>20665 Lets me choose which device/os/browser i'm using to further anonymize myself.

>>20666 know a good one for firefox?

>>20659 I usually use Tor and no JS allowed, but I make an exception for 4chan because I realized I was too far gone if I couldn't bring myself to post anonymously about wanting to fuarrrk horses on /mlp/.

>>20669 Aren't TOR connections blocked on 4chan anyways unless you use like 15 proxies and a VPN?

>>20659 I use Librewolf which has some built in privacy positive features inside a virtual machine if it's not lainchan. And NoScript JS, uBlock Origin and Local CDN as browsing extensions. https://librewolf.net/docs/features/ There are some side effects of enabling some of them https://librewolf.net/docs/faq/#usability You might want to check QubesOS if you want to go down the privacy virtual machine rabbit hole https://qubes-os.org/ >>20670 Not that Lain, but the last time I tried using a VPN for posting on 4chan I couldn't because they had the VPN's IP range blocked. I wouldn't be surprised if they do the same thing for all Tor connections.

I try to be as unprofitable as possible and not get assimilated into the infiinite scroll collective - it's working for me. No apps, no socials - advertisers don't want me.

qubes-whonix tbb with dummy traffic

>>20667 this is what i use https://gitlab.com/ntninja/user-agent-switcher

>>20670 Yes. I already knew but I tried posting a thesis I'd worked on over there, I hunkered down for hours trying literally every fuarrrking proxy I could, thousands and thousands of proxies, every single one blocked. They have DPI, they will know you're using Tor despite chaining proxies to the end of a circuit. Haven't tried a VPN yet, some VPNs probably work. But I'd have to enable JS as well which I am unwilling to do, I'll have to figure something out.

>>20693 not the lain, but I've used multiple VPNs on 4chan and every single location I used had already been derezzed

>>20696 On 4chan, Mcdonalds wifi is the strongest VPN of them all.

>>20677 There are dozens of us!

>>20699 Every McDonald's in my area and including hospital wifi connections have 4chan derezzed. Probably my fault as the website started gaining notoriety after some bitch I dated blabbed to the whole town that I posted shooped pictures of her spreading her asshole to the goatse picture back in the early 2010s.

>>20701 But 1) you can use a proxy and 2) most residential wifi around you just uses default passwords

>>20703 Oh, I easily can get around it. I just laugh about it mostly. I don't even use 4chan anymore. Haven't since 2015.

I'd say a lot more people in Louisianna are going to start learning how to use Tor.

>>20718 Why Louisiana in particular?

>>20719 Not that lain but as of January 1st, Louisiana law requires porn sites to validate your government issued id before letting you browse. Some politician from Utah is trying to get a similar law at the national level.

>>20727 Oh, that. I was laughing when I saw that in the news. I told my family that no website gives a damn what anyone in Louisiana says. It, at best, affects businesses in the state.

they shoulda just legalized it, regulated and taxed it. works with marijuana, will work with porn. right?

Firefox ESR + arkenfox.js additional config: geo disabled addson: NoScript yeah and a vpn. I used to use tthe Decentralyed and Cookie Autodelete but I found them to be rather useless. On the side node uBlock Origin is nice but NoScript clearnet is more my cup of tea. >>20671 >And NoScript JS, uBlock Origin I wonder what use does uBlock Origin have when you already use NoScript JS. From my experience the majority of the sites won't get a chance to show you adds unless you uncomment the most of the restricted js.

>>20742 uBlock Origin blocks other things in addition to blocking ads

>>20742 uBlock is actually better than NoScript.

>>20763 disabling js in about:config is better than any addon and is 100% reliable. Honestly I think all of these privacy addons are memes they just further distinguish browsers and can be subject to attacks, they can be supplemented by disabling antifeatures like js and webgl, cookies and such.

>>20766 True but depending on your own personal situation one may need JS for the webpage they are using to function. However, there are ways around even that as well. Such as just downloading the content and viewing it offline, etc.

>>20701 >after I posted shooped pictures of her spreading her asshole to the goatse picture funny

>>20671 Thanks for this post anon I am now using this as my main browser. I've been using firefox-esr for years after getting bored with autismmoon but this seems better.

>>20679 Thank you, sir. I am feeling more anonymous already. The random mode is a great feature.

>>20679 looks more basic and inferior to Chameleon (previously called random agent spoofer)

>>20659 i always go to lynx when searching for something online or browsing imageboards that don't require javascript. no cookies, no JS, no ads, no bullshit; only text. right now i'm posting via firefox with ublock origin and umatrix with javascript disabled, because posting from lynx is a big pain. for darknets, i only the tor and i2p network with the tor browser bundle and i2pd (for i2p) with javascript disabled on about:config. if someone can convince me that browsing clearnet websites via tor is safe (of course the ones that don't block it), i will do it more often. i actively avoid browsing 4chan and others like it. it's not worth my time, or anyone's time. that soykaf is cloudflared and ridden with javascript from top to bottom, and don't get me started on the absolute retardation and schizophrenia that everyone there shares and promotes. just look at some of their banners.

>>20902 >if someone can convince me that browsing clearnet websites via tor is safe (of course the ones that don't block it), i will do it more often. Well, I will admit that exit relays are more likely to be malicious than ordinary relays used in hidden services. However, TLS and PKI are very strong and a compromised CA is unlikely to be used against you when you connect to a site. Onion services get you a trust on first use model, so you are technically more secure, but it wasn't like TLS was going to break on you anyway. Even if your connection were to go effectively unencrypted, you can post on some sites without any JS or webGL or webassembly at all. >i actively avoid browsing 4chan and others like it. it's not worth my time, or anyone's time. that soykaf is cloudflared and ridden with javascript from top to bottom, and don't get me started on the absolute retardation and schizophrenia that everyone there shares and promotes. just look at some of their banners. Their moderation is both too much and too little. They are a honeypot with malicious practices (cloudflare might as well be unencrypted, js, tracking scripts, blocks public proxy IPs, works with agencies) that prevents us from posting there, but also their moderation is too lax in other respects and allows eternal september retardation, like schizos who take fake application-layer left-right politics seriously, bizarre reddit-style nihilism, people who are too stupid to blue-team their own conspiracy theories, boring misogynist incels. The latter is actually the worst part, the former only drives the nail in the coffin. Anyway as they say, garbage in garbage out, do not view that site.

>>20693 Just use paid proxies.

I thought that the main point of the 4chan pass is so you can post from behind a vpn? If you buy, remember to pay in crypto, pass through monero and use a fresh address for litecoin or whatever that they accept. I haven't bought it, so if you guys do buy let me know if I need to match it with a vpn or if it will allow me to connect from tor nodes.

>>20905 I can't stress this enough: stay away from 4chan. Most anons there aren't willing to have a meaningful and constructive conversation about anything. If you do find a not terrible not trolling thread, you have to go through a lot more low-quality troll threads that aren't removed by the mods, people that only spam nakadashi, kys, nigger, glitterboy, tranny, etc. It's a burning swamp, and that toxic soykaf WILL get to you before you notice, IF you notice. You deserve better, lainon. Do not spend any money on that hellscape, and please convince other people of that too. You will lose hours of your life that you could be spending on doing more productive and healthier things. See >>20903 .

>>20909 I appreciate your point of view, but if they won't leave the honeypot they might as well not get jammed up in it. (stay somewhat private on it, even if it would probably be better to stay off it) A few times I've realized that I was browsing /fit/ or /biz/ catalog as a pretense of productivity while really I just wanted to see some mild blue-board coombait. A bit of self awareness at the right time can save you a lot of wasted time. The go-to excuse I have is something like "I don't need to stop browsing, I just need to be more selective- maybe I'll totally only read the good threads today" matched with "how about all the obscure useful/interesting stuff I've only learned about because of casual internet browsing? I could miss out on something really important" when this doesn't really work out rationally. How often will there be an actual business (aka /entg/, "hustle", e-commerce) thread on /biz/? Even when there is, will it have anything novel to inform me? It is a waste of time, and the ratio of slop to glistening shards of utility just creates an effort justification trap.

Tor is inherently insecure in the sense that the alphabets have a good chance of determining your identity, but I still consider it better than ISP's and every site you visit having unrestricted rights to market and share your browsing history and identity with anyone and everyone. Eventually I'll start using a VPN too when I decide on a good one, but really, deep packet inspection and the fact that google/cloudflare/etc are on almost every website in some capacity makes it not much better than Tor, and I'm mostly wanting a VPN so I can easily torrent. For clearnet I use ublock+noscript at a minimum, but the only thing I do there is buy stuff. The proxy feature on startpage is also quite useful at times, though who knows how much we can trust them. Honestly these days I am mostly just paralyzed by the surveillance state, it really takes all the fun out of everything for me, I use the internet much less these days, but lately I'm trying to push on in spite of it all because I think once you let them dictate the way you think and act online they already have won. fuarrrk the modern world and "the man" needs to go eat a bullet or three. >>20776 Switching user agents and such isn't going to do you much good unless you are on public wifi or otherwise obfuscating your real IP.

No to be honest , I don't do anything. I post here without VPN and other places I don't post at all.

i use an i2p outproxy sometimes on desktop. but mainly via phone on kurobaex

>>20675 Same. Only use soykaf when you're forced to and no one will bother with you because you don't bring money. >>20671 Been using IceCat for a while now but feels like kicking dead whales down the beach. Downloading LibreWolf to get a feel.

>>20671 Do you have any interesting input on LibreWolf? Can you compare it to pALEm0r0N?

>>22318 The only reason to use palemoon over librewolf is the UI.

Tor Browser, safer or safest. Sometimes via Whonix.

I don't use Tor because it hacks me through the Intel Management Engine to snoop on my keystrokes. Go to about:config and type "intl.ime.hack." Why would anyone think something made by the U.S. Government would protect them from spying, rather than spy on them?

>>20659 how do other anons/lainons track your IP through the imageboard? i'm just curious

>>22318 >Do you have any interesting input on LibreWolf? Can you compare it to pALEm0r0N? not that anon, but ive used both. heres a quick overview Palemoon >traditional web document browser >powerful XUL extensions that can hook into many APIs that WebExtensions simply cant. XUL extensions put every single "modern" browser to shame. >lower resource usage than other browser due to architecture (only runs in 1 process). >generally pretty good defaults, although change the home page >slower on web apps and JS heavy sites (you should block JS anyways) Librewolf >webapp browser >weaker WebExtensions with extension standards largely controlled by google, ad blockers are potentially at risk >silent by default, last time I used it the browser made no 3rd party connections >good defaults, including ublock origin, but some sites will break with the additional hardening. not friendly enough by default to recommend to normal people also >pALEm0r0N its gotten better, the dev responsible for most of the drama left about a year ago. main dev (moonchild) still works on it, he is a bit opinionated, but its hard to run a browser project these days, and hes doing what mozilla with its 500 million google bucks never could: continue XUL while still having access to some of the "modern" web app ecosystem.

>>20659 Yes. I use brave configured to have a bit of privacy and that's enough for what I do, on the chans or elsewhere. I mean, yeah, I almost forgot you can also buy games, but what? Are they going to arrest 90% of the population? What we do is like going to the speakeasy under the prohibition. They can not arrest everyone. I am not into cunny, I am not a pedo, I don't do anything illegal on the chans and if I am arrested for what I say it mean the political police is making WWII style of rafles. We have not reached that point yet. Officially, the only 3 people who got arrested in years are the ones who said they would kill soykafwood. The party van is very real, but, again, I don't post or watch CP so not my problem.

>>20729 Are you being sarcastic?

All traffic on my daily driver machine is routed transparently through Tor. Whonix-Gateway on Raspi and OpenBSD makes this possible. It's insane to me how people in the current year still use the clearnet for anything really.

>>22812 People generally don't want to wait 2 minutes for their websites to load. Routing everything through Tor 24/7 and burdening the network for everyone else is is what's insane.

I use Tor for stuff where I want to significantly reduce a website's chance of being able to track me in any meaningful way. Generally though it's just hardened firefox with ublock origin, mullvad and overall just trying to avoid sketchy sites that try to do creepy soykaf. >>20670 Yes they are. Makes it more likely for them to be able to hand over an IP and user agent and stuff to authorities when someone posts illegal stuff, as well as banning users. >>20679 sounds good on paper, but doesn't the additional extension make it theoretically easier for websites to uniquely fingerprint you? Having JS turned off usually helps avoid that, but if you really need to check a site that needs JS, I feel like an extension like that would not be a total net positive. >>20912 >Tor is inherently insecure in the sense that the alphabets have a good chance of determining your identity Total horseshit. Operation Onymous required months of monitoring traffic to deanonymize a relatively tiny number clients (relative to the total number of Tor users). Feds also exaggerated their numbers to intimidate Tor users. Tor is far from perfect, but to suggest that feds have "a good chance of determining your identity" is just ridiculous. >>22357 Least schizo chan user

Because the feds don't give that much of a fuarrrk about these websites. Sure they watch them but the average user who just wants to jack off & see some weird soykaf isn't a target. The state is looking for potentially harmful extremists. Not to say I condone the state doing that, but I don't care as it's never affected me in a decade+ of using *chans

>>22816 Using for for non-illegal activities helps hide people who use it for illegal activities. That's the entire point of onion routing.

>>22357 Oh, so this is the post that got that guy to ask about it in the simple questions threads. In case any lurking lains are curious, these settings are not malicious at all: >>22478 >>22479 >>22816 Using Tor for normal internet traffic is encouraged by the Tor Project. The more traffic going through the network, the better anonymity provided (generally). Unless you're sucking down insane amounts of bandwidth in your normal internet usage, it's not a problem for the network. >>22812 For anyone who uses a setup like this, still use the Tor Browser Bundle. The tbb will handle keeping related requests on one circuit and unrelated requests on other circuits, but normal browsers do not guarantee this. You're also less fingerprintable when using the tbb.

I wish more onion IBs existed :( or social sites that allow for tor usage in general.

>>20909 >Most anons there aren't willing to have a meaningful and constructive conversation about anything. You are most likely looking at ai posts. Start of this year was screencap of academia suggesting to spam 4chan with ai to counter problematic thoughts. Their idea was generate posts that waste time but dont contribute anything to make the board meaningless.

>>22835 I do not recall this.

>>22836 was in january. I even posted the article here back then in some thread about ai and "dead internet". Also might mention its not only 4ch. Academics also proposed to combat wrongthink on all social media with bots replying to any offender combined with upvote botting to let the reader know who is right. For 4chan they choose another method because that's not doable there. If you cant sway them you just have to destroy them.

>>20912 >Tor is inherently insecure in the sense that the alphabets have a good chance of determining your identity 1. I don't think this is quite as likely when using hidden services, going outside of the network is always and has always been considered somewhat sketchy. 2. As opposed to clearnet, or paid VPNs/VPS's with your card info attached? I fail to see people's logic when going with this argument.

I use VPNs for everything and have considered moving to TOR just for certain websites that support it end to end (like invidious instances) but like i got a million things to take care of like repainting, fixing my arcade cabinet after its latest soykafty atgames update, studying, etc. This is all just for normal browsing purposes I think using TOR for normal browsing has its own issues as does visiting darknet only sites.

>>22859 TOR is pretty secure but I know if I was law enforcement or an intelligence service I’d spend boku bucks to own massive chunks of the network both as controlled plausible deniability for my own activity and so that I can eventually identify random people who happen to get circuits entirely operated by myself. Way back when https was still relatively rare I operated an exit node for the sole purpose of seeing what people did on it. I should mention this was not a casual endeavor and would quickly get you visited by cops without a great deal of care. The information I gleaned would have been useful to a variety of shadowy folks though i didn’t use any if it and was actually highly uncomfortable with it eventually shutting down. I won’t say what I saw but you can get an idea by searching the great em/b/assy leak which was the result of someone with the same kind of idea. If I was a glowie with free money and immunity from consequence I would have been all over snarfing up every bit and scrap I could, even keeping quantum vulnerable encrypted messages in storage for decades. Long story short don’t do illegal soykaf on TOR it’s reasonably secure but to so many entities the juice is worth the squeeze even when massive amounts of money and very long spans of time are involved.

>>22859 Just fyi you can definitely buy VPNs with greater anonymity than even crypto provides. If you’re willing to pay cash for gift cards, sit on them for extended periods of time and exchange them on g2o you can buy a variety of VPS, shell accounts, seedboxes, crypto services, VPNs, proxies and whatever other shady blackhat stuff you want. Just be prepared for a heavy markup every step of the way, major headaches when you need to renew, and zero recourse if someone rips you off. Additionally prq.se is extremely flexible about accepting what sorts of off the wall payment you can propose to pay for their services. Send them apple gift card codes, cash in an envelope, bags of gold exchanged in a parking garage, whatever you can think of they’ll probably try to make it work. They offer typical hosting services, VPNs, and even dedicated RPI hosting.

I use a Tor-only setup for all my networking. It works great. The clearnet is terrible soykaf as is, abandon all hope and never look back. Lainchan is the only clearnet website I use, but I post over Tor and without JS, making it tolerable. >>20660 >vpn No VPN should be trusted. It's not a matter of if they can be trusted, but that you shouldn't anyone them to begin with. Tor doesn't have to be trusted. You want to reduce trust as much as possible, lain. >user-agent switcher. Fruitless exercise. You can be fingerprinted with addons and fonts installed. The window size can be measured with Javascript and CSS. HTTP accept headers can be fingerprinted as well for images, stylesheet, language, encoding and webpage. Dark/Light theme, reduced motion, contrast preference, monochrome settings, inverted colors, a bunch of other color settings. Tor can be telled from Firefox with simple CSS one-liners. Firefox can be telled from Safaria and Chrome with simple CSS one-liners. I could go on with this, but you get the idea, just use Tor-Browser in OpenBSD+Whonix.

>>22886 >I use a Tor-only setup for all my networking. I don't mean to pry, but by all your networking do you mean social networking such as viewing and posting on forums and imageboards, or do you mean you proxy all of your traffic through Tor? >It works great. How do you manage sites that are hostile to Tor traffic, if at all? Do you have workarounds or do you simply find alternatives? What do you do for things such as paying bills, streaming and downloading media, and the like?

>>22886 Just as an exercise I’d like you to tell me how you would store data from fingerprinting, match it to profiles, and scale the process to millions of users. Please be detailed so that I’ll have enough information to fill an hour long slide deck for my boss.

>>22901 I mean that I use a Raspberry Pi with a Whonix Gateway that routes everything I do on my network through it, including the machine I am writing this on.

>>20659 Actually just clearnet with a user agent switcher, adblockers, tracker blockers for good measure because fuarrrk ads. I only aim to remove corporate peronalization and spying, but not gocernment surveillance. There is a post I've read on ycombinator regarding how a former NSA agent singles out people using GAPS in data. The reasoning is that they are collecting so much data that it's hard to comb through them, so they look at the people who generate no data when they should, think people who only use cash, people whose phones are not reachable in daytime, etc.

>>22926 arent you taken aback by the notion that most tor nodes are bought off by 14 eyes

>>23635 why should someone care about a notion

Firefox has become a big soykaf in privacy, calling home, which are google controlled servers. Has become the google way for get into the people who looks for the alternative to chrome. Simply go to " about:networking " in firefox and check how much domains calls and whois them, google everywhere. Try to use some user.js or librewolf and is the same, there is always a connection forced. You have to modify the internal browser files, in a complex way. Actually Mullvad Browser (which I user), a Tor Browser based browser for being used with clear or vpn internet, is the unique one not calling home ( like tor ) and that's a better sign of privacy for me than the promises from orgs accepting Google money: https://digdeeper.club/articles/mozilla.xhtml Actually tor ( and then mullvad ) are the unique with a care for fingerprinting ( also called supercookie ) where they can distinguish you from the rest only using your browser without the need of store any cookie. Fingerprinting does your VPN useless if you use the same browser/machine for clear and vpn. Test yourself: https://coveryourtracks.eff.org/ Mullvad ( you do not need to get the vpn ) and Tor Browser + Ublock with well use of accounts ( not mix clear with tor accounts, made them exclusive ) and remove yourself from corpo accounts.

>>23635 Why would state intelligence entities bother "buying off" tor nodes when they have the capability to simply monitor everything that leaves all tor exit nodes, which are publicly listed by the Tor project? Also, Tor project monitors questionable activity by Tor node operators and does a good job of eliminating any that do anything that might compromise Tor. It's really easy to come up with these kinds of wackadoodle ideas about Tor when you don't actually know much about it.

>>22816 You can configure tor for use countries close to you improving Ping. You can even serve a Guard relay in your home quitting a hop delay and evading your ISP snooping your traffic ( but in exchange, you say clearly you support TOR ) . With the guard in home it feels like a VPN ( FREE VPN) . Because that all VPN's have a lot interest in speak bad about Tor.

>>23635 >>23643 The government really does not need to be running many exit nodes to de-anonymise users, and entities like KAX-17 tended to focus on entry nodes and relays. Control over an exit node is not needed to successfully conduct a timing attack when you have control over the website someone is connecting to. If you can monitor an entry node, and the website that traffic flowing through that node is destined to, you can determine what's what. Most websites have been infiltrated (or are owned by) Big Tech, which is what facilitates the USG's surveillance network. There's no evidence that the bulk of Tor nodes are run by the government, but there's not a whole lot of evidence to the contrary either, nor is there any evidence to suggest that most nodes are not at least compromised by the government. From my perception, it appears that most nodes are run off of VPSes, thus being vulnerable to government exploitation, specifically they tend to utilise large VPS providers. Obviously people don't control VPS servers physically so anything can happen to them. A government could pretty easily compromise VPS-based Tor nodes, a VPS-based node wouldn't need to do anything more than circulate traffic in order to become a target, then some agents could go down to the VPS provider and compromise the node, unbeknownst to the guy renting the VPS. Smaller VPS providers appear more inclined to alarm their users to government activity by the way of investigations, but I'm doubtful of larger ones, and even large providers like OVH and Hetzner have become outwardly hostile to Tor anyway. It's not a good practice, VPS-based nodes can be compromised, and company policy can change overnight resulting in nodes being shut down, people should be running Tor nodes from home, but they can't because they're afraid of persecution over it, they'd rather be techno-slaves. Their freedom is already gone, they just don't want to see it. Also the Tor Project in my opinion is awful at handling malicious nodes. With every major reported intrusion of the network like by KAX-17 and in 2014 the Tor Project was always slow to respond initially. And the Tor Project is certainly not swift in removing malicious nodes, they tend to take forever to remove them, and sometimes even respond to emails reporting malicious nodes without actually taking the nodes down. https://web.archive.org/web/20150705184539/https:/chloe.re/2015/06/20/a-month-with-badonions/ https://web.archive.org/web/20170223165326/http://chloe.re/2015/06/17/tor-is-dead-centralization-is-wrong/ Tor is deeply flawed truthfully, but it works, but it doesn't work well enough, I think it should be improved upon. People let their vision be blocked by fanboying. I couldn't comprehensively outline its problems without 5-10k words. People for one need to stop being afraid of persecution, because for the most part their fear is unwarranted, the people scared of getting raided over hosting nodes never even tried, and they need to reject the notion of secretly using anonymizers like Tor, because it is impossible to reliably use an anonymizer secretively. You can keep your activities secret with the anonymizer, but you cannot reliably keep your usage of the anonymizer secret, and might end up compromising your secrets in this venture. An idyllic world is one where everyone is able to use anonymizers free of persecution. Trying to hide away your pursuit of nanonymity is just a slave's mentality, as is hosting a node outside your own home. You cannot have your cake and eat it too, you can only think that you can have that, while untold damage is wreaked against your cause through that action, to your oblivion.

>>23645 The opening of Tor network makes it susceptible to people putting tor relays with bad intentions. For now, they only can try two things : Trying to make a MIT to you for profit ( stole your credentials ) , or identify you. Trying to make a MIT to you for profit: The principle of Tor is use encryption end to end, using the tor circuit for anonymization. You using https ( ssl ) makes it impossible to the node EXIT snoop exactly what are you doing inside the domains, just like your ISP. A Exit relay IS NOT A PROXY. This attack consists in deploy a EXIT relay ( which requires 4 days for get accepted by the tor network), then show you crafted pages simulating the site your are expecting to visit, like ones used in phishing. This will show you a big warning ( like the clearnet!) to sites which clearly you know are or must be https . This can't be improved because the bad tor exit can't simulate the real certificate of the page. First you must be a idiot ignoring the warning. Of course, the option of "Https always" in the browser is obligatory. Knowing this , simply not enter to any non https connection using tor browser and is done. Identify you: This is the big fear about Tor network which could be controlled in half by governments and effectively it could. Like I said , the relay are circuits where you can't snoop into what is happening in the encryption connection. Again, Tor are not PROXIES, like cloudflare. So the way of identify you consists in you falling in the three relay required for your circuit ( witch randoms with tor browser ) being under bad control, and check how much data is sent between exit and guard node until found your ip in the guard node. This is particular hard to archive, ( by the random of choose of the circuit ). And is really easy to evade: You can use relay nodes from friends or even create one yourself. You can even choose what country use of exit! yeah, like those VPNs... Usually people praising snake oil, I mean, VPN against TOR is clear don't know how works or they are gaining money with it, like every soykaf in internet nowdays.

rooted custom rom phone + orbot + kurobaex

>>23647 >why all three relay circuits have to be compromised? >why is it it easier to compromise relays than exit nodes? so, 1) create ur own relays 2) exit in Switzerland? русский? thanks for an interesting comment

>>23816 can you use orbot do relay thru ur own ports, dont feel like giving all of my information away

>>20659 I exclusively use tor for anything that isn't intrinsically self-doxing. The net keeps getting smaller and smaller... >>20665 Helps prevent people from using browser-specific exploits against you, for one. Not perfect - there are about a zillion ways to fingerprint browsers even aside from UA - but still useful as part of defense-in-depth. Of course, you have to be careful to avoid doxing yourself via being the one person with a mismatched UA.

>>23819 creating your own relays is counter-productive since you own it, and control it, it can be traced back to you, you don't use things in the long term anonymously when you own them. patterns will emerge to passive observers from your usage of your own relays that you attempt to separate from your own identity. swiss privacy is a marketing buzzword.

>>23819 >why all three relay circuits have to be compromised? If you are the red team, The guard (entry) must be under your control for know your real ip, I think the isp of the Guard could do the same like can look for the entry connections and data transmitted. You need also the exit node for look which connections goes to the domains watched. Taking how much data ( you can't check the content usually) there is between the exit and the guard ,you can get an proximate idea who is who. The middle relay is not useful as is, but if you have it with the another two, the entire circuit is under your control, and you don't need to guess almost nothing, you only have to follow the connection to the origin. For that you could for example, change your torrc file in tor browser and put pol. contrary countries. Anyway this is not safe, because anybody can contract where they want the servers. I got the idea about use your own Relay Guard after thinking: - If you use vpn or tor, you are saying to your ISP you are using one, so they can know you are doing something "shady" - So, using the guard, yes, you are saying clearly you are using Tor, but like is in your own net: There is no snoop from ISP, they can look the connections of another tor users only, not yours, because you not abandon your lan for connect to your Guard. They don't know if you are using your own guard or another. Some guard nodes are first, and same time, Middle relays too. Now you have a lot of connections coming inside and outside of your net, so they have to figure out which one of going out can be yours. When more people connect to you, the better. Your guard will be ready for you, anytime, and quitting the ping time of the first hop, making your Tor experience much better. If you use some fast exits and exclude from high ping countries, you will even get more speed. You can check your relay in the https://metrics.torproject.org which I found useful and cool. I admit is a pretty exciting project when you collaborate with it. The caveats: -Is the wild west out there. There is people trying to abuse your relay for making DDOS. Tor is working with new software versions for make it difficult, but they can try to exhaust your number the connections and kick your internet connection from home which can freeze when gets over a number of connections. If you will do it from home, you better know what are you doing. I had to use a iptables rule for kick out anyone trying to use more connections than usual, of course this is automatic and I don't have to worry about the Guard anymore. -You will need stable internet connection and power source. Is a requisite for being a Guard in Tor network, being 24/7 active.

>>23833 -Thinking about the fact if ISP is red team and can look the traffic, using VPN will make anonymity useless. It not even need to ask to the VPN service to disclose. You have the entry connection ( you) to the VPN server and the outgoing connection directly to the domain. Using the size of the data could be possible for the ISP know who is who. The VPN could use a pair of hops for evade this problem but then you are creating a private Tor network. - Using your own Tor guard is not perfect neither , if ISP of your guard node is again the red team, and can send somehow crafted in size package, they can check if the package leaves the guard in a outgoing connection. If not , they know is generated by you. If someone wants to speak about Tor perhaps I should to open a thread.

>>23834 >if ISP of your guard node is again the red team, and can send somehow crafted in size package, they can check if the package leaves the guard in a outgoing connection. If not , they know is generated by you. Yes, this is a classic active attack against Tor. Tor's threat model is and always has been primarily a *passive* global adversary. An active one is much much harder to deal with.

>>23835 The conclusion of this is there is nothing secure if you connect from home or work. It would be from somewhere not tied to you , in a device only used for this , and without cameras caught you doing it. For that, I always insist in the same: Not do illegal things thinking you are anonymous. There is always a risk.

>>23834 >Using the size of the data could be possible for the ISP know who is who. All Tor packets are the same length for this reason. Tor was born 25 years ago not 25 seconds ago. >send somehow crafted in size package Nope.

>>23838 https://blog.torproject.org/one-cell-enough-break-tors-anonymity/ Is old. The interesting one is "CELL COUNTING ATTACK" I will read and back here.

>>20659 it was nice while it lasted

>>20659 OP I second the following post: >>20671 Great post Lainon. Honestly, it is one of the better secure web-browsers out there. It is pretty beginner friendly and allows for a lot of control on websites when adding those extensions as you mentioned.

>>23834 >Thinking about the fact if ISP is red team and can look the traffic, using VPN will make anonymity useless. They could do deep packet inspection to get a little bit of general information about your traffic, that's about it. And they can't do that to everybody because it's too resource intensive. >It not even need to ask to the VPN service to disclose. ISPs aren't law enforcement and can't ask VPN providers to disclose anything. >You have the entry connection ( you) to the VPN server OK, so the ISP knows you're using a VPN. So what? >and the outgoing connection directly to the domain. The ISP doesn't have this information unless they are also the VPN's ISP (unlikely), and even then it doesn't do them any good. ISPs aren't nation-states and don't have the resources to monitor all of the data leaving a VPNs exit servers. Even nation-states can't easily or reliably de-anonymize people using traffic correlation. >Using the size of the data could be possible for the ISP know who is who. See above.

A related question - how do you use shady telegram groups safely? Telegram won't even let you create an account without your phone number.

usually with my dick in hand op is a user

With my dick out waving in front of the camera so my FBI agent looks away. I have to warn you Lainons. Do not use a user agent switcher that automatically changes agents periodically because if it switches on a logged in account many sites mistake it as a cookie jacking attack especially if your dynamic IP address changes and if you are using fingerprint blocking all together. If you ever had an account lockdown for security reasons youd know how hard it is to get back when you dont even know what user agents the account recognizes.

>>24428 Doesn't the user agent change whenever someone upgrades their browser?

>>24433 They likely ignore version numbers or only pay attention to ones going down versions. Having the user agent switcher tell them you are using a different browser and operating system entirely is what trips it since that is what the plugin I had did it would a designed change in time frames instead of doing the smarter thing and change per domain. I never knew it could cause a problem till i got locked out of many accounts this way.

>>20659 I route all of my traffic through Tor, though I'm fine with using clearnet sites as long as they don't make 3rd party requests/don't spy on me.

I strictly use Tor to browse chans, because there are a lot of creeps who I wouldn't trust with my IP address. Just general opsec to my way of thinking.

>>24511 >a lot of creeps who I wouldn't trust with my IP address sorry to break your little world but the corporations are just as freakish and you don't even know who they sell your data to

>>24516 >muh corpos The real danger is when the government decides you did a hate speech 3 years ago and the police knock on your door. Even if you trust the current administration there is no guarantee you will trust all future presidents and the internet is forever.

>>22318 librewolf should be thought of as firefox with basic privacy features & addons (mainly ublock and arkenfox script) set up out of the box. I'm not too familier with librewolf, but it does its own thing and mainly serves as a gui browser systems too underpowered for contemporary chromium or firefox.

>>24525 I disagree. This sentiment is not applicable for most people (at least in the United States). Governments in the United States almost never legally target individuals for things they say. Barring a significant change in free speach law, it doesn't seem very likely that this will change in the foreseable future. Most of the real cost to the average citizen from surveilance is getting manipulated with targeted advertisements and treated differently by bussinesses based on the information the botnet has on them. Futhermore, much of what the government actually collects comes from private communicates and websites selling the data they themselves collect, as unlike the government they do not need a warrent to directly collect invasive information. For these reasons, I think, at least in the United States, the typical citizen should be mostly concerned with survielance by private parties.

>>24527 you say that but then you have people like douglas mackey. Its relatively rare, sure, but it does happen. Its worth pointing out that the government has enforcement powers beyond merely winning in court. VDARE has just shut down due to years of being forced to comply with odious investigations by the state of new york despite never being charged with anything. Not a citizen, I suppose, but the same process could be and probably is from time to time applied to citizens, and certainly could be applied for mere speech. There was also that soykaftalking nevada obese boomy boy who got killed by the FBI for his threatening faceberg posts. There absolutely is a danger from the government associated with online speech.

>>24528 not to say that I disagree with the basic conclusion of >>24527 , namely that one should be more concerned with third party retaliations, but merely that anyone who thinks the first amendment means the government won't go after you for just saying something is an idiot.

>>24527 >government: seize your property, put you in jail, murder you if you resist >corporations: "manipulate" you with advertisements and "treat you differently" It's not even funny how deluded you are.

>>22812 where can i learn how to do this? i already know how to set up pf but i don't know how to deal with the raspberry whonix side and how to route it trough it. do you connect the pc to the raspi directly and the raspi to the WAN? also hi guys i'm OP lol hope everyone is okay

>>24527 >more concerned about private parties private parties which are not insignificantly agents of the government. it is simply polite sentiment which keeps US government from going full UK and arresting people for social media posts, and most social media companies will just roll over and give the feds what they want if pressed, like Google did with the January sixth stuff, and the FBI are still arresting people for being in the vicinity of the capitol at the right time. sure it might be illegal, but do you really think that the courts are that honest and pure as to uphold the law ? Suppose they are, most of them anyway, but you'll get to find it out after months of court proceedings, some jail time, harassment and expensive legal fees. Maybe in the process you loose your job, can't make rent, and next time you apply to any sort of employment you'll have some public record about your naughtiness. Congratulations on exercising your constitutionally protected rights!

>>24527 >almost never Thats not very assuring. And even if you arent prosecuted you are absolutely still monitored.

>>22926 are you using a whonix gateway just because it's easier to catch everything? archwiki has an iptables config to route all of a machines traffic via onion and I can't think of a reason why that isn't effectively the same thing

>>20659 grub-live + different isolated user accounts and web browers for different tasks or virtual machines for different tasks if you have enough ram.