How you can be deanonymized through Tor

Submitted ⁨⁨1⁩ ⁨year⁩ ago⁩ by ⁨ShadowRebel@monero.town⁩ to ⁨privacyguides@lemmy.one⁩

https://monero.town/pictrs/image/eec74a0a-0c07-4ec4-97b1-7db28b6c6731.webp

Please be aware when you’re on Tor that you’re not invincible. There are many ways things can go wrong, this article highlights a few key ones and gives you some solutions:
simplifiedprivacy.com/how-you-can-be-deanonymized…

source

Comments

Sort:hotnew top

db2@lemmy.one ⁨1⁩ ⁨year⁩ ago

Brendan went on in 2015 to become the founder and CEO of Brave Browser, which is promoted as a privacy browser by hiding and confusing your JavaScript fingerprints.

Altering links to add affiliate tags, selling data… privacy my ass.

source
- Skimmer@lemmy.zip ⁨1⁩ ⁨year⁩ ago
  selling data>
  
  When has Brave ever sold data? I’ve seen other people claim this here on Lemmy too and I don’t understand where it’s coming from, I know Brave has had controversies but they’ve never sold user data, I’d love to see at least a shred of evidence for this claim, it’s just FUD.
  
  source
  - ReversedCookie@feddit.de ⁨1⁩ ⁨year⁩ ago
    They didn’t. Some people just like spreeding missinformation about things the don’t like.
    
    source
    -> View More Comments
  - nixfreak@sopuli.xyz ⁨1⁩ ⁨year⁩ ago
    Just don’t use brave search engine, stick with ddg
    
    source
- Franzia@lemmy.blahaj.zone ⁨1⁩ ⁨year⁩ ago
  Adding to this - Brave’s business plan is to replace google as an ad service, but for an already targeted audience.
  
  Brave’s CEO has also made personal choices on Brave Search, I forget what the issue was.
  
  Selling data though I don’t know, I want a source.
  
  source
  - db2@lemmy.one ⁨1⁩ ⁨year⁩ ago
    stackdiary.com/brave-selling-copyrighted-data-for…
    
    source
- t0m5k1@lemmy.world ⁨1⁩ ⁨year⁩ ago
  He was only mentioned because of JavaScript and evading it. Really helps when someone tries to draw all the focus on one tiny part of an article.
  
  source
- Tibert@compuverse.uk ⁨1⁩ ⁨year⁩ ago
  I think this is either very not well understood or I am missing an old brace news.
  
  They did not alter any link.
  
  They however were proposing an auto complete, when the user was typing a crypto currency website name, with their affiliate link. brave.com/referral-codes-in-suggested-sites/.
  
  They did not modify any link the user imput without autocomplete or through a search engine. (also it’s fixed).
  
  Maybe I’m mistaken you are talking of something else.
  
  source
ReversedCookie@feddit.de ⁨1⁩ ⁨year⁩ ago
Whoever wrote this article, didn’t do enough research about that what he written things like using a VPN aren’t recommended by the Tor Project for specific reasons, also hosting your own entrance guard makes u even more easily deanonymizable. I would recommebd to checking the Tor Project, Whonix and Tails Documentation, they include very well and also some technical explanations, about all of this.

source
- 4am@lemm.ee ⁨1⁩ ⁨year⁩ ago
  This article is an ad for the VOS service setup done by the company who wrote it. They mention it several times in the article.
  
  That’s why they are pushing VPN and self-hosted entrance guards; they want to sell you one.
  
  source
  - ReversedCookie@feddit.de ⁨1⁩ ⁨year⁩ ago
    I don’t fund anything related to VPN at their products page, but that they want to promote their self-hosted entrance guards is definitly true, this article isn’t trustworthy
    
    source
jet@hackertalks.com ⁨1⁩ ⁨year⁩ ago
This is privacy guides after-all, we should give a link to the namesake’s take on the same topic. www.privacyguides.org/en/advanced/tor-overview/#a…

source
Fizz@lemmy.nz ⁨1⁩ ⁨year⁩ ago
de-anonymatized a laptop by having the webpage play a high frequence sound that is then picked up by the spyware in your phone is really smart. To truely be private online you need to be paranoid.

source
- NumbersCanBeFun@kbin.social ⁨1⁩ ⁨year⁩ ago
  I’m extremely paranoid about my online activity for no other reason than I find it super creepy and weird that every website wants to know everything about me.
  
  Can you like fuck off and not rape my computer for all it’s personal data every time I click a link? That would be great.
  
  source
tal@kbin.social ⁨1⁩ ⁨year⁩ ago

JavaScript can be used to identify a user through Tor in a number of different ways. This is why Tor Browser comes pre-bundled with the “NoScript” plugin. This plugin can either reduce or disable JavaScript’s ability. When the plugin is set on the “Safest” setting, JavaScript is completely disabled. This level of security is required to completely stay anonymous and secure on Tor.

There was a point in time when I used NoScript, but years back, I stopped, as it had simply become impractical to browse the web with the degree of breakage that switching off Javascript by default produced.

I'm not saying that the article is wrong about it being necessary, but I think that from a functionality standpoint, that bar may be a high one. Maybe if you are just browsing a specific site or so, but I think that for general use of the Web, it's going to be a problem.

source