[spurr]

Hello,

Over the past week it has become apparent there is a pretty big bug (anonymity concern) in TorBrowser, due to the non-toggle state most people use it under.

Follow the directions below, NOW, if you use TorBrowser:


Easiest fix:
Make sure to toggle TorButton off, then back on, at least once. This allows for TorButton to set some critical configs that otherwise are not set (i.e., disable geo-location feature in Firefox, etc).

Then type "about:config" (without quotes) in your Firefox URL bar, accept the warning, and type the following in the config bar to make sure it worked (for images of this process see my post here: link)

1. geo.enabled > should be set to "false"
2. network.dns.disablePrefetch > should be set to "true"
3. browser.cache.offline.enable > should be set to "false"

Better fix:
Download the current release of TorBrowser, i.e., 01-09-2011; Linux = v.1.1.2, Mac = v.1.0.9, Win = v.1.3.16. Those builds manually set config options (as a dirty work-around) so TorButton does not need to be toggled at least once.

Then type "about:config" in your Firefox URL bar, accept the warning, and type the following in the config bar to make sure it worked (for images of this process see my post here: link)

1. geo.enabled > should be set to "false"
2. network.dns.disablePrefetch > should be set to "true"
3. browser.cache.offline.enable > should be set to "false"

Refs:

1. https://blog.torproject.org/blog/new...dle-packages-1
2. https://trac.torproject.org/projects/tor/ticket/2338
3. https://gitweb.torproject.org/torbro...onfig/prefs.js

Be safe, be anonymous!

[spurr]

@ all who use Tor:

Please make it a daily habit, or at least a few times a week, to check the Tor blog for important info that may be relevant to you (such as critical bug fix notices, etc.): https://blog.torproject.org/blog/

[sackoweed]

will check on this.. thanx peace n pufs..

sacKO

[spurr]

Glad to help

[Stress_test]

New Details Support Tor Spying Theory

You’ll recall the story about the Swedish security researcher who stumbled upon unencrypted embassy e-mail traffic that was passing through five Tor exit nodes he set up. The researcher, Dan Egerstad, told me before the Swedish feds raided his apartment that he was certain that others were grabbing such traffic through Tor exit nodes in the same way that he was. Government and intelligence agencies were presumed to be some of the spies tapping into the Tor network.

Well the TeamFurry researchers decided to examine the configuration of a few Tor exit nodes to see what they might be up to and found some interesting results — exit nodes that were configured to accept only unencrypted IMAP, AIM, VNC, Yahoo IM and MSN Messenger traffic, among a few other things, and to reject all other traffic.

Another node set up in Germany was configured to accept only unencrypted telnet, POP3, and nntp traffic. Here’s a look at one of the configurations:


accept *:143 <- Accept unencrypted IMAP traffic to anywhere
accept *:5190 <- Accept unencrypted AIM traffic to anywhere
accept *:5050 <- Accept unencrypted Yahoo IM traffic to anywhere
accept *:5900 <- Accept unencrypted VNC traffic to anywhere
accept *:5901 <- Accept unencrypted VNC traffic to anywhere
accept *:1863 <- Accept unencrypted MSN Messenger traffic to anywhere

reject *:* <- reject all other traffic.

Of course there’s no telling who the exit node owners are (bored hackers, industrial spies or intelligence agencies) or what they’re doing for sure, but as TeamFurry notes, the configurations sure look suspicious.

They also found another exit node in Germany that appears to be doing man-in-the-middle attacks on HTTPS connections.

See also:

* Tor Researcher Who Exposed Embassy E-mail Passwords Gets Raided by Swedish FBI and CIA
* Rogue Nodes Turn Tor Anonymizer Into Eavesdropper’s Paradise
* Embassy E-mail Account Vulnerability Exposes Passport Data and Official Business Matters
* Tor Torches Online Tracking

[spurr]

@ stress test,

I am curious, why did you post that? I am curious because it has nothing to do with my thread. That is not to say what you posted in not important. What you posted is why Tor (and any proxy to the Internet), should be used with HTTPS whenever possible. No one should be using ICmag without HTTPS, with or without using Tor.

In a perfect world there would be no HTTP, it would all be HTTPS, and of course, SSL would be much more secure.

[Nadicus_Maximus]

Spurr, Thanks for a most tasty post. One can never be too safe. Viva la TOR

[wantaknow]

i am very glad he posted that info ,all info is needed to to make good decisions ,

[Strainhunter]

- edit -

Never mind I figured it out!

[WaywardBob]

this post is coming from someone who doesnt know much about browers and all that configuration stuff...

from the title, it sounded like Tor Browser is a program itself, but reading on thru ur post it sounds like Tor Browser is an addon for firefox? can someone please clarify this for me