Author Topic: Tor useless without NoScript & Flash disabled  (Read 7096 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33904
  • malware fighter
Tor useless without NoScript & Flash disabled
« on: October 20, 2006, 08:55:45 AM »
Hi malware fighters,

With the use of JavaScript in combination with bug-tracking the Tor-onion can be peeled, and the anonimity of a Torpark browser is lost. So when using Torpark as an anonymous browser always have NoScript, IP2, NoFlash, Adblock, Stealther installed.
The bad guys have anonimity always, and we hope that the good use of Torpark outweighs the bad use. Again the trackers and leechers do not sleep.
How they cracked Tor: http://www.packetstormsecurity.org/0610-advisories/Practical_Onion_Hacking.pdf
So again Tor-users, that want to anonimously  use Internet (almost an mpossibility these days) have to de-activate JavaScript, Flash, ActiveX en Java. Also viewing video-films and listening to streaming audio is risky. To be secure one should use a text-based browser like Lynx and use SSL. The researchers say it is not a Tor-flaw, but the features of the software that use Tor can be abused to track and demask people. People can understand when every marketeer can look into my private affairs (health related data, insurance data, religious or sectarian beliefs etc.), the Internet can become a dangerous place, and whenever there is no end-user protection whatsoever against the Info-sharks, we as consumers have lost the Information war and free culture.

polonus
« Last Edit: October 20, 2006, 08:58:24 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

neal62

  • Guest
Re: Tor useless without NoScript & Flash disabled
« Reply #1 on: October 20, 2006, 09:24:48 AM »
Once again an interesting read. Thanks Polonus.  :)

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48567
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Tor useless without NoScript & Flash disabled
« Reply #2 on: October 20, 2006, 03:56:13 PM »
Hi polonus,
Quote
So again Tor-users, that want to anonimously  use Internet (almost an mpossibility these days) have to de-activate JavaScript, Flash, ActiveX en Java. Also viewing video-films and listening to streaming audio is risky. To be secure one should use a text-based browser like Lynx and use SSL.
Unfortunately if you put all of these restrictions in place, you might as well not go on-line.
With all of these restrictions, browsing becomes a chore not a pleasure. IMHO
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet