mirror of
http://git.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion/nihilist/opsec-blogposts.git
synced 2025-06-08 05:19:37 +00:00
fix stuff
This commit is contained in:
nihilist
parent
7739e73322
commit
9a415258f4
84 changed files with 313 additions and 191 deletions
|
|
@ -4,7 +4,7 @@ date: 2024-01-31
|
|||
gitea_url: "http://git.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion/nihilist/blog-contributions/issues/90"
|
||||
xmr: 8AUYjhQeG3D5aodJDtqG499N5jXXM71gYKD8LgSsFB9BUV1o7muLv3DXHoydRTK4SZaaUBq4EAUqpZHLrX2VZLH71Jrd9k8
|
||||
---
|
||||
# Tor Browsing Setup
|
||||
# Using the Tor browser to browse the web Anonymously
|
||||
|
||||
|
||||
|
||||
|
|
@ -18,19 +18,165 @@ In this tutorial we're going to cover how to browse the web anonymously, and som
|
|||
|
||||
3. Hypervisor: [libvirtd QEMU/KVM](../hypervisorsetup/index.md)
|
||||
|
||||
4. Virtual Machine: [Linux](../hypervisorsetup/index.md) or [Whonix](../whonixqemuvms/index.md) or [Tails](../tailsqemuvm/index.md)
|
||||
4. Virtual Machine: [Whonix](../whonixqemuvms/index.md)
|
||||
|
||||
5. Application: [VPN](../vpn/index.md) (if your ISP doesn't allow Tor traffic)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
I recommend using this setup into one of the above mentioned VMs, for [Anonymous use](../anonymityexplained/index.md), as per the [4 basic OPSEC levels](../opsec4levels/index.md).
|
||||
|
||||
|
||||
Next, we'll do some slight configuration changes, starting with the automatic connection:
|
||||
|
||||
## **Setting up the Tor Browser on your Desktop**
|
||||
|
||||
|
||||
Then we make sure that all javascript is disabled, using the shield option on the top right corner, make sure it's set to the "Safest" setting:
|
||||
|
||||
|
||||
|
||||
Then a personal preference, let's switch on the dark theme:
|
||||
|
||||
 
|
||||
|
||||
And from there you can start browsing. You can browse the clearnet first to see how the tor connection works:
|
||||
|
||||
|
||||
|
||||
As you can see here, when browsing to the clearnet, your traffic is being encapsulated threefold, meaning that you are entrusting your connection to 3 tor node owners around the globe. And on top of that, they are in 3 different countries.
|
||||
|
||||
|
||||
|
||||
Next, when you browse to a website that can be accessed via a .onion link, you might get the above message that shows up. I prefer to not prioritize onions to avoid unnecessary page refreshes. Instead i click on the .onion available button if it appears.
|
||||
|
||||
|
||||
|
||||
Now when you're connected to the .onion hidden service, you can see that your connection goes through more tor nodes, this is the best way to access websites online, you're not leaking any info they don't need to know that way. Plus, since we are on the "safest" setting, we are not loading any javascript that may be used to fingerprint our activity online.
|
||||
|
||||
## **How to get the Tor Browser when you are in a Heavily-censored country**
|
||||
|
||||
There are situations when you cannot simply download tor browser from their official site because of censorship. There are alternative methods for you to get the tor browser
|
||||
|
||||
Tor browser official offers an email address called gettor@torproject.org, which you can send email to them, and they will offer you a download link
|
||||
|
||||
First prepare an email, for me I am using protonmail, you can also use outlook or apple email if protonmail is blocked. Any service provider allows you to email tor project will work.
|
||||
|
||||
|
||||
|
||||
Next simply send an empty email to tor project
|
||||
|
||||
|
||||
|
||||
Soon you will receive a reply from tor project, simply reply them with your OS name(select one from the list)
|
||||
|
||||
|
||||
|
||||
For me during this demo is linux64
|
||||
|
||||
|
||||
|
||||
After the reply they will send you a download link, very ironically the download link is a google drive link, many countries that block tor also block google, they actually are supposed to send the brower bundle in attachment
|
||||
|
||||
|
||||
|
||||
If you find out google drive does not work for you, try to check wheter if github is accessible. Tor browser also provides download on github officially, check the releases on [Tor browser github repository](https://github.com/TheTorProject/gettorbrowser)
|
||||
|
||||
|
||||
|
||||
## **Setting up the Tor Browser on your Mobile**
|
||||
|
||||
## _OPSEC Recommendations:_
|
||||
|
||||
* Hardware: Google Pixel
|
||||
|
||||
* Host OS: [Graphene OS](../graphene/index.md)
|
||||
|
||||
* Configuration: Can be set in the Private or Anonymous Profile
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## **Installing the Tor browser on mobile**
|
||||
|
||||
You can download Tor Browser for Android from F-Droid (as we want to maintain the open source requirement), using the Guardian Repository, or the apk directly from the official Tor website. Please do not download it from any other source. There have been malicious versions passed around on social media in the past.
|
||||
|
||||
          
|
||||
|
||||
Note: To download from F-Droid you will have to enable Guardian Project Repositories under settings → My Apps → Guardian Project (guardianproject.info/fdroid/repo)
|
||||
|
||||
When you open the Tor app for the first time you will be greeted with this screen:
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
We'll do some slight configuration changes, starting with the automatic connection and then open settings: _toggle auto → settings_
|
||||
|
||||
|
||||
|
||||
In settings, scroll down to Privacy and security. Open Security Level:
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
Choose Safest for maximum security
|
||||
|
||||
|
||||
|
||||
|
||||
Additionally in settings you can choose the Default search engine and to use (.onion) sites if you prefer.
|
||||
|
||||
|
||||
|
||||
|
||||
And you are done, you should now be at the start page:
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
If your connection is being censored or you are unable to connect to the Tor network then you may have to configure a bridge. Choose “Config Bridge” on the opening screen or under settings:
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
Toggle “Use a Bridge” to open up three options: "obfs4", "meek-azure", and "snowflake".
|
||||
|
||||
1. Obfs4 is a pluggable transport that makes Tor traffic look random and also prevents censors from finding bridges by Internet scanning.
|
||||
|
||||
2. Meek-Azure is a pluggable transport that makes it look like you are browsing a Microsoft web site instead of using Tor.
|
||||
|
||||
3. Snowflake involves a large number of volunteer proxies, which also makes them hard to pin point and prevents the blocking of proxy IP addresses.
|
||||
|
||||
|
||||
|
||||
|
||||
Additionally you can provide a trusted bridge to use if you know one.
|
||||
|
||||
|
||||
|
||||
|
||||
## _Closing:_
|
||||
|
||||
1. Orfox is a sunsetted privacy focused web browser based on Tor. It is no longer maintained and is not recommended.
|
||||
|
||||
2. Orbot is a proxy app that allows other apps on your device to encrypt your internet traffic through Tor. After installing Orbot go to Choose apps under settings in order to route the apps of your choice through Tor.
|
||||
|
||||
3. Currently there is no official Tor browser available for iOS on iPhone. Using Orbot with the open source Onion Browser is better than nothing but does not have the same privacy protections as Tor Browser. Use at your own risk.
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
By default, the Tor browser is installed on Whonix Workstation, you can use it there directly. If you want to install the Tor browser from elsewhere, follow those instructions:
|
||||
|
||||
## **Setting up the Tor Browser if you are not on Whonix**
|
||||
|
||||
If you have a regular debian distribution, do as follows to install the tor browser:
|
||||
|
||||
|
||||
|
|
@ -141,147 +287,3 @@ If you have a regular debian distribution, do as follows to install the tor brow
|
|||
extraction percent done: 100 / 100
|
||||
|
||||
|
||||
|
||||
Next, we'll do some slight configuration changes, starting with the automatic connection:
|
||||
|
||||
|
||||
|
||||
Then we make sure that all javascript is disabled, using the shield option on the top right corner, make sure it's set to the "Safest" setting:
|
||||
|
||||
|
||||
|
||||
Then a personal preference, let's switch on the dark theme:
|
||||
|
||||
 
|
||||
|
||||
And from there you can start browsing. You can browse the clearnet first to see how the tor connection works:
|
||||
|
||||
|
||||
|
||||
As you can see here, when browsing to the clearnet, your traffic is being encapsulated threefold, meaning that you are entrusting your connection to 3 tor node owners around the globe. And on top of that, they are in 3 different countries.
|
||||
|
||||
|
||||
|
||||
Next, when you browse to a website that can be accessed via a .onion link, you might get the above message that shows up. I prefer to not prioritize onions to avoid unnecessary page refreshes. Instead i click on the .onion available button if it appears.
|
||||
|
||||
|
||||
|
||||
Now when you're connected to the .onion hidden service, you can see that your connection goes through more tor nodes, this is the best way to access websites online, you're not leaking any info they don't need to know that way. Plus, since we are on the "safest" setting, we are not loading any javascript that may be used to fingerprint our activity online.
|
||||
|
||||
## **How to get the Tor Browser when you are in a Heavily-censored country**
|
||||
|
||||
There are situations when you cannot simply download tor browser from their official site because of censorship. There are alternative methods for you to get the tor browser
|
||||
|
||||
Tor browser official offers an email address called gettor@torproject.org, which you can send email to them, and they will offer you a download link
|
||||
|
||||
First prepare an email, for me I am using protonmail, you can also use outlook or apple email if protonmail is blocked. Any service provider allows you to email tor project will work.
|
||||
|
||||
|
||||
|
||||
Next simply send an empty email to tor project
|
||||
|
||||
|
||||
|
||||
Soon you will receive a reply from tor project, simply reply them with your OS name(select one from the list)
|
||||
|
||||
|
||||
|
||||
For me during this demo is linux64
|
||||
|
||||
|
||||
|
||||
After the reply they will send you a download link, very ironically the download link is a google drive link, many countries that block tor also block google, they actually are supposed to send the brower bundle in attachment
|
||||
|
||||
|
||||
|
||||
If you find out google drive does not work for you, try to check wheter if github is accessible. Tor browser also provides download on github officially, check the releases on [Tor browser github repository](https://github.com/TheTorProject/gettorbrowser)
|
||||
|
||||
|
||||
|
||||
## **Setting up the Tor Browser on your Mobile**
|
||||
|
||||
## _OPSEC Recommendations:_
|
||||
|
||||
* Hardware: Google Pixel
|
||||
|
||||
* Host OS: [Graphene OS](../graphene/index.md)
|
||||
|
||||
* Configuration: Can be set in the Private or Anonymous Profile
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## **Initial Download and Setup**
|
||||
|
||||
You can download Tor Browser for Android from F-Droid (as we want to maintain the open source requirement), using the Guardian Repository, or the apk directly from the official Tor website. Please do not download it from any other source. There have been malicious versions passed around on social media in the past.
|
||||
|
||||
          
|
||||
|
||||
Note: To download from F-Droid you will have to enable Guardian Project Repositories under settings → My Apps → Guardian Project (guardianproject.info/fdroid/repo)
|
||||
|
||||
When you open the Tor app for the first time you will be greeted with this screen:
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
We'll do some slight configuration changes, starting with the automatic connection and then open settings: _toggle auto → settings_
|
||||
|
||||
|
||||
|
||||
In settings, scroll down to Privacy and security. Open Security Level:
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
Choose Safest for maximum security
|
||||
|
||||
|
||||
|
||||
|
||||
Additionally in settings you can choose the Default search engine and to use (.onion) sites if you prefer.
|
||||
|
||||
|
||||
|
||||
|
||||
And you are done, you should now be at the start page:
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
If your connection is being censored or you are unable to connect to the Tor network then you may have to configure a bridge. Choose “Config Bridge” on the opening screen or under settings:
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
Toggle “Use a Bridge” to open up three options: "obfs4", "meek-azure", and "snowflake".
|
||||
|
||||
1. Obfs4 is a pluggable transport that makes Tor traffic look random and also prevents censors from finding bridges by Internet scanning.
|
||||
|
||||
2. Meek-Azure is a pluggable transport that makes it look like you are browsing a Microsoft web site instead of using Tor.
|
||||
|
||||
3. Snowflake involves a large number of volunteer proxies, which also makes them hard to pin point and prevents the blocking of proxy IP addresses.
|
||||
|
||||
|
||||
|
||||
|
||||
Additionally you can provide a trusted bridge to use if you know one.
|
||||
|
||||
|
||||
|
||||
|
||||
## _Closing:_
|
||||
|
||||
1. Orfox is a sunsetted privacy focused web browser based on Tor. It is no longer maintained and is not recommended.
|
||||
|
||||
2. Orbot is a proxy app that allows other apps on your device to encrypt your internet traffic through Tor. After installing Orbot go to Choose apps under settings in order to route the apps of your choice through Tor.
|
||||
|
||||
3. Currently there is no official Tor browser available for iOS on iPhone. Using Orbot with the open source Onion Browser is better than nothing but does not have the same privacy protections as Tor Browser. Use at your own risk.
|
||||
|
||||
|
||||
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue