Hi Rob,You do know TBB's defaults regarding scripts, right?  If it's a 
conundrum with no easy answer for Tor devs, it's a conundrum for Facebook as 
well.  So please do get on Tor Talk list and criticise TBB for having an 
"(advised)" yet non-default setting for blocking all scripts.

I understand the conundrum, and I agree that there isn't an easy answer, but 
that default setting in TBB is batshit insane.  It is _the_ source of the 
conundrum.  If script-blocking were turned on by default Facebook wouldn't even 
waste time trying to design a hidden service like this.

-Jonathan



On Friday, October 31, 2014 12:13 PM, Robert W. Gehl <[email protected]> 
wrote:
 


I tried to login (with a fake account I maintain for just such a purpose). 
"Your account is temporarily locked," it says. I get that; it appears I'm 
trying to login from a strange location.

To proceed, I have to ID pictures of friends. Ok, I say. But the
      page with friends' photos doesn't load, probably because I have
      Javascript off (common practice with the Tor Browser). Fail.

Let's say people take this seriously -- to do so, they will have
      to use Javascript, which is a bad move when using Tor.

It seems to me that this would just inculcate bad security habits
      for any would-be Dark Web users.

- Rob

On 10/31/2014 08:14 AM, Steve Weis wrote:

Facebook is now available as a Tor hidden service at this .onion address:
>https://facebookcorewwwi.onion/ 
>
>
>Blog post is here:
>
>https://www.facebook.com/notes/protect-the-graph/making-connections-to-facebook-more-secure/1526085754298237
>
>
>
>
>

-- 
Liberationtech is public & archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
[email protected].
-- 
Liberationtech is public & archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
[email protected].

Reply via email to