Re: [tor-talk] Does Facebook .onion work?

2018-10-15 Thread Mirimir 
On 10/15/2018 02:35 PM, bobby...@danwin1210.me wrote:
> Facebook https://www.facebookcorewwwi.onion/ has existed since 2014.
> However, I am unconvinced that it works.
> 
> I go to the URL, register, get a confirmation email, click it, then have
> to enter my phone and receive a code. Fair enough.
> 
> When I login I get:
> 
> Upload a Photo of Yourself
> To get back on Facebook, upload a photo that clearly shows your face. Make
> sure the photo is well-lit and isn't blurry. Don't include other people in
> the shot.
> We use this photo to help us check that this account belongs to you. We'll
> delete the photo once we've done this, and it will never appear on your
> profile.
> 
> This is a new account - I've just created it.
> 
> I upload a random photo and apparently this will be manually checked to
> ensure it's me. I've no idea how they will do that since it's a new
> account. Until then, I can't use the account.
> 
> Has anyone successfully created an account using the .onion address?

I created one a few months ago. I wasn't asked for a phone number, or a
photo. I just logged in, and all seems cool.

I did all that with Whonix, for what it's worth.
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] Does Facebook .onion work?

2018-10-15 Thread grarpamp 
> have to enter my phone and receive a code.

> upload a photo that clearly shows your face.

> Fair enough.

Nope, fuck facebook.

>> We use this photo to help us check that this account belongs to you.
> We'll delete the photo once we've done this

As with their [ab]use of the phone number, this is all
flowery feelgood bullshit meant to satisfy and pacify
the billions of sheeple that...

"People just submitted it. I don't know why. They 'trust me'. Dumb
fucks." -Mark Zuckerberg

Even if the photo itself is somehow deleted and overwritten
from all their media and backups... you should assume that
the fuzzy signature of it (you) that they're using to "check"
whatever... is still very much there and in use forever.

You could probably test that by opening two separate
accounts maybe a week apart, using the same "deleted"
test picture.

Else their "check" would be just another sheeply lie too.

Perhaps change is meant to help kill "fake news" via
enable more censorship knobs over notorious free speech.

Speak on, faceless, numberless, anons.
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] Does Facebook .onion work?

2018-10-15 Thread Jonathan Marquardt 
On Mon, Oct 15, 2018 at 09:35:12PM -, bobby...@danwin1210.me wrote:
> Has anyone successfully created an account using the .onion address?

I have succesfully created fake accounts using the .onion address before, 
however the last time was already a few months ago. Maybe they changed 
something since then. I still needed to enter an email address and a phone 
number though.

Nonetheless: Facebook is a direct enemy to your privacy and will put effort 
into deanonymizing you. They see their onion services just as a way for Tor 
users to connect to them. Many of these users have no choice but to use Tor, 
like those ones living in a country where Facebook is censored. For this 
scenario, having the user connect via the onion address is just beneficial for 
the security of the data you send to them in terms of third parties surveiling 
you. They have absolutely no interest in your privacy being protected from 
Facebook, though. Quite the opposite, in fact.
-- 
OpenPGP Key: 47BC7DE83D462E8BED18AA861224DBD299A4F5F3
 https://www.parckwart.de/pgp_key


signature.asc
Description: PGP signature
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] Does Facebook .onion work?

2018-10-15 Thread bo0od 
I had this issue before , but instead of finding solution within
facebook i migrated to Diaspora. (open source,decentralized, privacy
respect platform).

bobby...@danwin1210.me:
> Facebook https://www.facebookcorewwwi.onion/ has existed since 2014.
> However, I am unconvinced that it works.
> 
> I go to the URL, register, get a confirmation email, click it, then have
> to enter my phone and receive a code. Fair enough.
> 
> When I login I get:
> 
> Upload a Photo of Yourself
> To get back on Facebook, upload a photo that clearly shows your face. Make
> sure the photo is well-lit and isn't blurry. Don't include other people in
> the shot.
> We use this photo to help us check that this account belongs to you. We'll
> delete the photo once we've done this, and it will never appear on your
> profile.
> 
> This is a new account - I've just created it.
> 
> I upload a random photo and apparently this will be manually checked to
> ensure it's me. I've no idea how they will do that since it's a new
> account. Until then, I can't use the account.
> 
> Has anyone successfully created an account using the .onion address?
> 
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

[tor-talk] Does Facebook .onion work?

2018-10-15 Thread bobby999 
Facebook https://www.facebookcorewwwi.onion/ has existed since 2014.
However, I am unconvinced that it works.

I go to the URL, register, get a confirmation email, click it, then have
to enter my phone and receive a code. Fair enough.

When I login I get:

Upload a Photo of Yourself
To get back on Facebook, upload a photo that clearly shows your face. Make
sure the photo is well-lit and isn't blurry. Don't include other people in
the shot.
We use this photo to help us check that this account belongs to you. We'll
delete the photo once we've done this, and it will never appear on your
profile.

This is a new account - I've just created it.

I upload a random photo and apparently this will be manually checked to
ensure it's me. I've no idea how they will do that since it's a new
account. Until then, I can't use the account.

Has anyone successfully created an account using the .onion address?

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] Does Facebook Onion Work?

2016-03-09 Thread fkqqrr 
Seth David Schoen  writes:

> Fkqqrr writes:
>
>> Oskar Wendel  writes:
>> 
>> BTW, Does facebook has a onion version?
>
> Probably one of the most famous onions, https://facebookcorewwwi.onion/.
>
> See
>
> https://lists.torproject.org/pipermail/tor-talk/2014-October/035421.html
Ha, interesting, let me try
>
> -- 
> Seth Schoen  
> Senior Staff Technologist   https://www.eff.org/
> Electronic Frontier Foundation  https://www.eff.org/join
> 815 Eddy Street, San Francisco, CA  94109   +1 415 436 9333 x107

-- 
Who am I? Where am I from? Where am I going?

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] Does Facebook Onion Work?

2016-03-09 Thread Seth David Schoen 
Fkqqrr writes:

> Oskar Wendel  writes:
> 
> BTW, Does facebook has a onion version?

Probably one of the most famous onions, https://facebookcorewwwi.onion/.

See

https://lists.torproject.org/pipermail/tor-talk/2014-October/035421.html

-- 
Seth Schoen  
Senior Staff Technologist   https://www.eff.org/
Electronic Frontier Foundation  https://www.eff.org/join
815 Eddy Street, San Francisco, CA  94109   +1 415 436 9333 x107
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] Does Facebook Onion Work?

2016-03-09 Thread Fkqqrr 
Oskar Wendel  writes:

BTW, Does facebook has a onion version?
> blo...@openmailbox.org:
>
>> I wanted to see if setting up an account on the onion would require SMS 
>> validation as is the case when registering with Facebook from an exit 
>> node IP.
>
> It does, I tried.
>
> -- 
> Oskar Wendel, o.wen...@wp.pl.remove.this
> Pubkey: https://pgp.mit.edu/pks/lookup?search=0x6690CC52318DB84C
> Fingerprint: C8C4 B75C BB72 36FB 94B4 925C 6690 CC52 318D B84C

-- 
Hello, world
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] Does Facebook Onion Work?

2016-03-07 Thread Oskar Wendel 
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

blo...@openmailbox.org:

> I wanted to see if setting up an account on the onion would require SMS 
> validation as is the case when registering with Facebook from an exit 
> node IP.

It does, I tried.

- -- 
Oskar Wendel, o.wen...@wp.pl.remove.this
Pubkey: https://pgp.mit.edu/pks/lookup?search=0x6690CC52318DB84C
Fingerprint: C8C4 B75C BB72 36FB 94B4 925C 6690 CC52 318D B84C
-BEGIN PGP SIGNATURE-

iQEcBAEBAgAGBQJW3gLIAAoJEGaQzFIxjbhMg2wH/1aUD4WpRG17CWbw8EX7Cnbp
23+EcnFMEIbn1FyoO3V3uDcvZPrXB43oaSY4rlD8MJQqI9ZbPPwhUZIHJw+Wd4CF
RLOBwqvkdCsboksGfwI9afAXy1x+UXbwmLMybC4KqEI4tX+FBtgd0G6BXm8zmZtq
Se/Bkzk72sfaScq2rbV5OyM/DzXevVJh/rhMVzwQy2kO/FETOLGwrJKLEgH738Ej
Q4NrK3Oy/wVyLtCtYR1fixKKwfib3seSUiLaM6ahJ3o/Az9ufKzxsiyZUMLwAWJn
5yUJlRZZekqN0zGsa1gYJCiY7rHkukqAIusnl0YE+bFknb0vD6w5M4ZoNVHkSjQ=
=Q512
-END PGP SIGNATURE-

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] Does Facebook Onion Work?

2016-02-18 Thread blobby 

On 2016-02-17 23:17, Alec Muffett wrote:

Hi All!

I just wanted to confirm that facebookcorewwwi is working and is under
active development; we are currently working on scaling bandwidth so
that we can support more people who want to use Facebook over Tor.

The facebookcorewwwi URLs use (and need) subdomains which are
respected by web browsers, albeit that they are invisible to the Tor
protocol.

The URLs are as follows:

  https://www.facebookcorewwwi.onion/

  https://m.facebookcorewwwi.onion/

...the latter URL ("M-site") is a web-version of Facebook designed for
mobile devices, which uses Javascript and yet can *also* be used
without Javascript being available at all.

When an issue (potential bug?) is raised with us, we generally attempt
to reproduce it. Our rule-of-thumb is to try reproducing the issue on
a recent (ideally latest) version of TorBrowser, without extra
extensions, and with the TBB "Security Level" set between
Low/Medium-High (for www) or between Low/High (for m-site).

So far I have only managed to reproduce the "looping" issue once, and
then only by exceeding the bounds of our "rule of thumb"; I currently
suspect that this behaviour is related to manual configuration of
Javascript controls in such a way that JS is only partially-enabled
for the site, leading to anomalous script behaviour.

Where Javascript is considered a risk it seems wisest to disable it
entirely (Security Level: High) and then use M-site; restarting Tor
Browser should clear any active state that would trigger the issue.




I have tried this for the mobile onion link both on Low and High 
security settings. Both work fine but Facebook does ask for SMS 
validation (as expected).


I think Alec Muffett is referenced in Kevin Mitnick's autobiography if I 
recall correctly!


--
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] Does Facebook Onion Work?

2016-02-18 Thread Pickfire 

On Wed, Feb 17, 2016 at 11:17:43PM +, Alec Muffett wrote:

I just wanted to confirm that facebookcorewwwi is working and is under active 
development; we are currently working on scaling bandwidth so that we can 
support more people who want to use Facebook over Tor.

The facebookcorewwwi URLs use (and need) subdomains which are respected by web 
browsers, albeit that they are invisible to the Tor protocol.

The URLs are as follows:

 https://www.facebookcorewwwi.onion/

 https://m.facebookcorewwwi.onion/

...the latter URL ("M-site") is a web-version of Facebook designed for mobile 
devices, which uses Javascript and yet can *also* be used without Javascript being 
available at all.

When an issue (potential bug?) is raised with us, we generally attempt to reproduce it. 
Our rule-of-thumb is to try reproducing the issue on a recent (ideally latest) version of 
TorBrowser, without extra extensions, and with the TBB "Security Level" set 
between Low/Medium-High (for www) or between Low/High (for m-site).

So far I have only managed to reproduce the "looping" issue once, and then only by 
exceeding the bounds of our "rule of thumb"; I currently suspect that this behaviour is 
related to manual configuration of Javascript controls in such a way that JS is only 
partially-enabled for the site, leading to anomalous script behaviour.

Where Javascript is considered a risk it seems wisest to disable it entirely 
(Security Level: High) and then use M-site; restarting Tor Browser should clear 
any active state that would trigger the issue.


Hi, nice to see one of the facebook developers here.

I have been using `https://m.facebookcorewwwi.onion/` with
[surf](http://surf.suckless.org/) for some time now. I didn't notice any
issue with it, I can say it is loading faster than https://facebook.com/
some times and vice versa.

--
_
< Do what you like, like what you do. >
-
   \   ^__^
\  (oo)\___
   (__)\   )\/\
   ||w |
   || ||
--
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] Does Facebook Onion Work?

2016-02-17 Thread Alec Muffett 
Hi All!

I just wanted to confirm that facebookcorewwwi is working and is under active 
development; we are currently working on scaling bandwidth so that we can 
support more people who want to use Facebook over Tor.

The facebookcorewwwi URLs use (and need) subdomains which are respected by web 
browsers, albeit that they are invisible to the Tor protocol.

The URLs are as follows:

  https://www.facebookcorewwwi.onion/

  https://m.facebookcorewwwi.onion/

...the latter URL ("M-site") is a web-version of Facebook designed for mobile 
devices, which uses Javascript and yet can *also* be used without Javascript 
being available at all.

When an issue (potential bug?) is raised with us, we generally attempt to 
reproduce it. Our rule-of-thumb is to try reproducing the issue on a recent 
(ideally latest) version of TorBrowser, without extra extensions, and with the 
TBB "Security Level" set between Low/Medium-High (for www) or between Low/High 
(for m-site).

So far I have only managed to reproduce the "looping" issue once, and then only 
by exceeding the bounds of our "rule of thumb"; I currently suspect that this 
behaviour is related to manual configuration of Javascript controls in such a 
way that JS is only partially-enabled for the site, leading to anomalous script 
behaviour.

Where Javascript is considered a risk it seems wisest to disable it entirely 
(Security Level: High) and then use M-site; restarting Tor Browser should clear 
any active state that would trigger the issue. 

- alec

--
Alec Muffett
Security Infrastructure
Facebook Engineering
London

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] Does Facebook Onion Work?

2016-02-17 Thread blobby 

On 2016-02-17 21:45, Jens Kubieziel wrote:

* blo...@openmailbox.org schrieb am 2016-02-17 um 21:17 Uhr:

Because I've tried https://www.facebookcorewwwi.onion/ and I get a
neverending loop in which the site loads and loads and loads...


I have this endless loops from time to time. Usually it helps to wait
some hours and its working again. I also discussed this issue with a
Facebook person, but wasn't able to reproduce it and so we found no
solution.


Entering https://facebookcorewwwi.onion/ sends you to the looped URL 
which is https://www.facebookcorewwwi.onion/?_rdr


I wanted to see if setting up an account on the onion would require SMS 
validation as is the case when registering with Facebook from an exit 
node IP.


--
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] Does Facebook Onion Work?

2016-02-17 Thread Jens Kubieziel 
* blo...@openmailbox.org schrieb am 2016-02-17 um 21:17 Uhr:
> Because I've tried https://www.facebookcorewwwi.onion/ and I get a
> neverending loop in which the site loads and loads and loads...

I have this endless loops from time to time. Usually it helps to wait
some hours and its working again. I also discussed this issue with a
Facebook person, but wasn't able to reproduce it and so we found no
solution.

-- 
Jens Kubieziel   http://www.kubieziel.de
"In theory, theory and practice are the same. In practice, they’re not."
- Yoggi Berra


signature.asc
Description: Digital signature
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] Does Facebook Onion Work?

2016-02-17 Thread Sebastian Hahn 

> On 17 Feb 2016, at 22:15, David Goulet  wrote:
> On 17 Feb (22:10:44), Sebastian Hahn wrote:
>>> On 17 Feb 2016, at 21:17, blo...@openmailbox.org wrote:
>>> Does Facebook still provide an onion link?
>>> 
>>> Because I've tried https://www.facebookcorewwwi.onion/ and I get a 
>>> neverending loop in which the site loads and loads and loads...
>>> 
>>> Any ideas?
>> 
>> the correct address is https://facebookcorewwwi.onion/ - never use
>> www. in onionland.
> 
> Hrm, actually the subdomains are important for Facebook. They will redirect
> you to the www. if omitted and since the SSL certificate is an EV wild card,
> it can take anything as subdomain. So with that, they can easily regex the URL
> once it arrives to the HS and send it to the right place internally using only
> the subdomain.
> 
> All the languages for instance are subdomain "fr-ca.", "it-it.", "en-us.",
> etc...

ah, I don't ever use facebook so I didn't notice that they actually make use of
that. Could you reproduce the issue, then?

Cheers
Sebastian


signature.asc
Description: Message signed with OpenPGP using GPGMail
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] Does Facebook Onion Work?

2016-02-17 Thread David Goulet 
On 17 Feb (22:10:44), Sebastian Hahn wrote:
> Hi blobby,
> 
> > On 17 Feb 2016, at 21:17, blo...@openmailbox.org wrote:
> > Does Facebook still provide an onion link?
> > 
> > Because I've tried https://www.facebookcorewwwi.onion/ and I get a 
> > neverending loop in which the site loads and loads and loads...
> > 
> > Any ideas?
> 
> the correct address is https://facebookcorewwwi.onion/ - never use
> www. in onionland.

Hrm, actually the subdomains are important for Facebook. They will redirect
you to the www. if omitted and since the SSL certificate is an EV wild card,
it can take anything as subdomain. So with that, they can easily regex the URL
once it arrives to the HS and send it to the right place internally using only
the subdomain.

All the languages for instance are subdomain "fr-ca.", "it-it.", "en-us.",
etc...

Cheers!
David

> 
> Cheers
> Sebastian
> -- 
> tor-talk mailing list - tor-talk@lists.torproject.org
> To unsubscribe or change other settings go to
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


signature.asc
Description: Digital signature
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] Does Facebook Onion Work?

2016-02-17 Thread Sebastian Hahn 
Hi blobby,

> On 17 Feb 2016, at 21:17, blo...@openmailbox.org wrote:
> Does Facebook still provide an onion link?
> 
> Because I've tried https://www.facebookcorewwwi.onion/ and I get a 
> neverending loop in which the site loads and loads and loads...
> 
> Any ideas?

the correct address is https://facebookcorewwwi.onion/ - never use
www. in onionland.

Cheers
Sebastian
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

[tor-talk] Does Facebook Onion Work?

2016-02-17 Thread blobby 

Does Facebook still provide an onion link?

Because I've tried https://www.facebookcorewwwi.onion/ and I get a 
neverending loop in which the site loads and loads and loads...


Any ideas?
--
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk