Re: [tor-talk] Idea for a stand-alone browser based on Tor browser source code

2020-07-09 Thread Matthew Finkel
On Tue, Jul 07, 2020 at 12:12:55PM -0700, joel04g_t5...@secmail.pro wrote:
> Tor browser has good defense against many tracking techniques, however,
> internet users may want a way to browse the web without anonymity but with
> some of the great features Tor browser provides. (Security Level,
> Noscript, Isolate trackers, Anti Fingerprinting, etc)
> 
> Some reasons users may want a browser like this include:
> 
> ~Accessing websites that don't like Tor users
> 
> ~Streaming without latency
> 
> ~Doing online banking (Tor could create suspicion of a possible hack
> attempt and block or hassle users)
> 
> ~An easy and hassle free browser for users who really don't like latency
> or with bad internet
> 
> I believe a stand-alone browser with onion routing removed but based on
> the same code Tor browser uses could be useful to many internet users. I'd
> love to hear everyone's thoughts on this!

While this may be useful for some people, The Tor Project has no plans
for providing such a browser. All of the above reasons for using Tor
Browser without Tor are real usability issues we need to address and
resolve. This includes trade-offs between privacy and performance.

The simple fact is that if you want to use a browser that provides the
privacy and security protections of Tor Browser, then you need to use
Tor Browser. You can't use Tor Browser without Tor and get sufficient
privacy protections. Network-level security is the most important
attribute of Tor Browser. Without tor, you are trackable by your IP
address, cache isolation won't save you.

Tor Browser without Tor is just...Browser (basically Firefox in private
browsing mode). If that is really want you want, then I suggest you look
at ghacks-user.js [0] for modifying a Firefox installation. The
maintainers are excellent. Jeremy's pointer to SecBrowser seems like an
option, too (but make sure you understand what you're getting before you
trust it).

[0] https://github.com/ghacksuserjs/ghacks-user.js/
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Idea for a stand-alone browser based on Tor browser source code

2020-07-08 Thread Jeremy Rand
joel04g_t5...@secmail.pro:
> Tor browser has good defense against many tracking techniques, however,
> internet users may want a way to browse the web without anonymity but with
> some of the great features Tor browser provides. (Security Level,
> Noscript, Isolate trackers, Anti Fingerprinting, etc)
> 
> Some reasons users may want a browser like this include:
> 
> ~Accessing websites that don't like Tor users
> 
> ~Streaming without latency
> 
> ~Doing online banking (Tor could create suspicion of a possible hack
> attempt and block or hassle users)
> 
> ~An easy and hassle free browser for users who really don't like latency
> or with bad internet
> 
> I believe a stand-alone browser with onion routing removed but based on
> the same code Tor browser uses could be useful to many internet users. I'd
> love to hear everyone's thoughts on this!

My understanding is that this already exists; it's called SecBrowser and
it's part of Kicksecure.  Based on briefly glancing at the source code,
I *think* it's basically a clever wrapper script that uses a bunch of
environment variables to customize the official Tor Browser binaries'
behavior.

More info here:
http://www.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/wiki/SecBrowser

The usual warnings about "this isn't endorsed by The Tor Project" apply.

Cheers,
-- 
-Jeremy Rand
Lead Application Engineer at Namecoin
Mobile email: jeremyrandmob...@airmail.cc
Mobile OpenPGP: 2158 0643 C13B B40F B0FD 5854 B007 A32D AB44 3D9C
Send non-security-critical things to my Mobile with OpenPGP.
Please don't send me unencrypted messages.
My business email jer...@veclabs.net is having technical issues at the
moment.



signature.asc
Description: OpenPGP digital signature
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Idea for a stand-alone browser based on Tor browser source code

2020-07-08 Thread bo0od
both (FF,Brave) are by default installation not designed for real 
privacy protection e.g:


looking at TB design , there are tons of work done to turn FF fork to 
what you have now:


https://2019.www.torproject.org/projects/torbrowser/design/#Implementation

Brave just worst than even FF vanilla e.g:

https://www.bleepingcomputer.com/news/security/facebook-twitter-trackers-whitelisted-by-brave-browser/

https://github.com/privacytools/privacytools.io/pull/657#issuecomment-463314974 



So to have a TB without Tor focusing on just security and clearnet 
privacy (without anonymity) from the first run by default its great idea.


Jason Evans:



On 7/7/20 9:12 PM, joel04g_t5...@secmail.pro wrote:

Tor browser has good defense against many tracking techniques, however,
internet users may want a way to browse the web without anonymity but with
some of the great features Tor browser provides. (Security Level,
Noscript, Isolate trackers, Anti Fingerprinting, etc)



First of all, why not use Brave or Firefox for your non-Tor required needs?

Secondly, you can turn off Tor in Tor Browser. See here:
https://tor.stackexchange.com/questions/10367/how-to-dissconnect-tor-browser-from-the-tor-network

JE


--
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Idea for a stand-alone browser based on Tor browser source code

2020-07-08 Thread Jason Evans



On 7/7/20 9:12 PM, joel04g_t5...@secmail.pro wrote:
> Tor browser has good defense against many tracking techniques, however,
> internet users may want a way to browse the web without anonymity but with
> some of the great features Tor browser provides. (Security Level,
> Noscript, Isolate trackers, Anti Fingerprinting, etc)
> 

First of all, why not use Brave or Firefox for your non-Tor required needs?

Secondly, you can turn off Tor in Tor Browser. See here:
https://tor.stackexchange.com/questions/10367/how-to-dissconnect-tor-browser-from-the-tor-network

JE
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


[tor-talk] Idea for a stand-alone browser based on Tor browser source code

2020-07-07 Thread joel04g_t535e
Tor browser has good defense against many tracking techniques, however,
internet users may want a way to browse the web without anonymity but with
some of the great features Tor browser provides. (Security Level,
Noscript, Isolate trackers, Anti Fingerprinting, etc)

Some reasons users may want a browser like this include:

~Accessing websites that don't like Tor users

~Streaming without latency

~Doing online banking (Tor could create suspicion of a possible hack
attempt and block or hassle users)

~An easy and hassle free browser for users who really don't like latency
or with bad internet

I believe a stand-alone browser with onion routing removed but based on
the same code Tor browser uses could be useful to many internet users. I'd
love to hear everyone's thoughts on this!

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk