[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Recommendations for browsing via Tor pre tor-browser?

From: Christopher Lemmer Webber
Subject: Re: Recommendations for browsing via Tor pre tor-browser?
Date: Fri, 13 Jul 2018 08:57:00 -0400
User-agent: mu4e 1.0; emacs 26.1

Ludovic Courtès writes:

> Christopher Lemmer Webber <address@hidden> skribis:
>> Anyone have recommendations on how they're doing web browsing via Tor,
>> sans tor-browser?  In the interim I have been using the more
>> lightweight, non-js using browsers like links.
> I use Privoxy, and as written in the ‘privoxy.conf’ example, I have:
>          forward-socks5   /      .
> where Tor is listening on port 9050 (I use the Tor service of GuixSD.)
> Ludo’.

I wonder if localhost + port is a good idea for tor or really any other
service.  Our experience with the confused deputy attack against guile's
live REPL makes me suspicious of anything that's localhost + port.

I notice that the Tor configuration file supports a unix domain socket:

       ControlSocket Path
           Like ControlPort, but listens on a Unix domain socket, rather than a 
TCP socket.  0 disables
           ControlSocket (Unix and Unix-like systems only.)

I wonder if that would be safer?  WDYT?

reply via email to

[Prev in Thread] Current Thread [Next in Thread]