/tech/ - Technology

>>546303

install gentoo

never had that happen before, what did you do?

what site? did you download from the official Tor site? did you check the security settings? are you sure the site wasn't just fucking with you?

>>546303

TOR is compromised. Horribly? Probably not, but it's definitely not something to use for sensitive stuff.

As for being slow, yes TOR is slow. Shocker.

As for the MITM attack that is odd but the site was probably fucking with you because it detected you were using TOR they do that you know. It would be much simpler to MITM your activities in your proxy chain than on a website.

3 general rules:

1. Normal web browser is for insecure stuff.

2. TOR is to be used for mild obfuscation of activities confuse datamining

3. I2P or not using the fucking internet is the best way to maintain privacy while on the internet, but of course that won't stop invasions of privacy if you get cocky. Stay on your guard, OPSEC, etc.

The end.

>>546303

I use Tor for almost all of my browsing. I've only had an attempted MITM once (attempted SSL cert replacement), and that was over a year ago. I suspect it was a malicious exit node.

Performance, both in terms of network latency and resource usage, generally varies from acceptable to quite good.

I don't think your experience is typical.

sage for the very FUDish subject. Poor performance when running a browser off of a thumb drive and a possibly malicious exit node does not mean that Tor is "hopelessly compromised".

>>546305

Heard about gentoo, don't know much about it. Will look into it.

>>546307

Downloaded from official Tor site.

>>546308

>As for being slow, yes TOR is slow. Shocker.

I've used Tor a lot in the past, this was different.

> site was probably fucking with you because it detected you were using TOR

It was an onion site. Seems an odd joke for a site that can only be accessed by Tor, and it wasn't some no name site, it was one of the major search sites.

>>546314

>a malicious exit node

I tried a new identity after the initial slow going.

>sage for the very FUDish subject

I'm sorry, we can't all be divine ubermensch.

>Is Tor hopelessly compromised?

Stop being a fucking idiot

> confusing .onion addresses with various .onion.* gateways on clear net

Average /tech/ poster, nothing to see here.

>>546303

>So I decided to reinstall Tor tonight.

First mistake, take note. If something is already working. *Don't* fix it.

>New download until a thumb drive. All script off, javescript disabled

Why? Are you taking it to the library? Then obviously the main issue is the read speed from the usb and the connection. Or are you trying to avoid cold boot and memory attacks? And if so, why would you need tor on a flash drive when you could just

a. Install liberte [0] on the flash drive

Or

b. Learn threat mitigation, then a os that you primarily are in control.. like gentoo

>My first search took incredibly long to load.

Well no shit, nodes are very random at times, maybe you'll get a shitty relay in a third world country (read iraq) or maybe you'll get one in Russia. The former would make your connection slow as shit. Hence. the blog post. Need "fast" speeds? Get bridges.

>First page almost froze up my computer.

>shit 8gb flash drive

>poor read speed

>most likely got a shit relay

>complains it loads slow

>surprised when it shits on you

Gee. Thanks for unraviling the mystery of the slow connection, Detective Internet explorer..

>A site informed me it detected a man in the middle attack.

I saw your reply to this to which you said it was an onion, without giving details what exactly was for? Bitcoins? There are already known attacks against tor to phish onion sites for account passwords. It doesn't mean big brother is watching you particularly not in this case... it just means you got stuck in the turbine of criminals vs. [Gov] criminals vs. everyone else vs. You. On another note the onion could also be 301 redirecting to a clearnet site, which would explain why it "informs" you of "mitm" attack. Which tor browser would never do unless you tried using an onion as https........ that's what you did isnt it?!

>Is this a common thing now or did I screw something up?

Lets recap

>reinstalled tor for no reason

>proceeded to install tor on a usb

the most sane choice with a usb is to boot a live distro like librete[0]

>poor read speed

>blames it on tor

>doesn't configure bridges

>surprised when he gets slow speeds

>from shit relay

>onion redirects to clearnet link

>thinks the big nose is above him

>what is phishing?

There are [non-gov] people that try to attack tor too anon... not everyone is snowden and or gives a shit about you.

I'm not remotely surprised if non-gov people were trying to phish onions for the lulz. Which. They. Do.

4/10 blog post

[0] https://dee.su/liberte

Based on gentoo btw.

Or tails..... but you can find that yourself..

>>546351

>non-gov people were trying to phish onions for the lulz

They phish onions for bitcoins. Nearly every onion site that uses bitcoins has multiple fake clones.

>>546320

>Heard about gentoo, don't know much about it. Will look into it.

Get a load of this newfag.

Don't use TOR on your primary OS, use Tails.

>>546303

>A site informed me it detected a man in the middle attack. Provided what the URL for the page should look like. The URL didn't match.

So, you've just mistyped the URL. What a mystery.

Tor was never secure for idiots to use.

HTTP://niceme.me

>it's a thread about technology

>/tech/tists sagebomb it because it's not linux

>>546303

>using TOR

>ever

If Tor is slow, why would one use anything but Freenet?

>>546431

>Tor was never secure for idiots to use.

This.

>>546652

I get around 700KB/s to 1.5 Mb/s on Tor. Your speed will only be as fast as the slowest relay in your circuit.

Tor uses entry guards which means your first node will always be the same for a few months.

If Tor happened to pick a very slow entry guard, your speed will be bottlenecked for a couple months, until it rotates to a new node. Or delete the files that store Tor's state.

>>546393

You took the bait, stupid nigger.

http://tpvj6abq225m5pcf.onion/pub/torproject.org/download/download-easy.html.en

http://tpvj6abq225m5pcf.onion/pub/tails/stable/tails-i386-2.2.1/