TOR package

[francois]

@francois
Working with chrome under tor is the same as working without it; you will notice differences when running google, for example, that google thinks (sometimes) that you are actually in other country; some other times, google asks you for validation of your identity, it says "the problem is that William Read is using IP nnn.nnn.mmm.jjj..... and that is unusual"....

With chrome you can switch to tor or not to tor with the switchy button. I wrote a post with instructions how to set up chrome for tor, but I was not logged in and the post got lost. It goes like that:

1.-from chrome store install plugin proxy switchysharp,
2.-when the proxy button appears, press it and go to options,
3.-press new profile, name it tor, and tip manual configurations, set sockhost to 127.0.0.1 and port to 9150,
4.-save and close. Test the configuration running http://check.torproject.org,
5.-to make settings permanent put in rootcopy (or make a module) root/.cache/google-chrome and root/.config/google-chrome.

I suppose you got tor running ok, but has tested only the Tor-browser included in the package (derived from firefox, I guess).

Happy toring, francois!

I was working on xfce 32 bit with chrome. After reading a little more, I have added qt. This did help. I am now able to start tor and it seems to work. The problem seems to be setting up the sockhost on chrome. I proceed as you proposed with 127.0.0.1 and port to 9150.

However, when I select tor as proxy there is no navigation possible.

[francois]

Ok. Finally got it working with the tor bundle under root. But I could not do it from google chrome under root.

[phhpro]

...

[freestyler]

Agreed. I don't trust tor, if anything it draws attention. Whonix-gateway is the best and only way I use tor. For regular browsing i use openvpn and dnscrypt

[francois]

@freestyler:
Did you implement these three types of packages on your porteus/slackware system (sorry for my quite naive questions)?

1) Whoonix works thru the use of two operating systems, Whonix-Gateway and Whonix-Workstation, that run in virtual box. This is interesting! Thus it could be run within porteus:
https://www.whonix.org/wiki/Main_Page
https://www.whonix.org/wiki/Main_Page

2) openvpn and dnscript: does it need some specific and paying service provider (or can I get it already included with my present service provider) and is it only for peer to peer exchanges (only those plugged with openvpn)?

- openvpn:
http://docs.slackware.com/howtos:security:openvpn
- dnscript:
http://linuxlist.wordpress.com/dnscrypt ... -current/
https://github.com/w41l/wlsbuild/blob/m ... lackBuild
From what I understand, this seems to be free service with the servers of OpenDNS a popular DNS provider, see:
http://linuxaria.com/howto/dnscrypt-cry ... t?lang=en
http://en.wikipedia.org/wiki/OpenDNS

What is the cost of using opendns, other than the monetary one?

[freestyler]

Did you implement these three types of packages on your porteus/slackware system (sorry for my quite naive questions)?

yup. I got a dnscrypt how to here. Openvpn is already installed on proteus but requires iproute2-3.4.0-x86_64-2.xzm. I made a couple "easy" ways to use openvpn in kde here and here.

1) Whoonix works thru the use of two operating systems, Whonix-Gateway and Whonix-Workstation, that run in virtual box. This is interesting! Thus it could be run within porteus:

Its a pretty easy setup. whonix-gateway can be run in the background with no desktop and use 256mb ram. Then use whonix-workstation as a webrowser (I got firefox setup so it takes up to whole virtual machine screen and looks exactly like a firefox window.) its also possible to not use the workstation and route your tor traffic directly through the gateway but reduces the security benifits.

2) openvpn and dnscript: does it need some specific and paying service provider?

Openpn: vpngate.net has a list of free vpn servers around the world, there is also http://www.vpnbook.com. Recently ive been setting up a free uncapped vpn/privacy server for the public but still has a bit to go before I open it up. As far as paid services https://www.privateinternetaccess.com/ is the cheapest and best (only US$36 a year).

Dnscypt: by default it uses http://www.opendns.com/ which is free, You can always choose a different service,http://dnscrypt.org/ has a list of others.

or can I get it already included with my present service provider

Some ISPs have it included, It's also possible to score free university connections if you know the right people.

and is it only for peer to peer exchanges (only those plugged with openvpn)

Nope. openvpn is just software to connect you to a VPN. Some services like vpnbook might have certain restrictions, I think they got a vpn for regular browsing and a seperate vpn for p2p and downloading.

[francois]

At first sight, your solutions seem quite secure. I imagine a few of the crowd on porteus forum will try them on. Unless someone comes with additional critiques.

[donald]

dnscrypt may have good use cases for clearnet,
but the server will still see all DNS requests in cleartext.Even if I trusted the people running DNSCrypt servers, their servers would have to be trusted as well.
every DNS-resolver you contact (encrypted or not) can log you.
If they say they don't, trust them..lol
I think you will just shift the trust from one party (ISP) to another(OpenDNS).

[freestyler]

@donald
ISP's in most countries have a legal obligation to log and supply information to their governments. In my opinion the less they know the better.

[Rava]

@donald
ISP's in most countries have a legal obligation to log and supply information to their governments. In my opinion the less they know the better.

True that.

Anyhow, back on topic, anyone already created a pBuild that would create either the i686 or the x86_64 version from the most current tar.gz (or whatever they use) ?

[francois]

Hi rava,

No need to make it into a module. Just download, unzip and then start it directly with the available script file.See:
https://www.torproject.org/download/dow ... sy.html.en

Have fun!

[sae13]

I installed tor with
usm -g tor

but i dont know how to run it
when i type tor in terminal nothing happens

[francois]

Wread is the tor expert. We will see if he will choose to intervene on this old thread or on your more recent thread.

[brokenman]

Tor browser might be a better option for you. You just unpack it and run the start script at: Browser/start-tor-browser

https://www.torproject.org/projects/torbrowser.html.en

[Rava]

Silly question in between. A TOR package is just a setup for TOR, a firefox and the setup data for using the tor network.

By all that, is there a known issue that TOR cannot be bundled with palemoon instead of Firefox? I know that palemoon is no longer supported with quite outdated CPUs (about CPUs older than 15 years or so, so really outdated, like >99% or all current running Linux systems running on CPUs that support palemoon) So that smat thing aside, would PM run as a TOR package?

...


I know, it would probably be better to ask that at the TOR or PM forum than here, but since we want it slim and modular, me thinks Palemoon > Firefox, since Porteus > Ubuntu.

________
@any mod or admin: If you think my question is better suited in a new thread, please put it there.