Daily Archives: March 14, 2020

Image: Tor Project

The Tor Project warned users yesterday about a major bug in its browser that may execute JavaScript code on sites that users have specifically blocked JavaScript from running.

Tor developers said they are working on a fix; however, they did not provide a timeline for a patch.

The ability to block JavaScript code execution is a crucial security feature of the Tor Browser Bundle (TBB), a browser with enhanced privacy-preserving features that also masks real IP addresses (locations) to keep users anonymous online.

Because of these features, the browser is often used by journalists, political activities, and dissidents in oppressive countries, as a way to skirt firewalls and online censorship.

In the past, there have been exploits that used JavaScript code to unmask a Tor Browser user's real IP address. Some have been used to target and unmask criminal activities [1, 2], while others were used in mysterious circumstances [1, 2].

Yesterday, the Tor team said they found a bug in TBB's security options. When the browser was configured to use the highest security level (called "Safest"), it still allowed JavaScript code to execute, even if it should have blocked it.

"We are aware of a bug that allows JavaScript execution on the Safest security level (in some situations)," the Tor team said.

"We are working on a fix for this. If you require that JavaScript is blocked, then you may completely disable it."

To completely disable JavaScript execution in the Tor Browser, the Tor team provided the following instructions:

See original here:
Tor team warns of Tor Browser bug that runs JavaScript on sites it shouldn't - ZDNet

The Tails OS project has announced the availability of Tails 4.4. The new update doesnt bring any groundbreaking changes but it does fix many security vulnerabilities that were detected since the last update. Some of the main packages to be updated are Tor Browser (9.0.6), Thunderbird (68.5.0), and the Linux kernel (5.4.19). According to the release notes, users are advised to upgrade as soon as possible.

In the past, in-place updates on Tails have been a bit hit-and-miss and users have sometimes been forced to perform a manual upgrade; this time around, those running Tails 4.2, 4.2.2, and 4.3 to 4.4 will be able to perform an automatic upgrade. As soon as you connect to the internet you should be notified that an update is available and be given the option to execute it.

With the new Linux kernel update, newer hardware will be supported. Additionally, an issue has been fixed which prevented those with Realtek RTL8822BE and RTL8822CE chipsets from connecting to the Wi-Fi. The project has requested feedback from users who have experienced Wi-Fi connection issues since Tails 4.1, itd like to know if your issues are now resolved, you can get in touch here.

Tails and the Tor Browser are usually updated a day after Mozilla updates its Firefox web browser, therefore, Tails 4.5s release is already pencilled in for April 7. If youd like to learn more about where the project is headed in the long-term, check out its roadmap.

Link:
Tails 4.4 has been released with new Tor Browser version - Neowin

Image: Project Tor

The Tor project yesterday warned users about a major browser bug that could execute JavaScript on sites that were specifically blocked by users from running JavaScript.

Tor developers said they are working on a solution; however, they did not provide a timeline for a patch.

The ability to block JavaScript execution is a crucial security feature of the Tor Bundle Bundle (TBB), a browser with improved privacy protection features that also masks actual IP addresses (locations) to keep users anonymous. line.

Because of these features, the browser is often used by journalists, political activities and dissidents in oppressive countries, as a way to protect firewalls and online censorship.

In the past, there have been efforts that used JavaScript to mask the actual IP address of a Tor browser user. Some have been used to target and unmask criminal activities (1, 2), while others have been used in mysterious circumstances (1, 2).

Yesterday, Tors team said they found an error in TBBs security options. When the browser was configured to use the highest level of security (called safest), it still allowed JavaScript to run, even if it should have been blocked.

Image: ZDNet

We are aware of a bug that allows JavaScript to be run at the most secure level (in some situations), said Tors team.

We are working to fix this. If you need JavaScript to be blocked, you may need to disable it completely.

To completely disable JavaScript in the Tor browser, the Tor team provided the following instructions:

Link:
The Tor team reports a Tor browser error that runs JavaScript in places that it should not - Mash Viral

When it comes to browsing the Web without leaving a trail, there is a lot of noise out there. Advice varies from getting a VPN to disabling cookies, to utilizing the Private Browsing mode within the browser of your choice. But which of these tools actually work? And how do they work? The truth is, different tools prevent different kinds of tracking.

There are other methods, but these are the main tracking tools as of this writing. Knowing which privacy tools to use depends on which of these things youre concerned about. Lets go through all the different tools you can use to browse the Web privately, and go over what they do and dont do to protect your privacy.

What itdoes: Opens a new browser session that isnt signed into any accounts and doesntutilizecookies. Activity in private browsing mode is also not added to your browser history.

What itdoesnt do: Stop sites from tracking your IP address.

Your Web browser keeps track of every site you visit, and stores a complete list of those sites in your browser history. This can be a very useful tool for finding back websites youve visited, and its also used to populate the auto-suggestions you see every time you start typing a URL.

private-browsing-incognito

Sometimes, however, you might want to browse the Web without your browser keeping track of all your activities. Thats where Private Browsing comes in.

This feature has different names on different browsers on Chrome, its called Incognito Mode, on Internet Explorer, its called InPrivate but acts basically the same on all of them. A new browser window opens, and none of your activity in that window is added to your browser history. Any accounts youre signed into in your other browser windows are not signed into in the Private Browsing window, meaning you cant be tracked as a user of those sites. And your cookies are not visible while using Private Browsing, meaning sites cannot track you this way.

private-browsing-firefox

So, Private Browsing mode does quite a few things if you want to quickly browse the Web without being tracked by your accounts or by cookies. However, it does not obscure your IP address. Any site you visit can still keep a record of your IP address, which could, in turn, be used to identify you.

Story continues

What itdoes: Kindly asks sites if they will not track you.

What it doesnt do: Actually stop sites from tracking you.

Dig through your browsers settings and youll find the option to turn on something called Do Not Track. You might think that turning this on will prevent sites from tracking you entirely, but sadly, thats not the case.Do Not Track is something thats a great idea in theory, but one that hasnt worked well in practice.

The idea was to give browsers an optional setting where users could state that theyre not comfortable being tracked. Sites would agree not to track such users, giving users just a bit more control over their information.

Unfortunately, the list of sites that respect Do Not Trackis laughably small. Turning this feature on doesnt hurt in terms of hiding your identity, but it also wont help much.

ghostery-tracking-block

There are alternatives to Do Not Track that actually block trackers, the most famous of which areGhosteryandPrivacy Badger. These are browser extensions that show you which services are tracking your Web traffic on any given page, and give you the power to block trackers at will.

What theydo: Obscure your IP address and encrypt your traffic.

What they dont (necessarily) do: Stop your traffic from being logged by the VPN itself, or by any sites youre signed into. Stop you from being tracked by cookies, user accounts, or your user agent string.

You cant use the Web without an IP address, as sites would not know where to send the information you request, thus breaking your Internet connection. That said,you can obscure your IP address using a VPN service. AVPN, or Virtual Private Network, routes all of your Internet through another computer. This means that, so far as the sites you visit are concerned, your IP is that of your VPN. Because thousands of other VPN users are also using the same IP address, anyone trying to trace your activity cant do so using your IP alone.

This isnt a solution to all potential tracking, however. If youre logged into Google, for example, that company will be able to track your activity using your account. Furthermore, using a VPN does nothing to protect you from being tracked by cookies, or your user agent string.

Its also worth noting that not all VPNs are created equal. Some have publicly committed to not keeping logs of their users activity, while others have not. There have also been security problems that have revealed useridentities on more than a few major VPNs.

Some easy-to-use services that currently have strong security reputations includeNordVPNandPrivate Internet Access, but ultimately its up to each user to decide which services they trust. Do your homework before routing all of your traffic through any of these services.

What itdoes: Routes your traffic through other users computers.

What it doesnt do: Keep you anonymousoutside the TOR browser.

Using a VPN is just one option for obscuring your IP address.TOR is another. Theservice encrypts your traffic, and your IP address, before routing it through three randomly selected exit nodes. Everything is also re-encrypted at every step, making it nearly impossible for your Web traffic to be traced.

To get started, youll need todownload the TOR browser, which is a modified version of Firefox. Use the browser when you want to avoid being tracked by your IP address.

Government agencies and hackers have occasionally managed to trace someones traffic over TOR, but so far, the problem has usually turned out to be related to user activity. For this reason, TOR also recommends that you do the following.

Using TOR to browse the Web is probably the simplest way to ensure your security, particularly if you only use it in situations when security is a must. There are ways your traffic can be traced through it, but that usually boils down to user error. Its probably a good idea to only use TOR when its important to be anonymous, and use another browser for day-to-day computing.

As you can tell, there are many different ways you can keep yourself anonymous if you combine the proper tools.Here are just a few examples:

Any of these setups can go a long way toward making your Web activitiescompletely anonymous.

Of course, theres always more you can do. For example, you could switch from Google which famously tracks your search activity to DuckDuckGo, which doesnt. Moreover, if youre using an unencrypted Wi-Fi connection, anyone nearby can sniff out your traffic and get a very good idea of what youre up to online. Make sure your router is set up to encrypt your traffic, and be sure to browse only through a VPN when you must use an unencrypted connection.

The Internet was never designed for anonymous usage, which makesstayinganonymous online a good dealof work. The above tools are a great starting point, but remaininganonymous in the long termdepends on whether you keep up with the latest security news and ensure your software is up to date.Good luck, and stay safe out there!

Continue reading here:
Want to browse the web privately? Heres how to do it for real - Yahoo Tech

The Dark Web is commonly associated with criminal activity, hacking, and other controversial topics, but it is not illegal by nature.

However, it is a common tool among criminals due to the anonymity of the Tor Browser which is required to access it.

Ordering various products for delivery is also possible on the dark web, including drugs and fake credit cards.

Various services are offered to visitors of specific websites, too, including hacking and assassination services.

Using Tor, we visited several marketplaces that offered guns, drugs, illegal services, fake goods, and malware through a similar interface to a regular online store.

Additionally, it must be noted that the dark web not only plays host to a variety of illegal marketplaces is also used to distribute illegal material.

MyBroadband in no way endorses these aspects of the dark web and many of the items shown below are illegal. This article is for information purposes only.

Below is a list of what we found on the dark web, with prices converted from Bitcoin to rand at the time of writing.

Subscribe to our daily newsletter

Read the original post:
17 things you can buy on the Dark Web - MyBroadband