Author

Topic: How safe is this for TOR? (Read 2107 times)

hero member
Activity: 1778
Merit: 504
WorkAsPro
November 26, 2012, 06:19:43 PM
#10
My thinking was, that the App model, particularly with the IOS version of it, it's easy to ensure just Onion Browser is running and it's more predictable as to what will occur, there is less to go wrong.

Presumably Apple can't/won't store your actions on the IPhone beyond stuff like what apps you have and usage stats, like things you typed or what's displayed on the screen, and the app has been checked and doesn't do anything like that either.

I was also wondering about your location being tracked, particually if your the only TOR user using a particular transmitter, but presumably that doesn't matter as all that can be determined is that your using TOR.

Talking of Iran and the such, this could be the winning solution to such problems, as I see it there is convenience and reliability as well as the technical stuff.
newbie
Activity: 56
Merit: 0
November 26, 2012, 12:00:22 PM
#9
Even if a program does not support tor/socks you can still configure tor to serve an electrum server from a local IP.

If electrum did not support socks(and I think it does) you could add this to your config:

Code:
MapAddress someelectrumserver.org 127.0.0.42

Then after restarting tor you could tell your electrum client that the server is as 127.0.0.42.
hero member
Activity: 784
Merit: 1009
firstbits:1MinerQ
November 26, 2012, 08:52:23 AM
#8

This won't make any difference to your govt detecting you are using Tor. But Electrum is much easier to use than the standard client as it doesn't need to download the blockchain. If equipment was found and confiscated there would be no way to detect if Electrum was used and if money was owned and how much since there would be no wallet file permanently stored.

i cant quite grasp how this electrum works.  how could you store coins without a wallet?
i don't believe you can run Electrum thru TOR either.   at least in the MAC version it didnt give me the option.  
by running my client directly to only 5 servers i would think that as a huge security risk, as one can monitor those
5 nodes for all tranactions, and their associated IPs.


i think i will just stick to the classic client and use TOR.
We added SOCKS support back in September. There was a hidden service Electrum server (at that time and I don't know if it continues now). It was Slush who set it up and ran it. I used it briefly as a test and it worked fine. But even without a hidden service someone monitoring the Electrum server would only see that someone was accessing the server. I'm not sure they would have much success co-relating that to your originating IP. They would see the exit node only.

As far as not having a wallet - it does have a wallet but in a Tails configuration the wallet would be lost at shutdown. So you would have to restore the wallet from seed at each invocation. That's not hard and only takes a few seconds unless you have lots of transaction history to rebuild.
legendary
Activity: 2212
Merit: 1008
November 26, 2012, 07:58:34 AM
#7

This won't make any difference to your govt detecting you are using Tor. But Electrum is much easier to use than the standard client as it doesn't need to download the blockchain. If equipment was found and confiscated there would be no way to detect if Electrum was used and if money was owned and how much since there would be no wallet file permanently stored.

i cant quite grasp how this electrum works.  how could you store coins without a wallet?
i don't believe you can run Electrum thru TOR either.   at least in the MAC version it didnt give me the option. 
by running my client directly to only 5 servers i would think that as a huge security risk, as one can monitor those
5 nodes for all tranactions, and their associated IPs.


i think i will just stick to the classic client and use TOR.
vip
Activity: 1316
Merit: 1043
👻
November 26, 2012, 06:12:15 AM
#6
Mix your coins Smiley
newbie
Activity: 56
Merit: 0
November 26, 2012, 04:37:07 AM
#5
Iran recently attempted to block tor. They modified it to allow transport layer tunnel plugins that allow you to obfuscate tor as skype, https, etc...

Add to that a secret bridge into the tor network and Iran was back online in no time.

We are winning the cryptowars.
hero member
Activity: 784
Merit: 1009
firstbits:1MinerQ
November 25, 2012, 10:59:08 PM
#4
I've sent an email to the Tails devs ([email protected]) requesting they look at including the Electrum Bitcoin Client in future releases. It support SOCKS and can be used over Tor already. It has the advantage that you could just remember (or write down) the seed (word sequence) and then restore from seed on each use.

Since typical Tails use is that you don't store data on the boot image this could be quite handy. But also if you typically insert a secondary device for data storage then a wallet could be kept there very easily.

This won't make any difference to your govt detecting you are using Tor. But Electrum is much easier to use than the standard client as it doesn't need to download the blockchain. If equipment was found and confiscated there would be no way to detect if Electrum was used and if money was owned and how much since there would be no wallet file permanently stored.
hero member
Activity: 482
Merit: 502
November 25, 2012, 08:40:43 PM
#3
You have to know that anyone sniffing your network traffic will know that you are using Tor (Because on Tor, just the content is hidden), unless you hide it in another tunnel. For example obfsproxy It makes your Tor traffic looks like regular plaintext communication, but I have never used it and cannot help you with installing or configuring it.
hero member
Activity: 715
Merit: 500
Bitcoin Venezuela
November 25, 2012, 08:07:50 PM
#2
I've been using OnionBrowser for a while, but it doesn't give you the same protection level as the Tor Browser Bundled for desktops. It's enough for what it is.
hero member
Activity: 1778
Merit: 504
WorkAsPro
November 25, 2012, 07:36:01 PM
#1
Sorry if this is off topic, but this seems like a good place to ask it.

If for example you lived in an area where freedom of expression could not be taken mostly for granted, or there were other reasons why you absolutely needed it to work, how good would this be again't the PC browser bundle? In some respects I would expect better, but in others, I'm not sure.
https://itunes.apple.com/gb/app/onion-browser/id519296448?mt=8
Jump to: