Tor Browser Secure Setup by creationlayer

View this thread on steempeak.com
· @creationlayer · (edited)
$0.76
Tor Browser Secure Setup
<p>There's a lot of talk about Tor, and well there's different uses for it. Censorship resistance, Bitcoin clients, exchanges like Bitsquare and others. This guide is just for general knowledge, and I'm personally just a person who writes detailed notes. 

There was a suggestion in comments about a VPN. I personally support and use AirVPN they take Bitcoin, have invested in Bitcoin and have great service. A VPN is a good solution and you can still use your regular setup. Tor is for very specific privacy, security or other.<br />

It is difficult without javascript and such things to browse the web, but you can start with the most secure settings and then adjust down as needed.</p>
<p>Tor Browser</p>
<p>Download at: <a href="https://torproject.org/" rel="noopener">torproject.org</a> All Tor network addresses will be followed with .onion, not .com. It is far more secure browsing .onion services.</p>
<p>forbidding javascript and other elements can make web browsing less  convenient, but by allowing more elements you open yourself to potential  vulnerabilities. It’s best to find the best possible security setting  you can withstand while the web browsing experience is still functional. <br />
<br />
<strong>Configuring Security Settings</strong> <br />
Privacy and security settings can be easily configured. Click on the Onion in the top left.<br />
<img src="https://www.steemimg.com/images/2016/07/29/toronion_large68351.png" /></p>
<p>select “Privacy and Security Settings” Adjust the slider to your desired level of security.<br />
<img src="https://www.steemimg.com/images/2016/07/29/torprivacysettings1e284.png" /><br />
<br />
<strong>Noscript basics</strong> <br />
Depending on your security level selected in Tor, Noscript may not  provide any advantage. That main advantage of Noscript is it’s easier to  tailor allowing on specific sites, or for specific elements on the fly.  Click the S in the Top Left next to the Tor Onion symbol and select  forbid scripts globally. You should see a red line across the S. If you  allow specific sites, you should check that the red line is there for  those you do not allow. Allowing only specific sites may create a  fingerprint of your activity. There are some advanced settings under options worth taking a look at.<br />
<img src="https://www.steemimg.com/images/2016/07/29/tornoscripts_large86a31.png" /><br />
<br />
Tor bridge</p>
<p>in some cases if Tor is blocked or you wish to conceal the use of Tor  a bridge can be configured. This makes it more difficult for an ISP to detect Tor. Bridges can help avoid censorship, and if your ISP  Blocks Tor Traffic it is much more difficult to detect the nature of  the traffic unless deep packet inspection is employed. It’s one of those  things that since it’s there, might as well set it up as a  per-cautionary measure and see if your connection is still, reliable and  fast enough for your standards.  </p>
<ol>
  <li>Click Open Settings on the Pop-up Connection Box</li>
</ol>
<p><img src="https://www.steemimg.com/images/2016/07/29/torconnectionpopup1db0a.png" /></p>
<p>1. Click configure</p>
<p><img src="https://www.steemimg.com/images/2016/07/29/torconfigurebridge64f43.png" /></p>
<p>1. Select Yes to ISP Censors or Blocks<br />
<img src="https://www.steemimg.com/images/2016/07/29/torispblocks5e12e.png" /><br />
1. obfs3 is fine, see below for information on other options.<br />
<img src="https://www.steemimg.com/images/2016/07/29/torselectbridge46856.png" /><br />
1. Most likely just skip use a local proxy<br />
2. Click connect<br />
<img src="https://www.steemimg.com/images/2016/07/29/torconnectbridgefd6af.png" /><br />
Optionally if Tor is already started you can  </p>
<ol>
  <li>click the onion icon in the top left of the browser and select</li>
  <li>Open Network Settings</li>
  <li>check My ISP Blocks Connections and hit OK.</li>
</ol>
<p><img src="https://www.steemimg.com/images/2016/07/29/torbridgeselectad392.png" /></p>
<ol>
  <li>use obfs 3 which is recommended, see next section on other types.</li>
</ol>
<h5>Pluggable Transports</h5>
<p>Pluggable Transports are extensions to Tor which utilize it’s pluggable transport API.  These are more advanced ways to disguise traffic flow, for instance  making it appear as skype traffic or utilizing a flash proxy. Many are  now included in the Bridge Option Menu, so this is a good resource to  learn more about the specifics. Some may require custom installation. <a href="https://www.torproject.org/docs/pluggable-transports.html.en#download" rel="noopener">www.torproject.org/docs/pluggable-trans...</a> </p>
<h5>Firefox</h5>
<p>If you need to use another browser Firefox is preferred. Here are  some configuration settings and extensions that can be helpful. </p>
<p><strong>Optional Configuration:</strong> </p>
<p>In the URL Bar enter: about:config</p>
<p><img src="https://www.steemimg.com/images/2016/07/29/aboutconfigbasicsf68a1.png" /></p>
<ul>
  <li>geo.enabled = false</li>
  <li>geo.wifi.uri =leave blank</li>
  <li>network.http.accept.default = text/html,application/xhtml+xml,application/xml;q=0.9,<strong>/</strong>;q=0.8</li>
  <li>network.http.use-cache = false</li>
  <li>network.http.keep-alive.timeout = 600</li>
  <li>network.http.max-persistent-connections-per-proxy = 16</li>
  <li>network.proxy.socks_remote_dns = true</li>
  <li>network.cookie.lifetimePolicy = 2</li>
  <li>network.http.sendRefererHeader = 0</li>
  <li>network.http.sendSecureXSiteReferrer = false</li>
  <li>network.protocol-handler.external = false #set the default and all the sub-settings to false</li>
  <li>network.protocol-handler.warn-external = true #set the default and all the sub-settings to true</li>
  <li>network.http.pipelining = true</li>
  <li>network.http.pipelining.maxrequests = 8</li>
  <li>network.http.proxy.keep-alive = true</li>
  <li>network.http.proxy.pipelining = true</li>
  <li>network.prefetch-next = false</li>
  <li>browser.cache.disk.enable = false</li>
  <li>browser.cache.offline.enable = false</li>
  <li>browser.sessionstore.privacy_level = 2</li>
  <li>browser.sessionhistory.max_entries = 2</li>
  <li>browser.display.use_document_fonts = 0</li>
  <li>intl.charsetmenu.browser.cache = ISO-8859-9, windows-1252, windows-1251, ISO-8859-1, 	UTF-8</li>
  <li>dom.storage.enabled = false</li>
  <li>extensions.blocklist.enabled = false</li>
</ul>
<p><strong>Other useful options:</strong>  </p>
<ol>
  <li>Disable all plugins: tools → addons → plugins</li>
  <li>Disable all live bookmarks: bookmarks → bookmarks toolbar → R/click latest headlines → delete</li>
  <li>Disable all updates: tools → options → advanced → update</li>
  <li>Enable ‘do not track’ feature: tools → options → privacy</li>
  <li>Enable private browsing, configure to remember nothing &amp; disable 3rd party cookies: tools → options → privacy</li>
</ol>
<p><strong>Useful plugins:</strong> <br />
 it’s best to keep plugins at a minimum but here are some to consider  </p>
<ul>
  <li>HTTPS Everywhere – <a href="https://www.eff.org/https-everywhere" rel="noopener">www.eff.org/https-everywhere</a></li>
  <li>Privacy Badger – <a href="https://www.eff.org/privacybadger" rel="noopener">www.eff.org/privacybadger</a></li>
  <li>Close n forget – <a href="https://addons.mozilla.org/en-us/firefox/addon/closen-forget" rel="noopener">addons.mozilla.org/en-us/firefox/addon/...</a></li>
  <li>ublock – <a href="https://github.com/chrisaljoudi/uBlock#getting-started" rel="noopener">github.com/chrisaljoudi/uBlock#getting-...</a></li>
  <li>Modify Headers – <a href="https://addons.mozilla.org/en-us/firefox/addon/modify-headers" rel="noopener">addons.mozilla.org/en-us/firefox/addon/...</a></li>
  <li>NoScript – <a href="https://addons.mozilla.org/en-us/firefox/addon/noscript" rel="noopener">addons.mozilla.org/en-us/firefox/addon/...</a></li>
  <li>RefControl – <a href="https://addons.mozilla.org/en-us/firefox/addon/refcontrol" rel="noopener">addons.mozilla.org/en-us/firefox/addon/...</a></li>
  <li>User Agent Switcher –  <a href="https://addons.mozilla.org/en-us/firefox/addon/user-agent-switcher" rel="noopener">addons.mozilla.org/en-us/firefox/addon/...</a></li>
  <li>Adblock plus – <a href="https://addons.mozilla.org/en-us/firefox/addon/adblock-plus" rel="noopener">addons.mozilla.org/en-us/firefox/addon/...</a></li>
</ul>
<p>You may consider visiting <a href="http://ip-check.info/" rel="noopener">ip-check.info</a> to see what data your browser is sending.</p>

<b>This is content I have created.</b>
👍  , , , , , , , , , , , , , , , , , ,
properties (23)
post_id339,246
authorcreationlayer
permlinktor-browser-secure-setup
categorysecurity
json_metadata"{"links": ["https://torproject.org/", "https://www.torproject.org/docs/pluggable-transports.html.en#download", "https://www.eff.org/https-everywhere", "https://www.eff.org/privacybadger", "https://addons.mozilla.org/en-us/firefox/addon/closen-forget", "https://github.com/chrisaljoudi/uBlock#getting-started", "https://addons.mozilla.org/en-us/firefox/addon/modify-headers", "https://addons.mozilla.org/en-us/firefox/addon/noscript", "https://addons.mozilla.org/en-us/firefox/addon/refcontrol", "https://addons.mozilla.org/en-us/firefox/addon/user-agent-switcher", "https://addons.mozilla.org/en-us/firefox/addon/adblock-plus", "http://ip-check.info/"], "image": ["https://www.steemimg.com/images/2016/07/29/toronion_large68351.png"], "tags": ["security"]}"
created2016-07-29 17:50:24
last_update2016-07-29 18:00:24
depth0
children5
net_rshares458,329,682,023
last_payout2016-08-29 06:22:39
cashout_time1969-12-31 23:59:59
total_payout_value0.604 SBD
curator_payout_value0.156 SBD
pending_payout_value0.000 SBD
promoted0.000 SBD
body_length8,515
author_reputation9,096,805,076,605
root_title"Tor Browser Secure Setup"
beneficiaries[]
max_accepted_payout1,000,000.000 SBD
percent_steem_dollars10,000
author_curate_reward""
vote details (19)
@isaac.asimov ·
Flesch Kincaid Grade Level
Hi! This post has a <a href="https://en.wikipedia.org/wiki/Flesch%E2%80%93Kincaid_readability_tests">Flesch-Kincaid</a> grade level of 12.4 and reading ease of 49%. This puts the writing level on par with academic journals.
👎  , ,
properties (23)
post_id339,249
authorisaac.asimov
permlinkre-tor-browser-secure-setup-20160729t175025
categorysecurity
json_metadata{}
created2016-07-29 17:50:27
last_update2016-07-29 17:50:27
depth1
children0
net_rshares-682,304,374
last_payout2016-08-29 06:22:39
cashout_time1969-12-31 23:59:59
total_payout_value0.000 SBD
curator_payout_value0.000 SBD
pending_payout_value0.000 SBD
promoted0.000 SBD
body_length223
author_reputation-982,250,417,825
root_title"Tor Browser Secure Setup"
beneficiaries[]
max_accepted_payout1,000,000.000 SBD
percent_steem_dollars10,000
author_curate_reward""
vote details (3)
@angelinaalba ·
I am download sir, thank you for information
👍  
properties (23)
post_id339,281
authorangelinaalba
permlinkre-creationlayer-tor-browser-secure-setup-20160729t175146737z
categorysecurity
json_metadata"{"tags": ["security"]}"
created2016-07-29 17:51:51
last_update2016-07-29 17:51:51
depth1
children1
net_rshares77,348,360
last_payout2016-08-29 06:22:39
cashout_time1969-12-31 23:59:59
total_payout_value0.000 SBD
curator_payout_value0.000 SBD
pending_payout_value0.000 SBD
promoted0.000 SBD
body_length44
author_reputation-846,794,010,985
root_title"Tor Browser Secure Setup"
beneficiaries[]
max_accepted_payout1,000,000.000 SBD
percent_steem_dollars10,000
author_curate_reward""
vote details (1)
@creationlayer ·
it's slow and don't plan to use it with steemit. For privacy it is a good tool, when you need it. I generally only need it if there is a privacy concern.
properties (22)
post_id339,340
authorcreationlayer
permlinkre-angelinaalba-re-creationlayer-tor-browser-secure-setup-20160729t175512192z
categorysecurity
json_metadata"{"tags": ["security"]}"
created2016-07-29 17:55:12
last_update2016-07-29 17:55:12
depth2
children0
net_rshares0
last_payout2016-08-29 06:22:39
cashout_time1969-12-31 23:59:59
total_payout_value0.000 SBD
curator_payout_value0.000 SBD
pending_payout_value0.000 SBD
promoted0.000 SBD
body_length153
author_reputation9,096,805,076,605
root_title"Tor Browser Secure Setup"
beneficiaries[]
max_accepted_payout1,000,000.000 SBD
percent_steem_dollars10,000
@shredlord ·
Get onto a VPN as well if you're gonna be messing around on Tor. Just make sure it's legit & safe by going over reviews.
👍  
properties (23)
post_id339,330
authorshredlord
permlinkre-creationlayer-tor-browser-secure-setup-20160729t175434447z
categorysecurity
json_metadata"{"tags": ["security"]}"
created2016-07-29 17:54:36
last_update2016-07-29 17:54:36
depth1
children1
net_rshares0
last_payout2016-08-29 06:22:39
cashout_time1969-12-31 23:59:59
total_payout_value0.000 SBD
curator_payout_value0.000 SBD
pending_payout_value0.000 SBD
promoted0.000 SBD
body_length120
author_reputation13,663,298,473,304
root_title"Tor Browser Secure Setup"
beneficiaries[]
max_accepted_payout1,000,000.000 SBD
percent_steem_dollars10,000
author_curate_reward""
vote details (1)
@creationlayer ·
I personally use AirVPN, they take Bitcoin, fair price and have invested in Bitcoin things. I'm not a heavy tor user I more took notes to share, and I have quite a few tutorials, so I will share.
👍  
properties (23)
post_id339,355
authorcreationlayer
permlinkre-shredlord-re-creationlayer-tor-browser-secure-setup-20160729t175635335z
categorysecurity
json_metadata"{"tags": ["security"]}"
created2016-07-29 17:56:33
last_update2016-07-29 17:56:33
depth2
children0
net_rshares0
last_payout2016-08-29 06:22:39
cashout_time1969-12-31 23:59:59
total_payout_value0.000 SBD
curator_payout_value0.000 SBD
pending_payout_value0.000 SBD
promoted0.000 SBD
body_length195
author_reputation9,096,805,076,605
root_title"Tor Browser Secure Setup"
beneficiaries[]
max_accepted_payout1,000,000.000 SBD
percent_steem_dollars10,000
author_curate_reward""
vote details (1)