Want Safer Internet? Just Add Onions
I don't spend much time in dark corners of the Web, but every once in a while I fire up the privacy-focused Tor browser. I just installed the latest version and spent some time exploring the Tor network. It was an interesting and surprisingly non-geeky sojourn! Here's what you need to know about the Tor browser, and how it can improve your online safety and privacy... |
Tor Browser Offers Enhanced Privacy and Safety
For the uninitiated: Tor (short for The Onion Router) is a decentralized, global network of anonymous proxy servers. Each node in Tor acts much like a VPN (virtual private network) server. It accepts your browser’s requests for Web content, connects to the server(s) on which the objects reside, downloads copies and transmits them to your browser. The Tor node acts as your proxy; hence the term “proxy server.” The benefit of Tor is that the remote server does not get any data about you, since you never connect to the remote server; a Tor node does that on your behalf.
Tor promises to protect against tracking, surveillance, and censorship while you browse the Web. The Tor Browser blocks cookies and deletes your browser history when you close it. For each web page you visit, your request is sent through three Tor relays scattered around the world. At each relay, your traffic is re-encrypted and assigned a new IP address. The website you visit can't tell where you are connecting from. And your Internet Service Provider can't see what sites you visit.
So what about the onions? The onion metaphor is used because on each hop along the Tor network, your request is wrapped in another layer of encryption, calling to mind the layers of an onion. The onion routing protocol was invented in 1995, at the U.S. Naval Research Lab. Mathematicians David Goldschlag, Mike Reed, and Paul Syverson were looking for a way to create internet connections that don't reveal who is talking to whom. Their work was picked up in the early 2000s by MIT, received funding from the Electronic Frontier Foundation, and in 2006, the nonprofit Tor Project was founded to maintain Tor's development.
As you can imagine, a software tool conceived by math nerds and MIT grads was a bit geeky and difficult for the less-technically savvy people to use, so the Tor Browser was created to put a user-friendly interface on it. The Tor browser is based upon Firefox, and the Tor Project team is a coalition of part-time developers. You can download the Tor browser here.
It is theoretically possible to backtrack a Tor network request to see where it actually originated. However, it would take a determined attacker with lots of time and computing resources to do so. To frustrate such espionage, the Tor developers are constantly improving the product to make it more secure. Tor, they say, is the strongest tool for privacy and freedom online. But on the Tor Frequently Asked Questions (FAQ) page, the first question is "Am I totally anonymous if I use Tor?" And the answer is: "Generally it is impossible to have perfect anonymity, even with Tor." That is followed by a list of things you should do (or NOT do) to improve your anonymity while using Tor. I strongly recommend you read through that list before merrily wandering off into Tor land.
Why Use Tor?
There are many good reasons to use Tor, but some of them are bad. Tor provides cover for activists, journalists, authors, and others whom a repressive government might want to track down or merely associate with certain “forbidden” content on the Web. On the other hand, Tor also covers the tracks of illegal arms and drug dealers, child traffickers, copyright violators, mobsters, miscreants, and malefactors.
But that’s not us, right? We are going about lawful business using a network that runs through parts of the world where privacy is banned, or where additional layers of privacy are desired.
I found installation of the Tor Browser to be quite straightforward. If you've ever downloaded software via the Web, you'll find it familiar. In less than 5 clicks, I was up and running with Tor. On the downside, websites I visited loaded noticeably slower than usual, especially those with many images. One other glitch was that some pages loaded in languages other than English, because the proxy that was used to connect me was located outside the USA.
Pirates, Rabbit Holes, and Latency
Thinking of “sketchy sites to check out with Tor” led me first to The Pirate Bay. (In case you're not familiar, TPB is described by Wikipedia as "an online index of digital entertainment media and software." That's a polite way of saying that it's a search engine for pirated movies and music.) I got an "unable to connect" error. Solution: I tried again later, and it worked. If you have trouble connecting to a website, or need help with Tor, see the Tor Project’s FAQ page.
Elsewhere on the Internet, Tor mostly behaves well, but slowly. Fast.com reported Tor’s download speed as between 5 and 16 Mbps with a 300 ms latency. The same test a moment later but using Chrome without Tor yielded 560 Mbps with 9 ms latency. In my testing, some sites that work just fine in Chrome, Edge or Firefox failed to load, or loaded partially with the Tor browser. In most cases, reloading solved the problem.
Pages will load significantly more slowly via Tor than they do over the regular Internet. I did get a bit impatient waiting for the last bits of a page to load, perhaps as long as 45 seconds after the first bit arrived. But YouTube audio and video files play just fine on Tor; there is no choppiness, at least with 480p resolution. Download speed is not the problem; that 300 ms latency is. Once a video file starts streaming it does so continuously at an adequate speed. But a web page that fetches content from 15 different sources takes 0.3 x 15 = 5 seconds longer to load due to the 300 ms latency of each fetching. The delay might be reduced if Tor downloaded pages via multiple parallel connections, but that does not seem to be the case in my experience.
Extra Onions, Hold the Liver
Along those lines, there are multiple levels of security available. With the default "Standard" level, all Tor browser features are enabled. The "Safer" level disables "certain features that are often dangerous", such as Javascript on non-HTTPS sites, certain fonts, and math symbols. Audio and video that would normally autostart will be forced into click-to-play mode. The "Safest" mode is recommended only for static sites and basic Web services; Javascript is completely disabled. When I tried to test my speed on Fast.com in Safest mode, it failed and said I was not connected to the Internet.
It's also worth noting that the Tor developers recommend against installing Firefox add-ons with Tor Browser, because some add-ons can bypass proxy settings and break anonymity. And of course, Tor cannot protect your privacy on a website that requires a sign-in. By signing in, you have identified yourself to that website. And as I mentioned above, there are some other important do's and dont's on the Tor Frequently Asked Questions (FAQ) page.
So for browsing the mainstream Internet, the Firefox-based Tor browser is easy to use and provides considerable anonymity, meaning it would be extraordinarily expensive to figure out who is behind Tor’s proxies. I don’t live in or visit China, Russia, or North Korea, have no plans to join a covert organization, and a life of crime does not appeal to me. But if anything should change it’s great to know that Tor is available to cover my tracks, and that it works so well.
Have you tried Tor? Your thoughts on this topic are welcome. Post your comment or question below...
This article was posted by Bob Rankin on 18 Nov 2022
For Fun: Buy Bob a Snickers. |
Prev Article: [TIPS] Trouble Seeing Your Computer Screen? |
The Top Twenty |
Next Article: NINE Tips For Online Holiday Shoppers |
Post your Comments, Questions or Suggestions
Free Tech Support -- Ask Bob Rankin Subscribe to AskBobRankin Updates: Free Newsletter Copyright © 2005 - Bob Rankin - All Rights Reserved About Us Privacy Policy RSS/XML |
Article information: AskBobRankin -- Want Safer Internet? Just Add Onions (Posted: 18 Nov 2022)
Source: https://rankinfile.com/want_safer_internet_just_add_onions.html
Copyright © 2005 - Bob Rankin - All Rights Reserved
Most recent comments on "Want Safer Internet? Just Add Onions"
Posted by:
Dave H.
18 Nov 2022
The Brave browser, already a step up in browser security, allows one to open a "New private window with Tor" directly from the Brave browser, via the menu in the upper right-hand corner of the screen.
Posted by:
Mike Davies
18 Nov 2022
@Dave H.
Thanks for the tip re Brave. I didn't know Tor was included as an option.
Posted by:
Mike Davies
18 Nov 2022
@Dave H.
Thanks for the tip about Brave. I didn't know Tor was an option within it. Potentially very useful.
Posted by:
BaliRob
19 Nov 2022
Banks will always block one if it determines that the request to contact comes from a different geographical area. Also, using an adjacent laptop instead of the desktop is futile as the banks' systems detect Tor or other VPN.
Is there any other way to shield TOR from the bank without uninstalling it please?
Posted by:
Ernest N. Wilcox Jr.
19 Nov 2022
I enjoy the freedom of living in the U.S.A. and a life of crime doesn't appeal to me, so I'm not as concerned with anonymity as I would be if I lived elsewhere or engaged in criminal pursuits. The bottom line for me is that I'm not willing to pay the performance cost of the TOR web browser to obtain the level of anonymity it provides. I have tried it out of curiosity several years ago, and it seemed to work well, but with very poor performance. My experience very closely matched what Bob describes here. If I ever see the U.S.A. following the route of a few other nations, I may decide that I need it, but I think that is very unlikely any time in the foreseeable future, or even in my lifetime (I'm in my 70s).
While I don't feel the need for the anonymity the TOR browser provides, I'm sure that there are many who do. For that reason, I am very glad that it exists, and that it is actively maintained. Thank You to those who develop and maintain the TOR browser for all you do for those who need it. You may be saving lives.
My2Cents,
Ernie
Posted by:
Ernest N. Wilcox Jr.
19 Nov 2022
A note for those who post here: The button below this text entry dialog states "Post Comment (click ONCE and wait...)". I have a fast laptop PC, and a very fast Internet connection, but I still have to wait a bit, and sometimes longer than a bit for the page to reload with my post. There are times when I must close my browser then re-open it to this page to see my post. This web site can get very busy, and I'm sure that Bob cannot afford to pay the cost of a site that can handle the high traffic volumes that sites like the Google search page, et-al handle regularly. Patience is the watchword for sites like this, so PLEASE be patient when you post your comment.
Ernie
Posted by:
BaliRob
19 Nov 2022
@ernest (above)
Thank your lucky stars that you do not live under the restrictions enforced in some S/E Asia
Posted by:
BaliRob
19 Nov 2022
@ Ernest cont... (I got cut off)
.........countries.
@ Ernest again - The Post Comment Button has always connected me within 2 or 3 seconds I would estimate and that is over many years with Bob. You may have a problem with your server perhaps?
Posted by:
Ernest N. Wilcox Jr.
19 Nov 2022
@BaliRob,
No, when it takes more than a few seconds for my comment to post, I check my connection speed (in another tab/window) to ensure the trouble is not on my end. This has not proved to be the case, so I can only assume that the issue is that Bob's server is very busy. I frequently see double posts here, so I made the assumption that the OPs did not read the button in its entirety. I was simply trying to help reduce the number of double posts due to impatient commenters :)
Ernie
Posted by:
Morty G.
19 Nov 2022
After reading Bob's descriptions and explanation, using TOR sounds like carrying around a bottle of nitroglycerin - it can be very useful, but could unexpectedly blow up in your face. With all the potential advantages, the downsides seem to offset them. Tor may be useful (as Bob says) for miscreants, etc. who need anonymity, but for the average Joe this option sounds like LOTS of extra work added to the already time consuming and complex stuff you need to know, do or research simply to keep your computer running (i.e. avoiding viruses, updating drivers, contending with BS Windows 10,11,12,13+++, phishing, spam, hardware glitches, ISP ripoffs, on and on ad infinitum). All this stuff ads up and I don't want to spend my life as a slave to a computer versus just using it. Life is already too complicated.
Posted by:
Keith
19 Nov 2022
I use Duckduckgo to search. I find their privacy ratings for websites to be very revealing. Seeing the personal info that just Youtube collects and sells is amazing. When I have time, I use Tor. Besides, I like to see YouTube commercials in Norwegian.