Silk Road forums
Discussion => Security => Topic started by: tango on July 18, 2012, 04:11 pm
-
Just curious if this is possible and safe to do so?
I downloaded a tor browser for iphone called Covert Browser, it lets me browser the forums and get to the login page for silk road, but when i put my details in, it just goes to a blank screen.
Has anyone had any other luck or opinions on security and safety of using an iphone/ipad to access tor?
Thanks
-
I'm actually using OnionBrowser which you can download from Installous: you'll need to jailbreak your device. It works great, everything seems to work on SilkRoad. TorMail also works, even though you'll be forced to use the non-JavaScript web client. If your device isn't jailbroken, I don't know what could eventually work, CovertBrowser is the only Tor-based browser on the AppStore I've heard of.
-
They do not protect your privacy anymore then Tor alone.
Covert browser does not let me log in. It logs in and then never refreshes.
Onion browser - works, but god forbid you exit it out to do something else for a moment or to look something up. once you come back its dead. gotta actually close the app via the "task man" then reopen it from scratch. still a pretty big pain, but does in fact work.
-
You should do searches for other posts on this. Don't go crazy with orders using your iDevivice, and use a ip/anonymity check to see how secure you are. I have logged onto tor nodes before but it's a very rare occurrence. ;D
*EDIT*
Now that it comes to mind (should've mentioned this before) you defiantly should use wifi (not your own), that really seemed to help.
-
Not that I don't believe you or anything Shroomeister, but does anyone have actual proof that it functions just the same as Tor on a computer?
Well first and foremost I am not advocating the use of either of these. With that said. how does Tor work?
Your traffic >>> Tor >>>> Tor Relay >>>> Tor Relay >>> Tor Relay >>> Webpage.
and then the reverse back to you.
In its simplest form, the very fact that you can reach a .onion site (SR) says it is working within the Tor network AKA - as good as desktop Tor. Now if you rely totally on Tor as your means of remaining anon, then that is the flaw in your thinking.
-
Not that I don't believe you or anything Shroomeister, but does anyone have actual proof that it functions just the same as Tor on a computer?
Well first and foremost I am not advocating the use of either of these. With that said. how does Tor work?
Your traffic >>> Tor >>>> Tor Relay >>>> Tor Relay >>> Tor Relay >>> Webpage.
and then the reverse back to you.
In its simplest form, the very fact that you can reach a .onion site (SR) says it is working within the Tor network AKA - as good as desktop Tor. Now if you rely totally on Tor as your means of remaining anon, then that is the flaw in your thinking.
I think you should elaborate to these people when you say "your total means of staying anon". But try serching for JonDonym, use the security test on iPad/iPhone, then on PC, and tell me there is no difference. ;D
-
Buying droogs?
There's an app for that!
But seriously Apple are the worst violators of privacy ever. Run running a virtual machine software from your iPad or Mac and then the TBB from that (all on some kind of portable storage like MicroSD or a mini USB or an Ironkey if there's a suitable one for Mac). Access the network via private SSL bridges so your ISP can't see your traffic. Don't sacrifice convenience for security. SR is like Amazon.com, but it is not Amazon.com.
-
"Access the network via private SSL bridges so your ISP can't see your traffic. Don't sacrifice convenience for security."
I believe it does that just not as well. I believe if you use it through public (open) wifi it helps you to stay hidden better. But not only all the above that has been mentioned, when using tor you need to take a WHOLE different approach to internet use. ;D
-
Not that I don't believe you or anything Shroomeister, but does anyone have actual proof that it functions just the same as Tor on a computer?
Well first and foremost I am not advocating the use of either of these. With that said. how does Tor work?
Your traffic >>> Tor >>>> Tor Relay >>>> Tor Relay >>> Tor Relay >>> Webpage.
and then the reverse back to you.
In its simplest form, the very fact that you can reach a .onion site (SR) says it is working within the Tor network AKA - as good as desktop Tor. Now if you rely totally on Tor as your means of remaining anon, then that is the flaw in your thinking.
Touche, you are correct. I was thinking more along the lines of whoever your cellular provider is being able to know what sites you're visiting, etc.
Right on. Your cell company wont know "anything more" then your Home/Business ISP "knows" when you use Tor. Not to beat a dead horse, but "you are anon" as long as there isnt someother funky ish going on. What do I mean? Well java script is known to be an ip snitch. In otherwords you can be running Tor all day, there are some know java scripts that can "leak" your "real" ip even with Tor running.
@Whothefuckisthis - While I have never used JohnDoe or JonDonym or whatever it is called. I was referring to the use of a private/dedicated VPN tunnel.
@Everyone - a dedicated/private VPN will give you a dedicated pipe to/from the "provider" (usually another country). after this link is established, you then Tor. If any IP were to be "leaked" you leak the IP of your VPN. Not to mention you gain total encryption. end point to end point.
Normally you pay for these VPN services, but they are affordable enough as to give no one an excuse not to add it to thier tool belt.
Remember "being secure" in not just one thing. Security is all about layers.
Now I have used the "Onion browser" through a VPN before, but it still falls short as mentioned in my first post.
-
Covert Browser is nice to browse the forums, but I think it's lacking cookie support which means you can't login to SR, or the forums, or even do a search. Thankfully, this also means it's not really storing any cookie data locally so your iDevice will be cleanish.
If your going to break the law and buy drugs online though, I think it's worth the effort to drag your ass off the couch and pickup your laptop or use your desktop and use your PGP tools etc. I wouldn't risk such activities on closed-eco system apple stuff. They've already been busted logging GPS data, and your device has a unique UID. Just don't do it.
Also, If you use a computer with an SSD drive, wiping data off is more secure also and won't leave info that can be recovered like on magnetic drives.
Hope that helps.
-
Using SR while on certain VPNs could be a risky thing from what I heard. Just in case LE wanted to serve up a warrant. ;D
-
Not any less risky, then surfin from your local ISP. Im sure that LE would be able to get a "warrant" or whatever a lot more easily from your local ISP then a VPN company from Europe.
Hey Whatever. To each his own.
-
i have been thinking about adding a vpn for a long time, i have heard many people say both good and bad things. so how would i go about adding a vpn. I have used them before but never with tor.
-
Buying droogs?
There's an app for that!
But seriously Apple are the worst violators of privacy ever. Run running a virtual machine software from your iPad or Mac and then the TBB from that (all on some kind of portable storage like MicroSD or a mini USB or an Ironkey if there's a suitable one for Mac). Access the network via private SSL bridges so your ISP can't see your traffic. Don't sacrifice convenience for security. SR is like Amazon.com, but it is not Amazon.com.
Yep.
Worse, iOS can be secretly updated by Apple, without your knowledge. If LEO gets a warrant, they can pwn your iOS device, and monitor your SR browsing.
Not worth it.
-
i have been thinking about adding a vpn for a long time, i have heard many people say both good and bad things. so how would i go about adding a vpn. I have used them before but never with tor.
Its Easy, and rather cheap. PM me.
-
i have been thinking about adding a vpn for a long time, i have heard many people say both good and bad things. so how would i go about adding a vpn. I have used them before but never with tor.
I have long suspected that alpine and myself are related :)
-
I use "Onion Browser" on my iPhone it works fine; I'm using it now. It can be very slow sometimes.
As for as apple being able to update your OS without your knowledge this seems unlikely. Firmware updates take quite a while and involve shutting down the phone. If like me your iPhone is jail broken you can block updates anyway. ( I do this so I don't accidentally update to a new firmware and lose my jailbreak, pretty unlikely but now impossible)
In many threads on this subject, noone has been able to give any convincing reason why accessing TOR from a cellphone is in itself less secure than a laptop, for example using a 3G dongle.
I'm not saying there aren't risks but I wish someone with this knowledge could give me some solid facts rather than just saying "ooh sounds risky I wouldn't if I were you"
Anyway you can also use GPG on an iPhone if it's jailbroke. You need Mobile Terminal and iFile. I have stored all the basic commands as shortcuts in MT. I am always careful to wipe all keys between used tho. The main risk I can see is leaving evidence such as this if your phone is ever seized by LE with the technical competence to find it.
Here is a brief guide I posted:
http://dkn255hz262ypmii.onion/index.php?topic=27442.msg299005#msg299005
-
There is now actually a decent PGP app on appstore... Can't recall it's name just now.... not tried it but it looks ok. It didnt have PGP or GPG in its name so I cant search it. I haven't used it but it looked better than the other offerings. I am surprised there aren't more front ends on iPhone. Can't be that hard to implement, I suppose th ere isn't huge demand.
-
I have not seen PGP/GPG in the iphone. Im going to look again now. :)
but there is a TrueCrypt app. Call something like "CryptVault" or something like that. If Im wrong and someone can't find it, I'll get the real app name.
I do not use it for SR. I been using encryption far longer then that. The app is written by just one guy and it IS good and all. The only short coming that I see is that you must name your True Crypt volume with a file extention of .fc in order for the app to "see" it.
I dont like that.
-
Yeah I have definitely see pgp like opengp have not see a truecrypt app. I take it that it would not provide full disk but let you encrypt things in a app? But I use onion browser on iPhone. Works great but I really need to quit this habit because its really not good security wise.
Cops can crack iOS in like seconds and apple would be happy to help if needed (fucking apple lol always seems to bend over backwards for LE). Anyway there's another good app called ishredder that will securely wipe your free space which is alway good if your doing things on the iPhone.
-
I have long suspected that alpine and myself are related :)
@pine lol Hey you never know
-
http://sid77.slackware.it/ios/
Add this repository to your Cydia repositories to install Mobile Tor for iOS. This allows you to torify the internet connection for all the applications including safari on your iOS device.
After installing Mobile Tor, and enabling it. You will need to setup the proxy server for your WiFi connection to:
IP: 127.0.0.1
Port: 8118
-
I take it that it would not provide full disk but let you encrypt things in a app?
Correct, you make small volumes. Like 2mb. Then you can put txt docs inside and then email the whole volume back and forth. Both of you know and use the same password.
I have used it like that long before I ever knew of SR.
-
I created a step-by-step guide on how to install Mobile Tor and configure everything in iOS. You must have a jailbroken iOS device for this to work. This allows you to route traffic for all applications over the Tor network. This can allow you to use other applications such as IRC client etc over Tor and not just a web browser like you are limited to with the Onion Browser application.
http://x35jfacrznhhtrfr.onion/tutorials/tor-ios/
-
Cool, thanks outer.
checking it out now.
-
I created a step-by-step guide on how to install Mobile Tor and configure everything in iOS. You must have a jailbroken iOS device for this to work. This allows you to route traffic for all applications over the Tor network. This can allow you to use other applications such as IRC client etc over Tor and not just a web browser like you are limited to with the Onion Browser application.
http://x35jfacrznhhtrfr.onion/tutorials/tor-ios/
Very Interesting.....does this work over 3G or just wifi?
-
I created a step-by-step guide on how to install Mobile Tor and configure everything in iOS. You must have a jailbroken iOS device for this to work. This allows you to route traffic for all applications over the Tor network. This can allow you to use other applications such as IRC client etc over Tor and not just a web browser like you are limited to with the Onion Browser application.
http://x35jfacrznhhtrfr.onion/tutorials/tor-ios/
Very Interesting.....does this work over 3G or just wifi?
It works over both 3G and WiFi :)
-
Seems like I tried iPGMail and there were some issues with it, but I personally use oPenGP for iOS. It is $1 more than iPGMail, but it's well worth it as I haven't had a single problem with it yet!
-
iPGmail works a okay for me. ;D
-
I created a step-by-step guide on how to install Mobile Tor and configure everything in iOS. You must have a jailbroken iOS device for this to work. This allows you to route traffic for all applications over the Tor network. This can allow you to use other applications such as IRC client etc over Tor and not just a web browser like you are limited to with the Onion Browser application.
http://x35jfacrznhhtrfr.onion/tutorials/tor-ios/
Very Interesting.....does this work over 3G or just wifi?
It works over both 3G and WiFi :)
It doesn't seem to be working for me... when I try to visit " am I using Tor? " with safari it doesn't open, and the text on the google search results says " sorry you are not using Tor"
I have followed instructions carefully.
-
Its displaying that on the Google Results because the Google robot that scanned that page and cached it wasn't using Tor. You enable Tor in SBSettings and turned on the HTTP proxy?
-
I was trying to use it over 3G so just enabled in SBSettings.
-
With respect to the wiping of an SSD drive, I must beg to differ. My understanding is that it is possible to securely wipe/destroy information contained on magnetic platters; however the same has yet to be demonstrated on SSD media. Frankly, the media are just too new. My understanding is that due to wear-leveling algorithms and the like, data wiping cannot be guaranteed with an SSD drive, thus physical destruction is your only real option.
Another reason to always use Full Disk Encryption. If you Never write unencrypted data to a drive you have a lot less worries of data being recovered (at least easily).
-
With respect to the wiping of an SSD drive, I must beg to differ. My understanding is that it is possible to securely wipe/destroy information contained on magnetic platters; however the same has yet to be demonstrated on SSD media. Frankly, the media are just too new. My understanding is that due to wear-leveling algorithms and the like, data wiping cannot be guaranteed with an SSD drive, thus physical destruction is your only real option.
Guru
Good to know.. so as far as I under with TRIM enabled it is impossible to undelete a file on an SSD drive via the OS, but data recovery *may* still be possible using physical bit-level methods, but still a touch harder than a magnetic platter. Is that right?