Also Iran (likely others) did try to inject tracking JS in plain HTTP and they got the ability for a while to have valid certs so HTTPS is not really helping if you are not really paranoid with certs and hashes that is really difficult to archive.
Once you got Tor running and connect to an onion you have quite a few guarantees that are hard to circumvent/spy on for a government.
> by that I mean you think people are planning terrorist plots over facebook? come on.
It sure has likely happened. Due to Facebook only access (internet.org) for a lot of the world using mobile and Facebook is the only access to internet that is affordable. Online shopping is also handled over Facebook in these countries.
While Facebook shares your data with courts it has no way of knowing who you are if you are using Tor. At least it can't forward your location to the local secret service to beat you up. A somewhat qualified court request from a western country is also something different than arbitrary repression from dictatorships.
Your real profile and location can be inferred from your browsing habbits and friend's data.
Unfortunately, with the current size of Facebook, even "not having an active Facebook account" shares data, especially when you are in an age category where all your peers do have profiles. It's a negative signal to recruiters and employers ("must have something to hide...").
Fuck them. Is this the line of thinking you want to align your live to?
We need to work together to stop that from happening. In the end the best fake profile win's and it's a competition in hiding your sins. Medieval ages called and complained that you used them to compare to this mess.
Every second/third? totally fine, everything perfect guy has some unhealthy addiction but the guy who uses Tor for playing around or ordering drugs is suspicious? It's laughable. You only get some collections of narcissists and psychopaths as employees that still do occasionally harm to your company and use drugs like everyone else.
What the fuck is going on. It's 2016 and I'm feeling like 1516.
So what I've written:
>so I find the mashup of tor with facebook to be kind of bizarre.
is even more so if anyone's reason is "I really, really, don't want facebook to know where I am!" I mean I just don't get it. Especially to the tune of 1 million people.
in theory the only thing you're leaking over a plain https is, "Hey this guy has friends." (this connection is visiting facebook).
meanwhile in theory I'd expect facebook to leak everything else on their end, because come on. I have next to zero expectation of privacy on facebook.
by that I mean you think people are planning terrorist plots over facebook? come on.
so I find the mashup of tor with facebook to be kind of bizarre.