News for hackers. Stuff that matters.
Re:Facebook Container for Firefox by smichel17 on Wednesday October 21, 2020 @07:14PM (#24853320)
Anyone in the know: what would it take to implement a "container over tor"? I am not currently a tor user, but absolutely would if I could integrate it with my current workflow (using the temporary containers addon).
Re:Facebook Container for Firefox by hannibalhorn on Wednesday October 21, 2020 @07:21PM (#24853377)
tor provides a socks proxy, which you can assign to a container easy enough w/ the container proxy addon.
Re:Facebook Container for Firefox by beardog on Thursday October 22, 2020 @04:45AM (#24856011)
Though you won't get stream isolation this way https://www.whonix.org/wiki/Stream_Isolation
Re:Facebook Container for Firefox by aasasd on Wednesday October 21, 2020 @11:11PM (#24854538)
Does FF send DNS requests via the proxy? Depending on the personal threat model and the ISP, that might matter.
Re:Facebook Container for Firefox by TheFlyingFish on Wednesday October 21, 2020 @11:27PM (#24854609)
FF defaults to DNS-over-HTTPS now, so I would imagine it does, although I can't find solid confirmation.
Re:Facebook Container for Firefox by erinnh on Thursday October 22, 2020 @08:40AM (#24857359)
Only in the US.
Re:Facebook Container for Firefox by Liquid_Fire on Thursday October 22, 2020 @08:56AM (#24857479)
There are checkboxes to control this in the Firefox proxy settings. "Proxy DNS when using SOCKS v5" and "Enable DNS over HTTPS".
Re:Facebook Container for Firefox by computerfriend on Thursday October 22, 2020 @11:40AM (#24859188)
In the proxy options, there's a box to tick for sending DNS through the proxy or not.
Re:Facebook Container for Firefox by smichel17 on Wednesday October 21, 2020 @08:06PM (#24853672)
Thank you, I'll look in to this!
Re:Facebook Container for Firefox by breakingcups on Thursday October 22, 2020 @03:16AM (#24855616)
Be careful doing this though, there's a reason Tor Browser exists and it is because it's very hard to do anonimity over Tor right on a default browser.

Granted, Tor tries to upstream as much as it reasonably can to FF, but there's still large differences in defaults that could give away (some bits of) your identity.

Re:Facebook Container for Firefox by smichel17 on Thursday October 22, 2020 @07:58AM (#24857080)
See this comment first, not mine but might as well be https://news.ycombinator.com/item?id=24853678

It's all baby steps. I don't expect to be fully anonymous this way, just like I know my current setup does not foil more sophisticated tracking.

Re:Facebook Container for Firefox by rsync on Thursday October 22, 2020 @12:02PM (#24859467)
"Anyone in the know: what would it take to implement a "container over tor"? I am not currently a tor user, but absolutely would if I could integrate it with my current workflow (using the temporary containers addon)."

This is my every-six-months wish/rant on this subject ...

What we need is the ability to 'jail' a GUI browser process.

It is too resource intensive to spin up an actual virtual machine to run a browser window/tab. However, a facility like 'jail' (or zones or, perhaps even Docker) that simply chroots a new process with its own network interface, etc., does not have any of that expense.

It really is just a fancy chroot and the expense is limited to the overhead of just the process you're running.

If you could 'jail' a GUI application, you could have a browser window that was not merely its own cookie domain or history domain, but that was on an entirely different network and it's own chroot.