Security Vulnerability in Tor Browser

Re:Security Vulnerability in Tor Browser by ziddoap on Wednesday May 25, 2022 @04:49PM (#31510352)

For everyday browsing I use NoScript, and rarely allow JS to run (I don't have JS right now!). With Tor, JS is always disabled, 100% of the time.

Tor is a niche use case, and not running JS is a cost that comes with the increased anonymity. I'm not using Tor to watch my "How to cook rice" videos or funny cat videos.

[ Parent | on HN ]

Re:Security Vulnerability in Tor Browser by divbzero on Wednesday May 25, 2022 @04:58PM (#31510455)

Which major sites still work just fine without JS? Which ones do you have to avoid?

[ Parent | on HN ]

Re:Security Vulnerability in Tor Browser by ziddoap on Wednesday May 25, 2022 @05:06PM (#31510549)

I mean, I don't have JS enabled for HN, although I don't know if you count that as "major".

But I'm not really keeping track, honestly. If I come across a website that isn't working with JS, I make the decision "is this worth allowing JS?". Sometimes the answer is yes, sometimes it is no. Often it means enabling the first-party domain to run JS but no others.

Conveniently, some of the paywalls on various news sites don't work with JS, but you can still read the article. So that'd be some of them that arguably work better without JS.

I don't use Tor for everyday browsing, only for the times I need/want it. In those cases, the equation always equals "no JS" -- that's the reason Im using Tor in the first place.

It's a balancing act, as all security always is.

[ Parent | on HN ]

Re:Security Vulnerability in Tor Browser by vinni2 on Wednesday May 25, 2022 @06:04PM (#31511272)

Most important of all porn doesn’t work

[ Parent | on HN ]

Re:Security Vulnerability in Tor Browser by loxias on Wednesday May 25, 2022 @07:06PM (#31512011)

I wouldn't be surprised if pornhub-dl exists. ;-)

[ Parent | on HN ]

Re:Security Vulnerability in Tor Browser by LinuxBender on Wednesday May 25, 2022 @11:40PM (#31514197)

    wc -l yt-dlp/*/*/*porn*
       75 yt-dlp/yt_dlp/extractor/alphaporno.py
      127 yt-dlp/yt_dlp/extractor/eporner.py
       73 yt-dlp/yt_dlp/extractor/hellporno.py
       33 yt-dlp/yt_dlp/extractor/lovehomeporn.py
       60 yt-dlp/yt_dlp/extractor/porn91.py
      101 yt-dlp/yt_dlp/extractor/porncom.py
       41 yt-dlp/yt_dlp/extractor/pornez.py
       78 yt-dlp/yt_dlp/extractor/pornflip.py
      117 yt-dlp/yt_dlp/extractor/pornhd.py
      814 yt-dlp/yt_dlp/extractor/pornhub.py
       83 yt-dlp/yt_dlp/extractor/pornotube.py
      103 yt-dlp/yt_dlp/extractor/pornovoisines.py
       54 yt-dlp/yt_dlp/extractor/pornoxo.py
       76 yt-dlp/yt_dlp/extractor/sunporno.py
       65 yt-dlp/yt_dlp/extractor/watchindianporn.py
      182 yt-dlp/yt_dlp/extractor/youporn.py
       65 yt-dlp/yt_dlp/extractor/yourporn.py

That appears to be a thing on yt-dlp [1]

[1] - https://github.com/yt-dlp/yt-dlp.git

[ Parent | on HN ]

Re:Security Vulnerability in Tor Browser by angry_octet on Wednesday May 25, 2022 @08:24PM (#31512696)

I'm sure youtube-dl works, but one google away is https://github.com/Nukesor/pornhub-dl which seems to have site specific features.

[ Parent | on HN ]