In any case, since you mentioned that tracking from the destination is a concern, if one is going to be using lahana, I think also using torbutton is a good idea, since you will otherwise be vulnerable to browser fingerprinting (see https://blog.torproject.org/blog/effs-panopticlick-and-torbu...). Since Torbutton assumes you will be using tor in the recommended manner, one using lahana would have to: 1. Click on Torbutton 2. Go to "preferences" 3. Select "Transparent Torification (requires custom transproxy or Tor router)" 4. Press Ok

I think browser fingerprinting might be more of a theoretical threat, and don't know if it has ever been successfully used so it may not be worth your concern.

Keep in mind that using Torbutton (and https everywhere as you recommended) is currently possible only on the desktop version of firefox.

I haven't been following Turkey news related to tor but if you look at https://metrics.torproject.org/users.html?graph=direct-users... it doesn't seem like Tor is being blocked

Anyways good luck with this

Thanks for that. I'll take a look into that tomorrow. I'm shattered right now. Trying to just get some nodes up. If I can at least provide the same level of security as the telecomix guys I think everyone (including the telecomix guys) are all doing well.

AFAIK with the exception of iOS devices, using the Tor Browser Bundle is just as easy, if not more so than installing a vpn client. I realize that Tor can't be used on iOS without jailbreaking it, and that iOS comes with a vpn client, but for PCs Tor doesn't even require an install to use, while a vpn client does, and for android it only requires installation of two apps. While your effort is commendable, seems well intentioned, and is more than anything I have ever done, it just seems like this is a dangerous step down from the recommended use of TOR.

Which is great, except for the fact that Tor itself is fraught with a whole load of issues and at the end of the day you can still incriminate yourself.

Lahana doesn't implement secrecy because it wasn't a design requirement. It solves a different problem and uses Tor to do that, albeit in a manner associated with 24 hours and some ductape rather than years of NSA and DARPA funding. If you have any suggestions for implementing secrecy while maintaining the ease of use aspect I'd love to hear them. Heck, even documenting all the risks you see with it at the moment would be useful as it would help people make more informed decisions.

I've seen mixed reports about tor being blocked or possibly not, which is part of the reason for the VPN. Thanks for the feedback though and I agree that for many cases Tor is a better solution while it remains directly accessible, especially if secrecy is a requirement.

"I realize that Tor can't be used on iOS without jailbreaking it"

Not quite true.

While Tor can't be used for all traffic, there are Tor apps -- OnionBrowser works quite well; I just tried it.

Good point, although based on my experience using onionbrowser on an iphone over a year ago, id say lahana or jabreaking seem to be better choices for someone wanting to use facebook, twitter, or youtube, since using any of these on a mobile phone browser can be hell without tor.

You are correct, wish I'd known about that beforehand!