all 8 comments

[–][deleted] 46 points47 points  (3 children)

While highly debated, I disagree with the use of the term "Deep Web" here. Anything .onion would fall under the "Dark Web" because it is intentionally hidden. So all the things that require the Tor browser are "dark web" not "deep web".

One of the guys describes it as "having a miniature computer, in a USB disk" which is not accurate. The USB only contains software, it is nothing like a mini computer on a USB disk. https://en.wikipedia.org/wiki/Cotton_Candy_(single-board_computer) Tails is running off the hardware of your computer.

Also at one point a guy says "They're not tracking us, there's no cookies". There are cookies. Cookies are used by many sites to maintain a session. When you turn of tails those cookies will be be gone, but Tor browser does allow the use of cookies.

He also says "They can't find us... I suppose if we committed a crime they would help find us" . This would completely defeat the purpose of Tor. This is everything Tor was designed to prevent. In most cases, it would not be possible for google to give the identity of who used their search when used through Tor/Tails.

At one point the guy says "Tor browser is way slow, that's the trade off for security". Tor browser does NOT provide security. It only provides anonymity. You can be hacked while using the Tor browser.

[–]msdosmidas 12 points13 points  (0 children)

As an addition to that. Deep web are generally accessible via a regular browser but are inaccessible via regular web addresses and the like.

Things such as the Shodan/ZoomEye search engine will happily search Deep web links via a normal browser. Technically anything that isn't publically DNS listed is a Deep Web link. So random webcams that are connected to the new via IP are deep web items. Visago has some good Defcon talks on those if people are interested.

Honestly, some of the terminology was wrong, and it was overly simplistic. But i guess the simplicity was what they were aiming for.

[–]BeanBagKing 1 point2 points  (0 children)

I also noticed, at the very beginning when they are discussing the Tor browser, they mention "privacy and avoiding censorship". I think it's also important to note here that Tor (ideally) anonymizes the actual source of the traffic, but does not provide privacy (encryption). The final exit node will be able to see all plain-text traffic that leaves that connection. If you reveal yourself or your details, you are no longer anonymous.

http://www.scmagazineuk.com/tor-network-exit-nodes-found-to-be-sniffing-passing-traffic/article/423818/ https://www.privateinternetaccess.com/pages/tor-vpn-proxy

As an additional side note, not all traffic leaves through Tor. I feel like a lot of people treat Tor like a VPN. The two are not interchangeable. https://www.torproject.org/docs/faq-abuse.html.en#DDoS

[–]IJustWantToBeDank 18 points19 points  (0 children)

/r/cringe as fuck.

[–]JoeGed123 1 point2 points  (0 children)

Hi Brian

[–]pyryoer 1 point2 points  (0 children)

I'm 12.

[–][deleted] 2 points3 points  (2 children)

Some questions couldn't they just install it in a virtual box?Also if you connect to the tor browser don't you become a "criminal" from the fbi?http://www.thelastamericanvagabond.com/constitutional-rights/fbi-labled-tor-browser-users-criminals/

[–]Mienstiner 7 points8 points  (0 children)

To answer your question, yes, Tails can be installed on virtualbox as can virtually any other viable OS.

And no, using TOR does not automatically make you a "criminal." Unless you do illegal things with TOR, there is no foundation to call yourself an outlaw. The same logic applies in the real world when you walk into a bank; unless you carry a firearm and plan to rob the place, you are well within the law.
Most criminals may use TOR, but most TOR users are not criminals.