Search Mailing List Archives
[liberationtech] Facebook available as a Tor hidden service
Robert W. Gehl
lists at robertwgehl.org
Fri Oct 31 10:46:41 PDT 2014
Hi, Jonathan --
I do know the default, and I did change them to allow for first-party
scripts. I agree that TBB's NoScript defaults are really hard to figure
out (in comparison to NoScript in vanilla Firefox -- which admittedly is
still a complicated setup). However, I assumed that if Facebook wanted
to have a hidden service, they'd account for the fact that at the very
least third-party JS is a no-no (and many Tor users also don't want to
allow any scripts).
>From what I could tell, the verification system I went to to confirm my
ID relied on third party scripts (it looked like Google scripts). It was
a system in which I had to identify pictures of "friends". No pictures
Moreover, the .onion Facebook will probably always say that the account
is locked due to logging in from a "strange" location, so there will be
In the end, I don't get why FB is doing this, other than to look hip.
On 10/31/2014 11:40 AM, Jonathan Wilkes wrote:
> Hi Rob,
> You do know TBB's defaults regarding scripts, right? If it's a
> conundrum with no easy answer for Tor devs, it's a conundrum for
> Facebook as well. So please do get on Tor Talk list and criticise TBB
> for having an "(advised)" yet non-default setting for blocking all
> I understand the conundrum, and I agree that there isn't an easy
> answer, but that default setting in TBB is batshit insane. It is
> _the_ source of the conundrum. If script-blocking were turned on by
> default Facebook wouldn't even waste time trying to design a hidden
> service like this.
> On Friday, October 31, 2014 12:13 PM, Robert W. Gehl
> <lists at robertwgehl.org> wrote:
> I tried to login (with a fake account I maintain for just such a
> purpose). "Your account is temporarily locked," it says. I get that;
> it appears I'm trying to login from a strange location.
> To proceed, I have to ID pictures of friends. Ok, I say. But the page
> off (common practice with the Tor Browser). Fail.
> Let's say people take this seriously -- to do so, they will have to
> It seems to me that this would just inculcate bad security habits for
> any would-be Dark Web users.
> - Rob
> On 10/31/2014 08:14 AM, Steve Weis wrote:
>> Facebook is now available as a Tor hidden service at this .onion address:
>> Blog post is here:
> Liberationtech is public & archives are searchable on Google.
> Violations of list guidelines will get you moderated:
> Unsubscribe, change to digest, or change password by emailing
> moderator at companys at stanford.edu.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the liberationtech