Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

two reasons: speed and security. Speed is self explanatory, security may not be obvious. I don’t believe Firefox to be on par with Chrome. It was years behind getting a sandbox, and doesn’t appear to have the engineering or QA focus on security that Edge/Chrome do.


> I don’t believe Firefox to be on par with Chrome.

You need to know that the Tor Browser disables a lot of stuff that Firefox has to lower the attack surface, and you can lock it down further using the Security Settings in the Torbutton.

Also you should look into a Whonix+Qubes OS setup, just because there's a sandbox doesn't mean you can't get hacked.

For speed: It's not really that bad for general browsing.


If we’re talking about privacy of tor vs VPN, I want my entire network protected at the gateway, so not sure how the tor network keeps up with streaming video etc?

I wasn’t aware of the attack surface reduction, I’ll take a look at that, thanks for the recommendation.

My ground truth for this is usually to ask full-time exploit dev friends which is a harder target, although that’s probably flawed in that if you’re targeted by someone determined it probably doesn’t matter the cost.


> I want my entire network protected at the gateway, so not sure how the tor network keeps up with streaming video etc?

With Qubes you can have a Whonix-ws VM have all its traffic go through Tor, and have another VM with all its traffic through some VPN to use with streaming.


What about my TV, my phone, my iPad? The way I see it the only workable solution to privacy against my ISP is to do it all at the gateway. And in that instance, I need ~50mbit which tor can’t provide.


> What about my TV, my phone, my iPad?

For iOS there's Onion Browser by Mike Tigas, but it's definitely NOT as privacy resistant as a Tor Browser. For Android there's Orfox and official Tor Browser builds for Android are coming this year.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: