News Feed
- DrugHub has agreed to fully refund all users who lost money in the SuperMarket exit scam.
- Retro Market has gone offline. Circumstances of the closure unknown.
- SuperMarket has closed following an exit scam by one of the admins.
- The admin of Incognito Market, Pharoah, has been arrested by the FBI several months after exit scamming.
- Silk Road
- darknet markets list
- Popular P2P exchange LocalMonero has announced it is closing.
Be aware that changing much skews your fingerprint and makes you stand out.
It's a tradeoff between security and blending in.
Who is my potential adversary ?
LE, oppressive government, three letter agencies, scammers, doxxers....
What is your profile ?
Buyer, bulk buyer, shitposter, vendor, bulk vendor, market operator, pedo scum, terrorist...
These all will have to incorporate different opsec measures.
Thank you !
would it not be better to not be able to be fingerprinted in the first place with it disabled?
It is only partially disabled without explicitly setting "javascript.enabled" to "false".
You probably forget that we are just a tiny fraction of Tor Browser's user base.
Disabling javascript by default will break a lot of stuff - think sites that are not specifically designed with not using javascript in mind.
And ultimately that would interfere with the whistleblowers and people from oppressive regimes etc ability to surf the web - the majority of the user base.
But if you went overboard with the settings it could take quite a while to find what breaks which lol
also, there's a box to check "show only modified."
It is over 7 months old and some cmds no longer exist and was hoping to see an updated list for max OPSEC measures
That said I also am curious if disabling java like said in the post and putting tor on the safest setting enough for basic use?
To my knowledge there is no other more current list.
If you want to really go down that rabbit hole it would involve custom hardening and tweaking with settings from projects like arkenfox.js on github and Librewolf.
That would bring much more security but also means that ultimately you will stand out like a sore thumb.
That custom config will have super unique fingerprint.
It all boils down to what you want to achieve - blend in or be more resistant to niche attack vectors.
Yes, that would be enough for basic use, shopping and casual communication on Dread.
Make sure WebRTC and WebGl are disabled for a good measure too if you feel especially paranoid :P
I think WebRTC actually should be disabled by default.
which webrtc and webgi to disable please?
webgl.disable-wgl = true
media.peerconnection.enabled = false