Differences between revisions 67 and 75 (spanning 8 versions)
Revision 67 as of 2018-02-28 19:26:17
Size: 10671
Editor: ccts
Comment:
Revision 75 as of 2020-07-19 17:32:13
Size: 10741
Editor: ?SergiyKolesnikov
Comment: Clarifying one of the misconception descriptions
Deletions are marked like this. Additions are marked like this.
Line 2: Line 2:
<<TableOfContents(3)>>

= Introduction =

Tor Browser protects your privacy while you are surfing the Internet: it prevents somebody watching your Internet connection from learning what sites you visit, it prevents the sites you visit from learning your physical location, and it lets you access sites which are blocked.
~-[[DebianWiki/EditorGuide#translation|Translation(s)]]: none-~
----
Tor Browser protects your privacy while you are surfing the Internet:
* it prevents somebody watching your Internet connection from learning what sites you visit,
* it prevents the sites you visit from learning your physical location,
* and it lets you access sites which are blocked.
Line 17: Line 18:
<<TableOfContents(3)>>
----
= Installing the official Debian package =
Line 18: Line 22:
== Debian 11 and later ==
Line 19: Line 24:
= Install = With Debian 11 and later, or Debian Sid (Unstable),
installing it is as simple as installing the DebianPkg:torbrowser-launcher package with whatever tool you prefer.
Line 21: Line 27:
== Debian "Sid" == After installation, two new entries can be found in the launcher of your preferred desktop,
"Tor Browser" and "Tor Browser Launcher Settings".
The latter will allow you to configure the way that Tor Browser is downloaded (such as the mirror, whether or not you use the system Tor service to download it, etc.),
while the former will simply launch the browser and download it if it isn't currently installed.
Line 23: Line 32:
Users of Debian [[DebianUnstable#Introduction|Sid (Unstable)]] can install torbrowser-launcher easily: These can both be accessed via terminal commands by running {{{torbrowser-launcher}}} or {{{torbrowser-launcher --settings}}} respectively.
Line 25: Line 34:
 1. Using Terminal as Root execute the following command
 {{{
apt install torbrowser-launcher
}}}
== Debian 10 and older ==
Line 30: Line 36:
== Debian 9 "Stretch" == The DebianPkg:torbrowser-launcher package isn't available in the regular release of Debian 9 and 10, but it was made later available via the backports system and can be installed through it.
Line 32: Line 38:
 1. If not already done [[https://wiki.debian.org/Backports#Adding_the_repository|add the Backport repository to your sources.list]].
 {{{
printf "deb http://deb.debian.org/debian stretch-backports main contrib" > /etc/apt/sources.list.d/stretch-backports.list
apt update
}}}
Follow the instructions to [[https://wiki.debian.org/Backports#Adding_the_repository|add the backports repository to your sources.list]].
Because the package is '''only''' available in the backports section without room for ambiguity,
Apt will install it without any extra arguments necessary.
Just install the DebianPkg:torbrowser-launcher package with your preferred tool.
Line 38: Line 43:
 1. Using Terminal as Root execute the following command
 {{{
apt install torbrowser-launcher -t stretch-backports
}}}
After installation, two new entries can be found in the launcher of your preferred desktop,
"Tor Browser" and "Tor Browser Launcher Settings".
The latter will allow you to configure the way that Tor Browser is downloaded (such as the mirror, whether or not you use the system Tor service to download it, etc.),
while the former will simply launch the browser and download it if it isn't currently installed.
Line 43: Line 48:
 1. To open Tor Browser choose one of the following two options
      * '''Option 1''': Using GNOME, open the Activities Search. Simply type in {{{Tor Browser}}}
These can both be accessed via terminal commands by running {{{torbrowser-launcher}}} or {{{torbrowser-launcher --settings}}} respectively.
----
= Installing from the website =
Line 46: Line 52:
      * '''Option 2''': Using Terminal as user run the following command
 {{{
torbrowser-launcher
}}}
Tarballs containing the latest stable version of the Tor Browser Bundle can be found on the official [[https://www.torproject.org/download/|Tor Browser website]], they contain a .desktop file that'll run the browser in-place. This can be run just by double-clicking it in most file managers. GNOME will require you to run the file from the terminal instead.
Line 51: Line 54:
 1. The first time you open Tor Browser the new version will automatically be downloaded and installed. On every subsequent open a check for updates will be done, and Tor Browser will automatically be updated to the latest available version from the Backport repository.

== Debian 8 "Jessie" ==

Steps to install Tor Browser on Debian 8 "Jessie" ''with'' Backport

 1. If not already done [[https://wiki.debian.org/Backports#Adding_the_repository|add the Backport repository to your sources.list]].
 {{{
printf "deb http://deb.debian.org/debian jessie-backports main contrib\n" > /etc/apt/sources.list.d/jessie-backports.list
printf "deb http://deb.debian.org/debian jessie-backports-sloppy main contrib" >> /etc/apt/sources.list.d/jessie-backports.list
apt update
}}}

 1. Using Terminal as Root execute the following command
 {{{
apt install torbrowser-launcher -t jessie-backports-sloppy
}}}

 1. To open Tor Browser choose one of the following two options
      * '''Option 1''': Using GNOME, open the Activities Search. Simply type in {{{Tor Browser}}}

      * '''Option 2''': Using Terminal as user run the following command
 {{{
torbrowser-launcher
}}}

 1. The first time you open Tor Browser the new version will automatically be downloaded and installed. On every subsequent open a check for updates will be done, and Tor Browser will automatically be updated to the latest available version from the Backport repository.


==== Frequently Ask Questions (F.A.Q.) for Debian 8 "Jessie" ====

Any volunteer to edit this section?

== Debian 7 "Wheezy" ==

torbrowser-launcher in wheezy-backports is currently outdated.

<!> Debian 7 "Wheezy" is supported and secured until [[https://www.debian.org/News/2016/20160212|May 31st, 2018]]. With Long Term Support ([[LTS|LTS]]). To keep your computer secure it is suggested to [[https://wiki.debian.org/DebianUpgrade|upgrade to Debian 8 "Jessie"]] at your earliest convenience.

<<Anchor(Debian_7_Wheezy_with_Backport)>>

Steps to install Tor Browser on Debian 7 "Wheezy" ''with'' Backport

<!> Debian 7 "Wheezy" is supported and secured until [[https://www.debian.org/News/2016/20160212|May 31st, 2018]]. With Long Term Support ([[LTS|LTS]]). To keep your computer secure it is suggested to [[https://wiki.debian.org/DebianUpgrade|upgrade to Debian 8 "Jessie"]] at your earliest convenience.

 1. If not already done [[https://wiki.debian.org/Backports#Adding_the_repository|add the Backport repository to your sources.list]].

 1. Using Terminal as Root execute the following command
 {{{
apt-get install torbrowser-launcher -t wheezy-backports
}}}

 1. To open Tor Browser choose one of the following two options
      * '''Option 1''': Using GNOME, open the Activities Search. Simply type in {{{Tor Browser}}}

      * '''Option 2''': Using Terminal as user run the following command
 {{{
torbrowser-launcher
}}}

 1. The first time you run Tor Browser the new version will automatically be downloaded and installed. On every subsequent run a check for updates will be done, and Tor Browser will automatically be updated to the latest available version from the Backport repository.

= Update =

To update choose one of the following two options. If unsure, the "automatic update" option is easier and recommended.

 * [[#Automatic_update|Automatic update]]
 * [[#Manual_update|Manual update]]


== Automatic update ==

Tor Browser will automatically prompt you to update the software once a new version has been released. The Torbutton icon will display a small yellow triangle. When you are prompted to update Tor Browser:

 1. Click on the Torbutton icon
 1. Select “Check for Tor Browser Update” option. If needed see [[https://tb-manual.torproject.org/en-US/updating.html|those screenshots]] to clarify the location.
 1. When Tor Browser has finished checking for updates, click on the “Update” button.
 1. Wait for the update to download and install, then restart Tor Browser. You will now be running the latest version.

Alternatively, if you installed Tor Browser using the `torbrowser-launcher` package. Simply close all Tor Browser windows. Then re-open Tor Browser. It will automatically check if a new version is available. Follow the instructions on your screen.


== Manual update ==

Before manually updating Tor Browser it is suggested to periodically backup any valuable data. Such as your bookmarks. Which you could import after the manual update.

Manually update Tor Browser

 1. When you are prompted to update Tor Browser, finish the browsing session and close the program.
 1. Remove Tor Browser from your system by deleting the folder that contains it. If needed see [[https://tb-manual.torproject.org/en-US/uninstalling.html|that Uninstalling section]] for more information.
 1. Visit https://www.torproject.org/projects/torbrowser.html.en and download a copy of the latest Tor Browser release, then install it as before.

After being run, it will also auto-update in place as new versions are released.
----
Line 147: Line 59:
If you installed "torbrowser-launcher" on a 64 bit system, the "torrc" advanced configuration file is located at: If you installed "torbrowser-launcher" on a 64-bit (amd64) system, the "torrc" advanced configuration file is located at:
Line 152: Line 64:
If you installed "torbrowser-launcher" on a i686 bit system, the "torrc" advanced configuration file is located at: If you installed "torbrowser-launcher" on a 32-bit (i386) system, the "torrc" advanced configuration file is located at:
Line 176: Line 88:
----
Line 182: Line 94:
----
= Clarifying common misconceptions =
Line 183: Line 97:
== Tor isn't illegal to use ==

While in some extremely authoritarian countries Tor may carry legal risk, it's generally fine. Through United States and most of Europe, the very worst you can expect is to be potentially put on a watchlist. Your ISP is unable to see what you're doing over Tor, but they can see that you're using Tor.

If your government or ISP attempts to block Tor, many mirror sites offer downloads of the browser bundle, and you may consider setting up [[DebianPkg:apt-transport-https]] to securely download it from the repositories. Tor bridges are also available in case connection to the network itself is censored.

== The deep web/dark web aren't dangerous to browse, and won't expose you to hackers and malware ==

Though the terms are often used as synonyms, typically, the "deep web" refers to any website not indexed by search engines such as Google, and the "dark web" refers to websites that require a service such as Tor to view.

In both cases, neither are inherently dangerous. They carry the same risk as almost any small website, and require a vulnerability in your web browser to serve malware. As long as you update regularly, there's generally little risk.

== Tor isn't only used for illegal purposes ==

While Tor is used for plenty of terrible reasons as well, journalists, free speech activists, and whistleblowers all make use of Tor in order to do important work for the common good. Citizens of oppressive countries also make use of Tor in order to access important information that otherwise is restricted.

There are numerous legal reasons to use Tor as well, such as communicating with people across authoritarian borders, or accessing legal content that you nonetheless want to keep hidden from your ISP for whatever reason.

== You won't get arrested or get into trouble with your ISP or someone else for running Tor ==

You will only need to worry about this [[https://www.torproject.org/docs/faq-abuse.html.en#TypicalAbuses|if you are running a Tor exit node]]. There are also some excellent resources created by the Tor staff; give them a read:

== Tor and streaming/torrenting ==

Tor's speed comes from how many resources are provided by generous people. Torrenting or streaming over Tor not only leaks your IP address, but it also slows the network for everyone else. [[https://blog.torproject.org/bittorrent-over-tor-isnt-good-idea|Tor is not for torrenting]].

 * [[https://blog.torproject.org/tips-running-exit-node|Running a Tor exit node for minimal harassment]]
 * [[https://trac.torproject.org/projects/tor/wiki/doc/TorAbuseTemplates|a list of template letters you can send to your ISP about Tor abuse]]
 * [[https://www.torproject.org/docs/faq-abuse.html.en|A FAQ list on Tor abuse]]

You may also be interested in the [[https://metrics.torproject.org/|Tor Metrics]] pages which will show you how common the use of Tor is in your country:

 * [[https://metrics.torproject.org/userstats-relay-country.html?graph=userstats-relay-country&country=us&events=off|Direct Tor connections from the US]]
 * [[https://metrics.torproject.org/userstats-relay-country.html?graph=userstats-relay-country&country=gb&events=off|Direct Tor connections from the UK]]
 * [[https://metrics.torproject.org/userstats-relay-country.html?graph=userstats-relay-countrycountry=aq&events=off|All Direct Tor connections]]

Source: https://wiki.installgentoo.com/index.php/Tor
----
Line 187: Line 139:
        * It is suggested to consider using ''uBlock Origin'' instead of ''!AdBlock Plus''. Mostly because ''uBlock Origin'' has a [[https://en.wikipedia.org/wiki/UBlock_Origin#Blocking_and_filtering|better track record at fully protecting your privacy]], than ''!AdBlock Plus''. Also there is a [[https://en.wikipedia.org/wiki/Adblock_Plus#Controversy_over_ad_filtering_and_ad_whitelisting|controversy]] around ''!AdBlock Plus'' and a for profit corporation trying to monetize it via ad whitelisting. Also ''uBlock Origin'' [[https://en.wikipedia.org/wiki/UBlock_Origin#Performance|uses less resource and has better performance]] than ''!AdBlock Plus''.
        * ''uBlock Origin'' is [[https://en.wikipedia.org/wiki/UBlock_Origin#uBlock_.28ublock.org.29|not to be confuse]] with ''uBlock''. As of May 2017 ''uBlock Origin'' is actively maintain and updated, compare to ''uBlock'' who has not been maintained or updated for more than 2 years, [[https://github.com/chrisaljoudi/ublock|since 2015]].
        * It is suggested to consider using ''uBlock Origin'' instead of ''!AdBlock Plus''. Mostly because ''uBlock Origin'' has a [[https://en.wikipedia.org/wiki/UBlock_Origin#Blocking_and_filtering|better track record at fully protecting your privacy]], than ''!AdBlock Plus''. Also there is a [[https://en.wikipedia.org/wiki/Adblock_Plus#Controversy_over_ad_filtering_and_ad_whitelisting|controversy]] around ''!AdBlock Plus'' and a for-profit corporation trying to monetize it via ad whitelisting. Also ''uBlock Origin'' [[https://en.wikipedia.org/wiki/UBlock_Origin#Performance|uses fewer resources and has better performance]] than ''!AdBlock Plus''.
        * ''uBlock Origin'' is [[https://en.wikipedia.org/wiki/UBlock_Origin#uBlock_.28ublock.org.29|not to be confused]] with ''uBlock''. As of May 2017 ''uBlock Origin'' is actively maintain and updated, compare to ''uBlock'' who has not been maintained or updated for more than 2 years, [[https://github.com/chrisaljoudi/ublock|since 2015]].

Translation(s): none


Tor Browser protects your privacy while you are surfing the Internet: * it prevents somebody watching your Internet connection from learning what sites you visit, * it prevents the sites you visit from learning your physical location, * and it lets you access sites which are blocked.

Tor Browser is based on Firefox and will be familiar to many users.

To keep your protection strong you need to update the Tor Browser regularly. In Debian the easier way to do that is to install Tor Browser using torbrowser-launcher, which automatically installs Tor Browser, run it, and update it to keep its protection strong and protect your privacy.

The advantage of using torbrowser-launcher over the manual installation of the TorBrowser package (called Tor Browser Bundle) is threefold:

  • You will benefit from automatic upgrades
  • If using AppArmor, you will benefit from the AppArmor profiles contained in the package

  • Program launchers and menu entries will be created for you automatically


Installing the official Debian package

Debian 11 and later

With Debian 11 and later, or Debian Sid (Unstable), installing it is as simple as installing the torbrowser-launcher package with whatever tool you prefer.

After installation, two new entries can be found in the launcher of your preferred desktop, "Tor Browser" and "Tor Browser Launcher Settings". The latter will allow you to configure the way that Tor Browser is downloaded (such as the mirror, whether or not you use the system Tor service to download it, etc.), while the former will simply launch the browser and download it if it isn't currently installed.

These can both be accessed via terminal commands by running torbrowser-launcher or torbrowser-launcher --settings respectively.

Debian 10 and older

The torbrowser-launcher package isn't available in the regular release of Debian 9 and 10, but it was made later available via the backports system and can be installed through it.

Follow the instructions to add the backports repository to your sources.list. Because the package is only available in the backports section without room for ambiguity, Apt will install it without any extra arguments necessary. Just install the torbrowser-launcher package with your preferred tool.

After installation, two new entries can be found in the launcher of your preferred desktop, "Tor Browser" and "Tor Browser Launcher Settings". The latter will allow you to configure the way that Tor Browser is downloaded (such as the mirror, whether or not you use the system Tor service to download it, etc.), while the former will simply launch the browser and download it if it isn't currently installed.

These can both be accessed via terminal commands by running torbrowser-launcher or torbrowser-launcher --settings respectively.


Installing from the website

Tarballs containing the latest stable version of the Tor Browser Bundle can be found on the official Tor Browser website, they contain a .desktop file that'll run the browser in-place. This can be run just by double-clicking it in most file managers. GNOME will require you to run the file from the terminal instead.

After being run, it will also auto-update in place as new versions are released.


Advanced Tor Usage

Torrc File Location

If you installed "torbrowser-launcher" on a 64-bit (amd64) system, the "torrc" advanced configuration file is located at:

  • ~/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Browser/TorBrowser/Data/Tor/torrc

If you installed "torbrowser-launcher" on a 32-bit (i386) system, the "torrc" advanced configuration file is located at:

  • ~/.local/share/torbrowser/tbb/i686/tor-browser_en-US/Browser/TorBrowser/Data/Tor/torrc

Related documentation

AppArmor confinement and Xserver isolation

HolgerLevsen has written some scripts which are available in /usr/share/doc/torbrowser-launcher/examples/ if you have installed the package.

These scripts show how to run torbrowser-launcher (and thus torbrowser), confined with AppArmor, in Xephyr (a virtual Xserver running on another Xserver) as another user. This, using AppArmor and Xephyr, shall have two effects:

  • the browser process (and it's subprocesses) can - thanks to AppArmor confinement - only access a tiny part of the filesystem

  • the real Xserver is not exposed to the browser application, so hopefully that application cannot exploit bugs to grab keyboard input from other applications.

In order to use these scripts, please refer to /usr/share/doc/torbrowser-launcher/examples/.

You can also read those scripts here if interested: https://anonscm.debian.org/git/pkg-privacy/packages/torbrowser-launcher.git/tree/debian/examples?h=debian/sid


Bugs and known issues


Clarifying common misconceptions

Tor isn't illegal to use

While in some extremely authoritarian countries Tor may carry legal risk, it's generally fine. Through United States and most of Europe, the very worst you can expect is to be potentially put on a watchlist. Your ISP is unable to see what you're doing over Tor, but they can see that you're using Tor.

If your government or ISP attempts to block Tor, many mirror sites offer downloads of the browser bundle, and you may consider setting up apt-transport-https to securely download it from the repositories. Tor bridges are also available in case connection to the network itself is censored.

The deep web/dark web aren't dangerous to browse, and won't expose you to hackers and malware

Though the terms are often used as synonyms, typically, the "deep web" refers to any website not indexed by search engines such as Google, and the "dark web" refers to websites that require a service such as Tor to view.

In both cases, neither are inherently dangerous. They carry the same risk as almost any small website, and require a vulnerability in your web browser to serve malware. As long as you update regularly, there's generally little risk.

Tor isn't only used for illegal purposes

While Tor is used for plenty of terrible reasons as well, journalists, free speech activists, and whistleblowers all make use of Tor in order to do important work for the common good. Citizens of oppressive countries also make use of Tor in order to access important information that otherwise is restricted.

There are numerous legal reasons to use Tor as well, such as communicating with people across authoritarian borders, or accessing legal content that you nonetheless want to keep hidden from your ISP for whatever reason.

You won't get arrested or get into trouble with your ISP or someone else for running Tor

You will only need to worry about this if you are running a Tor exit node. There are also some excellent resources created by the Tor staff; give them a read:

Tor and streaming/torrenting

Tor's speed comes from how many resources are provided by generous people. Torrenting or streaming over Tor not only leaks your IP address, but it also slows the network for everyone else. Tor is not for torrenting.

You may also be interested in the Tor Metrics pages which will show you how common the use of Tor is in your country:

Source: https://wiki.installgentoo.com/index.php/Tor


See also

References


CategorySoftware | CategoryNetworkApplication | CategoryWebBrowser