* To run any of them, it only requires small knowledge of Linux.
this places the information required into the realm of possibility,
even for unseasoned Linux users.
* Note: there are many guides on both Tor Project and Stack Overflow.
* Consider running either the 1st or 2nd options as they are the easiest.
Signed-off-by: pterocles <pterocles@proton.me>
* add link to commit where iOS Onion Browser dropped meez-azure:
"Removed Meek Azure bridge [support], since Microsoft announced
starting to block it."
* Remove dupe reference to footnote #522 and #523
(document will now render this as reference #516)
* Add link to Tor Project:
"Run Tor Bridges to Defend the Open Internet"
Signed-off-by: pterocles <pterocles@proton.me>
Add information about microarchitecture bugs
It's been a very busy year for Intel and AMD CPUs. Researchers have
discovered bugs left and right. One of them was revealed recently and I
felt compelled to add not only it but also information regarding other
types of attacks that aren't yet in the guide.
Signed-off-by: pterocles <pterocles@proton.me>
missing some key elements:
Specify whom created the LINDDUN online tool. Define acronym and
explain that it is synergistic with STRIDE methodology. Add optional
illustration from Dr. K. Wuyts' 2015 publication: Privacy Threats in Software
Architectures, Ph.D. Thesis, Doctor of Engineering Science (PhD) (Leuven),
KU Leuven, January 16, 2015.
Fixes: #188 ("Update of the threat modeling section")
Signed-off-by: pterocles <pterocles@proton.me>
Images were out of date. Updated and used PNGs for them.
Tor Project has condensed their settings and it is no longer
necessary to manually configure bridges.
Automatic censorship detection and circumvention:
https://blog.torproject.org/new-release-tor-browser-115/
Signed-off-by: pterocles <pterocles@proton.me>
Tor Browser Bundle (TBB) now has easier settings for the user.
TBB also makes the connection simpler for the user:
- Now enabled by default, moat will help you configure bridges.
- Bridge cards for viewing your Tor bridges make it both pretty and more useful for the user.
Arkenfox relies on a set of `about:config` tweaks in
Firefox. It allows you to set many privacy and disk
avoidance related values which provide you with the
ability to avoid useless Firefox additions and also
avoid giving your browser a unique value which can
be tracked across the web.
Signed-off-by: pterocles <pterocles@proton.me>
Update addons recommended in guide. Explain use of
`network.http.referer.XOriginPolicy`. Explain
difference between uBO and NoScript.
Signed-off-by: pterocles <pterocles@proton.me>
Make the instructions clear and use list format to
help guide the reader. Use imperative form. Use
```code``` blocks for typing and **bold** for directions.
Signed-off-by: pterocles <pterocles@proton.me>
Since 2018, it is known to have a leak in `RTCPeerConnection`.
This is something that the developers have said cannot be
removed and thus, the functionality of the browser still
contains this call, and users should be wary of using iOS
until it is fixed. We will monitor the situation but it doesn't
appear they can patch.
Signed-off-by: pterocles <pterocles@proton.me>
Since 2018, it is known to have a leak in `RTCPeerConnection`. This is something that the developers have said cannot be removed and thus, the functionality of the browser still contains this call, and users should be wary of using iOS until it is fixed. We will monitor the situation but it doesn't appear they can patch.
Signed-off-by: pterocles <pterocles@proton.me>
pterocles