u/I2Pbgmetm

I am really sorry to keep bothering you all.

The latest "gossip" on certain boards which has me concerned is talk about a de-anonymization timing attack using a compromised CAPTCHA service (or other service which controls the speed at which a series of images is loaded).

Apparently, they monitor outbound traffic from (I guess all?) known guard nodes, and do timing correlation? No Javascript exploit required, and they don't even need to compromise the target site itself, as long as they control the CAPTCHA it uses. Is there any evidence that this actually works and is being used?

EDIT: This seems to me like a variation on the "classic" correlation attack, described here, which apparently Tor specifically isn't designed to protect against? Or am I misunderstanding?

Suddenly today I'm having major difficulty pulling up onion sites and clearnet sites over Tor. Tried several circuits, restarts, doesn't seem to make a difference.

Is the network being DDoSed? Is it something Verizon is doing? If it were just one or two sites, I wouldn't be asking.

EDIT: For clarity, I'm getting seemingly-unrelated errors, like "502 Bad Gateway", or connection refused, or timed out, or sometimes nothing (the page just stops loading and is blank). Happening on multiple sites.

EDIT2: Some of the connection refused errors appear to be because Tor browser was re-directing http links to https for onions which don't use https. No idea what is going on there. The sites load normally when I change the URL manually.

In the documentation for TestDisk, it states that ext4 data location is lost when a file is deleted, and therefore the data is unrecoverable.

I see people on certain sites talking about tools available to LEA which can recover ext4 data. I'm not talking about "clean room platter disassembly" or whatever, I'm talking about "digital forensics" utilities which I could use myself, provided they were available to civilians. Does anyone have any idea of the names of these utilities, to give me an idea of where to start looking for them?

On a side note, how would disassembling a drive allow for additional recovery options, anyway, assuming that the drive was in perfect shape mechanically? I thought that disassembly was only a solution in the case of hardware failure.

Speaking completely hypothetically (so that none of the usual crowd starts screeching at me) I've got a Tor browser install located on a LUKS volume, and I would like to be able to save (and use) my passwords in a similar fashion as when using stock Firefox.

I have enabled writing to certdb (as detailed in this post) and the passwords are being saved. However, they will not autofill. In order to get a username/password combo to fill, I have to first click the password field, then choose from a menu, then click the username field (sometimes several times) until the menu appears, then choose from it.

Does anyone have any advice on getting autofill to work normally?

Again, this is completely hypothetical (because for some reason most of you seem to think that saving data to an encrypted drive is insecure) so you can skip the verbal abuse, please and thank you.

Is anyone aware of an addon which allows general JS use, but blocks specific highly-annoying ways which some sites use to screw with the UI?

• Interfering with mouse cursor movement (e.g. YouTube, apparently done with sendNativeMouseEvent? Can't find much info on this.)

• Screwing with clipboard contents (many sites) and history (many other sites)

• Causing general sluggishness in desktop UI when tab is loaded (mostly porn sites, no idea how they are doing this, CPU monitor doesn't show high CPU usage. malicious network/disk requests?)

It would be really awesome and useful if there were an addon where you could arbitrarily disable whichever problematic functions (like a list of checkboxes) and perhaps ship with a curated list of suggestions. I've tried searching firefox-related subs and the web in general, but without knowing the names of specific functions, I haven't had much luck finding addons or other remediation methods, other than to disable JS entirely, which breaks most sites. I have found addons to help with certain clipboard pest behavior, but I'm more interested in just disabling sites' access to these things across the board, or perhaps on a per-site basis. If uBlock has a way of doing this, I haven't found any information about it.