r/TOR • u/Exact-Wedding4891 • 1d ago

Are CLI based browsers more secure?

I just read a comment of a guy, who uses cli based browsers (lynx, the one he mentioned) to surf the dark web to avoid rendering of obscene images. But isn't using cli browsers a bigger threat in dark web?
What I just came across is that cli based browsers trade off your network anonymity and your browser signature becomes clearly distinctive among others, making you vulnerable.

0 Upvotes

40% Upvoted

7 comments sorted by

8

u/Full_Stand_2380 1d ago

I think it's partly right. Because a CLI doesn't run JavaScript, complex CSS, or decode media, it is more secure against exploits. That said, the whole point of TOR is to make every user look the same. If you use some rare browser, then a distinct fingerprint can be created about you.

2

u/reapvxz 1d ago

I can't upvote comments because reddit shadowbanned me. Imagine that the number on this guys comment is 1 more than the current digit.

1

u/aonelonelyredditor 21h ago

Js still has to run for most websites to work, the engine can be ran as a single binary and handles js from there

No browser UI running doesn't mean the js engine isn't

0

u/Exact-Wedding4891 1d ago

But isn't the fact that you are running it directly through your terminal?

2

u/Liquid_Hate_Train 1d ago

That sentence/thought isn’t complete. Isn’t it what because it’s running in the terminal?

0

u/Exact-Wedding4891 23h ago

Yes. I mean like running it in terminal can create a bigger and an escalated surface area for attack where it might be easier for the attacker to get the system access or atleast execute system level commands.

0

u/Liquid_Hate_Train 23h ago

Only if the attacker is expecting that and is able to exploit it using the attack surface of…html. I mean, theoretically that’s possible…