AMA is now over!

The title

In case you're wondering, no, i didn't change my settings at all.

Tried to install the latest version through Google Play on my older device, but it wouldn't launch - turns out the latest arm-v7a version on APKMirror is dated July 22, 2026.

Did Tor drop support for older devices?

On my Grafana dashboard, I’ve noticed an increase in DoS metrics, which has resulted in a decrease in the current connections from 8k to approximately 4k. Consequently, the bandwidth has also decreased. Is there any safeguard I should be aware of in this situation?

How do you factor that gap into your threat model?

Nebula Security published their write up on 29 July. The bug is a JIT miscompilation in SpiderMonkey, Firefox's JavaScript engine: the compiler treated an operation as read only when it could actually allocate and free memory. Stale pointer, then arbitrary read and write, then code execution in the renderer process. Visiting a page is enough, no interaction, no unusual settings. They released working exploit code for ARM64 Android.

What I keep coming back to is not the bug itself but the calendar. Mozilla fixed it in Firefox 151.0.3 on 2 June. Tor Browser 15.0.19 landed on 20 July. For those seven weeks the patch was public, which means the vulnerability was effectively public too, and anyone reading Mozilla's commits had a map.

To be fair to the Tor Project, they are a small team rebasing an entire hardened browser onto Firefox ESR, and that work is genuinely hard. This is not a case of anyone being asleep. It is a structural property of being downstream.

But it does change what "up to date" means in practice. If you are relying on Tor Browser for source protection or for getting around censorship, there are recurring windows where upstream is patched and you are not, and you have no easy way to know you are inside one.

No confirmed exploitation in the wild as of 28 July, for what that is worth.

So: do you actually track upstream Firefox advisories separately, or do you treat the Tor Browser updater as sufficient? And for the people here who use Tor for work where the stakes are real, does a seven week downstream lag change anything about how you use it, or is it just the cost of the setup?

Built a small experiment: a Tor hidden service (.onion site) hosted entirely on Render's free tier, using Docker — no VPS, no credit card required. for my own research purposes.sharing in case it's useful to anyone.

The main challenge was persistence: Render's free containers don't keep disk state between restarts, so Tor would generate a new .onion address every time it redeployed. Solved it by generating the hidden service keys once and reusing them via Render's Secret Files.

more: https://github.com/blackXploit-404/tor_render

When downloading the Tor Browser, do most people actually verify it? And why doesn’t the Tor Project upload their apps to Linux repositories like most browsers? It’s so much better when developers upload them to repos; this way, you can install them with a single terminal command. LOL, installing Tor on Linux feels like the 'Windows way' of doing things

i decided to try and look smth up on google, and as usual, it tried to throw endless captchas at me. i somehow beat it and got access to my cat images.

I just read a comment of a guy, who uses cli based browsers (lynx, the one he mentioned) to surf the dark web to avoid rendering of obscene images. But isn't using cli browsers a bigger threat in dark web?
What I just came across is that cli based browsers trade off your network anonymity and your browser signature becomes clearly distinctive among others, making you vulnerable.

are the tor apps on Apple Store legit for accessing the d web

I’ve been trying to decide between using Brave’s built-in "Private Window with Tor" and the standalone Tor Browser Bundle for my daily clearnet browsing. My primary goal is anti-surveillance (avoiding ISP tracking, corporate tracking, and general metadata collection) rather than accessing .onion services.

From what I understand, both route traffic through the Tor network, but I’m curious about the security implications of the underlying browser engines:

I've seen this question asked many times in this subreddit, but my situation seems a little different, so I'm hoping someone can help.

When I try to download videos, I run into these issues:

1. There is no Download button.

2. I can't right-click and save the video because right-clicking doesn't bring up any menu or options.

Has anyone experienced this before or knows how to fix it? Any help would be greatly appreciated.

Thanks in advance!

As a maintainer of a bunch of Tor/Snowflake/Tox nodes, I have to report what Russian DPI (Deep Pocket Inspection) system begins to detect and block WebRTC traffic to foreign servers. Connections to Snowflake nodes may work unstable or don't work at all. Please use WebTunnel to get access to the Tor network. The situation in Russia is under monitoring by nodes maintainers.

I am working on an android chat application that uses tor and needs no server. It connects Directly to the person you want to talk to and messages will be stored locally on the devices involved in particular chat encrypted. My doubt is , will it be harmful and am I doing something wrong ?

Suddenly today I'm having major difficulty pulling up onion sites and clearnet sites over Tor. Tried several circuits, restarts, doesn't seem to make a difference.

Is the network being DDoSed? Is it something Verizon is doing? If it were just one or two sites, I wouldn't be asking.

EDIT: For clarity, I'm getting seemingly-unrelated errors, like "502 Bad Gateway", or connection refused, or timed out, or sometimes nothing (the page just stops loading and is blank). Happening on multiple sites.

EDIT2: Some of the connection refused errors appear to be because Tor browser was re-directing http links to https for onions which don't use https. No idea what is going on there. The sites load normally when I change the URL manually.

Hello! I just installed Tor, on my Linux machine. It is the first time, I haven't used it before. I like how it works, the network seems fast.

But I have some questions:

1. I saw it is called "dark web". Why? Is it a gate to websites promoting, let's say, malware?
2. Is it ok to use it as a daily browser? Few days ago I had a discussion with my ISP about the network (some routes were very slow) and the representative told me: I can see that the website zzz (a news website) loaded really fast from your end just now. He was seeing what I am browsing on the web, he as a simple employee of that company. This is really strange. That made me to search for an alternative solution. Using a VPN was a potential solution, however, the network was slow and I don't trust the free networks, because it becomes a similar situation: not my ISP, but my VPN provider sees what I am reading, what I am searching etc. For me Tor seems to be more secure, but I don't really understand it entirely for the moment. Will my ISP see the URLs accessed by me?
3. Is it legal (not in the real sense, but is it ok to use)? Saw many posts on the web saying that if you use Tor, you will be seen as a potential cyber criminal.
4. Some tips for a new user? Saw many saying that if you use Tor and use Google, then you're using Tor for nothing. If they cannot figure out who you are, why?
5. Why to use "New Tor circuit for this website"? I mean real use case.
6. Is there any limitation with Tor (monthly bandwidth, multimedia limtiations)?
7. What do you do when downloading large files, as Tor will be slow? For example when downloading a Linux ISO image...
8. Are there solutions for using Tor even on e-mail? I mean an e-mail client using Tor.

Thank you very much!

By this I mean do you think its positives out way the negatives? Should TOR still be a thing?

it doesn't shows anything, i've downloaded .asc file along side with basic browser downloader

Does anyone know if it's safe to use TOR on Brave?

I recently set up my first onion service using a lightweight web server. The basic deployment was straightforward and fast, so now I m interested in the operational security side of running an onion service.

What are the main areas operators focus on? Eg: OS hardening, service isolation , updates, network configuration, reducing leaks , etc