Slashdot Mirror


The New York Times Launches Tor Onion Service To Overcome Censorship, Ensure Privacy (betanews.com)

Mark Wilson quotes a report from BetaNews: The New York Times has announced that it is launching a Tor Onion Service version of its website. The new, more secure way to access the site will open it up to people around the world whose internet connections are blocked or monitored. It also caters to a growing breed of people who are concerned about what their web browsing habit might reveal and who have turned to Tor to protect their privacy. The new service is described as "experimental and under development," and some features of the website -- such as the ability to comment -- do not work. The NYT warns that fine-tuning of performance and features may mean there are periods of downtime, but the long-term aim is to completely replicate the main website as an Onion Service.

29 of 69 comments (clear)

  1. Inception? by Anonymous Coward · · Score: 1

    The Onion Router Onion Service?

    1. Re:Inception? by PPH · · Score: 1

      Shades of Being John Malkovich.

      --
      Have gnu, will travel.
    2. Re:Inception? by DontBeAMoran · · Score: 2

      The New York Times launches Tor Onion service to overcome censorship, ensure privacy.

      The Onion launches New York Tor Pretzel service to overcome hunger, snack envy.

      --
      #DeleteFacebook
  2. desperate Times by turkeydance · · Score: 1, Funny

    for the NY Times. this looks like an Onion headline.

  3. TheOnion by igny · · Score: 5, Funny

    I understand NY Times' desire to compete with TheOnion for delivery of satirical news, but enough is enough, TheOnion must sue NY Times for trademark violation here.

    --
    In theory there is no difference between theory and practice. In practice there is. - Yogi Berra
  4. Uhm... by Pseudonym · · Score: 1

    Bitcoin paywall, presumably?

    --
    sub f{($f)=@_;print"$f(q{$f});";}f(q{sub f{($f)=@_;print"$f(q{$f});";}f});
  5. Pay wall? by bsDaemon · · Score: 4, Insightful

    Do they still paywall the stories? Do they allow you to log in? (Thus helping to deanonymize you on other onion sites)?

    If they're giving easy text versions of stories, free from paywall, without the annoyance of comments (meta comment bashing comment...) then it may be worthwhile. Otherwise, like FB over Tor they are probably just going to do more harm than good

    1. Re:Pay wall? by CaptainDork · · Score: 2, Funny

      I never meta comment I didn't like.

      --
      It little behooves the best of us to comment on the rest of us.
    2. Re:Pay wall? by ortholattice · · Score: 1

      I am curious: what is the issue with FB over Tor? (I don't have a Facebook account so I can't try it.)

    3. Re: Pay wall? by bsDaemon · · Score: 2

      You have to log in, it uses javascript, etc. so they would be able to a) fingerprint you and b) tie you to a (presumably) real identity. It seems to defeat the whole purpose and creates an OPSEC breach for anyone dumb enough to do it

    4. Re:Pay wall? by DontBeAMoran · · Score: 1

      Yeah... let the real APPS guy do it, you're just embarrassing yourself.

      --
      #DeleteFacebook
    5. Re: Pay wall? by Obfuscant · · Score: 2

      It seems to defeat the whole purpose

      There are two purposes for Tor. One is to prevent third parties from tracing you by monitoring your traffic. That is unchanged.

      But another purpose is to prevent the SECOND party (FB, or NYT in this case) from tracing you, which having to log in completely defeats.

      I don't know, so I'm asking. Is there a javascript function that could appear on a web page served via Tor from NYT or FB that would cause the browser to reach out to another website directly (not via Tor) and disclose the user's actual source IP address? Something like the one pixel images used to track users reading an email. Does the system of the Tor user force all IP traffic through Tor no matter what destination, or can stuff slip out the side, so to speak?

    6. Re: Pay wall? by tlhIngan · · Score: 1

      There are two purposes for Tor. One is to prevent third parties from tracing you by monitoring your traffic. That is unchanged.

      But another purpose is to prevent the SECOND party (FB, or NYT in this case) from tracing you, which having to log in completely defeats.

      I don't know, so I'm asking. Is there a javascript function that could appear on a web page served via Tor from NYT or FB that would cause the browser to reach out to another website directly (not via Tor) and disclose the user's actual source IP address? Something like the one pixel images used to track users reading an email. Does the system of the Tor user force all IP traffic through Tor no matter what destination, or can stuff slip out the side, so to speak?

      Technically, the Tor browser prohibits such access for obvious reasons.

      But having Tor block others from observing your traffic is often Good Enough - they don't care for the anonymity Tor can provide. Indeed, perhaps there's a chance you want the former but not the latter - let's say you come across a bunch of "interesting" documents. You want the former to prevent people from seeing what you did, but you want the latter to validate that you were the source and by reputation either a source for made up crap, or a source for authentic information people would rather kept hidden.

      Facebook and the NYT believe some people really do not want others to know what articles they read or what they post about. Perhaps you're homosexual in a country where homosexuals are put to death - it would certainly be nicer to read those kinds of articles off of Tor.

    7. Re: Pay wall? by Kjella · · Score: 1

      I don't know, so I'm asking. Is there a javascript function that could appear on a web page served via Tor from NYT or FB that would cause the browser to reach out to another website directly (not via Tor) and disclose the user's actual source IP address? Something like the one pixel images used to track users reading an email. Does the system of the Tor user force all IP traffic through Tor no matter what destination, or can stuff slip out the side, so to speak?

      No, in theory Javascript can't do anything really nasty as all traffic is routed through TOR, whether it's onion sites or via exit nodes to the normal web. They can fingerprint your browser much better to recognize return visits and possibly track you across sites, which may be a risk if you're doing identifying activities some of the time. But you have exploits such as these, they all involve breaking the security model but most of them involve Javascript. While in theory there can be bugs in any part of the code the HTML rendering, image decoding etc. are much more static, heavily tested, fuzzed and sometimes formally proven so they extremely rarely lead to remote exploits on their own. Usually they need some form of scripting engine to orchestrate the triggering so it'll point to a malicious payload, otherwise it's usually just a crash/hang bug.

      If you want to get more paranoid than that, you run the browser from its own VM that doesn't have any other firewall access than through TOR. That way even if you have an exploit for the browser all you have is the data the VM holds, obviously then you should not do anything personally identifying inside that VM. If you're even more worried than that and think they might try to break out of the VM too you do the same thing physically using a two NIC computer as your TOR gateway with all other ports closed. There are specialized Linux distros like Tails, Whonix etc. that do most of the heavy lifting for you. From what I understand most people fail at much more basic things though, they use the same nicks and passwords, reveal personal info etc. linking them to real world identities, they download media files, PDFs and open them in non-TOR applications that call out to the normal web and so on.

      Encouraging people to do "normal" browsing like NYT and Facebook through TOR might be a good thing if they're not going all-out on security, as it's free and probably even better than a VPN for browsing. At least as long as you don't type anything important into non-https sites, since TOR gives exit nodes a free man-in-the-middle attack by design. But if you're Snowden or have some other truly deep secrets then this "casual" TOR use will likely get in the way of proper OPSEC and compartmentalization. Then again, you could always compartmentalize the compartments and have a casual TorBrowser and a paranoid TorBrowser inside a VM. The most important part though is that it's not a magic bullet, TOR will protect one angle of attack. There are many others and a double-bolted reinforce steel door is no good next to an open window...

      --
      Live today, because you never know what tomorrow brings
    8. Re: Pay wall? by SuricouRaven · · Score: 1

      Anonyminity is only one function of Tor. It has a second function too: Censorship evasion. Plenty of people around the world really don't mind Facebook knowing who they are - they just want to hide from their government, to make sure they are not arrested for sedition or blasphemy, or access news and material their government has deemed too dangerous to permit the people to see. In that event, Tor does the job very well.

    9. Re: Pay wall? by Obfuscant · · Score: 1

      Plenty of people around the world really don't mind Facebook knowing who they are - they just want to hide from their government,

      Facebook, as a corporation, is a creation of the government, and the government has methods of getting information from them. In the US, that's a warrant. In other countries, that may be less strenuous on the government. It may be under the table, via hacking, for example.

      Facebook exists to make a profit off of the individual's information, and so may wind up selling it to that government, even indirectly. It is much safer for those who are scared of their government's knowledge of their access to a corporate resource to do so completely anonymously, which means no login to Facebook or NYT.

      In that event, Tor does the job very well.

      Tor has not once prevented Facebook from taking advantage of the one true product they have: the user. And they won't stop NYT from doing that, either. Tor does one job it can, but not the only job necessary.

  6. And things just got interesting by Snotnose · · Score: 1

    this will be fun to watch.

  7. Re:Anyone even slightly left of center by Anonymous Coward · · Score: 1

    Needs to take precautions in the era of Donald J. Trump.

    He hates canabis and the DEA is going to kick in your door and shoot your dog.

    Marijuana is ***NOT*** in the Bible, so Jeff Sessions will make sure you're grow is raided.

    Peace.

    Sad thing these clowns are gonna get elected again cuz right wingers vote and lefties don't.

    Don't come on here complaining when Trump/Sessions get reelected when you said you don't vote because you're an anarchist or whatever superior person you are and don't believe in voting.

  8. Re: Anyone even slightly left of center by Anonymous Coward · · Score: 1

    Colorado and Washington have American cannabis farms. Like it or not, cannabis is a legitimate industry. If you're against drugs, I suggest you stop drinking alcohol and caffeine, and stop taking prescription medicine.

  9. Re:Tits for everyone! by DontBeAMoran · · Score: 1

    What do you mean? An african or european tits?

    --
    #DeleteFacebook
  10. Re:TOR is not anonymizing by DontBeAMoran · · Score: 2

    Really? I'm pretty sure you just did it to whatever word you were trying to write.

    --
    #DeleteFacebook
  11. Re:Anyone even slightly left of center by sheramil · · Score: 2

    Marijuana is ***NOT*** in the Bible,

    Bitch, please. First book of Genesis:

    001:029 And God said, Behold, I have given you every herb bearing seed, which is upon the face of all the earth, and every tree, in the which is the fruit of a tree yielding seed; to you it shall be for meat.

  12. Re:This make no sense by arkane1234 · · Score: 1

    The reason makes no difference.

    --
    -- This space for lease, low setup fee, inquire within!
  13. Re:This make no sense by AHuxley · · Score: 1

    Onion Service will be the next version of the www.
    As less of the internet gets searched by political "search engines" having results altered, people will move to onion service to rediscover the joys of the net in the mid 1990's.
    The more social media removes movie reviews, links, comments, the more people will seek fun and freedom again.
    Freedom of speech, freedom after speech. Its like making a 1990's web site early in the next be tech change.

    --
    Domestic spying is now "Benign Information Gathering"
  14. Not censored by jez9999 · · Score: 1

    This is the same Tor whose team had such strong free speech principles they said they would change it to make it hard to access The Daily Stormer. The New York Times isn't censored on the regular internet, they're so pro-establishment. Nobody needs it as an Onion site.

    1. Re:Not censored by serviscope_minor · · Score: 1

      This is the same Tor whose team had such strong free speech principles they said they would change it to make it hard to access The Daily Stormer.

      Pics or it didn't happen. The only comment I found was this:

      We are disgusted, angered, and appalled by everything these racists stand for and do. We feel this way any time the Tor network and software are used for vile purposes. But we can't build free and open source tools that protect journalists, human rights activists, and ordinary people around the world if we also control who uses those tools. Tor is designed to defend human rights and privacy by preventing anyone from censoring things, even us.

      https://blog.torproject.org/to...

      --
      SJW n. One who posts facts.
  15. We need all news and wikipedia on onion sites by Nocturrne · · Score: 1

    As much as I hate the NYT's propaganda, I would be very happy to see more news and information available to those who live under the criminal leadership in countries like China, Russia, and Iran. Old VPN technologies are easy to block or identify with deep packet inspection - it's not cheap to do so, but corrupt countries like China and the US have virtually unlimited resources for manipulating the internet. We need a new internet.

    1. Re:We need all news and wikipedia on onion sites by Kernel+Krumpit · · Score: 1

      +1 "We need a new internet"

      --
      May the lies we live by make us strong, healthy, happy and wise - Kurt Vonnegut.
  16. Re:Sad Failing New York Times by KingBenny · · Score: 1

    you say those two words in one line as if you actually mean it ?
    do you want me to sum some up ? meddling in ... meddling in ... assassination, meddling .... "the united lobbies of the leaders of the free world" (self-proclaimed) ... meddling in ... and maybe some, oowh, euhm, meddling in ... .creating al qaeda in afghanistan in the name of what about zee russians ... creating IS in iraq while trying to neutralize the zone ... now competing with the russians to bomb them the flattest first in Syria ... and then maybe some euh ... meddling ,and euih ... meddling and maybe telling everyone what to do and ... o yea george washington invented democracy and euh ... i dont know maybe some euh ... meddling ? perhaps like as if you own the place and your name was Edison, the original copyright troll
    don't get me wrong, i met some nice Americans with an actual realistic non narcist view on the world but if you want me to give one trait that's unique to american culture i always say : american narcissism ... freedom huh ?
    CIA ? nicaragua ? medellin ... war on drugs, commercial penal system ... bi-partisan particracy in the name of baby jesus and democracy ...
    i'm sure theres a few in your what ... 400 million overthere who see things like that
    don't blame me for it
    i just thought it was funny, the days of the wild west are long gone man, you are free to do as they beat you with a stick and that's it

    --
    Free speech was meant to be free for all... how can anyone grow up in a nanny state ?