Are Tor/VNP/etc a threat, aka. Is there any point to ban IPs

Imagine doing that on a large scale though. It would be impossible to keep up.

Not if it’s one specific individual creating accounts over and over again using Tor. Also, how would it be possible to detect if a user is using Tor?

I don’t believe it does. :slight_smile:

1 Like

my guess is that if the fingerprint isn’t unique to identify you, it would be almost the same for all of them

I didn’t think the possibility of it being random somehow, but if one os motivated enough to implement it that would be worth testing

if they’re too much you could try balancing your acceptance of false positives and negatives, I think it would still be better to combine it with IP than using only the IP

1 Like

Good point, but wouldn’t the fingerprint be different depending on the relay that Tor is connected to?

Yeah, agreed.

Great advice! :+1:

1 Like

I dunno, but I expect it to be more manageable. A fingerprint is a lot of data you take from the browser, and you could customize how much of it must be equal or similar to be a match. All my devices would also have different fingerprints, so if I would simulate your annoying user you’d see me a few times before catching all the things ( there are still the country and provider, that is an interesting thing to test )

1 Like

The problem is that…

Most major web browsers now attempt to block fingerprinting (and circling back to the original subject of this topic, Tor is probably the most immune to fingerprinting for obvious reasons).

1 Like

Where is the proof for that? If you can’t provide any then it is just your presupposition to justify your dislike of the Tor browser setup.

That has nothing to do with Discourse and therefore a non sequitur to the discussion. You might just as well say that people use Internet Explorer or Edge to look for porn.

3 Likes

Where is the proof against it? Search for “Tor” on YouTube and take a look at the results that pop up.

All of this has nothing to do with me disliking Tor. That’s not why I started this discussion. Tor can be used by anybody (regardless of their technical knowledge) to attack Discourse communities without any way for the owner(s) to truly stop them. This is already a massive issue in my own forum, and if Tor were to gain even more notoriety amongst online trolls, it could have devastating results for the various Discourse communities out there, especially the ones that are vulnerable (whether that be due to inexperience, the size of the community, or other reasons) to attacks from vitriolic people.

That wasn’t my point. It just further solidifies that Tor is mostly used by bad actors. I’m sure there are quite a few people who use Tor for legitimate reasons, but that group is generally a minority.

1 Like

I don’t have a horse in this race, but I do have to say I think it is immensely discourteous to make claims and insist on others taking the time to disprove them. The onus is on the maker of the claim to substantiate their point; that is basic civility towards other participants in a discussion.

5 Likes

I think Tor and VPNs allow you to bypass blacklisted IPs. In order to prevent suspended users from evading their suspension, I think you should blacklist VPNs. (I am not sure if suspensions are by IP or not)

Tor can also be used to browse the dark web, and probably allows you to change IPs to anything.

After reading this post a little, I discovered that Tor has an Exit and Enter Mode. I think it allows you to change the IPs like a VPN. (Not completely sure)


If anything is wrong, correct me.

Seriously! You are arguing your point from silence which is never an acceptable technique. And seriously since when has YouTube been an authorative source. It is neither credible nor reliable. You might as well quote the Daily Mail as a source for all the veracity of such claims.

Or do your research on Facebook.

4 Likes

Consider this question in another context. If I allege that you have committed a crime without providing evidence, should you go to prison if you are unable to prove that you didn’t?

Browsing a dark web is one of Tor’s primary features, i.e. providing access to onion services. Despite the way media typically frames it, a dark web is neither good nor evil, it is merely a network much like (and usually within) the internet.

Just like the rest of the internet, Tor’s onions contain plenty of websites for legitimate purposes and plenty of websites for nefarious purposes. I don’t have any information to suggest percentages but people choosing to access a dark web does not automatically make them bad actors.