Stories
Slash Boxes
Comments

Dev.SN ♥ developers

posted by NCommander on Tuesday April 01 2014, @06:00PM   Printer-friendly
from the this-won't-make-you-cry dept.
In our ongoing commitment to our users privacy, we've introduced the ability to reach this site through Tor directly. Without further adue:

Since these services are accessible directly in the Tor Network, and do not need to pass through an exit node, it should be considerably faster to access SoylentNews via the onion links than going through directly. There are a couple of caveats you should be aware of though using this service.

When you browse us through tor, a bit of magic happens on the backend (a process I like to call auto onioning), which causes the page to be rewritten with our normal links rewritten as tor links. For instance, a link to our wiki will get automatically replaced with its onion equivalent. Unfortunately, the process is bi-directional (a side-effect of mod_substitute), so if you post a link that we have an auto-onion entry for, it will cause the onion link to show up on the main index. Auto-onioning is only applied for users coming in from tor, and not for regular visitors. We'll probably do tweaks to Slash to get it to de-onion links as they come in, but just be aware of it for now.

Furthermore, as the final hop to varnish is in the Linode data centre, users from tor will always show up with a consistent IPID. This allows user accounts to work properly while being onioned. At the moment, we don't support SSL through tor as we've not created the necessary CA and self-signed certificates. This is on the TODO list, and should show up sometime this week (we'll announce it when we do).

The consistent IP however means that staff can see if a user is coming in from tor due to the consistent IPID. While we do not publish our IPIDs publicly, you should be aware that any of us can check to see where a given post is coming from. Furthermore, our rate limiting software works on an IP basis. We've tested tor with several users at once and didn't trip the rate limiting, but if people start getting 429 errors, we'll modify the rules to give nitrogen (the tor relay) more requests per second in an attempt to keep it up.

Furthermore, when using tor, you're still using the old and dingy IPv4 protocol (shockingly, tor does *not* support IPv6 hidden nodes which surprised me; it is our only backend component that doesn't support it). This service should be considered experimental, and may go away, break in two, eat your children, or render the user sterile. You have been warned.
 
This discussion has been archived. No new comments can be posted.
Display Options Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 1) by zip on Tuesday April 01 2014, @08:12PM

    by zip (702) on Tuesday April 01 2014, @08:12PM (#24533)

    Would be nice if the images on the tor site were hosted there too and not be linked from the clearnet site (request policy blocked it for me, otherwise I would not have noticed).

  • (Score: 2) by NCommander on Wednesday April 02 2014, @03:45AM

    by NCommander (2) <mcasadevall@dev.soylentnews.org> on Wednesday April 02 2014, @03:45AM (#24653) Homepage Journal

    Can you clarify on this? What images aren't going through tor?

    Everything is hosted on the same box, so unless we've got a URL fuckup somewhere in the backend (which is possible, I just nuked a li694-22 URL last week), they should all appear coming from the onion site.

    --
    Still always moving ...
    • (Score: 1) by zip on Wednesday April 02 2014, @07:20PM

      by zip (702) on Wednesday April 02 2014, @07:20PM (#25237)

      It looks like the images linked from the stylesheets are not onionized because they are absolute urls.

      $ curl -s http://7rmath4ro2of2a42.onion/slashcode.css?slashc ode_14_04 | grep dev.soylentnews.org | wc -l
      25