question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Evaluating Dark Reader for use in Tor Browser

See original GitHub issue

Dear developers, Thank you for your work on this extension. I’m currently evaluating this extension for use in the Tor Browser with Javascript disabled. Tor Browser Bundle (TBB) is basically Firefox ESR tailored for anonymity. I had some questions:

  1. With and without Dark Reader, is there a difference in what content is loaded from a website or the order it is loaded in? Or does Dark Reader only work once content has been rendered by the browser, and does not alter the web traffic itself?

    For example, if Dark Reader alters the setting for prefers-color-scheme to “dark”, then it might cause a different CSS file to be loaded, which can be used as one more data point to fingerprint the user. I believe this feature is planned. Can it be made optional?

    This is also why TBB devs don’t include uBlock, because different users will block different things, and the difference in web traffic patterns can distinguish them from each other.

  2. Dark Reader shouldn’t need internet access for its functionality. Does it make network connections in the background? If so, can this be made optional? The concern of TBB devs with such extensions is that they might bypass the Tor Proxy, and communicate over clearnet.

  3. My understanding is that Dark Reader inserts its own CSS in <head>, and makes no other changes to the page. Is this correct?

  4. If I don’t choose to modify settings per website, what data is logged to disk? The concern TBB devs have here is forensics (where information about which websites a user uses or visits, is written to the disk).

Thanks!

Issue Analytics

  • State:closed
  • Created 3 years ago
  • Comments:5 (4 by maintainers)

github_iconTop GitHub Comments

1reaction
Gustedcommented, Jul 29, 2020

Even if Javascript is turned off

Pretty sure extension will still work as it’s all based on javascript.

Could you explain more?

We need to insert styles into the webpage and that can be detected trough a site.

web traffic patterns

Yep if a programs outside of a site as they haven’t access to that. Could detect the extra fetch.

0reactions
sprinkledcheesecommented, Jul 29, 2020

I’m not sure about js pref in ff, but Tor recommends this: https://2019.www.torproject.org/docs/faq.html.en#TBBOtherExtensions.

Read more comments on GitHub >

github_iconTop Results From Across the Web

Dark mode in Tor Browser (#40337) · Issues
I want to enable full dark mode (all websites become dark) in the tor browser, not just a theme, as I am sensitive...
Read more >
Installing dark reader extension in TOR browser : r/tails - Reddit
I like to use dark mode every where i can, and Dark Reader extension provides that for TOR browser. The extension is open...
Read more >
Your guide to the dark web and how to safely access .onion ...
To access a dark web address, you must use a VPN and a suitable browser (it should be Tor). The aim is to...
Read more >
Brave browser's Tor mode exposed users' dark web activity
The Brave browser has fixed a bug in its Private Windows with Tor feature that leaked the .onion URLs for websites visited by...
Read more >
Dark Reader
Dark Reader is an open source eye-care browser extension. It doesn't send user's data anywhere. Trusted by 5,000,000 users. Developed since 2014. Support...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found