Ludovic Courtès writes:
> Christopher Lemmer Webber <cweb...@dustycloud.org> skribis:
>
>> Anyone have recommendations on how they're doing web browsing via Tor,
>> sans tor-browser? In the interim I have been using the more
>> lightweight, non-js using browsers like links.
>
> I use Privoxy, and as written in the ‘privoxy.conf’ example, I have:
>
> forward-socks5 / 127.0.0.1:9050 .
>
> where Tor is listening on port 9050 (I use the Tor service of GuixSD.)
>
> Ludo’.
I wonder if localhost + port is a good idea for tor or really any other
service. Our experience with the confused deputy attack against guile's
live REPL makes me suspicious of anything that's localhost + port.
I notice that the Tor configuration file supports a unix domain socket:
ControlSocket Path
Like ControlPort, but listens on a Unix domain socket, rather than a
TCP socket. 0 disables
ControlSocket (Unix and Unix-like systems only.)
I wonder if that would be safer? WDYT?
