Tor browser and No Scripts

[mauiblue]

My question is Java script that much of a threat to safe web surfing?

I started using the Tor browser and a VPN subscription. I notice that the Tor browser has a plugin called No Script. A lot of web content has Java Script and the No Script plugin keeps quite a few websites I visit from being viewed correctly like bank websites or YouTube. The positive of this is that certain websites that has a lot of ads are now gone from view. If I really need to use the website I do turn off No Scripts. Thanks for any help or comments.

 

[lxskllr]

Disabling js is probably the single best thing you can do for privacy/security while computing. Tor is meant for anonymity, not security per se. If you enable scripts, you chip away at that anonymity, as well as reduce security.

 

[mauiblue]

Got it. I understand. I am just basically going to forums and reading the news on Yahoo. I do a lot of research and started using Duck Duck Go. If I use Google search, I almost always have to go through a security check before my search completes. Known safe websites like my bank website I have to disable No Scripts or I can't use the website. I'm still getting used to using Tor and VPN. Makes my Web surfing different but I have more peace of mind.

 

[lxskllr]

I'd segregate your browsing between Tor and a regular browser. Banking depends on knowing who you are, so an anonymous browser doesn't make much sense. Research for your book on jihadism would be best done anonymously so you don't get on any "special" lists. Other stuff falls somewhere in between.

I'm always reluctant to reduce security/anonymity on Tor. If you temporarily reduce security, you could forget, and you won't have it when you need it. In short, use the best browser for the task at hand, and analyze the threats you're protecting against.

 

[Bardock]

Developers did not design tor to run in conjunction with vpn and warn against it in the documentation. Use obfuscated bridges instead.

 

[mauiblue]

Thanks guys for your posts. I am learning and understanding the use of Tor and VPN everyday. I went over to Tor website and looked at the obfuscated bridges. I will research more about Tor and VPN. Steadily I'm learning. Appreciate the help.

 

[MongGrel]

No Script has been available for many browsers a long time now.

TOR isn't bullet proof on a VPN, I wouldn't doubt it makes you more likely to be suspect these days for someone curious as to what you are doing.

 

[mauiblue]

That's okay. They won't see much drama if they can hack. I figured just having one more tool in the toolbox will help keep the boogie man away.

 

[Bardock]

noscript stops it from running but it still loads which is dangerous. use prefs to set security to high and learn to use about:config and turn off metadata. Don't correlate your real life identity to tor use. (you shouldn't talk about tor on a site like this that most likely logs ip and is on the clearnet, could look bad in court). use linux

 

[sm625]

If you are shopping for pressure cookers you might want to use tor for that also. And when you find one you want, go buy it from a brick and mortar store (omg I said mortar and pressure cooker in the same sentence I'm so toast...). Do not have a pressure cooker shipped because they will take it. Yes I actually tried to order a pressure cooker, for completely legit reasons, and it indeed never showed up to my door.