was using tails at a cafe that blocks all videos (for some reason) i used a bridge (the easy default one) went to invidious but no videos worked because of the network. everything else on the site worked. does it know the contents of the page despite tor? (im not using a work or school given device i am using framework)
(i also have an unsafe home network and have to use a google wireless access point. also have someone who has a virus. (we dont share the same device just same network) i cant remove it because i get scolded for messing with her stuff and spying on her (??? yes the virus is spyware the irony lol)) (everything i do has to be on device because my family doesn’t want me messing with the wifi)
(also any qubes specific advice would help since i wont be using tails as my daily driver anymore since i learned its not for that. also not a fan of the gimmicks but thats just me.)
thanks for reading any commcnt helps more people see this )
Connect to a trustworthy VPN first (Proton’s fine), then connect through Tor.
can you use it without logging in
Short answer: no. Tor is specifically designed to mask all network requests from the Tor browser. All the cafe can see is your connection to a Tor node.
If they were somehow detecting video based on traffic patterns ( how often packets are transmitted or received they’d have to sever the only connection they see and your whole Tor session would freeze or need to connect to a new bridge. I believe Tor even attempts to try to mask traffic patterns to disassociate guard node and exit node traffic.
Most likely invidious was having issues.
If you control the access point at home, see if you can put your devices on a separate VLAN. This should help isolate your devices from any infected devices. Otherwise using a hot spot will isolate you from infected devices.
All the cafe can see is your connection to a Tor node. Continuing on this, if you want your connection to a Tor node to be anonymous, use a bridge. They are specifically meant to make it more difficult for anyone watching your internet traffic to determine that you are using Tor.
If you want to be completely sure that your connection type/target cannot be identified, you need to hide your connection on the physical layer. A VPN could do this. They create a virtual interface through which your traffic goes before leaving your device. However, using Tor on a VPN connection is a topic of debate, so read up on it, perhaps here(YouTube link!) and here(official Tor wiki), and make up your own mind.
You could also MacGyver a portable Tor router which you physically connect to, either through an Ethernet port or WiFi on your computer and then connect that Tor router to the café’s WiFi.
Also, and after this I’ll shut up, since you mentioned Qubes: you could also setup a qube to be a virtual Tor router, through which you route your traffic/browsing/surfing from your “working” qube. This, however, requires enabling at least ipv4 forwarding in the kernel and configuring your firewall to enable network address translation.
i got an error message (that ive never got before invidious has a lot of errors) saying that the network blocked it when i did it
also can you set up a vlan just from your device? my family wont want me messing with the wifi ( also idk how the employees would just let you mess with their network)
Use Tailscale; you set up a single account and then install the client on the devices you want to connect. You can select one to be an exit node (one on your home network) and then all devices can connect to that device and transit to the Internet irrespective of port forwarding etc.
The one downside to this is that you do end up with an account hosted on Tailscale servers, but this becomes the only exposure point.
thanks, btw does it slow the wifi or device down a lot and is ir free? im already using qubes and whonix and tor on my poor laptop
Tailscale is free and is just a wireguard client/server; there’s apps for Linux/Windows/Android/macOS/iOS, and they shouldn’t make much of an impact. Of course, whatever network traffic you route over it could have an impact, but that’s up to you.
will it help against networks that arent secure or private?
Yes, because you’re using an encrypted channel for all network traffic and your home DNS.
There are some ways that an activity hostile Wi-Fi network can route around some of that, but for most use cases, it provides you a secure extension of your home network.
thanks man ill check it out
Depends what you mean by “fine”. Tor will still guarantee anonymity through the three-hop model, and no they cannot see the contents of your traffic. But it really depends on your risk tolerance. The real problem in this scenario is traffic analysis.
I’m not sure how the video stream packets look in that scenario but they may still be able to infer through protocol or density that some video is streaming and block that. Again, without knowing what is in the stream.
But you have to be cautious about other attackers in the network targeting your device. Those risks can circumvent all sorts of safety you might think you have.
thanks for the comment and sorry for the confusion its hard to write well
for clarity what do you mean by be cautious? (as in what do you think i should do)
