Re: Recommendations for browsing via Tor pre tor-browser?

[Christopher Lemmer Webber <cwebber@dustycloud.org>]

Ludovic Courtès writes:

> Christopher Lemmer Webber <cwebber@dustycloud.org> skribis:
>
>> Anyone have recommendations on how they're doing web browsing via Tor,
>> sans tor-browser?  In the interim I have been using the more
>> lightweight, non-js using browsers like links.
>
> I use Privoxy, and as written in the ‘privoxy.conf’ example, I have:
>
>          forward-socks5   /               127.0.0.1:9050 .
>
> where Tor is listening on port 9050 (I use the Tor service of GuixSD.)
>
> Ludo’.

I wonder if localhost + port is a good idea for tor or really any other
service.  Our experience with the confused deputy attack against guile's
live REPL makes me suspicious of anything that's localhost + port.

I notice that the Tor configuration file supports a unix domain socket:

       ControlSocket Path
           Like ControlPort, but listens on a Unix domain socket, rather than a TCP socket.  0 disables
           ControlSocket (Unix and Unix-like systems only.)

I wonder if that would be safer?  WDYT?