Delivery-Date: Thu, 18 Feb 2016 09:39:35 -0500
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-3.3 required=5.0 tests=BAYES_00,DKIM_ADSP_ALL,
	DKIM_SIGNED,RCVD_IN_DNSWL_MED,T_DKIM_INVALID,T_RP_MATCHES_RCVD autolearn=ham
	version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 32B581E0510;
	Thu, 18 Feb 2016 09:39:34 -0500 (EST)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id AA138395CE;
	Thu, 18 Feb 2016 14:39:27 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 5B0BF395BF
 for <tor-talk@lists.torproject.org>; Thu, 18 Feb 2016 14:39:24 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id hGCYSDjApPrE for <tor-talk@lists.torproject.org>;
 Thu, 18 Feb 2016 14:39:24 +0000 (UTC)
Received: from smtp9.openmailbox.org (smtp9.openmailbox.org [62.4.1.43])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client did not present a certificate)
 by eugeni.torproject.org (Postfix) with ESMTPS id 30BB8391A4
 for <tor-talk@lists.torproject.org>; Thu, 18 Feb 2016 14:39:24 +0000 (UTC)
Received: by mail2.openmailbox.org (Postfix, from userid 1004)
 id ECE062AC3E6E; Thu, 18 Feb 2016 15:39:19 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=openmailbox.org;
 s=openmailbox; t=1455806359;
 bh=L9HtK5dTYKknUcsCgkPuZQdusavCY3J+o8QTj9k8nFE=;
 h=Date:From:To:Subject:In-Reply-To:References:From;
 b=Bcwytsfx57KZFeyWYhVrFzSgJx6h021wCyo6ly01X1ko0NGJytH84MUIBeiGd7j5b
 vAQV/PfFe6GgZez28pEy9YOp0vw1kw5jLN/uAZIHt895T3Yh8UeS70r9nsoDZyK5M0
 gIhIMzSvELRaJruTR5Lkf9aWTcOoAcvhcSyjUxwY=
Received: from www.openmailbox.org (openmailbox-b2 [10.91.69.220])
 by mail2.openmailbox.org (Postfix) with ESMTP id C718A2AC3E49
 for <tor-talk@lists.torproject.org>; Thu, 18 Feb 2016 15:39:19 +0100 (CET)
MIME-Version: 1.0
Date: Thu, 18 Feb 2016 14:39:19 +0000
From: blobby@openmailbox.org
To: tor-talk@lists.torproject.org
In-Reply-To: <A806FDDFD9B20F4DA7EAC5A362E5E35277C59367@PRN-MBX02-4.TheFacebook.com>
References: <4bec438e9c32eae22790e149ec49a419@openmailbox.org>
 <D262C9CF-743B-4801-BC0B-71D9B8B2805B@sebastianhahn.net> 
 <20160217211551.GA2142@raoul>,
 <A1331FB6-0A6D-490A-92DD-568D7F3D2ECD@sebastianhahn.net>
 <A806FDDFD9B20F4DA7EAC5A362E5E35277C59367@PRN-MBX02-4.TheFacebook.com>
Message-ID: <37ae5c8179e0f8cd34600366b72f7c7b@openmailbox.org>
X-Sender: blobby@openmailbox.org
User-Agent: Roundcube Webmail/1.0.6
Subject: Re: [tor-talk] =?utf-8?q?Does_Facebook_Onion_Work=3F?=
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

On 2016-02-17 23:17, Alec Muffett wrote:
> Hi All!
> 
> I just wanted to confirm that facebookcorewwwi is working and is under
> active development; we are currently working on scaling bandwidth so
> that we can support more people who want to use Facebook over Tor.
> 
> The facebookcorewwwi URLs use (and need) subdomains which are
> respected by web browsers, albeit that they are invisible to the Tor
> protocol.
> 
> The URLs are as follows:
> 
>   https://www.facebookcorewwwi.onion/
> 
>   https://m.facebookcorewwwi.onion/
> 
> ...the latter URL ("M-site") is a web-version of Facebook designed for
> mobile devices, which uses Javascript and yet can *also* be used
> without Javascript being available at all.
> 
> When an issue (potential bug?) is raised with us, we generally attempt
> to reproduce it. Our rule-of-thumb is to try reproducing the issue on
> a recent (ideally latest) version of TorBrowser, without extra
> extensions, and with the TBB "Security Level" set between
> Low/Medium-High (for www) or between Low/High (for m-site).
> 
> So far I have only managed to reproduce the "looping" issue once, and
> then only by exceeding the bounds of our "rule of thumb"; I currently
> suspect that this behaviour is related to manual configuration of
> Javascript controls in such a way that JS is only partially-enabled
> for the site, leading to anomalous script behaviour.
> 
> Where Javascript is considered a risk it seems wisest to disable it
> entirely (Security Level: High) and then use M-site; restarting Tor
> Browser should clear any active state that would trigger the issue.
> 


I have tried this for the mobile onion link both on Low and High 
security settings. Both work fine but Facebook does ask for SMS 
validation (as expected).

I think Alec Muffett is referenced in Kevin Mitnick's autobiography if I 
recall correctly!

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

