Opened 8 months ago

Last modified 8 months ago

#33525 new defect

Tor Strict Nodes Values Not Working at Facebook

Reported by: bugwhat Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: facebook, strict nodes fail
Cc: traumschule, trac-dip-importer, ggus Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Upon assigning strict nodes values in config, when a user visits Facebook over Tor, the node gets changed to any random country other then what's specified in the config file.

Child Tickets

Change History (4)

comment:1 Changed 8 months ago by pastly

Facebook uses onion alt-svc headers which confuse Tor Browse's circuit display in a variety of ways.

Please elaborate on all the node selection settings you have configured. E.g. ExitNodes or ExcludeNodes.

I think it's very likely that you believe you're getting an exit relay in a disallowed country because the circuit display is telling you so. But in actuality that node isn't even an exit node and the circuit is an onion service circuit. Thus the only bug that might exist is in the circuit display (which of the X circuits open for this domain should it display?) and there's likely already ticket(s) for that.

comment:2 Changed 8 months ago by pili

Is this the same as #27590?

comment:3 Changed 8 months ago by bugwhat

Note that I am not visiting the official .onion address of Facebook here.
I am making a direct access over the standard web address.

Only added two extra lines to config as following:

ExitNodes {SE} #Sometimes {FR} too.
StritctNodes 1

Most of the time exit relay switches to DE automatically. And also if I try to login over such nodes (anything other than Sweden/France), I get locked out of Facebook as login is tied up with above countries.

Now this is something different and a completely different project, but on Whonix (https://www.whonix.org), this issue is not present.

comment:4 Changed 8 months ago by pili

Component: Webpages/WebsiteApplications/Tor Browser
Owner: changed from hiro to tbb-team
Note: See TracTickets for help on using tickets.