Bridge, Guard, Middle, and Exit: Understanding the Different Roles Inside the Tor Network

When people first learn about Tor, terms such as Bridge, Guard relay, Middle relay, and Exit relay can sound like different “levels” of the same system. That interpretation is only partly correct. These terms actually describe different roles within Tor’s network architecture. Some roles are closely related, while others exist …

What Is an Onion Server? How a Server Can Be Publicly Reachable Without Revealing Its IP Address

When people first encounter Tor Onion Services, one detail often seems almost paradoxical: How can a server be reachable from anywhere on the Internet if users do not know its IP address? On the ordinary Internet, a public server normally has to reveal where it is. A website such as: …

Tor Browser 到底能保护什么?从 IP 隐藏、浏览器指纹到匿名身份隔离

提到 Tor Browser,很多人的第一印象是“隐藏 IP”“匿名上网”或者所谓“暗网浏览器”。这些描述并不能算错,却远远没有解释 Tor Browser 真正特殊的地方。 Tor Browser 最重要的价值并不是简单地给浏览器套上一层代理,而是同时解决两个长期存在的隐私问题: 换句话说,Tor Browser 试图同时回答两个问题: 网站能不能知道连接来自哪里? 以及: 即使不知道 IP,网站还能不能认出这是同一个浏览器? 理解这两个问题,才能真正理解 Tor Browser 的隐私设计。 一、Tor Browser 并不是 Chromium 浏览器 Tor Browser 基于 Mozilla Firefox ESR(Extended Support Release),但并不是简单地在 Firefox 中安装一个 Tor 代理插件。 Tor Project 在 Firefox ESR 基础上加入了大量专门针对匿名通信、浏览器指纹、数据隔离和信息泄漏的修改,因此 Tor Browser 与普通 Firefox 在隐私模型上存在明显区别。Tor Project …

Arch Linux LTS 内核更新后重新构建 i915:修复 Intel MacBook eDP 面板电源周期问题

在部分 Intel MacBook 上运行 Linux 时,内置 eDP 液晶面板可能存在一个较隐蔽的兼容性问题:系统关屏、休眠、重新点亮屏幕或重新初始化显示链路时,面板的断电—重新上电周期过短,可能导致白屏、绿屏、显示异常,甚至需要重新关机才能恢复。 在特定硬件上,通过延长 Intel i915 驱动中的 Panel Power Cycle Delay 可以显著改善这一问题。 本文记录一次 Arch Linux LTS 内核从旧版本升级到新版本后,重新为新内核构建自定义 i915 模块,并将 eDP 面板最低电源周期固定为 2000 ms 的完整维护过程。 重点不在于重新编译整个 Linux 内核,而是: 在保持 Arch 官方内核不变的情况下,仅重新编译带有补丁的 i915 模块,并让它优先于官方 i915 被加载。 一、为什么每次内核升级后都需要重新构建 i915 假设系统原本运行: 系统更新后安装: 虽然两者都属于 Linux 6.18 LTS,但对于内核模块而言,它们是两个不同的 Kernel Release。 自定义编译的: …

Tor Browser on Arch Linux: Installation, Isolation, and the Architecture Behind It

Tor Browser is often described as “Firefox routed through Tor,” but that description is incomplete. Its design is based on a broader security model in which the browser engine, Tor client, browser profile, anti-fingerprinting protections, privacy defaults, update mechanism, and runtime data are treated as parts of one controlled environment. …