TheTorProject / gettor

GetTor - a Tor Browser distribution system
https://gitweb.torproject.org/gettor.git
Other
106 stars 40 forks source link

Simple way of getting Tor using the Internet Archive's Wayback Machine #16

Closed ghost closed 7 years ago

ghost commented 7 years ago

One should first save the torproject.org main website using,

https://web.archive.org/save/https://www.torproject.org/

Then one should locate the URL of the download page, and save it using,

https://web.archive.org/save/https://www.torproject.org/download/download-easy.html.en

Then clicking on "Download" button should load the download process and FF says that the download's URL comes from archive.org, in other words one should block archive.org for this method to not work.

I tested it at my home by blocking torproject.org on my router, the download started nevertheless.

ghost commented 7 years ago

Tested it, and according to developer tools' Network tab, it is being downloaded from archive.org.

ghost commented 7 years ago

@Shifterovich Thanks for testing!

mrphs commented 7 years ago

@Shifterovich are you sure it's being downloaded from archive.org? When I tried it eventually redirected the request to dist.torproject.org

Another caveat of this method is that users might get an old and vulnerable version this way.

ghost commented 7 years ago

@mrphs It just says that the URL redirects to dist.torproject.org/....., but archive.org still acts like a proxy between you and dist.torproject.org. I even tried blocking dist.torproject.org and it worked.

Another caveat of this method is that users might get an old and vulnerable version this way.

Which is why you save it.

ilv commented 7 years ago

@e5f3c2ea895af0f27667 Thanks, this looks interesting. As I mentioned in tor-talk, you can actually generate a direct download link depending on the latest version. We could send those links via GetTor and update it every time there is a new version of Tor Browser released.

ghost commented 7 years ago

Thanks @ilv

Ideally I think it would be better to launch a Tor Project archive account from which all other Tor versions are uploaded and GetTor would send the latest version, this would mitigate any possible problems with the link Tor Site<->Wayback Machine<->User.

ilv commented 7 years ago

Moving tickets to trac: https://trac.torproject.org/projects/tor/ticket/22665