Downloading Files and TOR

When browsing with Tor (I use The Browser Bundle) my friend e-mails me a .doc file, or a .pdf if I try to download it I get the message "An external application is needed which could compromise your identity." If I right click "save link as" the message still appears. This happens on any website if I try to download any file, .exe, a .zip, even a .jpg file this message appears.

I don't understand why TOR is needing an external application? Is this a glitch? Is there any way to test if it is truly killing my anonymity?

Any feedback is greatly appreciated!

 

It means that, if you download an infected file, when you run it, that file could "call home" and so reveal your IP, because it wont use TOR. It is only a warning, not a positive detection. Be sure your file is safe.

p.s.
why are you using TOR on your email? Since you have probably loged in your email with true IP before, login into email account with TOR is now useless. Your TOR session could be connected with previous true IP thrue comparing login info.

 

Ok I understand, I wish the warning stated that it was only a warning, it seems completely like positive detection.

TOR is used on a new e-mail, even if they did have my true IP I don't care. I use TOR now in preparation for the new bills floating on the hill.

 

Hi notthatguy,

Make sure that you distinguish between using a separate browser profile for Tor use vs regular non-Tor use in a different browser profile, i.e. when using the Tor profile your downloads are anonymous, but without the Tor profile, your interaction is not anonymous.

-- Tom

 

IMO One should not use the same Browser for Anon as they use for personal "Period" regardless of switching profiles.

He said he was using Tor Browser Bundle...No need for separate Profiles.......IMO is what people should be using unless they know exactly how to secure an Installed browser for use with Tor.

 

Hi Warlockz,

I agree with you that a separate browser is to be preferred.

Securing an installed browser has mostly to do with the pref.js file in a browser's user profile - i.e. the setting of values (at least with regard to Firefox) in the about:config file.

I once did this by creating a firefox-lite profile (essentially stripped down - no bookmarks, cookies, etc.) and modified the prefs.js by substituting the about:config values from the precursor to TAILS aka Incognito into an iceweasel browser user profile (variant of Firefox by Gnu folks) for use on a Kubuntu system with Tork (i.e. alternative to Vidalia). I assume the same could be done with the TAILS ~amnesia prefs.js profile file to any other Firefox variant - i.e. remember that the profile directory (with the user preferences, bookmarks, cookies, etc) is separate from the browser's executable which essentially remains untouched - so it is not specifically securing the browser per se, but securing the user's profile for use with a particular browser.

-- Tom

 

Using a download manager would be out of the question as far as I know. Just thought I'd throw that in there.

 

Hi caspian,

That is not necessarily so, whereas, if one uses a totally integrated Tor release such as TAILS, then all of the apps (even a download manager) is directed through Tor, for example, if DownThemAll! (Firefox add-on) were integrated, the TAILS developers would make sure that their browser (a Firefox derivative) would only use Tor to get the download. By comparison, it uses the Save As feature (through Tor) to download from a destination web site.

Note: I have never used any released Tor bundles from the Tor Project, so I am not familiar enough with them to say one way or another.

-- Tom