short notes about this list, the tor network and not getting phished. no newsletter, no comments, no rss bloat - it updates when it updates.
Tor Browser 16.0, released October 29, is the first stable build on Firefox ESR 153. It adds native ARM64 Linux support, rebuilds the settings pages, and offers an opt-in control that hides page titles from other software.
Fake "Airport_Free_WiFi" hotspots and counterfeit captive portals remain a real travel risk. Australian prosecutions for evil-twin Wi-Fi at airports and on domestic flights show what the trick harvests, what HTTPS stops, and what it does not.
Ransomware brands advertise for affiliates on underground forums and Telegram with revenue splits, rules pages and vetting interviews. The recruitment spam that follows every takedown shows where the real scarcity lies: not in code, but in operators.
Since Tor 0.4.8, onion services can demand a transparent proof-of-work at the introduction step when overloaded, queuing clients by the effort they spent. How the Equi-X puzzle and its priority queue work, and where the defense still loses to well-funded attackers.
In May 2019, the darknet news site DeepDotWeb was seized and its two administrators were charged with laundering the bitcoin kickbacks the site earned for referring buyers to markets. Prihar pleaded guilty in March 2021 and was sentenced to more than eight years in January 2022, a case that drew a line between covering darknet markets and profiting from them.
Device-code phishing tricks victims into entering an attacker's code at a genuine login page and approving the sign-in themselves, handing over a working session without a password. How the technique defeats MFA, the red flags, and the defences that hold up.
The meek bridge smuggles Tor traffic inside HTTPS requests to a major CDN: one domain in the TLS handshake, another in the Host header. Google and Amazon shut fronting down in 2018; meek-azure survives on Microsoft's CDN, slower and costlier than the alternatives, but reachable when little else is.
Every hour, nine directory authorities vote on the consensus, Tor's shared view of which relays exist and how much traffic each may carry. Who runs them, how bandwidth scanners feed them, and what happens when they disagree.
What stolen card data, bank logins, ID scans and stealer logs list for in 2026, why these indexes measure asking prices rather than completed sales, and what pushes the numbers up or down.
Attackers holding a valid password can flood a phone with approval prompts until someone taps approve. How MFA fatigue works, what the Uber and Cisco breaches showed, and why number matching and hardware keys change the outcome.
AiTM phishing kits and infostealer logs increasingly trade in authenticated sessions rather than passwords: a stolen session cookie is already past the MFA wall. A look at how session hijacking works and which defenses actually hold.
obfs4 is fast and proven but hard to distribute, Snowflake rides on volunteer WebRTC proxies, and WebTunnel hides Tor inside ordinary HTTPS. How the three mainstream bridge types compare on setup, detectability and throughput in 2026.
