notes from running a 24/7 tor client: outages, weird latency spikes and other things that make badges jump.
Since Tor 0.4.8, onion services can demand a transparent proof-of-work at the introduction step when overloaded, queuing clients by the effort they spent. How the Equi-X puzzle and its priority queue work, and where the defense still loses to well-funded attackers.
The meek bridge smuggles Tor traffic inside HTTPS requests to a major CDN: one domain in the TLS handshake, another in the Host header. Google and Amazon shut fronting down in 2018; meek-azure survives on Microsoft's CDN, slower and costlier than the alternatives, but reachable when little else is.
Every hour, nine directory authorities vote on the consensus, Tor's shared view of which relays exist and how much traffic each may carry. Who runs them, how bandwidth scanners feed them, and what happens when they disagree.
obfs4 is fast and proven but hard to distribute, Snowflake rides on volunteer WebRTC proxies, and WebTunnel hides Tor inside ordinary HTTPS. How the three mainstream bridge types compare on setup, detectability and throughput in 2026.
Standard, Safer and Safest switch whole classes of browser behaviour on or off. What each Tor Browser level really disables, which level fits which task, and why a change only fully applies after a restart.
Tails 7.15, out since 13 October 2026, bundles Tor Browser 15.0.25, Tor 0.4.9.14 and updated firmware packages. A look at what routine point releases actually carry, and how to upgrade a USB stick without losing Persistent Storage.
Tor Browser 15.0.25, released on 12 October 2026, backports security fixes from Firefox 158 onto the Tor userbase, alongside updates to Tor 0.4.9.14, NoScript and OpenSSL. Here is what the release actually changes, why it lands in step with Mozilla's advisory, and the update routine that matters.
In a 14-page submission to the European Commission for the 2027 EU Counterfeit and Piracy Watch List, Spain's football league asked for four consumer VPN providers to be named. The stated basis is not VPN use itself but affiliate marketing guides that instruct users to bypass geo-blocks and court-ordered blocking.
The European Parliament failed to block the revival of the EU's temporary voluntary message-scanning regime on July 9, 2026 - 314 MEPs opposed it, but the absolute-majority threshold was never reached. With the permanent CSAR talks resuming in September, the fight over scanning and encryption directly shapes the future of anonymity tools.
Telegram has applied to ICANN for the .gram top-level domain, turning usernames into resolvable domains with AI-generated sites behind them. Coming weeks after t.me was suspended under sanctions pressure, the move highlights how infrastructure is drifting away from onion services toward DNS that regulators can actually touch.
The reborn Kimwolf v7 botnet resolves its command servers through Ethereum Name Service across five shuffled endpoints, then falls back to a fixed Tor hidden service if every one of them fails. It is a case study in why onion services remain the most seizure-resistant C2 channel criminals have.
A race condition fixed in Tor 0.4.9.11 allowed a hostile rendezvous point to man-in-the-middle an onion service connection under rare timing conditions. We explain the bug, why the 0.4.8 sunset makes upgrading urgent, and what it means for operators.
