A)

After installing 'torbrowser-launcher' and starting it,
at first run, it tells me something about:

1) It couldn't be verified.
2) I'm possibly under attack.

B)

If I go to 'https://www.torproject.org/' and
check the https-properties in firefox,

It tells me 'The connection is secure',
but there is no Identity-Certification, i.e.
the site 'https://www.torproject.org/' is
wide open to Man-in-the-Middle attacks.

C)
Can anybody tell me, if he/she sees the same
evil phenomenon on his/her 'KDE neon'?

Thanks in advance!

If I click on the "Tor Browser" Menu Item,
it's exactly the same ****.

I apologize, but I think **** is the technologically
correct terminology. I'm being neutral here.
My emotional equilibrium isn't disturbed as yet.

But it will start soon to disintegrate…

The message is:
"Signature Verification failed", etc.

Edit: The asterisks automatically replace a certain "5-1" lttr wrd.

The word is "Excellent KDE Neon Quality"… (EKNQ)

mah, with chrome I have no warnings about potential security risks

The screenshot only shows encryption.
It doesn't show anything else.


Please, compare the difference between a visit to

'https://www.torproject.org/'

and a visit to - for example -

'https://www.apple.com/'.



Apple has OwnerInformation.
TorProject hasn't.

Therefore: Danger of Man-in-the-Middle Vulnerability.

You can see this even by simply looking at the address bars in both
cases. They (Apple and TorProject) differ.

Apple is certified owner-of-site, in addition to only offer encryption.
.

Anybody with verification problems, when starting tor browser?

Or when starting tor browser launcher?

Or both?

I see no difference. except that the apple site has plagued my system with 14 cookies ... but probably I did not understand what I should do, if you explain to me, maybe I can be of help to you

Hi gyanny!

Thanks a lot for Your nice offer.

I have 2 things to say. The 2nd one is my main point.

1. Point: Explanation of https

https does / can do 2 things:

a) encryption
b) identification

For example, if You have an online bank account
(or buy things online at Apple),
it's not enough to have an encrypted connection.

You must be sure, that You are connected to Your
bank or to Apple. To guarantee this, there must not
only be encryption. There must be site-owner identification, too.

Apple has it. TorProject hasn't. (Or it's not configured correctly in
their web server.)

2. Point: How You could help me

a) Start "Software Center"/"Discover"
b) Install "Tor Browser Launcher Settings"
c) Start it (under Applications=>Internet)
d) First thing it does: Self-Update
e) My result: "Signature Verification failed"
f) No Tor. THE END.

What's Your result?

ah ok, let me have time to do it, I do not know if I can today, I'm going out, but certainly, as soon as possible, I do and say to you

The same here

Thanks a lot, again.

Either we are both under attack
or there's another flaw in KDE neon's packages.


At least, we can make an educated guess now:

Don't use KDE neon in Saudi-Arabia or Iran.
It might kill You.

And: This is not an operating system for journalists.
Nor for Human Rights activists.

I experience the same problems. Even if I delete the program and download straight from TOR, I can't seem to get it to install correctly. Any other ideas? Thanks all. I learn something new everyday worldwide.

Thanks for Your help and additional confirmation.

Maybe, TorProject suffers a lack of professionality,
or "our" governments and Internet Service Providers
love us a little too much.

Is it time now for being paranoid and
becoming a little bit conspiracy-theoretical?

Or is it too late, already?