LinuxAutist
kiwifarms.net
- Joined
- Aug 20, 2022
As some of you deviants may know, the Tor browser is pretty anti-Javascript. This is for good reason. Javascript can be used to easily track users of websites and has been shown to be used for this purpose. For more resources on this, take a look at https://browserleaks.com.
## Broken things
XenFono (The forum software that Kiwifarms is based on) uses Javascript sparingly, thankfully. Only real things that are affected by disabling Javascript are logging in (I wasn't able to log in on the "Safest" security mode on the Tor browser), posting new threads and comments, and oddly the logo. As far as I know, the logo is SVG, which should be able to be displayed using only PHP. This isn't the worst thing, the site still functions mostly correctly.
## Bandwidth
A thing I can't really excuse is the large amount of bandwidth this site uses. It's mostly for inconsequential stuff, too. I appreciate the background image, I really do, but for the time being, we should focus on limiting the amount of bandwidth used. This will improve site load times (which is crucial on Tor).
## Captcha
If one looks at other Tor sites, there does appear to be a captcha system available. If one visits Dread, the Tor Reddit equivalent, you are met with first a line to get in. After waiting however, there is a captcha that the site uses. Because this works on all security settings of the Tor browser, it can be safely assumed that this captcha uses PHP only. I would probably suggest using this as a Captcha for now, as the current one is quite easy to defeat.
Thanks for reading. I'm aware that none of these suggestions will be implemented in the coming week, as @Null is busy with family stuff, but I thought I should air my thoughts if this site turns to Tor-only, if even for a little bit.
## Broken things
XenFono (The forum software that Kiwifarms is based on) uses Javascript sparingly, thankfully. Only real things that are affected by disabling Javascript are logging in (I wasn't able to log in on the "Safest" security mode on the Tor browser), posting new threads and comments, and oddly the logo. As far as I know, the logo is SVG, which should be able to be displayed using only PHP. This isn't the worst thing, the site still functions mostly correctly.
## Bandwidth
A thing I can't really excuse is the large amount of bandwidth this site uses. It's mostly for inconsequential stuff, too. I appreciate the background image, I really do, but for the time being, we should focus on limiting the amount of bandwidth used. This will improve site load times (which is crucial on Tor).
## Captcha
If one looks at other Tor sites, there does appear to be a captcha system available. If one visits Dread, the Tor Reddit equivalent, you are met with first a line to get in. After waiting however, there is a captcha that the site uses. Because this works on all security settings of the Tor browser, it can be safely assumed that this captcha uses PHP only. I would probably suggest using this as a Captcha for now, as the current one is quite easy to defeat.
Thanks for reading. I'm aware that none of these suggestions will be implemented in the coming week, as @Null is busy with family stuff, but I thought I should air my thoughts if this site turns to Tor-only, if even for a little bit.