Is Tor Browser safe?

Question

Accepted Answer

Tor Browser is critical risk. When you click Connect, the extension sets a browser-wide proxy rule that sends every HTTP and HTTPS request through a server at goodextensions.mooo.com — infrastructure controlled by the extension developer, not the Tor network. The proxy host is fetched from the developer's config endpoint each time the popup opens, meaning the destination can be changed remotely at any time. Our dynamic analysis captured the torconfig.php call and confirmed the PAC script was activated after clicking Connect. Each time you open the extension popup, it sends a unique identifier — generated when you first install the extension and stored permanently in your synced browser storage — to the developer's server at goodextensions.mooo.com. This occurs before you click Connect and regardless of whether you ever activate the proxy. Our dynamic analysis confirmed the same UUID appeared in requests across multiple popup opens and sessions. 1 further issue was flagged.

Is Tor Browser (Unofficial port for Chrome) safe?

Findings