Re: Please RTM!...Re: Please don't recommend Tor Button!

2007-03-29 Thread JT 
So that means, that when I click on a camouflaged ftp link by accident
it will not do reveal my IP?
-- 
  JT
  [EMAIL PROTECTED]

-- 
http://www.fastmail.fm - mmm... Fastmail...

Re: Please RTM!...Re: Please don't recommend Tor Button!

2007-03-29 Thread Danny Ledesma 

through menu Tools/Add ons/

On 3/29/07, JT [EMAIL PROTECTED] wrote:

Hrrrmmm  there are preferences for Tor button?
How can they be accessed?
--
  JT
  [EMAIL PROTECTED]

--
http://www.fastmail.fm - Email service worth paying for. Try it for free





--
--

Please RTM!...Re: Please don't recommend Tor Button!

2007-03-28 Thread light zoo 

--- JT [EMAIL PROTECTED] wrote:

 Hi,
 
 recommending the Tor Button is a security/anonymity
 hazard. Clicking on
 the Tor button will automatically remove the ftp
 and gopher proxy in firefox for example. 

These are not used with Tor and that is why the port
is zero.  TorButton is a great extension, it is
configured correctly and the Tor devs. recommend it,
as do I.

Please read up on Tor before sending emails to the
list, it can confuse people.

Regards


 

We won't tell. Get more on shows you hate to love 
(and love to hate): Yahoo! TV's Guilty Pleasures list.
http://tv.yahoo.com/collections/265

Re: Please RTM!...Re: Please don't recommend Tor Button!

2007-03-28 Thread light zoo 

--- Fabian Keil [EMAIL PROTECTED] wrote:
 Could you post a pointer to the part of the Tor
 documentation that you're referring to?

If I have time today, yes. There is a wiki entry
stating those need to be set to break. 

I was referring to the fact it is suggested is set
those so they'll break, I wasn't specifically
referring to TorButton.  

 The relevant parts of the documentation that
 I'm aware of recommend to set the gopher and
 ftp proxy settings to Privoxy, to make sure
 those requests fail instead of bypassing Tor:

Maybe I was overly harsh then, I can see where the
confusion may came from if someone read these
sections.  If one thought you _had_ to follow the old
directions above then yes, it would seem like
TorButton is mis-configured.

 If the Tor button extension would indeed
 remove these settings permanently, I'd consider
 JT's concerns valid.

TorButton handles these correctly and does not route
them into Privoxy, it just breaks them with a zero
port...which is what was recommended by the Tor devs.
when Scott Squires when building TorButton (as far I
as remember).  

There is no need set those up to go into Privoxy if
the port is zero.

Regards




 

Expecting? Get great news right away with email Auto-Check. 
Try the Yahoo! Mail Beta.
http://advision.webevents.yahoo.com/mailbeta/newmail_tools.html

Re: Please RTM!...Re: Please don't recommend Tor Button!

2007-03-28 Thread Fabian Keil 
light zoo [EMAIL PROTECTED] wrote:

 --- Fabian Keil [EMAIL PROTECTED] wrote:

  If the Tor button extension would indeed
  remove these settings permanently, I'd consider
  JT's concerns valid.
 
 TorButton handles these correctly and does not route
 them into Privoxy, it just breaks them with a zero
 port...which is what was recommended by the Tor devs.
 when Scott Squires when building TorButton (as far I
 as remember).  
 
 There is no need set those up to go into Privoxy if
 the port is zero.

Is that a guess or did you actually verify that?
If you did, which Firefox version were you using?

At least for:
Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.1.2) Gecko/20070306 
Firefox/2.0.0.2
proxy port 0 means ignore the proxy IP and use a direct
connection. I would be very surprised if the behaviour
would be platform-dependent.

Fabian


signature.asc
Description: PGP signature