Re: How does TOR deal with mac addresses

2010-03-29 Thread Faraaz Damji

On 10-03-29 1:07 AM, Simon Ruderich wrote:

On Sat, Mar 27, 2010 at 11:03:09PM -0400, Faraaz Damji wrote:

Since he in Marco's original post referred to the client's ISP,
just to clarify, your ISP can't even see leaked data sent through
Tor.  It would be encrypted before being sent through the Tor
network.


Just to clarify,  you can leak DNS requests with a faulty setup
which _can_ be seen by your ISP.


Sorry, I was wrong on this; I was thinking about a smaller subset of leaks.

-Faraaz

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: How does TOR deal with mac addresses

2010-03-28 Thread Jim



Faraaz Damji wrote:

On 10-03-27 8:03 PM, Simon Ruderich wrote:

On Sat, Mar 27, 2010 at 08:00:44PM +0530, emigrant wrote:

On Fri, 2010-03-26 at 19:48 +0100, Marco Predicatori wrote:

If you use Tor correctly, he can't figure out what site you
are connecting to, and that's the whole point.

thanks for the reply,
what do you mean by using Tor correctly?

If Tor is not correctly used you can still leak information
regarding your identity. See this link on the main Tor page:
https://www.torproject.org/download.html.en#Warning


Since he in Marco's original post referred to the client's ISP, just 
to clarify, your ISP can't even see leaked data sent through Tor.  It 
would be encrypted before being sent through the Tor network.


I believe what you say is technically true but potentially misleading. 
The operative phrase in your statement is 'leaked' data sent through 
Tor.  Yet much of the potential for leaked data that is warned about in 
that link is *not* sent through Tor (as I understand it).  This is (part 
of) the hazard of using things like Flash, Java, PDF plugins, etc.  To 
the extent these extensions bypass Tor, then the ISP *will* be able to 
see the leaked data.


As always, if I misunderstand, I am willing to learn ...

Jim
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: How does TOR deal with mac addresses

2010-03-28 Thread Simon Ruderich
On Sat, Mar 27, 2010 at 11:03:09PM -0400, Faraaz Damji wrote:
 Since he in Marco's original post referred to the client's ISP,
 just to clarify, your ISP can't even see leaked data sent through
 Tor.  It would be encrypted before being sent through the Tor
 network.

Just to clarify,  you can leak DNS requests with a faulty setup
which _can_ be seen by your ISP.

Simon
-- 
+ privacy is necessary
+ using gnupg http://gnupg.org
+ public key id: 0x92FEFDB7E44C32F9


pgpJaJEP0lZdB.pgp
Description: PGP signature


Re: How does TOR deal with mac addresses

2010-03-27 Thread emigrant
On Fri, 2010-03-26 at 19:48 +0100, Marco Predicatori wrote:
 If you use Tor correctly, he can't figure out what site you
 are connecting to, and that's the whole point.
 

thanks for the reply,
what do you mean by using Tor correctly?

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: How does TOR deal with mac addresses

2010-03-27 Thread Simon Ruderich
On Sat, Mar 27, 2010 at 08:00:44PM +0530, emigrant wrote:
 On Fri, 2010-03-26 at 19:48 +0100, Marco Predicatori wrote:
 If you use Tor correctly, he can't figure out what site you
 are connecting to, and that's the whole point.

 thanks for the reply,
 what do you mean by using Tor correctly?

If Tor is not correctly used you can still leak information
regarding your identity. See this link on the main Tor page:
https://www.torproject.org/download.html.en#Warning

Hope this helps,
Simon
-- 
+ privacy is necessary
+ using gnupg http://gnupg.org
+ public key id: 0x92FEFDB7E44C32F9


pgpuPYcRxxqie.pgp
Description: PGP signature


Re: How does TOR deal with mac addresses

2010-03-27 Thread Faraaz Damji

On 10-03-27 8:03 PM, Simon Ruderich wrote:

On Sat, Mar 27, 2010 at 08:00:44PM +0530, emigrant wrote:

On Fri, 2010-03-26 at 19:48 +0100, Marco Predicatori wrote:

If you use Tor correctly, he can't figure out what site you
are connecting to, and that's the whole point.


thanks for the reply,
what do you mean by using Tor correctly?


If Tor is not correctly used you can still leak information
regarding your identity. See this link on the main Tor page:
https://www.torproject.org/download.html.en#Warning


Since he in Marco's original post referred to the client's ISP, just 
to clarify, your ISP can't even see leaked data sent through Tor.  It 
would be encrypted before being sent through the Tor network.


Leaked data may compromise your anonymity if sniffed by an exit node, or 
by any intermediate router on the internet between the exit node and the 
destination.


***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: How does TOR deal with mac addresses

2010-03-26 Thread Al MailingList
Where exactly do you think the MAC address would get recorded? Your
MAC Is only sent on your local LAN segment? i.e. your MAC only gets as
far as your home router, and then your home router's MAC only gets as
far as the ISP's end point... etc...


On Fri, Mar 26, 2010 at 5:50 PM, emigrant fromwindowstoli...@gmail.com wrote:
 During ARPs the mac address would get recorded isn't it?
 So how does TOR protect anonymity with regard to mac addresses?

 Thank you very much.

 ***
 To unsubscribe, send an e-mail to majord...@torproject.org with
 unsubscribe or-talk    in the body. http://archives.seul.org/or/talk/

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: How does TOR deal with mac addresses

2010-03-26 Thread emigrant
On Fri, 2010-03-26 at 18:07 +, Al MailingList wrote:
 and then your home router's MAC only gets as
 far as the ISP's end point... etc...
 
you mean, the ISP would get my home routers mac address?
if so that would be like he knows me very well.

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: How does TOR deal with mac addresses

2010-03-26 Thread Andrew Lewman
On Fri, 26 Mar 2010 23:20:40 +0530, emigrant fromwindowstoli...@gmail.com 
wrote:

:During ARPs the mac address would get recorded isn't it?
:So how does TOR protect anonymity with regard to mac addresses?

Tor works at the tcp layer, not the layers below it.

-- 
Andrew Lewman
The Tor Project
pgp 0x31B0974B

Website: https://www.torproject.org/
Blog: https://blog.torproject.org/
Identi.ca: torproject
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: How does TOR deal with mac addresses

2010-03-26 Thread Seth David Schoen
emigrant writes:

 On Fri, 2010-03-26 at 18:07 +, Al MailingList wrote:
  and then your home router's MAC only gets as
  far as the ISP's end point... etc...
  
 you mean, the ISP would get my home routers mac address?
 if so that would be like he knows me very well.

In the message you're replying to, the ISP means your ISP,
not some other ISP.  It's true that your ISP knows your home
router's MAC address.  Other ISPs don't.

-- 
Seth Schoen
Senior Staff Technologist sch...@eff.org
Electronic Frontier Foundationhttp://www.eff.org/
454 Shotwell Street, San Francisco, CA  94110 +1 415 436 9333 x107
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: How does TOR deal with mac addresses

2010-03-26 Thread Marco Predicatori
emigrant, on 03/26/2010 07:19 PM, wrote:
 On Fri, 2010-03-26 at 18:07 +, Al MailingList wrote:
 and then your home router's MAC only gets as
 far as the ISP's end point... etc...

 you mean, the ISP would get my home routers mac address?

If you want to have a data link, yes. :-)

 if so that would be like he knows me very well.

Probably he even knows your street address. Don't you get billed for
your connection? So why would you worry about him knowing your MAC
address? If you use Tor correctly, he can't figure out what site you
are connecting to, and that's the whole point.

-- 
http://www.predicatori.it/marco/

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: How does TOR deal with mac addresses

2010-03-26 Thread Michael Cozzi

On 3/26/2010 2:27 PM, Seth David Schoen wrote:

In the message you're replying to, the ISP means your ISP,
not some other ISP.  It's true that your ISP knows your home
router's MAC address.  Other ISPs don't.
   


As an aside,

This is true, assuming the upstream protocol uses ethernet 
signaling, wasn't there some old point to point protocols where the MAC 
was ignored?


I seem to remember something like that. I know ATM, FDDI, 
Bluetooth, and PPP/PPPOE use MAC addresses. SLIP, if my old brain is 
functioning, did not.


I think there were others too. But I'm too old and salty to 
remember them all.


Xerox sure got some mileage off of ethernet addressing huh? I'm 
wondering if they made any money on it.


--
Michael Cozzi

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/