Re: Security Focus story

2007-03-09 Thread Eugen Leitl
On Fri, Mar 09, 2007 at 08:37:58AM +0100, Alexander W. Janssen wrote: If TOR would legally qualify as an ISP, we're in deep trouble. We don't provide access to the Internet, and we're not charging for it. Last time I looked the data retention laws also allowed a loophole for very small

Re: Warnings on the download page

2007-03-09 Thread Roger Dingledine
On Thu, Mar 08, 2007 at 07:17:09PM -0600, Mike Perry wrote: The current simplest advice I can give people is to remove all plugins: http://tor.eff.org/download.html.en#Warning Do you have any suggestions on safe ways to back off from that? I have a couple more points - the second browser

Re: Security Focus story

2007-03-09 Thread Alexander W. Janssen
On 3/9/07, Eugen Leitl [EMAIL PROTECTED] wrote: On Fri, Mar 09, 2007 at 08:37:58AM +0100, Alexander W. Janssen wrote: If TOR would legally qualify as an ISP, we're in deep trouble. We don't provide access to the Internet, and we're not charging for it. Last time I looked the data retention

Re: Warnings on the download page

2007-03-09 Thread Eugen Leitl
On Thu, Mar 08, 2007 at 08:33:29PM -0600, H D Moore wrote: Seems like two big items I need to add to decloak are Flash and the shiny no-proxy Java connection mode (which seems to apply to TCP sockets only). What does the current Torpark ship with? It would seem like a hardened version of

Re: Warnings on the download page

2007-03-09 Thread Mike Perry
Thus spake Roger Dingledine ([EMAIL PROTECTED]): Also, isn't Portable Firefox Windows-only? Or am I confused? True, just going for what I assume is the majority of our userbase first. Especially people who are going to have difficulty with this stuff. Was also in a rush and didn't check out the

Re: Building tracking system to nab Tor pedophiles

2007-03-09 Thread cesare VoltZ
The approaches suggested won't work if you use Firefox with NoScript set to disable JavaScript, Java, Flash and any other plugins. Agreed. Firefox work better on security site nor IE is a big hole. Cesare

Re: Building tracking system to nab Tor pedophiles

2007-03-09 Thread Marco A. Calamari
On Wed, 2007-03-07 at 14:02 -0500, Michael Holstein wrote: I've seen a VM that routes all traffic over TOR, invisibly to the O/S. (Not sure what they do about UDP). Developed at Georgia Tech. One better .. TOR on OpenWRT on a Linksys router. Tor at the *hardware* level. WRT and

Re: Warnings on the download page

2007-03-09 Thread Freemor
I've been watching this thread with some interest and as the Talk of mis-onfigured browsers and mis-behaving plug-ins grew I found myself thinking that there must be an easier way to fix the problem. It occured to me that what is needed (at least until a more permenant solution can be found) is a

Re: Warnings on the download page

2007-03-09 Thread lists
On 9 Mar 2007 03:21:05 -0600, Mike Perry wrote: Just tested windows media player 10 plugin, which I believe is installed by default on pretty much every windows box.. It ignores proxy settings. Great. I found most applications on a Windows system respect the settings configured under

Re: Warnings on the download page

2007-03-09 Thread H D Moore
This would have to support all sorts of variations for media files: document.location = something.ext meta refresh URL=something.ext iframe src=something.ext frame src=something.ext img src=something.ext (some cases) bgsound=something.ext ..etc Seems easier to lock down the browser and prevent

Re: Warnings on the download page

2007-03-09 Thread light zoo
--- Freemor [EMAIL PROTECTED] wrote: so my questions are: 1 - Can a modified actions file be made that would strip all Java/javascript, flash, steaming media, etc. From looking at the Privoxy documentation it looks possible so far (but I'm no privoxy guru) (Note: Mr. Keil is the

Re: Boulder Tech report on low-resource routing attacks on Tor

2007-03-09 Thread Eugene Y. Vasserman
Hi all, I've been thinking about how exit and entry nodes controlled by the same adversary can easily determine if they are in the same circuit due to the predictable nature of circuit set-up (timing). Well, what about altering that? Perhaps Tor nodes should form long-lived exploratory circuits

Re: Removing 1 modular exponentiation

2007-03-09 Thread Watson Ladd
James Muir wrote: The following recent preprint deals with the subject of this thread: A. Kate, G. Zaverucha and I. Goldberg Pairing-Based Onion Routing pdf CACR 2007-08 http://www.cacr.math.uwaterloo.ca/techreports/2007/cacr2007-08.pdf -James Nice. Patents are going to be an issue

Re: need help with Uninstall for Mac

2007-03-09 Thread phobos
On Fri, Mar 09, 2007 at 01:40:28AM -0500, [EMAIL PROTECTED] wrote 0.4K bytes in 16 lines about: : I installed the bundled package posted on the site last week. I don't : know the Terminal well but this is what I get back... Which bundle? And does the uninstall script exist in

Re: need help with Uninstall for Mac

2007-03-09 Thread Jason Edwards
It was the Mac OS X 10.4 (Tiger) Universal Binary 0.1.1.29 bundle. When I open OSX/Library/Tor I do not see an uninstall script. Any suggestions? Jay [EMAIL PROTECTED] wrote: On Fri, Mar 09, 2007 at 01:40:28AM -0500, [EMAIL PROTECTED] wrote 0.4K bytes in 16 lines about: : I

Re: Removing 1 modular exponentiation

2007-03-09 Thread Watson Ladd
Fergie wrote: -- James Muir [EMAIL PROTECTED] wrote: The following recent preprint deals with the subject of this thread: A. Kate, G. Zaverucha and I. Goldberg Pairing-Based Onion Routing pdf CACR 2007-08 http://www.cacr.math.uwaterloo.ca/techreports/2007/cacr2007-08.pdf I'm

Slightly OT: 'Big brother' surveillance makes waves in Sweden

2007-03-09 Thread xiando
Almost On Topic (related, anyway): http://www.thelocal.se/6619/20070307/ A far-reaching wiretapping programme proposed by Sweden's government to defend against foreign threats, including monitoring emails and telephone calls, has stirred up a fiery debate in the past few weeks, with critics

How to run Tor from USB with Linux (Kubuntu 6.10)

2007-03-09 Thread light zoo
Hi, Forgive the naive nature of this question... I have compiled Tor and I want to run it off my USB HDD but I'm not sure how. Should I just copy over the build directory ~/tor-0.1.2.10-rc/? If so what are essential files? What should the DataDirectory option be set to? Regards,