Re: another DirPort DoS attacker

2008-10-09 Thread Scott Bennett
On Wed, 8 Oct 2008 23:34:00 -0400 Roger Dingledine [EMAIL PROTECTED] wrote: On Tue, Sep 02, 2008 at 08:20:47AM -0500, Scott Bennett wrote: A short time ago, I found that 212.205.53.212 had several hundred open TCP connections to my tor server's DirPort, and very little relay traffic

Geode: some more headaches for TorButton? :-P

2008-10-09 Thread Marco Bonetti
Link bounced from /.: http://labs.mozilla.com/2008/10/introducing-geode/ Looks like the upcoming versions of firefox will ship the support for W3C geolocation specification: what's better for a tor attacker to ask directly to the browser where its user lives? ;-) I'm quite confident there'll be a

Re: same first hops

2008-10-09 Thread Anon Mus
Scott Bennett wrote: Well, technically speaking, I guess that's true. However, unless I'm greatly mistaken, the exit end of a circuit will compress any data coming into it to be relayed back to the client and will uncompress anything arriving from the client to be sent out from the

Re: Geode: some more headaches for TorButton? :-P

2008-10-09 Thread Erilenz
* on the Thu, Oct 09, 2008 at 01:11:37PM +0200, Tom Hek wrote: It's really scary when a random website can request your physical location imo.. I really hope you can disable that shit in the new version of Firefox when they include it.. Rather than adding to the speculation, I thought I'd

Re: Geode: some more headaches for TorButton? :-P

2008-10-09 Thread Scott Bennett
On Thu, 9 Oct 2008 07:51:54 -0400 [EMAIL PROTECTED] wrote: On Thu, Oct 09, 2008 at 07:52:10AM -0400, [EMAIL PROTECTED] wrote 0.8K bytes in 18 lines about: : Rather than adding to the speculation, I thought I'd actually test the plugin. : Whenever a site requests your location, your browser

Re: Geode: some more headaches for TorButton? :-P

2008-10-09 Thread Tom Hek
It's really scary when a random website can request your physical location imo.. I really hope you can disable that shit in the new version of Firefox when they include it.. Tom Marco Bonetti wrote: Link bounced from /.: http://labs.mozilla.com/2008/10/introducing-geode/ Looks like the

unsubscribe

2008-10-09 Thread John Mosgrove
unsubscribe me.

Re: same first hops

2008-10-09 Thread Scott Bennett
On Wed, 08 Oct 2008 20:50:28 -0700 F. Fox [EMAIL PROTECTED] wrote: M wrote: Thanx Gregory and F.Fox...understood the concept. Just one note though: Tor (like all current practical low-latency anonymity designs) fails when the attacker can see both ends of the communications channel.

Re: Geode: some more headaches for TorButton? :-P

2008-10-09 Thread Scott Bennett
On Thu, 9 Oct 2008 04:32:16 -0700 (PDT) J B [EMAIL PROTECTED] top-posted: thanks to you guys who helped me unsubscribe. however, note that actually my (yahoo) address has full headers and I dont see any way to unsubscribe, apart from how you guys said to do it. I checked the headers and

Re: Geode: some more headaches for TorButton? :-P

2008-10-09 Thread J B
thanks to you guys who helped me unsubscribe. however, note that actually my (yahoo) address has full headers and I dont see any way to unsubscribe, apart from how you guys said to do it. I checked the headers and there is nothing about it, even under word search. I think these headers only

Re: Geode: some more headaches for TorButton? :-P

2008-10-09 Thread phobos
On Thu, Oct 09, 2008 at 07:52:10AM -0400, [EMAIL PROTECTED] wrote 0.8K bytes in 18 lines about: : Rather than adding to the speculation, I thought I'd actually test the plugin. : Whenever a site requests your location, your browser asks permission to send it, : and also allows you to specify how

Re: unsubscribe

2008-10-09 Thread sigi
Hi John, On Thu, Oct 09, 2008 at 04:15:35AM -0700, John Mosgrove wrote: unsubscribe me. Please write your Mail to [EMAIL PROTECTED] with mailbody including: unsubscribe or-talk btw: When finally will list-subscribers check their mailheaders for this? sigi.

Re: Abuse complaint

2008-10-09 Thread tor-operator
On Tuesday 07 October 2008 14:22:32 Matthew McCabe wrote: Hey- Last night, Time Warner Cable temporarily disabled my account due to an alleged attack coming from my IP address and targeting a server in Europe (Denmark I believe). Below is the e-mail I sent them to respond to the

Re: unsubscribe

2008-10-09 Thread Geoff Down
It would never have occurred to me to check the headers either, so perhaps you are being too hard on them. GD On 9 Oct 2008, at 13:24, sigi wrote: Hi John, On Thu, Oct 09, 2008 at 04:15:35AM -0700, John Mosgrove wrote: unsubscribe me. Please write your Mail to [EMAIL PROTECTED] with

Fwd: unsubscribe PS[offtopic}

2008-10-09 Thread Geoff Down
BTW, Hotmail users with Macs can't reliably access email headers at all, and yes that is stupid of Hotmail but they don't care. Begin forwarded message: From: Geoff Down [EMAIL PROTECTED] Date: 9 October 2008 19:08:35 BST To: or-talk@freehaven.net Subject: Re: unsubscribe Reply-To:

Re: same first hops

2008-10-09 Thread DM
On Oct 8, 2008, at 11:41 PM, Gregory Maxwell wrote: Consider: Nothing prevents you from running multiple tor nodes. A well funded party might run dozens or hundreds. Maybe one day somebody will actually try to analyze this.

Re: unsubscribe

2008-10-09 Thread sigi
On Thu, Oct 09, 2008 at 07:08:35PM +0100, Geoff Down wrote: On 9 Oct 2008, at 13:24, sigi wrote: On Thu, Oct 09, 2008 at 04:15:35AM -0700, John Mosgrove wrote: unsubscribe me. Please write your Mail to [EMAIL PROTECTED] with mailbody including: unsubscribe or-talk btw: When finally will

Re: same first hops

2008-10-09 Thread Scott Bennett
On Thu, 9 Oct 2008 19:23:48 +0100 Geoff Down [EMAIL PROTECTED] wrote: On 9 Oct 2008, at 13:33, Scott Bennett wrote: While we're on this subject, I'd like to point out a problem with tor's current data rate capacity testing during server initialization. In order to get some