On 5/18/13 6:12 AM, Griffin Boyce wrote:
Kevin Poulsen <[email protected] <mailto:[email protected]>> wrote:
That's awesome! But you write that the dot-onion can only be reached
from mobile Android devices. What about this?
https://itunes.apple.com/us/app/onion-browser/id519296448?mt=8
An Apple app is not the best option. You could set up your own
customized tor2web service and serve the onion that way. It seems
more practical long-term, since it can't be blocked by Apple or abused
by a developer.
We recently introduced the feature of "TRANSLATION MODE" to setup your
own private Tor2web node, to expose with your own "private" Tor2web
server only a single, specific onion host:
https://github.com/globaleaks/Tor2web-3.0/wiki/Configuring-Tor2web#translation-mode
However that's to be used for specific context where one or more than
one actors (public, receiver, whistleblower, admin) of GlobaLeaks (or
other WB platform) need to access without strong- anonymity (The tor2web
access policy can be configured in a granular way, depending on the uses
https://github.com/globaleaks/GlobaLeaks/wiki/Advanced-configuration#tor2web-access-policy)
.
However the use of Tor2web within a Whistleblowing platform must be used
with extreme care, by understanding exactly how it change the threat
model within the respect to the anonymity matrix
https://docs.google.com/document/d/1niYFyEar1FUmStC03OidYAIfVJf18ErUFwSWCmWBhcA/pub#h.fpje7tqvacyf
.
--
Fabio Pietrosanti (naif)
HERMES - Center for Transparency and Digital Human Rights
http://logioshermes.org - https://globaleaks.org - http://tor2web.org
--
Too many emails? Unsubscribe, change to digest, or change password by emailing
moderator at [email protected] or changing your settings at
https://mailman.stanford.edu/mailman/listinfo/liberationtech
