Warning TorButton 1.1.7-alfa

2007-09-23 Thread force44
I upgraded to 1.1.7-alfa yesterday and saw that it is really a crap :(

I used to manage my cookies, javacsript and history, MYSELF. Now trobutton 
wants to do all by itself, and the result is that:

1- My history isn't cleared when I close Firefox, even when this option is 
selected in the Firefox options.

2- Some websites that use javascript do not work with Tor. It is possible that 
I TRUST the CONTENT of a website, including scripts, BUT I want to use TOR to 
hide my IP. With torbutton this is a real hassle now.

Will try to go back to an older version if it is still available online :( 
Torbutton is a GREAT extension but WHY hell does the author want to care of all 
together??? Maybe he should also include Firefox in the extension, and why not, 
Windows or a unix distribution??? really BAD now :


Re: Warning TorButton 1.1.7-alfa

2007-09-23 Thread Florian Reitmeir
Hi,

On Sun, 23 Sep 2007, [EMAIL PROTECTED] wrote:

 I upgraded to 1.1.7-alfa yesterday and saw that it is really a crap :(
maybe you didn't realize that this is release is _alpha_ quality?

 I used to manage my cookies, javacsript and history, MYSELF. Now trobutton 
 wants to do all by itself, and the result is that:
 
 1- My history isn't cleared when I close Firefox, even when this option is 
 selected in the Firefox options.
 
 2- Some websites that use javascript do not work with Tor. It is possible 
 that I TRUST the CONTENT of a website, including scripts, BUT I want to use 
 TOR to hide my IP. With torbutton this is a real hassle now.
 
 Will try to go back to an older version if it is still available online 
 :( Torbutton is a GREAT extension but WHY hell does the author want to 
 care of all together??? Maybe he should also include Firefox in the 
 extension, and why not, Windows or a unix distribution??? really BAD now :

So all your above points are against:
- websites which use javascript
- firefox

Are there any On-Topic things so say about Tor?

-- 
Florian Reitmeir


Re: Warning TorButton 1.1.7-alfa

2007-09-23 Thread Scott Bennett
 On Sun, 23 Sep 2007 06:47:17 -0400 [EMAIL PROTECTED] wrote:
I upgraded to 1.1.7-alfa yesterday and saw that it is really a crap :(

I used to manage my cookies, javacsript and history, MYSELF. Now trobutton 
wants to do all by itself, and the result is that:

1- My history isn't cleared when I close Firefox, even when this option is 
selected in the Firefox options.

2- Some websites that use javascript do not work with Tor. It is possible that 
I TRUST the CONTENT of a website, including scripts, BUT I want to use TOR to 
hide my IP. With torbutton this is a real hassle now.

 That kind of thing is only one of the reasons I do not use TorButton and
most likely never will.

Will try to go back to an older version if it is still available online :( 
Torbutton is a GREAT extension but WHY hell does the author want to care of 
all together??? Maybe he should also include Firefox in the extension, and why 
not, Windows or a unix distribution??? really BAD now :

 (You have a bad case of linewrap there, friend. :-)
 You could also try FoxyProxy, which I have used in the past, or
SwitchProxy, which I prefer use now.  (I used FoxyProxy for a while at a time
when SwitchProxy stopped working.  But then FoxyProxy came out with a version
that didn't work, and I was afraid I might have to go with TorButton.  But
SwitchProxy returned to the rescue with a newer, working version.:-)  These
two are both more versatile than TorButton in the sense that they allow you
to configure as many different proxies as you like and to switch between them
at will.  Each proxy can, of course, be configured with addresses that bypass
proxies entirely, too.


  Scott Bennett, Comm. ASMELG, CFIAG
**
* Internet:   bennett at cs.niu.edu  *
**
* A well regulated and disciplined militia, is at all times a good  *
* objection to the introduction of that bane of all free governments *
* -- a standing army.   *
*-- Gov. John Hancock, New York Journal, 28 January 1790 *
**


Re: Warning TorButton 1.1.7-alfa

2007-09-23 Thread Scott Bennett
 On Sun, 23 Sep 2007 13:10:28 +0200 Florian Reitmeir [EMAIL PROTECTED]
wrote:

On Sun, 23 Sep 2007, [EMAIL PROTECTED] wrote:

 I upgraded to 1.1.7-alfa yesterday and saw that it is really a crap :(
maybe you didn't realize that this is release is _alpha_ quality?

 I used to manage my cookies, javacsript and history, MYSELF. Now trobutton 
 wants to do all by itself, and the result is that:
 
 1- My history isn't cleared when I close Firefox, even when this option is 
 selected in the Firefox options.
 
 2- Some websites that use javascript do not work with Tor. It is possible 
 that I TRUST the CONTENT of a website, including scripts, BUT I want to use 
 TOR to hide my IP. With torbutton this is a real hassle now.
 
 Will try to go back to an older version if it is still available online 
 :( Torbutton is a GREAT extension but WHY hell does the author want to 
 care of all together??? Maybe he should also include Firefox in the 
 extension, and why not, Windows or a unix distribution??? really BAD now 
 :

So all your above points are against:
   - websites which use javascript
   - firefox

 Read it again.  His complaint, basically, was that TorButton had removed
his option to choose the functioning of various aspects of his browser usage.

Are there any On-Topic things so say about Tor?

 Last time I checked (a few hours ago now), TorButton was being distributed
as part of a bundle including tor and privoxy, as well, for the Defective OS.
Seems to me that discussion of bugs/misfeatures/whatever about software that
is distributed with tor from the tor web site is very much on topic for a tor
email discussion list.


  Scott Bennett, Comm. ASMELG, CFIAG
**
* Internet:   bennett at cs.niu.edu  *
**
* A well regulated and disciplined militia, is at all times a good  *
* objection to the introduction of that bane of all free governments *
* -- a standing army.   *
*-- Gov. John Hancock, New York Journal, 28 January 1790 *
**


Re: Warning TorButton 1.1.7-alfa

2007-09-23 Thread phobos
On Sun, Sep 23, 2007 at 06:47:17AM -0400, [EMAIL PROTECTED] wrote 0.8K bytes in 
9 lines about:
: I used to manage my cookies, javacsript and history, MYSELF. Now trobutton 
wants to do all by itself, and the result is that:
: 1- My history isn't cleared when I close Firefox, even when this option is 
selected in the Firefox options.
: 2- Some websites that use javascript do not work with Tor. It is possible 
that I TRUST the CONTENT of a website, including scripts, BUT I want to use TOR 
to hide my IP. With torbutton this is a real hassle now.

The options available in the new torbutton are listed here:
http://www.freehaven.net/~squires/torbutton/dev/

The goal, I believe, is to try to address many of the exploits Tor users
may encounter when browsing the web with Firefox.  

The older version is still online at
https://addons.mozilla.org/firefox/2275/

-- 
Andrew


Re: Warning TorButton 1.1.7-alfa

2007-09-23 Thread Mike Perry
Thus spake [EMAIL PROTECTED] ([EMAIL PROTECTED]):

 I upgraded to 1.1.7-alfa yesterday and saw that it is really a crap
 :(

Thanks for the bug report. Even though it is a bit immaturely
delivered with lots of whining instead of actual helpful content, I
will do my best to fix the issues you have encountered.
 
 I used to manage my cookies, javacsript and history, MYSELF. Now
 trobutton wants to do all by itself, and the result is that:

 1- My history isn't cleared when I close Firefox, even when this
 option is selected in the Firefox options.

This is a bug. It will be fixed in 1.1.8. Thanks for reporting!

In the meantime, the workaround is to go into the Torbutton
preferences, go to the Shutdown tab, and click Allow me to manage
my own Private Data Settings.

 2- Some websites that use javascript do not work with Tor. It is
 possible that I TRUST the CONTENT of a website, including scripts,
 BUT I want to use TOR to hide my IP. With torbutton this is a real
 hassle now.

Is it possible for you to give me a list of websites torbutton breaks?
or describe how it breaks then? It works for me and I have recieved no
reports of breakage so far from others.

 Will try to go back to an older version if it is still available
 online :( Torbutton is a GREAT extension but WHY hell does the
 author want to care of all together??? Maybe he should also include
 Firefox in the extension, and why not, Windows or a unix
 distribution??? really BAD now :

You can hate on me all day long, but the fact of the matter is that
every other Firefox extension combo (including self management up to
the point of a Tor-only firewall) leaves you vulnerable to numerous
attacks to reveal your IP address and other location infromation. So
people can either help me fix Torbutton so it is usable for them, or
they can choose to remain vulnerable.

You may want to read over http://torbutton.torproject.org/dev/ to see
what sort of things you are vulnerable to without torbutton. If that
documentation is unclear, again, please notify me.


-- 
Mike Perry
Mad Computer Scientist
fscked.org evil labs


pgpos06cJRbaG.pgp
Description: PGP signature


Re: Warning TorButton 1.1.7-alfa

2007-09-23 Thread Mike Perry
Thus spake Scott Bennett ([EMAIL PROTECTED]):

  On Sun, 23 Sep 2007 06:47:17 -0400 [EMAIL PROTECTED] wrote:
 I upgraded to 1.1.7-alfa yesterday and saw that it is really a crap :(
 
 I used to manage my cookies, javacsript and history, MYSELF. Now trobutton 
 wants to do all by itself, and the result is that:
 
 1- My history isn't cleared when I close Firefox, even when this option is 
 selected in the Firefox options.
 
 2- Some websites that use javascript do not work with Tor. It is possible 
 that I TRUST the CONTENT of a website, including scripts, BUT I want to use 
 TOR to hide my IP. With torbutton this is a real hassle now.
 
  That kind of thing is only one of the reasons I do not use TorButton and
 most likely never will.

Can you give me a list of websites torbutton breaks for you? And how
does it break them? Toggling torbutton will kill javascript in
websites that are currently open, but you want that, unless you like
random javascript timers going off and sending your real IP to
website.

 Will try to go back to an older version if it is still available online 
 :( Torbutton is a GREAT extension but WHY hell does the author want to 
 care of all together??? Maybe he should also include Firefox in the 
 extension, and why not, Windows or a unix distribution??? really BAD now 
 :
 
  (You have a bad case of linewrap there, friend. :-)
  You could also try FoxyProxy, which I have used in the past, or
 SwitchProxy, which I prefer use now.  (I used FoxyProxy for a while at a time
 when SwitchProxy stopped working.  But then FoxyProxy came out with a version
 that didn't work, and I was afraid I might have to go with TorButton.  But
 SwitchProxy returned to the rescue with a newer, working version.:-)  These
 two are both more versatile than TorButton in the sense that they allow you
 to configure as many different proxies as you like and to switch between them
 at will.  Each proxy can, of course, be configured with addresses that bypass
 proxies entirely, too.

SwitchProxy should be usable with Torbutton. If you configure your Tor
proxy settings as one of the proxies, Torbutton should detect when it
is enabled and turn on its security features for you without your
needing to actually hit the torbutton itself. If it does not, it is a
bug. Please report it.

Again, Torbutton protects against numerous web exploits that can
reveal your IP address when you use vanilla proxy changers. Please
read over http://torbutton.torproject.org/dev/ before you go
recommending insecure solutions to people, or simply hate on Torbutton
without providing any bug reports to the maintainer as to why.


-- 
Mike Perry
Mad Computer Scientist
fscked.org evil labs


pgpuXyEwrNzwc.pgp
Description: PGP signature