Re: [tor-relays] Long-term effect of Heartbleed on Tor
*However*, if there's a way to specify the data it sends back, that wouldn't be a problem (I'm no legal specialist though). I have not yet tested my theory, but sending a few extra bytes in the heartbeat message (and of course incrementing 'length' in the 'ssl3_record_st' struct) should do that. It would allow causing the server to return data the client sent. If it's not sent back, the server isn't vulnerable. No random memory is read as the server did in fact allocate the memory, it's simply not supposed to use it. If I get you in the right way I think this is what you are asking for: https://github.com/FiloSottile/Heartbleed This guy is sending a string in and reads it back. BR Felix ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Relay, bridge, and family members
I am unsure right now why exactly a bridge should not be listed respectively list a family, other than you leak the existence of the bridge(s). Actually this is the exact and only reason. From the DOC: Do not list any bridge relay as it would compromise its concealment So, dont list those friendly bridges in your MyFamily settings. BR Felix ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Tor Weather getting T-shirt email. Problem
Same thing for me. I have asked the donation guys by writing a short mail to donati...@torproject.org and they replied with the link to the shirt supplier. FB On 12/25/2013 01:23 PM, equal-rights.de wrote: Hi, i noticed a problem with tor weather. I should have recieved a email that I qualified for a T-shirt. This never happend. Requirments for getting one: https://www.torproject.org/getinvolved/tshirt.html I think I do fullfill the requirements: -non-exit realy since September 2013 -average bandwith: 32 Mbit/s -10TB of traffic each month -Uptime is nearly 100%, expect of two times when I updated the tor software and about 2hours of maintenance. (total about 2hours) My relay: http://torstatus.blutmagie.de/router_detail.php?FP=858c6b4e7841661f3b6fe65392b79f4db5b2ee15 I also found this ticket relating this topic. Tor-weather bug: https://trac.torproject.org/projects/tor/ticket/2461 Thanks for your time. Best Regards Michael ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays signature.asc Description: OpenPGP digital signature ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Tor Relay Operators Meeting at 30c3 Chaos Communication Congress
FYI: Yoriz informed me about an issue with my mail signing (bad signature). It turns out that there was a problem with the mail encoding. So, no need for increased paranoia :-) On 12/02/2013 07:48 PM, Felix Büdenhölzer wrote: What about non exit operators? Are they also welcome? BR Felix On 12/02/2013 01:46 AM, Moritz Bartl wrote: Torservers.net invites Tor exit relay operators and organizations to a meetup. If possible/relevant, for example if you're a member of one of the 'Torservers partner organizations', please prepare some slides on your activities. We will do quick presentations on recent and future activities around Torservers.net. Afterwards, the official members meeting of German Zwiebelfreunde e.V. will be held in this room. https://events.ccc.de/congress/2013/wiki/Session:Tor_Relay_Operators_Meetup Starts at: 2013/12/27 03:00:00 PM Ends at: 2013/12/27 05:00:00 PM Duration: 120 minutes Location: Hall 13 ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays signature.asc Description: OpenPGP digital signature ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
