[tor-talk] How do I separate/isolate Tor streams in TorBirdy

2014-05-02 Thread antispam06
Is it possible to have Thunderbird choose a different path for each account?
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


[tor-talk] Fake keys for Tails developers' email address

2014-05-02 Thread intrigeri
Hi,

u. (Cc'd) has notified me of two fake keys with Tails developers'
email addresses:

  EB24 9600 79A3 E2B9 3BFE  48B5 05F8 BB78 B38F 4311 
  C3BA A4BF E369 B2B8 6018  B515 0E08 AC78 06C0 69C8 

These are *not* genuine. Don't trust them. Our real keys are
documented on https://tails.boum.org/doc/about/openpgp_keys/.

Interestingly, the 2nd one has been created two days before the fake
key Erinn discovered [1] two months ago, and has the same lifetime (4
years). I guess one might find more such keys by looking at keys
created in the same period.

[1] https://lists.torproject.org/pipermail/tor-talk/2014-March/032308.html

Cheers,
-- 
  intrigeri
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc


pgpXAQDCuj6Nb.pgp
Description: PGP signature
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Tor Icon Redesign

2014-05-02 Thread Matthew Kaufman
I love it!!


On Fri, May 2, 2014 at 11:07 AM, Frederic Jacobs
li...@fredericjacobs.comwrote:

 Hi all,

 A friend of mine, designed a Tor logo for fun as a replacement of the
 current logo.

 Here’s what it looks like in the dock of a Mac:
 https://twitter.com/fredericjacobs/status/462239895055261696

 And here’s a higher res version of it: http://cl.ly/VK82/firefox.png

 Feedback very welcome.

 Cheers,

 Frederic Jacobs
 --
 tor-talk mailing list - tor-talk@lists.torproject.org
 To unsubscribe or change other settings go to
 https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Tor Icon Redesign

2014-05-02 Thread Damian Johnson
 And here’s a higher res version of it: http://cl.ly/VK82/firefox.png

 Feedback very welcome.

Very neat! My only two cents is that without a stem it didn't look
obviously like an onion to me. First impressions were a globe or a
blue wooden ball. That said, with a stem I think it would be a
fantastic icon.

Cheers! -Damian
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Tor Icon Redesign

2014-05-02 Thread Артур Истомин
On Fri, May 02, 2014 at 05:07:04PM +0200, Frederic Jacobs wrote:
 Hi all,
 
 A friend of mine, designed a Tor logo for fun as a replacement of the current 
 logo. 
 
 Here’s what it looks like in the dock of a Mac: 
 https://twitter.com/fredericjacobs/status/462239895055261696
 
 And here’s a higher res version of it: http://cl.ly/VK82/firefox.png
 
 Feedback very welcome. 

It's sucks. Looks like dissected ball of deadman.
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Trac accounts and potential account compromise

2014-05-02 Thread Dedalo Galdos
I reported this like 2 weeks ago (
https://trac.torproject.org/projects/tor/ticket/11545) depends on admins
analysing this issue.
El may 2, 2014 2:41 PM, Nusenu 
bm-2d8wmevggvy76je1wxnpfo8srpzt5yg...@bitmessage.ch escribió:

  We learned on recently that there was a bug in our Trac setup that
 allowed
  anyone to register a new user account for an existing user name,
 overwriting
  the existing user's password and thereby taking over the account [0].

 Has there been an analysis on how many accounts have been compromised
 this way (and their email addresses changed)?

 When was this vulnerability introduced?


  However, it's still possible that somebody has taken over your account
 in the
  past and you didn't notice because you didn't log in recently. We
 recommend
  users try to login and if you find you are unable to do so, you can
 reset your
  password here: https://trac.torproject.org/projects/tor/reset_password

 Not very helpful if the attacker changed the account's email address ;)


 btw: Was there any specific reason to wait for 10 days after fixing this
 issue before telling tor-talk about it?

 --
 tor-talk mailing list - tor-talk@lists.torproject.org
 To unsubscribe or change other settings go to
 https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


[tor-talk] Orbot v14 alpha: obfsclient, Tor 0.2.5.3-alpha

2014-05-02 Thread Nathan Freitas

Orbot now supports Obfs3 and Scramblesuit, thanks to Yawning's help.

We are also experimenting with a switch to Polipo
(https://github.com/jech/polipo.git) from Privoxy.

 Original Message 
Subject:Re: [guardian-dev] Friday Full of Updates
Date:   Fri, 02 May 2014 15:40:47 -0400
From:   Nathan of Guardian nat...@guardianproject.info
To: Guardian Dev guardian-...@lists.mayfirst.org


On 05/02/2014 03:14 PM, Nathan of Guardian wrote:
 - Orbot has been updated to 14.0.0-ALPHA-2a, with amazing new support
 for Obfsclient pluggable transports like obfs3 and scramblesuit. There
 have also been many fixes related to solving the remaining problems on
 various Samsung Galaxy devices, as well.


 Actually, here is a release build of Orbot for testing:

apk: https://guardianproject.info/releases/Orbot-v14.0.0-ALPHA-2a.apk
sig: https://guardianproject.info/releases/Orbot-v14.0.0-ALPHA-2a.apk

14.0.0 (ALPHA-2)
ea919c5 add the basic proguard support
147b57a remove unused preference
0dc50cc add log max size feature
b9f14b3 ensure setConft on control port works consistently
b056e7f remove debug waiter
b2d4bb3 updated to v14-alpha-2
cbbc5e4 improve how we start/stop Tor, Polipo to find process id, do ps
of all, then filter (most compat) use async service for Tor s
t
b31c11f updated icons with dark background
2b6ff4e update manifest for v14-alpha-1
05b6553 add binary stripping to makefile
21c1cad update binaries and torrc for obfs/PT work
144460b fixes for preference handling in multi process context
38700f9 updated to 0.2.5.3 for scramblesuit/obfs support
d3865c0 fix settings handling and add more debug output also make SOCKS
a runtime config
d529334 clean up wizard context use
0178d3e add new binaries and configs for polipo and others
40546c9 change from privoxy to polipo for http proxy
a4d8669 fix variable name to obfsclient
2f7a9dd update to new obfsclient repo
000cf57 update jtorctrl jar
f485015 install obfsclient binary
d003826 update binaries
4d3754b remove obfsproxy, update obfsclient
7af85b5 small updates to Makefile for NDK
2c2d094 Integrate obfsclient/liballium into the build process
43c259a Update the obfsclient submodule to include Android fixes
a6af878 liballium/obfsclient should be sourced from tp.o repos








signature.asc
Description: OpenPGP digital signature
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Tor Icon Redesign

2014-05-02 Thread I
 A friend of mine, designed a Tor logo for fun as a replacement of the
 current logo.
 Cheers,
 
 Frederic Jacobs

It is the beginning of a better symbol.

I like it because it is more refined than the current one which looks more 
appropriate to a pair of mountaineering boots (tor means rocky peak).

I feel the Tor project is a highly clever, intensely keen group with high 
ideals and should be represented thus.

Robert



-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


[tor-talk] tor (relay) talk @ linux weeks (Austria/Vienna)

2014-05-02 Thread BM-2cX3kTX4SnoHv6JVHsYM33oPjJUKo7URHR
Hi everyone,

I just saw that there will be a Create a relay talk [1] at the Linux
weeks in Vienna, so I figured I let you know in case you want to come by
and say hi.

Date: 2014-05-08 18:00
Location: FH Technikum Wien, Höchstädtplatz 6, 1200 Vienna

(links pointing to german content)
[1] https://cfp.linuxwochen.at/de/LWW14/public/events/108

http://torservers.nsupdate.info/
torservers.nsupdate.info/m/
https://martink.nsupdate.info/m/?page_id=4

Martin, you might want to fix the dead links on your site (the atlas link
is probably not working anymore due to a new relay FP?)


-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Orbot v14 alpha: obfsclient, Tor 0.2.5.3-alpha

2014-05-02 Thread intrigeri
Hi,

Nathan Freitas wrote (02 May 2014 19:44:35 GMT) :
 We are also experimenting with a switch to Polipo
 (https://github.com/jech/polipo.git) from Privoxy.

Jacob was strongly advocating that we do the exact opposite change in
Tails, so I'm curious why.

Cheers,
--
  intrigeri
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Orbot v14 alpha: obfsclient, Tor 0.2.5.3-alpha

2014-05-02 Thread Nathan Freitas


On May 2, 2014 6:34:25 PM EDT, intrigeri intrig...@boum.org wrote:
Hi,

Nathan Freitas wrote (02 May 2014 19:44:35 GMT) :
 We are also experimenting with a switch to Polipo
 (https://github.com/jech/polipo.git) from Privoxy.

Jacob was strongly advocating that we do the exact opposite change in
Tails, so I'm curious why.

Yes, it seems that when Polipo was removed from TBB (since it was no longer 
needed for Firefox proxying), that around the same time (2011?) there were some 
serious security bugs discovered, and development on Polipo was dormant. This 
led to Tor switching back to recommending Privoxy as the HTTP proxy for those 
that need one.

However, Polipo is being actively maintained again, and the known issues 
addressed. I wanted to explore its use with Orbot because it does seem to use 
less memory than Privoxy, and is a bit faster as well. It is also cleaner to 
integrate due to the project being available as a git repo.

If there is conclusive evidence or a community decision that Polipo must not be 
used, I am willing to follow that, but for now, we are experimenting in 
alpha-ville.

+n
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Orbot v14 alpha: obfsclient, Tor 0.2.5.3-alpha

2014-05-02 Thread Артур Истомин
On Fri, May 02, 2014 at 10:09:39PM -0400, Nathan Freitas wrote:
 
 
 On May 2, 2014 6:34:25 PM EDT, intrigeri intrig...@boum.org wrote:
 Hi,
 
 Nathan Freitas wrote (02 May 2014 19:44:35 GMT) :
  We are also experimenting with a switch to Polipo
  (https://github.com/jech/polipo.git) from Privoxy.
 
 Jacob was strongly advocating that we do the exact opposite change in
 Tails, so I'm curious why.
 
 Yes, it seems that when Polipo was removed from TBB (since it was no longer 
 needed for Firefox proxying), that around the same time (2011?) there were 
 some serious security bugs discovered, and development on Polipo was dormant. 
 This led to Tor switching back to recommending Privoxy as the HTTP proxy for 
 those that need one.
 
 However, Polipo is being actively maintained again, and the known issues 
 addressed. I wanted to explore its use with Orbot because it does seem to use 
 less memory than Privoxy, and is a bit faster as well. It is also cleaner to 
 integrate due to the project being available as a git repo.
 
 If there is conclusive evidence or a community decision that Polipo must not 
 be used, I am willing to follow that, but for now, we are experimenting in 
 alpha-ville.

But as I can say in TBB does not used nor polipo nor privoxy. What is
the purpose of proxy for Orbit?
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk