Re: [tor-talk] [GetTor] Simple way of getting Tor countering TorProject.org and its mirrors censorship using the Internet Archive's Wayback Machine
On Fri, Jan 06, 2017 at 03:58:53PM -0300, ilv wrote: > We also trust other providers like > Google and Dropbox, so I don't see why we couldn't trust archive.org. Sounds like a great addition! I wouldn't want to use that logic to add *any* website, but I think we like archive.org at least as much as we like Google and Dropbox. --Roger -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] [GetTor] Simple way of getting Tor countering TorProject.org and its mirrors censorship using the Internet Archive's Wayback Machine
Hi, > > https://web.archive.org/save/https://www.torproject.org/download/download-easy.html.en > > Then clicking on "Download" button should load the download process and FF > says that the download's URL comes from archive.org, in other words one > should block archive.org for this method to not work. > Interesting. Actually, you can go directly to [1] and you'll get Tor Browser from archive.org. GetTor API already generates URLs to download the latest version from tpo, so we could easily generate something like [1] and send it via GetTor as well. We also trust other providers like Google and Dropbox, so I don't see why we couldn't trust archive.org. [1] https://web.archive.org/web/20170102120621/https://dist.torproject.org/torbrowser/6.0.8/tor-browser-linux64-6.0.8_en-US.tar.xz signature.asc Description: PGP signature -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] [GetTor] Simple way of getting Tor countering TorProject.org and its mirrors censorship using the Internet Archive's Wayback Machine
Indeed, ideally the Tor Project should launch an official account on the Internet Archive and start relying on archive.org as a means to distribute Tor via GetTor. -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] [GetTor] Simple way of getting Tor countering TorProject.org and its mirrors censorship using the Internet Archive's Wayback Machine
The problem with this of course is that you need to trust a third party: The Internet Archive. Unless you have some checksums of binaries or - much better of course - the Tor developer's PGP keys. If you have some way of verifying what you download, this circumvention method might be a good idea. But if not, it's a little bit risky. Especially since the Internet Archive's webserver does not enforce HTTPS. That's one more way to screw up and get man-in-the-middle attacked. -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
[tor-talk] [GetTor] Simple way of getting Tor countering TorProject.org and its mirrors censorship using the Internet Archive's Wayback Machine
Hi, I've found a very neat way (which seems to work) for getting Tor in areas/network in which TorProject.org and its mirrors are blocked using the Internet Archive's Wayback Machine (assuming archive.org isn't blocked, which may not be the case for China, but it is for many other countries that block Tor). One should first save the torproject.org main website using, https://web.archive.org/save/https://www.torproject.org Then one should locate the URL of the download page, and save it using, https://web.archive.org/save/https://www.torproject.org/download/download-easy.html.en Then clicking on "Download" button should load the download process and FF says that the download's URL comes from archive.org, in other words one should block archive.org for this method to not work. Here's the github page on that: https://github.com/TheTorProject/gettor/issues/16 What do you think about this method? Do you have any other suggestions for improving it? Happy new year! -- e5f3c2ea895af0f27667 -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
