Re: Building tracking system to nab Tor pedophiles

2007-03-07 Thread coderman
On 3/6/07, Roger Dingledine [EMAIL PROTECTED] wrote: ... So the moral of the story appears to be turn the plugins off, period. The broader moral is: don't run code from strangers on your computer. The even broader moral would be to lament that we're still not using SSL on most Internet

Re: Building tracking system to nab Tor pedophiles

2007-03-07 Thread Alexander W. Janssen
OK, we heard a lot of technical details, I'll cover the non-tech part of it. On 3/7/07, Fergie [EMAIL PROTECTED] wrote: Comments? Yes, it's stupid. First, the legal issues. What he does is overtaking a TOR-user's machine by malicious code. He's accusing people of being childporn consuments

Re: Building tracking system to nab Tor pedophiles

2007-03-07 Thread Nick Mathewson
On Wed, Mar 07, 2007 at 02:50:34PM +0100, Alexander W. Janssen wrote: OK, we heard a lot of technical details, I'll cover the non-tech part of it. On 3/7/07, Fergie [EMAIL PROTECTED] wrote: Comments? Yes, it's stupid. Well, it sounds like a pretty thorough implementation of a well-known

Re: Building tracking system to nab Tor pedophiles

2007-03-07 Thread Brad Freeman
On Wednesday, March 07, 2007, at 07:42AM, Roger Dingledine [EMAIL PROTECTED] wrote: On Wed, Mar 07, 2007 at 12:56:22AM -0500, James Muir wrote: http://blogs.zdnet.com/security/?p=114 The approaches suggested won't work if you use Firefox with NoScript set to disable JavaScript, Java,

Re: Building tracking system to nab Tor pedophiles

2007-03-07 Thread Freemor
O.K. I've been biting my tongue on this one for a while now. I'll try to keep this short as it is not specifically TOR related As a survivor of childhood sexual abuse. I'm personally getting annoyed by this whole nab the paedophiles thing. for several reasons: 1.) 90+ percent of sexual abuse of

Re: one less onion skin

2007-03-07 Thread Nick Mathewson
On Wed, Mar 07, 2007 at 09:29:43AM -0500, Paul Syverson wrote: [...] My kneejerk response is that (a) the overhead from this vs. everything else in Tor is very small, This was one of the major reasons for not doing it at the same time as CREATE_FAST. Assuming that TLS conns are mostly

Compile error w/0.1.2.9-rc on Kubuntu 6.10

2007-03-07 Thread light zoo
RE: http://archives.seul.org/or/talk/Mar-2007/msg00035.html Mr. Mathewson wrote Again, if any of these warnings actually trigger in the code, please let me know. While not an error specified in the message above I did experience an error when I tried to compile on my Edgy Eft: (I could send

Re: Compile error w/0.1.2.9-rc on Kubuntu 6.10

2007-03-07 Thread Dave Page
On Wed, Mar 07, 2007 at 10:59:13AM -0800, light zoo wrote: checking for libevent directory... configure: error: Could not find a linkable libevent. You can specify an explicit path using --with-libevent-dir I had the libevent1 package libevent1_1a-1_i386.deb installed before I

Re: Building tracking system to nab Tor pedophiles

2007-03-07 Thread Michael Holstein
I've seen a VM that routes all traffic over TOR, invisibly to the O/S. (Not sure what they do about UDP). Developed at Georgia Tech. One better .. TOR on OpenWRT on a Linksys router. Tor at the *hardware* level. ~Mike.

Re: Compile error w/0.1.2.9-rc on Kubuntu 6.10

2007-03-07 Thread Michael Holstein
checking for libevent directory... configure: error: Could not find a linkable libevent. You can specify an explicit path using --with-libevent-dir ./configure --with-libevent-dir=/usr/local/lib that got it working for me (also Ubuntu 6.10 here, but the gnome variety)

Re: Building tracking system to nab Tor pedophiles

2007-03-07 Thread Mike Perry
Thus spake Freemor ([EMAIL PROTECTED]): I think what needs to be done here is to create a FAQ or other standard document that will 1.) inform the vastly misinformed public. 2.) list places and ways they can make a difference. Excellent post, even if slight off-topic. As suggested on IRC, I

Re: Building tracking system to nab Tor pedophiles

2007-03-07 Thread Jason Edwards
As suggested on IRC, I think the Tor documentation strategy needs to be rethought. Most people barely read the download page, let alone the reems of FAQ questions. We've had two attacks now on Tor that rely on unmasking users who use Tor incorrectly. One of them actually published a paper and

Re: Building tracking system to nab Tor pedophiles

2007-03-07 Thread Mike Perry
Thus spake Paul Syverson ([EMAIL PROTECTED]): I don't think it was off topic. To repeat what I already said in an individual response. I think it was not OT since your post addressed the reality of a situation for which people were designing Tor modifications and deployments and you

Re: Building tracking system to nab Tor pedophiles

2007-03-07 Thread James Muir
Heheh, well speaking of dreaming big, while both what you and Jason Edwards said are great goals to have, I think we shouldn't get distracted from stopping the bleeding now with a few sentences right up front while something more elaborate is devised (or a volunteer steps up). The problem is if

Re: Building tracking system to nab Tor pedophiles

2007-03-07 Thread Paul Syverson
On Wed, Mar 07, 2007 at 09:53:08PM -0500, James Muir wrote: Heheh, well speaking of dreaming big, while both what you and Jason Edwards said are great goals to have, I think we shouldn't get distracted from stopping the bleeding now with a few sentences right up front while something more

Re: blog about tor and skype

2007-03-07 Thread Taka Khumbartha
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 well, 1.) Skype Call Traced http://archives.seul.org/or/talk/Aug-2006/msg00232.html and http://archives.seul.org/or/talk/Aug-2006/msg00252.html also directly relevant to my point 2.) need i mention skype is closed-source? and 3.) when starting

Re: Building tracking system to nab Tor pedophiles

2007-03-07 Thread Nick Mathewson
On Wed, Mar 07, 2007 at 10:35:54PM -0500, Paul Syverson wrote: On Wed, Mar 07, 2007 at 09:53:08PM -0500, James Muir wrote: Heheh, well speaking of dreaming big, while both what you and Jason Edwards said are great goals to have, I think we shouldn't get distracted from stopping the bleeding