Re: Warnings on the download page

2007-03-09 Thread KT
... These are the extensions I use: ... Flashblock ... Assuming add-ons work as intended. For example (just an example, nothing against flashblock): Firefox 2.0.0.2 (Fresh install). Install Flashblock Visit Youtube (or any other page with flash) Flashblock seems to be working but... Disable

How to run Tor from USB with Linux (Kubuntu 6.10)

2007-03-09 Thread light zoo
Hi, Forgive the naive nature of this question... I have compiled Tor and I want to run it off my USB HDD but I'm not sure how. Should I just copy over the build directory ~/tor-0.1.2.10-rc/? If so what are essential files? What should the "DataDirectory" option be set to? Regards, _

Slightly OT: 'Big brother' surveillance makes waves in Sweden

2007-03-09 Thread xiando
Almost On Topic (related, anyway): http://www.thelocal.se/6619/20070307/ "A far-reaching wiretapping programme proposed by Sweden's government to defend against foreign threats, including monitoring emails and telephone calls, has stirred up a fiery debate in the past few weeks, with critics de

Re: Removing 1 modular exponentiation

2007-03-09 Thread Watson Ladd
Fergie wrote: > -- James Muir <[EMAIL PROTECTED]> wrote: > >> The following recent preprint deals with the subject of this thread: > >> A. Kate, G. Zaverucha and I. Goldberg >> Pairing-Based Onion Routing pdf >> CACR 2007-08 > >> http://www.cacr.math.uwaterloo.ca/techreports/2007/cacr2007-08.p

Re: need help with Uninstall for Mac

2007-03-09 Thread Jason Edwards
It was the Mac OS X 10.4 (Tiger) Universal Binary 0.1.1.29 bundle. When I open OSX/Library/Tor I do not see an uninstall script. Any suggestions? Jay [EMAIL PROTECTED] wrote: On Fri, Mar 09, 2007 at 01:40:28AM -0500, [EMAIL PROTECTED] wrote 0.4K bytes in 16 lines about: : I installed

Re: need help with Uninstall for Mac

2007-03-09 Thread phobos
On Fri, Mar 09, 2007 at 01:40:28AM -0500, [EMAIL PROTECTED] wrote 0.4K bytes in 16 lines about: : I installed the bundled package posted on the site last week. I don't : know the Terminal well but this is what I get back... Which bundle? And does the uninstall script exist in /L

Re: Removing 1 modular exponentiation

2007-03-09 Thread Watson Ladd
James Muir wrote: > The following recent preprint deals with the subject of this thread: > > A. Kate, G. Zaverucha and I. Goldberg > Pairing-Based Onion Routing pdf > CACR 2007-08 > > http://www.cacr.math.uwaterloo.ca/techreports/2007/cacr2007-08.pdf > > -James > Nice. Patents are going to be

Re: Boulder Tech report on low-resource routing attacks on Tor

2007-03-09 Thread Eugene Y. Vasserman
Hi all, I've been thinking about how exit and entry nodes controlled by the same adversary can easily determine if they are in the same circuit due to the predictable nature of circuit set-up (timing). Well, what about altering that? Perhaps Tor nodes should form long-lived "exploratory" circuit

Re: Warnings on the download page

2007-03-09 Thread Freemor
On Fri, 2007-09-03 at 10:55 -0800, light zoo wrote: > --- Freemor <[EMAIL PROTECTED]> wrote: > > > > > so my questions are: > > > > 1 - Can a modified actions file be made that > > would strip all Java/javascript, flash, steaming > > media, etc. From looking at the Privoxy > > documentation i

Re: Warnings on the download page

2007-03-09 Thread light zoo
--- Freemor <[EMAIL PROTECTED]> wrote: > > so my questions are: > > 1 - Can a modified actions file be made that > would strip all Java/javascript, flash, steaming > media, etc. From looking at the Privoxy > documentation it looks possible so far (but I'm no > privoxy guru) (Note: Mr. Keil

Re: Warnings on the download page

2007-03-09 Thread H D Moore
This would have to support all sorts of variations for media files: document.location = something.ext meta refresh URL=something.ext iframe src=something.ext frame src=something.ext img src=something.ext (some cases) bgsound=something.ext ..etc Seems easier to lock down the browser and prevent a

Re: Warnings on the download page

2007-03-09 Thread lists
On 9 Mar 2007 03:21:05 -0600, Mike Perry wrote: > > Just tested windows media player 10 plugin, which I believe is > installed by default on pretty much every windows box.. It ignores > proxy settings. Great. > I found most applications on a Windows system respect the settings configured under I

Re: Warnings on the download page

2007-03-09 Thread Freemor
I've been watching this thread with some interest and as the Talk of mis-onfigured browsers and mis-behaving plug-ins grew I found myself thinking that there must be an easier way to fix the problem. It occured to me that what is needed (at least until a more permenant solution can be found) is a w

Re: Building tracking system to nab Tor pedophiles

2007-03-09 Thread Marco A. Calamari
On Wed, 2007-03-07 at 14:02 -0500, Michael Holstein wrote: > > I've seen a VM that routes all traffic over TOR, invisibly to the O/S. > > (Not sure what they do about UDP). > > Developed at Georgia Tech. > > One better .. TOR on OpenWRT on a Linksys router. > > Tor at the *hardware* level. WR

Re: Building tracking system to nab Tor pedophiles

2007-03-09 Thread cesare VoltZ
The approaches suggested won't work if you use Firefox with NoScript set to disable JavaScript, Java, Flash and any other plugins. Agreed. Firefox work better on security site nor IE is a big hole. Cesare

Re: Security Focus story

2007-03-09 Thread cesare VoltZ
If TOR would legally qualify as an ISP, we're in deep trouble. Keyword: the upcoming data-retention laws in Europe. Data retention in Europe doesn't cover the content of traffic, only CDR (call data record) are covered and gathered all togheter for LI purpose. Telecoms providers will now have t

Re: Warnings on the download page

2007-03-09 Thread Paul Syverson
On Fri, Mar 09, 2007 at 03:14:31AM -0500, Roger Dingledine wrote: > On Thu, Mar 08, 2007 at 07:17:09PM -0600, Mike Perry wrote: > > > The current simplest advice I can give people is to remove all plugins: > > > http://tor.eff.org/download.html.en#Warning > > > Do you have any suggestions on safe w

Re: Security Focus story

2007-03-09 Thread coderman
repeat after me: it's "Tor", _NOT_ "TOR" :) On 3/9/07, Alexander W. Janssen <[EMAIL PROTECTED]> wrote: ... No; the point is if you'd qualify as an "access provider" you need to enable "relevant logging". ETSI already defined interfaces and data-sets which would come quite handy. i have a pol

Re: Warnings on the download page

2007-03-09 Thread Steven Murdoch
On Fri, Mar 09, 2007 at 03:14:31AM -0500, Roger Dingledine wrote: > I'm not comfortable recommending portable firefox yet, due to a problem > that Steven Murdoch found a while ago: when firefox starts up, it hunts > around on your hard drive to see if there are any plugins, and then it > enables th

Re: Warnings on the download page

2007-03-09 Thread Mike Perry
Thus spake H D Moore ([EMAIL PROTECTED]): > Flash is now supported: > http://metasploit.com/research/misc/decloak/ Tested on FF2.0.0.2 for Windows.. Turns out I was mistaken about the UDP packet. It was from your technique #1 doing the DNS request for the image fetch. Guess I need some sleep.. T

Re: Warnings on the download page

2007-03-09 Thread Mike Perry
Thus spake Roger Dingledine ([EMAIL PROTECTED]): > Also, isn't Portable Firefox Windows-only? Or am I confused? True, just going for what I assume is the majority of our userbase first. Especially people who are going to have difficulty with this stuff. Was also in a rush and didn't check out the

Re: Warnings on the download page

2007-03-09 Thread Eugen Leitl
On Thu, Mar 08, 2007 at 08:33:29PM -0600, H D Moore wrote: > Seems like two big items I need to add to decloak are Flash and the shiny > no-proxy Java connection mode (which seems to apply to TCP sockets only). What does the current Torpark ship with? It would seem like a hardened version of Fir

Re: Security Focus story

2007-03-09 Thread Alexander W. Janssen
On 3/9/07, Eugen Leitl <[EMAIL PROTECTED]> wrote: On Fri, Mar 09, 2007 at 08:37:58AM +0100, Alexander W. Janssen wrote: > If TOR would legally qualify as an ISP, we're in deep trouble. We don't provide access to the Internet, and we're not charging for it. Last time I looked the data retention

Re: Warnings on the download page

2007-03-09 Thread Roger Dingledine
On Thu, Mar 08, 2007 at 07:17:09PM -0600, Mike Perry wrote: > > The current simplest advice I can give people is to remove all plugins: > > http://tor.eff.org/download.html.en#Warning > > Do you have any suggestions on safe ways to back off from that? > > I have a couple more points - the second b

Re: Security Focus story

2007-03-09 Thread Eugen Leitl
On Fri, Mar 09, 2007 at 08:37:58AM +0100, Alexander W. Janssen wrote: > If TOR would legally qualify as an ISP, we're in deep trouble. We don't provide access to the Internet, and we're not charging for it. Last time I looked the data retention laws also allowed a loophole for very small provider