Re: Yahoo Mail and Tor

2009-07-15 Thread Scott Bennett
On Wed, 15 Jul 2009 09:18:04 -0400 Andrew Lewman wrote: >On 07/15/2009 02:35 AM, Scott Bennett wrote: > > Then you're remembering it from somewhere else because neither that >> thread nor the first of the two it refers to say anything about it. (The >> second reference is apparently no

Re: Yahoo Mail and Tor

2009-07-15 Thread Andrew Lewman
On 07/15/2009 02:35 AM, Scott Bennett wrote: > Then you're remembering it from somewhere else because neither that > thread nor the first of the two it refers to say anything about it. (The > second reference is apparently no longer available at the link given.) It's entirely possible I've

Re: Yahoo Mail and Tor

2009-07-15 Thread grarpamp
> >>> enable-remote-toggle 0 > >>> enable-remote-http-toggle 0 > >>> enable-edit-actions 0 > >>> allow-cgi-request-crunching 0 Folks, the default install of the current release of privoxy sets all of these to 0. That means the named features can't be changed via config.privoxy.org. You'd nee

Re: Yahoo Mail and Tor

2009-07-14 Thread Scott Bennett
On Wed, 15 Jul 2009 00:50:23 -0400 : Andrew Lewman wrote: >On 07/09/2009 01:36 PM, Lee wrote: > enable-remote-toggle 0 enable-remote-http-toggle 0 enable-edit-actions 0 allow-cgi-request-crunching 0 >>> I'm trying to find the email thread, but until then, even with these

Re: Yahoo Mail and Tor

2009-07-14 Thread Andrew Lewman
On 07/09/2009 01:36 PM, Lee wrote: >>> enable-remote-toggle 0 >>> enable-remote-http-toggle 0 >>> enable-edit-actions 0 >>> allow-cgi-request-crunching 0 >> I'm trying to find the email thread, but until then, even with these >> set, it was demonstrated someone can manipulate your privoxy config

Re: Yahoo Mail and Tor

2009-07-10 Thread Jim McClanahan
Andrew Lewman wrote: > A) The Privoxies after 3.06 have a local "web control interface" > which we believe is a security risk. We think that remote websites can > probably reconfigure your privoxy via that interface, maybe even without > your noticing. If newer versions have the ability to disabl

Re: Yahoo Mail and Tor

2009-07-10 Thread Erilenz
* on the Fri, Jul 10, 2009 at 01:44:22AM -0500, Scott Bennett wrote: >> A long time ago I think there was a problem with the .exit... in the URL >> being passed along to the website in the GET (or other) requests, which >> sometimes caused problems. Somebody correct me if I am wrong, but I >> bel

Re: Yahoo Mail and Tor

2009-07-09 Thread Scott Bennett
On Fri, 10 Jul 2009 00:15:18 -0600 Jim McClanahan wrote: >Scott Bennett wrote: >> >> On Thu, 9 Jul 2009 20:37:38 -0400 downie - >> wrote: >> >Will Polipo be able to filter out .exit notation? >> > >> Why would you want it to do that? The .exit notation has to be passed >> along t

Re: Yahoo Mail and Tor

2009-07-09 Thread Jim McClanahan
Scott Bennett wrote: > > On Thu, 9 Jul 2009 20:37:38 -0400 downie - > wrote: > >Will Polipo be able to filter out .exit notation? > > > Why would you want it to do that? The .exit notation has to be passed > along to tor for it to work. If it were filtered out, then the user would > s

RE: Yahoo Mail and Tor

2009-07-09 Thread Scott Bennett
On Thu, 9 Jul 2009 20:37:38 -0400 downie - wrote: >> Date: Thu=2C 9 Jul 2009 12:11:06 -0400 >> From: and...@torproject.org >> To: or-talk@freehaven.net >> Subject: Re: Yahoo Mail and Tor >>=20 >> On 07/09/2009 11:25 AM=2C Scott Bennett wrote: >>

RE: Yahoo Mail and Tor

2009-07-09 Thread downie -
> Date: Thu, 9 Jul 2009 12:11:06 -0400 > From: and...@torproject.org > To: or-talk@freehaven.net > Subject: Re: Yahoo Mail and Tor > > On 07/09/2009 11:25 AM, Scott Bennett wrote: > > Does polipo do all the other good things that privoxy does, including >

Re: Yahoo Mail and Tor

2009-07-09 Thread Lee
On 7/9/09, Andrew Lewman wrote: > On 07/09/2009 11:25 AM, Scott Bennett wrote: > >> enable-remote-toggle 0 >> enable-remote-http-toggle 0 >> enable-edit-actions 0 >> allow-cgi-request-crunching 0 > > I'm trying to find the email thread, but until then, even with these > set, it was demonstrated

Re: Yahoo Mail and Tor

2009-07-09 Thread Andrew Lewman
On 07/09/2009 11:25 AM, Scott Bennett wrote: > enable-remote-toggle 0 > enable-remote-http-toggle 0 > enable-edit-actions 0 > allow-cgi-request-crunching 0 I'm trying to find the email thread, but until then, even with these set, it was demonstrated someone can manipulate your privoxy config by

Re: Yahoo Mail and Tor

2009-07-09 Thread Scott Bennett
On Thu, 09 Jul 2009 10:46:05 -0400 Andrew Lewman wrote: >On 07/09/2009 02:20 AM, bao song wrote: >> The standard Tor bundle download for non-Windows still >> includes Privoxy 3.0.6, which mangles Yahoo mail. Any chance of >> either an update to a later version of Privoxy or an alternative >>

Re: Yahoo Mail and Tor

2009-07-09 Thread Andrew Lewman
On 07/09/2009 02:20 AM, bao song wrote: > The standard Tor bundle download for non-Windows still > includes Privoxy 3.0.6, which mangles Yahoo mail. Any chance of > either an update to a later version of Privoxy or an alternative > privacy package in the standard Tor download for non-Windows OSs?

Re: Yahoo Mail and Tor

2009-07-09 Thread Scott Bennett
On Thu, 9 Jul 2009 16:14:06 +0200 Hannah Schroeter wrote: >On Thu, Jul 09, 2009 at 01:47:39AM -0500, Scott Bennett wrote: >>[...] > >> If you're running NetBSD or OpenBSD, you may be able to do something >>similar, but I'm not familiar with their methods. (Perhaps Hannah could >>give an

Re: Yahoo Mail and Tor

2009-07-09 Thread Hannah Schroeter
Hi! On Thu, Jul 09, 2009 at 01:47:39AM -0500, Scott Bennett wrote: >[...] > If you're running NetBSD or OpenBSD, you may be able to do something >similar, but I'm not familiar with their methods. (Perhaps Hannah could >give an OpenBSD example here, please?) For OpenBSD, the recommended way

Re: Yahoo Mail and Tor

2009-07-09 Thread Jim McClanahan
bao song wrote: > The standard Tor bundle download for non-Windows still includes > Privoxy 3.0.6, which mangles Yahoo mail. I am running privoxy 3.0.6. If you want to email me off-list I will be happy to send you my user.action file which seems to more or less work adequately for Yahoo mail.

Re: Yahoo Mail and Tor

2009-07-08 Thread Scott Bennett
On Wed, 8 Jul 2009 23:20:08 -0700 (PDT) bao song wrote: >What about those of us who consider Windows to be the Abomination of Desola= >tion (1010011010) and refuse to run that operating system? >Privoxy provides pre-compiled Windows versions, but I was unable to downloa= >d the source for Priv

Re: Yahoo Mail and Tor

2009-07-08 Thread bao song
ownload for non-Windows OSs? Yours, Michael --- On Mon, 6/7/09, Roger Dingledine wrote: From: Roger Dingledine Subject: Re: Yahoo Mail and Tor To: or-talk@freehaven.net Received: Monday, 6 July, 2009, 11:06 AM On Mon, Jul 06, 2009 at 10:51:03AM +0400, James Brown wrote: > > Are you by any cha

Re: Yahoo Mail and Tor

2009-07-06 Thread Roger Dingledine
On Mon, Jul 06, 2009 at 10:51:03AM +0400, James Brown wrote: > > Are you by any chance using the Vidalia bundle which unfortunately > > contains a Privoxy version that is several years out of date? > > > > As far as I know, the Yahoo-related problems have been fixed > > quite some time ago and i

Re: Yahoo Mail and Tor

2009-07-05 Thread James Brown
Fabian Keil пишет: > bao song wrote: > > >> Two months??? I have had trouble with Yahoo Mail via Privoxy for more >> than four years. >> > > I'm sorry to hear that. > > Are you by any chance using the Vidalia bundle which unfortunately > contains a Privoxy version that is several years out

Re: Yahoo Mail and Tor

2009-07-05 Thread Fabian Keil
bao song wrote: > Two months??? I have had trouble with Yahoo Mail via Privoxy for more > than four years. I'm sorry to hear that. Are you by any chance using the Vidalia bundle which unfortunately contains a Privoxy version that is several years out of date? > At first, I was given some confi

Re: Yahoo Mail and Tor

2009-07-04 Thread bao song
Two months??? I have had trouble with Yahoo Mail via Privoxy for more than four years. At first, I was given some config file modifications for  Privoxy so it would allow me to use Yahoo Mail, but this disabled a lot of the stuff Privoxy did, and I wanted that stuff for other sites. Also, I was