Tor Browser Bundle for Gnu/Linux

2009-08-28 Thread Jacob Appelbaum
This is very important: Ensure that you do not have Tor, Vidalia, Privoxy, Polipo or Firefox running. Run it: cd "Tor Browser_de/Tor\ Browser" ./"Start Tor Browser" If you'd like to follow along at home, you can build it from source like = so: svn co https://tor-svn.freehaven.net/svn/torbrow

Tor Browser Bundle for Gnu/Linux: a new hope

2009-08-28 Thread Jacob Appelbaum
and verify it's signature: gpg --verify tor-browser-gnu-linux-1.2.4-alpha-de.tar.gz.asc gpg: Signature made Fri 28 Aug 2009 01:52:27 AM PDT using DSA key ID 9D0FACE4 gpg: Good signature from "Jacob Appelbaum " If the signature verifies, unpack it: tar -xvzf tor-browser-gnu-linux-1.

tor-browser-gnu-linux-1.2.4-beta

2009-08-28 Thread Jacob Appelbaum
I've updated the Tor Browser Bundle for Linux and I've added some debugging stuff to the starting script for people who have had issues. Here's the current url for testing: http://freehaven.net/~ioerror/tbb/index.html I'm looking for success and failure reports! Please let me know if you've tried

Re: Tor for Android

2009-09-14 Thread Jacob Appelbaum
It also seems like TorProxy should have a new identity button. Shadow suggests that users should restart TorProxy if connections fail and that seems costly. Perhaps it's not too costly on the network or cpu? The Shadow Browser/TorProxy setup seems like a pretty great start for anonymity on Android

Tor and Java

2009-09-16 Thread Jacob Appelbaum
Hi, Roger and I recently decided we should have a list centering around Tor and Java development. The tor-java list is now live and is welcoming new subscribers: http://archives.seul.org/tor/java/ Best, Jacob signature.asc Description: OpenPGP digital signature

Re: Orbot: An Anonymous Proxy for Android using Tor

2009-10-26 Thread Jacob Appelbaum
-- Subject: Tor on Android - Progress! (Orbot) Date: Sun, 25 Oct 2009 00:22:48 -0700 From: Jacob Appelbaum To: or-...@freehaven.net Hello *, Nathan and I have been working on making a viable, secure and usable port of Tor to the Android platform. There have been a few attempts at getting T

Re: Anyone running Tor on routing/switching hardware ?

2009-10-30 Thread Jacob Appelbaum
Eugen Leitl wrote: > On Fri, Oct 30, 2009 at 03:22:55AM -0400, grarpamp wrote: > >> Best market for such porting efforts might be the millions >> of home linksys gateway type thingies out there that run >> some sort of linux under the hood. > > IIRC SheevaPlug dev kit comes with Ubuntu 9.04 prein

Re: livejournal ban tor-nodes

2009-11-24 Thread Jacob Appelbaum
James Brown wrote: > The Livejournal has blocked access to that resource through the Tor. > It is certainly the consequence of purshasing the LJ of Russian company > "SUP" by order of Putin and FSB. > That decision of Russian powers of purshacing the LJ was adopted because > many Russian opposition

Re: livejournal ban tor-nodes

2009-11-24 Thread Jacob Appelbaum
James Brown wrote: > Jacob Appelbaum wrote: >> James Brown wrote: >>> The Livejournal has blocked access to that resource through the Tor. >>> It is certainly the consequence of purshasing the LJ of Russian company >>> "SUP" by order of Putin a

Re: livejournal ban tor-nodes

2009-11-25 Thread Jacob Appelbaum
Marcus Griep wrote: > On Wed, Nov 25, 2009 at 2:18 AM, James Brown wrote: > >> Very thanks. >> But did they say you about a character of that abuse? >> I thin that only an RSS feed of LJ friends pages is not a serious >> ground for blocking the Tor network. >> If they did such not by order of th

Re: DisableAllSwap question

2009-11-26 Thread Jacob Appelbaum
Scott Bennett wrote: > I'm currently running 0.2.2.5-alpha but will probably move to > 0.2.2.6-alpha fairly soon. In the Changelog there is a note about a new > option available in 0.2.2.6-alpha called DisableAllSwap. I'm running > FreeBSD, and my only swap area is GELI-encrypted disk slice.

Re: US Customers: anyone helping me?

2009-12-07 Thread Jacob Appelbaum
thomas.hluch...@netcologne.de wrote: > Hello altogether, > > for my Sun Hosts I would like to have a Crypto Hardware Accelerator Card. At > ebay.com there are some. Especially this one is what I want to get: > > http://cgi.ebay.com/Sun-X6762A-375-3089-Crypto-Accelerator-1000_W0QQitemZ18044004958

Re: polipo POC

2009-12-09 Thread Jacob Appelbaum
Darren Thurston wrote: > > #!/usr/bin/perl > # estranged.pl > # AKA > # Polipo 1.0.4 Remote Memory Corruption 0day PoC Cute. > $payload = "GET / HTTP/1.1\r\nContent-Length: 2147483602\r\n\r\n"; > The proof of concept works as advertised. Wheee. Here's a simple patch (that probably breaks some

Running Tor Bridges on a Chumby One

2009-12-30 Thread Jacob Appelbaum
Hi, I've been talking with Andrew Huang [0] about running Tor on the new Chumby One device. It's a pretty nice device that he designed; it runs Linux and it's very hackable. He ran with the idea of putting Tor (configured as a bridge) on a the Chumby One. He wrote up how to do it here (step by ste

Re: Tor Project infrastructure updates in response to security breach

2010-01-21 Thread Jacob Appelbaum
Mike Perry wrote: > > I suppose I could also create a rogue code signing certificate and > provide that over SSL for people to install, but then I wonder if > vanilla Firefox will reject my XPIs then because they are signed, but > with an "invalid" cert. > I have a few of those laying around. I

Re: tor exit-node abused, takedown by ISP,

2010-01-23 Thread Jacob Appelbaum
Arian Sanusi wrote: > Andrew Lewman schrieb: >> There is a dmca template you can use. The dmca takedowns are simply >> requests and hold little legal weight. Use the template at >> https://www.torproject.org/eff/tor-dmca-response.html.en for your >> response. Think of the dmca notice as "we thin

Re: Tor argument at BoingBoing

2010-01-26 Thread Jacob Appelbaum
David McKeegan wrote: > On 26 Jan 2010, at 11:07, Jens Kubieziel wrote: > >> * David McKeegan schrieb am 2010-01-26 um 10:55 Uhr: >>> Perhaps some here would care to post in defence? >> In my opinion it is not worth the hassle. "Never argue with an >> idiot. They will only pull you down to their l

Tor on the Nokia N900 (Mobile Tor stuff)

2010-02-18 Thread Jacob Appelbaum
Hi, I'm happy to announce that we've gotten Tor working as a client on the Nokia N900 GSM telephone. We've written up a blog post and some instructions. We'd love to get some feedback: https://blog.torproject.org/blog/tor-nokia-n900-maemo-gsm-telephone We're working on some other awesome mobile T

Re: Tor on the Nokia N900 (Mobile Tor stuff)

2010-02-18 Thread Jacob Appelbaum
The performance of Tor is similar to any other Tor client - this is our reference C implementation running on the N900. With that said - You may want to hold out and get an Android phone. We're looking to do a release of Tor on Android next week. We have some very promising alphas and it's quite e

Android Was: Re: Tor on the Nokia N900 (Mobile Tor stuff)

2010-02-18 Thread Jacob Appelbaum
Rich Jones wrote: > Jacob - Are you aware of TorProxy / Shadow Browser for Android - > http://www.cl.cam.ac.uk/research/dtg/android/tor/ - is this going to > building on that? Either way, I'm excited. I've gotten quite good at > Android stuff and would be interested in helping out, if you need a >

Re: Tor on the Nokia N900 (Mobile Tor stuff)

2010-02-19 Thread Jacob Appelbaum
7v5w7go9ub0o wrote: > On 02/18/10 20:07, Jacob Appelbaum wrote: >> The performance of Tor is similar to any other Tor client - this is our >> reference C implementation running on the N900. >> >> With that said - You may want to hold out and get an Android phone. >&

Android Tor packages

2010-03-04 Thread Jacob Appelbaum
Hi, The Tor Project has been working very closely with Nathan Freitas and The Guardian Project to create an Android release. This is an early beta release and is not yet suitable for high security needs. The Android web browser is not protected by Torbutton and we have not yet developed an anonymo

Re: Android Tor packages

2010-03-04 Thread Jacob Appelbaum
Marco Bonetti wrote: > Jacob Appelbaum wrote: >> The Tor Project has been working very closely with Nathan Freitas and >> The Guardian Project to create an Android release. > congrats! > Thanks! >> We've codenamed the Tor on Android project Orbot; Orbot is

Re: BadExit flag still needed for PrivacyNow...

2010-04-18 Thread Jacob Appelbaum
Roger Dingledine wrote: > On Thu, Apr 15, 2010 at 11:59:31PM -0500, Scott Bennett wrote: >> My weather satellite images got blocked again, due to the PrivacyNow >> exit using OpenDNS with a misconfigured account and the fact that >> ExcludeExitNodes still doesn't work reliably. Will the the a

Re: Using tor as proxy for the command line

2010-05-06 Thread Jacob Appelbaum
> exit operators by doing that. >=20 I wrote a little program to ease my use of wget with Tor/Polipo/Privoxy: % cat tor-wget #!/bin/bash -x export http_proxy=3D127.0.0.1:8118 export https_proxy=3D127.0.0.1:8118 wget -U " " $@ EOF I also started working on a patch to nmap with Fyodor to work with

Re: Using tor as proxy for the command line

2010-05-07 Thread Jacob Appelbaum
Scott Bennett wrote: >>> I think using nmap in the context of tor is really barking up the >>> wrong tree. >> Perhaps, the goal was more general than Tor - it's specifically a set of >> patches for SOCKS5. > > Would you post your specifications for it, please? > Specifications? There'

The State of the DNS and Tor Union (also: a DNS UDP - >TCP shim)

2010-07-02 Thread Jacob Appelbaum
=== If you're git-adverse, I've also made a (signed) tar.gz: http://crypto.nsa.org/tor/ttdnsd-0.5.tar.gz http://crypto.nsa.org/tor/ttdnsd-0.5.tar.gz.asc Fetch the tar.gz file and the signature: cd /tmp wget http://crypto.nsa.org/tor/ttdnsd-0.5.ta

Re: The State of the DNS and Tor Union (also: a DNS UDP - >TCP shim)

2010-07-05 Thread Jacob Appelbaum
On 07/04/2010 03:17 PM, coderman wrote: > great info! my comments below... > > On Fri, Jul 2, 2010 at 6:15 PM, Jacob Appelbaum wrote: >> ... >> While Tor users should always use Torbutton[-1] for their web browsing, >> not all applications have an equivalent

Re: The State of the DNS and Tor Union (also: a DNS UDP - >TCP shim)

2010-07-05 Thread Jacob Appelbaum
On 07/05/2010 03:07 PM, coderman wrote: > On Sun, Jul 4, 2010 at 3:17 PM, coderman wrote: >> ... >> a better wording: >> >> "... ultimately, any application that uses DNS or UDP may compromise >> your anonymity." > > i should mention that the Tor Browser Bundle when used as directed has > been an

Re: Tor Project 2008 Tax Return Now Online

2010-08-15 Thread Jacob Appelbaum
On 08/15/2010 02:56 AM, Anon Mus wrote: > I think you'll find that Tor only became officially incapable of > protecting from such an adversary around 2004/5 when numerous request to > add this protection to Tor was made. Since then its been the official > policy not to protect from such a threat (

Re: Tor Project 2008 Tax Return Now Online

2010-08-17 Thread Jacob Appelbaum
On 08/16/2010 10:49 PM, Mike Perry wrote: > Thus spake Anon Mus (my.green.lant...@googlemail.com): > > You know too much, Mr. Anon Mus. The Adversary has been alerted. > Prepare to be silenced (if we're lucky). > Oh Mike - How could you divulge our secret information like that? Couldn't you just

Re: Tcpcrypt and tor

2010-08-29 Thread Jacob Appelbaum
On 08/29/2010 09:21 PM, Gregory Maxwell wrote: > Tcpcrypt (http://tcpcrypt.org/) proposes a new extension to TCP to > enable opportunistic encryption with optional authentication. From a > features and performance perspective, it's probably exactly what we > need to get away from the almost-everyth

Re: How to Run High Capacity Tor Relays

2010-09-01 Thread Jacob Appelbaum
On 09/01/2010 02:28 PM, John Case wrote: > >> Also, afaik, zero people in the wild are actively running Tor with any >> crypto accelerator. May be a very painful process... I'm not really >> interested in documenting it unless its proven to scale by actual use. >> I want this document to end up wi

Re: The best way to run a hidden service: one or two computers?

2010-09-24 Thread Jacob Appelbaum
On 09/24/2010 03:10 PM, Robert Ransom wrote: > On Fri, 24 Sep 2010 17:34:05 -0400 > hi...@safe-mail.net wrote: > >> Robert Ransom: >> >>> Also, if you haven't bothered to change your MAC address, an attacker >>> with any UID can read it using ifconfig; your hardware manufacturers >>> may have kept

Re: tor-ramdisk 20101011 released for i686 only

2010-10-11 Thread Jacob Appelbaum
On 10/11/2010 10:52 AM, Anthony G. Basile wrote: > > Hi everyone > > I want to announce to the list that a new release of tor-ramdisk is out. > Tor-ramdisk is an i686, x86_64 or MIPS uClibc-based micro Linux > distribution whose only purpose is to host a Tor server in an > environment that maximi

Re: exit node config for egypt IP range

2011-01-28 Thread Jacob Appelbaum
On 01/28/2011 08:01 AM, forc...@safe-mail.net wrote: > All Egypt ISP are offline, the gov has turned the full internet OFF. This isn't true. I have access to some machines in Noor - this is an ISP currently active in Cairo. All the best, Jake **

Re: Is "gatereloaded" a Bad Exit?

2011-01-30 Thread Jacob Appelbaum
On 01/30/2011 01:56 AM, morphium wrote: > 2011/1/30 Damian Johnson : >> The five relays Mike mentioned have been flagged as BadExits [1]. >> Adding them to your ExcludeExitNodes isn't necessary. -Damian > > That was really dumb, as it puts a lot more load on the Nodes that > support encryption, an

Re: Firefox IPv6 Anonymity bypass

2007-10-26 Thread Jacob Appelbaum
Arrakis wrote: > Greetings and welcome to 2006! > > <3, > Steve > > Excerpt from "How To Create Torpark" > > Step 31. set as follows: > noscript.notify.hideDelay = 30 > noscript.statusIcon = false > network.dns.disableIPv6 = true ; ipv6 addresses fail through tor. > network.p

Re: some civically irresponsible exits?

2007-10-31 Thread Jacob Appelbaum
Scott Bennett wrote: > The documentation that comes with tor rather strongly suggests that exit > servers should have exit policies rejecting the SMTP port (25). The tor > sample torrc includes this rejection as well. This rejection of exits to > port 25 would seem to be a Very Good Thing (t

Re: Security concerns/help me understand tor

2007-11-08 Thread Jacob Appelbaum
Kyle Williams wrote: > I don't want to post all the results of my research, for fear that truly > evil Torrorist would go crazy with this. Let's just say that this could be > very, very bad. Trust me, Roger, this isn't something that should be taken > lightly. The moment Tor knows it's own exter

Re: Security concerns/help me understand tor

2007-11-08 Thread Jacob Appelbaum
Kyle Williams wrote: > On Nov 8, 2007 4:00 PM, Jefferson Iblis <[EMAIL PROTECTED]> wrote: >> Seems the simplest solution would be to, by default, disallow Tor from >> accessing the local network, including what it discovers to be its >> externally accessible IP. Then anyone who wants to allow local

Re: Security concerns/help me understand tor

2007-11-08 Thread Jacob Appelbaum
Kyle Williams wrote: > On Nov 8, 2007 3:54 PM, Jacob Appelbaum <[EMAIL PROTECTED]> wrote: > >> Kyle Williams wrote: >>>>> (This requires some changes to the torrc and tor >>>>> source, so I'd like to add it to the feature >>>>&

Re: Soliciting Opinions on xB Browser "How To Build" doc

2007-11-15 Thread Jacob Appelbaum
Arrakis wrote: > Greetings, > > We've rewritten xB Browser to version 2.0.0.9/10 and are about to > introduce some new functionality to it. I thought this would be a lovely > time to take a step back and acquiesce to some prior requests for a doc > on how to build xB Browser from scratch. I've got

Re: Soliciting Opinions on xB Browser "How To Build" doc

2007-11-15 Thread Jacob Appelbaum
Arrakis wrote: > Jacob, > > This might be able to work, assuming we figure out if there are any > dependencies for win32 Make. > > Actually, I could probably even have Make curl, verify, and unpack the > latest Tor, Firefox, etc. > > Still doesn't solve all the GUI settings issues, but I guess i

Tor on the OLPC?

2007-11-15 Thread Jacob Appelbaum
I just purchased one of the OLPC laptops that's shipping in theory before next year[0]. I'm curious if anyone has gotten Tor installed and running on an OLPC? It seems like it could be a very useful device for running Tor on. Because of the built in mesh wireless, I imagine it would be possible

Re: Reducing java leakage in windows

2007-12-02 Thread Jacob Appelbaum
James Muir wrote: > Arrakis wrote: >> It appears that Java attacks for causing external IP data to be leaked >> can be mitigated to some good degree. The upshot is that you can now run >> Java applets that even when attempting to phone home directly (revealing >> your IP), they are routed through t

Re: Tor meetup in San Francisco this Thursday

2008-01-22 Thread Jacob Appelbaum
Nick Mathewson wrote: > Hi, all! > > I'll be in San Francisco for most of this week, and I thought it would > be neat to have a Tor Folks meetup on Thursday, probably in the late > afternoon or early evening. Let me know (off-list) if there's any > interest, and I'll figure out where -- probably

Re: Child pornography blocking again

2008-01-26 Thread Jacob Appelbaum
Eugen Leitl wrote: > On Sat, Jan 26, 2008 at 12:46:46PM -0500, Kraktus wrote: > >> Really, if I'd known my message was going to evoke this sort of response, > > Really, if you want any other sort of response, DON'T SUGGEST IMPLEMENTING > CENSORSHIP HOOKS IN TOR in future. Thanks so much. > Agre

Re: New Tor distribution for testing: Tor Browser Bundle

2008-02-03 Thread Jacob Appelbaum
Scott Bennett wrote: > On Sun, 3 Feb 2008 22:19:54 +0100 "Michael Schmidt" > <[EMAIL PROTECTED]> top-posted: >> Steven, i suggest to make it hardcoded default and a Must, that each user, >> using this browser, is as well running an tor **exit** node, >> tit for tat. like emule partials: upload

Re: How do I volunteer? #6 Improvements on our active browser configuration tester

2008-03-12 Thread Jacob Appelbaum
Rochester TOR Admin wrote: > I've been doing some work on a better system to check the privacy of a > browser [server side DNS tests, flash tests, etc] and humbly think that I > may have some good contributions. > > Looking at the tor volunteer page > i

Re: Tor and Firefox 3

2008-03-14 Thread Jacob Appelbaum
defcon wrote: > I am a linux user, therefore I am not interested in xerobank products. > If Xerobank decides to setup there service for linux I may be > interested in the future. I do appreciate anonym's response, thankyou. > Any other ideas for replacing torbutton until torbutton fixes there > a

Tor on the OLPC: Working as a server!

2008-03-14 Thread Jacob Appelbaum
eXtKk2iaCe0DEmY W4jTovOFLYLka4hCl5ZTtSez8FnoeRq2bWYRz/NoSkDLRAqJ3Js/9aJDxNSj345f Nyr58l63m2eRtzlpBamgAXuZL49tRJmK9Uqfk1Yq0NY= -END SIGNATURE- Enjoy! Regards, Jacob Appelbaum [0] https://tor-svn.freehaven.net/svn/tor/trunk/contrib/sd

Re: Tor on the OLPC: Working as a server!

2008-03-14 Thread Jacob Appelbaum
operational? What do you mean by this? > > appears tor blocked by 802.11 ap .. advise Tor blocked how? You're able to install Tor but you're unable to make circuits? You're behind a NAT and only being a client works? Best, Jacob Appelbaum

Re: GSoC Idea: Packaging Tor+Vidalia

2008-03-24 Thread Jacob Appelbaum
Peter Palfrader wrote: > On Fri, 21 Mar 2008, Adna rim wrote: > >> My solution at the moment is stopping the tor daemon and removing it >> from the runlevels through vidalia's postinst script. > > Mucking with another package's config is a serious policy violation. > Such a package would never be

Re: List of exit nodes wanted

2008-05-06 Thread Jacob Appelbaum
Hi there, I'd really like to encourage you to use the DNSEL. I run exitlist.torproject.org and I'd like to encourage you to use it. We created it specifically just for people with the problem you have. You can use a caching name server and you'll have a fast system once you've done an initial lookup. Regards, Jacob Appelbaum

Re: Phish filters on exit nodes

2008-06-08 Thread Jacob Appelbaum
S anti-phishing features. You may also just want to email the admin of the Exit node and ask in the first place... (Disclaimer, once in another lifetime, I worked on OpenDNS and it may not even be possible to change the preferences of a given IP address in such a way anymore...) Regards, Jacob Appelbaum

Mapping the physical locations of Tor nodes

2008-08-15 Thread Jacob Appelbaum
Hi, I've been thinking about the physical distribution of Tor nodes around the world. I wrote a really simple parser that does geo-ip lookups of public servers and plots them on a map. If you're interested in seeing almost all of the Tor servers on a global map, check it out here: http://crypto.n

Re: Mapping the physical locations of Tor nodes

2008-08-15 Thread Jacob Appelbaum
Bryan L. Fordham wrote: > Jacob Appelbaum wrote: >> Hi, >> >> I've been thinking about the physical distribution of Tor nodes around >> the world. I wrote a really simple parser that does geo-ip lookups of >> public servers and plots them on a map. >>

Re: Mapping the physical locations of Tor nodes

2008-08-16 Thread Jacob Appelbaum
Bryan L. Fordham wrote: > >> Is any of your code available? I'm using the geoip database from >> MaxMind[0] and it's showing the same distribution as some of your images. >> > It's not available, but no reason it couldn't be. Well, other than that > it's ugly. I wrote this, made a few tweaks, a

Re: xB Mail: Anonymous Email Client

2008-08-20 Thread Jacob Appelbaum
Arrakis wrote: >> (I don't think it's necessary to repeat that thread.) > > Then I'm unsure why you thought it appropriate to repeat it now. > It's appropriate to repeat it because you're spamming this list again with your ideas about licensing. You continue your attempts to ride on the coat tal

Re: xB Mail: Anonymous Email Client

2008-08-21 Thread Jacob Appelbaum
Arrakis wrote: >> It's appropriate to repeat it because you're spamming this list again >> with your ideas about licensing. You continue your attempts to ride on >> the coat tales of the Free Software and Open Source licenses that came >> before you. > > Jacob, I'm not spamming the list with licen

Re: AVG + TOR = BARF

2008-08-22 Thread Jacob Appelbaum
Teddy Smith wrote: > you read google's privacy policy. > > personally, i think two good free places for e-mail are lavabit.com and > riseup.net. > > maybe our friend roy lanek knows of other suitable places? ;) > > Not to sound tinfoil, but I would trust Google _far_ more than I would > trust ris

Re: Tor on Nokia Internet Tablet?

2008-09-05 Thread Jacob Appelbaum
Clemens Eisserer wrote: > Hi, > > I've about ~768kbit/s upstream and an un-used Nokia770 internet > tablet, with an ARM9 clocked at 250mhz. > Do you think it would make sence running a TOR relay on it, and do you > think the ARM would be able to keep up even with this low bandwith. > Some performa

Re: UK internet filtering

2008-12-07 Thread Jacob Appelbaum
Gregory Maxwell wrote: > On Sat, Dec 6, 2008 at 8:39 PM, <[EMAIL PROTECTED]> wrote: >> On Sat, Dec 06, 2008 at 07:49:58PM -0500, [EMAIL PROTECTED] wrote 0.2K bytes >> in 4 lines about: >> : I've confirmed the reports of UK ISPs censoring Wikipedia using some >> : UK tor exists. >> >> http://en.wi

Re: tor-browser bundle on XP

2009-01-17 Thread Jacob Appelbaum
Arrakis wrote: > Phobos et al, > > xB Browser installs giving a user a choice of two modes. > The first is Tor, the second is the XeroBank network. xB > Browser is included in the XeroBank Installer bundle which > includes xB VPN and xB Mail as well. > > xB Browser, if Tor is installed, will

Re: Tor Bulk Exit Exporter Broken - check.torproject.org

2009-04-11 Thread Jacob Appelbaum
Arrakis wrote: > http://check.torproject.org/cgi-bin/TorBulkExitList.py > > Reports error: > > Mod_python error: "PythonHandler TorBulkExitList" > > Traceback (most recent call last): > > File "/usr/lib/python2.4/site-packages/mod_python/apache.py", line 299, in > HandlerDispatch > resul

DNS statistics from node operators

2009-06-02 Thread Jacob Appelbaum
Hi, I'm looking into some simple DNS related statistics in the Tor network. Specifically, I wrote a small patch that tells an operator the total number of cached entries for their node. I'd like to know about your DNS cache size, especially if you run a fast node! Here's an example of this featur

Re: DNS statistics from node operators

2009-06-03 Thread Jacob Appelbaum
Olaf Selke wrote: > Jacob Appelbaum wrote: >> I'm looking into some simple DNS related statistics in the Tor network. >> Specifically, I wrote a small patch that tells an operator the total >> number of cached entries for their node. I'd like to know about your DNS &

Re: Introducing Torfox 3.0.10

2009-06-09 Thread Jacob Appelbaum
Tor Fox wrote: > http://www.torfox.org/ > > Torfox is a mashup between Tor and Firefox. I’ve made changes to Firefox's > source code, at the socket level, forcing all connections to be encapsulated > with a Socks4 connection through "tor.exe". All DNS lookups are done with a > piped call to "tor-r

Re: Introducing Torfox 3.0.10

2009-06-10 Thread Jacob Appelbaum
Tor Fox wrote: > Jacob wrote: >> That sorta seems like a risky proposition, no? > In what way? > It doesn't appear to protect you against a variety of attacks? Have you read the design document that Mike wrote about Torbutton? https://www.torproject.org/torbutton/design/ >> Do you integrate Tor

Re: Introducing Torfox 3.0.10

2009-06-11 Thread Jacob Appelbaum
Tor Fox wrote: > Kyle wrote: >> I'm not seeing the benefit of Tor Fox since Tor Browser Bundle[1] and XB > Browser[2] do the same thing your doing. Why are you trying to recreate > work that's been done already? > > It doesn't work exactly the same. > This is an understatement. :-) >> First of

Re: Earthlink's broken DNS affecting Tor nodes?

2006-09-05 Thread Jacob Appelbaum
here, but I > seem to recall their root delegations differ from the real ones. > (Disclaimer, I work for OpenDNS.) If you're using OpenDNS, you disable all that stuff when you visit the preference page: http://www.opendns.com/prefs/ If you do that you'll get zero unexpected recursive dns behavior. Regards, Jacob Appelbaum

Re: hidden services spoof

2006-09-11 Thread Jacob Appelbaum
ding binaries and potentially running untrusted code. You need to verify the pgp signature of builds just as you would source code before building. At the cost of repeating what Nick said, you're verifying pgp signatures already already, right? Something, Jacob Appelbaum

Re: Tor-compatible secure email systems

2006-10-12 Thread Jacob Appelbaum
coderman wrote: > On 10/12/06, Total Privacy <[EMAIL PROTECTED]> wrote: >> ... >> Using PGP or similar to make an encrypted file (txt or word or >> something). >> Then attach it to an ordinary webmail upload function, to send it over to >> the recipient that alreday are informed of my public key (a

"Practical onion hacking: finding the real address of Tor clients"

2006-10-17 Thread Jacob Appelbaum
Hi *, Fortconsult wrote this and it may be of some interest to people on this list: http://www.packetstormsecurity.org/0610-advisories/Practical_Onion_Hacking.pdf And then of course there is this: http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#TotallyAnonymous Regards, Jacob

Re: Block directory authorities, is it possible?

2007-01-14 Thread Jacob Appelbaum
lmost seem this should be the other way around. I wonder if it's just an oversight that tor.eff.org hasn't been blocked in your case? How does the blocking with your ISP work? Do you get a generic reject page telling you the service is blocked? Do you get TCP resets? Regards, Jacob Appelbaum

Re: Problem downloading new Torpark

2007-02-05 Thread Jacob Appelbaum
Ringo Kamens wrote: > Can somebody provide a sha1/magnet or ed2k hash so people can download > it in censored countries from p2p? > > On 2/5/07, Eugen Leitl <[EMAIL PROTECTED]> wrote: >> On Mon, Feb 05, 2007 at 11:48:44AM +0800, Kevin Smith wrote: >> > Downloading Torpark from China has redirected

Re: Next news from Germany

2007-07-10 Thread Jacob Appelbaum
[EMAIL PROTECTED] wrote: > Hi, > > I am a german TOR admin ("knuffel"). I have running a mixmaster remailer too > ("awxcxn"). > Both were running on a dedicated root server. > > Half a year ago I have had my first trouble with the german BKA. The hoster > of my > server got a letter from the BK

Re: Next news from Germany

2007-07-10 Thread Jacob Appelbaum
Olaf Selke wrote: > Jacob Appelbaum wrote: >> I'm sorry to hear that you're having trouble. > > we're used to have trouble running TOR exit gateways in Germany ;-) > > Today I've been questioned by the Police as well as by the German > Federal Offic

[Fwd: SpyBye 0.3 released]

2007-07-10 Thread Jacob Appelbaum
This may be of interest to some people on this list. Original Message Subject: SpyBye 0.3 released Date: Sat, 9 Jun 2007 22:51:21 -0400 From: Niels Provos <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] SpyBye 0.3 was released today. A major new feature is that SpyBye can be used as

Re: Next news from Germany

2007-07-10 Thread Jacob Appelbaum
Eugen Leitl wrote: > On Tue, Jul 10, 2007 at 06:22:48PM +0300, Jacob Appelbaum wrote: > >> It seems that way. I run more than one node in Germany and I don't have > > Which Bundesland? Don't try this in Bavaria... As I understand it, Frankfurt and Berlin are nice p

[Fwd: MSIE7 entrapment again (+ FF tidbit)]

2007-07-16 Thread Jacob Appelbaum
The last bit of this email might be useful to someone trying to track users data across circuit sessions. Yet another reason to cull cookies and to disable javascript. Original Message Subject: MSIE7 entrapment again (+ FF tidbit) Date: Sat, 14 Jul 2007 00:20:54 +0200 (CEST) From