Re: [tor-talk] Dutch police break into webservers over hidden services

2011-09-08 Thread Orionjur Tor-admin
On 01.09.2011 13:24, Roger Dingledine wrote: > Several people have asked us on irc about recent news articles like > http://wireupdate.com/wires/19812/dutch-police-infiltrate-hidden-child-porn-websites-in-the-u-s/ > > Apparently the Dutch police exploited vulnerabilities in the webservers > reacha

Re: [tor-talk] Tor banned in Pakistan.

2011-09-08 Thread Orionjur Tor-admin
On 08.09.2011 21:23, Matthew wrote: > > http://www.guardian.co.uk/world/2011/aug/30/pakistan-bans-encryption-software > > > > > ___ > tor-talk mailing list > tor-talk@lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-ta

Re: [tor-talk] Mac?

2011-09-08 Thread cmeclax-sazri
On Thursday 08 September 2011 22:02:56 Andre Risling wrote: > - Who stores the MAC address of the computer you're using? The ISP? An > Webmail service? On IPv4, a MAC address goes only as far as the local network (the MAC address my router has on the WAN side goes to my ISP). On IPv6, if you ru

Re: [tor-talk] Mac?

2011-09-08 Thread Seth David Schoen
Andre Risling writes: > I've some questions about MAC address and changing it > > - Why would someone want to change ("spoof") their MAC address? The MAC address usually identifies a particular physical computer to a local area network. If someone doesn't want their physical computer to be reco

Re: [tor-talk] Location App

2011-09-08 Thread Runa A. Sandvik
On Fri, Sep 9, 2011 at 12:11 AM, SpookFX wrote: > Hi all, > I am trying to create an app that allows you to choose a location for your > end point, to that end I'm trying to get the location and fingerprint of > endpoints from a torstatus server. I'd like to use something like curl or > wget to ge

Re: [tor-talk] Mac?

2011-09-08 Thread Andre Risling
-- andr...@fastmail.fm On Thursday, September 08, 2011 7:32 PM, "Seth David Schoen" wrote: > Andre Risling writes: > > > I've some questions about MAC address and changing it > > > > - Why would someone want to change ("spoof") their MAC address? > > The MAC address usually identifies

[tor-talk] Mac?

2011-09-08 Thread Andre Risling
I've some questions about MAC address and changing it - Why would someone want to change ("spoof") their MAC address? - Is a computers MAC address sent out whenever you connect to the web? -If it is, how often is it sent out? - Who stores the MAC address of the computer you're using? The IS

Re: [tor-talk] Tor banned in Pakistan.

2011-09-08 Thread Michael Holstein
> Very disturbing. I wonder if its possible to hide encrypted traffic as > seemingly unencrypted http traffic in much the same way as a gpg key is > rendered as ascii armored, or stenographically inside images. Although > such methods may be inefficient, they may be good enough for some purpose

Re: [tor-talk] Tor banned in Pakistan.

2011-09-08 Thread David H. Lipman
From: "Anthony G. Basile" > On 09/08/2011 05:23 PM, Matthew wrote: >> >> http://www.guardian.co.uk/world/2011/aug/30/pakistan-bans-encryption-software >> >> > > Very disturbing. I wonder if its possible to hide encrypted traffic as > seemingly unencrypted http traffic in much the same way as a

[tor-talk] Location App

2011-09-08 Thread SpookFX
Hi all, I am trying to create an app that allows you to choose a location for your end point, to that end I'm trying to get the location and fingerprint of endpoints from a torstatus server. I'd like to use something like curl or wget to get the data. I'm open to suggestion, and ideas on how best

[tor-talk] Tor banned in Pakistan.

2011-09-08 Thread Matthew
http://www.guardian.co.uk/world/2011/aug/30/pakistan-bans-encryption-software ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] Tor banned in Pakistan.

2011-09-08 Thread Anthony G. Basile
On 09/08/2011 05:23 PM, Matthew wrote: > > http://www.guardian.co.uk/world/2011/aug/30/pakistan-bans-encryption-software > > Very disturbing. I wonder if its possible to hide encrypted traffic as seemingly unencrypted http traffic in much the same way as a gpg key is rendered as ascii armored

Re: [tor-talk] Dutch CA issues fake *.torproject.org cert (among many others)

2011-09-08 Thread Julian Yon
On 08/09/11 15:20, Joe Btfsplk wrote: > My point was (& I think Julian's) was, aside from certificate issues, > various practices of many sites where security is vitally important, > their WORDS "~ we take customers' security & online safety very > seriously & use high security standards...," and t

Re: [tor-talk] Hardware accel by default

2011-09-08 Thread coderman
On Thu, Sep 8, 2011 at 7:40 AM, wrote: > ... > new laptop has the AES-NI CPU instruction set. I added this to my torrc: > > HardwareAccel 1 > AccelName     aesni > > And now when I start Tor I get this: > > [notice] Using OpenSSL engine Intel AES-NI engine [aesni] for AES nice! glad to know this

Re: [tor-talk] Dutch CA issues fake *.torproject.org cert (among many others)

2011-09-08 Thread Joe Btfsplk
On 9/7/2011 3:42 PM, Marsh Ray wrote: On 09/07/2011 03:19 PM, Julian Yon wrote: My bank forces me to enter part of my password using unobscured dropdowns "for security". Sure, it avoids keyloggers, but what about *someone standing behind me*? Do they have a gun? Otherwise, cover the screen wi

[tor-talk] Hardware accel by default

2011-09-08 Thread tor
Hi, I was just reading through the tor man page, and I came across the HardwareAccel and AccelName options. This peaked my interest because my new laptop has the AES-NI CPU instruction set. I added this to my torrc: HardwareAccel 1 AccelName aesni And now when I start Tor I get this: [notic

Re: [tor-talk] Tor spying

2011-09-08 Thread Jacob Appelbaum
On 09/08/2011 04:21 AM, Indie Intel wrote: > The more I research this, the more it seems this sort of ``research'' > is more common than not. Wikileaks, Jacob Appelbaum, Adrian Lamo, > Moxie Marlinspike... who else? Iran?! > > The Tor Project needs to shed some light on this or it will have a > se

Re: [tor-talk] Tor spying

2011-09-08 Thread Roger Dingledine
On Wed, Sep 07, 2011 at 07:21:21PM -0700, Indie Intel wrote: > ``Moxie Marlinspike, probably the smartest guy in the world right now >on SSL issues, did a study a few years ago on how many Tor users ??? not >even regular users, but Tor users, clearly concerned about their privacy >and possessed wit

Re: [tor-talk] Where are the older Tor bundles?

2011-09-08 Thread M Robinson
On 9/7/2011 10:22 PM, Andrew Lewman wrote: > On Wednesday, September 07, 2011 19:24:56 M Robinson wrote: >> How do ID the 'no installation' packages? > > if you mean tor browser, then > > https://archive.torproject.org/tor-package-archive/torbrowser/ > Thanks, again. -- GnuPG is Free Software

Re: [tor-talk] Tor spying

2011-09-08 Thread Julian Yon
On 08/09/11 03:21, Indie Intel wrote: > The more I research this, the more it seems this sort of > ``research''is more common than not. Wikileaks, Jacob Appelbaum, > Adrian Lamo, Moxie Marlinspike... who else? Iran?! You become good at implementing security by understanding how to break it. Som

Re: [tor-talk] Tor spying

2011-09-08 Thread Mike Perry
Thus spake Greg Kalitnikoff (kalitnik...@privatdemail.net): > Andrew Lewman wrote: > > Moxie is a smart guy, his answer to the CA issues, and therefore his own > > sslsniff/sslstrip attack is currently http://convergence.io/. I think > > Moxie's > > on the list, he can reply as well. > > Do y