Re: [tor-talk] Stop pushing stackexchange in every thread

2013-10-07 Thread mirimir
OK, it's clear that the list doesn't want me to do that. So I'll stop. -- tor-talk mailing list - tor-talk@lists.torproject.org To unsusbscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

[tor-talk] Tor Stymies NSA- great article, Good job Tor developers and review staff!

2013-10-07 Thread Andrew F
Tor Stymies NSA- great article, Good job Tor developers and review staff! http://www.theregister.co.uk/2013/10/04/nsa_using_firefox_flaw_to_snoop_on_tor_users/ -- tor-talk mailing list - tor-talk@lists.torproject.org To unsusbscribe or change other settings go to

Re: [tor-talk] Freenet and hidden services

2013-10-07 Thread Jerzy Łogiewa
Do you mean if Tor wold have distributed data store like freenet? Nice idea, please implement this. :~ -- Jerzy Łogiewa -- jerz...@interia.eu On Oct 6, 2013, at 3:26 AM, It's Good to be Alive wrote: Hi, I'm fairly new at Tor, and this is my first time on a mailing list, so if there's a

[tor-talk] [Freedombox-discuss] Tor

2013-10-07 Thread Eugen Leitl
- Forwarded message from Tim Retout dioc...@debian.org - Date: Sun, 06 Oct 2013 23:20:42 +0100 From: Tim Retout dioc...@debian.org To: freedombox-discuss freedombox-disc...@lists.alioth.debian.org Subject: [Freedombox-discuss] Tor Message-ID: 1381098042.12011.36.camel@air X-Mailer:

Re: [tor-talk] best distro to use Tor

2013-10-07 Thread grarpamp
On Sun, Oct 6, 2013 at 9:37 PM, Andrew F andrewfriedman...@gmail.com wrote: BSD is great, but its does not have the same level of hardware support as Linux. That's correct, BSD has less buggy, fuller and faster support of some hardware than Linux ;) If you've got rare, fad, small, mobile or

[tor-talk] Simple Question

2013-10-07 Thread Crypto
If I run Tor through a VPN and set it as a exit node will it appear that the exit is located at my true IP address or the IP address of the exit point of the VPN? I'm using PIA as the VPN client. -- Crypto Keywords: terrorism, bombs, jogging, suntan lotion, nails, pellets, knives, shoes,

Re: [tor-talk] [Freedombox-discuss] Tor

2013-10-07 Thread Graham Todd
I have been thinking about Tor some more, especially in light of Friday's story: http://www.theguardian.com/world/2013/oct/04/nsa-gchq-attack-tor-network-encryption [Added text about Tor deleted] How about JonDoNym with Tor? see https://anonymous-proxy-servers.net/en/faq-jondo.html Is this

Re: [tor-talk] Freenet and hidden services

2013-10-07 Thread str4d
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 I consider Tahoe-LAFS to be the (current) best solution for this. It provides a distributed data store, which can be used for hosting (with a Javascript web server). I know Tahoe works with Tor via SOCKS but I don't personally know of any active

Re: [tor-talk] Tor Stymies NSA- great article, Good job Tor developers and review staff!

2013-10-07 Thread Luther Blissett
On Mon, 2013-10-07 at 06:13 +, Andrew F wrote: Tor Stymies NSA- great article, Good job Tor developers and review staff! http://www.theregister.co.uk/2013/10/04/nsa_using_firefox_flaw_to_snoop_on_tor_users/ NSA playing dirty and getting busted, that's tor. And to think that they read and

Re: [tor-talk] development interests

2013-10-07 Thread Luther Blissett
On Sun, 2013-10-06 at 13:31 -0400, David Green wrote: I have opened the (personal) Pandora's Box of considering security, etc, and I have been observing this list, so now I am keen for more myself blushing. I have taken note of the recent postings re. distros -- much I have historically

Re: [tor-talk] ScrambleSuit is ready for testing: help needed!

2013-10-07 Thread dardok
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 George Kadianakis: Philipp Winter identity.funct...@gmail.com writes: Over the past months, we have been working on the ScrambleSuit pluggable transport protocol [1]. The code has now reached some maturity and it's time to test it! I set up

Re: [tor-talk] best distro to use Tor

2013-10-07 Thread Blibbet
BSD is great, but its does not have the same level of hardware support as Linux. That's correct, BSD has less buggy, fuller and faster support of some hardware than Linux ;) If you've got rare, fad, small, mobile or closed hardware, expect to have to read the hardware list of many OS before

Re: [tor-talk] development interests

2013-10-07 Thread David Green
Ah, but as far as I am aware (having tried it), it generates a USB disk BUT it is not recognised or bootable from a Mac. What say you? :) On 7 October 2013 14:44, Luther Blissett lbliss...@paranoici.org wrote: On Sun, 2013-10-06 at 13:31 -0400, David Green wrote: I have opened the

Re: [tor-talk] best distro to use Tor

2013-10-07 Thread Blibbet
A few minutes ago, I wrote: BTW, UEFI-based systems have a full IPv4/IPV6 network stack, with PXE remote boot and WS-Management remote admin/control, and tools like Perl and Telnet baked-in, so make sure your firmware isn't spewing packets before Linux and Tor loads. :-) I've already received

[tor-talk] time to disable 3DES?

2013-10-07 Thread Lee
Isn't it time to quit using DES? Finally gave TBB a try (version 2.3.25-13), seems to me that the firefox component needs a lot of hardening. https://www.mikestoolbox.org/ Client Cipher Suites: C00A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA C014

Re: [tor-talk] Simple Question

2013-10-07 Thread Crypto
Thank you for your response. Although I have been reading this list for over a year this is the first time I have posted. Therefore I was unaware of the response time. My apologies. grarpamp grarp...@gmail.com wrote: On Mon, Oct 7, 2013 at 2:48 PM, Crypto cry...@jpunix.net wrote: Maybe this

Re: [tor-talk] Simple Question

2013-10-07 Thread grarpamp
On Mon, Oct 7, 2013 at 2:48 PM, Crypto cry...@jpunix.net wrote: Maybe this was missed the first time? Any answer would be appreciated. This is often a busy list with busy people. Expecting a reply within 12hr to a generic question about what any given app looks like in conjunction with a vpn,

Re: [tor-talk] best distro to use Tor

2013-10-07 Thread Johnny Carson
Gerardo: Hi, I've been using Tor in Windows for a while now, mostly for practical reasons I couldn't change the OS, but I'm thinking now it's time to change to Linux, and I'm a little lost in what particular distro I should use: * Heard a lot about Talis, but I can't use a live cd for

Re: [tor-talk] Adblock for everyone

2013-10-07 Thread Joe Btfsplk
On 10/6/2013 3:14 PM, Joe Btfsplk wrote: Thanks for your insight. On 10/6/2013 10:18 AM, Andrew Lewman wrote: Adblock whitelists certain advertising companies and ads themselves: These white lists can easily be disabled, but then that conflicts w/ Tor's concept of damaging sites' acceptance

Re: [tor-talk] time to disable 3DES?

2013-10-07 Thread Lee
On 10/7/13, grarpamp grarp...@gmail.com wrote: On Mon, Oct 7, 2013 at 3:58 PM, Lee ler...@gmail.com wrote: Isn't it time to quit using DES? Finally gave TBB a try (version 2.3.25-13), seems to me that the firefox component needs a lot of hardening. https://www.mikestoolbox.org/ This may

Re: [tor-talk] best distro to use Tor

2013-10-07 Thread Eugen Leitl
On Mon, Oct 07, 2013 at 11:59:42AM -0700, Blibbet wrote: BTW, UEFI-based systems have a full IPv4/IPV6 network stack, with PXE remote boot and WS-Management remote admin/control, and tools like Perl and Telnet baked-in, so make sure your firmware isn't spewing packets before Linux and Tor

[tor-talk] still unable to reach StartPage or Ixquick

2013-10-07 Thread Joe Btfsplk
Haven't been able to reach StartPage or Ixquick sites or do search for a week or more, in TBB 2.3.25-12. Can't even reach their home pages through another search engine, like Google or Yahoo. ** Are others able to access these 2 search engines in the *same TBB version* as I'm using? If so,

[tor-talk] Guard failing very large number of circuits

2013-10-07 Thread grarpamp
While abusing Tor, I see a fair number of EG fails. I looked briefly at src and man and it seems to hint at CircuitBuildTimeout, which I then set to 90. But I don't see that initial bump reflected in the below cutoff field. Though I do think I see fewer entries now than in an earlier run. Is

Re: [tor-talk] Guard failing very large number of circuits

2013-10-07 Thread Roger Dingledine
On Mon, Oct 07, 2013 at 06:17:32PM -0400, grarpamp wrote: But I don't see that initial bump reflected in the below cutoff field. Though I do think I see fewer entries now than in an earlier run. Is CircuitBuildTimeout the right knob? Should I bump NumEntryGuards and auto-distribute load

Re: [tor-talk] Simple Answer

2013-10-07 Thread Crypto
On 10/7/2013 4:22 PM, Rasputin wrote: Crypt: Assuming the following: Your first connect to your VPN Then you connect to Tor Assume you're running a Tor exit node if I understood you correctly. Your IP address will be identified as the IP of the exit node of your VPN. Excellent

Re: [tor-talk] time to disable 3DES?

2013-10-07 Thread Yawning Angel
* Lee ler...@gmail.com [2013-10-07 15:58:19 -0400]: Isn't it time to quit using DES? Finally gave TBB a try (version 2.3.25-13), seems to me that the firefox component needs a lot of hardening. DES != 3DES, and supporting 3DES suites is standard across major browsers. Additionally, having

Re: [tor-talk] best distro to use Tor

2013-10-07 Thread adrelanos
Eugen Leitl: On Mon, Oct 07, 2013 at 11:59:42AM -0700, Blibbet wrote: BTW, UEFI-based systems have a full IPv4/IPV6 network stack, with PXE remote boot and WS-Management remote admin/control, and tools like Perl and Telnet baked-in, so make sure your firmware isn't spewing packets before

[tor-talk] Running an exit node thru a VPN

2013-10-07 Thread Crypto
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Folks! I have excellent news! My VPN provider has sent me email as well as a FAX granting me specific permission to run a TOR exit node through their VPN service! They have no problems with it. So my next question is where is the best place for

Re: [tor-talk] still unable to reach StartPage or Ixquick

2013-10-07 Thread Joe Btfsplk
On 10/7/2013 5:27 PM, Roger Dingledine wrote: On Mon, Oct 07, 2013 at 05:18:17PM -0500, Joe Btfsplk wrote: Haven't been able to reach StartPage or Ixquick sites or do search for a week or more, in TBB 2.3.25-12. Can't even reach their home pages through another search engine, like Google or

Re: [tor-talk] time to disable 3DES?

2013-10-07 Thread ramo
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I know approximately zip about crypto, but AES was selected as the replacement for DES back in 2000 it seems like DES has always lived under the cloud of did NSA deliberately weaken it? So why keep it around? It's not like there are no

Re: [tor-talk] Freenet and hidden services

2013-10-07 Thread mirimir
On 10/06/2013 08:39 PM, adrelanos wrote: It's Good to be Alive: True :) Hi, I'm fairly new at Tor, and this is my first time on a mailing list, so if there's a better place to ask, let me know. Are there any plans, long-term or short, for augmenting Tor with Freenet-style resilient,

Re: [tor-talk] Silk Road taken down by FBI

2013-10-07 Thread mirimir
On 10/06/2013 10:32 AM, mick wrote: On Sun, 06 Oct 2013 02:36:20 + mirimir miri...@riseup.net allegedly wrote: Still, if one uses nested VPN tunnels from multiple providers in suitably chosen spheres of influence, it will be nontrivial for adversaries to install enough taps. Going

Re: [tor-talk] time to disable 3DES?

2013-10-07 Thread Lee
On 10/7/13, Yawning Angel yawn...@schwanenlied.me wrote: * Lee ler...@gmail.com [2013-10-07 15:58:19 -0400]: Isn't it time to quit using DES? Finally gave TBB a try (version 2.3.25-13), seems to me that the firefox component needs a lot of hardening. DES != 3DES, and supporting 3DES suites

Re: [tor-talk] time to disable 3DES?

2013-10-07 Thread Lee
On 10/7/13, r...@goodvikings.com r...@goodvikings.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I know approximately zip about crypto, but AES was selected as the replacement for DES back in 2000 it seems like DES has always lived under the cloud of did NSA deliberately weaken

[tor-talk] What the NSA cares about getting and defenses

2013-10-07 Thread Watson Ladd
Prompted by the Ars Technica reporting on QUANTUM, I took a look at the slide and read the text, as well as compared to the MULLINIZE document describing NAT breaking. My conclusion is that the NSA obtains significant amounts of information from user activity in between closing browsers, and that

[tor-talk] Convergence and Exit Nodes

2013-10-07 Thread Sean Alexandre
In light of FoxAcid and the NSA hijacking traffic coming out of exit nodes [1], I'm wondering about the possibilities for building counter measures into exit nodes. To start it might be something as simple as bundling some type alternate CA system such Convergence into exit nodes [2]. Have exit

Re: [tor-talk] still unable to reach StartPage or Ixquick

2013-10-07 Thread Matthew Finkel
On Mon, Oct 07, 2013 at 06:19:57PM -0500, Joe Btfsplk wrote: On 10/7/2013 5:27 PM, Roger Dingledine wrote: On Mon, Oct 07, 2013 at 05:18:17PM -0500, Joe Btfsplk wrote: Haven't been able to reach StartPage or Ixquick sites or do search for a week or more, in TBB 2.3.25-12. Can't even reach

Re: [tor-talk] still unable to reach StartPage or Ixquick

2013-10-07 Thread Joe Btfsplk
On 10/7/2013 9:34 PM, Matthew Finkel wrote: Thanks, but - Whoa! Tor 0.2.4.x isn't declared stable, so skip it - go straight to 3.0a? I know it's got a lot of ? unproven as rock solid? features, but what about my secret double naught spying duties? So these are actually two versions number for

Re: [tor-talk] time to disable 3DES?

2013-10-07 Thread Yawning Angel
* Lee ler...@gmail.com [2013-10-07 21:49:29 -0400]: On 10/7/13, Yawning Angel yawn...@schwanenlied.me wrote: * Lee ler...@gmail.com [2013-10-07 15:58:19 -0400]: Isn't it time to quit using DES? Finally gave TBB a try (version 2.3.25-13), seems to me that the firefox component needs a