Re: [tor-talk] privacy of hidden services

2016-12-23 Thread Ivan Markin
Yes, this is correct. Some remarks: Allen: > To summarize, the info leakages for HS that do not use authorization are: > > - World at large can discover onion address using various directory > enumeration techniques. > - HS directory can track HS descriptor uploads and downloads and tie > those

Re: [tor-talk] [off-topic] linux firewall

2016-12-23 Thread Gökşin Akdeniz
> Do you know any working and stable project that can be the equivalent > of say AFWall+? Install OpenBSD. Configure and run PF. -- Gökşin Akdeniz pgpN1a683s8Tk.pgp Description: PGP signature -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe

Re: [tor-talk] [off-topic] linux firewall

2016-12-23 Thread grarpamp
On Fri, Dec 23, 2016 at 8:04 AM, Lara wrote: > Linux is such a backwards system, yet, like firefox, it is the only > working alternative to closed systems. While Linux may be a more commonly heard of alternative, it is definitely *not* the only alternative. For

Re: [tor-talk] [off-topic] linux firewall

2016-12-23 Thread Malte
Hi, lara@emails.veryspeedy.net transcribed 0.6K bytes on 23-Dec-2016 13:04: > > I can't seem to find any decent firewall. Like http, the linux firewall > is the same concept from the age of arpanet. Do you know any working and > stable project that can be the equivalent of say AFWall+?

Re: [tor-talk] [off-topic] linux firewall

2016-12-23 Thread Ben Tasker
Depending on what options your kernel was compiled with, you may be able to do this - https://debian-administration.org/article/120/Application_level_firewalling Otherwise there's Douane - http://douaneapp.com/ - no idea if it's any good, or leopardflower > Like http, the linux firewall is the

Re: [tor-talk] Not comfortable with the new single-hop system merged into Tor

2016-12-23 Thread David Goulet
On 23 Dec (00:03:00), Ivan Markin wrote: > David Goulet: > > On 20 Dec (23:38:43), hi...@safe-mail.net wrote: > >> I just think that this new single-hop system should have been reserved for > >> a > >> different Tor source/installation, dedicated only to non-anonymous hidden > >> services, not

Re: [tor-talk] [off-topic] linux firewall

2016-12-23 Thread Sebastian Niehaus
[off topic, please not on this list] 2016-12-23 14:04 GMT+01:00 Lara : > Linux is such a backwards system > > I can't seem to find any decent firewall. Like http, the linux firewall > is the same concept from the age of arpanet. Do you know any working and >

[tor-talk] [off-topic] linux firewall

2016-12-23 Thread Lara
Linux is such a backwards system, yet, like firefox, it is the only working alternative to closed systems. I can't seem to find any decent firewall. Like http, the linux firewall is the same concept from the age of arpanet. Do you know any working and stable project that can be the equivalent of

Re: [tor-talk] Massive Bandwidth Onion Services

2016-12-23 Thread Flipchan
This sounds like A really cool Project :))) I have worked out a hs loadbalancer But only in My mind i havent actually coded it, i Guess i would setup server A as frontend nginx and THE rest as upstream backends to nginx A Alec Muffett skrev: (19 december 2016 11:30:16

Re: [tor-talk] Massive Bandwidth Onion Services

2016-12-23 Thread Alec Muffett
On 23 Dec 2016 11:17 am, "Alec Muffett" wrote: "an n-squared mesh of daemons which have to communicate with and authenticate to each other using an application-specific protocol, as well as maintain some kind of consensus of which workers are alive, which are

Re: [tor-talk] Massive Bandwidth Onion Services

2016-12-23 Thread Alec Muffett
On 23 Dec 2016 2:02 am, "Ivan Markin" wrote: You'll have to do this after prop224 because of onion key cross-certifications, so fancy plain OnionBalance "renaming" won't work (HSDir system is unidirectional). I did wonder; that said, all the nodes will know about each other,