Re: [tor-talk] Waiting for a new exit node

2014-06-29 Thread Joe Btfsplk
On 6/29/2014 2:56 AM, C B wrote: It is really pretty annoying to be surfing along and suddenly get a Unable to connect Firefox can't establish a connection to the server message. Right now I am stuck on 188.226.249.138 as I have been many times before. In ten minutes I will be re-assigned a

Re: [tor-talk] Bruce Schneier's Guardian Article about N_S_A and Tor.

2014-06-29 Thread Joe Btfsplk
On 6/29/2014 1:22 AM, Roger Dingledine wrote: On Sat, Jun 28, 2014 at 09:38:05PM +, williamwin...@openmailbox.org wrote: I don't understand what Schneier means by this: After identifying an individual Tor user on the internet, the NSA uses its network of secret internet servers to

Re: [tor-talk] hardware acceleration OK or not?

2014-06-28 Thread Joe Btfsplk
On 6/28/2014 4:54 AM, Roger Dingledine wrote: On Fri, Jun 27, 2014 at 01:27:50PM -0500, Joe Btfsplk wrote: Hardware acceleration is unchecked by default it Torbrowser. Other than some machines might not support it, is there a reason not to enabled it? Some fingerprinting or other issue

Re: [tor-talk] Vidalia as stand-alone client???

2014-06-28 Thread Joe Btfsplk
On 6/28/2014 2:16 PM, Roger Dingledine wrote: On Thu, Jun 26, 2014 at 11:30:19AM -0700, Bobby Brewster wrote: However, I'm wondering if this is the best way or is Vidalia now deprecated? It is now deprecated. It has been unsupported for years. :(

Re: [tor-talk] Bruce Schneier's Guardian Article about N_S_A and Tor.

2014-06-28 Thread Joe Btfsplk
On 6/28/2014 6:36 PM, Seth David Schoen wrote: williamwin...@openmailbox.org writes: I don't understand what Schneier means by this: After identifying an individual Tor user on the internet, the NSA uses its network of secret internet servers to redirect those users to another set of secret

Re: [tor-talk] Bad Exit Nodes.

2014-06-27 Thread Joe Btfsplk
On 6/27/2014 6:26 AM, Bobby Brewster wrote: /What is to stop someone from setting up an exit node and a) sniffing all traffic or specifically non-SSL usernames and passwords and b) using SSLStrip to access SSL usernames and passwords?/ Nothing, if they're not encrypted. Common precaution is

[tor-talk] hardware acceleration OK or not?

2014-06-27 Thread Joe Btfsplk
Hardware acceleration is unchecked by default it Torbrowser. Other than some machines might not support it, is there a reason not to enabled it? Some fingerprinting or other issue? The dev manual (stable) just has this to say: */HardwareAccel* *0*|*1* If non-zero, try to use built-in

Re: [tor-talk] Downloading Programs with TBB - dangerous???

2014-06-26 Thread Joe Btfsplk
On 6/26/2014 1:34 PM, Bobby Brewster wrote: /Let's say I download a PDF with Tor. I get the warning that I might download it outside Tor./ That used to be the norm, but I believe the message was changed in later TB versions. Which version are you using? I'm not sure I've seen that warning

Re: [tor-talk] Illegal Activity As A Metric of Tor Security and Anonymity

2014-06-25 Thread Joe Btfsplk
On 6/25/2014 3:28 PM, Mark McCarron wrote: I have been examining the number of what would normally be deemed as illegal sites sites on Tor. Eliminating the narcotics trade, as these tend to be intelligence agency backed enterprises, a serious decline has been noted across the board. This

Re: [tor-talk] Illegal Activity As A Metric of Tor Security and Anonymity

2014-06-25 Thread Joe Btfsplk
On 6/25/2014 4:56 PM, Mark McCarron wrote: Basically, I keep a track of site numbers year-on-year, site availability from 3rd party monitoring and read comments on forums and chat. From what I can gather, most of these sites were suspected of being honeypots due to their tendency to remove

Re: [tor-talk] Importance of individual useragent items

2014-06-23 Thread Joe Btfsplk
On 6/23/2014 2:57 PM, Jeremy Rand wrote: On 06/23/2014 12:11 PM, Joe Btfsplk wrote: I noticed there are at least 2 different references in Torbrowser for useragent over ride strings. The Panopticlick site picks up this one: /Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Firefox/24.0

Re: [tor-talk] Should DOM storage really be enabled by default in TorBrowser?

2014-06-20 Thread Joe Btfsplk
On 6/19/2014 1:51 PM, Georg Koppen wrote: Joe Btfsplk: Curious: Should DOM storage really be enabled by default in Tor Browser 3.6.x, when other forms of disk storage are disabled? DOM Storage in Tor Browser does not save state to disc. And it is bound to the URL bar domain (see design

Re: [tor-talk] Should DOM storage really be enabled by default in TorBrowser?

2014-06-20 Thread Joe Btfsplk
On 6/20/2014 9:04 AM, Joe Btfsplk wrote: On 6/19/2014 1:51 PM, Georg Koppen wrote: Joe Btfsplk: Curious: Should DOM storage really be enabled by default in Tor Browser 3.6.x, when other forms of disk storage are disabled? DOM Storage in Tor Browser does not save state to disc

Re: [tor-talk] Should DOM storage really be enabled by default in TorBrowser?

2014-06-19 Thread Joe Btfsplk
19/06/2014 18:15, Joe Btfsplk a écrit : Curious: Should DOM storage really be enabled by default in Tor Browser 3.6.x, when other forms of disk storage are disabled? If so, why is that? Thanks. I'm sure many would enjoy hearing from those directly involved w/ TorBrowser, or that consider

Re: [tor-talk] Should DOM storage really be enabled by default in TorBrowser?

2014-06-19 Thread Joe Btfsplk
On 6/19/2014 1:51 PM, Georg Koppen wrote: Joe Btfsplk: Curious: Should DOM storage really be enabled by default in Tor Browser 3.6.x, when other forms of disk storage are disabled? DOM Storage in Tor Browser does not save state to disc. And it is bound to the URL bar domain (see design

Re: [tor-talk] Presentation material in LaTeX

2014-06-18 Thread Joe Btfsplk
most people (not suffering from something) really care if it's Tor, TOR, tOR, tOr... And newer people coming in may think it a bit strange to make a serious point, to not spelling it correctly, per widely accepted, international convention. :D My name's not Joe, it's jOe. On rEmUlak, only

Re: [tor-talk] Flash executables keep starting in background when using TBB

2014-06-18 Thread Joe Btfsplk
On 6/18/2014 1:03 AM, Артур Истомин wrote: Are you saying you have Flash processes running under Fx (not TBB)? 1) Did you use Flash player in Fx, that would have started them, or do you not know what started them? /It was started after visiting https://helpx.adobe.com/flash-player.html and

Re: [tor-talk] Flash executables keep starting in background when using TBB

2014-06-17 Thread Joe Btfsplk
, or if determine if TBB, or Flash, is calling the 2 files to start? Even though _no Flash vids are ever played_. Below - Some additional replies to previous comments. On 6/16/2014 7:38 PM, Joe Btfsplk wrote: On 6/16/2014 7:02 PM, krishna e bera wrote: On 14-06-16 03:17 PM, Joe Btfsplk wrote: In at least

Re: [tor-talk] Flash executables keep starting in background when using TBB

2014-06-17 Thread Joe Btfsplk
On 6/17/2014 12:33 PM, Артур Истомин wrote: On Tue, Jun 17, 2014 at 11:23:53AM -0500, Joe Btfsplk wrote: I'd still really like some help on finding what calls / causes the 2 flash .exe files to start in background. They're ALWAYS shown by Process Explorer, in the *same process tree - directly

[tor-talk] Flash executables keep starting in background when using TBB

2014-06-16 Thread Joe Btfsplk
In at least the last couple TBB versions, or longer, I've found FlashPlayerPlugin_x.x.exe (latest *13_0_0_214.exe) running in background - numerous times. Actually, 2 instances of flash exe files are always shown running. Biggest question is, what is Flash doing to Tor anonymity in these

Re: [tor-talk] Flash executables keep starting in background when using TBB

2014-06-16 Thread Joe Btfsplk
On 6/16/2014 7:02 PM, krishna e bera wrote: On 14-06-16 03:17 PM, Joe Btfsplk wrote: In at least the last couple TBB versions, or longer, I've found FlashPlayerPlugin_x.x.exe (latest *13_0_0_214.exe) running in background - numerous times. Actually, 2 instances of flash exe files are always

Re: [tor-talk] Non-free country law preventing Tor from getting donations

2014-06-15 Thread Joe Btfsplk
On 6/14/2014 10:40 PM, Andrew Lewman wrote: On 06/14/2014 03:21 AM, Sebastian G. bastik.tor wrote: That has to be a violation of your rights. It's the law in the USA. Regardless of how one feels about it, it's currently against the law. The citizen resided in a country as listed as a State

Re: [tor-talk] Non-free country law preventing Tor from getting donations

2014-06-15 Thread Joe Btfsplk
On 6/15/2014 2:08 PM, Mirimir wrote: The law is the law, and (acting openly) the choices are compliance, or noncompliance on principle. But see above. No, the law is often temporary, until someone has the guts to stand up (100's, maybe 1000's of times, in the last 150 yrs, in U.S. alone). This

Re: [tor-talk] Craigslist now giving Tor the slows, lol

2014-06-14 Thread Joe Btfsplk
On 6/14/2014 12:51 AM, grarpamp wrote: If other sites are loading similarly slow it may be possible to find out why or what is being used to do it. *CL never replies to support queries.* I have found answers to Craigslist issues on their users forum - sometimes direct replies to my post. The

Re: [tor-talk] Non-free country law preventing Tor from getting donations

2014-06-14 Thread Joe Btfsplk
On 6/14/2014 2:21 AM, Sebastian G. bastik.tor wrote: Andrew wrote: # Highlights (...) - Looked into legality of receiving a large financial donation from a country on the US Treasury embargoed list. Unsurprisingly, we cannot accept such a donation due to the source. That has to be a

Re: [tor-talk] Sending email from Tor browser

2014-06-14 Thread Joe Btfsplk
On 6/14/2014 4:30 AM, Chen Cecilia Zhang wrote: Thanks for the reply. I meant doing everything through Tor browser write an email but set the sending date as 1 month later. Then closed the Tor browser. Just wonder if the email send automatically by itself 1 month later, the IP is still

Re: [tor-talk] Sending email from Tor browser

2014-06-14 Thread Joe Btfsplk
On 6/14/2014 6:33 AM, Chen Cecilia Zhang wrote: and the strange thing is : I tried to test the email sending from Tor and without Tor browser, and the IP address shows in the original email from gmail are the same Will anyone help explain how come? thansks On Sat, Jun 14, 2014 at 4:22 AM,

Re: [tor-talk] Sending email from Tor browser

2014-06-14 Thread Joe Btfsplk
On 6/14/2014 12:32 PM, Moritz Bartl wrote: On 06/14/2014 01:33 PM, Chen Cecilia Zhang wrote: and the strange thing is : I tried to test the email sending from Tor and without Tor browser, and the IP address shows in the original email from gmail are the same How would you think Gmail (as

Re: [tor-talk] Craigslist now giving Tor the slows, lol

2014-06-14 Thread Joe Btfsplk
On 6/14/2014 5:07 PM, grarpamp wrote: On Sat, Jun 14, 2014 at 9:47 AM, Joe Btfsplk joebtfs...@gmx.com wrote: I have found answers to Craigslist issues on their users forum - sometimes direct replies to my post. The more technical aspects of this issue may be beyond many users' knowledge

Re: [tor-talk] Sending email from Tor browser

2014-06-14 Thread Joe Btfsplk
On 6/14/2014 4:26 PM, grarpamp wrote: On Sat, Jun 14, 2014 at 11:15 AM, Joe Btfsplk joebtfs...@gmx.com wrote: Using webmail vs. an email client (like Thunderbird) may not be as convenient, but eliminating the client means one less thing that could possibly compromise anonymity. First

Re: [tor-talk] Non-free country law preventing Tor from getting donations

2014-06-14 Thread Joe Btfsplk
On 6/14/2014 5:50 PM, krishna e bera wrote: On 14-06-14 01:00 PM, Collin Anderson wrote: On Sat, Jun 14, 2014 at 10:07 AM, Joe Btfsplk joebtfs...@gmx.com wrote: I'm not a legal or embargo rules expert, but I wonder if an embargoed country or individuals in it, giving money to a non-profit

Re: [tor-talk] Non-free country law preventing Tor from getting donations

2014-06-14 Thread Joe Btfsplk
On 6/14/2014 7:56 PM, Mirimir wrote: On 06/14/2014 06:29 PM, Joe Btfsplk wrote: SNIP It's OK for an organization dedicated to providing anonymity to protect users - everywhere, in no small part from various gov't agencies, to take major funding from... a gov't agency. Yet, that organization

Re: [tor-talk] Ad Blocking Software

2014-06-11 Thread Joe Btfsplk
On 6/11/2014 12:50 AM, Mirimir wrote: Yes indeed. So why doesn't TBB include AdBlock? In my experience, unlike NoScript, AdBlock Plus rarely breaks sites. Reductions in site loading time are dramatic. And then there's the privacy benefit. The reason given in the past by Tor Project leaders,

Re: [tor-talk] Ad Blocking Software

2014-06-10 Thread Joe Btfsplk
On 6/10/2014 2:27 PM, Antonio Z wrote: I did not think that Adblock was trustable considering how an extension can bypass Tor. Good question. I've never sniffed ABP activities to see what it does when installed in TBB. From memory, it shouldn't be phoning home, except to get updates. Don't

Re: [tor-talk] [OT[ New web-cookie policies on internet

2014-06-02 Thread Joe Btfsplk
On 6/2/2014 1:49 PM, SecTech wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 The TBB with TorButton has the ability to delete all cookies. Than the site can't track you, but you can enable first party cookies. SecTech AFAIK, Torbutton doesn't have the ability to delete 1st party

Re: [tor-talk] [OT[ New web-cookie policies on internet

2014-05-30 Thread Joe Btfsplk
On 5/30/2014 2:11 AM, Mike Cardwell wrote: * on the Thu, May 29, 2014 at 10:40:24PM -0400, Michael Wolf wrote: Anyone else noticing slashdot, google, and a few other big ones i can't recall, now throwing annoying popups with 'hey, we're using cookies, click to agree to this' ? What new legal

Re: [tor-talk] [OT[ New web-cookie policies on internet

2014-05-30 Thread Joe Btfsplk
On 5/30/2014 12:58 PM, Mike Cardwell wrote: * on the Fri, May 30, 2014 at 09:32:15AM -0500, Joe Btfsplk wrote: Myself and a few other people have been slowly building an Adblock filter list to remove these cookie warnings from sites for about 2 years now: That's good, but how will blocking

Re: [tor-talk] [OT[ New web-cookie policies on internet

2014-05-29 Thread Joe Btfsplk
On 5/29/2014 8:18 PM, grarpamp wrote: Anyone else noticing slashdot, google, and a few other big ones i can't recall, now throwing annoying popups with 'hey, we're using cookies, click to agree to this' ? What new legal groupthink bs is behind this? I don't use gobble, but I've noticed a few

Re: [tor-talk] tor-talk Digest, Vol 40, Issue 47

2014-05-27 Thread Joe Btfsplk
On 5/27/2014 2:10 AM, Aymeric Vitte wrote: Le 26/05/2014 22:24, Joe Btfsplk a écrit : I haven't done testing to see what identifying data might be revealed (if any) by this, but for Youtube ( some others), if you copy the vid URL, even though Flash isn't active, then paste into VLC, SMPlayer

Re: [tor-talk] tor-talk Digest, Vol 40, Issue 47

2014-05-27 Thread Joe Btfsplk
On 5/27/2014 12:34 PM, Aymeric Vitte wrote: Le 27/05/2014 16:45, Joe Btfsplk a écrit : I assume those settings would keep VLC inside Tor network Yes, unless VLC fails to proxy everything to the socks proxy , but haven't confirmed it. VLC devs would know. If it doesn't, it's probably a bug

Re: [tor-talk] tor-talk Digest, Vol 40, Issue 47

2014-05-27 Thread Joe Btfsplk
On 5/27/2014 1:02 PM, Aymeric Vitte wrote: Correction: I had something else open during the test, apparently VLC does proxy correctly the requests. OK, good to know. I may ask on VLC forum if others have checked this, just to get feedback - though I doubt a large % use it like that. --

Re: [tor-talk] tor-talk Digest, Vol 40, Issue 47

2014-05-26 Thread Joe Btfsplk
On 5/26/2014 2:15 PM, Charles Thomas wrote: For me, running the most recent version of TBB on Ubuntu 14.04, I can stream videos from Youtube fine. I just have to temporarily allow all the page then refresh, then repeat again. It streams, slowly, but it does stream. On 05/26/2014 05:00 AM,

Re: [tor-talk] EFF Who Has Your Back report

2014-05-21 Thread Joe Btfsplk
On 5/21/2014 7:41 AM, krishna e bera wrote: A recent EFF report [0] purports to show that many companies are becoming more proactive in defence of internet users' privacy. It rates companies on how well they protect data from government requests. This makes some of these companies *such as

Re: [tor-talk] General questions about Tor proxy

2014-05-19 Thread Joe Btfsplk
On 5/18/2014 9:54 PM, Roger Dingledine wrote: And your intuition might be (mine was) that removing those small relays really harms diversity (and thus anonymity), but actually, Tor's load balancing and path selection means those relays are very rarely chosen anyway, so they don't contribute

Re: [tor-talk] General questions about Tor proxy

2014-05-19 Thread Joe Btfsplk
On 5/19/2014 1:26 PM, Akater wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Some people think the only valid / conceivable form of community / comms on the net are 'forums'. Well, they're free to set one up. No pro-forum argument, but one can see why someone would prefer forums to

Re: [tor-talk] US ip address

2014-04-23 Thread Joe Btfsplk
On 4/23/2014 10:48 AM, s...@sky-ip.org wrote: On 4/23/2014 5:58 PM, Ted Jackson wrote: I would like to change to an US Ip address when I want to? possible? You can set a static exit node in your torrc but that is not recommended at all as it will have impact on your anonymity. Follow up to

Re: [tor-talk] Private keys at risk due to HeartBleed: Are we sure?

2014-04-10 Thread Joe Btfsplk
On 4/10/2014 3:16 AM, Fabio Pietrosanti (naif) wrote: Hi, are we really sure that the private keys are being compromised due to the heartbleed attack? I see many people upgrading, that's OK, but then i see many people changing private keys. I read here that's very unlikley that a private key

Re: [tor-talk] Heartbleed and TOR

2014-04-10 Thread Joe Btfsplk
On 4/10/2014 3:44 PM, Christopher J. Walters wrote: Since I am neither an expert on OpenSSL nor TOR, let's get one question out of the way before anything further is said on the topic: Does TOR actually use potentially vulnerable versions of OpenSSL (or use it at all, for that matter)? Should

Re: [tor-talk] TBB 3.5.4 says I should upgrade

2014-04-09 Thread Joe Btfsplk
On 4/9/2014 4:52 AM, Roger Dingledine wrote: On Wed, Apr 09, 2014 at 09:32:08AM +, antispa...@sent.at wrote: I downloaded the right archive and overwrote the existing folder (3.5.3). Restarted and the yellow triangle is still there. On the upper right corner it's written 3.5.4, yet the

Re: [tor-talk] [cryptography] The Heartbleed Bug is a serious vulnerability in OpenSSL

2014-04-09 Thread Joe Btfsplk
On 4/8/2014 5:24 PM, Joe Btfsplk wrote: On 4/8/2014 4:25 PM, grarpamp wrote: https://blog.torproject.org/ covers what to do for Tor things. For everything else on the net, fix the clients and servers you're responsible for. Then... You're right, there's a big gotcha in all this, users won't

Re: [tor-talk] [cryptography] The Heartbleed Bug is a serious vulnerability in OpenSSL

2014-04-09 Thread Joe Btfsplk
On 4/9/2014 12:36 PM, Andrew F wrote: Would be interesting if someone created an app to test for the problem and then published which big websites are slow to upgrade. that would certainly be good for consumers. Well, one website sorta has. They seem to have more extensive testing for overall

Re: [tor-talk] strange behavior of Tor Browser on Windows 8.1

2014-04-09 Thread Joe Btfsplk
On 4/9/2014 11:21 AM, s...@sky-ip.org wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, I have upgraded to latest Tor Browser Bundle version: 3.5.4 - Windows 32 bit. My operating system is Windows 8.1 Pro Enterprise, 64 bit. The odd things i have noticed (which didn't happen in

Re: [tor-talk] [cryptography] The Heartbleed Bug is a serious vulnerability in OpenSSL

2014-04-09 Thread Joe Btfsplk
On 4/9/2014 1:29 PM, Christopher J. Walters wrote: It seems no one wants to talk or hear about this issue. It is not being reported on media sites or anywhere else, other than the Heartbleed site, and the OpenSSL lists It's all over the internet, when I look in Ixquick / Startpage. Possible

Re: [tor-talk] [cryptography] The Heartbleed Bug is a serious vulnerability in OpenSSL

2014-04-08 Thread Joe Btfsplk
On 4/7/2014 6:14 PM, grarpamp wrote: http://heartbleed.com/ The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the

Re: [tor-talk] torbutton icon disappeared

2014-04-06 Thread Joe Btfsplk
On 4/5/2014 4:20 PM, Joe Btfsplk wrote: I noticed the Torbuttion icon - to the L of address / URL box, disappeared sometime after last getting a new identity via Torbutton. Other than reinstalling the browser, any ideas how to get the icon back (even if I have to hack a file, like w/ resource

Re: [tor-talk] torbutton icon disappeared

2014-04-06 Thread Joe Btfsplk
On 4/6/2014 6:45 PM, Gerardus Hendricks wrote: On 4/5/14 11:20 PM, Joe Btfsplk wrote: Other than reinstalling the browser, any ideas how to get the icon back (even if I have to hack a file, like w/ resource hacker, etc)? Go to View - Toolbars - Customize and drag it back onto the toolbar

[tor-talk] torbutton icon disappeared

2014-04-05 Thread Joe Btfsplk
I noticed the Torbuttion icon - to the L of address / URL box, disappeared sometime after last getting a new identity via Torbutton. Other than reinstalling the browser, any ideas how to get the icon back (even if I have to hack a file, like w/ resource hacker, etc)? Not sure if it

Re: [tor-talk] Lots of tor relays send out sequential IP IDs; please fix that!

2014-03-31 Thread Joe Btfsplk
On 3/31/2014 4:12 PM, Jann Horn wrote: Well, the subject line pretty much says it all: Lots of Tor relays send out globally sequential IP IDs, which, as far as I know, allows a remote party to measure how fast the relay is sending out IP packets with high precision, possibly making statistical

Re: [tor-talk] (no subject)

2014-03-22 Thread Joe Btfsplk
On 3/20/2014 12:47 PM, Patrick Schleizer wrote: Joe Btfsplk: 1) I doubt you'll be able to run 1 instance of TBB - at once - if that's part of what you want. Others can correct me, if wrong. This is possible. Simpler since TBB 3.x. Although undocumented. Bits can be found here: - https

Re: [tor-talk] (no subject)

2014-03-16 Thread Joe Btfsplk
volgende geschreven: And how do I create in torbrowser different profiles, I still don't understand it.. Op 14 mrt. 2014 om 18:11 heeft Joe Btfsplk joebtfs...@gmx.com het volgende geschreven: It probably won't allow 2 instances of Firefox (TBB) running at once. You may be able to use

Re: [tor-talk] (no subject)

2014-03-14 Thread Joe Btfsplk
It probably won't allow 2 instances of Firefox (TBB) running at once. You may be able to use the stand alone profile mgr for Firefox https://developer.mozilla.org/en-US/docs/Profile_Manager You'd have to add an entry in the profile mgr, to the location of TBB (firefox.exe). So you can

Re: [tor-talk] (no subject)

2014-03-14 Thread Joe Btfsplk
On 3/14/2014 4:57 PM, muhammed gokce wrote: And how do I create in torbrowser different profiles, I still don't understand it.. Please go to the MDN (mozilla) link I gave. Like anything, there's some reading on how to use the profile manager, but it's child's play compared to using a

Re: [tor-talk] TLS/SSL SMTP MitM

2014-03-10 Thread Joe Btfsplk
On 3/10/2014 1:43 PM, Gordon Morehouse wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi there, I have been doing some testing of sending email over Tor and today ran into a definite BadExit (but not flagged, clearly) because there was a blatant MitM attempt on three separate occasions

[tor-talk] configure Vidalia stand alone

2014-03-09 Thread Joe Btfsplk
The only comments I've seen about using Vidalia 0.2.21 - Win (the stand alone package) w/ TBB 3.5.x, to see the map connections, is just install / extract it to its own folder start it after TBB is already running. Like falling off a log? That doesn't work for me. Perhaps because I don't

Re: [tor-talk] TorBrowser spoofed screen size?

2014-03-06 Thread Joe Btfsplk
On 3/6/2014 1:59 AM, Georg Koppen wrote: Joe Btfsplk: But, EVEN WHEN I reset my system to 96 DPI, reboot - TBB still shows a weird value - like 1920 x *933* (just an example). NO one has a screen size w/ those odd numbers. That's the issue. Yes, they should be a multiple of 200 x 100

Re: [tor-talk] TorBrowser spoofed screen size?

2014-03-06 Thread Joe Btfsplk
/2014 8:21 AM, Joe Btfsplk wrote: On 3/6/2014 1:59 AM, Georg Koppen wrote: Joe Btfsplk: But, EVEN WHEN I reset my system to 96 DPI, reboot - TBB still shows a weird value - like 1920 x *933* (just an example). NO one has a screen size w/ those odd numbers. That's the issue. Yes, they should

[tor-talk] TorBrowser spoofed screen size?

2014-03-05 Thread Joe Btfsplk
I'm sure I recently checked what screen size TBB (Windows) was giving out. Which ever version I checked it in, test sites did NOT show my actual monitor size. Now, in TBB 3.5.2, my actual screen size seems to show on several browser test sites. Even extracted TBB again, into clean folder

Re: [tor-talk] TorBrowser spoofed screen size?

2014-03-05 Thread Joe Btfsplk
On 3/5/2014 7:52 PM, Soul Plane wrote: I tried TBB 3.5.2 in Windows XP at 120 dpi and browserspy says I'm at 96. Yes, that's screen resolution, or just resolution. It's of some significance, but it's not the same as screen (or monitor) size. Screen size is what I meant (like 1280 x 720, etc.).

[tor-talk] Unseen.is login page blocked in TBB

2014-03-02 Thread Joe Btfsplk
On https://Unseen.is, the page(s) that would normally come after entering user name PW is blocked. Instead, submitting login data page refreshes, I just see a blank web page w/ a throbber in middle of page. Same thing happens when creating a free acct - at top of page at address in above

Re: [tor-talk] My solution to Tor Browser remember password bug

2014-02-28 Thread Joe Btfsplk
On 2/28/2014 11:25 AM, Edgar S wrote: I've complained here before that the remember password feature in some long previous versions of Tor Browser no longer works. I've accepted it will likely never come back. So I've found the following solution. Maybe it will also work for others, discussion

Re: [tor-talk] Pissed off about Blacklists, and what to do?

2014-02-07 Thread Joe Btfsplk
On 2/7/2014 12:42 PM, Matthew Finkel wrote: This is in re: Hulu (whis is presumably authenticated)... but really, it applies to any service which we, the legitimate users of Tor, are denied access to. It has simply gone too far and we should be putting effort into reversing this trend by

Re: [tor-talk] TBB: Can not set back to Never remember history

2014-02-06 Thread Joe Btfsplk
On 6 February 2014 04:03, Joe Btfsplk joebtfs...@gmx.com wrote: You don't have any (non-default) extensions or plugins? Sometimes they mess w/ things. Other than that one change, did you make any others? Wondering if a file got corrupted? One easy thing is just reinstall TBB. Erase old files

Re: [tor-talk] TBB: Can not set back to Never remember history

2014-02-06 Thread Joe Btfsplk
On 2/6/2014 6:21 PM, Joe Btfsplk wrote: Other than checking some sites looking at the cookies file (using an editor) to see if it is / isn't allowing any cookies - of any type, we have no way of knowing if this is just a UI bug, or if settings really get messed up internally. Can others

Re: [tor-talk] TBB: Can not set back to Never remember history

2014-02-05 Thread Joe Btfsplk
On 2/5/2014 4:36 PM, David Balažic wrote: On 5 February 2014 06:44, Joe Btfsplk joebtfs...@gmx.com wrote: On 2/4/2014 3:02 PM, David Balažic wrote: I use TBB 3.5.1 (win32) Trying to delete some specific cookies, in the preferences I selected Remember History on the Privacy tabs, to gain access

Re: [tor-talk] TBB: Can not set back to Never remember history

2014-02-04 Thread Joe Btfsplk
On 2/4/2014 3:02 PM, David Balažic wrote: I use TBB 3.5.1 (win32) Trying to delete some specific cookies, in the preferences I selected Remember History on the Privacy tabs, to gain access to the Show cookies button. Unexpectedly that required a restart of TBB. As that wiped out all cookies

[tor-talk] Tor-Talk now a social site?

2014-02-01 Thread Joe Btfsplk
Should Tor-talk change names to something like Torbook.com or Tor-match.com? Tor-talk possibly ? should not be used to plan dinner dates such, that has NOTHING to do w/ Tor, anonymity, privacy, computer safety, internet news practices nor even tongue in cheek comments specifically ABOUT

Re: [tor-talk] NoScript for TOR disabled by default

2014-01-31 Thread Joe Btfsplk
On 1/31/2014 8:00 AM, Olivier Cornu wrote: Le 31/01/2014 01:18, Joe Btfsplk a écrit : On 1/30/2014 9:22 AM, Sukhoi wrote: In fact, I am worried with the Wireless Position System developed by google and others, and the introduction in the browsers, like firefox, a way to track which wireless

Re: [tor-talk] TBB font size concern for many users

2014-01-31 Thread Joe Btfsplk
test sites would show that. If not, it appears that changing font name size under Options Content to increase small text, provides LESS browser characteristics than using Ctrl + mouse scroll to zoom screen size. On 1/29/2014 10:31 AM, Joe Btfsplk wrote: People having excellent sight

Re: [tor-talk] TBB font size concern for many users

2014-01-31 Thread Joe Btfsplk
On 1/31/2014 11:24 AM, Moritz Bartl wrote: On 01/31/2014 04:32 PM, Joe Btfsplk wrote: Is it known that sites CAN detect selected TBB *browser* font names sizes? See 4.6.4 in the Tor Browser design document: https://www.torproject.org/projects/torbrowser/design/#fingerprinting-linkability

Re: [tor-talk] NoScript for TOR disabled by default

2014-01-30 Thread Joe Btfsplk
On 1/30/2014 9:22 AM, Sukhoi wrote: In fact, I am worried with the Wireless Position System developed by google and others, and the introduction in the browsers, like firefox, a way to track which wireless networks the computer can see in a given moment. Based on that they identify the user

[tor-talk] TBB font size concern for many users

2014-01-29 Thread Joe Btfsplk
People having excellent sight naturally don't think about reading small print books or web pages. But a lot of the general population has a problem with this. Because of possible browser fingerprinting issues / or anonymity leaks, TBB users are discouraged from - changing default settings in

Re: [tor-talk] Vidalia has been replaced with Tor Launcher

2014-01-29 Thread Joe Btfsplk
On 1/29/2014 7:05 AM, Kristov Atlas wrote: Then the button should read change exit node and not new identity, no? On Jan 27, 2014, at 22:02, Michael Wolf mikewol...@gmail.com wrote: On 1/26/2014 5:57 AM, Lunar wrote: Katya Titov: New Identity works from both TBB and Vidalia. The difference

Re: [tor-talk] Vidalia has been replaced with Tor Launcher

2014-01-28 Thread Joe Btfsplk
On 1/28/2014 4:34 AM, Rick wrote: On 01/27/2014 10:49 PM, Joe Btfsplk wrote: On 1/27/2014 9:02 PM, Michael Wolf wrote: At this time, using Vidalia is the only way to change exit nodes without losing all your tabs, or to see which exit node is misbehaving. It would be really useful to be able

Re: [tor-talk] Thunderbird leak

2014-01-27 Thread Joe Btfsplk
On 1/26/2014 10:03 PM, Moritz Bartl wrote: On 01/26/2014 08:42 PM, Al Billings wrote: What is the bug number? https://grepular.com/Security_Bug_Thunderbird_Websites_Tabs The bugzilla report is currently locked from being viewed, but for when it becomes unlocked, here it is: bug 700979

Re: [tor-talk] TBB 3.5 starts w/ size buttons hidden

2014-01-27 Thread Joe Btfsplk
On 1/27/2014 3:41 AM, Georg Koppen wrote: Joe Btfsplk: TBB 3.5 for Win is starting in half screen the UI sizing buttons are hidden because the TBB UI is shifted where the size buttons are off the monitor. So is most of the title bar, making it hard to drag the UI down to reach buttons. Once

Re: [tor-talk] Thunderbird leak

2014-01-27 Thread Joe Btfsplk
On 1/26/2014 7:14 PM, Al Jigong Billings wrote: Like I said, Thunderbird doesn't allow for pages to open in tabs without an extension. So., if you have reliable repro steps, it is a bug that should be fixed and I can push on it to get it addressed. Unless I can get one of the specially crafted

Re: [tor-talk] Vidalia has been replaced with Tor Launcher

2014-01-27 Thread Joe Btfsplk
On 1/27/2014 9:02 PM, Michael Wolf wrote: At this time, using Vidalia is the only way to change exit nodes without losing all your tabs, or to see which exit node is misbehaving. It would be really useful to be able to change exit nodes without Vidalia, even if this function is hidden

Re: [tor-talk] TBB 3.5 starts w/ size buttons hidden

2014-01-26 Thread Joe Btfsplk
Nils wrote: You can use the windows key + an arrow key to resize and move windows. DOESN'T work on my machine in Vista x64 (for any app). No effect. Maybe some Windows option turned off? On 1/26/2014 12:56 AM, Lars Luthman wrote: On Sat, 2014-01-25 at 21:37 -0600, Joe Btfsplk wrote: Re

Re: [tor-talk] Thunderbird leak

2014-01-26 Thread Joe Btfsplk
On 1/26/2014 11:33 AM, Andrew F wrote: YIKES... Are you sure, how did this slip by? On Sun, Jan 26, 2014 at 3:06 PM, Mike Cardwell t...@lists.grepular.comwrote: I just blogged about a general security issue in Thunderbird which may also affect people who are using Tor:

Re: [tor-talk] Thunderbird leak

2014-01-26 Thread Joe Btfsplk
On 1/26/2014 1:15 PM, Al Billings wrote: Assuming we’re talking about people opening web pages in TB tabs, that normally can only happen if someone installs Thunderbrowse or a similar extension. By default, TB doesn’t render web pages. I thought the same thing. I'm pretty sure I've had links

Re: [tor-talk] Vidalia has been replaced with Tor Launcher

2014-01-25 Thread Joe Btfsplk
On 1/25/2014 7:33 AM, Katya Titov wrote: TT Security: 1. So Network Map and New Identity are absent now. When these functions will be add to the TBB? Vidalia is now a stand-alone package. Details: https://www.torproject.org/docs/faq#WhereDidVidaliaGo If TBB is leaving Vidalia for a better ?

[tor-talk] TBB 3.5 starts w/ size buttons hidden

2014-01-25 Thread Joe Btfsplk
TBB 3.5 for Win is starting in half screen the UI sizing buttons are hidden because the TBB UI is shifted where the size buttons are off the monitor. So is most of the title bar, making it hard to drag the UI down to reach buttons. Once maximized, it fits fine on the monitor. Finally got it

Re: [tor-talk] TBB 3.5 starts w/ size buttons hidden

2014-01-25 Thread Joe Btfsplk
2014-01-26 Joe Btfsplk joebtfs...@gmx.com TBB 3.5 for Win is starting in half screen the UI sizing buttons are hidden because the TBB UI is shifted where the size buttons are off the monitor. So is most of the title bar, making it hard to drag the UI down to reach buttons. Once maximized

Re: [tor-talk] Vidalia has been replaced with Tor Launcher

2014-01-25 Thread Joe Btfsplk
On 1/25/2014 5:07 PM, Lunar wrote: Joe Btfsplk: I missed the memo on all reasons why Vidalia - bad, Tor Launcher - good. At least: http://users.encs.concordia.ca/~clark/papers/2007_soups.pdf http://petsymposium.org/2012/papers/hotpets12-1-usability.pdf and Vidalia has no maintainers

Re: [tor-talk] Forensics on Tor

2014-01-23 Thread Joe Btfsplk
On 1/23/2014 5:12 PM, Mirimir wrote: I wouldn't run VMs on Windows with any expectation of privacy. Only a year or so ago, shellbags were not common knowledge. Only the forensic community and hard-core black hat types knew about them. It's arguable that many similar features in Windows remain

Re: [tor-talk] Risk of selectively enabling JavaScript

2014-01-07 Thread Joe Btfsplk
As TBB is a standard product, its fingerprint should be the same for everyone. Tell that to the guy that got arrested on campus, because he was one of a few people using it. People talk a good game in an armchair quarterback sort of way - if he'd only... Unless they're seasoned veterans at

Re: [tor-talk] tor mention in newle released snowden documents

2013-11-30 Thread Joe Btfsplk
On 11/30/2013 2:30 PM, Rejo Zenger wrote: See: http://issuu.com/pimvandendool/docs/document03. New document, (really) briefly mentioning the efforts of the Dutch intelligence services identifying Tor-users. Attempts are made by hacking into servers running fora, obtaining the logfiles,

Re: [tor-talk] Group Thinks Anonymity Should Be Baked Into the Internet Itself

2013-11-29 Thread Joe Btfsplk
On 11/29/2013 10:47 AM, Eugen Leitl wrote: http://www.technologyreview.com/news/521856/group-thinks-anonymity-should-be-baked-into-the-internet-itself/ Group Thinks Anonymity Should Be Baked Into the Internet Itself Good one. Not aimed at anyone, but along same line of thought - with about as

Re: [tor-talk] StrictExitNodes deprecated?

2013-11-25 Thread Joe Btfsplk
On 11/23/2013 3:04 PM, Joe Btfsplk wrote: On 11/23/2013 2:16 AM, Roger Dingledine wrote: On Sat, Nov 23, 2013 at 07:42:23AM +0200, Sherief Alaa wrote: I just see the options StrictExitNodes and StrictEntryNodes is deprecated? The correct syntax is: EntryNodes {node, node, ...} StrictNodes 0

Re: [tor-talk] StrictExitNodes deprecated?

2013-11-25 Thread Joe Btfsplk
On 11/25/2013 7:14 AM, Leo Unglaub wrote: the solution is simple. DONT USE THOSE FUCKED UP SERVICES. Use email providers that allow an authentication from anywhere like every provider is supposed to do. Greetings Leo It's not only F'g email that won't allow from some *-stan or African

<    1   2   3   4   5   6   >