[tor-talk] Hidden service security w. Apache/Win32

2012-02-19 Thread Fred Toben
Hello Everybody I am in the process of setting up a hidden service with Apache 2.2 under Windows. I run Apache (Win32) in a virtual machine and Tor in a separate virtual machine under VMware Workstation. VM 1 runs Apache and VM 2 runs Tor. VM 1 is connected to VM 2 through an internal host

[tor-talk] Improving Usability of Tor Browser? A new TBB-simple?

2012-02-19 Thread Fabio Pietrosanti (naif)
Hi all, Here some consideration to create a new simplified TBB version. Something to provide the extreme simplicity a user may expect that may work having two TBB. Let's say that the basic need of this TBB-simple is just to visit web pages anonymous, no frills. So something that works that

Re: [tor-talk] Hidden service security w. Apache/Win32

2012-02-19 Thread Karl Hakmller
On Sun, 19 Feb 2012 12:50:47 - Fred Toben red...@tormail.net wrote: Hello Everybody I am in the process of setting up a hidden service with Apache 2.2 under Windows. I run Apache (Win32) in a virtual machine and Tor in a separate virtual machine under VMware Workstation. VM 1 runs

[tor-talk] Hidden service security w. Apache/Win32

2012-02-19 Thread proper
So far I haven't found any public info about the possible downsides of running a hidden service under Windows. Let's assume a fresh, clean windows installation. Have you found a list and description of all outgoing network connections, that will be made by that windows installation? I haven't

Re: [tor-talk] Hidden service security w. Apache/Win32

2012-02-19 Thread Gozu-san
It would be very dangerous to use Windows in any way for running hidden services! Run Linux and VirtualBox on your host machine. Ubuntu is probably best if you're new to Linux. Have your host machine access the Internet through a reputable multi-hop VPN service, and firewall it to prevent

[tor-talk] Tor directory servers

2012-02-19 Thread Bravo 76
Is there a list available on the Tor directory servers that my script could parse and get the latest exit routers along with their fingerprints? I've found this:http://dannenberg.ccc.de/tor/server/all.zBut it doesn't mention whether each one is an exit router And

[tor-talk] Hidden service security w. Apache/Win32

2012-02-19 Thread proper
Is the time sync spoofing even applicable to hidden services? How can the MS time server tampering with the exit nodes be applicable to hidden services? It has nothing to do directly with Apache or the hidden service. For correct operation Tor needs the correct time and date. Windows will

[tor-talk] How accurate does need the clock to be?

2012-02-19 Thread proper
Let's assume the time server is not trusted. How accurate does the clock have to be? Is +/- 30 minutes sufficient for Tor's correct operation? Do you see any risks if the user manually adjusts the clock on each restart? ___ tor-talk mailing list

Re: [tor-talk] How accurate does need the clock to be?

2012-02-19 Thread Larry
On 02/19/2012 02:17 PM, pro...@tormail.net wrote: Let's assume the time server is not trusted. How accurate does the clock have to be? Is +/- 30 minutes sufficient for Tor's correct operation? Do you see any risks if the user manually adjusts the clock on each restart? Why would you be

Re: [tor-talk] Tor directory servers

2012-02-19 Thread Justin Aplin
On 2/19/2012 10:23 PM, Karl Hakmiller wrote: On Sun, 19 Feb 2012 19:06:35 + Bravo 76brav...@live.co.uk wrote: Is there a list available on the Tor directory servers that my script could parse and get the latest exit routers along with their fingerprints? I would hope such a list does not