Re: [tor-talk] location question

2011-04-08 Thread Andrew Lewman
On Fri, 08 Apr 2011 05:10:29 + Orionjur Tor-admin tor-ad...@orionjurinform.com wrote: Roger, what do you think about using gnash instead flash? Could it deanonymize too? I talked to Rob Savoye of the Gnash project about this. He doesn't think his code will disobey proxy settings. It's a

Re: [tor-talk] list archive files gziped twice?

2011-04-08 Thread Andrew Lewman
On Fri, 08 Apr 2011 16:03:20 +0200 tagnaq tag...@gmail.com wrote: if I decompress one of the list archive files, for example: https://lists.torproject.org/pipermail/tor-talk/2011-April.txt.gz I get gzip compressed data. Did something go wrong when migrating the list or is there a particular

Re: [tor-talk] To Toggle, or not to Toggle: The End of Torbutton

2011-04-22 Thread Andrew Lewman
On Fri, 22 Apr 2011 10:53:19 -0400 The Doctor dr...@virtadpt.net wrote: Why would you want to run several instances of Firefox - SIMULTANEOUSLY? When I said it was easy to install multiple versions, Perhaps I'm confused over the details, but I do this daily. I use TBB for my

Re: [tor-talk] Fwd: Active Hacker Protection For Your Site - Free

2011-04-22 Thread Andrew Lewman
On Fri, 22 Apr 2011 10:57:47 -0400 Nathan Freitas nat...@freitas.net wrote: Comodo offers a HackerProof service... hilarious! How much for comodoproof? ;) -- Andrew pgp 0x74ED336B ___ tor-talk mailing list tor-talk@lists.torproject.org

Re: [tor-talk] Tor 0.2.2.26-beta and 0.2.2.27-beta are out

2011-05-19 Thread Andrew Lewman
On Thu, 19 May 2011 14:13:31 +0200 Daniel Franganillo dani...@dilmun.ls.fi.upm.es wrote: So, Why release an unpatched version? Because 0.2.2.26 was already tagged in git. -- Andrew pgp 0x74ED336B ___ tor-talk mailing list

Re: [tor-talk] EFF Tor Challenge

2011-06-02 Thread Andrew Lewman
On Thu, 2 Jun 2011 12:30:33 -0300 Javier Bassi javierba...@gmail.com wrote: What is think he is trying to say is that if someone finds a security vulnerability in Tor/Vidalia (this has happened in the past) the attacker can easily have a list of all IPs running relays, and may compromise all

Re: [tor-talk] how many users?

2011-06-05 Thread Andrew Lewman
On Sun, 5 Jun 2011 05:25:08 -0700 Robert Ransom rransom.8...@gmail.com wrote: On Sun, 5 Jun 2011 13:13:29 +0200 Jerzy Łogiewa jerz...@interia.eu wrote: so how many users is estimated tor has around the world? https://metrics.torproject.org/users.html We're also working on publishing

Re: [tor-talk] nesting proxies

2011-06-20 Thread Andrew Lewman
On Sun, 19 Jun 2011 06:47:17 -0400 0 yplxswpm8c24v...@lavabit.com wrote: Using firefox 3.6, vidalia, polipo, I'd like to know how to tunnel tor through another proxy, and further nest proxies. vidalia's proxy settings seem to mean proxy - tor, because https://check.torproject.org detects that

Re: [tor-talk] The project tormail

2011-08-17 Thread Andrew Lewman
On Wednesday, August 17, 2011 08:38:17 James Brown wrote: People, what do you think about http://tormail.net/; ? My first reaction is they should change their name. Perhaps onionmail.net. At least put a disclaimer on the website that this has nothing to do with Tor the non-profit.

Re: [tor-talk] Vidalia bundle DNS question

2011-08-17 Thread Andrew Lewman
On Wednesday, August 17, 2011 11:56:21 David H. Lipman wrote: How can I best make sure Tor/Polipo use my OS provided DNS servers or specifically provided DNS server(s) to be used when performing a Proxy ? You can't. DNS queries will go through Tor. If you query your local DNS servers, your

Re: [tor-talk] Tor Bridges No Longer Work

2011-08-25 Thread Andrew Lewman
On Thursday, August 25, 2011 10:12:14 JW wrote: The oddest thing. Tor bridges no longer work on my system. Has something changed with regards to how bridges are used? The easiest explanation is that the bridges you were using no longer exist. If tor connects without bridges, then you really

Re: [tor-talk] Tor Usage Statistics for Iran

2011-08-31 Thread Andrew Lewman
On Wednesday, August 31, 2011 09:10:03 Joe Galvin wrote: Well I'm not presuming that any of them are from the opposition. I don't know what they're doing, which is the point. As I said there's no political OR social reason, as far as I'm aware, for the number have users to have multiplied x5

Re: [tor-talk] TBB - most secure version?

2011-08-31 Thread Andrew Lewman
On Tuesday, August 30, 2011 15:18:53 Netizio wrote: since the stable Tor 0.2.2.32 is available now I tried to find a Tor version which suits my beginners needs the best. TBB is going to be the easiest. From a usage perspective, it is download, unzip, run. Tor is not easy from the

Re: [tor-talk] Where are the older Tor bundles?

2011-09-07 Thread Andrew Lewman
On Wednesday, September 07, 2011 19:24:56 M Robinson wrote: How do ID the 'no installation' packages? if you mean tor browser, then https://archive.torproject.org/tor-package-archive/torbrowser/ -- Andrew pgp 0x74ED336B ___ tor-talk mailing list

Re: [tor-talk] Tor spying

2011-09-07 Thread Andrew Lewman
On Wednesday, September 07, 2011 22:21:21 Indie Intel wrote: Apparently people are spying on Tor users by setting up their own exit nodes and sniffing traffic?! Yes, as noted, this is old news. Go back even further in time and you'll see a string of people wanting attention at 'hacker cons'

Re: [tor-talk] Best Tool to connect to my Private TOR Network

2011-10-05 Thread Andrew Lewman
On Wednesday, October 05, 2011 11:07:42 Andrew Lewman wrote: This will give you some ideas on how to do this, in particular, step 4. Even better if I gave you the url, https://trac.torproject.org/projects/tor/wiki/doc/TorFAQ#HowdoIsetupmyownprivateTornetwork sorry. -- Andrew pgp 0x74ED336B

Re: [tor-talk] Best Tool to connect to my Private TOR Network

2011-10-07 Thread Andrew Lewman
On Friday, October 07, 2011 06:37:17 Faisal Rehman wrote: Now it is running as my own Directory Authority I have not configured any tor relay for this directory authority also tor client. Yeah you also got my problem which is how can I configure a tor client that can talk to my own private

Re: [tor-talk] Attacks via Tor?

2011-10-07 Thread Andrew Lewman
On Friday, October 07, 2011 03:43:42 Joerg Maschtaler wrote: Is there any chance to avoid this scenario? https://www.torproject.org/docs/faq-abuse.html.en#TypicalAbuses That may help you. -- Andrew pgp 0x74ED336B ___ tor-talk mailing list

Re: [tor-talk] Best Tool to connect to my Private TOR Network

2011-10-07 Thread Andrew Lewman
On Friday, October 07, 2011 10:35:31 Faisal Rehman wrote: Okay I will run some more directory authorities but how these will be tied with each other via relays, sorry for asking very basic questions but I am unable to find help for it over the internet. So I hope with your help I will setup my

Re: [tor-talk] Tor hidden services and SSL certificates

2011-10-11 Thread Andrew Lewman
On Tuesday, October 11, 2011 09:39:40 alex mayer wrote: Hi Mike, thanks for your quick response. I'm going to investigate a bit more on this, there's some document where I can find this information regarding the exit nodes? Hidden service traffic never leaves the tor network. There is no

Re: [tor-talk] Finding a hidden service with the private_key file

2011-10-11 Thread Andrew Lewman
On Monday, October 10, 2011 13:54:19 hi...@safe-mail.net wrote: I just heard that if the private_key file of your hidden service would have gotten in the hands of an attacker, he could have located your hidden service just like that. I just wonder how that can be done, since it's just a file

Re: [tor-talk] using themes in Aurora

2011-10-14 Thread Andrew Lewman
On Friday, October 14, 2011 12:49:32 Joe Btfsplk wrote: No one's EVER looked into Tor security issues of using themes (from Mozilla addons site) or Firefox GUI enhancement addons, like Tab Mix Plus? You could be the first! My first step would be to see what information is sent back to

Re: [tor-talk] still problems - update available

2011-10-14 Thread Andrew Lewman
On Friday, October 14, 2011 10:44:01 Joe Btfsplk wrote: What * exact file data * is the version check using in TBB to check against latest avail. versions from Tor Project? https://check.torproject.org/RecommendedTBBVersions is the file checked on start up of TBB. And is this a fresh

Re: [tor-talk] duckduckduck.com redirect-try on google query

2011-10-18 Thread Andrew Lewman
On Tuesday, October 18, 2011 13:21:40 fido dido wrote: so, google thinks im kind of spammer because of my IP-adress which probably has done bad thingd too, and asks me to redirekt to another site like duckduckgo... right? did i understand, so its not a certainly bad exitnode... google sees

[tor-talk] Rumors of Tor's compromise

2011-10-25 Thread Andrew Lewman
I keep having the same conversation over and over again with various reporters from various news agencies. I've put up a [blog post] (https://blog.torproject.org/blog/rumors-tors-compromise-are-greatly- exaggerated) as our answer. The content of the blog post is also included below. # Rumors

Re: [tor-talk] Don't use Google as default search in Tor Browser?

2011-11-01 Thread Andrew Lewman
On Tuesday, November 01, 2011 10:13:44 Joe Btfsplk wrote: *** BUT, on a 2nd SEARCH, w/ Google still selected as search engine, TBB does NOT show the screen, asking if you'd like to redirect to another search engine. SEEMS like a BUG. I tried various ways to get TBB to present the do you want

Re: [tor-talk] The Stop Online Piracy Act

2011-11-02 Thread Andrew Lewman
On Tuesday, November 01, 2011 00:11:49 Jim wrote: I haven't seen this brought up on this list yet, so I thought I would mention it. Tech Dirt (among others) are reporting on yet another round of misguided (U.S.) legislation supposedly targeting copyright infringement. Part of this

Re: [tor-talk] Implement JSONP interface for check.torproject.org

2011-11-06 Thread Andrew Lewman
On Sunday, November 06, 2011 11:00:08 Fabio Pietrosanti (naif) wrote: Let's support that AccessNow https://www.accessnow.org/ would like to implement the privacybadge web widget, they have several options: A word of caution about privacy badges, learning the history of TRUSTe is relevant,

Re: [tor-talk] New Browser Bundle

2011-11-06 Thread Andrew Lewman
On Sunday, November 06, 2011 15:15:21 Joe Btfsplk wrote: I can't imagine cookies or Javascript being enabled globally. I won't leave those default settings. Cookies from regular old web sites aren't necessarily the benign little files a web site places on your computer to enhance the use of

Re: [tor-talk] New Browser Bundle

2011-11-07 Thread Andrew Lewman
On Monday, November 07, 2011 05:08:57 t...@lists.grepular.com wrote: On 07/11/11 02:32, Andrew Lewman wrote: I'd like to see someone do research that proves or disproves this fear that javascript and cookies everywhere is hazardous to the anonymity of a tor user. I don't think any

Re: [tor-talk] New Browser Bundle

2011-11-08 Thread Andrew Lewman
On Tuesday, November 08, 2011 21:45:02 Andrew Lewman wrote: To be clear, tbb already blocks 3rd party cookies. As for javascript enabled, I'm hoping Mike or Erinn will comment on why we ship tbb with javascript enabled by default. I know noscript and torbutton defang many attacks already, even

Re: [tor-talk] New Browser Bundle

2011-11-08 Thread Andrew Lewman
On Tuesday, November 08, 2011 08:56:47 Christian Siefkes wrote: Does that work? As I understand it, clicking the Use a new identity button in Vidalia tells Tor to build new circuits for subsequent connections, but it doesn't seem to affect Aurora -- all the cookies that have assembled since

Re: [tor-talk] Vidalia for Iphone 3g

2011-11-17 Thread Andrew Lewman
On Thursday, November 17, 2011 13:20:43 M wrote: Can anyone guide me to an eays tutorial for installing vidalia or any other TOR related application on my iphone 3g? There's Marco's packages, http://sid77.slackware.it/iphone/ and the new Covert Browser app, http://www.covertbrowser.com/. --

Re: [tor-talk] What happen if one create 2000 exit nodes for 6 hours?

2011-11-21 Thread Andrew Lewman
On Monday, November 21, 2011 12:35:47 Andrew wrote: Good thing we trust Moritz, torservers.net is growing. :P One way to counter this is to grow more Moritz' such that the whole pool of relays grows in relative proportion. It seems Noisebridge is another organization that will take money and

Re: [tor-talk] TBB, iptables, and seperation of concerns

2011-12-12 Thread Andrew Lewman
On Mon, 12 Dec 2011 01:00:37 -0500 Chris tmail...@errtech.com wrote: 1. It isn't in a repository. For security reasons this should be changed. What security reasons? pgp verification of all TBB releases is available. See https://www.torproject.org/docs/verifying-signatures.html.en 2. It

Re: [tor-talk] Tor Browser Bundle w Linux Packaging TAILS improvements/new distribution

2011-12-13 Thread Andrew Lewman
On Mon, 12 Dec 2011 22:34:03 -0500 Chris tmail...@errtech.com wrote: While I would not suggest eliminating the tarball completely as there is more to the world than just debian I do think the manual installation is cumbersome and risky for the user. It make no sense to recommend manual

Re: [tor-talk] Tor OPSEC - Operational Security - Great Resource of Information!

2011-12-15 Thread Andrew Lewman
On Thu, 15 Dec 2011 00:27:59 -0500 grarpamp grarp...@gmail.com wrote: Bridges are not intended for use by the general population, but by people who truly need them and/or cannot reach Tor any other way. Generally, I use bridges to avoid telling the local network I'm connecting to the Tor

Re: [tor-talk] If you have access to certain tools, you can completely ignore Tor.

2011-12-19 Thread Andrew Lewman
On Sun, 18 Dec 2011 23:33:13 + Matthew R magick...@gmail.com wrote: SR: If you have access to certain tools, you can completely ignore Tor. You can trap your subject’s IP address without wasting your time busting through Tor. Without revealing too many tricks, for example, it’s easy enough

Re: [tor-talk] If you have access to certain tools, you can completely ignore Tor.

2011-12-19 Thread Andrew Lewman
On Sun, 18 Dec 2011 21:02:37 -0600 Joe Btfsplk joebtfs...@gmx.com wrote: Even if partly true, this is one reason I don't understand why TBB has default settings to allow all cookies, seeing as how its main goal is anonymity. Devs are very concerned about not writing anything to cache, but not

Re: [tor-talk] Automatic vulnerability scanning of Tor Network?

2011-12-20 Thread Andrew Lewman
On Tue, 20 Dec 2011 09:11:29 +0100 Fabio Pietrosanti (naif) li...@infosecurity.ch wrote: Or a process like that to always know that the System/Network security of computers running Tor it's ok, and if not ok do something. Perhaps you are interested in the exit authority code,

[tor-talk] check.torproject.org outage 21 Dec 2011

2011-12-21 Thread Andrew Lewman
As of late last night 20 Dec (GMT-5) our website hosting provider is experiencing a sustained attack. The attack is not directed at Tor, but someone else on the same network. The effect is that parts of our website infrastructure are intermittently unreachable. This includes the following domains

Re: [tor-talk] TBB on GNU and Windows

2011-12-30 Thread Andrew Lewman
On Fri, 30 Dec 2011 20:59:14 +0800 Koh Choon Lin 2choon...@gmail.com wrote: I realized that the tbb is behaving differently on GNU and Windows. In Windows, one may start tbb before or after starting an instance of Mozilla Firefox. In GNU, one may start tbb only after opening Firefox first. If

Re: [tor-talk] Why can't I hide/minimize to tray anymore?

2011-12-30 Thread Andrew Lewman
On Fri, 30 Dec 2011 10:00:55 -0500 M Robinson mr.m.robin...@gmail.com wrote: Why can't I hide/minimize to tray anymore? What are you trying to hide/minimize? which os? which desktop? etc? -- Andrew http://tpo.is/contact pgp 0x74ED336B ___ tor-talk

Re: [tor-talk] Why can't I hide/minimize to tray anymore?

2011-12-30 Thread Andrew Lewman
On Fri, 30 Dec 2011 12:59:50 -0500 M Robinson mr.m.robin...@gmail.com wrote: Windows 7 65-bit You probably mean 64-bit. What patch level are you at? I cannot replicate this on my win7 64bit test machine. TBB 0.2.3.35-3 works fine. -- Andrew http://tpo.is/contact pgp 0x74ED336B

Re: [tor-talk] Hoax?

2012-01-04 Thread Andrew Lewman
On Wed, 04 Jan 2012 19:24:56 + Geoff Down geoffd...@fastmail.net wrote: Let's try that again... http://pastebin.com/jBPFsUSg We did crack Tor's encryption to reveal 190 IP addresses of individuals using Tor for Child Pornography There are two recent stories claiming the Tor network is

Re: [tor-talk] Invalid Server Certificate accessing torproject.org on Chrome/Windows

2012-01-04 Thread Andrew Lewman
I think this is fixed for www.torproject.org now. Digicert apparently updated their ca chained certs at some point. I've put the updated ca-certs on the www servers. If this works, we can update them on all torproject servers. And for fun, I've attached the gnutls-cli output of the old cert in

Re: [tor-talk] tor transparent proxy security concerns (autostart and dns resolve for non-tor)

2012-01-05 Thread Andrew Lewman
On Thu, 5 Jan 2012 08:32:07 -0500 h...@safe-mail.net wrote: I like the idea of the tor transparent proxy and tor-enabeld linux user account very much. But I think there are a lot security concerns. 'If you want to make the iptables rules permanent you have to make sure they are executed at

Re: [tor-talk] FIRE!fox

2012-01-09 Thread Andrew Lewman
On Mon, 09 Jan 2012 08:09:39 -0500 Achter Lieber zzretro...@email2me.net wrote: Hello. I am at OS X 10.5.8 on Mac and cannot upgrade to Snow, Lion or beyond. Also cannot afford a new computer. What is the best and safest version of Firefox to use with Tor, if someone doesn't mind supplying

Re: [tor-talk] Country statistics details

2012-01-12 Thread Andrew Lewman
On Mon, 09 Jan 2012 10:47:17 +0100 Fabio Pietrosanti (naif) li...@infosecurity.ch wrote: i wanted to ask the list, what do you think about improving the statistics for the country of use of Tor, so that there would also be an additional regional details for large countries? We used to do this

Re: [tor-talk] some maps on tor usage worldwide

2012-01-12 Thread Andrew Lewman
On Thu, 12 Jan 2012 00:49:14 +0100 skep s...@riseup.net wrote: I've put up some graphical world maps of the tor user to internet population per country ratio. Tor user statistics are from https://metrics.torproject.org/users.html and the internet pop. per country data from the world factbook

Re: [tor-talk] TBB and local TOR for Linux users

2012-01-12 Thread Andrew Lewman
On Mon, 9 Jan 2012 18:34:10 + Tor User toruser0...@gmail.com wrote: Are there plans to give Linux users the choice to run the installed version of TOR instead of the TBB one? Currently, no. There have been many debates over how to handle system tor versus the tor shipped with tbb. To

Re: [tor-talk] Google as default search engine revisited

2012-01-13 Thread Andrew Lewman
On Thu, 12 Jan 2012 20:50:01 +0200 Maxim Kammerer m...@dee.su wrote: On Thu, Jan 12, 2012 at 19:25, Andrew Lewman and...@torproject.org wrote: Also, the majority of users want google as their default engine due to the quality of search results. The majority of users of Tor Browser want

Re: [tor-talk] Google as default search engine revisited

2012-01-14 Thread Andrew Lewman
On Sat, 14 Jan 2012 10:50:21 +0100 Lutz Horn tichodr...@posteo.de wrote: If people want Google search results plus privacy, they can use https://startpage.com/ Startpage is ixquick, and is already an option in TBB. In order to move this discussion in a more positive direction, the method to

Re: [tor-talk] remove any all links from torproject.com to JanusVM

2012-01-19 Thread Andrew Lewman
On Thu, 19 Jan 2012 21:20:16 - pro...@tormail.net wrote: Even if you state Most of the content here is written by volunteers from around the world. any content which is outdated, evil or potentially dangerous for Tor users should be removed. Something on the wiki main page seams to have

Re: [tor-talk] A secure browsing model?

2012-01-20 Thread Andrew Lewman
On Thu, 19 Jan 2012 23:27:54 -0800 Mike Perry mikepe...@torproject.org wrote: See: https://www.torproject.org/projects/torbrowser/design/#privacy Is that too technical? How can I improve the design document so that it is more clear that it is exactly what you're looking for? This came up in

Re: [tor-talk] tor-bundle , ssh , torsock howto ?

2012-01-20 Thread Andrew Lewman
On Fri, 20 Jan 2012 17:26:15 +0530 J. Bakshi baksh...@gmail.com wrote: I have tor-browser-bundle running. how can I use ssh with the tor running inside this browser bundle ? I have installed torsocks already. Is torsocks is better ? Confused... Please help. Here's what I use: when sshing

[tor-talk] Talking to users, six months later

2012-01-20 Thread Andrew Lewman
It's been a while since I relayed phone support experiences. Six months ago we listed our phone number on the 'contact us' page. See the experiences of the first month or so at 'talking to users', https://lists.torproject.org/pipermail/tor-talk/2011-July/020838.html There have been a few tweaks

Re: [tor-talk] Is the project 'Tor on the N900' alive

2012-01-27 Thread Andrew Lewman
On Sun, 22 Jan 2012 19:53:40 + James Brown jbrownfi...@gmail.com wrote: Is the project 'Tor on the N900' https://www.torproject.org/docs/N900.html.en alive? As I see, the new version of Tor is unavialable, that package works with depricated version 0.2.2.34. Effectively, no. No one has

Re: [tor-talk] Aurora only build

2012-01-27 Thread Andrew Lewman
On Fri, 27 Jan 2012 13:16:05 -0700 AK aka...@gmail.com wrote: So are you telling me that standard Firefox depends on closed source binaries as well? I don't care about how free the license is. I'm talking about whether it can be built completely from source code. I suggest starting with the

Re: [tor-talk] Aurora only build

2012-01-27 Thread Andrew Lewman
On Fri, 27 Jan 2012 16:13:41 -0700 AK aka...@gmail.com wrote: Actually, the Tor Browser bundle is built from Firefox Portable binaries. It's built from source. -- Andrew http://tpo.is/contact pgp 0x74ED336B ___ tor-talk mailing list

Re: [tor-talk] leak through Antivirus Webscanner possible?

2012-01-29 Thread Andrew Lewman
On Sun, 29 Jan 2012 18:52:07 - pro...@tormail.net wrote: Nowadays Antivirus software often includes a Webscanner, even free ones... The webscanner scans the tcp stream on the fly and may stop (or modify?) it. Perhaps he is sending back - over non anonymous channels - for remote

Re: [tor-talk] tor-blocking sites

2012-02-08 Thread Andrew Lewman
On Wed, 08 Feb 2012 23:13:44 +0100 Moritz Bartl mor...@torservers.net wrote: I believe it's more important to make it easy for people to detect Tor and deal with it differently in the first place. The second step then is to provide useful alternatives to blocking. Perhaps someone wants to

Re: [tor-talk] Ars Technica on Iran's latest strategy

2012-02-10 Thread Andrew Lewman
On Fri, 10 Feb 2012 17:18:41 + Robert Ransom rransom.8...@gmail.com wrote: https://bugs.torproject.org/4927 seems to have been effective. We just need to hunt down and fix some obfsproxy (server-side) crash bugs and get a good list of very-high-bandwidth obfsproxy bridges before we tell

Re: [tor-talk] Adblock Plus and Ghostery should be included in Tor bundle

2012-02-12 Thread Andrew Lewman
On Sun, 12 Feb 2012 07:53:17 -0800 (PST) Brian Franklin bfranklin74...@yahoo.com wrote: 1. Privacy. Fairly obvious why we do this. Stopping ads and ad tracking is consistent with the privacy mission of the Tor Project. In general, I'm going to defer to Mike Perry, as he's our expert here.

Re: [tor-talk] Sonic Firewall, Iran related?

2012-02-13 Thread Andrew Lewman
On Mon, 13 Feb 2012 13:32:00 -0500 Nathan Freitas nat...@freitas.net wrote: He wrote me today saying this: Today I had a talk with the head of computer department, he said that the sonic wall blocking policies are automatically updated and they can't do anything with that. While I do not

Re: [tor-talk] Tor bridge delivery method

2012-02-14 Thread Andrew Lewman
On Mon, 13 Feb 2012 09:59:34 +0100 Xu yourdad moothecowl...@gmail.com wrote: I have recently watched a video of a conference where Tor developers discuss the arms race engaged between them and various governments to shut down access to the Tor network. I have come out with the outline of a

[tor-talk] Call for volunteers for UCL Usable Security, Privacy, and Tor study

2012-02-14 Thread Andrew Lewman
I've started working with some students at University College London to help them figure out usable security, privacy, and tor. We need some volunteers willing to be interviewed via phone/skype/gchat by the students. Preferably, you self-identify as either an activist or a non-activist normal

Re: [tor-talk] Call for volunteers for UCL Usable Security, Privacy, and Tor study

2012-02-15 Thread Andrew Lewman
On Wed, 15 Feb 2012 01:30:31 -0500 Andrew Lewman and...@torproject.org wrote: If you're interested in helping out, please email me directly. I'm going to take the first three people that respond from each group. Tor users are awesome. Thank you to the eight people who responded. You even fit

Re: [tor-talk] Blocking Tor - solutions?

2012-02-15 Thread Andrew Lewman
On Wed, 15 Feb 2012 18:17:34 +0100 Matej Kovacic matej.kova...@owca.info wrote: what are the solutions if someone is downloading list of IP addresses of Tor exit points and block access to his website from this IP addreses? There is no easy, nor good solution right now. A solution that exists

Re: [tor-talk] Blocking Tor - solutions?

2012-02-15 Thread Andrew Lewman
On Wed, 15 Feb 2012 18:04:01 -0500 Daniel Bryg ferment...@gmail.com wrote: I have a related question. Is there a public archive of former exits? Or if a person used to run an exit, but now they don't, they can't have the therefore not my traffic excuse anymore? Yes,

Re: [tor-talk] Tor users trackable with common proxy?

2012-02-21 Thread Andrew Lewman
On Mon, 20 Feb 2012 16:15:37 +0800 Koh Choon Lin 2choon...@gmail.com wrote: The authorities in Singapore are understood to have the ability to track down a person online even if he or she uses anonymizing facilities such as Virtual Private Networking, TOR onion routing, or other forms of proxy

Re: [tor-talk] keeping track of popular mentions of Tor?

2012-02-28 Thread Andrew Lewman
On Tue, 28 Feb 2012 09:12:43 -0500 Joseph Lorenzo Hall joeh...@gmail.com wrote: I'm reading Stephenson's Reamde and there's a significant part where a Hungarian character installs Linux and then Tor on an internet cafe machine... which lead me to wonder if anyone is keeping track of popular

Re: [tor-talk] Cannot finish handshake with directory server (Kazakhstan)

2012-02-28 Thread Andrew Lewman
On Tue, 28 Feb 2012 13:51:21 +0200 Maxim Kammerer m...@dee.su wrote: As asked by a commenter, is it known which companies supply the Tor-focused DPI blocking technology to governments, universities, and the like? I see two possible directions where such information might be helpful: Yes,

Re: [tor-talk] Cannot finish handshake with directory server (Kazakhstan)

2012-02-28 Thread Andrew Lewman
On Tue, 28 Feb 2012 12:26:03 -0500 Collin Anderson col...@averysmallbird.com wrote: Please forgive this comment in being tangental; I am increasingly interested in how Kazakhstan is moving and hope to be involved in bringing more to light on the matter. Right. If it's not one vendor, it'll be

Re: [tor-talk] Cannot finish handshake with directory server (Kazakhstan)

2012-02-29 Thread Andrew Lewman
On Tue, 28 Feb 2012 00:30:36 -0500 and...@torproject.org wrote: Indeed, see https://blog.torproject.org/blog/kazakhstan-upgrades-censorship-deep-packet-inspection You need the obfsproxy bundle, https://www.torproject.org/projects/obfsproxy.html.en. Here's slightly more data on .kz. A

Re: [tor-talk] Operating system updates / software installation behind Tor Transparent Proxy

2012-03-01 Thread Andrew Lewman
On Fri, 02 Mar 2012 00:12:44 +0100 proper proper pro...@secure-mail.biz wrote: You ask the user not to use Bittorrent over Tor, as the network can not handle the load. bittorrent trackers are fine, it's the bulk download of GB of data 7x24 that loads up the network. What about operating

Re: [tor-talk] Tor and HTTPS graphic

2012-03-06 Thread Andrew Lewman
On Tue, 06 Mar 2012 11:22:33 -0500 Ted Smith te...@riseup.net wrote: While I like the graphic overall, I think the NSA as a global passive adversary element is an example of the graphic being overloaded with information that will confuse/scare away most people. So far, there is one story where

Re: [tor-talk] A bug in the Tor Browser Bundle?

2012-03-07 Thread Andrew Lewman
On Wed, 7 Mar 2012 19:44:12 -0500 Chris Wheeler grin...@gmail.com wrote: I am hosting a tor exit server named grintor. I noticed that if I try to specify my exit server in the TBB using the .exit TLD it doesn't work. I have tried to go to google.com.grintor.exit to no avail. It also does not

Re: [tor-talk] tor debian repository for non x86 arch? (arm)

2012-03-11 Thread Andrew Lewman
On Sat, 10 Mar 2012 15:08:30 +0100 tagnaq tag...@gmail.com wrote: looks like we are going to see ARM (arch) .deb packages sooner or later: https://twitter.com/#!/torproject/status/176898932763394048 Thanks to Peter, we have experimental armel and armhf .debs,

Re: [tor-talk] tormail.net is a project of Russian security services?

2012-03-24 Thread Andrew Lewman
On Sat, 24 Mar 2012 11:56:46 + James Brown jbrownfi...@gmail.com wrote: What do you think about the above? Here's what lists.torproject.org sees for tormail servers: Mail from lists to tormail flows via: relay=incoming.tormail.net[200.50.230.38]:25 mail from tormail to lists flows via:

Re: [tor-talk] How can the video play in TBB without plagins?

2012-03-25 Thread Andrew Lewman
On Sun, 25 Mar 2012 19:14:54 + James Brown jbrownfi...@gmail.com wrote: How cat that nice video https://media.torproject.org/video/2009-install-and-use-tor-browser-bundle.ogv play in TBB when my plagin Shockware Flash is disable? We use ogg vorbis inside html5 video tags. See

Re: [tor-talk] Status/progress of TorRouter?

2012-03-29 Thread Andrew Lewman
On Thu, 29 Mar 2012 15:29:50 +0200 pro...@secure-mail.biz wrote: What is the status of TorRouter? Any progress on the project? I've been monitoring the active trac tickets and wiki sites. There are no changes since a long time. Is the progress behind closed doors? What is up with that

Re: [tor-talk] Forget Iran- beware of US isp's

2012-04-10 Thread Andrew Lewman
On Wed, 11 Apr 2012 02:01:04 +0200 BlueStar88 bluesta...@xenobite.eu wrote: Not to mention your google suggestion returned nothing recent. http://www.bucksright.com/verizon-fios-internet-outage-effects-mid-atlantic-states-7233 Interesting, fios is a last mile solution from verizon. Only

Re: [tor-talk] Restarting Firefox

2012-04-16 Thread Andrew Lewman
On Mon, 16 Apr 2012 11:45:54 +0200 Agapetos agapetos.typho...@gmail.com wrote: My computer is old and I can't afford to run Firefox non-stop, so I close it when I don't use it and leave Vidalia running (I have a relay set up). When I try to run Firefox again from tor-browser_en-US/App/Firefox/

Re: [tor-talk] Restarting Firefox

2012-04-16 Thread Andrew Lewman
On Mon, 16 Apr 2012 16:43:23 +0200 Agapetos agapetos.typho...@gmail.com wrote: Hmm... I'm a bit sad to hear that because it's very inconvenient for some of us to run Firefox 24/7 just because we'd like to help the network with relaying. Perhaps in the future you will make it a bit more

Re: [tor-talk] problem with cache preferences in TBB

2012-04-16 Thread Andrew Lewman
On Sat, 14 Apr 2012 19:29:13 + hepta tor hepta...@gmail.com wrote: the IP anonymity test at http://ip-check.info/ suggests that browser.cache.memory.enable should be set to 'false'. in TBB The question to ask is 'why does it suggest this?' The 'new identity' function in TBB will clear

Re: [tor-talk] Tor Public Bridge Email

2012-04-16 Thread Andrew Lewman
On Wed, 11 Apr 2012 13:41:30 -0400 Sam Whited s...@samwhited.com wrote: When requesting bridge addresses via the email system, it only accepts emails from gmail.com, yahoo.com, and mit.edu. What's the process for adding domains to this list (or is there one)? I don't believe there is a process

Re: [tor-talk] Basic questions from new user but...

2012-05-10 Thread Andrew Lewman
On Wed, 9 May 2012 17:56:34 -0600 Elena Johnson mmai...@hotmail.com wrote: 1) Can I ANONYMOUSLY allow scripts for hotmail, gmail and yahoo mail using Tor browser? The answer is here, https://www.torproject.org/docs/faq.html.en#TBBJavaScriptEnabled 3) Can I ANONYMOUSLY load external

Re: [tor-talk] Basic questions from new user but...

2012-05-10 Thread Andrew Lewman
On Thu, 10 May 2012 18:36:28 -0500 Joe Btfsplk joebtfs...@gmx.com wrote: It may be true that changing settings makes one's profile different, but from all I've ever read, java script is responsible for more malicious browser attacks than anything. That's not so good. The non-layman's terms

Re: [tor-talk] Scripts

2012-06-04 Thread Andrew Lewman
On Mon, 4 Jun 2012 04:01:57 +0200 KςĦαm ellaisy karimella...@hotmail.com wrote: I would like to know what language you used for the tor Browser and the scripts that you used to build it.i have seen gitweb but didnt see anything i neededi am not going to steal your project and sell it for my

Re: [tor-talk] Multi user tor

2012-06-04 Thread Andrew Lewman
On Mon, 28 May 2012 16:59:43 +0200 miniBill cmt.minib...@gmail.com wrote: I'm going to have a lot of users using tor on the machine, and my main concern is one user interfering with another user privacy. As it's a shared server, even if someone can find out the source ip that's not a big deal,

Re: [tor-talk] Hidden Wiki

2012-06-22 Thread Andrew Lewman
On Thu, 21 Jun 2012 16:18:54 -0400 grarpamp grarp...@gmail.com wrote: Could have just told him to google the damn thing himself. There are like 20 the hidden wiki pages all of them claiming to be the real one. -- Andrew http://tpo.is/contact pgp 0x6B4D6475

Re: [tor-talk] wiki article quality

2012-07-26 Thread Andrew Lewman
On Wed, 25 Jul 2012 15:19:25 + adrelanos adrela...@riseup.net wrote: Yet those articles got removed from WikiStartAlternate [4] and have therefore also no chance to enter WikiStart [5]. Thus chances anyone reads them and may find them useful are lower. You are upset because I removed the

Re: [tor-talk] [Fwd: Re: [tor-relays] Call for discussion: turning funding into more exit relays]

2012-07-30 Thread Andrew Lewman
On Mon, 30 Jul 2012 14:08:16 -0400 Ted Smith te...@riseup.net wrote: Did this actually happen, or is it just jya being overly paranoid again? (Sorry if this is just more noise.) Tor-talk unsubbed me yesterday, probably for publishing on Cryptome Eugen's forward of this thread's initial

Re: [tor-talk] Free WiFi Bootable Ditros

2012-07-31 Thread Andrew Lewman
On Mon, 30 Jul 2012 10:57:24 -0700 (PDT) jed c n_o_t_h...@yahoo.com wrote: I wouldn't recommend TOR for anything personally identifying (anything done on TOR has a chance of greater scrutiny and malicious subversion). Have you data to empirically show this is true? I run the Tor

Re: [tor-talk] tor-talk Digest, Vol 19, Issue 7

2012-08-03 Thread Andrew Lewman
On Fri, 3 Aug 2012 18:39:57 +0530 anu nivas anupama.2312.bm...@gmail.com wrote: I have used Tor as a client and notice that each time I refresh my page, my IP Address is shown as a different one. I would like to know how these IP Addresses are assigned They are not assigned. Please read the

Re: [tor-talk] Tor as ecommerce platform

2012-08-08 Thread Andrew Lewman
On Wed, 8 Aug 2012 09:07:49 +0300 Maxim Kammerer m...@dee.su wrote: I doubt that the Tor Project will ever acknowledge such support. Tor developers (or at least policy people) like to pretend that Tor is used for purposes that they consider morally right, and ignore the uses that are morally

Re: [tor-talk] Tor as ecommerce platform

2012-08-09 Thread Andrew Lewman
On Wed, 8 Aug 2012 07:23:46 -0400 grarpamp grarp...@gmail.com wrote: Tor cannot accept known 'illegal' money, therefore acknowledgement is moot. About the best Tor could do is be able to accept anonymous donations in the first place. Then publish a bitcoin address for donations from anyone.

Re: [tor-talk] Tor as ecommerce platform

2012-08-10 Thread Andrew Lewman
at risk, here they are https://people.torproject.org/~andrew/tor-user-stories/ These were initially public in 2008 and 2009 for a series of articles on the now defunct Knight Pulse blog. I ask again, because I want the answer to improve us: On Wed, Aug 8, 2012 at 8:09 PM, Andrew Lewman

Re: [tor-talk] http://torbrowser.sourceforge.net/

2012-08-14 Thread Andrew Lewman
On Tue, 14 Aug 2012 20:38:13 +0200 Randolph D. rdohm...@gmail.com wrote: Hello there is preparation draft work done to get the vidalia Qt plugin out for the TorBrowser based on Dooble Web Browser 1.35 with lots of security improvments. Is there something to change on the drafted website?

  1   2   >