Re: [tor-talk] Ideas to securely implement PGP encryption/decryption

2011-10-14 Thread tor
I'm jumping into this thread late, and am not replying to a specific email, I just wanted to add an idea I had a while ago. 1.) First of all, add some basic functions: Select some encrypted/signed text, right click, select decrypt/verify. See the results in a XUL window. Right click a textarea,

Re: [tor-talk] Ideas to securely implement PGP encryption/decryption

2011-10-14 Thread tor
On 14/10/11 10:28, t...@lists.grepular.com wrote: > if( "gnupg" in window ){ > thetextarea.onfocus = function(){ > window.gnupg.encrypt( function( ciphertext ){ > thetextarea.value = ciphertext; > } ); > }; > } Another example; if( "g

Re: [tor-talk] TBB as user debian-tor

2011-10-14 Thread Marco Bonetti
- Original Message - > it's files to debian-tor with: chown -R debian-tor tor-browser_en-US/ maybe "chown -R debian-tor:debian-tor tor-browser_en-US/" should be a little better > xhost + & sudo -u debian-tor /tor-browser_en-US/start-tor-browser as already pointed out, "xhost +" is a bit t

[tor-talk] still problems - update available

2011-10-14 Thread Joe Btfsplk
Someone said the problem of inaccurate notices from TBB that an update was available was fixed. This morning, I'm still getting the notice. This is the page it accesses if click link in Aurora: https://www.torproject.org/download/download-easy.html What * exact file & data * is the version ch

Re: [tor-talk] still problems - update available

2011-10-14 Thread Joe Btfsplk
On 10/14/2011 9:44 AM, Joe Btfsplk wrote: Someone said the problem of inaccurate notices from TBB that an update was available was fixed. This morning, I'm still getting the notice. This is the page it accesses if click link in Aurora: https://www.torproject.org/download/download-easy.html W

Re: [tor-talk] using themes in Aurora

2011-10-14 Thread Joe Btfsplk
No one's EVER looked into Tor security issues of using themes (from Mozilla addons site) or Firefox GUI enhancement addons, like Tab Mix Plus? On 10/13/2011 12:36 PM, Joe Btfsplk wrote: Using addons, plugins, etc. of ALL sorts is a touchy subject regarding Tor & anonymity. I'm wondering about

Re: [tor-talk] TBB as user debian-tor

2011-10-14 Thread unknown
On Fri, 14 Oct 2011 12:00:15 +0200 Marco Bonetti wrote: > - Original Message - > > it's files to debian-tor with: chown -R debian-tor tor-browser_en-US/ > maybe "chown -R debian-tor:debian-tor tor-browser_en-US/" should be a little > better Mixing permissions from "local-browser-tor" fr

Re: [tor-talk] Tor compromised?

2011-10-14 Thread torvlnt33r
A guess is that there might be a link between the bridges enumeration attack mentioned in that article and the recent spike in bridge use, for which one of the hypotheses was a botnet (https://lists.torproject.org/pipermail/tor-talk/2011-September/0 21347.html). Creating many circuits through the

Re: [tor-talk] Tor compromised?

2011-10-14 Thread Mansour Moufid
On Thu, Oct 13, 2011 at 1:55 PM, Brandon Wiley wrote: > However, the actual IPs discovered have no publication value. Releasing them > is just irresponsible. In order to receive credit, he just needs to publish > the attack, which would also be more helpful to us because then we could fix > it. J

Re: [tor-talk] Tor and resumed TLS handshakes

2011-10-14 Thread Mansour Moufid
On Mon, Sep 26, 2011 at 8:15 PM, Mike Perry wrote: > Previously we dealt with SSL Session IDs only by clearing them upon > toggle, on the assumption that Tor sessions would be short lived. We > also clear them with the "New Identity" button in Tor Browser, so Tor > Browser users are not entirely d

Re: [tor-talk] Tor compromised?

2011-10-14 Thread Mansour Moufid
On Thu, Oct 13, 2011 at 5:30 AM, George-Lopez wrote: > French students were able to exploit a vulnerability in Tor network > Details here (french): > http://www.itespresso.fr/securite-it-la-confiance-dans-le-reseau-d-anonymisation-tor-est-ebranlee-47287.html/2 More information: http://www.h2hc.c

Re: [tor-talk] Tor compromised?

2011-10-14 Thread Andrew Lewman
On Friday, October 14, 2011 13:55:21 Mansour Moufid wrote: > Sounds to me like a cryptographic attack (among others) -- the virus > modifies the crypto upstream and there is an observable effect > downstream. Could holding a CTR nonce constant in RAM (combined with > plaintext injection) have a rip

Re: [tor-talk] using themes in Aurora

2011-10-14 Thread Andrew Lewman
On Friday, October 14, 2011 12:49:32 Joe Btfsplk wrote: > No one's EVER looked into Tor security issues of using themes (from > Mozilla addons site) or Firefox GUI enhancement addons, like Tab Mix Plus? You could be the first! My first step would be to see what information is sent back to mozilla

Re: [tor-talk] Tor compromised?

2011-10-14 Thread Robert Ransom
On 2011-10-14, torvlnt...@fastmail.fm wrote: > A guess is that there might be a link between the bridges > enumeration attack mentioned in that article and the recent spike > in bridge use, for which one of the hypotheses was a botnet > (https://lists.torproject.org/pipermail/tor-talk/2011-Septemb

Re: [tor-talk] Tor compromised?

2011-10-14 Thread Robert Ransom
On 2011-10-14, Mansour Moufid wrote: > On Thu, Oct 13, 2011 at 5:30 AM, George-Lopez wrote: >> French students were able to exploit a vulnerability in Tor network >> Details here (french): >> http://www.itespresso.fr/securite-it-la-confiance-dans-le-reseau-d-anonymisation-tor-est-ebranlee-47287.h

Re: [tor-talk] still problems - update available

2011-10-14 Thread Robert Ransom
On 2011-10-14, Joe Btfsplk wrote: > Someone said the problem of inaccurate notices from TBB that an update > was available was fixed. This morning, I'm still getting the notice. Have you restarted TBB since you were told that message was fixed? I just restarted one of my TBBs, and it performed

Re: [tor-talk] still problems - update available

2011-10-14 Thread Joe Btfsplk
On 10/14/2011 1:34 PM, Andrew Lewman wrote: On Friday, October 14, 2011 10:44:01 Joe Btfsplk wrote: What * exact file& data * is the version check using in TBB to check against "latest" avail. versions from Tor Project? https://check.torproject.org/RecommendedTBBVersions is the file checked on

Re: [tor-talk] still problems - update available

2011-10-14 Thread Andrew Lewman
On Friday, October 14, 2011 10:44:01 Joe Btfsplk wrote: > What * exact file & data * is the version check using in TBB to check > against "latest" avail. versions from Tor Project? https://check.torproject.org/RecommendedTBBVersions is the file checked on start up of TBB. And is this a fresh d

Re: [tor-talk] still problems - update available

2011-10-14 Thread Joe Btfsplk
On 10/14/2011 2:21 PM, Robert Ransom wrote: On 2011-10-14, Joe Btfsplk wrote: Someone said the problem of inaccurate notices from TBB that an update was available was fixed. This morning, I'm still getting the notice. Have you restarted TBB since you were told that message was fixed? I just

Re: [tor-talk] using themes in Aurora

2011-10-14 Thread Joe Btfsplk
On 10/14/2011 1:28 PM, Andrew Lewman wrote: On Friday, October 14, 2011 12:49:32 Joe Btfsplk wrote: No one's EVER looked into Tor security issues of using themes (from Mozilla addons site) or Firefox GUI enhancement addons, like Tab Mix Plus? You could be the first! My first step would be to s

Re: [tor-talk] still problems - update available

2011-10-14 Thread andrew
On Fri, Oct 14, 2011 at 07:21:04PM +, rransom.8...@gmail.com wrote 1.6K bytes in 22 lines about: : periodically; it's bad enough that the update check makes a TBB's : first circuit recognizable at the exit node, and that every time a : user opens a new window, the exit node can tell that the u

Re: [tor-talk] Tor Browser Bundle: PGP encryption built-in?

2011-10-14 Thread Robert Ransom
On 2011-10-10, Arturo Filastò wrote: > On 10/10/11 9:44 AM, Robert Ransom wrote: >> On 2011-10-10, Fabio Pietrosanti (naif) wrote: >>> is anyone evaluating whenever to include PGP encryption support into the >>> default Tor Browser Bundle as a Firefox extension? >> No. >> > I actually think it wo

Re: [tor-talk] still problems - update available

2011-10-14 Thread Mike Perry
Thus spake Joe Btfsplk (joebtfs...@gmx.com): > Someone said the problem of inaccurate notices from TBB that an update > was available was fixed. This morning, I'm still getting the notice. > This is the page it accesses if click link in Aurora: > https://www.torproject.org/download/download-ea

Re: [tor-talk] still problems - update available

2011-10-14 Thread Joe Btfsplk
On 10/14/2011 3:07 PM, Mike Perry wrote: Thus spake Joe Btfsplk (joebtfs...@gmx.com): Someone said the problem of inaccurate notices from TBB that an update was available was fixed. This morning, I'm still getting the notice. This is the page it accesses if click link in Aurora: https://www.to

Re: [tor-talk] still problems - update available

2011-10-14 Thread Mike Perry
Thus spake Joe Btfsplk (joebtfs...@gmx.com): > On 10/14/2011 3:07 PM, Mike Perry wrote: > > >What is the value of torbrowser.version? > There's the problem. The line in about:config is: torbrowser.version; > user set 2.2.32-4-Windows- > Also, in prefs.js, has this line: > "user_pref("torbrows

Re: [tor-talk] still problems - update available

2011-10-14 Thread Joe Btfsplk
On 10/14/2011 7:07 PM, Mike Perry wrote: Thus spake Joe Btfsplk (joebtfs...@gmx.com): On 10/14/2011 3:07 PM, Mike Perry wrote: The problem w/ the startup page showing there was a new version, was I copied my old profile (say from 2.2.32-4) into the latest TBB ver profile folder. Something per

[tor-talk] Block certain countries exit?

2011-10-14 Thread andre76
How do can does one prevent Tor from exiting in a certain country? When a Tor user checks the IP address and it indicates the country "they are in" is Italy how can Tor be configured to avoid using "Italy"? . -- http://www.fastmail.fm - One of many happy users: http://www.fastmail.fm/docs/quote

Re: [tor-talk] Block certain countries exit?

2011-10-14 Thread Damian Johnson
> how can Tor be configured to avoid using "Italy"? In your torrc use the following options: ExcludeExitNodes {it} StrictNodes 1 ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk