Re: [tor-talk] HTTPS to hidden service unecessary?

2012-07-09 Thread Matthew Finkel
On Mon, Jul 9, 2012 at 10:49 PM, Juenca R wrote: > > > >T or HS provide end-to-end encryption, however imho SSL it still maybe > > useful if: > > > > - You use a Tor Gateway (for example in a Lan or WiFi) to reach the > > .onion darknet space and you don't want to trust your Tor Gateway or > > yo

Re: [tor-talk] http://torbrowser.sourceforge.net/

2012-08-15 Thread Matthew Finkel
On Wed, Aug 15, 2012 at 5:35 PM, Randolph D. wrote: > As you already can see on the website, it is added (maybe done later than > you looked first): > > "TorBrowser Source code is open source and not affiliated with Tor, but > simply use Tor. "Tor" and the "Onion Logo" are registered trademarks of

Re: [tor-talk] http://torbrowser.sourceforge.net

2012-08-16 Thread Matthew Finkel
On Thu, Aug 16, 2012 at 3:47 PM, Randolph D. wrote: > TBB =/ Torbrowser > website redesgined in blue Though imitation is the highest form of flattery, you should really just redesign your site. Create your own CSS and maybe try using a 3-column design instead of just 2...provides much more flexib

Re: [tor-talk] VPS provider

2012-09-25 Thread Matthew Finkel
On 09/25/2012 01:42 PM, Flo wrote: > +1 > This. > > The problem is especially on container-virtualizations like OpenVZ is > that the admins of the hostnodes must just type something like 'vzctl > enter 123' and they have a shell in your VPS... > > So you should have at least Xen/KVM where you can

Re: [tor-talk] VPS provider

2012-09-25 Thread Matthew Finkel
On 09/25/2012 04:00 PM, irregula...@riseup.net wrote: > On 09/25/2012 10:18 PM, Matthew Finkel wrote: >> On 09/25/2012 01:42 PM, Flo wrote: >>> +1 >>> This. >>> >>> The problem is especially on container-virtualizations like OpenVZ is >>> tha

Re: [tor-talk] Tor SOCKS?

2012-10-06 Thread Matthew Finkel
On 10/05/2012 03:31 PM, antispa...@sent.at wrote: > I have in a folder on a 64bit Linux distro the TBB. I read the Vidalia > bundle has been discontinued. So I jumped at using this configuration. > I have read that the socks 5 proxy is on 127.0.0.1:9050. So I tried > pushing through it a jabber.org

Re: [tor-talk] torsocks is broken and unmaintained

2012-11-02 Thread Matthew Finkel
On 11/02/2012 07:36 PM, Jacob Appelbaum wrote: > Nick Mathewson: >> On Fri, Nov 2, 2012 at 1:34 PM, adrelanos wrote: >>> >>> >>> Could you blog it please? >> >> >> I'd like to see more discussion from more people here first, and see >> whether somebody steps up to say, "Yeah, I can maintain that"

Re: [tor-talk] torsocks is broken and unmaintained

2012-11-03 Thread Matthew Finkel
On 11/03/2012 08:38 PM, Nick Mathewson wrote: > On Fri, Nov 2, 2012 at 11:10 PM, Matthew Finkel > wrote: > >> On 11/02/2012 07:36 PM, Jacob Appelbaum wrote: >>> Nick Mathewson: >>>> On Fri, Nov 2, 2012 at 1:34 PM, adrelanos wrote: >>>>> >&

Re: [tor-talk] torsocks is broken and unmaintained

2012-12-01 Thread Matthew Finkel
On 12/01/2012 06:14 PM, John Case wrote: > > On Fri, 2 Nov 2012, grarpamp wrote: > I don't agree. torsocks is still useful to prevent identity correlation through circuit sharing. Pushing all traffic through Trans- and DnsPort is not the answer. >>> >>> Also, I don't want all of my

Re: [tor-talk] Please help w...@lksne.go-plus.net

2012-12-29 Thread Matthew Finkel
On Sat, Dec 29, 2012 at 07:56:55PM +, W. Alksne wrote: > *As I cannot get the Tor Browser to work I wanted to uninstall it BUT > nowhere can I find an '_uninstall option_'. > I would appreciate your advice or recommendations . > Faithfully , > *Wolfram Alksne .* > * Hi Wolfram, The Tor Brows

Re: [tor-talk] Can't connect to http://jhiwjjlqpyawmpjx.onion/roundcube/

2013-03-27 Thread Matthew Finkel
On Wed, Mar 27, 2013 at 03:15:45PM -0500, Gramps wrote: > When I attempt to logon to > > > http://jhiwjjlqpyawmpjx.onion/roundcube/ > > I get an error message > > > DATABASE ERROR: CONNECTION FAILED! > > > > Unable to connect to the database! > > Please contact your server-administrator. > > Do

Re: [tor-talk] [Tails-dev] secure and simple network time (hack)

2013-04-12 Thread Matthew Finkel
I don't really understand your reservation about this project. It's reasonable to want authenticated time to a non-webserver of ones choice. Depending on your environment, tlsdate is complementary to the various other programs. You can (and will) use whatever you decide fits your needs, but please

Re: [tor-talk] CloudFlare

2013-04-18 Thread Matthew Finkel
On Thu, Apr 18, 2013 at 09:01:21AM +, Matt Pagan wrote: > > They're based in San Francisco, along with Craigslist (which > > is another misguided arbitrary blocker of Tor exits). > > Any other SF based companies that could benefit from > > a visit or hackerspace talk about why they should not >

Re: [tor-talk] CloudFlare

2013-04-18 Thread Matthew Finkel
On Thu, Apr 18, 2013 at 09:57:06PM +, Jacob Appelbaum wrote: > Matthew Finkel: > > On Thu, Apr 18, 2013 at 09:01:21AM +, Matt Pagan wrote: > >>> They're based in San Francisco, along with Craigslist (which > >>> is another misguided arbitrary blocker o

Re: [tor-talk] CloudFlare

2013-04-18 Thread Matthew Finkel
On Thu, Apr 18, 2013 at 01:45:12PM -0700, Gregory Maxwell wrote: > On Thu, Apr 18, 2013 at 1:01 PM, Matthew Finkel > wrote: > > Wikimedia is actually willing to discuss an alternative setup if a > > usable one is found. Their current implementation is not really > > ac

Re: [tor-talk] Why does requesting for bridges by email require a Yahoo or Gmail address?

2014-07-24 Thread Matthew Finkel
On Thu, Jul 24, 2014 at 10:29:49PM +, ideas buenas wrote: > I don't trust Gmail nor Yahoo. Roger, found another way. No excuses, please. > This actually has very little to do with trust, and (as Roger said) these providers were chosen because of the difficulty of creating new accounts. Out of

Re: [tor-talk] Why does requesting for bridges by email require a Yahoo or Gmail address?

2014-07-24 Thread Matthew Finkel
On Thu, Jul 24, 2014 at 06:37:27PM -0400, krishna e bera wrote: > On 14-07-24 06:29 PM, ideas buenas wrote: > > I don't trust Gmail nor Yahoo. Roger, found another way. No excuses, please. > > I am curious why Riseup.net isnt in the list of popular and relatively > secure email providers. Also th

Re: [tor-talk] Why does requesting for bridges by email require a Yahoo or Gmail address?

2014-07-26 Thread Matthew Finkel
On Fri, Jul 25, 2014 at 03:44:21PM +, obx wrote: > > Because we need an adequately popular provider that makes it hard to > > generate lots of addresses. Otherwise an attacker could make millions > > of addresses and "be" millions of different people asking for bridges. > > I know this is the

Re: [tor-talk] Why does requesting for bridges by email require a Yahoo or Gmail address?

2014-07-27 Thread Matthew Finkel
On Sun, Jul 27, 2014 at 02:09:52AM -0400, The Caped Wonderwoman wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > The difficulty of obtaining a Riseup account may be prohibitive for a lot of > people, especially if they need a bridge quickly for whatever reason. > Anecdotally, I req

Re: [tor-talk] Why adding Guard-Exit (EE) node in Tor yeild more catch probability than adding guard and exit node separately?

2014-08-05 Thread Matthew Finkel
On Tue, Aug 05, 2014 at 10:40:17AM +0900, saurav dahal wrote: > I am trying to observe the catch probability i.e. probability that a client > selects my added guard as well as exit node while making a circuit. > > First I inserted certain number of guard nodes and certain number of exit > nodes in

Re: [tor-talk] orWall 1.0.0 released!

2014-10-10 Thread Matthew Finkel
On Fri, Oct 03, 2014 at 09:37:42AM +0200, CJ wrote: > Hello! > > just a small update regarding orWall: it's released 1.0.0! > There's still *one* annoying issue regarding the tethering, but it > should be OK next week. Just have to take some time in order to debug > this for good. > > orWall prov

Re: [tor-talk] New SSLv3 attack: Turn off SSLv3 in your TorBrowser

2014-10-15 Thread Matthew Finkel
On Tue, Oct 14, 2014 at 10:15:26PM -0400, Nick Mathewson wrote: > Hi! It's a new month, so that means there's a new attack on TLS. > > This time, the attack is that many clients, when they find a server > that doesn't support TLS, will downgrade to the ancient SSLv3. And > SSLv3 is subject to a

Re: [tor-talk] Facebook brute forcing hidden services

2014-10-31 Thread Matthew Finkel
On Fri, Oct 31, 2014 at 01:07:24PM -0400, Mike wrote: > Here is an obvious question that I can't figure out. > Why would you use a service that cares nothing about keeping your details > secret? > They'll give you up to the state faster than you can blink. > > If you are in a country that blacklis

Re: [tor-talk] Tor Blog: "Thoughts and Concerns about Operation Onymous"

2014-11-09 Thread Matthew Finkel
On Sun, Nov 09, 2014 at 08:48:35AM -0800, coderman wrote: > Griffin, Matt, Adam, Roger, David, George, Karen, and Jake worked on a > wonderful write up of all the questions and concerns regarding this > Op: > > https://blog.torproject.org/blog/thoughts-and-concerns-about-operation-onymous > Than

Re: [tor-talk] misleading advice in Ars Technica article about patched binaries

2014-11-17 Thread Matthew Finkel
On Mon, Nov 17, 2014 at 07:16:58AM +, wyory wrote: > Hello Tor friends: > > AN article on Ars Technica about the malicious exit nodes contains some > misleading advice attributed to "Tor officials." > > From end of article: "Tor officials have long counseled people to employ > a VPN when usin

Re: [tor-talk] TorBirdy 0.1.3 released - Our fourth beta release!

2014-12-09 Thread Matthew Finkel
On Tue, Dec 09, 2014 at 11:33:27PM +0530, Sukhbir Singh wrote: > > The plugin on AMO has been preliminarily reviewed and we are still in > > the review process. It is again possible (Hooray!) to install TorBirdy > > directly from Thunderbird or by downloading the extension in a web > > browser from

Re: [tor-talk] Tor and solidarity against online harassment

2014-12-11 Thread Matthew Finkel
On Thu, Dec 11, 2014 at 11:56:36PM +, Jonathan Wilkes wrote: > Hi Gregory,Do you stand in solidarity with the Tor devs against online > harassment?  A wish to refrain from deflecting a conversation isn't exactly > the same thing. > > I stand in solidarity with the Tor community against onlin

Re: [tor-talk] ISP CenturyLink Blocking Tor?

2015-02-01 Thread Matthew Finkel
On Sun, Feb 01, 2015 at 04:14:26PM +, nathan...@moltennetworks.co.uk wrote: > I have been at a close friend's house recently and his provider is > CenturyLink (at home I use TimeWarner Cable). I tried to download > Tor Tails (over BitTorrent) and the Internet literally dropped so I > closed Bit

Re: [tor-talk] So what about Pirate Browser?

2013-08-10 Thread Matthew Finkel
On Sat, Aug 10, 2013 at 05:20:47PM +, adrelanos wrote: > Jerzy Łogiewa: > > Hello! > > > > It looks that The Pirate Bay will enter secure browser market, > > http://torrentfreak.com/pirate-bay-releases-pirate-browser-to-thwart-censorship-130810/ > > & http://piratebrowser.com/ > > > > I do n

Re: [tor-talk] So what about Pirate Browser?

2013-08-10 Thread Matthew Finkel
On Sat, Aug 10, 2013 at 02:54:57PM -0400, Roger Dingledine wrote: > On Sat, Aug 10, 2013 at 07:29:39PM +0000, Matthew Finkel wrote: > > The one thing I always think about when I hear about the comparison of > > censorship circumvention vs. anonymity[0] is something I once heard

Re: [tor-talk] obfsproxy failure: obfs3

2013-08-13 Thread Matthew Finkel
On Tue, Aug 13, 2013 at 04:11:18PM -0700, lee colleton wrote: > I'd like some help getting obfs3 set up. I'm seeing an error when I attempt > to start an obfsproxy bridge: > > Aug 13 06:49:17.000 [notice] Tor 0.2.4.15-rc (git-f41c20b344fb7359) > opening new log file. > Aug 13 06:49:17.000 [notice]

Re: [tor-talk] still unable to reach StartPage or Ixquick

2013-10-07 Thread Matthew Finkel
On Mon, Oct 07, 2013 at 06:19:57PM -0500, Joe Btfsplk wrote: > On 10/7/2013 5:27 PM, Roger Dingledine wrote: > > On Mon, Oct 07, 2013 at 05:18:17PM -0500, Joe Btfsplk wrote: > >> Haven't been able to reach StartPage or Ixquick sites or do search > >> for a week or more, in TBB 2.3.25-12. Can't eve

Re: [tor-talk] question about bridge relays

2014-01-27 Thread Matthew Finkel
On Mon, Jan 27, 2014 at 01:09:39AM -0500, Roger Dingledine wrote: > On Sun, Jan 26, 2014 at 04:43:02PM -0600, Kevin Nestor wrote: > > all of your posts and videos about setting up for to use a bridge rely > >on an older version of bridge that uses vidalia separately. > > > > Now that everyone can

Re: [tor-talk] Pissed off about Blacklists, and what to do?

2014-02-07 Thread Matthew Finkel
On Thu, Feb 06, 2014 at 10:46:32PM -0500, grarpamp wrote: > So many sites that we all use are now blacklisting Tor. It's unclear > whether it is via their use of tools that blindly utilize blacklists, > or if they are making a conscious choice to deny Tor users. As far > as I'm concerned, we are al

Re: [tor-talk] Tor-ramdisk 2014 20140309 released

2014-03-22 Thread Matthew Finkel
On Sun, Mar 09, 2014 at 06:38:23PM -0400, Anthony G. Basile wrote: > Hi everyone > > I want to announce to the list that a new release of tor-ramdisk is out. > Tor-ramdisk is an i686, x86_64 or MIPS uClibc-based micro Linux > distribution whose only purpose is to host a Tor server in an > envir

Re: [tor-talk] Does Tor need to be recompiled *after* the openssl update?

2014-04-12 Thread Matthew Finkel
On Sat, Apr 12, 2014 at 05:04:27AM -0400, hi...@safe-mail.net wrote: > For those of us who compile Tor from source, does Tor need to be recompiled > *after* the openssl update from our OS vendors? "Maybe". If you are upgrading OpenSSL from a much older version then you may need to recompile Tor (

Re: [tor-talk] IMPORTANT: Heartbleed vulnerability impact on Hidden Service experiment

2014-04-12 Thread Matthew Finkel
On Sat, Apr 12, 2014 at 12:16:18PM +0300, s...@sky-ip.org wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Hi, > > After seeing the challenge done by CloudFlare, to setup a server open > to the internet with that vulnerable OpenSSL version so everyone could > try and get its private

Re: [tor-talk] Viewing current Dir Auth votes

2014-04-12 Thread Matthew Finkel
On Sat, Apr 12, 2014 at 11:59:32AM -0400, Michael Wolf wrote: > Is there a way to view just the most recent directory authority votes? > I found the archives here: > https://metrics.torproject.org/data.html > > April is 1.5 GB, which is a lot when I only want to see set of votes. > If there is cur

Re: [tor-talk] Does Tor need to be recompiled *after* the openssl update?

2014-04-12 Thread Matthew Finkel
On Sat, Apr 12, 2014 at 05:51:46PM +0200, Nicolas Vigier wrote: > On Sat, 12 Apr 2014, Matthew Finkel wrote: > > > On Sat, Apr 12, 2014 at 05:04:27AM -0400, hi...@safe-mail.net wrote: > > > For those of us who compile Tor from source, does Tor need to be > > >

Re: [tor-talk] Can someone please help me understand section 1.10 of the rendezvous spec

2014-06-03 Thread Matthew Finkel
On Tue, Jun 03, 2014 at 07:47:29PM +, Yaron Goland wrote: > I'm trying to understand section 1.10 of > https://gitweb.torproject.org/torspec.git?a=blob_plain;hb=HEAD;f=rend-spec.txt > > > It seems to say that Alice and Bob directly negotiate a shared symmetric key. > Is that true? Does it m

Re: [tor-talk] Security concerns with running an exit relay

2014-06-05 Thread Matthew Finkel
On Thu, Jun 05, 2014 at 05:58:46PM -0800, I wrote: > S7R, > > That is a start. > But where is the full and exemplary answer for someone like me who really > wants to get it right but doesn't know how to set the DirFrontPage up or the > NTP syncing? > > Roger says to try the tor-relay list but t

Re: [tor-talk] messing with XKeyScore

2014-07-04 Thread Matthew Finkel
On Fri, Jul 04, 2014 at 09:36:23PM +, isis wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > Eugen Leitl transcribed 5.8K bytes: > > > > http://blog.erratasec.com/2014/07/jamming-xkeyscore_4.html?m=1 > > > > Errata Security > > > > Advanced persistent cybersecurity > > > > Fr

Re: [tor-talk] Get Tor bridge via python code

2015-10-16 Thread Matthew Finkel
On Fri, Oct 16, 2015 at 02:52:33PM +0330, Farbod Ahmadian wrote: > Hello every one: > How can i get tor bridges via a python code? > I mean i run the python code and it give me my bridges. > Thank you :) Hi Farod, Sadly no, you can not retrieve bridges easily using a python script. The website (h

Re: [tor-talk] How stealth onions actually function?

2016-08-06 Thread Matthew Finkel
On Sat, Aug 06, 2016 at 10:24:53AM +0300, Nurmi, Juha wrote: > Hi, > > I have been playing with stealth onion services[1] to protect some of my > SSH servers from SSH MITM. I like to keep my servers as hidden as possible. > > Great to have this option on Tor :) I have some questions about it and

Re: [tor-talk] help

2017-08-15 Thread Matthew Finkel
Hi Petey, On Wed, Aug 16, 2017 at 03:46:59AM +, petey lean wrote: > I don't understand why i can't connect to the tor browser, i've joined the > IRC I just kept getting link to the support page only thing on support page > i saw about loading tor log files to get help when having a problem was

Re: [tor-talk] Need a stable .onion address hosted by the Tor project.

2017-10-25 Thread Matthew Finkel
On Wed, Oct 25, 2017 at 02:36:25PM +0200, Rob van der Hoeven wrote: > Some extra info... > > > I use expyuzz4wqqyqhjn.onion (www.torproject.org) as test .onion > > address but this address does not seem very stable to me. Getting a > > response will frequently take several minutes. Is there an .on

Re: [tor-talk] company devised process to disable Intel Management Engine

2017-12-10 Thread Matthew Finkel
On Sun, Dec 10, 2017 at 04:29:16PM -0600, Joe wrote: > Not sure if this info has been posted before > >"Purism disables intel's flawed management engine on linux-powered laptops > LINUX PC MAKER Purism has devised a process to disable the flawed Intel > Management Engine" > https://www.youtube.com/

Re: [tor-talk] Launching new tabs in existing TBB from the shell

2018-02-17 Thread Matthew Finkel
On Sat, Feb 17, 2018 at 09:29:15PM +0200, Lars Noodén wrote: > On 02/17/2018 07:52 PM, Rusty Bird wrote: > > Lars Nood�n: > >> I've looked around a bit and wonder how to launch new tabs from the > >> shell into a running TBB instance. > > > > $ ./Browser/start-tor-browser --allow-remote # for the

Re: [tor-talk] Tor4

2018-03-06 Thread Matthew Finkel
On Tue, Mar 06, 2018 at 06:06:21AM -0500, Anon Hyde wrote: > I've poor slow english and apologize for any possible inaccuracies. Who is > "shill"? This isn't related to your below question, and it's not related to Tor, so this topic should be dropped. "A shill, also called a plant or a st

Re: [tor-talk] Intercept: NSA MONKEYROCKET: Cryptocurrency / AnonBrowser Service - Full Take Tracking Users, Trojan SW

2018-03-25 Thread Matthew Finkel
On Sun, Mar 25, 2018 at 11:21:40AM -0400, Wanderingnet wrote: > I'm puzzled by the entire basis of this posting. Bitcoin is, in itself, > well-known to be completely transparent on the blockchain, making > transactions traceable as a matter of course. Considerable study has been > done in this r

Re: [tor-talk] Structured Information on Tor

2018-04-13 Thread Matthew Finkel
On Fri, Apr 13, 2018 at 03:30:15AM -0400, sVYVGcT5jfBv9vnfL0Ey wrote: > Hey Guys! Hi! It's great you're interested this! Just so you know for next time, as a matter of respect for everyone on this list, we use "y'all" or "everyone" (or something similar). > > I am a total Tor-Newbie and wanted t

Re: [tor-talk] How do the OBFS4 "built-in" Bridges work?

2018-04-29 Thread Matthew Finkel
On Sun, Apr 29, 2018 at 02:06:49PM -0400, Nathaniel Suchy (Lunorian) wrote: > I see that Tor Browser, for users who are censored in their country, > work, or school (or have some other reason to use bridges) has a variety > of built in bridges. Once of those are the OBFS4 bridges. My first > though

Re: [tor-talk] How do the OBFS4 "built-in" Bridges work?

2018-04-30 Thread Matthew Finkel
On Sun, Apr 29, 2018 at 03:41:47PM -0400, Nathaniel Suchy (Lunorian) wrote: > Thank you for clarifying that. The obfs4 bridges you can get at > bridges.torproject.org also pose an interesting risk, the ports each > Bridge IP Address is using seem to be non-standard, I'm in the US and > most network

Re: [tor-talk] How do the OBFS4 "built-in" Bridges work?

2018-04-30 Thread Matthew Finkel
On Mon, Apr 30, 2018 at 04:21:00AM +, Nathaniel Suchy (Lunorian) wrote: > So the concerns I brought up are already addressed in an upcoming update? Yes, and/but no. Moat is a good step in the correct direction, but it by no means solves all the problems. Moat simply retrieves bridges from brid

Re: [tor-talk] Fingerprinting issue in Tor Browser for macOS

2018-04-30 Thread Matthew Finkel
On Mon, Apr 30, 2018 at 04:26:00AM +, Nathaniel Suchy (Lunorian) wrote: > When using Tor Browser for macOS, the EFF's tool panoptclick shows that > a large amount of fonts are available, while Tor Browser for Linux > claims only Wingdings is available. This could allow a website know > whether

Re: [tor-talk] Tor Browser "Sandbox" Development Status?

2018-05-01 Thread Matthew Finkel
On Tue, May 01, 2018 at 05:48:00PM +, Nathaniel Suchy (Lunorian) wrote: > Hello, > > So I see there is a download available, that's Linux exclusive, for Tor > Browser "Sandbox", is this a stable or alpha build? Is this considered > production ready or still an experiment? Please see both warn

Re: [tor-talk] GNOME Is Removing the Ability to Launch Apps from Nautilus

2018-05-18 Thread Matthew Finkel
On Tue, May 15, 2018 at 01:48:00PM +, Nathaniel Suchy (Lunorian) wrote: > According to recent commits the desktop enviroment GNOME is removing the > ability to launch apps from Nautilus. This will likely affect all Tor > Browser users on Ubuntu in the name of "security". What steps will / > sho

Re: [tor-talk] torjail - run programs in tor network namespace

2018-07-23 Thread Matthew Finkel
On Mon, Jul 23, 2018 at 09:51:53AM +0200, bic wrote: > Hello, > > I want to share a project made in _to hacklab. > > https://github.com/torjail/torjail Nice! Very interesting. > > We would like to have some feedback about the project, particularly if you > find some way to deanonimize a progra

Re: [tor-talk] torjail - run programs in tor network namespace

2018-07-24 Thread Matthew Finkel
On Tue, Jul 24, 2018 at 01:44:36PM -0800, I wrote: > > "Tor", and not "TOR". > > -- > > With respect, > > Roman > > Is this list for capital punishment? > Or is this a community for freedom? This is a list for empowering each other and building a community and technology for helping those who ar

Re: [tor-talk] HSTS forbids "Add an exception" (also, does request URI leak?)

2018-08-08 Thread Matthew Finkel
On Wed, Aug 08, 2018 at 10:59:23AM +, Need Secure Mail wrote: > On August 7, 2018 11:14 PM, nusenu wrote: > >> did you notice the non-HSTS/HSTS distinction when trying to add an > >> exception? > > On August 8, 2018 1:51 AM, grarpamp wrote: > > If there is, would have to look closer, thx. >

Re: [tor-talk] HSTS forbids "Add an exception" (also, does request URI leak?)

2018-08-08 Thread Matthew Finkel
On Wed, Aug 08, 2018 at 04:27:33PM +, Need Secure Mail wrote: > On August 8, 2018 1:57 PM, Matthew Finkel wrote: > > > Right. This is the recommendation in the RFC [0]. It would be > > counter-productive if the webserver informed the browser that the > > website shou

Re: [tor-talk] Exit nodes can redirect requests?

2018-08-09 Thread Matthew Finkel
On Thu, Aug 09, 2018 at 08:14:03PM +0200, onionsmas...@tutanota.com wrote: > > So I was browsing some old clearnet forum posts using Tails and Tor browser. > Some posts had embedded images from a Tor hidden site via onion.casa gateway. > That gateway site seems to be inactive nowadays. > I refre

Re: [tor-talk] Get relay information from the "Network Status Consensuses" file?

2018-11-25 Thread Matthew Finkel
On Sun, Nov 25, 2018 at 03:57:34PM +0800, Lucon Yang wrote: > The "Network Status Consensuses" file contains some relay information I > need. Now I have a relay's fingerprint, but I did't find a fingerprint > field in this file. > How can I get a relay's information from the file by the relay's > f

Re: [tor-talk] Moving stuff between Tor Browsers

2018-12-21 Thread Matthew Finkel
On Thu, Dec 20, 2018 at 04:24:30PM +0100, Robin Lee wrote: > Hi list > > I'm wondering what is the proper way to move all the > settings/bookmarks/saved passwords from one instance of Tor Browser to > an other? It doesn't matter if information gets overwritten on the > receiving end. Same version

Re: [tor-talk] tor project website change

2019-03-27 Thread Matthew Finkel
On Wed, Mar 27, 2019 at 04:01:04PM +0100, Udo van den Heuvel wrote: > Hello, > > Who changed the web content at https://www.torproject.org/download/ ? > Previously I could relatively easily check for the latest tor version > but now I get only a number of tor browser options in a page that is way

Re: [tor-talk] tor project website change

2019-03-29 Thread Matthew Finkel
On Thu, Mar 28, 2019 at 05:39:00AM -0700, Mirimir wrote: > On 03/28/2019 02:27 AM, Nicolas Vigier wrote: > > On Wed, 27 Mar 2019, Mirimir wrote: > > > >> On 03/27/2019 08:01 AM, Udo van den Heuvel wrote: > >>> Hello, > >>> > >>> Who changed the web content at https://www.torproject.org/download/ ?

Re: [tor-talk] tor in arm

2019-04-16 Thread Matthew Finkel
On Tue, Apr 16, 2019 at 10:53:39AM +, Linklinklink wrote: > tor browser doesn't work in a arm based system, i tried with raspberri pi 3. > Who know a very nice alternative for this shit? thanks Thanks for your interest! "this shit" isn't appropriate for this mailing list, please be respectful

Re: [tor-talk] How Tor Browser changing circuits for tabs?

2019-04-26 Thread Matthew Finkel
On Sat, Apr 27, 2019 at 12:55 AM wrote: > How does Tor Browser change circuits for each tabs? > You may find this section of the Tor Browser design document of interest: https://2019.www.torproject.org/projects/torbrowser/design/#identifier-linkability > > In Tor Browser, a circuit for tabs of

Re: [tor-talk] [tor-relays] ALL GREYPONY SERVERS ARE OPEN FOR DDOS

2019-05-03 Thread Matthew Finkel
On Fri, May 03, 2019 at 10:27:14AM +, Stirling Newberry wrote: > ATTENTION GREYPONY USERS > > ALL GREYPONY EXITS WILL BE TARGETED FOR DDOS. THIS REQUEST HAS COME FROM > PRETTY HIGH UP. GAME OVER BITCHES. YOU GUYS ARE GOING TO BE DONE. LOIC WILL > BE USED TO TARGET THE NODES. DON'T SAY YOU WE

Re: [tor-talk] Tor Browser Android 8.5.1 obfs4 Bridges Problem

2019-06-10 Thread Matthew Finkel
On Mon, Jun 10, 2019 at 10:02 AM Georg Koppen wrote: > > Lotta Kallio: > > Yes, i tried. It is not working. If someone can interest with this issue we > > would be appreciated in here. > > It is weird that those bridges are working for you on desktop and not on > mobile. Are you on the same netwo

Re: [tor-talk] stay clear from exit "BSDNow2016"

2019-07-02 Thread Matthew Finkel
On Tue, Jul 2, 2019 at 1:35 PM nusenu wrote: > > Hi, Hi nusenu, > > the tor exit relay "BSDNow2016" [1] reroutes > traffic back into the tor network instead of exiting it. > It uses other exits instead of being > an actual exit. This allows it to inspect traffic without having to deal > "Stay "

Re: [tor-talk] TBB and Importing Cookies.

2019-10-02 Thread Matthew Finkel
Hi, Interesting question. On Wed, Oct 2, 2019 at 4:03 PM wrote: > > Just a quick question about how cookies are used in Tor. > > Just for an experiment, I exported cookies from Firefox in JSPN format and > imported then into TBB (via an add-on that allows the import of JSON > data). > > However,

Re: [tor-talk] TorBrowser is only showing a black windows after today's update

2019-10-23 Thread Matthew Finkel
On Wed, Oct 23, 2019 at 6:28 PM Nirgal wrote: > > Hi > > I'm using Tor Browser Bundle on Debian stable, with xfce. > > After last update, tor is only showing a black windows. > > I get the first small window "Establishing a connexion..." then the regular > big window "Tor Browser", so I guess some

Re: [tor-talk] loading some content changes Tor Browser 9.0 to full screen

2019-11-19 Thread Matthew Finkel
Hi! Sorry for the delay, thanks for your questions. On Tue, Nov 5, 2019 at 9:16 AM Joe wrote: > > In TBB 9.0, should about:config "full-screen-api.enabled" be "true?" > It is =true by default, in my auto-updated TBB 9.0, in Linux Mint. Yes. > > I also see similar (default value) prefs, that ma

Re: [tor-talk] TBB "Security Level" Question.

2020-02-22 Thread Matthew Finkel
On Sun, Feb 16, 2020 at 2:56 PM wrote: > > Reading documents like https://tb-manual.torproject.org/ answers a lot > of questions for newer TBB users. Also, just as Firefox changes > constantly, TBB has ongoing changes. > > On 2/8/20 3:53 PM, mimb...@danwin1210.me wrote: > > My impression is that

Re: [tor-talk] Validating the DA authority document

2020-02-23 Thread Matthew Finkel
On Sun, Feb 23, 2020 at 12:13 PM Gary Chapman wrote: > > Hi community, > > I've tried reading the TOR docs, but I can't seem to wrap my head around "Tor" [0] > how the authority document works (as regards signature validation) ... I've > gotten circuit building working in a standalone c# library

[tor-talk] .onion alt-svc issues?

2020-03-02 Thread Matthew Finkel
Hello everyone, I'm curious if anyone has recently experienced issues with websites offering .onion alternative services. We have a slightly old Tor Browser ticket for "prioritizing" .onion alt-svc entries over non-.onions, but in my testing I could not reproduce the described behavior. I am going

Re: [tor-talk] Revisiting youtube blocking TBB, virtually all 1st attempts to load YT

2020-03-04 Thread Matthew Finkel
On Tue, Mar 03, 2020 at 04:49:16PM -0600, joebtfs...@gmx.com wrote: [snip] > It's unclear if the exit relay's country was / is a factor - too little > testing by me to be conclusive. > But, I found that manually clearing TBB's cache in about:preferences, > THEN restarting TBB worked a high percenta

Re: [tor-talk] Browser want UNIX sys_admin capability

2020-04-15 Thread Matthew Finkel
On Wed, Apr 15, 2020 at 10:49 PM Nicolas Vigier wrote: > > On Wed, 15 Apr 2020, Mr. Bob Dobalina wrote: > > > Dear Friends, > > > > it happen to see Firefox and tor bundle browser (linux64) both demand for > > sys_admin capabilities, see man 7 capabilitites. > > > > Why exactly they need the sys_a

Re: [tor-talk] Idea for a stand-alone browser based on Tor browser source code

2020-07-09 Thread Matthew Finkel
On Tue, Jul 07, 2020 at 12:12:55PM -0700, joel04g_t5...@secmail.pro wrote: > Tor browser has good defense against many tracking techniques, however, > internet users may want a way to browse the web without anonymity but with > some of the great features Tor browser provides. (Security Level, > Nos

Re: [tor-talk] TBB-10 cursors, pointers location

2020-10-06 Thread Matthew Finkel
On Tue, Oct 06, 2020 at 05:57:54PM -0500, joebtfs...@gmx.com wrote: > This is in Linux Mint 18.1 - Cinnamon. > I know all cursor themes installed in my Mint installation. > > After a fairly recent Tor Browser update - a few months?? ago, the > "default" mouse pointer TBB used and the weird "select

Re: [tor-talk] Fake Tor Browser on Google play store

2020-10-08 Thread Matthew Finkel
On Thu, Oct 08, 2020 at 07:23:23PM +, torrio888 wrote: > On Google play store there is a fake Tor Browser called "Torn Browser" that > claims to be "the only official mobile browser supported by the Tor Project, > developers of the world’s strongest tool for privacy and freedom online". > If

Re: [tor-talk] Where is the tor signing key?

2020-12-10 Thread Matthew Finkel
On Thu, Dec 10, 2020 at 09:19:46AM +, Colin Baxter wrote: > > The URL https://support.torproject.org/tbb/how-to-verify-signature/ > gives the impression that the signing key email address is > torbrow...@torproject.org. However > > gpg2 --search-keys torbrow...@torproject.org > > gives >

Re: [tor-talk] A 2nd Tor Browser (partial) profile?

2020-12-19 Thread Matthew Finkel
On Fri, Dec 18, 2020 at 04:36:53PM -0600, JoeB wrote: > In TorBrowser 10.0.7 why is there a 2nd (partial) "profile.default", > just above the original profile.default?  I thought TBB's auto update > function had gone hay wire, but a clean install also creates 2 > profile.default folders. > > Seems