Re: [tor-talk] some 94 likely risky relays (443+8443 Hetzner + DigitalOcean gang)

2019-10-08 Thread krishna e bera
On 2019-09-13 6:17 p.m., nusenu wrote: > I suspect these non-exit relays are up to no good What was risky about those relays? They all seem to be running Tor 0.3.5.8 with no contact given. Is that a Btw your message looked corrupted like a binary virus or some such until i turned on enigmail; ma

Re: [tor-talk] Reuters blocking Tor users?

2018-09-22 Thread krishna e bera
On Sat, Sep 22, 2018 at 5:49 PM, qubenix wrote: > I've notice over (at least) the past few days that while using tbb all > links to Reuters that I follow end up on a "Page not found". Even > https://reuters.com shows it. This is with or without scripts allowed. > > Have others noticed this? Is thi

Re: [tor-talk] TBB ExcludeNodes List, where is

2017-12-27 Thread krishna e bera
On 27/12/17 12:51 PM, Fernando Fernández Mancera wrote: > Hi, > > about point 2 if I am not wrong, in your tor browser path you should find > the torrc file that it uses. Not shown in manual but if you have TBB check at ./tor-browser_en-US/Browser/TorBrowser/Data/Tor/torrc ExcludeNodes isnt in

Re: [tor-talk] donation via tbb

2017-11-04 Thread krishna e bera
On 03/11/17 03:38 AM, Jon Tullett wrote: > On 31 October 2017 at 07:07, x9p wrote: >> On 2017-10-30 23:47, krishna e bera wrote: >>> >>> I tried to donate by Paypal via TBB (medium security setting) and got an >>> error page when it was almost done: >>

[tor-talk] donation via tbb

2017-10-30 Thread krishna e bera
I tried to donate by Paypal via TBB (medium security setting) and got an error page when it was almost done: " Method not allowed Method not allowed. Must be one of: POST " -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings go to https://lists.torproj

Re: [tor-talk] How to find trust nodes?

2017-09-28 Thread krishna e bera
There can be no guarantees - all software has bugs. However Tor Project people are making best efforts to help users get anonymity and security. https://blog.torproject.org/tor-social-contract TorBrowser cannot protect you against exit relay operators who sniff the contents of traffic. You must

Re: [tor-talk] German BND 2010: Tor Unsuitable

2017-09-21 Thread krishna e bera
On 21/09/17 11:25 AM, grarpamp wrote: > https://netzpolitik.org/2017/secret-documents-reveal-german-foreign-spy-agency-bnd-attacks-the-anonymity-network-tor-and-advises-not-to-use-it/ > > https://netzpolitik.org/2017/geheime-dokumente-der-bnd-hat-das-anonymisierungs-netzwerk-tor-angegriffen-und-wa

Re: [tor-talk] Unusual Tor's spikes in Egypt and Turkey on 28th August

2017-09-20 Thread krishna e bera
On 20/09/17 06:00 AM, Alec Muffett wrote: > In certain respects this can be read as "TBB's threat model excessively > trades-off consistency and usability in favour of protections which > $SOME_MAJORITY of its userbase do not actually need" - but I'm okay with > the status quo. > > I would rather

Re: [tor-talk] $1,000,000 for tor zerodays

2017-09-13 Thread krishna e bera
On 13/09/17 11:41 AM, "I" wrote: > https://zerodium.com/tor.html Anyone caught selling Tor bugs and exploits to anyone but TorProject should be subject to some kind of severe penalty. It is an offence against the right to privacy, in other words a crime against humanity. Well, a misdemeanor anywa

Re: [tor-talk] Neal Krawetz's abcission proposal, and Tor's reputation

2017-08-31 Thread krishna e bera
On 30/08/17 10:07 AM, Ben Tasker wrote: > On Wed, Aug 30, 2017 at 2:55 PM, Jon Tullett wrote >> For example the "China Dissident Blog" could choose a stable site hosted > in the United States or Europe and have it point to the current unvalidated > name. Or they can just use a friend's Internet si

Re: [tor-talk] Tor with static IP.

2017-08-16 Thread krishna e bera
On 12/08/17 07:08 AM, Jason Long wrote: > Hello.Can I use Tor with static IP? I don't like my IP changed. Your own IP address is not changed by the Tor network. What the Tor network changes periodically is route taken to wesites you visit in Torbrowser. Each route will use 2 or 3 different IP add

Re: [tor-talk] Tor, DNS leaks, and BrowserLeaks.com

2017-08-12 Thread krishna e bera
On 12/08/17 07:59 AM, eric gisse wrote: > Please don't use OpenDNS. They insert ads into lookups. thanks, fixing. > > On Fri, Aug 11, 2017 at 7:07 PM, krishna e bera wrote: >> On 11/08/17 06:42 PM, blo...@openmailbox.org wrote: >>> I am a little confu

Re: [tor-talk] Tor, DNS leaks, and BrowserLeaks.com

2017-08-11 Thread krishna e bera
On 11/08/17 06:42 PM, blo...@openmailbox.org wrote: > I am a little confused when using Tor with https://browserleaks.com/ip > > My exit node is ogopogo in Canada. But the "DNS leak test" component of the > above page says that my DNS servers are in Belgium: > > 74.125.181.9 n/a Google Bel

Re: [tor-talk] Tor ban discussion at Russian state Duma

2017-07-31 Thread krishna e bera
Followup: laws passed. " President Putin has signed a law that, as of November 1st, bans technology which lets you access banned websites, including virtual private networks and proxies. Internet providers will have to block websites hosting these tools. ... Accordingly, the President has signed

Re: [tor-talk] tor 0.3.0.9 release notes

2017-07-22 Thread krishna e bera
On 22/07/17 08:14 AM, Udo van den Heuvel wrote: > Hello, > > Where can I find the tor ReleaseNotes for 0.3.0.9 that actually mention > details about changes in 0.3.0.9? > > Kind regards, > Udo > These? https://lists.torproject.org/pipermail/tor-announce/2017-June/000133.html -- tor-talk mail

Re: [tor-talk] Tails prevents MAC changes as design feature

2017-07-04 Thread krishna e bera
On 04/07/17 02:13 AM, intrigeri wrote: Answered on tails-...@boum.org. That shows as a mailto: link. Perhaps meant to point to https://mailman.boum.org/pipermail/tails-dev/2016-August/010898.html which leads to these issues: https://labs.riseup.net/code/issues/7380 https://labs.riseup.net/code/

Re: [tor-talk] Is the recent growth in Ukrainian users confusing google's geoip?

2017-06-18 Thread krishna e bera
On 18/06/17 05:50 AM, Alec Muffett wrote: In other news, the FB Onion, for some time after it launched, geolocated to London. I can't imagine why. How can a .onion geolocate anywhere? Arent they supposed to be entirely in cyberspace and hidden? -- tor-talk mailing list - tor-talk@lists.torp

Re: [tor-talk] Tor source code

2017-06-08 Thread krishna e bera
Am 08.06.2017 um 21:16 schrieb Suhaib Mbarak: > My task goal is to show how Tor works and to proof that it > relay anonymise user traffic... > My question is to make sure wether tor source code is open and > available for public or not? > In case it is open source and can be modified how it is sec

[tor-talk] Alec Muffet "Tor is a very attractive proposition for secure networking"

2017-05-26 Thread krishna e bera
A blog post that envisions Tor working as part of mainstream infrastructure. https://medium.com/@alecmuffett/tor-is-end-to-end-encryption-for-computers-to-talk-to-other-computers-34e41d81c9e2 " Tor protocol enables end-to-end encrypted communications between computers — eg: Tor Browser on your l

Re: [tor-talk] TBB users, please give 1 minute of your time for science

2017-04-25 Thread krishna e bera
On 25/04/17 05:37 AM, c...@browserprint.info wrote: I'm a PhD student. I have no employer other than my university. All my work is done with the intention of publishing it in academic journals, conferences, my blog, and my thesis. Going to the site we can see this project purports to be run by

Re: [tor-talk] This video has been censored by YouTube many times

2017-04-02 Thread krishna e bera
On 01/04/17 10:12 PM, neokulak wrote: So the Tor mailing list is now being used to promote anti-Semitic spam? How lovely. This mailing list is not filtered through a moderator, which means stuff gets through and abusers of the list get removed after the fact. Some hate propaganda like that v

[tor-talk] followup: United States v. Jay Michaud

2017-03-09 Thread krishna e bera
"The Department of Justice filed a motion in Washington State federal court on Friday to dismiss its indictment against a child porn site. It wasn’t for lack of evidence; it was because the FBI didn’t want to disclose details of a hacking tool to the defense as part of discovery. Evidence in Un

[tor-talk] CIA Vault 7, Year Zero

2017-03-07 Thread krishna e bera
""Year Zero" introduces the scope and direction of the CIA's global covert hacking program, its malware arsenal and dozens of "zero day" weaponized exploits against a wide range of U.S. and European company products" [0] The good news is no mention of exploits against Tor, TorBrowser, TAILS,

Re: [tor-talk] Browserspy knows my computer time

2017-01-15 Thread krishna e bera
On 10/01/17 11:44 AM, Joe Btfsplk wrote: On 1/10/2017 3:53 AM, Georg Koppen wrote: Joe Btfsplk: How does Browserspy.dk get the correct local time & time zone from TBB 6.08 on my PC? I guess https://trac.torproject.org/projects/tor/ticket/20981 is a good candidate for explaining this. Thanks

Re: [tor-talk] Govt Dismissing Darknet Cases due to State Secrets, Illegal Actions, Etc

2017-01-13 Thread krishna e bera
On 10/01/17 08:30 PM, grarpamp wrote: Rather than disclose the source code that the FBI used to target a child porn suspect, federal prosecutors in Tacoma, Washington recently dropped their appeal in United States v. Michaud. The case is just one of 135 federal prosecutions nationwide involving t

Re: [tor-talk] Hacker and Tor

2016-12-02 Thread krishna e bera
On 02/12/16 01:28 PM, Flipchan wrote: Hidemyass did deanonymize and gave out information to the goverment about One if their own users. If dns is your problem run dns throw Tor. Use dnscrypt throw Tor . A cpanel is often just some php script sure it might record ur ip and useragent But that is mo

Re: [tor-talk] ShellCode-Exploit deleivery over TOR

2016-11-12 Thread krishna e bera
On 12/11/16 04:40 PM, John Doe wrote: Recently, Istumble relatively often over a message by my Antivirus that a file was removedfrom the TB “doomed” cache, where binary files like images are cached. These filesseem to contain an exploit like “Win32/ShellCode.A”. Firstly Iassumed a bad exit node t

Re: [tor-talk] Richard Chirgwin @ theregister.co.uk: "Judge orders FBI to reveal whether White House launched 'Tor pedo' torpedo exploits"

2016-11-02 Thread krishna e bera
On 02/11/16 09:17 PM, grarpamp wrote: On Tue, Oct 25, 2016 at 5:04 PM, krishna e bera wrote: Perhaps our new Board member from CMU can provide more details Tor is not transparent. Sorry. Move along. (Or contact the press office for some unfreespeech.) Heh. I was not suggesting there is

Re: [tor-talk] Richard Chirgwin @ theregister.co.uk: "Judge orders FBI to reveal whether White House launched 'Tor pedo' torpedo exploits"

2016-10-25 Thread krishna e bera
On 25/10/16 01:55 PM, tort...@arcor.de wrote: http://www.theregister.co.uk/2016/10/25/judge_orders_fbi_to_reveal_whether_exploits_were_okayed_by_white_house/ "The case is one of several the Feds are pursuing against more than 100 alleged users of the child sex abuse material exchange network cal

Re: [tor-talk] Tor honeypot

2016-10-11 Thread krishna e bera
On 11/10/16 12:17 PM, Flipchan wrote: Hi *:) I have been playing around with some telnet and ssh honeypots lately and caught some malware to learn More about reverse Engineering. And i thought it would be cool to run a Tor honeypot , something that listens on port 9001 and is ofc not connected

Re: [tor-talk] problem reinstalling NoScript

2016-10-04 Thread krishna e bera
On 04/10/16 10:03 PM, Joe Btfsplk wrote: In TBB 6.0.5 (Win), NoScript 2.9.0.14 it seemed to be misbehaving. It wasn't showing many trackers in the icon drop list, on sites where there would be plenty. I UNchecked "Allow Scripts Globally." I uninstalled it - closed TBB. Removed NoScript entries

Re: [tor-talk] Tor and Google error / CAPTCHAs.

2016-10-04 Thread krishna e bera
We are already starting to see people switching away from Google for privacy reasons and soon it will also be because of censorship (nationstate edicts and EU "right to forget") and biasing (due to Google's political involvement, e.g. suppressing typeaheads negative to Clinton). The alternative se

Re: [tor-talk] is it me or did tor talk get really quiet?

2016-09-26 Thread krishna e bera
On 26/09/16 03:02 PM, Joe Btfsplk wrote: > But several current, relevant technical questions I've asked about Tor > issues get no comments. > Questions I'm pretty sure a lot of people would be interested in. And > that at least some advanced users would have partial answers or > suggestions for, bu

Re: [tor-talk] How do i check the archives?

2016-09-20 Thread krishna e bera
On 20/09/16 01:28 PM, Andrew F wrote: > How do i check the archives? thanks Look at the bottom of every message on the list (including this one): there is a link to the website that contains the archives. -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other se

Re: [tor-talk] Bittorrent starting to move entirely within anonymous overlay nets

2016-08-14 Thread krishna e bera
On 14/08/16 05:23 AM, shirish शिरीष wrote: at bottom :- On 13/08/2016, grarpamp wrote: Общество шифропанков http://vabu56j2ep2rwv3b.onion/ BitTorrent трэкер. http://vabu56j2ep2rwv3b.onion/Tracker.html Это одна из его установок которую вы можете использовать в своих torrent файлах. http://xodv6

[tor-talk] noscript on youtube

2016-07-30 Thread krishna e bera
When trying to login to Youtube from TBB, NoScript blocks a bunch of stuff seemingly related to fonts (see screenshot at https://postimg.org/image/c0sfrf2kh/41fa1875/ ), and i cannot proceed (the Sign In button doesnt work. Otherwise Youtube works fine with HTML5 videos. The website's font oug

Re: [tor-talk] FBI cracked Tor security

2016-07-14 Thread krishna e bera
> Should add that users with NoScript enabled would not have been > vulnerable - I get the "noscript decreases privacy" argument, but I'd > still kinda like it to be on by default to protect users. Maybe with a > big red "Turn on Javascript because I'm happy to get pwned by > malicious ads, FBI mal

Re: [tor-talk] Accuracy of speed tests over Tor

2016-07-05 Thread krishna e bera
On 07/05/2016 06:51 PM, grarpamp wrote: > On 7/5/16, gdfg dfgf wrote: >> how accurate are this results? >> https://imgur.com/a/6cZjf > > Be sure whatever tool you're using is not in fact bypassing tor. > Browsers are often a quick hack, better standalone tools exist > for more accurate / in dept

Re: [tor-talk] Paper on traffic correlation

2016-07-05 Thread krishna e bera
On 07/05/2016 12:30 AM, Paul Syverson wrote: > On Mon, Jul 04, 2016 at 10:55:25PM +, Cannon wrote: >> >> Just a paper I found, thought you all might find it interesting. >> What are your thoughts on this? >> >> >> http://www.ohmygodel.com/publications/usersrouted-ccs13.pdf > > A work of penetr

Re: [tor-talk] Wikileaks is the Endgame

2016-06-26 Thread krishna e bera
On 06/26/2016 04:59 AM, grarpamp forwarded some links: > https://www.reddit.com/r/TOR/comments/4pw7bz/tor_infiltrated_by_cia_agent/ Incident summary. > http://pastebin.com/WPAmqkW8 Can one of participants verify that as an authentic unedited transcript of the tor-internal irc? I'm guessing a b

Re: [tor-talk] Exit nodes generating HTTPS traffic to HTTP ports

2016-06-17 Thread krishna e bera
On 06/17/2016 03:39 PM, Florian Weimer wrote: > Is there a constellation of bugs which recently conspired in such a > way that a web server might receive a flood of HTTPS requests on port > 80/TCP instead of 443/TCP? It is only a convention (common practice) that HTTPS listens on port 443. A webs

Re: [tor-talk] Tor-Retro' for OS/2 Warp 4.52 Latest Release (2001) ?

2016-05-31 Thread krishna e bera
On 05/31/2016 12:41 PM, Fabio Pietrosanti (naif) - lists wrote: > Hello, > > i where considering to start running Tor Relay on retro' operating > systems under virtualized environment and i was particularly interested > in having a Tor Relay running on OS/2 Warp and i was particularly > interesti

Re: [tor-talk] fwd: FBI Is Pushing Back Against Judge's Order to Reveal Tor Browser Exploit

2016-05-18 Thread krishna e bera
On 05/18/2016 11:40 AM, Joe Btfsplk wrote: > I'm surprised there are no discussions or questions on tor-talk about > this issue . > Since any exploits - whether due to "flaws" in Firefox or TBB, or not - > potentially have broader implications & applications. > > Normally, there'd be many comments

Re: [tor-talk] fwd: FBI Is Pushing Back Against Judge's Order to Reveal Tor Browser Exploit

2016-05-12 Thread krishna e bera
followup- Mozilla files brief in the case to get disclosure before defendant: https://blog.mozilla.org/blog/2016/05/11/advanced-disclosure-needed-to-keep-users-secure/ Since the case involves TorBrowser more directly than Firefox, will Tor Project legal team also file an /amicus curiae/ ? (The g

Re: [tor-talk] Where is the Tor source code? [Was Re: FBI harassing Tor devs]

2016-05-07 Thread krishna e bera
On 05/06/2016 08:53 PM, Jonathan Wilkes wrote: >> Go to https://www.torproject.org/download/download and click on 'source > code'. > Starting from the frontpage I click on the "Download" button and arrive > here:https://www.torproject.org/download/download-easy.html.en > And no obvious links to th

[tor-talk] Supreme Court Gives FBI More Hacking Power

2016-04-28 Thread krishna e bera
(quote from article [0]) The rule change, sent[1] in a letter to Congress on Thursday, would allow a magistrate judge to issue a warrant to search or seize an electronic device if the target is using anonymity software like Tor. Over a million people use Tor to browse popular websites like Facebook

Re: [tor-talk] Innocent Seattle Exit Operators And Privacy Advocates Raided

2016-04-05 Thread krishna e bera
On 04/05/2016 07:23 PM, Phil Mocek wrote: > On 04/04/2016 03:13 AM, Roger Dingledine wrote: >> On Mon, Apr 04, 2016 at 12:04:44AM -0400, krishna e bera wrote: >>> Somewhere is a piece of advice from TorProject recommending people >>> not to run an exit node from h

Re: [tor-talk] Innocent Seattle Exit Operators And Privacy Advocates Raided

2016-04-03 Thread krishna e bera
On 04/03/2016 10:06 PM, grarpamp wrote: > https://www.thestranger.com/slog/2016/03/30/23885710/police-go-on-fishing-expedition-search-the-home-of-seattle-privacy-activists-who-maintain-tor-network > https://twitter.com/seattleprivacy > quote: > Robinson said the authorities should have known bett

[tor-talk] fwd: FBI Is Pushing Back Against Judge's Order to Reveal Tor Browser Exploit

2016-03-30 Thread krishna e bera
"In February 2015, the FBI seized a dark web child pornography site and ran it from their own servers for 13 days. During this time, the agency deployed a NIT against people who visited specific, child pornography threads, which grabbed their real IP address, among other technical details." articl

Re: [tor-talk] Operation Onymous Technical Explanation?

2016-03-28 Thread krishna e bera
On 03/26/2016 07:32 AM, CANNON NATHANIEL CIOTA wrote: > Seeking technical information on how hidden services were de anonymized > and what updates to HS protocol was applied as a mitigation. > Thanks, https://blog.torproject.org/blog/thoughts-and-concerns-about-operation-onymous -- tor-talk mail

Re: [tor-talk] How to get informed about syntax errors in "torrc"? Logfile?

2016-03-20 Thread krishna e bera
On 03/17/2016 03:09 AM, Ben Stover wrote: > Assume I wrote some instructions into "torrc" file with wrong syntax. > > How do I get informed about this mistake? > > Is there a logilfe? > > Can I enable a warning prompt? > > Or are such invalid instructions simply silently ignored? tor --verify-

Re: [tor-talk] Traffic shaping attack

2016-03-19 Thread krishna e bera
On 03/19/2016 07:02 AM, Oskar Wendel wrote: > Roger Dingledine : >> The third question you might ask is: can I inject these signals in a >> way that they're still recognizable to me, but observers don't realize >> that anything weird is going on with the traffic? That is, can I do >> this active tr

Re: [tor-talk] What IPs does Torbrowser need?

2016-03-15 Thread krishna e bera
How would the TBOCR work with Bridges? https://www.torproject.org/docs/bridges.html.en On 03/15/2016 10:51 AM, Martin Kepplinger wrote: > What do you mean? blocking traffic from the Tor network is very common > and a standard feature that torproject itself supports. > > This is just the same in r

Re: [tor-talk] What is Design?

2016-03-12 Thread krishna e bera
On 03/12/2016 10:18 AM, Spencer wrote: > 1 de·sign verb \di-ˈzīn\ > ... > Copied -dev, -ux, and -teachers once for relevance but, should there be, > responses live on -talk. Dictionaries and etymology can be fun and controversial and offtopic. What are you trying to say about "Design" and Tor? Wh

[tor-talk] mouse wheel fingerprinting

2016-03-10 Thread krishna e bera
Are developers working on the mouse wheel browser leak? http://jcarlosnorte.com/security/2016/03/06/advanced-tor-browser-fingerprinting.html https://www.rt.com/viral/335112-tor-mouse-movements-fingerprint/ When i tried the demo, Noscript was blocking javascript on the page. -- tor-talk mailing l

Re: [tor-talk] Tor for everyone; introducing Eccentric Authentication

2016-02-23 Thread krishna e bera
On 02/22/2016 04:03 PM, Guido Witmond wrote: > If either the blogger or responder wishes to send a private message, > they can use the others' persons public key after validating there is no > MitM. Message transport goes through the site. After a few round trips > of messages, there is certainty

Re: [tor-talk] Which webmail providers are Tor friendly.

2016-02-09 Thread krishna e bera
https://user.riseup.net/forms/new_user/first - works with Tor - does not require alternate email or phone - does not tolerate spamming - supports StartTLS - does not send or log ip addresses - requests donations, bitcoin accepted more info: https://help.riseup.net/email On 02/09/2016 01:15 PM, D

[tor-talk] Bayesian Imputation for Anonymous Visits

2016-02-08 Thread krishna e bera
A recent Schneier blog points to this research http://papers.ssrn.com/sol3/papers.cfm?abstract_id=2700347 Summarizing, it seems possible to match anonymized users (at least in a marketing profile sense) to registered users or past purchasers, by analyzing how they interact with a site. I wonder h

Re: [tor-talk] A possible way to make end-users to contribute to Tor exit traffic

2016-02-07 Thread krishna e bera
On 02/07/2016 07:25 AM, nusenu wrote: > Fabio Pietrosanti (naif) - lists: - it is *not* a good idea to run exits from your home (limited exit policies are no guarantee for no troubles) >> It depends only on how finely we can be capable of precisely defining >> the destinations to which yo

[tor-talk] rotten Apples Re: Tor Browser Bundle with Chromium

2015-03-10 Thread krishna e bera
On 15-03-10 08:38 PM, z...@manian.org wrote: > Fred says the deterministic builds for iOS are impossible because Apple's > FairPlay DRM. > > RAM can't be trusted either. > > Everytime I think we've hit local peak dystopia, we go deeper. > > > > On Tue, Mar 10, 2015 at 3:17 PM, Mike Perry > wr

Re: [tor-talk] Why corrupt government officials blah blah bleh blah

2015-03-07 Thread krishna e bera
On 15-03-05 02:07 PM, t...@t-3.net wrote: > > On 03:05:2015, Travis Bean wrote: > >> Stuff > > I wonder if this giant pile of mess you've posted in this mailing list > is related to the products/services you are trying to sell on the web > site linked in your sig? > > I didn't like what I read

Re: [tor-talk] Fwd: I Encourage Everyone, Right Here And Now, To Donate Money To His Three Main Security Programs, Which He Uses The Most!

2015-02-07 Thread krishna e bera
On 15-02-07 02:29 PM, grarpamp wrote: > On Sat, Feb 7, 2015 at 5:01 AM, Mirimir wrote: >> "if you ever need info about anyone at harvard just ask. >> i have over 4000 emails, pictures, addresses, sns. >> They trust me — dumb fucks."[0] >> http://gawker.com/5636765/facebook-ceo-admits-to-calling-us

Re: [tor-talk] New Tor-based private mail system: Confidant Mail

2015-02-03 Thread krishna e bera
On 15-02-02 09:57 PM, Mike Ingle wrote: > http://www.confidantmail.org > Mike Ingle > d2b89e6f95e72e26e0c917d02d1847dfecfcd0c2 I am curious why someone delivering security and privacy software does not have HTTPS on their webserver. Also what is that string after your email address for? sign

[tor-talk] ATOMIC BANJO and LEVITATION used by CSE

2015-01-29 Thread krishna e bera
They are tapping the cables and getting ip addresses of browsers, then sharing that with other "intelligence" agencies. E.g. you could be stopped at the border if someone in your house clicked on a monitored site. Another reason to use Tor (not an uppercased acronym) all the time. https://firstlo

[tor-talk] Is Tor a VPN or ISP?

2015-01-02 Thread krishna e bera
The new copyright law in Canada would seem to require anyone claiming ISP safe harbour protection to log data of users for 6 months and to forward alleged copyright violation notices to them. http://www.michaelgeist.ca/2014/12/notice-difference-new-canadian-internet-copyright-rules-isps-set-launch

Re: [tor-talk] Including Adblock to TBB to save bandwith

2014-12-24 Thread krishna e bera
What about making a TorProject filter list for Adblock* users so that we all look the same to sites visited? Or go further and include (or add some functionality of) RequestPolicy into TBB. Its purpose is to ensure no URLs outside the domain you intended to visit are opened, and the user has to s

Re: [tor-talk] Warning: Do NOT use my mirrors/services until I have reviewed the situation

2014-12-21 Thread krishna e bera
On 14-12-21 06:54 PM, Thomas White wrote: > Ok now the dust has settled a little, a few updates on the situation: > > 1. The likelihood of this being the work of law enforcement seems to > be lower than originally anticipated. This is good in many ways but > asks more questions than it solves righ

Re: [tor-talk] TPO/TBB clone on SourceForge, use of TPO name

2014-09-23 Thread krishna e bera
On 14-09-23 12:45 PM, Fabio Pietrosanti (naif) wrote: > Il 9/22/14, 11:42 PM, grarpamp ha scritto: >> Whether clones or worse, there's something >> very weird going on with these guys. > Here an OSINT notes/analysis on several of that "suspicious" software: > https://docs.google.com/spreadsheet/ccc

Re: [tor-talk] 5 million dollar company close to shut down due to an exposure on the Dark Net

2014-09-11 Thread krishna e bera
On 14-09-11 04:36 PM, John Pinkman wrote: > It all started 4 days ago, when PinkMeth site posted a profile with the > self-taken nudes of the daughter of the company owners. > > [http://pinkmethuylnenlz.onion/us/pa/ligonier-pa/jeanne-markosky] > > The company, Markosky Engineering of Ligonier, P

Re: [tor-talk] Wired Story on Uncovering Users of Hidden Services.

2014-09-10 Thread krishna e bera
On 14-09-10 12:26 AM, Griffin Boyce wrote: > Things that are important to note for hidden service operators: > - Firewall rules are really useful for keeping out unwarranted scrutiny. Would it be better to have a separate firewall appliance to ensure the hidden service box cannot be as easily DD

Re: [tor-talk] Tentative results of analysis of data on metrics.torproject.org

2014-09-03 Thread krishna e bera
On 14-09-03 10:25 PM, Roger Dingledine wrote: > On Wed, Sep 03, 2014 at 04:10:13PM -0700, Virgil Griffith wrote: >> https://docs.google.com/document/d/1SaBK664SchhZOP9XBsB8KK63k4xlmMTlkhfF28f2204/pub > [...] > - Figure 3 is a bit weird. Our bandwidth-per-relay stat is a function of > how many total

Re: [tor-talk] Dropping Tor Browser support for Mac OSX 10.6?

2014-09-03 Thread krishna e bera
On 14-09-03 05:46 AM, bao song wrote: > 10.6 still supports Rosetta to run old apps. > > 10.7 means having to upgrade EVERYTHING. > > That's why I still run 10.6 > > (and there was even more to be said for 10.4 which ran pre-OSX apps, but my > 10.4 machine died). Do these old apps need to be c

Re: [tor-talk] BBC: NSA and GCHQ agents 'leak Tor bugs', alleges developer

2014-08-30 Thread krishna e bera
On 14-08-30 07:31 AM, Patrick Schleizer wrote: > Cypher: >> On 08/24/2014 09:43 PM, Michael Wolf wrote: >> The article was very interesting - except the part about 'here's how you >> might want to fix this'. I certainly hope that the Tor project /is not/ >> accepting patches submitted by NSA or GCH

Re: [tor-talk] Who do I ask about purchasing additional Tor t-shirts (~5-10)?

2014-08-30 Thread krishna e bera
On 14-08-30 02:31 AM, elrippo wrote: > Very nice :) > > My browser, rekonq, reports that your certificate is not valid. Maybe you > check > that. > > Kind regards, > elrippo > > Am Samstag, 30. August 2014, 02:28:22 schrieb Juris - torservers.net: >> Update: >> >> https://www.torservers.net/wi

Re: [tor-talk] BBC: NSA and GCHQ agents 'leak Tor bugs', alleges developer

2014-08-24 Thread krishna e bera
On 14-08-24 11:56 PM, I wrote: > Fair enough, although it was published elsewhere. > > > > >>> One thing revealed is that this list doesn't get the full facts from the >>> TOR core. >> >> Huh? That's a good thing, because this is not a trusted list. Would be nice to see Tor media coverage link

Re: [tor-talk] torbundlebrowser.org

2014-08-14 Thread krishna e bera
On 14-08-13 12:28 PM, t...@skrilnetz.net wrote: > > Hi, > > Not sure if that has been discussed yet... the site torbundlebrowser.org > is a almost perfect copy of the TOR webpage and has a TBB download which > has malware in it. (down at the moment) > > http://dustri.org/b/torbundlebrowserorg.ht

Re: [tor-talk] Nestat Results Connections Established With Hardware Disabled

2014-08-14 Thread krishna e bera
On 14-08-13 10:26 AM, Ben Healey wrote: > I came across 2 connections that were able to stay established with my > hardware disabled. The software keeps trying for a while before it gives up. Secondly, netstat for Windows may be reporting the last active connections rather than the current state

[tor-talk] deleting publicly posted content

2014-08-08 Thread krishna e bera
On 14-08-08 04:01 AM, grarpamp wrote: > [Rant aside, people have a right to be forgotten, and those, like CL, > who willfully disregard that right, without verbosely or obviously > saying so in context (ie: mailing lists obviously have self-run, even > public, archives... that you cannot 'delete'),

Re: [tor-talk] Police arrest

2014-08-07 Thread krishna e bera
On 14-08-07 11:06 AM, mick wrote: > This is worrying. > > http://www.theregister.co.uk/2014/08/07/london_cops_close_down_site_arrest_suspect/ > > If this reporting is accurate, it implies that UK City of London Police > may be co-operating with copyright enforcers in closing down a service > whic

Re: [tor-talk] Why tor doesn't support UDP?

2014-08-07 Thread krishna e bera
On 14-08-07 05:57 AM, Andreas Krey wrote: > On Wed, 06 Aug 2014 23:38:54 +, Yuri wrote: > ... >> So what is the reason that UDP isn't supported? > > Because what you describe is a transparent proxy/router, while tor > only offers a SOCKS5 interface and doesn't (and doesn't want to) > care abou

Re: [tor-talk] dutch police crawling hidden servers

2014-08-05 Thread krishna e bera
On Tue, Aug 5, 2014 at 3:20 PM, Roger Dingledine wrote: > On Tue, Aug 05, 2014 at 03:09:29PM -0400, Andrew Lewman wrote: >> Given the resources of a national police force, it seems probable they >> can create a crawler to simply crawl every permutation of hidden service >> addresses on port 80 alo

Re: [tor-talk] JonDo uses Tor v0.2.3.25 SocksPort but not for v0.2.4.20-v0.2.4.23; why?

2014-08-02 Thread krishna e bera
On 14-08-02 01:48 PM, Mirimir wrote: > I've been playing with JAP/JonDo routed through Tor. The JonDo client > has a SOCKS proxy option, and it works well with Tor v0.2.3.25 > SocksPorts in Ubuntu 14.04.1 x64. I installed Tor from the Ubuntu 12.04 > repository, by the way. > > After upgrading Tor

[tor-talk] Polipo Re: (no subject)

2014-07-29 Thread krishna e bera
On 14-07-29 07:51 PM, ideas buenas wrote: > Do you mean TBB over a VPN? No, but if i did mean that, polipo would be even less relevant. > On Tue, Jul 29, 2014 at 9:01 PM, krishna e bera wrote: > >> On 14-07-29 04:44 PM, cav78 wrote: >>> I would like to know if it'

Re: [tor-talk] (no subject)

2014-07-29 Thread krishna e bera
On 14-07-29 04:44 PM, cav78 wrote: > I would like to know if it's necessary to > install or configure a web proxy (privoxy or polipo) with Tor Browser > Bundle 3.6.3 in order to have more privacy or to prevent Dns leaks. > Orbot > (a software for Android) includes Polipo, but I don't see it in T

Re: [tor-talk] Why does requesting for bridges by email require a Yahoo or Gmail address?

2014-07-24 Thread krishna e bera
On 14-07-24 06:29 PM, ideas buenas wrote: > I don't trust Gmail nor Yahoo. Roger, found another way. No excuses, please. I am curious why Riseup.net isnt in the list of popular and relatively secure email providers. Also there must be several large european and asian free email providers, but som

Re: [tor-talk] ISP surveillance.

2014-07-24 Thread krishna e bera
On 14-07-24 01:51 PM, s7r wrote: > Using Tor will encrypt your data totally with multiple layers, this > means that your ISP can see that you are using Tor, and nothing more. > They can't see what sites you visit, what data you download, > intercept, modify or alter the data you download, can't see

Re: [tor-talk] Almost everyone involved in developing Tor was (or is) funded by the US government

2014-07-23 Thread krishna e bera
On 14-07-23 07:05 PM, Tempest wrote: > Kristy Chambers: >> Have I written, that there is anything creepy about that? >> The basic question is, in how the tor project can be trusted if we look >> on suspicious activities of tor developers (e.g. choosing worse design >> decisions). > > the fundament

Re: [tor-talk] BlackHat2014: Deanonymize Tor for $3000

2014-07-03 Thread krishna e bera
On 14-07-03 02:05 PM, grarpamp wrote: > You Don't Have to be the NSA to Break Tor: Deanonymizing Users on a Budget > Alexander Volynkin / Michael McCord if they have followed a responsible disclosure process, tor developers should already be working on remedies... -- tor-talk mailing list - to

[tor-talk] Yahoo bounces Re: Fw: confirm [whatever]

2014-07-03 Thread krishna e bera
The same thing happened to Yahoo and AOL users in tor-relays: https://lists.torproject.org/pipermail/tor-relays/2014-June/004752.html To summarize, your only practical remedy at this time is to use an email address not on Yahoo or AOL. On 14-07-01 04:41 PM, Bobby Brewster wrote: > What does this

Re: [tor-talk] (no subject) HTTPS Everywhere

2014-07-03 Thread krishna e bera
On 14-07-02 10:59 PM, Seth David Schoen wrote: > ideas buenas writes: > >> Why is markmonitor.com and its derivates in my TBB? How can I do to delete >> this ? Are they watching me? > > Hi, > > Are you talking about seeing a markmonitor.com rule in the HTTPS Everywhere > Enable/Disable Rules men

Re: [tor-talk] Illegal Activity As A Metric of Tor Security and Anonymity

2014-06-30 Thread krishna e bera
(tl;dr: humor, no content) On 14-06-30 02:14 PM, Mark McCarron wrote: > Mick, > > I would be very careful what you claim in your emails. I have the capability > of suing you into oblivion, that email constitutes defamation. Nothing like > that was ever said, either retract it or I will take y

Re: [tor-talk] On recent and upcoming developments in the PT universe

2014-06-20 Thread krishna e bera
On 14-06-20 06:30 AM, Erik de Castro Lopo wrote: > George Kadianakis wrote: > >> Hello friends, >> >> this is a brief post on recent and upcoming developments in the PT >> universe. > > Err, sorry, what is PT? pluggable transport -- tor-talk mailing list - tor-talk@lists.torproject.org To unsu

[tor-talk] PrivEx and HS, Re: Tor Weekly News — June 18th, 2014 -

2014-06-18 Thread krishna e bera
On 14-06-18 07:04 AM, Lunar wrote: > Collecting statistics from Tor exits in a privacy-sensitive manner > -- > > Optimizing the Tor network to better support the most common use-cases > could make a real difference to its perceived us

Re: [tor-talk] Flash executables keep starting in background when using TBB

2014-06-16 Thread krishna e bera
On 14-06-16 03:17 PM, Joe Btfsplk wrote: > In at least the last couple TBB versions, or longer, I've found > FlashPlayerPlugin_x.x.exe (latest *13_0_0_214.exe) running in background > - numerous times. > Actually, 2 instances of flash exe files are always shown running. > > Biggest question is, wh

Re: [tor-talk] Non-free country law preventing Tor from getting donations

2014-06-14 Thread krishna e bera
On 14-06-14 01:00 PM, Collin Anderson wrote: > On Sat, Jun 14, 2014 at 10:07 AM, Joe Btfsplk wrote: > >> I'm not a legal or embargo rules expert, but I wonder if an embargoed >> country or individuals in it, giving money to a non-profit for which they >> receive nothing valuable, or that benefits

Re: [tor-talk] Tor Jumphost

2014-06-11 Thread krishna e bera
On 14-06-11 04:23 AM, Wayland Morgan wrote: >> 4) you trust the users ? >> >> 5) you trust the websites they will visit ? > > Yes. I don't really want or need to know what sites they will be > visiting and nightly rebuilds are a major success factor IMO with > regards to this implementation. If I

Re: [tor-talk] Tor Jumphost

2014-06-10 Thread krishna e bera
On 14-06-10 02:12 PM, Wayland Morgan wrote: > I have been considering potentially building some type of remote > jumphost for a University research setting that automatically connects > its users to the Tor network and am looking for feedback/implementation > ideas. > > A few assumptions: > > 1)

Re: [tor-talk] canvas fingerprinting

2014-06-02 Thread krishna e bera
On 14-06-02 12:26 PM, Gerardus Hendricks wrote: > On 6/2/14 3:59 PM, David Rajchenbach-Teller wrote: >> I'm curious, how does this fingerprinting technique work? > > Like this: > > http://www.w2spconf.com/2012/papers/w2sp12-final4.pdf What if all the HTML5 and CSS3 calls to read back any data in

Re: [tor-talk] Best onion email system?

2014-05-31 Thread krishna e bera
On 14-05-31 12:59 PM, Tempest wrote: > Bobby Brewster: >> What do people who use .onion addresses use to communicate? > > bitmessage.ch, which runs the bitmail onion you listed, has been usable > for me. however, the accessibility of the onion has not been consistent > and, at one point, the proje

Re: [tor-talk] Tor project supporters?

2014-05-28 Thread krishna e bera
Seems clear to me, the right thing to do is boycott the event or at least deplore the ban, individually and as organizations. Any chance of Tor Project signing onto such thing? On Mon, May 26, 2014 at 9:37 PM, Griffin Boyce wrote: > Juan wrote: > >> I once was told that the swedish governemnt

  1   2   3   >