Re: [tor-talk] Tor spying

2011-09-08 Thread Jacob Appelbaum
On 09/08/2011 04:21 AM, Indie Intel wrote: > The more I research this, the more it seems this sort of ``research'' > is more common than not. Wikileaks, Jacob Appelbaum, Adrian Lamo, > Moxie Marlinspike... who else? Iran?! > > The Tor Project needs to shed some light on this or it will have a > se

Re: [tor-talk] Tor spying

2011-09-08 Thread Roger Dingledine
On Wed, Sep 07, 2011 at 07:21:21PM -0700, Indie Intel wrote: > ``Moxie Marlinspike, probably the smartest guy in the world right now >on SSL issues, did a study a few years ago on how many Tor users ??? not >even regular users, but Tor users, clearly concerned about their privacy >and possessed wit

Re: [tor-talk] Tor spying

2011-09-08 Thread Julian Yon
On 08/09/11 03:21, Indie Intel wrote: > The more I research this, the more it seems this sort of > ``research''is more common than not. Wikileaks, Jacob Appelbaum, > Adrian Lamo, Moxie Marlinspike... who else? Iran?! You become good at implementing security by understanding how to break it. Som

Re: [tor-talk] Tor spying

2011-09-08 Thread Mike Perry
Thus spake Greg Kalitnikoff (kalitnik...@privatdemail.net): > Andrew Lewman wrote: > > Moxie is a smart guy, his answer to the CA issues, and therefore his own > > sslsniff/sslstrip attack is currently http://convergence.io/. I think > > Moxie's > > on the list, he can reply as well. > > Do y

Re: [tor-talk] Tor spying

2011-09-07 Thread Greg Kalitnikoff
Andrew Lewman wrote: > Moxie is a smart guy, his answer to the CA issues, and therefore his own > sslsniff/sslstrip attack is currently http://convergence.io/. I think Moxie's > on the list, he can reply as well. Do you consider including Convergence (or similar extension - Perspectives http://

Re: [tor-talk] Tor spying

2011-09-07 Thread Andrew Lewman
On Wednesday, September 07, 2011 22:21:21 Indie Intel wrote: > Apparently people are spying on Tor users by setting up their own exit > nodes and sniffing traffic?! Yes, as noted, this is old news. Go back even further in time and you'll see a string of people wanting attention at 'hacker cons'

Re: [tor-talk] Tor spying

2011-09-07 Thread Marsh Ray
On 09/07/2011 09:21 PM, Indie Intel wrote: Apparently people are spying on Tor users by setting up their own exit nodes and sniffing traffic?! Oh yeah. It happens. This Moxie Marlinspike is even a well-respected researcher, apparently. He gives talks at Blackhat to government hacker wannabes

Re: [tor-talk] Tor spying

2011-09-07 Thread Gregory Maxwell
On Wed, Sep 7, 2011 at 10:21 PM, Indie Intel wrote: > Apparently people are spying on Tor users by setting up their own exit nodes > and sniffing traffic?! For some reason the moral standards people abide to online are unlike the ones they'd apply in other contexts. I'm doubtful Moxie Marlinspi

[tor-talk] Tor spying

2011-09-07 Thread Indie Intel
Hello tor-talk mailing list, Today I was reading Dan Kaminsky's blog and I noticed a mention of Tor: ``Moxie Marlinspike, probably the smartest guy in the world right now on SSL issues, did a study a few years ago on how many Tor users — not even regular users, but Tor users, clearly concerned