Re: [tor-talk] Making TOR exit-node IP address configurable

2011-03-10 Thread Fabio Pietrosanti (naif)
On 3/9/11 11:58 PM, Gregory Maxwell wrote: > Tor has currently has no facility for those users who are happy to > have random third parties screw with their traffic to opt-into it, or > those who would want to avoid it to opt out. This means that anything > you to the traffic will have random inex

[tor-talk] seeking someone to fix a Tor rpm bug

2011-03-10 Thread Erinn Clark
Hello tor-talk, I work on the Tor packages, including the RPMs, but I don't know enough about rpm-based systems to confidently fix this one: https://trac.torproject.org/projects/tor/ticket/1134 Primarily I am worried about the upgrade scenario and changing groups in a way that doesn't break previ

Re: [tor-talk] Making TOR exit-node IP address configurable

2011-03-10 Thread Moritz Bartl
Hi, On 10.03.2011 08:21, Fabio Pietrosanti (naif) wrote: > Again, that's true only if you are damaging user's traffic and so your > "filtering" doesn't break in any case: > a) don't break user traffic > b) don't break exit scanner traffic > c) break "just some kind" of more noisy and malicious/agg

Re: [tor-talk] Making TOR exit-node IP address configurable

2011-03-10 Thread Mike Perry
Thus spake Moritz Bartl (mor...@torservers.net): > On 10.03.2011 08:21, Fabio Pietrosanti (naif) wrote: > > Again, that's true only if you are damaging user's traffic and so your > > "filtering" doesn't break in any case: > > a) don't break user traffic > > b) don't break exit scanner traffic > >

Re: [tor-talk] seeking someone to fix a Tor rpm bug

2011-03-10 Thread Marco Bonetti
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/10/2011 09:16 AM, Erinn Clark wrote: > I work on the Tor packages, including the RPMs, but I don't know > enough about rpm-based systems to confidently fix this one: > https://trac.torproject.org/projects/tor/ticket/1134 It's either looking too

Re: [tor-talk] seeking someone to fix a Tor rpm bug

2011-03-10 Thread Erinn Clark
Hey Marco! * Marco Bonetti [2011:03:10 12:10 +0100]: > > Primarily I am worried about the upgrade scenario and changing groups > > in a way that doesn't break previous versions of the packages. > Could you elaborate a bit on the issues? > So far my understanding is that "--with-tor-group" shoul

Re: [tor-talk] seeking someone to fix a Tor rpm bug

2011-03-10 Thread Sebastian Hahn
On Mar 10, 2011, at 12:38 PM, Erinn Clark wrote: Hey Marco! * Marco Bonetti [2011:03:10 12:10 +0100]: Primarily I am worried about the upgrade scenario and changing groups in a way that doesn't break previous versions of the packages. Could you elaborate a bit on the issues? So far my und

Re: [tor-talk] seeking someone to fix a Tor rpm bug

2011-03-10 Thread Marco Bonetti
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/10/2011 12:38 PM, Erinn Clark wrote: > Yes, you could just remove that. But do you need to change the group > for all of the people who already have a _tor group created upon > upgrade? Should you delete the group from existing systems > altogeth

Re: [tor-talk] torrc consistency

2011-03-10 Thread bertagaz
On Wed, Mar 09, 2011 at 02:30:28PM -0500, Roger Dingledine wrote: > > See the discussion at > https://trac.torproject.org/projects/tor/ticket/2325 Yeah, found this ticket right after my first mail. Was waiting to see how the discussion ends over here before/whether considering dumping there its r

Re: [tor-talk] Scroogle and Tor

2011-03-10 Thread Jim
scroo...@lavabit.com wrote: About a year ago I began requiring any and all Tor searches at Scroogle to use SSL. Using SSL is always a good idea, but the main reason I did this is that the SSL requirement discouraged script writers who didn't know how to add this to their scripts. This policy help

[tor-talk] Why does Tor use the key lengths it does?

2011-03-10 Thread F. Fox
Just curious as to why Tor uses RSA-1024/AES-128, and not something like RSA-2048/AES-256. I suppose if keys are rotated enough, it doesn't matter much... is this what's up with it? -- F. Fox ___ tor-talk mailing list tor-talk@lists.torproject.org h

Re: [tor-talk] Why does Tor use the key lengths it does?

2011-03-10 Thread Nick Mathewson
On Thu, Mar 10, 2011 at 12:40 PM, F. Fox wrote: > Just curious as to why Tor uses RSA-1024/AES-128, and not something like > RSA-2048/AES-256. > > I suppose if keys are rotated enough, it doesn't matter much... is this > what's up with it? I wrote a mail about this a few months ago: http://archi

Re: [tor-talk] Scroogle and Tor

2011-03-10 Thread Moritz Bartl
Hi, On 10.03.2011 11:27, Jim wrote: > Requiring SSL for Tor searches is all well and good, but it creates a > problem that I haven't found a solution for: creating "bookmarks". It's a great thing Scroogle uses POST by default. It still accepts GET for both SSL and non-SSL, at least for me? htt

[tor-talk] Cannot upgrade tor-devel

2011-03-10 Thread Orionjur Tor-admin
When I run `portupgrade -a` on my server under FreeBSD 8.1-STABLE, I have the next message of thesystem: "---> Upgrading 'tor-devel-0.2.2.22.a' to 'tor-devel-0.2.2.22.a_2' (security/tor-devel) ---> Building '/usr/ports/security/tor-devel' ===> Cleaning for tor-devel-0.2.2.22.a_2 ===> License BS

Re: [tor-talk] Cannot upgrade tor-devel

2011-03-10 Thread Robert Ransom
On Thu, 10 Mar 2011 19:56:26 + Orionjur Tor-admin wrote: > When I run `portupgrade -a` on my server under FreeBSD 8.1-STABLE, I > have the next message of thesystem: > "---> Upgrading 'tor-devel-0.2.2.22.a' to 'tor-devel-0.2.2.22.a_2' > (security/tor-devel) > ---> Building '/usr/ports/secur

[tor-talk] Tor 0.2.2.23-alpha is out

2011-03-10 Thread Roger Dingledine
Tor 0.2.2.23-alpha lets relays record their bandwidth history so when they restart they don't lose their bandwidth capacity estimate. This release also fixes a diverse set of user-facing bugs, ranging from relays overrunning their rate limiting to clients falsely warning about clock skew to bridge

Re: [tor-talk] How does Tor REALLY work?

2011-03-10 Thread casey dunham
It seems that the tor Doxygen isn't published anywhere? From this http://www.bitchx.com/log/tor-o/tor-o-25-May-2010/tor-o-25-May-2010-00.php it looks like it hasn't been kept up to date. Maybe that would be a good first step? Getting the doxygen up to date and in a publicly accessible place? On

Re: [tor-talk] How does Tor REALLY work?

2011-03-10 Thread Paul Syverson
This is definitely not my area of expertise for Tor (which is why I didn't say anything earlier), but when you iniitially raised this thread my kneejerk reaction was to suggest exactly this. Now we can wait for Roger or Nick to say why it's not the good idea it seems. -Paul On Thu, Mar 10, 2011 a

Re: [tor-talk] Cannot upgrade tor-devel

2011-03-10 Thread Orionjur Tor-admin
Robert Ransom wrote: > On Thu, 10 Mar 2011 19:56:26 + > Orionjur Tor-admin wrote: > >> When I run `portupgrade -a` on my server under FreeBSD 8.1-STABLE, I >> have the next message of thesystem: >> "---> Upgrading 'tor-devel-0.2.2.22.a' to 'tor-devel-0.2.2.22.a_2' >> (security/tor-devel) >>

Re: [tor-talk] Cannot upgrade tor-devel

2011-03-10 Thread Robert Ransom
On Fri, 11 Mar 2011 03:27:27 + Orionjur Tor-admin wrote: > Very thanks. > After removing libevent-1.4.14b_2 it installs libevent-2.0.10 when > running `portupgrade`. > Does it need to me to downgrade libevent-2.0.10 to libevent-1.4.14b_2 > after upgrading tor-devel? No. Just reinstall the

Re: [tor-talk] Scroogle and Tor

2011-03-10 Thread Jim
Moritz Bartl wrote: On 10.03.2011 11:27, Jim wrote: Requiring SSL for Tor searches is all well and good, but it creates a problem that I haven't found a solution for: creating "bookmarks". It's a great thing Scroogle uses POST by default. It still accepts GET for both SSL and non-SSL, at lea

Re: [tor-talk] How does Tor REALLY work?

2011-03-10 Thread Nick Mathewson
On Thu, Mar 10, 2011 at 8:38 PM, casey dunham wrote: > It seems that the tor Doxygen isn't published anywhere? From this > http://www.bitchx.com/log/tor-o/tor-o-25-May-2010/tor-o-25-May-2010-00.php > > it looks like it hasn't been kept up to date. Maybe that would be a > good first step? Getting t