Re: [tor-talk] Basic questions from new user but...

2012-05-10 Thread Sebastian G.
Elena Johnson, 10.05.2012 01:56: > 1) Can I ANONYMOUSLY allow scripts for hotmail, gmail and yahoo mail using > Tor browser? The TorBrowserBundle (TBB) should allow scripting by default. It uses an modified (aka patched) Firefox, which is re-branded to Tor Browser, and ships with NoScript, which

Re: [tor-talk] Basic questions from new user but...

2012-05-10 Thread Matthew Kaufman
Why can't there be some manner of anonymity such as remote VNCing to a remote computer (say a web server desktop on Gnome running on an Amazon AWS cloud)... This way your true identity is an Amazon AWS cloud IP and say you are ssh tunneled or connected via tor to it --- and running Firefox remotel

Re: [tor-talk] Basic questions from new user but...

2012-05-10 Thread Andrew Lewman
On Wed, 9 May 2012 17:56:34 -0600 Elena Johnson wrote: > 1) Can I ANONYMOUSLY allow scripts for hotmail, gmail and yahoo mail > using Tor browser? The answer is here, https://www.torproject.org/docs/faq.html.en#TBBJavaScriptEnabled > 3) Can I ANONYMOUSLY load "external content" using an "ext

Re: [tor-talk] Basic questions from new user but...

2012-05-10 Thread Matthew Kaufman
Andrew, "It's easy for lots of applications to bypass the proxy settings in the browser, the operating system, and in some cases, the network." Very well put -- especially the last 6 words! On Thursday, May 10, 2012, Andrew Lewman wrote: > On Wed, 9 May 2012 17:56:34 -0600 > Elena Johnson > wro

Re: [tor-talk] how bridges work

2012-05-10 Thread eliaz
On 5/8/2012 11:40 AM, Xinwen Fu wrote: > This paper may help http://www.cs.uml.edu/~xinwenfu/paper/Bridge.pdf. Thanks for the analysis, it's very useful. It raises some questions that the programmers may want to shed light on. Based upon my reading of the report, bridge usage greater than the nor

[tor-talk] If you build your own OpenSSL, and you're on 1.0.1, please upgrade to 1.0.1c

2012-05-10 Thread Nick Mathewson
Hi, all! If you are using any version of openssl 1.0.1, 1.0.1a, or 1.0.1b, you should know that it's affected by a recent security advisory: https://www.openssl.org/news/secadv_20120510.txt If I am reading the diffs for this bug right, it looks like it would attacker to crash a server remotely.

Re: [tor-talk] Basic questions from new user but...

2012-05-10 Thread Joe Btfsplk
On 5/10/2012 3:45 PM, Andrew Lewman wrote: On Wed, 9 May 2012 17:56:34 -0600 Elena Johnson wrote: 1) Can I ANONYMOUSLY allow scripts for hotmail, gmail and yahoo mail using Tor browser? The answer is here, https://www.torproject.org/docs/faq.html.en#TBBJavaScriptEnabled Isn't this approach v

Re: [tor-talk] Basic questions from new user but...

2012-05-10 Thread Elena Johnson
Thank you very much for your time and your reply, > The answer is here, > https://www.torproject.org/docs/faq.html.en#TBBJavaScriptEnabled "Why is NoScript configured to allow JavaScript by default in the Tor Browser Bundle? Isn't that unsafe? We configure NoScript to allow JavaScript by default

Re: [tor-talk] Basic questions from new user but...

2012-05-10 Thread Andrew Lewman
On Thu, 10 May 2012 18:17:32 -0600 Elena Johnson wrote: > When I browse using the TBB, NoScript automatically does NOT allow > JavaScript for a site, until I tell it to do so (a bit confusing, > seemingly contradictory to the FAQ answer above). TBB ships with noscript configured to allow scripts

Re: [tor-talk] Basic questions from new user but...

2012-05-10 Thread Andrew Lewman
On Thu, 10 May 2012 18:36:28 -0500 Joe Btfsplk wrote: > It may be true that changing settings makes one's profile different, > but from all I've ever read, java script is responsible for more > malicious browser attacks than anything. That's not so good. The non-layman's terms are here, https://

[tor-talk] tor/netfilter: packets without uid

2012-05-10 Thread johnmurphy323
Hi List, I am trying to tweak my transparent netfilter setup (Tor Stable, Debian Wheezy, GNU/Linux, iptables v1.4.12.2, Kernel 3.2.0-amd64). So far, redirection and torification works fine. I have have several users, some of them have their TCP traffic forwarded to Tor, some are allowed to send

Re: [tor-talk] tor/netfilter: packets without uid

2012-05-10 Thread Roger Dingledine
On Thu, May 10, 2012 at 10:11:06PM -0400, johnmurphy...@safe-mail.net wrote: > IN= OUT=eth0 SRC=192.168.178.50 DST=some-target LEN=40 TOS=0x00 PREC=0x00 > TTL=64 ID=0 DF PROTO=TCP SPT=50447 DPT=443 WINDOW=1002 RES=0x00 ACK URGP=0 > > This packet is https, most likely generated by my firefox user

Re: [tor-talk] tor/netfilter: packets without uid

2012-05-10 Thread Marsh Ray
On 05/10/2012 09:11 PM, johnmurphy...@safe-mail.net wrote: Hi List, I am trying to tweak my transparent netfilter setup (Tor Stable, Debian Wheezy, GNU/Linux, iptables v1.4.12.2, Kernel 3.2.0-amd64). So far, redirection and torification works fine. I have have several users, some of them have th