Re: [tor-talk] Is this a practical vulnerability?

2012-10-20 Thread Anon Mus
On 19/10/2012 13:40, Andreas Krey wrote: On Fri, 19 Oct 2012 11:25:34 +, Anon Mus wrote: ... Within 24hrs of making that Tor hidden service live I could see, in my firewall logs, hundreds of repeated attempts trying to hack my server, directly from the internet, not via my hidden Tot service

Re: [tor-talk] Is this a practical vulnerability?

2012-10-20 Thread Anon Mus
On 19/10/2012 15:40, Lee Whitney wrote: There are actually two possible explanations for what you saw: 1) Tor was compromised If it was compromised then why would they have hacked the web server in that manner and with such inaccuracy? 2) Your IP was discovered Well, a

Re: [tor-talk] Is this a practical vulnerability?

2012-10-20 Thread Anon Mus
On 19/10/2012 16:01, somepony wrote: My question is, if you NEVER requested the 1 web page in the first place, would you have experienced the same attack? I mean if I were looking for new live Tor services I would probably periodically just roll through unknown IPs and check for a live node (o

Re: [tor-talk] Is this a practical vulnerability?

2012-10-20 Thread Anon Mus
On 19/10/2012 16:38, Eugen Leitl wrote: On Fri, Oct 19, 2012 at 11:25:34AM +0100, Anon Mus wrote: e.g. lets say a node is in a server in an IBM/US telecoms company based in France, then that server will almost certainly be routing ALL its traffic through the USA and back to itself (or another n

Re: [tor-talk] Is this a practical vulnerability?

2012-10-20 Thread Andreas Krey
On Sat, 20 Oct 2012 11:29:57 +, Anon Mus wrote: ... > I had been creating/running corporate web sites since the mid 1990's, I > hardly think that qualified me as a newbie. Not sure what was the > purpose of this remark was. The purpose of the remark was get any concrete information on the ki

[tor-talk] Hidden Service Question

2012-10-20 Thread Webmaster
Hello, Hopefully this is a simple question. I have a hidden service running on a local computer. Currently to access it I can either SSH into the 192.168.x.x address or I can Access it with the .onion address over tor. My question is can I access the .onion Address Locally So I dont hav

Re: [tor-talk] Hidden Service Question

2012-10-20 Thread SiNA Rabbani
I am not sure why you would want to do that, but if I understand the question... you can add your .onion hostname with your local IP to /etc/hosts. That way the .onion would resolve to your local IP. This only works inside of your internal network. On Oct 20, 2012 6:56 AM, "Webmaster" wrote: > H

Re: [tor-talk] Hidden Service Question

2012-10-20 Thread Webmaster
Im working on redesigning and configuring the site. Most of the work has to be done using the http: interface.so after I make a change the refresh of the page takes some time (tor delay)I'd like to be able to access the .onion site locally so I can work a bit faster. On 10/20/2012 1

Re: [tor-talk] Hidden Service Question

2012-10-20 Thread SiNA Rabbani
If you are working on a remote machine, you can do ssh port forwarding and make the .onion hostname locally available through the tunnel. Then add an entry to your local system's /etc/hosts so .onion gets the local IP of the remote server. On Oct 20, 2012 7:41 AM, "Webmaster" wrote: > Im workin

Re: [tor-talk] Is this a practical vulnerability?

2012-10-20 Thread Anon Mus
On 20/10/2012 14:46, Andreas Krey wrote: On Sat, 20 Oct 2012 11:29:57 +, Anon Mus wrote: ... I had been creating/running corporate web sites since the mid 1990's, I hardly think that qualified me as a newbie. Not sure what was the purpose of this remark was. The purpose of the remark was ge

Re: [tor-talk] Is this a practical vulnerability?

2012-10-20 Thread andrew
On Fri, Oct 19, 2012 at 11:25:34AM +0100, my.green.lant...@googlemail.com wrote 4.9K bytes in 98 lines about: : Having a static IP net connection, I set up a test web site as a : Tor service on a Tor middleman server. That server had been a : middleman server for about a year, no problems, no att

Re: [tor-talk] Multiple servers with SAME hidden service

2012-10-20 Thread andrew
On Fri, Oct 19, 2012 at 02:01:38PM -0700, sdjfjsdfiuhsz...@fastmail.fm wrote 0.8K bytes in 19 lines about: : What happens if you have MULTIPLE servers with the same hidden service? : As in you have a small VPS which is getting busy and you'd like to share : the load with another VPS. Assuming they

Re: [tor-talk] Is this a practical vulnerability?

2012-10-20 Thread Andreas Krey
On Sat, 20 Oct 2012 16:54:53 +, Anon Mus wrote: > On 20/10/2012 14:46, Andreas Krey wrote: > I expect most people would read your "remark" as talking down to someone.. Possibly. ... > Don't you use router firmware firewalls? So you wouldn't see this kind > of traffic? Nope. NetBSD box

Re: [tor-talk] Multiple servers with SAME hidden service

2012-10-20 Thread intrigeri
and...@torproject.is wrote (20 Oct 2012 16:01:01 GMT) : > The last to publish a descriptor wins. I do this now for some of my own > hidden services. The relevant keys are copied to multiple machines. If > one goes offline, the others become used. > This is more like failover than load balancing, b

Re: [tor-talk] Is this a practical vulnerability?

2012-10-20 Thread Julian Yon
On Sat, 20 Oct 2012 16:54:53 +0100 Anon Mus wrote: > I expect most people would read your "remark" as talking down to > someone.. more of a game of one-up-man-ship and given the tone of > your most recent reply probably done to discredit my experience. Poo > is a real stinker. > [...snip...] > I t

Re: [tor-talk] help us:Korean government started to fine netizen who download child pornography without child

2012-10-20 Thread Julian Yon
On Sat, 20 Oct 2012 13:16:44 +0900 익명 wrote: > Please help us. Child pornography without child is illegal in south > Korea. This is one of the most disturbing messages I have read for a while. I'm not quite sure what "child pornography without child" is meant to mean, but I don't think you're go

[tor-talk] Tor 0.2.3.23-rc is out

2012-10-20 Thread Roger Dingledine
Tor 0.2.3.23-rc adds a new v3 directory authority, fixes a privacy vulnerability introduced by a change in OpenSSL, and fixes a variety of smaller bugs in preparation for the release. I hope this will be the final release candidate for the 0.2.3 series. That is, if we don't find any urgent issues,

Re: [tor-talk] help us:Korean government started to fine netizen who download child pornography without child

2012-10-20 Thread Lee Whitney
In the US it seems there is a lot the FBI could be doing about Tor services like these but I'm not sure what their staff's level of knowledge is. Do FBI computer guys stick mostly to "forensics" using off the shelf tools, or do they also have software developers and people who consider theoretical

Re: [tor-talk] help us:Korean government started to fine netizen who download child pornography without child

2012-10-20 Thread Eugen Leitl
On Sat, Oct 20, 2012 at 07:27:13PM +0100, Julian Yon wrote: > On Sat, 20 Oct 2012 13:16:44 +0900 > 익명 wrote: > > Please help us. Child pornography without child is illegal in south > > Korea. > > This is one of the most disturbing messages I have read for a while. You seem to be uncommonly easil

Re: [tor-talk] help us:Korean government started to fine netizen who download child pornography without child

2012-10-20 Thread Lee Whitney
Eugen do you have children? Not attacking you based on this but I'm curious how it affects perspective. In my mind it's pretty easy to drawn the line, things that have victims should usually be illegal and things that are unpopular but don't hurt anyone usually should be legal. No slippery slope

Re: [tor-talk] help us:Korean government started to fine netizen who download child pornography without child

2012-10-20 Thread Maxim Kammerer
On Sat, Oct 20, 2012 at 9:34 PM, Lee Whitney wrote: > In my mind it's pretty easy to drawn the line, things that have victims > should usually be illegal and things that are unpopular but don't hurt > anyone usually should be legal. No slippery slope necessary. I think it should be pretty obviou

Re: [tor-talk] help us:Korean government started to fine netizen who download child pornography without child

2012-10-20 Thread Julian Yon
On Sat, 20 Oct 2012 19:34:48 + Lee Whitney wrote: > Eugen do you have children? Not attacking you based on this but I'm > curious how it affects perspective. > > In my mind it's pretty easy to drawn the line, things that have > victims should usually be illegal and things that are unpopular

Re: [tor-talk] help us:Korean government started to fine netizen who download child pornography without child

2012-10-20 Thread Julian Yon
On Sat, 20 Oct 2012 22:04:35 +0200 Maxim Kammerer wrote: > Nevertheless, I enjoyed reading Julian's response, > since, him apparently being from UK, his attitude reminded me of the > following old story: > http://news.bbc.co.uk/2/hi/uk_news/wales/901723.stm. Ah yes, I remember that story. What pa

Re: [tor-talk] help us:Korean government started to fine netizen who download child pornography without child

2012-10-20 Thread Julian Yon
On Sat, 20 Oct 2012 21:26:33 +0200 Eugen Leitl wrote: > So, let's please not overreact and let the people who want us to be > manipulated by universal handles succeed. Because it's just where they > want you to be: outraged, stupid, and easily goaded by the ring in > your nose. I don't think such

Re: [tor-talk] help us:Korean government started to fine netizen who download child pornography without child

2012-10-20 Thread Julian Yon
On Sat, 20 Oct 2012 19:27:13 +0100 Julian Yon wrote: > I'm not quite sure what "child pornography without child" is meant to > mean, but I don't think you're going to find much support for child > sexual abuse (real or faked) on this or any other public mailing list. Apparently I was wrong about

Re: [tor-talk] help us:Korean government started to fine netizen who download child pornography without child

2012-10-20 Thread Juan Garofalo
At 09:24 PM 10/20/2012 +0100, you wrote: >On Sat, 20 Oct 2012 19:27:13 +0100 >Julian Yon wrote: >> I'm not quite sure what "child pornography without child" is meant to >> mean, but I don't think you're going to find much support for child >> sexual abuse (real or faked) on this or any other publi

Re: [tor-talk] help us:Korean government started to fine netizen who download child pornography without child

2012-10-20 Thread Juan Garofalo
> >I am an anarchist and don't think that legislation is ever the “right” >solution to a problem, but as we don't yet live in an anarchy sometimes >it's the best we're going to get for now. I am an 'anarchist' who joins the state's witch hunts. Makes lots of sense. >As anarchis

Re: [tor-talk] help us:Korean government started to fine netizen who download child pornography without child

2012-10-20 Thread Julian Yon
On Sat, 20 Oct 2012 18:22:31 -0300 Juan Garofalo wrote: > I am an 'anarchist' who joins the state's witch hunts. Makes > lots of sense. Feel free to continue creatively interpreting my words. I'll engage with it when you reëngage with reality. -- 3072D/F3A66B3A Julian Yon (2012 General

Re: [tor-talk] warning in notice log

2012-10-20 Thread RgC
Hi all, It seems I have to reply to my own questioin. Which is good, means this old dog learned something :-) On 2012.10/11, RgC wrote: > Hi all, > > I was running a non-exit relay a while back. It is now down for maintenance > and other reasons. > I ran bleeding edge tor 0.2.4.3-alpha (git-d32

Re: [tor-talk] help us:Korean government started to fine netizen who download child pornography without child

2012-10-20 Thread Nam Su
I think there is some misunderstanding. Child pornography without child means video whose character looks under-19-year-old or wears a school uniform and animation whose character looks under-19-years old. However, there are a few sexual scenes in video, the video is child pornography. Ther