Re: [tor-talk] Emulating a VPN service with Tor (security vs performance)

2012-11-03 Thread Fabio Pietrosanti (naif)
On 11/3/12 4:09 AM, grarpamp wrote: > I hope to test some clearnet 2 hop VPN service with double > encryption to feel that part. I thin that also one-hop works and that in general Tor is too restricted given it's threat model. Generally my feeling is that Tor should "evolve" into something more fl

Re: [tor-talk] torsocks is broken and unmaintained

2012-11-03 Thread intrigeri
Hi, Matthew Finkel wrote (03 Nov 2012 03:10:53 GMT) : > On 11/02/2012 07:36 PM, Jacob Appelbaum wrote: >> If Robert wants someone to maintain it, I'd be happy to do so. > I saw this thread earlier but didn't have a chance to reply. I was > thinking about volunteering to patch it up and maintain

Re: [tor-talk] [rt.torproject.org #5761] Connecting a browser which is not SOCKS compatible.

2012-11-03 Thread Julian Yon
On Fri, 2 Nov 2012 22:10:36 -0600 Mason Mack wrote: > Some of the mistakes I made are from following "canned solutions", > which is reckless, but I'd rather make all of the mistakes I can > before I actually come to need such important security measures as > Tor. All in all, this setup will allo

[tor-talk] Can I trust Tormail

2012-11-03 Thread HardKor
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hello, I wonder if someone knows more about the team that is behind Tormail. I see a lot of people using this service and I would like to have an idea about how much I could trust the Tormail admins to not read / expose my communications. Thank yo

Re: [tor-talk] torsocks is broken and unmaintained

2012-11-03 Thread Jacob Appelbaum
intrigeri: > Hi, > > Matthew Finkel wrote (03 Nov 2012 03:10:53 GMT) : >> On 11/02/2012 07:36 PM, Jacob Appelbaum wrote: > >>> If Robert wants someone to maintain it, I'd be happy to do so. > >> I saw this thread earlier but didn't have a chance to reply. I was >> thinking about volunteering to

Re: [tor-talk] torsocks is broken and unmaintained

2012-11-03 Thread Maxim Kammerer
On Sat, Nov 3, 2012 at 1:17 PM, Jacob Appelbaum wrote: > Can you give me a list of things that matter most to you in order of > your priority? The bug list is mighty long... inb4 incoming stream of Debian-centric patches: please be wary of glibc differences: https://bugs.gentoo.org/show_bug.cgi?i

Re: [tor-talk] torsocks is broken and unmaintained

2012-11-03 Thread adrelanos
Matthew Finkel: > On 11/02/2012 07:36 PM, Jacob Appelbaum wrote: >> Nick Mathewson: >>> On Fri, Nov 2, 2012 at 1:34 PM, adrelanos wrote: Could you blog it please? >>> >>> >>> I'd like to see more discussion from more people here first, and see >>> whether somebody steps up to say, "

[tor-talk] IsolateSOCKSUser vs IsolateSOCKSAuth bug in documentation or design?

2012-11-03 Thread adrelanos
https://gitweb.torproject.org/torspec.git/blob/HEAD:/proposals/171-separate-streams.txt says: IsolateSOCKSUser https://www.torproject.org/docs/tor-manual-dev.html.en says: IsolateSOCKSAuth Which one is correct? ___ tor-talk mailing list tor-ta

Re: [tor-talk] IsolateSOCKSUser vs IsolateSOCKSAuth bug in documentation or design?

2012-11-03 Thread intrigeri
adrelanos wrote (03 Nov 2012 13:37:04 GMT) : > Which one is correct? $ echo "SOCKSPort 1 IsolateSOCKSUser" > /tmp/intrigeri/torrc $ tor -f /tmp/intrigeri/torrc [...] [warn] Unrecognized SocksPort option '"IsolateSOCKSUser"' Cheers, -- intrigeri | GnuPG key @ https://gaffer.ptitcanardnoir.

Re: [tor-talk] ads slow Tor Browser dramatically

2012-11-03 Thread Joe Btfsplk
On 11/2/2012 10:29 PM, k e bera wrote: I'm not sure why there would be leaks with ABP. Afaik it doesnt send information. However it does update its blocklists which might be language-specific, which splits the anonymity set (if i understand the concept). Regarding use of ABP itself among non-To

Re: [tor-talk] Can I trust Tormail

2012-11-03 Thread SiNA Rabbani
Trust nobody with that data, including Tormail. On Nov 3, 2012 4:10 AM, "HardKor" wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > Hello, > > I wonder if someone knows more about the team that is behind Tormail. > > I see a lot of people using this service and I would like to have a

Re: [tor-talk] Emulating a VPN service with Tor (security vs performance)

2012-11-03 Thread grarpamp
>> I hope to test some clearnet 2 hop VPN service with double >> encryption to feel that part. > I thin that also one-hop works Since Tor would not be of benefit there, I must assume there is confusion and ask people to... please get the definitions right: HOP = An action you take, a river you m

Re: [tor-talk] Can I trust Tormail

2012-11-03 Thread grarpamp
> Trust nobody with that data, including Tormail. Yes. Not Tormail, not Gmail, not Katz, not GMX, not any mail. Your job is to encrypt your mail body and to use encrypted end protocols. And hopefully to choose providers that use TLS to talk to the providers of your correspondants so that the non-b

Re: [tor-talk] torsocks is broken and unmaintained

2012-11-03 Thread grarpamp
>> Can you give me a list of things that matter most to you in order of >> your priority? The bug list is mighty long... > > inb4 incoming stream of Debian-centric patches: please be wary of > glibc differences: And wary that Linux/GNU mod Debian is not the only OS that has current users. The BSD'

[tor-talk] How to calculate all the IDs (fingerprints) from getinfo ns/all

2012-11-03 Thread lacorov affiliate amazon
Hello, Sorry to bother you, I have try to get the fingerprint ($ with 40 caracters) of the "Unamed" nickname , with no success, I think there is a way to calculate it, but i don't how to do that ? Does someone know how to do that ? Thank you, Alex _

[tor-talk] Confusion about Tor log messages showing relay addresses

2012-11-03 Thread Joe Btfsplk
Using Win TBB 2.2.39-5. Noticed a popup from Tor, saying a particular port was being used by an application that could leak info. Besides that SAME port #, that many pop ups repeatedly mentioned, noticed many similar warnings in the Tor log. Investigated several "warning" addresses in my FW

Re: [tor-talk] How to calculate all the IDs (fingerprints) from getinfo ns/all

2012-11-03 Thread Andreas Krey
On Sat, 03 Nov 2012 21:05:38 +, lacorov affiliate amazon wrote: ... > I have try to get the fingerprint ($ with 40 caracters) of the "Unamed" > nickname , with no success, > I think there is a way to calculate it, but i don't how to do that ? There is no way to do that; otherwise all the hun

Re: [tor-talk] Confusion about Tor log messages showing relay addresses

2012-11-03 Thread Joe Btfsplk
Follow up. Noticed that almost every address listed as a WARNING in Tor log, as _possibly leaking my destination_, was the address of a relay that was in process of or had just been closed - best I could tell. For the last relay in the network map list, the addresses building, then immediatel

Re: [tor-talk] How to calculate all the IDs (fingerprints) from getinfo ns/all

2012-11-03 Thread Damian Johnson
> I have try to get the fingerprint ($ with 40 caracters) of the "Unamed" > nickname , with no success, > I think there is a way to calculate it, but i don't how to do that ? > > Does someone know how to do that ? Hi Alex. I'm not entirely sure what you're trying to ask, but if you're wondering h

Re: [tor-talk] torsocks is broken and unmaintained

2012-11-03 Thread Nick Mathewson
On Fri, Nov 2, 2012 at 11:10 PM, Matthew Finkel wrote: > On 11/02/2012 07:36 PM, Jacob Appelbaum wrote: > > Nick Mathewson: > >> On Fri, Nov 2, 2012 at 1:34 PM, adrelanos wrote: > >>> > >>> > >>> Could you blog it please? > >> > >> > >> I'd like to see more discussion from more people here first,

Re: [tor-talk] torsocks is broken and unmaintained

2012-11-03 Thread Matthew Finkel
On 11/03/2012 08:38 PM, Nick Mathewson wrote: > On Fri, Nov 2, 2012 at 11:10 PM, Matthew Finkel > wrote: > >> On 11/02/2012 07:36 PM, Jacob Appelbaum wrote: >>> Nick Mathewson: On Fri, Nov 2, 2012 at 1:34 PM, adrelanos wrote: > > > Could you blog it please? I'd li

Re: [tor-talk] torsocks is broken and unmaintained

2012-11-03 Thread Nick Mathewson
On Sat, Nov 3, 2012 at 11:23 PM, Matthew Finkel wrote: > On 11/03/2012 08:38 PM, Nick Mathewson wrote: > [...] > > Okay, sounds like we've got some enthusiasm. Let's get started. I > > volunteer to review commits and if people ask me to, and suggest that > > asking me to review stuff for a whi