[tor-talk] Is need to install Tor Browser bundle exe on top of obfsproxy exe

2013-04-18 Thread chandra mohan
Hi, I installed obfs proxy [tor-pluggable-transports-browser- 2.4.11-alpha-2_en-US.exe] from https://www.torproject.org/projects/obfsproxy. While launching this Tor obfs proxy browser, I am getting high light to upgrade this browser with latest Tor browser bundle *2.3.25-6. * Is it necessary

Re: [tor-talk] CloudFlare

2013-04-18 Thread Matt Pagan
> They're based in San Francisco, along with Craigslist (which > is another misguided arbitrary blocker of Tor exits). > Any other SF based companies that could benefit from > a visit or hackerspace talk about why they should not > be blocking Tor? Yelp is based in San Francisco. So is Pinterest.

[tor-talk] Tor 0.2.4.12-alpha is out

2013-04-18 Thread Roger Dingledine
Tor 0.2.4.12-alpha moves Tor forward on several fronts: it starts the process for lengthening the guard rotation period, makes directory authority opinions in the consensus a bit less gameable, makes socks5 username/password circuit isolation actually work, and fixes a wide variety of other issues.

Re: [tor-talk] Cicpa

2013-04-18 Thread Griffin Boyce
Even if you aren't in the US, you can raise awareness of the issues that CISPA will cause. Writing op-eds is a good way to bring the issue to local communities who might otherwise not know about the negative affects this will have if passed. If you *are* in the US or a US citizen/resident liv

Re: [tor-talk] CloudFlare

2013-04-18 Thread Andrew Lewman
On Wed, 17 Apr 2013 23:59:45 -0400 grarpamp wrote: > Noticed a recent surge of sites using CloudFlare. Actually, I've talked to cloudflare in the recent past. They don't block Tor per se, they rate limit connections/request per IP address. While I don't agree with this model, it seems consisten

Re: [tor-talk] Cicpa

2013-04-18 Thread Andrew F
thanks griffin. ... liked... and shared. Crap... I gotta get off facebook! On Thu, Apr 18, 2013 at 3:28 PM, Griffin Boyce wrote: > Even if you aren't in the US, you can raise awareness of the issues that > CISPA will cause. Writing op-eds is a good way to bring the issue to local > communi

Re: [tor-talk] Cicpa

2013-04-18 Thread Griffin Boyce
Andrew F wrote: > thanks griffin. > ... liked... and shared. > Crap... I gotta get off facebook! > In situations like these, a phone call is worth five hundred online signatures. Congressional reps aren't *that* mean ;-) ~Griffin ___ tor-talk mai

Re: [tor-talk] [Tails-dev] secure and simple network time (hack)

2013-04-18 Thread Maxim Kammerer
On Thu, Apr 18, 2013 at 1:18 AM, Jacob Appelbaum wrote: > Whenever a less friendly person gives me a hard time about the obvious > futility of tlsdate, I think: > > "Let me know how your ntp replacement project goes and I'll gladly use > it when my shitty one trick pony isn't beating the pants off

[tor-talk] Tor project creating a replacement for TrueCrypt?

2013-04-18 Thread Anthony Papillion
Hello Everyone, Someone I know said that he read that the project was creating a replacement for TrueCrypt. Can anyone verify this as accurate or not? If it is accurate, how far along is the work and where can I find more information? Thanks! Anthony Papillion -- Anthony Papillion Advanced Dat

Re: [tor-talk] Tor 0.2.4.12-alpha is out

2013-04-18 Thread Sebastian G.
18.04.2013 14:05, Roger Dingledine: > [...] > > o Major bugfixes (client-side privacy): > - When we mark a circuit as unusable for new circuits, have it > continue to be unusable for new circuits even if MaxCircuitDirtiness > is increased too much at the wrong time, or the system

Re: [tor-talk] Cicpa

2013-04-18 Thread Joseph Lorenzo Hall
Griffin is 100% correct about the leverage you can get from a phone call rather than other forms of communication with Congrescritters. My organization (CDT) has been working heavily on CISPA, along with our allies EFF, ACLU and others. The bill did just (within the past hour) indeed pass our Hous

Re: [tor-talk] Cicpa

2013-04-18 Thread Andrew F
Your INTERNET privacy just took another step toward disappearing, The house voted 288 to 127 Here are the congressman that voted to take away your rights. http://clerk.house.gov/evs/2013/roll117.xml Next is the senate vote. Please call your senators. Ps. ( I thought it had passed the hous

Re: [tor-talk] Tor project creating a replacement for TrueCrypt?

2013-04-18 Thread Nick Mathewson
On Apr 18, 2013 2:01 PM, "Anthony Papillion" wrote: > > Hello Everyone, > > Someone I know said that he read that the project was creating a > replacement for TrueCrypt. Can anyone verify this as accurate or not? If > it is accurate, how far along is the work and where can I find more > informati

Re: [tor-talk] Cicpa

2013-04-18 Thread Andrew F
Thank you joe. On Thu, Apr 18, 2013 at 6:08 PM, Joseph Lorenzo Hall wrote: > Griffin is 100% correct about the leverage you can get from a phone > call rather than other forms of communication with Congrescritters. > > My organization (CDT) has been working heavily on CISPA, along with > our all

Re: [tor-talk] CloudFlare

2013-04-18 Thread grarpamp
> Yelp is based in San Francisco. So is Pinterest. Getting the Wikimedia > Foundation (also based in San Francisco) to come over would be a huge > victory, IMO. I'd bet there is room for some one day presentations in the big corporate cities, sf, nyc, chi and so on. Find the businesses and invite

Re: [tor-talk] CloudFlare

2013-04-18 Thread Matthew Finkel
On Thu, Apr 18, 2013 at 09:01:21AM +, Matt Pagan wrote: > > They're based in San Francisco, along with Craigslist (which > > is another misguided arbitrary blocker of Tor exits). > > Any other SF based companies that could benefit from > > a visit or hackerspace talk about why they should not >

Re: [tor-talk] [Tails-dev] secure and simple network time (hack)

2013-04-18 Thread Jacob Appelbaum
adrelanos: > Jacob Appelbaum: >> adrelanos: We already fail this test, no? >>> >>> Not necessarily. This is a difficult question. >>> >> >> Tor does not hide that you are using Tor > > Yes, but... While making this point up, I saw pluggable transports as a > tool which can be thrown into

Re: [tor-talk] [Tails-dev] secure and simple network time (hack)

2013-04-18 Thread Jacob Appelbaum
Maxim Kammerer: > On Thu, Apr 18, 2013 at 1:18 AM, Jacob Appelbaum wrote: >> Whenever a less friendly person gives me a hard time about the obvious >> futility of tlsdate, I think: >> >> "Let me know how your ntp replacement project goes and I'll gladly use >> it when my shitty one trick pony isn'

Re: [tor-talk] CloudFlare

2013-04-18 Thread Andrew Lewman
On Thu, 18 Apr 2013 15:34:21 -0400 grarpamp wrote: > My main issue with sites that are Tor aware and then take action > against Tor nodes specifically, is that most seem to say > they get attacks, spam, illegal stuff from Tor. While true, that > is a drop in the pond when compared to from the int

Re: [tor-talk] CloudFlare

2013-04-18 Thread Gregory Maxwell
On Thu, Apr 18, 2013 at 1:01 PM, Matthew Finkel wrote: > Wikimedia is actually willing to discuss an alternative setup if a > usable one is found. Their current implementation is not really > acceptable, but there also isn't really a working/implemented alternative > solution, at this point (and i

Re: [tor-talk] CloudFlare

2013-04-18 Thread Griffin Boyce
Andrew Lewman wrote: > Protecting networks or hosts based on rumors and hearsay is a pretty > poor way to protect anything. Empirical data should rule the decisions. Some people also make decisions based on perception of how likely traffic is to "convert" into sales or signups. Which is also

Re: [tor-talk] CloudFlare

2013-04-18 Thread grarpamp
> It's the same old story: There are persistent highly annoying trouble > makers— not even many of them— who are effectively deterred by > blocking whatever proxies they use. Eventually they hit tor, and thus > tor must be blocked from editing. This abuse isn't imaginary. Of course it isn't imag

Re: [tor-talk] CloudFlare

2013-04-18 Thread Jacob Appelbaum
Matthew Finkel: > On Thu, Apr 18, 2013 at 09:01:21AM +, Matt Pagan wrote: >>> They're based in San Francisco, along with Craigslist (which >>> is another misguided arbitrary blocker of Tor exits). >>> Any other SF based companies that could benefit from >>> a visit or hackerspace talk about why

Re: [tor-talk] CloudFlare

2013-04-18 Thread Lucia Liljegren
I use Cloudflare. When I experience hacking, spamming scraping or any other cpu sucking activity, I use Cloudflares API and ban the IP then unban 7 days later. If the IP falls in a pre-identified 'dirty' range, I never unban it. Based on my logs I had the distinct impression Cloudflare did not

Re: [tor-talk] CloudFlare

2013-04-18 Thread grarpamp
>> Protecting networks or hosts based on rumors and hearsay is a pretty >> poor way to protect anything. Empirical data should rule the decisions. > > Some people also make decisions based on perception of how likely traffic > is to "convert" into sales or signups. Which is also a very problemat

Re: [tor-talk] CloudFlare

2013-04-18 Thread grarpamp
> ban the IP then unban 7 days later. If the IP falls in a > pre-identified 'dirty' range, I never unban it. I don't mind this approach too much. At least it leaves some room for legitimate users to find exits. Restores the state to open after some time. And is a bit more mature tool in that, if y

Re: [tor-talk] [Tails-dev] secure and simple network time (hack)

2013-04-18 Thread adrelanos
Jacob Appelbaum: > adrelanos: >> Jacob Appelbaum: >>> adrelanos: > > We already fail this test, no? Not necessarily. This is a difficult question. >>> >>> Tor does not hide that you are using Tor >> >> Yes, but... While making this point up, I saw pluggable transports as a >>

Re: [tor-talk] CloudFlare

2013-04-18 Thread Gregory Maxwell
On Thu, Apr 18, 2013 at 2:51 PM, grarpamp wrote: > Though sure, I do suggest and accept that Tor may present a > different *class* of abuse than other categories of abusable > IP's. Tor exits were not banned prior to their use for abuse. At the point automated exitlist banning was performed a sub

[tor-talk] Abusing resource:// uri in Firefox Browser

2013-04-18 Thread Ahmed Hassan
Hello Folks: Are you aware of this? http://marcorondini.eu/research/resource_uri/ ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] Tor 0.2.4.12-alpha is out

2013-04-18 Thread Nick Mathewson
On Thu, Apr 18, 2013 at 2:08 PM, Sebastian G. wrote: > 18.04.2013 14:05, Roger Dingledine: >> [...] >> >> o Major bugfixes (client-side privacy): >> - When we mark a circuit as unusable for new circuits, have it >> continue to be unusable for new circuits even if MaxCircuitDirtiness >

Re: [tor-talk] CloudFlare

2013-04-18 Thread Gregory Maxwell
On Thu, Apr 18, 2013 at 2:57 PM, Jacob Appelbaum wrote: > It is possible to request a special flag on a Wikipedia account that is > granted by way of some special handshake. It is possible to take an > already created account and use it for edits as the flag overrides the > Tor block. The flag is

Re: [tor-talk] Abusing resource:// uri in Firefox Browser

2013-04-18 Thread Griffin Boyce
It's in the ticket system as #8725, and I was able to duplicate this bug. Somehow preventing outside resource_uri access or pretending to be a non-firefox browser would obviate this quirk. https://trac.torproject.org/projects/tor/ticket/8725 ~Griffin ___

Re: [tor-talk] CloudFlare

2013-04-18 Thread Matthew Finkel
On Thu, Apr 18, 2013 at 09:57:06PM +, Jacob Appelbaum wrote: > Matthew Finkel: > > On Thu, Apr 18, 2013 at 09:01:21AM +, Matt Pagan wrote: > >>> They're based in San Francisco, along with Craigslist (which > >>> is another misguided arbitrary blocker of Tor exits). > >>> Any other SF based

Re: [tor-talk] CloudFlare

2013-04-18 Thread Matthew Finkel
On Thu, Apr 18, 2013 at 01:45:12PM -0700, Gregory Maxwell wrote: > On Thu, Apr 18, 2013 at 1:01 PM, Matthew Finkel > wrote: > > Wikimedia is actually willing to discuss an alternative setup if a > > usable one is found. Their current implementation is not really > > acceptable, but there also isn'

[tor-talk] uscribe

2013-04-18 Thread raven131
Hi tor-talk I wish to unscribe now. Don raven131, raven...@cox.net 04/18/2013 ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] CloudFlare

2013-04-18 Thread Lucia Liljegren
> Though I don't think I'd apply a permaban, because whatever IP is bothering > you will eventually get pulled at the source before long. The IP wont' eventually be pulled if it's on rdsnet.ro. ;) In any case, I'm not asking what you would do. I'm telling you what I do. I keep lists of IP rang

Re: [tor-talk] CloudFlare

2013-04-18 Thread grarpamp
>> Tor may present a different *class* of abuse than other categories >> of abusable IP's. > There is no particular blocking efficiency gain that comes from using > exitlists relative to other kinds of abuse sources. The skill needed for the masses to download and use Tor for personal style abuse

Re: [tor-talk] CloudFlare

2013-04-18 Thread Jacob Appelbaum
Gregory Maxwell: > On Thu, Apr 18, 2013 at 2:57 PM, Jacob Appelbaum wrote: >> It is possible to request a special flag on a Wikipedia account that is >> granted by way of some special handshake. It is possible to take an >> already created account and use it for edits as the flag overrides the >>

Re: [tor-talk] CloudFlare

2013-04-18 Thread Jacob Appelbaum
Matthew Finkel: > On Thu, Apr 18, 2013 at 09:57:06PM +, Jacob Appelbaum wrote: >> Matthew Finkel: >>> On Thu, Apr 18, 2013 at 09:01:21AM +, Matt Pagan wrote: > They're based in San Francisco, along with Craigslist (which > is another misguided arbitrary blocker of Tor exits). >

Re: [tor-talk] CloudFlare

2013-04-18 Thread Andreas Krey
On Fri, 19 Apr 2013 00:35:58 +, grarpamp wrote: ... > > you are coming off as a clueless jerk. ... > However the recent direct name calling and abuse amongst > people on this list needs to stop right now. You failed to demonstrate an understanding of the specific situation of wikipedia which m