"Joe Btfsplk" wrote: I gather the one with "more variables in my favor" is Case 2 - Using VPN to connect to Tor? That is the one (some) have said is definitely not good - yes? Still others may have said that VPN connecting to Tor, isn't as bad as some
have indicated? Observation: There are a LOT of assumptions about VPNs & adversaries. And they may / could be true. Just sayin'. The scenarios you describe, would almost seem to say (equivalent of): "Either of these is *full* of pitfalls, but since I'm gonna die if I don't do something, I can pick one (then pray)." Reason I ask (about using Tor & *anything* else), is I need to do some legitimate, online research. Not political / terrorist issues, etc., nor anything socially taboo. But still something I don't want anyone looking over my shoulder. And I'm not sure if using TBB by itself (in Windows) is "good enough." ---------------------------------------------------------------------------------------------------- Yes, given all the variables I feel Case 2 is to my advantage. I really don't advocate for VPN through Tor. That's two congestion control algorithms (both using TCP) in play and one of them (VPN) will be based on end-to-end circuit conditions. It gets worse once pluggable transports are used. It's not an assumption that intelligence agencies are targeting VPN's but I can't remember where I read it. I also recall a couple articles about members of notable hacker groups getting thrown under the bus by their (paid) VPN handing over logs/metadata. These days politics involves promises to ban encrypted communication if re-elected (UK). If I'm going to have to pick one I choose opsec and case 2. But then I use Tor for legitimate online research so the possibility of an adversary within Tor is kinda the point. I take as absolute certainty that if I screw up opsec my VPN will capitalize. Pitfalls doesn't even come close to describing it. Not thinking TBB is good enough is a good place to start. The other options for proxy or SSH through Tor or vice-verse have their appropriate uses so I didn't mention them. I think the TorPlusVPN wiki covers those. --leeroy -- tor-talk mailing list - [email protected] To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
