Re: Announce: amnesia Live system 0.4.2

2010-02-12 Thread Hannah Schroeter
Hi!

On Sat, Feb 13, 2010 at 12:45:18AM +0100, intrigeri wrote:
>Hannah Schroeter wrote (12 Feb 2010 23:13:51 GMT) :
>> However, my French is a bit lacking

>Fixed, thanks for the report.

Cool, I see it, also the language choice for those who actually prefer
French.

>> and the certificate problem is still there (konqueror doesn't
>> recognize it because of the cacert root certificate). (Curiously,
>> firefox *does* recognize it.)

>cacert's root CA can be imported into Konqueror.

Thanks for the hint, just did it (from the local root CA file which
firefox uses).

>[...]

>> PS: Are the older powerpc versions still worthwhile to seed?

>Well... AFAIK, they have never been tested on real hardware, I doubt
>they actually work, and we have never received any kind of user
>feedback about them. This is why no powerpc image was built for
>amnesia 0.4.x.

Ok.

>Curiously (?), this is also why I am in favour of doing anything that
>can help changing this state of things; including seeding these images
>=> they are tested => we get bug reports and can fix them.

Hmmm. I'm not sure. Why should people use pre-built binaries of *older*
versions if current source is available too...

If I had a powerpc, I'd use the source in that case (at least if it's
really usable, as in I don't have to invest a million of hours ;) of
manual work to build).

But ok, perhaps others think differently, so people get to decide,
whichever gets downloaded most will get most of my upload bandwidth. :)

Kind regards,

Hannah.
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Announce: amnesia Live system 0.4.2

2010-02-12 Thread intrigeri
Hi again,

please note that a weird bug [1] often prevents amnesia systems to
connect to the Tor network, at least in a user-friendly way.

This seems to be caused by a bug in Tor, that has been reported [2].

[1] https://amnesia.boum.org/bugs/tor_vs_networkmanager/
[2] https://bugs.torproject.org/flyspray/index.php?do=details&id=1247

Bye,
--
  intrigeri 
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ 
https://gaffer.ptitcanardnoir.org/intrigeri/otr-fingerprint.asc
  | Did you exchange a walk on part in the war
  | for a lead role in the cage?
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Announce: amnesia Live system 0.4.2

2010-02-12 Thread intrigeri
Hi!

Hannah Schroeter wrote (12 Feb 2010 23:13:51 GMT) :
> However, my French is a bit lacking

Fixed, thanks for the report.

> and the certificate problem is still there (konqueror doesn't
> recognize it because of the cacert root certificate). (Curiously,
> firefox *does* recognize it.)

cacert's root CA can be imported into Konqueror.

The fingerprints of this CA and of our webhost's SSL certificate can
be compared from various locations, that are under different
authorities, such as:

- https://help.riseup.net/resources/europe/#boumorg
- https://www.autistici.org/boum/ca/
- https://aide.boum.org/FingerprintSSL/

> PS: Are the older powerpc versions still worthwhile to seed?

Well... AFAIK, they have never been tested on real hardware, I doubt
they actually work, and we have never received any kind of user
feedback about them. This is why no powerpc image was built for
amnesia 0.4.x.

Curiously (?), this is also why I am in favour of doing anything that
can help changing this state of things; including seeding these images
=> they are tested => we get bug reports and can fix them.

Bye,
--
  intrigeri 
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ 
https://gaffer.ptitcanardnoir.org/intrigeri/otr-fingerprint.asc
  | We're dreaming of something else.
  | Something more clandestine, something happier.
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Announce: amnesia Live system 0.4.2

2010-02-12 Thread Hannah Schroeter
Hi!

On Fri, Feb 12, 2010 at 11:44:06PM +0100, intrigeri wrote:
>Hi,

>Hannah Schroeter wrote (10 Feb 2010 15:33:48 GMT) :
>> I don't see a *completely* automatic solution, and I didn't mean it
>> either. I meant things like announcing them by mail (and ensuring
>> that one doesn't need *too* frequent updates, as that would pose
>> additional workload on seed operators, as well as additional
>> download load to them, too).

>A low-traffic mailing-list [1] has been setup to answer this need. 
>(It is actually a rss2email gateway for the amnesia news RSS feed.)

>Seeders, please consider subscribing to either this mailing-list or
>the RSS / Atom feed, in order to avoid seeding outdated versions.

>[1] https://boum.org/mailman/listinfo/amnesia-news

Good idea. However, my French is a bit lacking, and the certificate
problem is still there (konqueror doesn't recognize it because of the
cacert root certificate). (Curiously, firefox *does* recognize it.)

I still just subscribed it (probably pending confirmation).

Kind regards,

Hannah.

PS: Are the older powerpc versions still worthwhile to seed? Just
downloading amnesia-i386-gnome-0.4.2-20100207.torrent in order to
keep the client running to seed it.
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Announce: amnesia Live system 0.4.2

2010-02-12 Thread intrigeri
Hi,

Hannah Schroeter wrote (10 Feb 2010 15:33:48 GMT) :
> I don't see a *completely* automatic solution, and I didn't mean it
> either. I meant things like announcing them by mail (and ensuring
> that one doesn't need *too* frequent updates, as that would pose
> additional workload on seed operators, as well as additional
> download load to them, too).

A low-traffic mailing-list [1] has been setup to answer this need. 
(It is actually a rss2email gateway for the amnesia news RSS feed.)

Seeders, please consider subscribing to either this mailing-list or
the RSS / Atom feed, in order to avoid seeding outdated versions.

[1] https://boum.org/mailman/listinfo/amnesia-news

Bye,
--
  intrigeri 
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ 
https://gaffer.ptitcanardnoir.org/intrigeri/otr-fingerprint.asc
  | Who wants a world in which the guarantee that we shall not
  | die of starvation would entail the risk of dying of boredom ?
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Announce: amnesia Live system 0.4.2

2010-02-11 Thread Timo Schoeler
thus Hannah Schroeter spake:
> Hi!

Hi,

> Just checked a bit.
> On Wed, Feb 10, 2010 at 11:13:05AM +0100, intrigeri wrote:
>> Hannah Schroeter wrote (09 Feb 2010 21:26:07 GMT) :
>>> 404 Not found for both the RSS and the Atom.
> 
>> oops, sorry, the correct links are:
> 
>> - RSS: https://amnesia.boum.org/torrents/rss/index.rss
>> - Atom: https://amnesia.boum.org/torrents/rss/index.atom
> 
> They're right now.
> 
>>> Btw, if you want people to do something (keep seeds running),
>>> perhaps make it less work for them. I.e. push principle instead of
>>> pull principle (having to actively "poll" a feed on and off, no, I'm
>>> not one of the RSS/... junkies anyway).
> 
>> Well, this would be great, but I don't know any way of pushing new
>> .torrent files to seeds we don't manage ourselves; we need to research
>> this, as solutions probably exist already. Any idea?
> 
> I don't see a *completely* automatic solution, and I didn't mean it
> either. I meant things like announcing them by mail (and ensuring that
> one doesn't need *too* frequent updates,

+1. I could provide a bunch of well-connected machines seeding, but
updates on new releases would be best by email. I like it old school. ;)

> as that would pose additional
> workload on seed operators, as well as additional download load to them,
> too).
> 
>>> One also has to follow quite many links from the start page (or the
>>> download page) to finally actually *get* to the torrents. Perhaps
>>> optimize the link depth?
> 
>> Ack, we will try to fix this.
> 
> Okay.
> 
>>> wget also complains about a certificate mismatch
> 
>>> $ wget
>>> https://amnesia.boum.org/torrents/files/amnesia-i386-gnome-0.4.2-20100207.torrent
>>> --22:25:04--
>>> https://amnesia.boum.org/torrents/files/amnesia-i386-gnome-0.4.2-20100207.torrent
>>>=> `amnesia-i386-gnome-0.4.2-20100207.torrent'
>>> Resolving amnesia.boum.org... 204.13.164.189
>>> Connecting to amnesia.boum.org|204.13.164.189|:443... connected.
>>> ERROR: certificate common name `boum.org' doesn't match requested host
>>> name `amnesia.boum.org'.
>>> To connect to amnesia.boum.org insecurely, use `--no-check-certificate'.
>>> Unable to establish SSL connection.
> 
>> Agreed, this is truly annoying.
> 
>> The certificate is actually valid: it has the *.boum.org wildcard
>> listed in "Subject Alternative Name". Many clients, such as wget,
>> don't understand such valid, though uncommon, certificates. I'll ask
>> the webhost sysadmins to get a new certificate with amnesia.boum.org
>> explicitly listed as a SubjAltName.
> 
> Okay.
> 
> Staying tuned a bit.
> 
> Kind regards,
> 
> Hannah.
> ***
> To unsubscribe, send an e-mail to majord...@torproject.org with
> unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
> 

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Announce: amnesia Live system 0.4.2

2010-02-10 Thread Ewald Tienkamp
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

The following was received from intrigeri, on 02/10/10 19:51:
>> Hannah Schroeter wrote (09 Feb 2010 21:26:07 GMT) :
>>> One also has to follow quite many links from the start page (or the
>>> download page) to finally actually *get* to the torrents.
>>> Perhaps optimize the link depth?
> 
> Can you please have a look to the website again? This seems to be far
> better now.

Indeed this is way better. Also, I apologize for the email I sent
earlier: due to a problem with my hosting provider I missed out on some
emails that were sent before mine.

Regards,
- --
Ewald Tienkamp
ew...@tienkamp.nl
http://ewald.tienkamp.info
http://ewald.tienkamp.nl
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.11 (GNU/Linux)
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=108D
-END PGP SIGNATURE-
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Announce: amnesia Live system 0.4.2

2010-02-10 Thread intrigeri
Hi,

> Hannah Schroeter wrote (09 Feb 2010 21:26:07 GMT) :

>> One also has to follow quite many links from the start page (or the
>> download page) to finally actually *get* to the torrents.
>> Perhaps optimize the link depth?

Can you please have a look to the website again? This seems to be far
better now.

Bye,
--
  intrigeri 
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ 
https://gaffer.ptitcanardnoir.org/intrigeri/otr-fingerprint.asc
  | The impossible just takes a bit longer.
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Announce: amnesia Live system 0.4.2

2010-02-10 Thread Hannah Schroeter
Hi!

Just checked a bit.
On Wed, Feb 10, 2010 at 11:13:05AM +0100, intrigeri wrote:
>Hannah Schroeter wrote (09 Feb 2010 21:26:07 GMT) :
>> 404 Not found for both the RSS and the Atom.

>oops, sorry, the correct links are:

>- RSS: https://amnesia.boum.org/torrents/rss/index.rss
>- Atom: https://amnesia.boum.org/torrents/rss/index.atom

They're right now.

>> Btw, if you want people to do something (keep seeds running),
>> perhaps make it less work for them. I.e. push principle instead of
>> pull principle (having to actively "poll" a feed on and off, no, I'm
>> not one of the RSS/... junkies anyway).

>Well, this would be great, but I don't know any way of pushing new
>.torrent files to seeds we don't manage ourselves; we need to research
>this, as solutions probably exist already. Any idea?

I don't see a *completely* automatic solution, and I didn't mean it
either. I meant things like announcing them by mail (and ensuring that
one doesn't need *too* frequent updates, as that would pose additional
workload on seed operators, as well as additional download load to them,
too).

>> One also has to follow quite many links from the start page (or the
>> download page) to finally actually *get* to the torrents. Perhaps
>> optimize the link depth?

>Ack, we will try to fix this.

Okay.

>> wget also complains about a certificate mismatch

>> $ wget
>> https://amnesia.boum.org/torrents/files/amnesia-i386-gnome-0.4.2-20100207.torrent
>> --22:25:04--
>> https://amnesia.boum.org/torrents/files/amnesia-i386-gnome-0.4.2-20100207.torrent
>>=> `amnesia-i386-gnome-0.4.2-20100207.torrent'
>> Resolving amnesia.boum.org... 204.13.164.189
>> Connecting to amnesia.boum.org|204.13.164.189|:443... connected.
>> ERROR: certificate common name `boum.org' doesn't match requested host
>> name `amnesia.boum.org'.
>> To connect to amnesia.boum.org insecurely, use `--no-check-certificate'.
>> Unable to establish SSL connection.

>Agreed, this is truly annoying.

>The certificate is actually valid: it has the *.boum.org wildcard
>listed in "Subject Alternative Name". Many clients, such as wget,
>don't understand such valid, though uncommon, certificates. I'll ask
>the webhost sysadmins to get a new certificate with amnesia.boum.org
>explicitly listed as a SubjAltName.

Okay.

Staying tuned a bit.

Kind regards,

Hannah.
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Announce: amnesia Live system 0.4.2

2010-02-10 Thread Ewald Tienkamp
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

The following was received from Hannah Schroeter, on 02/09/10 22:26:
> wget also complains about a certificate mismatch

The following was received from Walt Mankowski, on 02/09/10 22:37:
> One problem there might be your SSL certificate

Obviously this has to do with CAcert certificates not being shipped by
default with most browsers and torrent clients. You may want to check
http://cacert.org for more info on CAcert. I think using CAcert for SSL
should be fine, though you may want to refer people of the proper CAcert
root certificates on the front page or something like that.

Aside from this, I second some of the sentiments expressed by people
before me: polling RSS to see whether a new torrent is available is not
going to improve the number of seeds, and I had to click many times
before I finally got to the page with the actual torrents. Also, yes,
the RSS feed seems to be non-existent.

Regards,
- --
Ewald Tienkamp
ew...@tienkamp.nl
http://ewald.tienkamp.info
http://ewald.tienkamp.nl
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.11 (GNU/Linux)

iQIcBAEBCgAGBQJLcr3nAAoJEPQwwUXGQfOM9WAP+wf3DPyzlAix1THGhhZ46fR0
y8SFnaU8bUNH9nwvWSG65uJo9yc03jSZsO0Db3EGXCmOWDILsb/gky9jJusEYKqR
rRL3pbFKZMG8NwJgZ7n0XWsOUc0YsgAgLJ69BWmfzkl6umAbWKbroGp7SYskF3fD
zYEaUbLIFxOmBDNvv2Ly6/M+s3GR48UKrfvfqroKcdtGe1/hx9HHbkRz43bdUH5F
ZNhE/7nNv9k80MfjV511ADyp3ktVYOYHiLMZjSPstOCwgDaCtCsbrd9F5Uf0QMPJ
nLS9CI39iReWMpVVYvpOMT+RpmhGfx6T/wETUNHjD1r9qv+pVY46lKZs3PipN4qM
2ARtr8r8E4ZpNhYfv3Dzn+QEhZ3MkOFK5X+3+eHbkq1xEpXw2LiGip+l4HySG57n
WlfSMr3lfshXF2JZAN6E8Vx/ZN9EXXbNd6LbhtpaPYs+YRQhE2r0ebhh131K9zpZ
OJrcAAYI+J0tdqZohHtCl49QXdvLb+CwWKvBRVnOk17H573llU4KQGeZC7dOf58C
QZDZYH+NZZ+Hcd6mPT5Jl5c1XM5V+Mv7kRLyK4llXFn6djDBW8/b8z0scotOhmGl
B5sjGYKFhdQqGdcOsAVeqkZWL7yyO9RxyKGcdMianuI0pU5Xhuo1OwWvQ+9qLJ9k
NxMkgmGmAvRGuQK75gTb
=MHUr
-END PGP SIGNATURE-
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Announce: amnesia Live system 0.4.2

2010-02-10 Thread intrigeri
Hi,

Hannah Schroeter wrote (09 Feb 2010 21:26:07 GMT) :
> 404 Not found for both the RSS and the Atom.

oops, sorry, the correct links are:

- RSS: https://amnesia.boum.org/torrents/rss/index.rss
- Atom: https://amnesia.boum.org/torrents/rss/index.atom

> Btw, if you want people to do something (keep seeds running),
> perhaps make it less work for them. I.e. push principle instead of
> pull principle (having to actively "poll" a feed on and off, no, I'm
> not one of the RSS/... junkies anyway).

Well, this would be great, but I don't know any way of pushing new
.torrent files to seeds we don't manage ourselves; we need to research
this, as solutions probably exist already. Any idea?

> One also has to follow quite many links from the start page (or the
> download page) to finally actually *get* to the torrents. Perhaps
> optimize the link depth?

Ack, we will try to fix this.

> wget also complains about a certificate mismatch

> $ wget
> https://amnesia.boum.org/torrents/files/amnesia-i386-gnome-0.4.2-20100207.torrent
> --22:25:04--
> https://amnesia.boum.org/torrents/files/amnesia-i386-gnome-0.4.2-20100207.torrent
>=> `amnesia-i386-gnome-0.4.2-20100207.torrent'
> Resolving amnesia.boum.org... 204.13.164.189
> Connecting to amnesia.boum.org|204.13.164.189|:443... connected.
> ERROR: certificate common name `boum.org' doesn't match requested host
> name `amnesia.boum.org'.
> To connect to amnesia.boum.org insecurely, use `--no-check-certificate'.
> Unable to establish SSL connection.

Agreed, this is truly annoying.

The certificate is actually valid: it has the *.boum.org wildcard
listed in "Subject Alternative Name". Many clients, such as wget,
don't understand such valid, though uncommon, certificates. I'll ask
the webhost sysadmins to get a new certificate with amnesia.boum.org
explicitly listed as a SubjAltName.

> So that was my part of the work when I tried to seed things for no
> personal use.

Thanks a lot for this useful feedback that will help us making it
easier for people to help.

Bye,
--
  intrigeri 
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ 
https://gaffer.ptitcanardnoir.org/intrigeri/otr-fingerprint.asc
  | Do not be trapped by the need to achieve anything.
  | This way, you achieve everything.
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Announce: amnesia Live system 0.4.2

2010-02-09 Thread Timo Schoeler

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

thus intrigeri spake:
| Hi,

Hi,

| Max wrote (08 Feb 2010 16:51:44 GMT) :
|> Thanks for the info, it is recommended to add these apps too:
|> http://www.vorratsdatenspeicherung.de/CD/preview/amnesiacd.html
|
| What do you mean by "it is recommended"? Recommended by whom?

'Vorratsdatenspeicherung' is a group of people that is against
telecommunications data retention by the state/government/capitalists
and recommends (usually open source) software to escape it (thusly
'recommended' to achieve this).

Timo

| Thanks for the hint anyway, we're going to have a look at this list
| and decide on a case-by-case basis.
|
| Bye,
| --
|   intrigeri 
|   | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
|   | OTR fingerprint @
https://gaffer.ptitcanardnoir.org/intrigeri/otr-fingerprint.asc
|   | So what?
| ***
| To unsubscribe, send an e-mail to majord...@torproject.org with
| unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
|

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFLcmR0fg746kcGBOwRAlBqAKCgKEPEulqZ24W4teBwxExuEeAZcACffzQH
5D7mOIpFn9fPW80pXt1RjHI=
=Ryeb
-END PGP SIGNATURE-
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Announce: amnesia Live system 0.4.2

2010-02-09 Thread Walt Mankowski
On Tue, Feb 09, 2010 at 08:58:24PM +0100, intrigeri wrote:
> Hello,
> 
> Timo Schoeler wrote (09 Feb 2010 18:45:25 GMT) :
> > That is very good to hear; however: is the torrent functional?
> > Download takes ages.
> 
> It is, but we desperately lack seeds. Anyone, please help seeding
> amnesia if you're interested + can afford it. If you want to
> participate, please take care of always seeding the newest release:
> there's RSS[0] and Atom[1] feeds of the available Torrents to help
> being up-to-date.

One problem there might be your SSL certificate:

% wget 
https://amnesia.boum.org/torrents/files/amnesia-i386-gnome-0.4.2-20100207.torrent
--2010-02-09 16:31:57--  
https://amnesia.boum.org/torrents/files/amnesia-i386-gnome-0.4.2-20100207.torrent
Resolving amnesia.boum.org... 204.13.164.189
Connecting to amnesia.boum.org|204.13.164.189|:443... connected.
ERROR: cannot verify amnesia.boum.org's certificate, issued by "/O=Root 
CA/OU=http://www.cacert.org/CN=CA Cert Signing 
Authority/emailaddress=supp...@cacert.org":
  Self-signed certificate encountered.
ERROR: certificate common name "boum.org" doesn't match requested host name 
"amnesia.boum.org".
To connect to amnesia.boum.org insecurely, use '--no-check-certificate'.

My bittorrent client (rtorrent) won't download it.  It gives the error:

  Peer certificate cannot be authenticated with known CA certificates:
  
"https://amnesia.boum.org/torrents/files/amnesia-i386-gnome-0.4.2-20100207.torrent";
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Announce: amnesia Live system 0.4.2

2010-02-09 Thread Hannah Schroeter
Hi!

On Tue, Feb 09, 2010 at 08:58:24PM +0100, intrigeri wrote:
>Hello,

>Timo Schoeler wrote (09 Feb 2010 18:45:25 GMT) :
>> That is very good to hear; however: is the torrent functional?
>> Download takes ages.

>It is, but we desperately lack seeds. Anyone, please help seeding
>amnesia if you're interested + can afford it. If you want to
>participate, please take care of always seeding the newest release:
>there's RSS[0] and Atom[1] feeds of the available Torrents to help
>being up-to-date.

404 Not found for both the RSS and the Atom.

Btw, if you want people to do something (keep seeds running), perhaps
make it less work for them. I.e. push principle instead of pull
principle (having to actively "poll" a feed on and off, no, I'm not one
of the RSS/... junkies anyway).

One also has to follow quite many links from the start page (or the
download page) to finally actually *get* to the torrents. Perhaps
optimize the link depth?

wget also complains about a certificate mismatch

$ wget
https://amnesia.boum.org/torrents/files/amnesia-i386-gnome-0.4.2-20100207.torrent
--22:25:04--
https://amnesia.boum.org/torrents/files/amnesia-i386-gnome-0.4.2-20100207.torrent
   => `amnesia-i386-gnome-0.4.2-20100207.torrent'
Resolving amnesia.boum.org... 204.13.164.189
Connecting to amnesia.boum.org|204.13.164.189|:443... connected.
ERROR: certificate common name `boum.org' doesn't match requested host
name `amnesia.boum.org'.
To connect to amnesia.boum.org insecurely, use `--no-check-certificate'.
Unable to establish SSL connection.

>[...]

So that was my part of the work when I tried to seed things for no
personal use.

Kind regards,

Hannah.
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Announce: amnesia Live system 0.4.2

2010-02-09 Thread intrigeri
Hi,

Max wrote (08 Feb 2010 16:51:44 GMT) :
> Thanks for the info, it is recommended to add these apps too:
> http://www.vorratsdatenspeicherung.de/CD/preview/amnesiacd.html

What do you mean by "it is recommended"? Recommended by whom?

Thanks for the hint anyway, we're going to have a look at this list
and decide on a case-by-case basis.

Bye,
--
  intrigeri 
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ 
https://gaffer.ptitcanardnoir.org/intrigeri/otr-fingerprint.asc
  | So what?
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Announce: amnesia Live system 0.4.2

2010-02-09 Thread intrigeri
Fabian Keil wrote (08 Feb 2010 16:55:09 GMT) :
> intrigeri  wrote:
>> 
>> * all outgoing connections to the Internet are forced to go through
>>   the Tor network;

> It's turtles all the way down?

Uh?

Like in Incognito, it's "guaranteed" by a iptables/netfilter firewall
that you can't be hurt by a software misconfiguration, bug, or
whatever could make it connect to the World Wild Web without using Tor
and worse, without informing you.

bye,
--
  intrigeri 
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ 
https://gaffer.ptitcanardnoir.org/intrigeri/otr-fingerprint.asc
  | The impossible just takes a bit longer.
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Announce: amnesia Live system 0.4.2

2010-02-09 Thread intrigeri
Hello,

Timo Schoeler wrote (09 Feb 2010 18:45:25 GMT) :
> That is very good to hear; however: is the torrent functional?
> Download takes ages.

It is, but we desperately lack seeds. Anyone, please help seeding
amnesia if you're interested + can afford it. If you want to
participate, please take care of always seeding the newest release:
there's RSS[0] and Atom[1] feeds of the available Torrents to help
being up-to-date.

> Is there any effort in making a redundant and *trusted* download
> mirror infrastructure available?

Not yet. I quite like BitTorrent as it gives you a very efficient
mirroring infrastructure for free, once you've got enough peers who
are willing to seed. Moreover, it may be a bit harder to censor
a given .torrent files than a well known HTTP mirrors pool.

But I suppose you're talking about HTTP here, so... what do you mean
by *trusted*? For such a "trusted" mirroring infrastructure to be
useful, people who download amnesia need to be able to trust the
network as well...

IMHO, it is easier (client side) to:

A) trust neither the mirror nor the network, and rely on OpenPGP
   signatures only (=> need for
- the signing key to be signed by keys in the strong set
- end-users documentation explaining how to download using
  BitTorrent, how to check OpenPGP signatures
   )

... than to ...

B) trust the mirror, and do what's necessary to be able to trust the
   network too; by "being able to trust the network", I don't mean "to
   trust every Mozilla-approved SSL CA".

> If so, how can we help?

Adding a todo item to our wiki[2] would be a good starting point, so
that there's a place to discuss and coordinate it.

[0] https://amnesia.boum.org/torrents/rss/index.en.rss
[1] https://amnesia.boum.org/torrents/rss/index.en.atom
[2] https://amnesia.boum.org/todo/

--
  intrigeri 
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ 
https://gaffer.ptitcanardnoir.org/intrigeri/otr-fingerprint.asc
  | Every now and then I get a little bit restless
  | and I dream of something wild.
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Announce: amnesia Live system 0.4.2

2010-02-09 Thread Timo Schoeler
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

intrigeri wrote:
> Hello,
> 
> amnesia [0] is a Live System similar to (and heavily inspired by)
> Incognito [1]:
> 
> * all outgoing connections to the Internet are forced to go through
>   the Tor network;
> * no trace is left on local storage devices unless explicitely asked.
> 
> Since the initial announcement on this mailing-list in August, a few
> releases happened. We're working hand in hand with the Incognito
> developers, and amnesia can now be considered as the ground
> foundations for the next main Incognito release.

That is very good to hear; however: is the torrent functional? Download
takes ages.

Is there any effort in making a redundant and *trusted* download mirror
infrastructure available? If so, how can we help?

Regards,

Timo

> Try it, seed it! Any comments are welcome.
> 
> Highlighted changes since August:
> 
> * We now ship multilingual ISO images; initially supported (or rather
>   wanna-be-supported) languages are: ar, zh, de, en, fr, it, pt, es.
> * We now ship "hybrid" ISO images, which can be either burnt on CD-ROM
>   or dd'd to a USB stick or hard disk.
> * Icedove (Thunderbird) was replaced with claws mail, in a bit
>   rough way.
> * Virtual keyboard: kvkbd was replaced with onBoard.
> * Tor controller: TorK was replaced with Vidalia.
> * Anonymous, GnuPG-encrypted bug reporting is now made easy for
>   end-users.
> * Users are now warned at runtime when the amnesia version they are
>   running is affected by security flaws, and which ones they are.
> * Includes NetworkManager 0.7 to support non-DHCP networking.
> * Always use the latest Tor stable release from deb.torproject.org.
> * Securely erases RAM on shutdown using smem.
> * Added support for running as a guest system in VirtualBox.
> * Improved boot time on CD by ordering files in the squashfs in the
>   order they are used during boot.
> 
> See the online Changelog [2] for details.
> 
> [0] https://amnesia.boum.org/
> [1] http://www.anonymityanywhere.com/incognito/
> [2] http://git.immerda.ch/?p=amnesia.git;a=blob_plain;f=debian/changelog
> 
> Bye,

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org/

iD8DBQFLca1FO/2mgkVVV7kRAkMaAJ9ra7MkxlNW/izLcsWakzHDIXYY5ACgmiun
urJbwB/Af05ur7IZJuPQKlM=
=vC9l
-END PGP SIGNATURE-
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Announce: amnesia Live system 0.4.2

2010-02-08 Thread Fabian Keil
intrigeri  wrote:

> amnesia [0] is a Live System similar to (and heavily inspired by)
> Incognito [1]:
> 
> * all outgoing connections to the Internet are forced to go through
>   the Tor network;

It's turtles all the way down?

Fabian


signature.asc
Description: PGP signature


Re: Announce: amnesia Live system 0.4.2

2010-02-08 Thread Max
Thanks for the info, it is recommended to add these apps too:
http://www.vorratsdatenspeicherung.de/CD/preview/amnesiacd.html

On Mon, Feb 8, 2010 at 11:14 AM, intrigeri  wrote:
> Hello,
>
> amnesia [0] is a Live System similar to (and heavily inspired by)
> Incognito [1]:
>
> * all outgoing connections to the Internet are forced to go through
>  the Tor network;
> * no trace is left on local storage devices unless explicitely asked.
>
> Since the initial announcement on this mailing-list in August, a few
> releases happened. We're working hand in hand with the Incognito
> developers, and amnesia can now be considered as the ground
> foundations for the next main Incognito release.
>
> Try it, seed it! Any comments are welcome.
>
> Highlighted changes since August:
>
> * We now ship multilingual ISO images; initially supported (or rather
>  wanna-be-supported) languages are: ar, zh, de, en, fr, it, pt, es.
> * We now ship "hybrid" ISO images, which can be either burnt on CD-ROM
>  or dd'd to a USB stick or hard disk.
> * Icedove (Thunderbird) was replaced with claws mail, in a bit
>  rough way.
> * Virtual keyboard: kvkbd was replaced with onBoard.
> * Tor controller: TorK was replaced with Vidalia.
> * Anonymous, GnuPG-encrypted bug reporting is now made easy for
>  end-users.
> * Users are now warned at runtime when the amnesia version they are
>  running is affected by security flaws, and which ones they are.
> * Includes NetworkManager 0.7 to support non-DHCP networking.
> * Always use the latest Tor stable release from deb.torproject.org.
> * Securely erases RAM on shutdown using smem.
> * Added support for running as a guest system in VirtualBox.
> * Improved boot time on CD by ordering files in the squashfs in the
>  order they are used during boot.
>
> See the online Changelog [2] for details.
>
> [0] https://amnesia.boum.org/
> [1] http://www.anonymityanywhere.com/incognito/
> [2] http://git.immerda.ch/?p=amnesia.git;a=blob_plain;f=debian/changelog
>
> Bye,
> --
>  intrigeri 
>  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
>  | OTR fingerprint @ 
> https://gaffer.ptitcanardnoir.org/intrigeri/otr-fingerprint.asc
>  | So what?
>
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Announce: amnesia Live system 0.4.2

2010-02-08 Thread intrigeri
Hello,

amnesia [0] is a Live System similar to (and heavily inspired by)
Incognito [1]:

* all outgoing connections to the Internet are forced to go through
  the Tor network;
* no trace is left on local storage devices unless explicitely asked.

Since the initial announcement on this mailing-list in August, a few
releases happened. We're working hand in hand with the Incognito
developers, and amnesia can now be considered as the ground
foundations for the next main Incognito release.

Try it, seed it! Any comments are welcome.

Highlighted changes since August:

* We now ship multilingual ISO images; initially supported (or rather
  wanna-be-supported) languages are: ar, zh, de, en, fr, it, pt, es.
* We now ship "hybrid" ISO images, which can be either burnt on CD-ROM
  or dd'd to a USB stick or hard disk.
* Icedove (Thunderbird) was replaced with claws mail, in a bit
  rough way.
* Virtual keyboard: kvkbd was replaced with onBoard.
* Tor controller: TorK was replaced with Vidalia.
* Anonymous, GnuPG-encrypted bug reporting is now made easy for
  end-users.
* Users are now warned at runtime when the amnesia version they are
  running is affected by security flaws, and which ones they are.
* Includes NetworkManager 0.7 to support non-DHCP networking.
* Always use the latest Tor stable release from deb.torproject.org.
* Securely erases RAM on shutdown using smem.
* Added support for running as a guest system in VirtualBox.
* Improved boot time on CD by ordering files in the squashfs in the
  order they are used during boot.

See the online Changelog [2] for details.

[0] https://amnesia.boum.org/
[1] http://www.anonymityanywhere.com/incognito/
[2] http://git.immerda.ch/?p=amnesia.git;a=blob_plain;f=debian/changelog

Bye,
-- 
  intrigeri 
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ 
https://gaffer.ptitcanardnoir.org/intrigeri/otr-fingerprint.asc
  | So what?


pgpem1frBMRaR.pgp
Description: PGP signature