Re: Introducing Torfox 3.0.10

2009-06-09 Thread Tor Fox
Jacob wrote:
> That sorta seems like a risky proposition, no?
In what way?

> Do you integrate Torbutton or something like it in some way?

It works more like Freecap but I've added the code directly to the Firefox
socket code.

> Additionally, if Firefox only talks to Tor, do you have a control port
open?

No, only the socks port 9060 (non-default) is open.

> I assume I'd just find the matching files in Firefox 3.0.10 and clobber
them with your files?

That's right.

> How does someone replicate your builds on torfox.org? Do you plan on
publishing that too? Perhaps it would be useful to have a README.build
with patching and building information?

After you replace the files you can build Firefox normally. Other than those
3 source code files in the SVN I've only changed the branding stuff and
startup options. I just search and replace the string "firefox" with
"torfox" and I have some icons and graphics I've made. I have some parts I
need to automate but I will definitely add a build section and the branding
stuff for building from source.

> It seems like you're not getting much more over the current Tor
Browser Bundle. Additionally, do you take into account the
non-Torbutton protection and usability improvements that we have added?

I think it just appeals to a different style of usage. That's the reason I
wanted to make it anyways. I've disabled Java, set it to auto delete private
data on shutdown, etc. I'm looking for input as far as what kinds of
protection needs to be added.


Re: Introducing Torfox 3.0.10

2009-06-09 Thread Jacob Appelbaum
Tor Fox wrote:
> http://www.torfox.org/
> 
> Torfox is a mashup between Tor and Firefox. I’ve made changes to Firefox's
> source code, at the socket level, forcing all connections to be encapsulated
> with a Socks4 connection through "tor.exe". All DNS lookups are done with a
> piped call to "tor-resolve.exe" to prevent DNS leaks. There is no
> configuration needed for Tor. It's included in the installer. The browser
> will start and stop Tor automatically on a non-default port to prevent
> conflicts. I have uploaded the only changed source code files to
> http://torfox.googlecode.com/svn/trunk/source/3.0.10/ and the rest can be
> downloaded from Mozilla and the Tor Project.

Huh. Interesting. That sorta seems like a risky proposition, no? Do you
integrate Torbutton or something like it in some way? Additionally, if
Firefox only talks to Tor, do you have a control port open?

Also, I looked at the svn tree you published and it appears to only have
three files:
http://torfox.googlecode.com/svn/trunk/source/3.0.10/prnetdb.c
http://torfox.googlecode.com/svn/trunk/source/3.0.10/nssinit.c
http://torfox.googlecode.com/svn/trunk/source/3.0.10/w95sock.c

I assume I'd just find the matching files in Firefox 3.0.10 and clobber
them with your files?

How does someone replicate your builds on torfox.org? Do you plan on
publishing that too? Perhaps it would be useful to have a README.build
with patching and building information?

It seems like you're not getting much more over the current Tor Browser
Bundle. Additionally, do you take into account the non-Torbutton
protection and usability improvements that we have added?

Best,
Jacob


Introducing Torfox 3.0.10

2009-06-09 Thread Tor Fox
http://www.torfox.org/

Torfox is a mashup between Tor and Firefox. I’ve made changes to Firefox's
source code, at the socket level, forcing all connections to be encapsulated
with a Socks4 connection through "tor.exe". All DNS lookups are done with a
piped call to "tor-resolve.exe" to prevent DNS leaks. There is no
configuration needed for Tor. It's included in the installer. The browser
will start and stop Tor automatically on a non-default port to prevent
conflicts. I have uploaded the only changed source code files to
http://torfox.googlecode.com/svn/trunk/source/3.0.10/ and the rest can be
downloaded from Mozilla and the Tor Project. Just overwrite the
corresponding 3 files in the Firefox 3.0.10 source tree with the 3 files
from the Torfox SVN. It won't compile on anything but Windows until I
replace the Win32 code with platform independent versions. It's possible, in
theory, since Mozilla already includes their own runtime library with
PR_CreateProcess(), PR_GetHostByName(), etc. If there is enough interest
from the community and volunteers willing to help code or test then I'm
willing to add any requested features or changes. Otherwise, I might just
leave it as is because it works perfectly for my personal use. I'm not even
sure anyone will see the benefit of this over the current Tor browser bundle
but personally, I like not having to worry about Tor and it is probably a
little more friendly to beginners (though it would need a huge warning about
HTTPS). Feel free to contact me here or at torfox@gmail.com with any
questions or comments.


Re: OnionCat 0.1.13 released

2009-06-09 Thread Scott Bennett
 On Tue, 9 Jun 2009 16:25:37 +0200 Bernhard Fischer 
wrote:
>We are proud to announce the stable version 0.1.13 of OnionCat after a long=
>er=20
>test phase and minor bugfixes.
>
>Information regarding OnionCat, the IP-transparent hidden service connector=
>,=20
>can be found at http://www.cypherpunk.at/onioncat/ .
>The latest source tarball is found at=20
>http://www.cypherpunk.at/ocat/download/Source/0.1.13/ .
>
>The newer development versions will be numbered starting from 0.2.0. Seriou=
>s=20
>bugs will be backported.

 Now *that* is indeed a new one on me.  Most developers backport the
*fixes* for serious bugs to the stable branches. :)
>
>The future development plans for the next releases are
>(*) I2P interworking (at last)
>(*) better config file support
>(*) config interface for GUI adapters (e.g. systray apps)
>(*) incoming connection authentication
>
 Sorry, it was just too tempting. :-)  Congrats on the new release!


  Scott Bennett, Comm. ASMELG, CFIAG
**
* Internet:   bennett at cs.niu.edu  *
**
* "A well regulated and disciplined militia, is at all times a good  *
* objection to the introduction of that bane of all free governments *
* -- a standing army."   *
*-- Gov. John Hancock, New York Journal, 28 January 1790 *
**


OnionCat 0.1.13 released

2009-06-09 Thread Bernhard Fischer
We are proud to announce the stable version 0.1.13 of OnionCat after a longer 
test phase and minor bugfixes.

Information regarding OnionCat, the IP-transparent hidden service connector, 
can be found at http://www.cypherpunk.at/onioncat/ .
The latest source tarball is found at 
http://www.cypherpunk.at/ocat/download/Source/0.1.13/ .

The newer development versions will be numbered starting from 0.2.0. Serious 
bugs will be backported.

The future development plans for the next releases are
(*) I2P interworking (at last)
(*) better config file support
(*) config interface for GUI adapters (e.g. systray apps)
(*) incoming connection authentication

Best regards,
Bernhard

--
OnionCat - Creating a New Anonymous Internet


signature.asc
Description: This is a digitally signed message part.


OT:RE: unsubscribe

2009-06-09 Thread downie -

The unsubscribe instructions are in the headers of the list emails

> Subject: unsubscribe
> From: tim...@gmail.com
> To: or-talk@freehaven.net
> Date: Tue, 9 Jun 2009 16:01:50 +0200
> 
> 

_
Windows Live™: Keep your life in sync. 
http://windowslive.com/explore?ocid=TXT_TAGLM_WL_BR_life_in_synch_062009

unsubscribe

2009-06-09 Thread Tim Hendrik



signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil


RE: unsubscribe

2009-06-09 Thread downie -



Answered off list
From: g06b08120...@email.nbu.edu.cn
To: or-talk@freehaven.net
Subject: unsubscribe
Date: Tue, 9 Jun 2009 21:08:26 +0800










 
_
Windows Live™ SkyDrive™: Get 25 GB of free online storage.
http://windowslive.com/online/skydrive?ocid=TXT_TAGLM_WL_SD_25GB_062009

unsubscribe

2009-06-09 Thread sunchao