Re: Still problems with TLS negotiation

2010-01-03 Thread grarpamp
>  However, if one installs openssl from the ports tree, it will be
>  version 0.9.8l instead.
>  It is not necessary to link with static libraries.  Here is an excerpt

It example of isolating everything as proof current tor and ssl is ok
and as alternative build concepts.
Static can be useful for those who want simple... say drop just one
binfile in a chroot, jail, etc.

> I'd like [app x] to use zlib compression when connecting to [svc y].
> openssl in base doesn't support zlib. I installed openssl port from package
> (in the port zlib in on by default)

Tried compiling ssl with oppurtunistic zlib a while back, no go.
Must go see how fbsd does it, this is cool news to me! Thx.
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Tor Browser Bundle 1.3.0 Released

2010-01-03 Thread Andrew Lewman
On December 31, 2009, I released the latest in the Tor Browser Bundle
series, 1.3.0.  The version bump from 1.2.10 to 1.3.0 is due to the
change to Firefox 3.5.6 (from Firefox 3.0.15).  You can get the latest
TBB in 12 languages at https://www.torproject.org/torbrowser/

Torbutton 1.2.4 fixes a number of privacy and anonymity issues with the
Firefox 3.5.x code base.

The official changelog is:

- upgrade Firefox to 3.5.6
- update Pidgin to 2.6.4
- update Torbutton to 1.2.4

Feel free to file bugs at
https://bugs.torproject.org/flyspray/index.php?tasks=all&project=4.

-- 
Andrew Lewman
The Tor Project
pgp 0x31B0974B

Website: https://torproject.org/
Blog: https://blog.torproject.org/
Identi.ca: torproject



signature.asc
Description: OpenPGP digital signature


Re: How to exactly determine country of an exit node

2010-01-03 Thread Nico Weinreich

Olaf Selke schrieb:


why do you want to reinvent the wheel instead of sticking with Maxminds
GeoIP db?
  
hehe, you're right. thanks for this hint. and thanks for all your fast 
replies, my "problem" is solved.

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


[Kraut] Re: tor-proxy.net

2010-01-03 Thread Olaf Selke
Benjamin S. schrieb:
> 
> I don't know if anonymouse is logging and if so, under which
> circumstances they give those logs. I do log, because I'm sitting in
> Germany where I'm forced to do so by the data retention law.

to make a long story short: I'm on Bundesnetzagentur's radar since at
least one year by police's request regarding obligation for data
retention "ยง113a TKG Vorratsdatenspeicherung". In June 2009 there has
been some correspondence in writing between the Bundesnetzagentur and my
lawyer. In the end they no longer threatened me with a fine for
violating German data retention law. Thus my exit node still neither
collects any data nor do I store any (already not existing) logs for six
months.

> Even I'm law-student, so I know a little bit 'bout when I have to give
> away the logs and when not. (you can read about this here[1])

Germany situation is such that you have to hand over your logs on
authority's request. There's no choice to retain them.

Olaf

* the German Bundesnetzagentur is similar to the Ofcom in the UK.
http://en.wikipedia.org/wiki/Ofcom
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: How to exactly determine country of an exit node

2010-01-03 Thread Olaf Selke
Nico Weinreich schrieb:
> Olaf Selke schrieb:
>> I supposed all.de using a stale GeoIP db version.
>> https://torstatus.blutmagie.de using a more recent GeoIP database
>> correctly shows GB for this tor node.
>>
>>   
> OK. Could it be that this ip address changed the owner in the past and
> because of this your GeoIP db shows the correct country and all.de shows
> the wrong country?

yes, I think so. Since the new /26 GB net is part of the much larger /20
DE network I assume it to be recently assigned to a customer from the uk.

> I thought about to cache the whois query for an ip
> address locally in a file. So I have to renew the local cache after a
> given time to be sure, changes in ripe db are taken into account.

why do you want to reinvent the wheel instead of sticking with Maxminds
GeoIP db?

> BTW: do the tor status homepages show the available servers in real time?

yes it does, as well as the other tns servers are supposed to ;-)

Olaf
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: How to exactly determine country of an exit node

2010-01-03 Thread Nico Weinreich

Olaf Selke schrieb:

I supposed all.de using a stale GeoIP db version.
https://torstatus.blutmagie.de using a more recent GeoIP database
correctly shows GB for this tor node.

  
OK. Could it be that this ip address changed the owner in the past and 
because of this your GeoIP db shows the correct country and all.de shows 
the wrong country? I thought about to cache the whois query for an ip 
address locally in a file. So I have to renew the local cache after a 
given time to be sure, changes in ripe db are taken into account.

BTW: do the tor status homepages show the available servers in real time?

Cheerio
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: polipo problems

2010-01-03 Thread andrew
On Sun, Jan 03, 2010 at 05:08:41PM +0100, mangobl...@gmail.com wrote 9.2K bytes 
in 163 lines about:
> As polipo has now replaced privoxy in the default tor setup I am trying  
> to use it, but it doesn't work.

In general, you should start a new thread rather than hijack an existing
one and changing the subject.  

As for privoxy vs. polipo, if you don't like polipo, don't install it.
Run privoxy as you did before.  The only time we force polipo is with
the Tor Browser Bundles.  A sufficiently computer savvy person can not
install polipo and configure privoxy as they had before.

> 1. Run polipo as a windows 2003 service.

You can't.  Polipo is designed for unixes, not windows.  Chrisd is
working on making polipo more windows friendly, but these changes might
not arrive until the 1.0.5 release, or later.


-- 
Andrew Lewman
The Tor Project
pgp 0x31B0974B

Website: https://torproject.org/
Blog: https://blog.torproject.org/
Identi.ca: torproject
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: tor-ramdisk testing needed.

2010-01-03 Thread Georg Sluyterman
basile wrote, On 2010-01-03 16:22:
> Hi everyone,
> 
> Last time I released tor-ramdisk, Georg Sluyterman requested that I add
> the option of allowing the user to manually set a DNS server when
> acquiring an IP address via DHCP.   I added that feature with the next
> release which will be based on tor-0.2.1.21 (bumped from .20).  The
> image is being tested now before release.  Anyone want to test the new
> feature? *nudges Georg*
> 
> Prerelease images:
> http://opensource.dyc.edu/pub/tor-ramdisk/archives/images.testing/
> 
> Bug reports: http://opensource.dyc.edu/flyspray/
> 

Great. Thanks for implementing the feature!

My exit-node is running right now, and everything seems to work.

I am using one of the publicly available DNS-resolvers at
http://censurfridns.dk/

(i don't like OpenDNS since they also filter and give false answers.).

-- 
Venlig hilsen
Georg Sluyterman
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: tor-proxy.net

2010-01-03 Thread Benjamin S.
Hi Kasten,

you're writing:

> Your IP address will be logged together with the called URL and
> timestamp! I do not know, why Benjamin is logging like full data
> rentention. (May be, I did not see the ads?)

These logs (from lighty) are only made for technical reasons, only for
24 hours and only in RAM:

> To run a service such as Tor-Proxy.NET is not possible without
> collection some of these data, since they are indispensable for
> technical and statistic purposes. On the other hand I have to avoid
> that over detours this data could be used, to link to the person who
> used Tor-Proxy.NET. 
> 
> This is sometimes possible for example by means of the IP address.
> Therefore with each access the IP address of the user is only stored
> in form of a MD5-hash-value, and only for 24 hours. In order to
> prevent attacks by using Rainbow tables, additionally to the IP a
> random value is also included into the computation of the hash value. 
> 
> Thus the hash value is clear, it cannot be reckoned back with the at
> present available technology. Instead of 127.0.0.1 + $random value so
> for example a1ef5be68022281bd995b3bfba8ae403 is stored. All log files
> of the current processes are stored only in a RAM disk (a volatile
> memory) and are deleted after 24 hours irrevocablly.

But it's true that I do log; read my mail in response to M from 18:26. I
really regret this, and I'm doing it as transparent as possible.

Regards,
Benjamin.

-- 
Surf anonymously and reach Hidden Services by using TOR, JonDos (JAP)
and I2P with https://tor-proxy.net .


signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil


Re: tor-proxy.net

2010-01-03 Thread Benjamin S.
Am Sonntag, den 03.01.2010, 13:43 + schrieb M:
> Thanks for the reply ben.
> 
> "> Is it a good alternative if i am out without my TorBrowser Bundle?"
> 
> what i meant by this was that if i am on a computer on which i do not
> have access to tor, woudl this be a safer option than other online
> proxies such as anonymouse?

It's always a matter of trust. But as far as I can see anonymouse
doesn't offer https (I do).

I don't know if anonymouse is logging and if so, under which
circumstances they give those logs. I do log, because I'm sitting in
Germany where I'm forced to do so by the data retention law. (I didn't
logged before 01.01.2009, and I will stop it as soon as the law is
overridden by the Constitutional Court.)

Even I'm law-student, so I know a little bit 'bout when I have to give
away the logs and when not. (you can read about this here[1])

[1] https://tor-proxy.net/index.php?q=en/node/75

So it's up to you to decide which service fits your needs.

Regards,
Benjamin.



-- 
Surf anonymously and reach Hidden Services by using TOR, JonDos (JAP)
and I2P with https://tor-proxy.net .


signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil


Re: How to exactly determine country of an exit node

2010-01-03 Thread Olaf Selke
Nico Weinreich schrieb:
> 
> I've visited http://torstatus.all.de to get some tor servers from
> germany. I thought it's enough to look on the country flag, but I've
> noticed a strange entry on this page. I found a router with name
> "bleakgadfly5
> "
> which belongs to germany (at least all.de claims so) with ip
> 217.114.215.227 and the hostname of this server is
> "hosted-by-vps-hosting.co.uk". You can see the .co.uk domain and a whois
> for this ip gave a "GB" for country. So, do I have to check ever the
> whois for an ip or is there another way to be sure to use a german server?

I supposed all.de using a stale GeoIP db version.
https://torstatus.blutmagie.de using a more recent GeoIP database
correctly shows GB for this tor node.

Olaf
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: tor-proxy.net

2010-01-03 Thread Karsten N.
M schrieb:
> tor-proxy.net
> Is it a good alternative if i am out without my TorBrowser Bundle?

Have a look at the privacy statement of tor-proxy.net
https://tor-proxy.net/index.php?q=en/node/28

> In the context of the use of Tor-Proxy.NET various data (so-called
> Logs) results, which do not link to a person directly.
>
> To it belong:
>
>* the IP address of the calling
>   * the used Browser
>* the used operating system
>* the Website visited last (so-called Referrer)
>* the prefered language
>* the screen resolution
>   * the called URL
>* Time of the access

Your IP address will be logged together with the called URL and
timestamp! I do not know, why Benjamin is logging like full data
rentention. (May be, I did not see the ads?)

There are two log data free tor web proxies online:

  https://www.awxcnx.de/tor-i2p-proxy-en.htm
  https://privacybox.de/tor-proxy.en.html

Both web proxies do not write any access log file. Both proxies were
setup to enable access to hidden services without installing tor.

Best regards
Karsten N.





***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


polipo problems

2010-01-03 Thread M

Hi,

As polipo has now replaced privoxy in the default tor setup I am trying 
to use it, but it doesn't work.


Could someone please help me do these 2 things:


1. Run polipo as a windows 2003 service.

Everytime I try to start polipo as a service it crashes. I tried to set 
daemonise=true in the config, but this doesn't help (I have searched the 
web and the polipo manual, I found no other info on how to do this). 
Privoxy works fine as a service, why is polipo such a headache?



2. Add this proxy functionality I have with privoxy to the polipo config:

--
#this directs ALL requests to the tor proxy
forward-socks4a / localhost:9050 .

#this forwards all requests to I2P domains to the local I2P
#proxy without dns requests
forward .i2p localhost:

#this forwards all requests to Freenet domains to the local Freenet node
#proxy without dns requests
forward ksk@ localhost:
forward ssk@ localhost:
forward chk@ localhost:
forward svk@ localhost:
-

(I see the tor socks is already set in the polipo config)


If someone can help me out with this I could finaly move everything to 
polipo.


Thanks.



smime.p7s
Description: S/MIME Cryptographic Signature


tor-ramdisk testing needed.

2010-01-03 Thread basile
Hi everyone,

Last time I released tor-ramdisk, Georg Sluyterman requested that I add
the option of allowing the user to manually set a DNS server when
acquiring an IP address via DHCP.   I added that feature with the next
release which will be based on tor-0.2.1.21 (bumped from .20).  The
image is being tested now before release.  Anyone want to test the new
feature? *nudges Georg*

Prerelease images:
http://opensource.dyc.edu/pub/tor-ramdisk/archives/images.testing/

Bug reports: http://opensource.dyc.edu/flyspray/

Thanks.

-- 

Anthony G. Basile, Ph.D.
Chair of Information Technology
D'Youville College
Buffalo, NY 14201
USA

(716) 829-8197





signature.asc
Description: OpenPGP digital signature


Re: How to exactly determine country of an exit node

2010-01-03 Thread Nico Weinreich


Olaf Selke schrieb:

what do you consider a "German server"?

- a server with a German ip address according to the ripe db
- a server physically located in Germany
- a server with an ip address reverse resolving to a .de domain
- a server operated by a German individual


  
I think the first and third arguments are the interesting one for me. 
Resolving an ip to a domain isn't possible all the time, because some ip 
addresses don't resolve.



Recently I dumped my own dns cache into a perl script and compared the
ip addresses stored with those from an open danish dns server poisoned
with the danish dns blocklist. I found a lot of blocked servers within
the Chinese tld .cn using ip address space from the US.
  


OK, but there are german ip addresses which resolve to a .net domain or 
so. A check against ripe db would be the best. So there is the "whois 
for all ip addresses" again.


***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Fwd: Re: Still problems with TLS negotiation

2010-01-03 Thread Hans de Hartog

Hans Schnehl wrote:


 On Sat, Jan 02, 2010 at 07:53:03PM +0100, Hans de Hartog wrote:


 Hi,

 I upgraded all my servers from FreeBSD 7.2-RELEASE-p4 to 8.0-RELEASE
 and tor stopped working because of the TLS renegotiation problem.
 So I upgraded to tor 0.2.1.21 (promised to solve that problem) but the
 problem
 is still there. Going back to FreeBSD 7.2 is no option so I tried tor
 0.2.2.6-alpha.



 You need to compile the mentioned versions of Tor against openssl-0.9.8.l,
 which is the one in the FreeBSD ports tree. neither 7-stable or 8-stable
 ship with openssl-0.9.8.l, but the versions or Tor you are trying to run
 need that version of openssl.




 Still no go. However, the error message (TLS error: unexpected close while
 renegotiating) is now suffixed with (SSL_ST_OK) but tor isn't doing any
 usefull
 work.
 If it helps: openssl version: 0.9.8k 25 Mar 2009 (I can not change that,
 it's part
 of the base system).


 You do not need to change that, just install the ports version in
 addition.




 So, this was the end of a faithfull tor-supporting system, running for
 months as
 an exit-router... :-(


 No, it is not ! Keep going, please :) There is a thread under Tor-relays
 dealing exactly with this issue. If you want to skip the 'introduction'
 you may want to see :
 http://archives.seul.org/tor/relays/Dec-2009/msg00013.html

 which handles how to compile Tor  against openssl-0.9.8.l by using the ports
 systems built in routines.

 If you wish not to use this routine just scroll down and you will find a
 description of how to do without.




 Regards,
 Hans.


 dito
 ***
 To unsubscribe, send an e-mail to majord...@torproject.org with
 unsubscribe or-talkin the body. http://archives.seul.org/or/talk/



Thanks a lot! Tor is running again!

Summary (for FreeBSD 8.0-RELEASE):
 - install openssl from /usr/ports/security/openssl (which is version
0.9.8l)
 - add WITH_OPENSSL_PORT=YES to /etc/make.conf
 - rebuild and install tor from /usr/ports/security/tor (which is
version 0.2.1.21)
 - /usr/local/etc/rc.d/tor restart

Regards,
Hans.

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: How to exactly determine country of an exit node

2010-01-03 Thread Olaf Selke
Nico Weinreich wrote:
> So, do I have to check ever the
> whois for an ip or is there another way to be sure to use a german server?

what do you consider a "German server"?

- a server with a German ip address according to the ripe db
- a server physically located in Germany
- a server with an ip address reverse resolving to a .de domain
- a server operated by a German individual


Recently I dumped my own dns cache into a perl script and compared the
ip addresses stored with those from an open danish dns server poisoned
with the danish dns blocklist. I found a lot of blocked servers within
the Chinese tld .cn using ip address space from the US.

Olaf
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: tor-proxy.net

2010-01-03 Thread M
Thanks for the reply ben.

"> Is it a good alternative if i am out without my TorBrowser Bundle?"

what i meant by this was that if i am on a computer on which i do not have
access to tor, woudl this be a safer option than other online proxies such
as anonymouse?

On Sun, Jan 3, 2010 at 1:29 PM, Benjamin S.  wrote:

> Am Freitag, den 01.01.2010, 03:52 + schrieb M:
>
> Hi M,
>
> just saw this thread and like to mention that I'm the operator of this
> service.
>
> > tor-proxy.net
> >
> > Is it a good alternative if i am out without my TorBrowser Bundle?
>
> Using a standalone-TOR-Client is a better solution, 'cause there is no
> single point of trust.
>
> > Whats the diff between the First option (express)and the third?
>
> Express doesn't use TOR but a server-side anonymizing proxy.
>
> Hope this helps and if there are any questions simply ask.
>
> Regards,
> Benjamin.
>
> --
> Surf anonymously and reach Hidden Services by using TOR, JonDos (JAP)
> and I2P with https://tor-proxy.net .
>


cpu usage

2010-01-03 Thread M
I noticed that when i run a separate instance of Firefox which is installed
on my system while i have the torbrowser running, cpu usage runs very high,
sometimes remaining at 100%. I there any correlation?


Re: tor-proxy.net

2010-01-03 Thread Benjamin S.
Am Freitag, den 01.01.2010, 03:52 + schrieb M:

Hi M,

just saw this thread and like to mention that I'm the operator of this
service.

> tor-proxy.net
> 
> Is it a good alternative if i am out without my TorBrowser Bundle?

Using a standalone-TOR-Client is a better solution, 'cause there is no
single point of trust.

> Whats the diff between the First option (express)and the third?

Express doesn't use TOR but a server-side anonymizing proxy.

Hope this helps and if there are any questions simply ask.

Regards,
Benjamin.

-- 
Surf anonymously and reach Hidden Services by using TOR, JonDos (JAP)
and I2P with https://tor-proxy.net .


signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil


Re: tor-proxy.net

2010-01-03 Thread Curious Kid
From: M 
>
>To: or-talk@freehaven.net
>Sent: Sun, January 3, 2010 9:42:22 AM
>Subject: Re: tor-proxy.net
>
>
>Also, any reason the TOR website does offer something like this?


Here is something copied and pasted from the tor-proxy FAQ.
..
I am visiting a secure Website ( https:// ) with your service, and the 
Fingerprint is wrong!

If you are accessing a webpage through this service, connection is done between 
the server of the webpage you want to visit, and this server. Thats why the 
secured connection is established between this two servers, and not between you 
and the server of the webpage. Anyhow the content will not be readable when it 
is transferred to you, because the connection between you and this service is 
also secured. But it uses a different key than the website you like to visit. 
Thats why the fingerprints differ.

But be aware, that we theoretical could spy on the content if we want to. Of 
course we will never do so! But you should know that it is possible, and that 
is why you should not transfer high sensitive data over this service (for 
example credit card or online-banking PIN and TAN).
..

Regards,


  

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


How to exactly determine country of an exit node

2010-01-03 Thread Nico Weinreich

Hi all,

I've visited http://torstatus.all.de to get some tor servers from 
germany. I thought it's enough to look on the country flag, but I've 
noticed a strange entry on this page. I found a router with name 
"bleakgadfly5 
" 
which belongs to germany (at least all.de claims so) with ip 
217.114.215.227 and the hostname of this server is 
"hosted-by-vps-hosting.co.uk". You can see the .co.uk domain and a whois 
for this ip gave a "GB" for country. So, do I have to check ever the 
whois for an ip or is there another way to be sure to use a german server?


So long, Nico
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Hidden Services

2010-01-03 Thread Kyle Williams
Programmer In Training wrote:
> Do I need a web server already running for this to work (if so, I'm
> feeling very dense right now)? If so, I can easily set up Apache to deal
> out to 127.0.0.1:80.
>   
Yes.  If you do not have a service running, then you have nothing to
make Hidden.
So yes, you need to have apache running in order to have that hidden
service to work.


***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


FreeBSD tweak may yield better performance

2010-01-03 Thread Scott Bennett
 FreeBSD 7.2 and later offer a little-advertised kernel facility that
benefits processes with "large" virtual memory requirements, in particular,
"large" working sets.  What it does is to monitor process memory requirements
and to promote processes whose memory requirements become "large" enough to
use 4 MB pages instead of 4 KB pages.  The benefit to I/O bound processes
will typically be very difficult to detect, but for many CPU-bound processes,
the performance kick can be rather dramatic.  For example, my full disk backups
typically were taking in excess of 8 hours with the feature disabled, but
with the feature active, the backups, the output of which gets compressed
by piping it through gzip(1), finished in 4 hours and 15 minutes.  For this
particular task, it was like getting a new computer.
 Very high-data-rate tor relays apparently do use a lot of CPU time, so
it occurred to me that such systems might also benefit from enabling the
so-called "superpages" facility.  I am currently only able to run a tor relay
as a "stealth" relay to avoid detection and punishment by my ISP :-(, so I
cannot run the experiment myself.  If someone running a high-data-rate relay
under FreeBSD 7.2 or later would like to try it, here's what you need to do.
Basically, just add the following line to /boot/loader.conf and then reboot
your system.

vm.pmap.pg_ps_enabled=1

This sysctl variable can only be changed at boot time, and its default value
is 0 (i.e., not enabled), so if you are interested in trying it, keep in mind
that a reboot will be necessary to activate promotion to superpages.  Note
that contention for real memory will cause this facility to demote superpage
processes back to 4 KB pages as required to meet systemwide memory needs.
 In case it isn't obvious where the performance enhancement comes from,
consider that most/all modern CPUs from Intel and AMD have TLBs that hold
a maximum of 128 entries, each one containing a mapping of a virtual memory
page to a real page frame's base address.  That means that the TLB can cache
translated addresses covering a maximum of 512 KB when 4 KB pages are in use.
If a process's working set exceeds that size, then there will be frequent TLB
misses, each of which causes a processor stall while that DAT circuitry goes
through the full address translation process, complete with multiple fetches
from memory.  This seems especially wasteful when one considers that the data
or instructions needed by the processor might actually already be in L1 cache
lines, but inaccessible without a fresh, full address translation. :-(  By
contrast, a process that has been promoted to superpage usage has had its
TLB entry requirements reduced by as much as a factor of 1024, so the entire
process might need only a few TLB entries, after which no further address
translations need be done, except when context switches have caused TLB
entries to be purged.
 Anyway, if someone running a high-data-rate tor relay on a FreeBSD
system of release 7.2 or later would like to try the above tweak and report
back to the list any observed changes in performance, I would be grateful
for the information.  torstatus.kgprog.com currently shows 9 relays with
peak traffic rates greater than 1 MB/s that run on FreeBSD systems, although
the release level is not shown.  Those very active relays are the ones I
would expect to see get the greatest benefit from using superpages.


  Scott Bennett, Comm. ASMELG, CFIAG
**
* Internet:   bennett at cs.niu.edu  *
**
* "A well regulated and disciplined militia, is at all times a good  *
* objection to the introduction of that bane of all free governments *
* -- a standing army."   *
*-- Gov. John Hancock, New York Journal, 28 January 1790 *
**
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: tor-proxy.net

2010-01-03 Thread M
>
> Also, any reason the TOR website does offer something like this?
>



On Sat, Jan 2, 2010 at 9:11 AM, bao song  wrote:

>  For myself, the problem with tor-proxy.net is that it is blocked by the
> national filter here.
>
> So far, they haven't blocked https ports, so I can still use Tor.
>
> Michael Wolfe
>
> --
> See what's on at the movies in your area. Find out 
> now
> .