Re: Cannot Download Bridges

2010-04-07 Thread Scott Bennett
 On Tue, 6 Apr 2010 11:29:57 +0200 Mitar  wrote:
>On Tue, Apr 6, 2010 at 10:58 AM, Scott Bennett  wrote:
>> It wouldn't be airtight, to be sure, but it would
>> greatly shrink the window of opportunity for censors to cut bridge users
>> off from the tor network.
>
>Of course censors could also just connect to the Tor and use this
>hidden service to learn about other bridges. Even again and again
>request new bridges (pretending the previous ones are unreachable) and
>thus gain the knowledge of all bridges.
>
 And that would be different from our current situation exactly how?
Besides, hidden services are **S--L--O--W**, which discourages that sort
of thing anyway.


  Scott Bennett, Comm. ASMELG, CFIAG
**
* Internet:   bennett at cs.niu.edu  *
**
* "A well regulated and disciplined militia, is at all times a good  *
* objection to the introduction of that bane of all free governments *
* -- a standing army."   *
*-- Gov. John Hancock, New York Journal, 28 January 1790 *
**
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Cannot Download Bridges

2010-04-06 Thread Mitar
Hi!

On Tue, Apr 6, 2010 at 10:58 AM, Scott Bennett  wrote:
> It wouldn't be airtight, to be sure, but it would
> greatly shrink the window of opportunity for censors to cut bridge users
> off from the tor network.

Of course censors could also just connect to the Tor and use this
hidden service to learn about other bridges. Even again and again
request new bridges (pretending the previous ones are unreachable) and
thus gain the knowledge of all bridges.


Mitar
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Cannot Download Bridges

2010-04-06 Thread Scott Bennett
 On Fri, 2 Apr 2010 03:09:18 + john smith 
top-posted:
>> What happens when you try to visit https://bridges.torproject.org/
>with your (non-torified) browser?
>
>I can confirm that it's possible to access this site at the present time.
>
>Thanks for the feedback on this question & thanks also for providing
>some alternative methods for obtaining bridges.
>
 Would it be feasible for tor, when configured to use bridges, to be
somewhat proactive thenceforth?  If bridges have been chosen for use, the
tor might continue to fetch new bridge information every so often via a
hidden service that wouldn't, in and of itself, be blockable.
 tor could be somewhat smart about this, too.  For example, if it
notices that a bridge has become unreachable, it could request three new
ones.  Given the possibility that the unreachable bridge might simply be
down for the moment, tor could keep it at the end of its list of bridges
to try until it had been unreachable for some time period before removing
it from its list.  Such a procedure would mean that, in many situations,
the user would only need to get an initial set of bridges, after which
tor would maintain a list of, say, six to twelve bridges that were current
for use.
 At present, bridge users have to remain vigilant and anticipate the
blockage or discontinuance of bridges that they have provided to tor, which
means that they could become permanently disconnected and unable to get new
bridge information.  It wouldn't be airtight, to be sure, but it would
greatly shrink the window of opportunity for censors to cut bridge users
off from the tor network.


  Scott Bennett, Comm. ASMELG, CFIAG
**
* Internet:   bennett at cs.niu.edu  *
**
* "A well regulated and disciplined militia, is at all times a good  *
* objection to the introduction of that bane of all free governments *
* -- a standing army."   *
*-- Gov. John Hancock, New York Journal, 28 January 1790 *
**
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Cannot Download Bridges

2010-04-04 Thread john smith
On 4/3/10, Roger Dingledine  wrote:

>
> Turns out this was something we could fix in Vidalia. The current version
> of Vidalia had a hard-coded ssl cert in mind for bridges.torproject.org,
> but we changed that cert on the site itself.
>
> Expect the "find bridges now" button to resume working in a later
> Vidalia release.

That's great news! Thanks for exploring & solving this problem. Myself
& many others here in Thailand are very grateful for Tor.
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Cannot Download Bridges

2010-04-03 Thread Roger Dingledine
On Fri, Apr 02, 2010 at 03:09:18AM +, john smith wrote:
> > What happens when you try to visit https://bridges.torproject.org/
> with your (non-torified) browser?
> 
> I can confirm that it's possible to access this site at the present time.

Turns out this was something we could fix in Vidalia. The current version
of Vidalia had a hard-coded ssl cert in mind for bridges.torproject.org,
but we changed that cert on the site itself.

Expect the "find bridges now" button to resume working in a later
Vidalia release.

Thanks!
--Roger

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Cannot Download Bridges

2010-04-01 Thread john smith
> What happens when you try to visit https://bridges.torproject.org/
with your (non-torified) browser?

I can confirm that it's possible to access this site at the present time.

Thanks for the feedback on this question & thanks also for providing
some alternative methods for obtaining bridges.

Regards,

John

On 4/1/10, Roger Dingledine  wrote:
> On Thu, Apr 01, 2010 at 01:50:06PM +, john smith wrote:
>> I've been unable to download bridges in the 1.3.3 version of the
>> tor-browser bundle for windows, when attempting to download bridges
>> via Settings>Network>Find Bridges Now.
>>
>> Each time I attempt to download bridges I receive the following:
>>
>> "Unable to download bridges: HTTP request failed".
>
> What happens when you try to visit https://bridges.torproject.org/
> with your (non-torified) browser?
>
>> Is it possible this connection is being blocked from within the
>> country where I'm attempting to retrieve the bridges (Thailand) or
>> perhaps from somewhere else?
>
> It's possible. It's just a website, and the people running your country's
> firewall are already good at blocking websites when they choose to.
>
> Also, you should notice that the bridges given out via https tend to
> get blocked earlier than the bridges given out via gmail. So if they do
> block that website, it may be that the next step is to block the bridges
> it gives out.
>
>> Of course I've been able to obtain & successfully use bridges using
>> the other [documented] means of acquiring bridges but I'm left
>> wondering why this connection problem is happening and if anyone else
>> was having similar problems either in Thailand or elsewhere?
>
> A fine question. Last I heard, that website is only blocked in China.
>
> --Roger
>
> ***
> To unsubscribe, send an e-mail to majord...@torproject.org with
> unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
>
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Cannot Download Bridges

2010-04-01 Thread Roger Dingledine
On Thu, Apr 01, 2010 at 01:50:06PM +, john smith wrote:
> I've been unable to download bridges in the 1.3.3 version of the
> tor-browser bundle for windows, when attempting to download bridges
> via Settings>Network>Find Bridges Now.
> 
> Each time I attempt to download bridges I receive the following:
> 
> "Unable to download bridges: HTTP request failed".

What happens when you try to visit https://bridges.torproject.org/
with your (non-torified) browser?

> Is it possible this connection is being blocked from within the
> country where I'm attempting to retrieve the bridges (Thailand) or
> perhaps from somewhere else?

It's possible. It's just a website, and the people running your country's
firewall are already good at blocking websites when they choose to.

Also, you should notice that the bridges given out via https tend to
get blocked earlier than the bridges given out via gmail. So if they do
block that website, it may be that the next step is to block the bridges
it gives out.

> Of course I've been able to obtain & successfully use bridges using
> the other [documented] means of acquiring bridges but I'm left
> wondering why this connection problem is happening and if anyone else
> was having similar problems either in Thailand or elsewhere?

A fine question. Last I heard, that website is only blocked in China.

--Roger

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/