Re: Torbutton for Mozilla Thunderbird
anonym wrote: On 26/07/09 11:52, James Brown wrote: How can I get the Torbutton for the Mozilla Thunderbird? You'll have to use an old version, = 1.0.4.01 I believe. I used it under Windows (but very old version, about 1,5 - 2 years) but I cannot find it now for my new Linux system. Just google for torbutton-1.0.4.01-fx+tb.xpi and you'll find it. I got it from here: http://chanweiyee.blogspot.com/2008/05/torbutton-10401-for-firefox-3.html , and tried to install it but my post client wrote: Icedove could not install the file decause not a valid install package -207. (My client is Icedove 2.0.0.22, OS - Debian Lenny AMD64)
Re: Torbutton for Mozilla Thunderbird
Sigh... yes; especially when one (upon rare occasion) requests the embedded http images, and thereby asks TBird to visit a web page. One would then want the transaction monitored by both TorButton and NoScript. :-( (p.s. open up about:config in TB and scan for jav. I hope there really is no js.) Flamsmark wrote: This is potentially a less-than-ideal solution. Torbutton for Friefox is carefully and specifically designed to address web-browsing privacy concerns, making the user seem to belong to the largest possible set of potential users. Simply sending Thunderbird traffic through Tor may not provide the desired level of anonymity. There are other privacy concerns with Thunderbird, for instance, it sometimes broadcasts its hostname. Moreover, there hasn't been an anonymity audit of Thunderbird like there has with Firefox. There may be other behaviours like this which completely compromise the anonymity benefits provided by Tor. On Sat, Aug 8, 2009 at 14:33, Karsten N. tor-ad...@privacyfoundation.dewrote: James Brown schrieb: How can I get the Torbutton for the Mozilla Thunderbird? I use ProxyButton for this job. I does a proxy switch to Tor and rewrite my IP address in the header of the mail. Received: from [85.245.13.68] (helo=[0.0.0.0]) by n...@domain.tld download http://proxybutton.mozdev.org/installation.html Karsten N.
Re: Torbutton for Mozilla Thunderbird
James Brown schrieb: How can I get the Torbutton for the Mozilla Thunderbird? I use ProxyButton for this job. I does a proxy switch to Tor and rewrite my IP address in the header of the mail. Received: from [85.245.13.68] (helo=[0.0.0.0]) by n...@domain.tld download http://proxybutton.mozdev.org/installation.html Karsten N.
Re: Torbutton for Mozilla Thunderbird
This is potentially a less-than-ideal solution. Torbutton for Friefox is carefully and specifically designed to address web-browsing privacy concerns, making the user seem to belong to the largest possible set of potential users. Simply sending Thunderbird traffic through Tor may not provide the desired level of anonymity. There are other privacy concerns with Thunderbird, for instance, it sometimes broadcasts its hostname. Moreover, there hasn't been an anonymity audit of Thunderbird like there has with Firefox. There may be other behaviours like this which completely compromise the anonymity benefits provided by Tor. On Sat, Aug 8, 2009 at 14:33, Karsten N. tor-ad...@privacyfoundation.dewrote: James Brown schrieb: How can I get the Torbutton for the Mozilla Thunderbird? I use ProxyButton for this job. I does a proxy switch to Tor and rewrite my IP address in the header of the mail. Received: from [85.245.13.68] (helo=[0.0.0.0]) by n...@domain.tld download http://proxybutton.mozdev.org/installation.html Karsten N.
Re: Torbutton for Mozilla Thunderbird
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 28/07/09 15:38, Roger Dingledine wrote: Nobody has looked at the application-level gotchas in Thunderbird. I wouldn't be surprised if Thunderbird wrote your IP address in an smtp header or helo command or error message or something else. When I last checked this [1] at least the headers and HELO/EHLO messages were scrubbed and safe w.r.t. to the sender's IP address when using Torbutton 1.0.4.01. But, of course, that's not enough for any reassuring level of anonymity. [1] http://archives.seul.org/or/talk/Aug-2008/msg00261.html -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.11 (GNU/Linux) iEYEARECAAYFAkpwjPwACgkQp8EswdDmSViCigCgpr9ON8d7yzKixBYFvR9um8D2 P4UAnRsAHeXARFVXV/QJP9ecI8zaGg6N =A+Du -END PGP SIGNATURE-
Re: Torbutton for Mozilla Thunderbird
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 26/07/09 11:52, James Brown wrote: How can I get the Torbutton for the Mozilla Thunderbird? You'll have to use an old version, = 1.0.4.01 I believe. I used it under Windows (but very old version, about 1,5 - 2 years) but I cannot find it now for my new Linux system. Just google for torbutton-1.0.4.01-fx+tb.xpi and you'll find it. -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.11 (GNU/Linux) iEYEARECAAYFAkpu14kACgkQp8EswdDmSVhKHgCdFDvbqNn7868cptslVyYlTTS9 WSkAoIctWs4m6l0bEr/ZZeIaMQF8nt2A =NWWV -END PGP SIGNATURE-
Re: Torbutton for Mozilla Thunderbird
anonym wrote: On 26/07/09 11:52, James Brown wrote: How can I get the Torbutton for the Mozilla Thunderbird? You'll have to use an old version, = 1.0.4.01 I believe. Yeah I used it under Windows (but very old version, about 1,5 - 2 years) but I cannot find it now for my new Linux system. Just google for torbutton-1.0.4.01-fx+tb.xpi and you'll find it. I tried to do it but all references were unworked And what about creating a new version?!
Re: Torbutton for Mozilla Thunderbird
anonym wrote: On 26/07/09 11:52, James Brown wrote: How can I get the Torbutton for the Mozilla Thunderbird? You'll have to use an old version, = 1.0.4.01 I believe. I used it under Windows (but very old version, about 1,5 - 2 years) but I cannot find it now for my new Linux system. Just google for torbutton-1.0.4.01-fx+tb.xpi and you'll find it. http://www.google.ru/search?hl=runewwindow=1q=http%3A%2F%2Ftorbutton-1.0.4.01-fx%2Btb.xpi%2FbtnG=%D0%9F%D0%BE%D0%B8%D1%81%D0%BAlr=aq=foq= don't find any document ...
Re: Torbutton for Mozilla Thunderbird
On Tue, Jul 28, 2009 at 03:27:33PM +0400, James Brown wrote: Just google for torbutton-1.0.4.01-fx+tb.xpi and you'll find it. I tried to do it but all references were unworked And what about creating a new version?! Once upon a time, Torbutton just toggled your proxy settings on and off. So it made sense to make it compatible with a lot of environments -- e.g. both Firefox and Thunderbird. A year or so ago, Torbutton became something much better. Now it actually tries to tackle all of the application-level gotchas that come up with web browsing over Tor: https://www.torproject.org/torbutton/design/ Nobody has looked at the application-level gotchas in Thunderbird. I wouldn't be surprised if Thunderbird wrote your IP address in an smtp header or helo command or error message or something else. It seems silly (no, worse than silly, harmful) to declare support for Thunderbird when we haven't done any of the security work on it. So, feel free to use Tor with Thunderbird, but it's probably not safe. --Roger
Re: Torbutton for Mozilla Thunderbird
Roger Dingledine wrote: On Tue, Jul 28, 2009 at 03:27:33PM +0400, James Brown wrote: Just google for torbutton-1.0.4.01-fx+tb.xpi and you'll find it. I tried to do it but all references were unworked And what about creating a new version?! Once upon a time, Torbutton just toggled your proxy settings on and off. So it made sense to make it compatible with a lot of environments -- e.g. both Firefox and Thunderbird. A year or so ago, Torbutton became something much better. Now it actually tries to tackle all of the application-level gotchas that come up with web browsing over Tor: https://www.torproject.org/torbutton/design/ Nobody has looked at the application-level gotchas in Thunderbird. I wouldn't be surprised if Thunderbird wrote your IP address in an smtp header or helo command or error message or something else. It seems silly (no, worse than silly, harmful) to declare support for Thunderbird when we haven't done any of the security work on it. So, feel free to use Tor with Thunderbird, but it's probably not safe. --Roger Don't it cut headers that are able to compromize an anonimity (such as ip-adress, the version of the OS, mailing client)?
Re: Torbutton for Mozilla Thunderbird
anonym wrote: On 26/07/09 11:52, James Brown wrote: How can I get the Torbutton for the Mozilla Thunderbird? You'll have to use an old version, = 1.0.4.01 I believe. I used it under Windows (but very old version, about 1,5 - 2 years) but I cannot find it now for my new Linux system. Just google for torbutton-1.0.4.01-fx+tb.xpi and you'll find it. http://chanweiyee.blogspot.com/2008/05/torbutton-10401-for-firefox-3.html Oh, sorry, I find it through the Google, yeah! How I can to check its identity and integrity?
Re: Torbutton for Mozilla Thunderbird
On 07/28/2009 09:55 AM, James Brown wrote: Don't it cut headers that are able to compromize an anonimity (such as ip-adress, the version of the OS, mailing client)? Torbutton for thunderbird could be simply renamed to switch proxy for thunderbird. It's unmaintained and unsafe to use. Making a functional torbutton for thunderbird is a fine project if someone wants to learn about extensions for thunderbird. -- Andrew Lewman The Tor Project pgp 0x31B0974B Website: https://torproject.org/ Blog: https://blog.torproject.org/ Identica/Twitter: torproject
