Strange problem
Hello. I'm not sure if this belongs here and if anyone feels it doesn't then just let me know, but I have something interesting, at least to me. and my searching has led to this: I know that Google is somehow involved with Tor though I don't understand it much at all. Just that it can show up in different languages when on the web. I use my Mac, OS 10.5.2ppc, only for Hidden Services/Onion Forum, but I only used it for the regular spider's web in the past. About 2-3 years ago. However, in my haste I have neglected a few times lately, within the last 12 months, to toggle Torbutton on before connecting Vidalia. What I noticed one day is that some new volume was in my System Preferences called MacFUSE and I searched to try and find out how it got there! I just recently found this, quote Google provides MacFUSE (File System in User Space) that provides this ability via a secure (SSH) connection, and it's fairly easy to do. Basically, with MacFUSE installed, it's like having the remote computer's hard drive mounted on your desktop... This doesn't sound good to me at all. It is supposedly for my working remotely but since I don't use it, then I would have to assume someone else remotely uses it on my Mac and also put it there. Is this possible? I also found this: MacFuse is a software that extends the file system support that is built into the Mac OS X kernel by acting as a bridge between the operating system and non-native file systems. MacFUSE understands all the access methods and rules for working with a particular file system and then presents that information so that it looks like and works like a regular volume in OS X. It says, This is very necessary for the smooth functioning of your Virtual Machine. Well, I don't have nor have I built a virtual machine. Again, if any think this inappropriate here I will drop it and my apologies. I use my Mac only for Tor and nothing else as far as any internet surfing. I use Windows, the IM Browser Bundle on a USB for thtat and many times can only go to an internet cafe where I live because the internet here is still tin cans and string. I guess I'm wondering if this is a compromise to Tor in any way since it is on my system and has anyone else run into something like this? Thanks in advance and Regards
Re: Strange problem
On Sat, Mar 20, 2010 at 08:25:20AM -0400, zzzjethro...@email2me.net wrote 5.5K bytes in 131 lines about: : : What I noticed one day is that some new volume was in my System Preferences called MacFUSE and I searched to try and find out how it got there! Something else you installed or downloaded added macfuse to your system. Tor doesn't use nor install macfuse. -- Andrew Lewman The Tor Project pgp 0x31B0974B Website: https://www.torproject.org/ Blog: https://blog.torproject.org/ Identi.ca: torproject *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Strange problem
On Sat, Mar 20, 2010 at 5:25 AM, zzzjethro...@email2me.net wrote: I know that Google is somehow involved with Tor though I don't understand it much at all. Just that it can show up in different languages when on the web. Tor has exit nodes all over the world, and Google geolocates your IP address to decide what language to use. So if you're using Tor and the exit node is in Germany (e.g. to Google it looks like you're in Germany), then Google will show up in German. Google actually isn't involved in Tor. There's lots of websites that geolocate your IP address and behave differently depending on what part of the world they think you're in. I believe hulu.com won't let you watch video if you're not in the US, and BBC won't let you stream video unless you're in the UK. Micah *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Strange problem
Strange, I always thought they were doing some kind of eugenics program. On 3/20/10, Micah Lee micahf...@gmail.com wrote: On Sat, Mar 20, 2010 at 5:25 AM, zzzjethro...@email2me.net wrote: I know that Google is somehow involved with Tor though I don't understand it much at all. Just that it can show up in different languages when on the web. Tor has exit nodes all over the world, and Google geolocates your IP address to decide what language to use. So if you're using Tor and the exit node is in Germany (e.g. to Google it looks like you're in Germany), then Google will show up in German. Google actually isn't involved in Tor. There's lots of websites that geolocate your IP address and behave differently depending on what part of the world they think you're in. I believe hulu.com won't let you watch video if you're not in the US, and BBC won't let you stream video unless you're in the UK. Micah *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/ *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Strange problem
hi Okay thank you. I will try and find what it was. thanks -Original Message- From: and...@torproject.org To: or-talk@freehaven.net Sent: Sat, Mar 20, 2010 9:50 pm Subject: Re: Strange problem On Sat, Mar 20, 2010 at 08:25:20AM -0400, zzzjethro...@email2me.net wrote 5.5K bytes in 131 lines about: : : What I noticed one day is that some new volume was in my System Preferences called MacFUSE and I searched to try and find out how it got there! Something else you installed or downloaded added macfuse to your system. Tor doesn't use nor install macfuse. -- Andrew Lewman The Tor Project pgp 0x31B0974B Website: https://www.torproject.org/ Blog: https://blog.torproject.org/ Identi.ca: torproject *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Strange problem
thanks a lot -Original Message- From: Micah Lee micahf...@gmail.com To: or-talk@freehaven.net Sent: Sun, Mar 21, 2010 2:01 am Subject: Re: Strange problem On Sat, Mar 20, 2010 at 5:25 AM, zzzjethro...@email2me.net wrote: I know that Google is somehow involved with Tor though I don't understand it much at all. Just that it can show up in different languages when on the web. Tor has exit nodes all over the world, and Google geolocates your IP address to decide what language to use. So if you're using Tor and the exit node is in Germany (e.g. to Google it looks like you're in Germany), then Google will show up in German. Google actually isn't involved in Tor. There's lots of websites that geolocate your IP address and behave differently depending on what part of the world they think you're in. I believe hulu.com won't let you watch video if you're not in the US, and BBC won't let you stream video unless you're in the UK. Micah *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Scroogle is allowing Tor again [Was: Re: Strange problem with Tor/Scroogle]
On Wed, 01 Oct 2008 10:53:25 -0700 F. Fox [EMAIL PROTECTED] wrote: I think Scroogle's blocking of Tor exit nodes may have been a mistake in setting up block lists somewhere; I can access it again through Tor. Anyone else want to confirm? yep working here too... thanks for the heads up - -- F. Fox Owner of Tor node kitsune http://fenrisfox.livejournal.com -- [EMAIL PROTECTED] [EMAIL PROTECTED] This e-mail has been digitally signed with GnuPG - ( http://gnupg.org/ ) signature.asc Description: PGP signature
Re: Scroogle is allowing Tor again [Was: Re: Strange problem with Tor/Scroogle]
Hi, I think Scroogle's blocking of Tor exit nodes may have been a mistake in setting up block lists somewhere; I can access it again through Tor. Anyone else want to confirm? forwarded with David Brandts permission: Date: Wed, 1 Oct 2008 10:33:41 -0700 (PDT) From: Daniel Brandt [EMAIL PROTECTED] Subject: RE:Scroogle Tor Scroogle's six servers have been under an around-the-clock flooding that is coming through Tor. Until today, this has been going on for eight days without any let-up. They came into Scroogle in the form of one of three GET requests for a search. They use DNS lookups of www.scroogle.org because they hit only our servers that were currently in our DNS. Curiously, they also picked up our favicon.ico consistently, which in restrospect seems to suggest a misconfigured machine. Anyway, it slowed to a crawl about ten hours ago. The three search terms requested are easy to catch: 1) damian+conway+perl 2) osman+semerci+-fired 3) issam+fares+-kanaan We lifted our Tor blocks about an hour ago. Only a few per hour are coming through by now, which we are handling directly based on the search terms instead of trying to block all Tor exit nodes. Originally we thought that someone was using Scroogle to scan for possible Tor exit nodes. We chose to use null-route blocking to defeat this, because a Forbidden would merely confirm that the circuit found its intended destination. Then we thought that whoever is doing this is anti-Tor as much as anti-Scroogle, and that it was an attempted denial of service. Now we think it was an out-of-control machine and that it was turned off earlier today. -- Daniel Brandt Date: Wed, 1 Oct 2008 12:48:07 -0700 (PDT) From: Daniel Brandt [EMAIL PROTECTED] Subject: Re: Scroogle Tor Sure, please post it on the mailing list, and convey our apologies to Tor users who were inconvenienced. If it happens again, we will try to just block on the abuser's search terms. We no longer suspect that anyone is stupid enough to use Scroogle to scan for exit nodes, because they should realize that if we let these get through to Google, then our six servers might get blocked by Google. We know for a fact that Google has the ability to block all of our servers from all of their various data centers in about 30 minutes flat; all it takes is for someone in a position of authority at Google to decide that it's time to stop being tolerant toward Scroogle. (We have never had any arrangements with Google whatsoever, and they already know the IPs of our six servers as they appear at the 270+ Google IP addresses we use.) But if some Tor abuser wanted to vary the search terms by using a dictionary lookup, this would be impossible to intercept. In such a situation, we'd have to block all the exit nodes again. At least we're now set up to do this effortlessly, because we've had eight days of training. During that time we wrote and debugged programs for automatic Tor exit-node blocking across all six servers. If the consensus among Tor experts is that this was a misconfigured Tor server (we don't use Tor so we haven't a clue), we hope someone can figure out how it happened, and also figure out how to prevent this sort of accidental misconfiguration. Otherwise, Tor will eventually get a bad name once script kiddies discover how much fun this is, and it will no longer happen accidentally. Something very similar happened to Scroogle in July, but it was at a much lower level of activity, and seemed to happen during U.S. business hours only, instead of around the clock. That's why we think it may worth investigating by Tor experts, especially from an ease of misconfiguration standpoint, and possibly even from an early detection standpoint. -- Daniel -- Ciao Kai http://kairaven.de/ Mail per I2P: http://www.i2p2.de/
