Re: [tor-relays] About TBB downloadings

2014-10-16 Thread Andrew Roffey
Lluís wrote:
 In the web page here:
 
 https://www.torproject.org/download/download.html.en#warning
 
 advises us not to ... open documents downloaded through Tor while 
 online
 
 Many technical manuals and scientific papers are written in pdf 
 format, and I usually read them.

The reason for this is that offline applications can leak information
outside of Tor. If the file downloaded contained an identifier unique to
your Tor connection, and an application outside of that Tor connection
leaked the identifier, then it would breach anonymity.

For example, if you downloaded a HTML page as a file and an image
contained a unique ID this could occur.

To answer your question (or not really):

 Is it safe to download them with TBB first and then open them with, 
 say, Document Viewer ?
 
 Where can I find more information about it ?

I'm not sure whether Evince (I'm assuming this is what you're referring
to) leaks information, e.g. downloading of external resources.

By the way, Tails solves this problem by forcing all applications to go
through Tor.

-- 
Andrew Roffey  http://andrew.roffey.org
 [mailto|xmpp]:and...@roffey.org
 see website for GPG/OTR pubkeys
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Re: [tor-relays] About TBB downloadings

2014-10-16 Thread Andrew Roffey
Lluís wrote:
 In the web page here:
 
 https://www.torproject.org/download/download.html.en#warning
 
 advises us not to ... open documents downloaded through Tor while 
 online
 
 Many technical manuals and scientific papers are written in pdf 
 format, and I usually read them.

Also, if you use the in-built PDF reader in Tor Browser then you should
be safe. But not all PDF downloads use the correct PDF MIME type, which
is why your browser might want to download it and show that particular
error.

-- 
Andrew Roffey  http://andrew.roffey.org
 [mailto|xmpp]:and...@roffey.org
 see website for GPG/OTR pubkeys
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Re: [tor-relays] Best way for normal OS X users to run a relay?

2014-06-04 Thread Andrew Roffey
JT Allison:
 I guess the question here is whether these bundles help or 
 actually hurt the network?
 
 I mean people install OSX and windows on their personal
 computers, not their servers. Every time they close the lid of
 their laptop a nod will go down.
 
 They could run it on a desktop. Lots of people leave their desktop 
 machines running 24/7.

Is it advisable to run a Tor node on a personal computer? This has
probably been discussed before, but I was under the impression that this
isn't always recommended (especially for exit nodes), e.g. in the case
of seizure.

--
Andrew Roffey  http://andrew.roffey.org
GPG personal:  0x9657B073
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays