Re: [tor-talk] Dropbox over Tor feedback
On 20/04/2011 18:29, Nathan Freitas wrote: > I run Dropbox over Tor at very low bandwidth. I have detailed this setup > for others here: > http://openideals.org/2011/04/20/my-quick-guide-to-a-less-risky-dropbox/ Nathan, did you audit the network traffic for non-Tor leaks? For example, using Wireshark to see if there's some dropbox-related stream that does not travel over Tor. Jan ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] Dropbox over Tor feedback
On 21/04/2011 07:54, Jan Reister wrote: >> I run Dropbox over Tor at very low bandwidth. I have detailed this setup >> for others here: >> http://openideals.org/2011/04/20/my-quick-guide-to-a-less-risky-dropbox/ > > Nathan, did you audit the network traffic for non-Tor leaks? For > example, using Wireshark to see if there's some dropbox-related stream > that does not travel over Tor. I know this is only indirectly related, but I recently wrote about how the Dropbox mobile clients send file meta data over an unencrypted network connection, in direct contradiction of what their public documentation stated: https://grepular.com/Dropbox_Mobile_Less_Secure_Than_Dropbox_Desktop Instead of fixing the problem, they removed the bit of documentation that stated that the meta data was encrypted. They didn't modify it to state that the mobile clients send meta data unencrypted, they just removed the bit stating otherwise. If you're going to use Dropbox over Tor, it's definitely worth auditing the network comms properly as you blatantly can't rely on trusting them. Certainly use something like TrueCrypt with it. -- Mike Cardwell https://grepular.com/ https://twitter.com/mickeyc Professional http://cardwellit.com/ http://linkedin.com/in/mikecardwell PGP.mit.edu 0018461F/35BC AF1D 3AA2 1F84 3DC3 B0CF 70A5 F512 0018 461F signature.asc Description: OpenPGP digital signature ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] Torbutton problem
what if u use Elite proxy switcher add on...u search it from add on place i think it is going to help u but i have one question : how can u get to firefox on ur system???unless if the second one is portable??? thx > The problem is that there might be a situation in which you are using > tor network without knowing. It's ok for the plugin to modify settings > as long as the plugin is enabled. If we went back to FF3 just to use > torbutton, when we go back to FF4 proxy settings are still set to use > port 9050 and plugin is disabled. Once you realize it there is no > danger, but if you don't know, you could be sending private data > through tor using http. I don't know if I'm being clear. ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] Dropbox over Tor feedback
On Thu, Apr 21, 2011 at 7:54 AM, Jan Reister wrote: > On 20/04/2011 18:29, Nathan Freitas wrote: >> I run Dropbox over Tor at very low bandwidth. I have detailed this setup >> for others here: >> http://openideals.org/2011/04/20/my-quick-guide-to-a-less-risky-dropbox/ > > Nathan, did you audit the network traffic for non-Tor leaks? For > example, using Wireshark to see if there's some dropbox-related stream > that does not travel over Tor. I did. As far as I can tell, Dropbox is safe to use with Tor (with the setup described in Nathan's post). -- Runa A. Sandvik ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] Torbutton problem
On 4/21/2011 5:10 AM, Zaher F. wrote: but i have one question : how can u get to firefox on ur system???unless if the second one is portable??? thx Not sure I understand your question. Do you mean how can you have installed / run 2 instances of Firefox on same machine? That, as well as having each use a separate profile, is relatively simple (if you create separate ones & specify which to use). There are instructions all over the web how to do it. ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
[tor-talk] Tor Browser Bundle for Windows with Firefox 4
When will Firefox 4 be included in the Tor Browser Bundle for Windows? I love the Tor-made version of Firefox Portable as it doesn't install system-based plugins and extensions! See: https://gitweb.torproject.org/torbrowser.git/blob_plain/HEAD:/README "disable Firefox's ability to search the Windows registry path for system-wide plugins and extensions (closes: #2118)" ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] To Toggle, or not to Toggle: The End of Torbutton
Well, if I had an 8-core machine with 4+GB RAM, or even a single-core machine with over 1 GHz and at least 1GB RAM, I'd probably have four browser profiles for Firefox alone: one for Tor (Torbutton or whatever you guys decide to use, plus Noscript, AdBlockPlus, Cookie Monster, etc.), one for JonDo (with JonDoFox), one more complicated setup that allows me to whitelist sites I trust, e.g. my bank, while still making sure that any third party or other unwhitelisted content is loaded through a proxy (using FoxyProxy, Noscript, etc.), and a final one for guests only that does not use a proxy but does have AdBlockPlus, noscript (blacklist mode), Cookie Monster (blacklist mode) and RefControl (delete referrer when switching to a new domain)... for basic privacy protection that won't drive my guests nuts. However, seeing has how my computer is single core, less than 1 GHz, and has less than 1GB RAM, running one instance of a modern browser is hard enough on the poor thing. Multiple browsers, let alone full-blown virtualization, isn't a realistic option. Thus I am using JonDoFox, because it lets me switch between JonDo, Tor, a third proxy of my choosing (if desired) and no proxy, without having to run multiple browsers. True, there are a few features I might wish for, my nothing major than impacts my usability in any significant way. I think the key here is that there isn't one solution that will work for everyone. By all means create a nice Tor browser, designed to be used for Tor only. This is probably the best thing for most people are newer hardware who don't have to use any special accessible software for the blind or whatever. But document the changes you make and what people using other browsers would have to do in order to blend in with the Tor crowd as best they can even if they are using just a single instance of Firefox for all browsing, some other browser that works on their platform (Firefox doesn't run everywhere), some text or braille-only browser (if they are blind or just don't want a GUI), or some special browser-for-the-blind, or whatever. Yes, I realize many browsers cannot be configured to provide the same level of security as custom Firefox, at least not without delving into the source code, but not everyone has the hardware/software/ability to see/financial/other resources to have an ideal setup. Myself, I will probably continue to use JonDoFox, unless they remove their proxy switcher, it which case I'll probably be off using some other third party solution custom configured to meet my needs. ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] Do the OS X Vidalia bundles work on 10.4 for anyone?
No luck on PowerPC/G3. Tor must be built from source, which is a rather complicated procedure on OS X Tiger since it doesn't ship with a decent version of gcc. On 31 March 2011 12:18, Erinn Clark wrote: > > Hello everyone, > > I hear mixed reports about this, and I have no way at all to test for myself, > so I want to know if the OS X Vidalia bundles work for *any* 10.4 users on > either x86 or ppc. There were problems with polipo for a while, which I think > I > fixed, but now I'm hearing that Vidalia doesn't work either. > > Thanks for any feedback! > Erinn > > > ___ > tor-talk mailing list > tor-talk@lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] Tor Browser Bundle for Windows with Firefox 4
* m.kaspe...@onlinehome.de [2011:04:21 19:00 +0200]: > When will Firefox 4 be included in the Tor Browser Bundle for Windows? I love > the Tor-made version of Firefox Portable as it doesn't install system-based > plugins and extensions! Hi! I'm the main developer of the Tor Browser Bundle and there were some weird issues with making it work on Windows, but I spent the past 2-3 days fixing that (and a bunch of other backend stuff). I'm going to smooth out the remaining bits, test it some more, and I hope to have it out very soon -- probably within a day or two, barring any further issues. I'll make sure to announce it here too, as well as the blog, since I think you're not the only one impatiently waiting for it. :) Erinn pgptNJAaJFWHV.pgp Description: PGP signature ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] Will TOR interfere with anything on my dell laptopwith Windows?
It works not only with Firefox, but with a wide variety of other web programs, including a number of chat clients, etc. It is a SOCKS proxy, and thus not limited to only ports 80 (normal web) and 443 (encrypted web), although a few commonly abused ports are blocked on most exit nodes. However, the pre-configured Firefox it the Tor Browser Bundle (and also JonDoFox, which made some different choices, such as including NoScript even for Windows users) has been configured to increase the security and privacy of your browser for use with Tor so it keeps you more anonymous. With Internet Explorer, you don't get that protection, nor, to my knowledge, is it possible to configure Internet Explorer to provide equivalent protection. However, Internet Explorer's settings are treated as system settings by a number of programs. So if, for example, you wanted you AntiVirus to check for updates through Tor, setting Internet Exploer to use Tor might do the trick. Then again, maybe not: it is optional for other programs to respect Internet Explorer's settings. If you really want to be sure, you'd have to check the settings of your AntiVirus or force it through a socksifier. If I were you, I'd configure IE as best I could, and then go on to use the Tor Browser Bundle or JonDoFox anyway. That way, you'll get the security/privacy enhancements of the pre-configured Firefox, but you'll also get anonymity with applications that respect Internet Explorer's settings, and if you ever need to look at an IE-only webpage anonymously, IE will be ready for you. On 17 April 2011 20:06, wrote: > Thanks for the info. Does it only work with Firefox? Can I use it with > Internet Explorer? > > Thanks in advance. > > Original Message > From: Moritz Bartl > Apparently from: tor-talk-boun...@lists.torproject.org > To: tor-talk@lists.torproject.org > Subject: Re: [tor-talk] Will TOR interfere with anything on my dell > laptopwith Windows? > Date: Mon, 04 Apr 2011 20:17:24 +0200 > >> On 04.04.2011 19:58, cluelessbos...@safe-mail.net wrote: >> > I need to get TOR in able to see a certain website(s). I'm nervous about >> > installing it as I don't want it to interfere with my other existing >> > programs and my windows operating system etc. does anyone know if >> > this will be seamless? >> > >> > THanks in advance! >> >> Yes. You can choose to download the "portable" Tor Browser Bundle. Or >> you can even install the Vidalia bundle, and all it will do is add the >> Torbutton extension to your Firefox. The rest will stay untouched, and >> you can remove it any time. >> >> Each application you want to use with Tor needs to be configured to use >> it. Many applications can use Tor as a SOCKS proxy properly, but many >> others can not. If you want to use Tor just for websites, all you have >> to do is install the Vidalia bundle (and enable Torbutton in Firefox). >> It is probably good to set up a separate Firefox profile for Tor. >> >> -- >> Moritz Bartl >> https://www.torservers.net/ >> ___ >> tor-talk mailing list >> tor-talk@lists.torproject.org >> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk > ___ > tor-talk mailing list > tor-talk@lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk > ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
[tor-talk] tor is too slow...
hello.. i have noticed since 3 days that my connection using tor is to slow... it was not like that before... so if i open a page it will take a long time to open... and if it open it is only the home page will open or the connection will stop with a blank page and a title of the web in top of the tab i uninstalled it may times and i installed different versions but the same thing... my tor bandwidth usage : recv : between 0 - 10 sent : between 0 - 7 what is the problem ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] Torbutton problem
> Date: Thu, 21 Apr 2011 08:58:57 -0500 > From: joebtfs...@gmx.com > To: tor-talk@lists.torproject.org > Subject: Re: [tor-talk] Torbutton problem > > On 4/21/2011 5:10 AM, Zaher F. wrote: > > > > but i have one question : how can u get to firefox on ur > > system???unless if the second one is portable??? > > > > > > thx > > > Not sure I understand your question. Do you mean how can you have > installed / run 2 instances of Firefox on same machine? yes this what i mean can u explain to me how u can do it??? is it the second one should be portable ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] Torbutton problem
On Thu, Apr 21, 2011 at 5:05 PM, Zaher F. wrote: > yes this what i mean > can u explain to me how u can do it??? > is it the second one should be portable When you install them just choose two different directories. Make sure the user you will use to run them have privileges to modify the files inside the directories so they can update. Use firefox -profilemanager to create two profiles. ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] To Toggle, or not to Toggle: The End of Torbutton
On 4/21/2011 1:22 PM, Kraktus wrote: Well, if I had an 8-core machine with 4+GB RAM, or even a single-core machine with over 1 GHz and at least 1GB RAM, I'd probably have four browser profiles for Firefox alone: ... However, seeing has how my computer is single core, less than 1 GHz, and has less than 1GB RAM, running one instance of a modern browser is hard enough on the poor thing. Don't know if you were replying to the earlier post (that I wasn't sure if he wanted to install 2 versions of FX on his machine). Why would you want to run several instances of Firefox - SIMULTANEOUSLY? When I said it was easy to install multiple versions, or multiple instances of same version, didn't expect users would be running them at the same time. If you are short on RAM / CPU & want different VERSIONS, of course have to install them in diff folders, & set them to use diff profiles (if desired). But, other than needing to switch between running installations for a specific purpose, no need to have them running simultaneously. Run one & when thru w/it, shut it down & start the other. I believe you can also run simultaneous instances of same FX version (most likely using different specified profiles). Typically, one install will be the default. Others can be started using specific profiles by adding the profile name (or full path incl profile name) in the shortcut target box, after the path & executable. Like after C:\..\firefox.exe" -p myprofile4-21-11 -no-remote This assumes the profile name is already entered properly (or created) in Firefox's profile.ini file. You can create a new profile name using the profile manager. The firefox 4 [beta profile mgr] (not yet incl w/ the setup) has more options than one w/ FX v3.x. I've used it - had a couple minor issues, but over all, allows specifying which installed version will use which profile. ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] Torbutton problem
On 4/21/2011 3:05 PM, Zaher F. wrote: > Date: Thu, 21 Apr 2011 08:58:57 -0500 > From: joebtfs...@gmx.com > To: tor-talk@lists.torproject.org > Subject: Re: [tor-talk] Torbutton problem > > On 4/21/2011 5:10 AM, Zaher F. wrote: > > > > but i have one question : how can u get to firefox on ur > > system???unless if the second one is portable??? > >> > > > thx > > > Not sure I understand your question. Do you mean how can you have > installed / run 2 instances of Firefox on same machine? yes this what i mean can u explain to me how u can do it??? is it the second one should be portable The 2nd one (or 3rd, 4th...) doesn't have to be portable. I just replied to another user, who I * think * may have been dealing w/ issue of running more than one version, or multiples of same version (though he was concerned w/ RAM). See that reply & whether it answers some questions. After you read it, then you'll need to read up on using the Firefox Profile Manager (search that in their knowledge base). http://kb.mozillazine.org/Profile_Manager You can read some about the stand alone profile mgr 1.0b1 that replaces the one built into Firefox here: http://jagriffin.wordpress.com/2011/01/11/profilemanager-1-0_beta1/ You can d/l the beta profile mgr here: ftp://ftp.mozilla.org/pub/utilities/profilemanager/1.0_beta1/ I would suggest backing up a copy of the current profiles.ini file before making changes. Sometimes, I've had to manually add a profile name / path to it, because the profile mgr wouldn't do it correctly. I copied a previous profile entry from the profiles.ini file & pasted it below. Then changed the path & profile name accordingly, following the original examples. [Profile1] Name=FX 3.6.8 test 8-6-10 IsRelative=1 Path=Profiles/f3pnryzk.FX 3.6.8 test 8-6-10 [Profile2] Name=FX4-shrd-3-25-11 IsRelative=0 Path=F:\Mozilla Shared Profiles\Firefox 4\mwfte1rr.FX4-shrd-3-25-11 Default=1 The "IsRelative" value = 1 means the profile is in the default location; 0 means it's in a non default location (as my Profile 2 is on F:\ drive). Which ever one you want to be the default will have "Default=1" as last line. However, if running multiple instances, for the other installs using different profiles than the default one, you'll either have to use the newer standalone beta profile mgr 1.0, or you'll have to add the profile you want each installation to use, in the startup icons Target box, along w/ the command "-no-remote" (no quotes) after the name of the profile name specified. ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
