[tor-talk] OONI specific mailing list?

2013-02-25 Thread Bernard Tyers - ei8fdb
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi there,

I'm curious to know if there is a specific mailing list for OONI discussions? I 
haven't found any mentioned on the OONI site, nor on the lists.torproject.org 
site. If not, where is the best place to hang out for OONI related info?

Any help appreciated.

thanks,
Bernard

- ---
Bernard / bluboxthief / ei8fdb

IO91XM / www.ei8fdb.org
-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBAgAGBQJRK+GPAAoJENsz1IO7MIrrDEwH/07ltyCmOm9SoU5ymiIwt9vF
bvagQdSwB4bUj8Rki/AxZIQJ1MMv44KuEK48lZn/HqEP56xuZFL4OEL+54NP/dAN
gCSWSqIAUzyrvFUp1/LXHgIJ7NPnRPCdNfxYGY9pDpeI5OTFM5UwQe2YWyWzHwoT
nWGcV+crA6hIFwMcyHVDIqpJVUMGp0fbsrt2u30PgPvAHshtcQpsK11rwpvuzLgT
IHmrtHbo31fivi5OWnj9hw4L6SLcBKk/O8PaI/zST6buhiPJpc3Vm1e1UMsolF8A
HJSqT4rQt3eE+V8kf/AfWmW2I6E5uUUIS71OvD1TVwKGEGLdzV6r5oTzaTKxNz4=
=Jp80
-END PGP SIGNATURE-
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] NSA supercomputer

2013-04-05 Thread Bernard Tyers - ei8fdb
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


On 5 Apr 2013, at 19:01, Andrew F wrote:

> The
> speaker said that the gov was storing encrypted messages that have been
> intercepted from critical sources in hopes that quantum computing will
> allow them to crack the encryptions eventually.

But by then (presuming it took more than X months) would the information 
contained inthe encrypted messages not be "worthless/little?". Or is it the 
"the more data we have the better" approach?

- --
Bernard / bluboxthief / ei8fdb

IO91XM / www.ei8fdb.org

-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBAgAGBQJRXyk9AAoJENsz1IO7MIrreLgH/2xwkR0PIYFFACPtrNXZYOXN
z1lZ7/5NFbIbQlZph7c38O7KonwPWcQtSgFqPZ6y3G3SkUNtrpmCR5S3ZXGmGAU3
j7FDvqWccKB+gmKA0Gb/1UmKkXeQyPM4DwXnKrEDhDDkf3v2Rw1KDhOpQIxWc1iT
+ydUyPP0yRh5QWZ7UfqqtrytV+6buXt9BetcdJ1dKJgSREg6DHYnIgx2YTtlBM2u
prXYMGcP11Ekj6kZbPPHbZrH0FS0aVtjbVaMS+txtmhPiEpjgHejzvXa5aS89ZCl
MtndzsgM9XPCSzo98FKmk3zzeEE3EYnqW/3v71Tiw7IUicuFXtHfPSUFHYPKZ3g=
=yRWC
-END PGP SIGNATURE-
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Roger's status report, Mar 2013

2013-04-11 Thread Bernard Tyers - ei8fdb
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Roger,


On 10 Apr 2013, at 12:13, Roger Dingledine wrote:

> 3) Briefed SponsorF on know what we've been up to in the past few months.
> http://freehaven.net/~arma/slides-mar13.pdf

Maybe a silly question, but what do the blue and red dots signify on the 
"directly connecting users from..." graphs?

> 9) Helped move forward a plan for getting user support mails off of
> the tor-assistants list, and onto the h...@rt.tp.o list. The current
> interim plan is that we'll bounce-to-help support mails that arrive to
> tor-assistants, and after a few weeks we'll assess how it's going. (I
> want to keep using the tor-assistants list for synchronization between
> developers when talking to external parties.)

Is h...@rt.tp a public list anyone can join?

> 10) Agreed to do a talk at PETools:
> http://petools.soic.indiana.edu/
> 
> 

> 2) I've been bad at letting jobs@tp.o mails pile up (since we don't have
> anybody whose job is to handle jobs).


jobs@ is for jobs AT Tor? Or something else?

thanks a lot,
bernard

- --
Bernard / bluboxthief / ei8fdb

IO91XM / www.ei8fdb.org

-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBAgAGBQJRZn4oAAoJENsz1IO7MIrr9nUIAL4idsHoPgC5EAXpGdVIt0ZT
nmwUVKcJGcBj51iKcbfSbo7d42IGrIQLgQdqjR0+Psro+9TpnDUF3fC+B6DIQO1x
4nMgh5sgjIT2fc3JWYQoleU4GjUljHszfAxLmJXoJ1AOY1yOfVcRD62TO7H7ylZd
mPdFvoPrPbLDvHIWV4q9V13mi8gRw5Za15qrMDNo5eBSNQewI28wlovVhRZ+DPIf
uYmghwKSlES9R2RGInZjA92fYoSH1RsyJqsQ8H2uC59Gh6bn34K6hiRYhPzr64XD
wBnReDrzoVT6a8oZw0OU9AWLduonKWnSgBnOGCQMfvBgNBo1pNEbeKtM26z65iY=
=uUzH
-END PGP SIGNATURE-
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Tor project creating a replacement for TrueCrypt?

2013-04-24 Thread Bernard Tyers - ei8fdb
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 18 Apr 2013, at 19:36, Nick Mathewson wrote:

> On Apr 18, 2013 2:01 PM, "Anthony Papillion"  wrote:
>> 
>> Hello Everyone,
>> 
>> Someone I  know said that he read that the project was creating a
>> replacement for TrueCrypt. Can anyone verify this as accurate or not? If
>> it is accurate, how far along is the work and where can I find more
>> information?
> 
> This is the first I've heard about it.
> 
> (So unless it's a random remark somebody made offhand about a project
> they'd like to do someday, I'd guess it probably isn't true.)


If there is a reason to replace Truecrypt what would it be?

- --
Bernard / bluboxthief / ei8fdb

IO91XM / www.ei8fdb.org

-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBAgAGBQJReBB4AAoJENsz1IO7MIrrAfIH/3gG9AWoWUPu+2wy5jh0EgT7
Z/k+0GBDoUPIk6R76Ovx7FFIx70WT/hrba5uvolzr35NdUa46ujRHnj22EHfPgHs
NNUFwQZS8JrltJNbhTDrfM/Xw9ntaYgQGsuPClu7IBeu1WHGZTkCF0D2Tj67AizC
wqdCIQfGL4CKgk/vv/jBbn5apoIzCLXN/1txNTOTuNvdNbLQlnzZZQlKhsz0QqSR
j5DVacS8OPhaGtSoPl7hYJkLuDpmFig0RLpHyMn2g9/yzhigENUk6/57+Dmlt8IN
D+YUnZOu8Z6nprtoJO0SMJrbx7HcS8pZuYacffTFqtBHcP3ycPX5KU1h7jSMuSI=
=dtUF
-END PGP SIGNATURE-
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] You could use ModX to create .onion sites,

2013-05-23 Thread Bernard Tyers - ei8fdb
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Griffin,

On 22 May 2013, at 21:46, Griffin Boyce wrote:

> Gregory Disney  wrote:
> 
>> Creating a .onion site is no difference between creating a normal site.
>> '.onion' is a address assigned a to a web server when it connects to the
>> tor network.
>> 
> 
> Disagree to some extent. You don't want to pull in a bunch of scripts,
> fonts, or images hosted off-site.  There are some interesting usability
> considerations when making a hidden service.


Can you explain what you mean by usability considerations? (I might have a 
different meaning of it, just curious)

thanks.
 
- --
Bernard / bluboxthief / ei8fdb

IO91XM / www.ei8fdb.org

-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBAgAGBQJRndqcAAoJENsz1IO7MIrr840IAKAR+idCdnd9LMALcH3WS3sr
2hSH++NREyshd0yP/bGLLi3Qqu6zc9M18mvJ9S+XMTDnToKtDgupBj+DKMa30l0w
0RjwOkuO6visgVQPaNrQtsEe8bLGtSEs8mTnafpUkTk7zLgUXJHBNMIKFXhmp3dM
e31h9aTi9JfM0+75xX+uFoBgDKML45q5vrLxMQdzklqJE7mJohPF3/K1pRga6zpy
P0WVLeiCaJS/WKKprainO5TZLNAxqgfp0biYJ6ihwQOTpNza5Yl7xTj7YPRMj2fa
ZCFhfPny+mLc91/pn7DJoYwbGB/tOUiX3iX+lhqgPuXLHXtWxtkv3sUaIwfkc98=
=xZLG
-END PGP SIGNATURE-
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] You could use ModX to create .onion sites,

2013-05-23 Thread Bernard Tyers - ei8fdb
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1



On 23 May 2013, at 18:44, Griffin Boyce wrote:

> Tom Ritter  wrote:
> 
>> On 23 May 2013 05:00, Bernard Tyers - ei8fdb  wrote:
>>> Can you explain what you mean by usability considerations? (I might have
>> a different meaning of it, just curious)
>> 
>> I think what he means is that most websites are built with a
>> tremendous number of referenced images, css, and javascript.
>> 
> 
>  Bingo.  A lot of sites take ten forevers to fully load because they're
> using a free site template that uses a lot of images, or (say) wordpress
> with a theme from their repository.
> 
>  There's probably a case to be made for image-blocking extensions enabled
> by default.  I used to have an extension enabled, and the speed gains on
> hidden services were enormous.


Yep I thought you meant (something like) that..

thanks.

- --
Bernard / bluboxthief / ei8fdb

IO91XM / www.ei8fdb.org

-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBAgAGBQJRnoPMAAoJENsz1IO7MIrrr2gIAMyHlm8jSMCM4sEA0bvsdKJg
PpYSiRELgd5A1gnjWrKivUijMAB6+5hSMUJ6AKC8S0a+LiUDhm3VcSeeLHOOw+3I
5OOH2VM2O/sNvPA8P0Jbtk8dnaGUYk5wFUiXAbLWtCWoM4ehVgn3Rysr9uC+gTmG
aU1VN7B2Y14Q2Gz+mXv3HO4aS86z/Q+k9VOq5CixUYV7WIbssSY2mdH/ZLTmlZHG
NXbl/AM2bjX8dOCGGdG1e/71ZEWpdYVTYcGPbP82jL2MNGnufvrSnRuThwl3x+ZV
RNepZik9vQFEsOnkY7uqwYG3Qcatut4GNQr2fRgXztRyeNdwdiuu9ZqkZCfxgF0=
=5qai
-END PGP SIGNATURE-
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


[tor-talk] Running a Tor exit node on a VPS: does location of node matter?

2013-06-05 Thread Bernard Tyers - ei8fdb
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hello all,

I am researching running a Tor exit node on a hosted VPS. I am currently 
looking at a big list of VPSs (www.lowendbox.com - thanks Moritz).

Most are similar - bandwidth, RAM, disk, IPs, etc.

For me as the operator of the node, does the location of the node, or more 
importantly the location of the datacentre/s where the VPS will live have any 
impact?

As a European country citizen does it make sense to locate the node in the 
US/Canada/Asia/Europe?

NB: I have no intention of using this node for illegal purposes, but seeing as 
this is the Tor network I cannot guarantee illegal usage will not occur.

Any thoughts? 

Thanks,
Bernard
- --
Bernard / bluboxthief / ei8fdb

IO91XM / www.ei8fdb.org

-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBAgAGBQJRr1L8AAoJENsz1IO7MIrrd8MIALIM3y4Y5fuZphFZ5tjj5MdJ
EoecuP2P8Smbu5QiNm+feEbQHiTpishYjWDir+Enj8d+frD8ON0ej6srrkoc6Z+S
ycCmEM1OAxq9ynKEsWaIfw4iC3ko1hc10P5l2iOYI7Wx7yuv60nEwPh/K91/X/S/
976U2OK2Q545XBvApA42fB7LKblO/eA3Kl8k6CRqK+cAAA9rlxUfRCKSftTwFrnS
/mVK4N4onk7esNNntVxZLQC5B1A4KoOoUBm76aj0EFg9Cf63IQTzwYU1ZZabNhUC
9c68Va6S6zpxk9EE3ys/TegzUDxOlUdD0UN4PfQC68bS7iORWo+a9Mm7oo+QePI=
=J2TS
-END PGP SIGNATURE-
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


[tor-talk] Fwd: [PET] Japan to possibly/partially block Tor?

2013-06-17 Thread Bernard Tyers - ei8fdb
(cross-posting to the Tor Project talk list for possibly more information)

Does anyone know about this reported blocking of Tor in Japan?

The metrics of connected users doesn't seem too unusal?

https://metrics.torproject.org/direct-users.png?start=2013-02-01&events=points&end=2013-06-17&country=jp

Thanks,
Bernard

Begin forwarded message:

> From: "Wright, Matthew" 
> Date: 27 April 2013 17:16:30 GMT+01:00
> To: Discussion of privacy enhancing technologies 
> Subject: [PET] Japan to possibly/partially block Tor?
> Reply-To: Discussion of privacy enhancing technologies 
> 
> FYI -- any more info?
> 
> From SANS News Bites:
> 
> --Japan's National Police Agency Wants ISPs to Block Tor for Those Who
>"Abuse" It
> (April 21 & 22, 2013)
> Japan's National Police Agency (NPA) may begin asking Internet service
> providers (ISPs) there to block Tor, a network that helps people
> anonymize their online activity. (Tor stands for The Onion Router). The
> ISPs would be asked to block people's use of Tor if those people had
> been found to be abusing the network. Japanese police were thwarted in
> their efforts to nab a cybercriminal because he used Tor. The NPA's plan
> comes in response to a recommendation from a panel brought together to
> help decide how to fight crime that is committed with the help of Tor.
> http://arstechnica.com/tech-policy/2013/04/japanese-police-ask-isps-to-start-blocking-tor/
> http://www.bbc.co.uk/news/technology-22248692
> http://www.theregister.co.uk/2013/04/22/tor_japan_police_ban/
> [Editor's Note (Murray): This is a troubling and confusing report.  Use
> of anonymizers should not "be read as a presumption of guilt."  Resort
> to anonymizers is rare, mostly legitimate, and sometimes even necessary.
> On the other hand, such use in the furtherance of a crime should be
> treated as aggravating.  "To block people's use of Tor if those people
> had been found (presumably by a court) to be abusing the network" seems
> appropriate.  However, it should take something more than a mere
> assertion on the part of the police.]
> ___
> PET mailing list
> p...@lists.links.org
> http://lists.links.org/mailman/listinfo/pet

--
Bernard / bluboxthief / ei8fdb

IO91XM / www.ei8fdb.org



PGP.sig
Description: This is a digitally signed message part
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Vidalia with extra geolocation

2013-06-21 Thread Bernard Tyers - ei8fdb
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


On 20 Jun 2013, at 04:26, strange-island wrote:

> In the photo on this page http://www.cl.cam.ac.uk/~sjm217/, Dr. Murdoch
> is pictured standing in front of a much nattier version of Vidalia than
> the one that ships with the stable browser bundles. The relay
> geolocation feature seems to be much more detailed than the one
> currently offered.
> 
> Is this available anywhere? Or was it purely for some demonstration purpose?

I could be very much mistaken but that looks like the list (and map 
visualisation) of Tor nodes worldwide. Each node location is plotted on the map.

I don't think there is any geolocation from the users POV. 

Maybe I misunderstand the question tho'?

Bernard
- --
Bernard / bluboxthief / ei8fdb

IO91XM / www.ei8fdb.org

-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBAgAGBQJRxC1gAAoJENsz1IO7MIrruNwH/0VhmLVVXbMJERIVELHzENsQ
uzTJ+NWpMuRdOum6fCfYox8sGiPHjKIw8lRAlajKDuFVUNX0ebsavEmMhY4YCQ7Q
Nt7BDQaWKJe72jx8ZrMLhrJOovCxy5WjVI97WfuuZb7rXc2XExuz/hrArgyln2Qj
Yk01+d7UWviLLfpf7YBYKl90vr08GW86CYv8k1/QI0lCvOyaFIGRIGcl3PkrNFHN
vkfLk22xiCiFVXdZJWT2+OSWmg7nCdanFkZe3+FwwDF31RHeq9jAA6ynO8mwn7/i
TpMXes7j7yN7pudg9j98kyXOwoDPGk7Zw3klsTIa+TpFJzvqNMCk/XzKTrTHPHo=
=A5yW
-END PGP SIGNATURE-
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


[tor-talk] TBB / Firefox autoupdate notification

2013-08-05 Thread Bernard Tyers - ei8fdb
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi,

One curious question:

In Firefox there is an auto-update option under advanced preferences. [1] 

TBB is based on Firefox but the auto-update option is not present. [2]

It would have not "saved" the compromise of the THS services recently, but is 
there a reason why the Firefox update was removed?

thanks,
Bernard


[1] http://www.ei8fdb.org/upload/firefox_update-20130805-214206.png
[2] http://www.ei8fdb.org/upload/TBB_update-20130805-214323.png

- --
Bernard / bluboxthief / ei8fdb

IO91XM / www.ei8fdb.org

-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBAgAGBQJSAA7MAAoJENsz1IO7MIrrDDEH/3+/pcSc76NWDDcnG6U9GKeC
mP0sDgKKp7PKOm2mUjkl3ipoduVdseDSo89emyBIDW5a3CvBMSDmHcmtDXEJ8HPS
hw0bMMK4UHn4vdl9TlgdqNRDK0So3wdtCf/flSXASbVcMU3x4pdpVU2RaS89dqEt
kjxyi10U9mQR4NE1a4Hmvuqa1akgVEQxKS33ByzqPS95omcZA4bsG2AwFSzyfYz9
gwqTOMinxHw3V2LZZ6f+31OdIXLdzmOhCzEHUK4Gz+XKdSo4pwrUXqXRThwdNV+L
CzBbZxTTtOFE6uph900zZnsLlRxzfbqfTE+btDVDTjlFMErqLZ8cggMNqiKN5zY=
=8xQS
-END PGP SIGNATURE-
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsusbscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] TBB / Firefox autoupdate notification

2013-08-05 Thread Bernard Tyers - ei8fdb
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


On 5 Aug 2013, at 21:45, Bernard Tyers - ei8fdb wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> Hi,
> 
> One curious question:
> 
> In Firefox there is an auto-update option under advanced preferences. [1] 
> 
> TBB is based on Firefox but the auto-update option is not present. [2]
> 
> It would have not "saved" the compromise of the THS services recently, but is 
> there a reason why the Firefox update was removed?


I should qualify the above comment: 

It's specific to "Tor Browser Bundle 1.0" which is the new beta.

MD5 (TorBrowserBundle_en-US.app/Contents/MacOS/TorBrowserBundle) = 
848268b15890db610985d0a8574ec026

- --
Bernard / bluboxthief / ei8fdb

IO91XM / www.ei8fdb.org
-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBAgAGBQJSABtHAAoJENsz1IO7MIrr8z8H/2z9HrosK+UKgGOcuswBC9M4
o5v3cPAil5PdtnJaIrH6xBWfgz09ZLUj2UpGdxzLLCQYH2XuyxFsV7DsjhFQ2uVU
Dgw7tkSRzvPS5bD1d/nyF8iqYT4uTtYqfFMm36W9arG2QG+jmDxezMuPtY5CXhRn
DyueP4omxJwuL/cej+CazyogW3V4SRaXpEowxE2ywtN//A1NGlK/bN5iHTCCTUb3
zEk3zwOcgxrqXpaISfJn1hpKEjzxehqXA57gMI7kr4RRumkfp49fWHQiW7FsghuI
125X30hbrpfFJVhjmOIaU8kjK5w/rnTmv4IG3pa+WS6wxUTxg1GXla6h/SXXIPc=
=G9Ba
-END PGP SIGNATURE-
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsusbscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Tor Mail Gateway

2013-08-27 Thread Bernard Tyers - ei8fdb

On 27 Aug 2013, at 18:44, The Doctor  wrote:

> Signed PGP part
> On 08/26/2013 07:29 AM, Nathan Suchy wrote:
> > First off Edward Snowden did not need anonymity. He went public on
> > this.
> 
> Is it known if he chose to go public, or if it was a condition of the
> leak being published by the Guardian?

From memory, the first interview he did with Greenwald and Poitras (sp?) he 
said he decided to go public, along the lines that he couldn't stand up and 
stay quiet. (I am paraphrasing, and from memory.)

Bernard

--
Bernard / bluboxthief / ei8fdb

IO91XM / www.ei8fdb.org



signature.asc
Description: Message signed with OpenPGP using GPGMail
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsusbscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Exit node stats collection?

2013-09-03 Thread Bernard Tyers - ei8fdb



On 3 Sep 2013, at 21:52, Moritz Bartl  wrote:

> On 09/03/2013 10:39 PM, Elrippo wrote:
>> I have to disagree with you on behalf of SPAM.
>> I opened Port 25 on one of my exits. In a week I got blacklisted by Google 
>> and some DNSBL's for sending spam.
>> It took me quite a time to erase my IP from these lists...
>> I can live with port 587 for submission, but I will never open port 25 again.
> 
> Seconded. While we try not to restrict anything and have an "everything
> goes" policy on most of our relays, port 25 is sadly not a good idea to
> keep open.


I have been running a reduced exit policy, a slight variation on the mentioned 
approach here. [1]

Up until this week I've had no major issues, apart from one notice from the 
ISP, which was dealt with reasonably effectively.

My issue my is keeping the exit node online.

To answer the OP: how can we tell "malicious users" from "valid users". I 
understand your POV, but surely we can't discriminate? Or can we?

regards,
Bernard

[1] https://blog.torproject.org/running-exit-node

--
Bernard / bluboxthief / ei8fdb

IO91XM / www.ei8fdb.org



signature.asc
Description: Message signed with OpenPGP using GPGMail
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsusbscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] post

2013-09-04 Thread Bernard Tyers - ei8fdb
On 4 Sep 2013, at 14:51, "D. Collins"  wrote:

> hello i just joined your ommunity and would like the ability to post 
> messages. username is cindelle. let me know if you need ny other information. 
> Thank you   

You just did it!

--
Bernard / bluboxthief / ei8fdb

IO91XM / www.ei8fdb.org



signature.asc
Description: Message signed with OpenPGP using GPGMail
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsusbscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] (no subject)

2013-09-25 Thread Bernard Tyers - ei8fdb

On 25 Sep 2013, at 23:03, Roger Dingledine  wrote:
> 
> 
>> On Sep 25, 2013 4:31 PM, "Robert K"  wrote:
>>> http://www.youtube.com/watch?v=I1z2K1Izur4
> 
> But be careful following the instructions in the youtube video. It looks
> like they made some deb somewhere and stuck Tor Browser Bundle in it
> and want you to install that. A) Nobody's audited what exactly they're
> having you install, now or in the future,

This is true, but people will use what they can if they have difficulties. 
Anything that helps people installed TBB must be useful, right?

> and B) I have no idea how or
> whether they'll keep that deb up to date.

I've had a look around, but I haven't come across any "official Tor Project 
videos" to help people get TBB installed on [insert OS]?

Are there any created? If not, I could try and do some short videos for Debian, 
OS X. Just using the "official" steps direct from TP website.


Bernard
--
Bernard / bluboxthief / ei8fdb

IO91XM / www.ei8fdb.org



signature.asc
Description: Message signed with OpenPGP using GPGMail
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsusbscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] (no subject)

2013-09-26 Thread Bernard Tyers - ei8fdb

On 26 Sep 2013, at 00:59, Roger Dingledine  wrote:

> On Wed, Sep 25, 2013 at 11:17:20PM +0100, Bernard Tyers - ei8fdb wrote:
>> This is true, but people will use what they can if they have
>> difficulties. Anything that helps people installed TBB must be useful,
>> right?
> 
> No? As one example, if you're an activist in  you maybe
> shouldn't get TBB from your government's website.

From your government's website? You mean adding the repo ppa:upubuntu-com/tor? 

If so, then true, the user has no clue about where the install is coming from. 
But possibly, neither do they know..

Fair point, but to counter this the user needs education *before* they download 
TBB from *whereever*.

If the user is already at the point of already having it on their computer, 
they have downloaded it, and their intention is to install it.

They need education of the best place to get it from, as opposed to from some 
(potentially) dodgy youtube video.

If a video shows how to do it insecurely, but a well-written, but technical FAQ 
explains the same, some people will choose the nice and simple video.

I don't agree this is right, but this is what people do.


> Speaking of which, I don't think that youtube video had any mention of
> checking signatures or anything? (But I didn't watch it carefully and
> didn't listen to it at all.) I guess it has you adding a separate deb
> repository, and you fetch the keyring for that, so assuming you fetched it
> right you're likely to get the package it wanted you to get -- whatever
> that is.

There was no audio. Just some randomer hightlighting text in a textpad to show 
the step he/she was on.

If we could do some simple steps in the video for signature checking, they'd 
also help.


> As another example, until the TBB can update itself
> (which is actually coming pretty soon I hope:
> https://trac.torproject.org/projects/tor/ticket/4234 ), we need users
> to understand how and when to upgrade. We're doing a poor job of that
> now, but having even more ways that people install it could make the
> issue even worse.
> 
>> I've had a look around, but I haven't come across any "official Tor
>> Project videos" to help people get TBB installed on [insert OS]?
>> 
>> Are there any created? If not, I could try and do some short videos
>> for Debian, OS X. Just using the "official" steps direct from TP website.
> 
> I'd suggest checking out TBB 3.x and thinking about videos for that
> instead:
> https://blog.torproject.org/category/tags/tbb-30
> Since I'm hoping we can drop TBB 2.x real soon now.


Ok, I'll try that this weekend.

Incidentally, is anyone on the list going to Open ITP's CTS? If anyone is 
interested in meeting up, I'll be there. Let me know on/off-list.

Bernard

--
Bernard / bluboxthief / ei8fdb

IO91XM / www.ei8fdb.org



signature.asc
Description: Message signed with OpenPGP using GPGMail
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsusbscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] A great way for you to help Tor: track down recent press articles

2013-11-18 Thread Bernard Tyers - ei8fdb

On 18 Nov 2013, at 12:42, coderman  wrote:

> On Sun, Nov 17, 2013 at 8:31 PM, Roger Dingledine  wrote:
>> It would be wonderful if somebody here could step up and held lead
>> https://trac.torproject.org/projects/tor/ticket/10182
>> ...
>> Can one of our volunteers take point on this and set up a wiki page and
>> start tracking down articles? I think getting a good list from the past
>> 6 months is the challenging part, and then getting that list onto the
>> web page will be the easy part.
> 
> six months of news[0] added to
> https://trac.torproject.org/projects/tor/wiki/TorArticles
> 
> let's see if your conjecture regarding getting the list onto the web
> page is correct ;)
> 
> best regards,
> 
> 0. "Tor Articles: June to November 2013"
> note that this is an abridged, biased, selective subset of news, blog,
> and web content matching Tor filters. it would be useful to have
> additional parties review the whole set for inclusion of overlooked or
> oppressed reports.  i'll post link to the full archive on the trac
> ticket once available.

When I first saw your list Coderman, it wasn’t clear if there was anything 
newer than July, so I’ve ordered them in reverse chron order.

Also, in terms of articles to add - is it just English, or are other languages 
also requested? I added on Danish article tagged as [DK] as it came up in my 
search. 
I’ll remove it if required.

However, maybe an idea to organise by other languages too?

All the best,

--
Bernard / bluboxthief / Contact me: me.ei8fdb.org


signature.asc
Description: Message signed with OpenPGP using GPGMail
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] "Safeplug"

2013-11-27 Thread Bernard Tyers - ei8fdb

On 22 Nov 2013, at 15:56, and...@torproject.is wrote:

> On Fri, Nov 22, 2013 at 07:04:00PM +0600, r...@romanrm.net wrote 2.5K bytes 
> in 0 lines about:
> : > On Fri, Nov 22, 2013 at 04:50:44PM +0600, Roman Mamedov wrote:
> : > > https://pogoplug.com/safeplug
> 
> Out of all the concerns about how they implemented it and such, my
> main concern is that it just adds more clients to the network without
> giving back in the form of relays or bridges. Or at least, none of
> their documentation mentions the ability to share freedom and privacy
> with others.

Not telling the Tor people what to do, but that sounds like a good discussion 
to have with Safeplug?

> However, this looks like a fine test case for consumer-level torouter
> market analysis. It would be great to learn 6 months from now how many
> they sold and a summary of customer feedback.

I was thinking the exact same thing when I read about it.

If anyone does hear about a non-technical user purchasing one of these, I would 
appreciate if you could put them in touch with me. 

I’d like to do some user interviews to see their reactions and their 
experiences.

Thanks,
Bernard

--
Bernard / bluboxthief / ei8fdb

IO91XM / Contact me: me.ei8fdb.org





signature.asc
Description: Message signed with OpenPGP using GPGMail
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk