Re: [tor-talk] Mosh safe with tor?

2013-01-18 Thread Andrew Lewman
On Fri, 18 Jan 2013 13:40:14 +0100
Jerzy Łogiewa jerz...@interia.eu wrote:

 Hello!
 
 Does anyone know, is the Mosh shell safe for tor use? Any known
 leaking?

It's UDP-based, so no. And it appears to be based upon one person's
mods to AES.

-- 
Andrew
http://tpo.is/contact
pgp 0x6B4D6475
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Mosh safe with tor?

2013-01-18 Thread Nick Mathewson
On Fri, Jan 18, 2013 at 10:08 AM, Andrew Lewman and...@torproject.is wrote:
 On Fri, 18 Jan 2013 13:40:14 +0100
 Jerzy Łogiewa jerz...@interia.eu wrote:

 Hello!

 Does anyone know, is the Mosh shell safe for tor use? Any known
 leaking?

 It's UDP-based, so no. And it appears to be based upon one person's
 mods to AES.

FWIW, mosh has a decent security reputation, though I don't know how
secure they are personally.  According to their paper, they're using
AES128 in OCB mode, which is basically kosher.  (If they *are* using a
modified AES, that's pretty scary.)

But yeah, in any case: if mosh is UDP-only, then it won't run over Tor.

yrs,
-- 
Nick
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Mosh safe with tor?

2013-01-18 Thread grarpamp
 the Mosh shell

Cool tool.

 But yeah, in any case: if mosh is UDP-only, then it won't run over Tor.

I don't think the obstacle is mosh... you could run it between hidden services
with onioncat, maybe even in the mode without a real client side onion. Or
over a standard VPN via an exit. And even roam your tor client behind those
three. But when your exit IP changes then the TCP flow breaks and you
have to restart session on the TCP level.
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk