Re: Warning to NoReply.org DEB Package Users

2007-08-10 Thread coderman
On 8/10/07, Ringo Kamens <[EMAIL PROTECTED]> wrote: > I think what he is saying (which might be true) is that tor doesn't > have the permissions to save the torcc. there are some configurations that don't allow saving the config. they are still vulnerable. > If this is the case, then > editing i

Re: Warning to NoReply.org DEB Package Users

2007-08-10 Thread Ringo Kamens
I think what he is saying (which might be true) is that tor doesn't have the permissions to save the torcc. If this is the case, then editing it while in operation won't do anything anyways because in order to load the edited-torcc it must save it first. Just turn off your controlport for now if yo

Re: Warning to NoReply.org DEB Package Users

2007-08-10 Thread Kyle Williams
This is not true. The affects of the bug are very sever, and it DOES NOT require the config to be saved! An attacker could still cause you to loose your anonymity. UPDATE, UPDATE, UPDATE. On 8/10/07, Florian Reitmeir <[EMAIL PROTECTED]> wrote: > > On Fri, 10 Aug 2007, Ringo Kamens wrote: > > >

Re: Warning to NoReply.org DEB Package Users

2007-08-10 Thread 冷える時間
for dapper everything seems to be fine, at least for x86 machines. On 8/10/07, Ringo Kamens <[EMAIL PROTECTED]> wrote: > As you know, a major security vulnerability was just patched with the > 0.1.2.16 release. I have been using the noreply.org deb packages but > they didn't update to the newest v

Re: Warning to NoReply.org DEB Package Users

2007-08-10 Thread Ringo Kamens
By debian linux are we talking about all major debian-based distros (IE ubuntu and it's variants)? How about non-debian based Linux distros such as red-hat based ones? Good news. Comrade Ringo Kamens On 8/10/07, Florian Reitmeir <[EMAIL PROTECTED]> wrote: > On Fri, 10 Aug 2007, Ringo Kamens wrote:

Re: Warning to NoReply.org DEB Package Users

2007-08-10 Thread Florian Reitmeir
On Fri, 10 Aug 2007, Ringo Kamens wrote: > As you know, a major security vulnerability was just patched with the > 0.1.2.16 release. I have been using the noreply.org deb packages but > they didn't update to the newest version (at least not under amd64 > feisty). If you are in my situation you can

Warning to NoReply.org DEB Package Users

2007-08-10 Thread Ringo Kamens
As you know, a major security vulnerability was just patched with the 0.1.2.16 release. I have been using the noreply.org deb packages but they didn't update to the newest version (at least not under amd64 feisty). If you are in my situation you can compile from source or disable your controlport a

Log message in Vidalia

2007-08-10 Thread force44
Hi, I am using the last alfa (0.2.04.alfa) and Vidalia 0.0.13. What does mean: "Aug 10 11:41:05.468 [Warning] ControlPort is open, but no authentication method has been configured. This means that any program on your computer can reconfigure your Tor. That's bad! You should upgrade your To

Re: Proposal of a new hidden wiki

2007-08-10 Thread Alexander W. Janssen
On 8/7/07, Frozen Flame <[EMAIL PROTECTED]> wrote: > Hello, guys. Hi! > Is anyone interested on the return of the hidden wiki? Fire at will. Alex. -- "I am tired of all this sort of thing called science here... We have spent millions in that sort of thing for the last few years, and it is tim

Tor 0.2.0.3-alpha and 0.2.0.4-alpha are out

2007-08-10 Thread Roger Dingledine
These are the next two development snapshots for the 0.2.0.x series. We've had them ready for a week or so, but I delayed the official announce since we didn't have all the packages ready. Tor 0.2.0.4-alpha fixes a critical security vulnerability for most users, specifically those running Vidalia,

Introducing xB Machine - The Secure Virtual Workstation

2007-08-10 Thread Arrakis
xB Machine v0.2.2 DEVELOPMENT PRE-RELEASE(370MB) DOWNLOAD HERE: http://update.xerobank.com/beta/xBVM-0.02.2.zip xB Machine is a virtual machine built on the Gentoo platform, and is designed to provide a strong IP leak-resistant system and network design, hardened security against local attacks, a