Re: DEFCON Presentations [3]

2008-08-17 Thread Roy Lanek
Pages 48 && 49 are encouraging/reassuring ... oufff [relief]. In a sense, I--maybe--start to understand those peaks in Kuala Lumpur and Singapore from the statistics map [in Singapore one can't even chew chewing-gums in the subway, but who knows ... better smaller/minor devils than bigger ones].

Re: DEFCON Presentations

2008-08-17 Thread John Brooks
That is fairly true, within a margin of error. Symmetric encryption has one bit of output for every bit of input (with padding), so the size will be reasonably close. If you know all of the pages on a specific host (and they are either static or don't change much dynamically), you could guess at th

Confusion about TorButton, Noscript, etc.

2008-08-17 Thread Ringo Kamens
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm working on a presentation where I teach people how to install Tor. I have always heard it is best practice to use NoScript and TorButton, but TorButton automatically hooks "dangerous javascript". Is there any reason to have noscript installed after

Re: DEFCON Presentations

2008-08-17 Thread Peter Thoenen
Was reading Rodger's slides and anybody have a link with more info on slide 41 ... "If you can see an SSL-encrypted link, you can guess what web page is inside based on length" First I am hearing of this one and genuinely curious. -Peter

Re: DEFCON Presentations [2]

2008-08-17 Thread Roy Lanek
Poetic typo: What if China 0wns a CA? where "0wns" is nadazero whiskey november sierra at page 30 ... or--kewl!--it has been humor? :) For your information: Ch1n4 and Ch1n3s3 LOVE football! (While the only BBC worth reading--unless one is doing researches on semiology and newspeak, or

Re: DEFCON Presentations

2008-08-17 Thread Roy Lanek
** researchers use it to study anonymity ** Funding from US DoD Cool, how kind!, I am guessing that the, e.g., DoD doesn't get tax deduction ... Who is the "French NGO"? ... hope not Reporter Sans Frontieres Bah, nice wording anyway 8-) /Roy Lanek -- S berak

Re: DEFCON Presentations

2008-08-17 Thread Brenno J.S.A.A.F. de Winter, WGASA
In cooperation with Idefix :) I placed them online. You can find them here: http://dewinter.com/2008/08/18/defcon-16-slides-deanonymizing-tor-are-up/ [EMAIL PROTECTED] schreef: > Quoting [EMAIL PROTECTED]: >> Nathan Evans -De-TOR-iorate Anonymity > > http://rapidshare.com/files/138077751/defcon-1

Re: MaxOnionsPending questions

2008-08-17 Thread Roger Dingledine
On Fri, Aug 15, 2008 at 04:58:48AM -0500, Scott Bennett wrote: > What is a > typical high water mark for the number of onionskins actually in a decryption > queue at one time? Under what circumstances? Usually relays are well under the 100 mark. The only cases I've seen in practice where it happ

Re: DEFCON Presentations

2008-08-17 Thread idefix
Quoting [EMAIL PROTECTED]: Nathan Evans -De-TOR-iorate Anonymity http://rapidshare.com/files/138077751/defcon-16-evans-grothoff.pdf.html Sorry, got no other webspace. Maybe someone could upload it somewhere else.

Re: DEFCON Presentations

2008-08-17 Thread Roger Dingledine
On Sun, Aug 17, 2008 at 04:55:22PM -0400, [EMAIL PROTECTED] wrote: > Does anyone have access to the following presenations (ppt, pdf, > other)given at DEFCON 16 last week? > > Roger Dingledine -Security and anonymity vulnerabilities in Tor: > past, present, and future http://freehaven.net/~arma/s

DEFCON Presentations

2008-08-17 Thread limelight
Does anyone have access to the following presenations (ppt, pdf, other)given at DEFCON 16 last week? Roger Dingledine -Security and anonymity vulnerabilities in Tor: past, present, and future Nathan Evans -De-TOR-iorate Anonymity Thanks for the info.. -- Explore all of Europe's beauty! Click n

End of my Google Summer of Code project

2008-08-17 Thread Domenik Bork
Hey list, because the end of this years Google Summer of Code is standing in front of us, I decided to write a little mail to this list saying what exactly I have done during the last 3 months and how you could use it. Let me first give you a brief introduction to client authorization for

Re: e-mail and anonymity

2008-08-17 Thread Charles.F
I can't get access to the webmail through Opera (Mac)... It works with other browsers but I wish to use it on Opera. After I put my adress and pw, I get a white page... Anything I sould do to solve that ? Le 17-août-08 à 19:48, Noiano a écrit : anonym wrote: For free you'll get 128 MB storage an

Re: e-mail and anonymity

2008-08-17 Thread Charles.F
Thank you guys for that info, I think I'll go for it. Le 17-août-08 à 19:48, Noiano a écrit : anonym wrote: For free you'll get 128 MB storage and no advertisements (neither in the interface nor injected in mails). If you don't care about ad injection (beware that it breaks detached PGP sign

Re: e-mail and anonymity

2008-08-17 Thread Noiano
anonym wrote: > For free you'll get 128 MB storage and no advertisements (neither in the > interface nor injected in mails). If you don't care about ad injection > (beware that it breaks detached PGP signatures) you could go for a free > account with 1024 MB of storage. They also have pay subscript

Re: Update to default exit policy

2008-08-17 Thread Dominik Schaefer
Dawney Smith schrieb: > Those are ports used for mail submission, not for mail relay. They wont > be abused by spammers. ISPs often block their consumer broadband users > from connecting to port 25 on servers outside of their network, to > prevent spam. They don't block 465 and 587, because they're

Re: e-mail and anonymity

2008-08-17 Thread anonym
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/08/08 12:46, Charles.F wrote: > So what good free e-mail webmail account would you recommend for most > practical use and best anonymity ?o I recommend (and use) lavabit's services (see: https://lavabit.com). They have a webmail interface that

Re: route of collision [2]

2008-08-17 Thread Roy Lanek
Theoretical question #2: augmenting Tor's bandwidth ... VIDEO: American Girl on Fox News: "I was running from Georgian troops, I want to thank the Russian troops" Global Research, August 17, 2008 FOx News American Girl on Fox News: "I was running from Georgian troops, I want

Re: e-mail and anonymity

2008-08-17 Thread phobos
On Sun, Aug 17, 2008 at 12:46:35PM +0200, [EMAIL PROTECTED] wrote 0.7K bytes in 24 lines about: : So what good free e-mail webmail account would you recommend for most : practical use and best anonymity ? Not sure about best for anonymity, but many people seem to like http://www.fastmail.fm be

RE: The "de-Tor-iorate Anonymity" talk by Nathan Evans at DEFCON 16

2008-08-17 Thread bev
I can't unsubscribe from this group - help! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roger Dingledine Sent: Sunday, August 17, 2008 2:03 AM To: or-talk@freehaven.net Subject: Re: The "de-Tor-iorate Anonymity" talk by Nathan Evans at DEFCON 16 On F

Re: e-mail and anonymity

2008-08-17 Thread Charles.F
So what good free e-mail webmail account would you recommend for most practical use and best anonymity ? Le 16-août-08 à 22:03, Ringo Kamens a écrit : -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 krishna e bera wrote: Yahoo and Gmail both have degraded versions of webmail available for whe

Re: e-mail and anonymity

2008-08-17 Thread Charles.F
I didn't know about it. I just had a look and it seems too complicated to install. It already took me days to understand what tor is (I am not in computer) and I can't do more. I guess webmail with tor is safe enough, isn't it ? Le 17-août-08 à 11:47, Lexi Pimenidis a écrit : On 16/08/2008, C

route of collision

2008-08-17 Thread Roy Lanek
At Wayne Madsen's [of whom I am not a fan, not to mention the Washington Post] site, waynemadsenreport.com, you can read U.S. May Ease Police Spy Rules More Federal Intelligence Changes Planned By Spencer S. Hsu and Carrie Johnson Washington Post Staff Writers Saturda

Re: e-mail and anonymity

2008-08-17 Thread Lexi Pimenidis
On 16/08/2008, Charles.F <[EMAIL PROTECTED]> wrote: > If one wants to be anonymous when sending an receiving mails, one > should use privoxy and tor on his browser and also disable Java, > Javascript, cookies and so on. Just curious: why don't you use Mixmaster for e-mail privacy? Best Regards,

mixmaster policies (was Re: Update to default exit policy)

2008-08-17 Thread kr
Hi, one question related to the port 465/587 thread. Could it be useful to open at least the ports for mixmaster remailers, capable of submission via TLS, SSL connections or SMTP (2525)? reject private:* # drooper.mixmin.net (banana) accept 88.198.22.131:587 accept 88.198.22.131:2525 accept 88.1