Re: Bigger Thinking [was: Tor Project 2008 Tax Return]

2010-08-21 Thread Roger Dingledine
On Sat, Aug 21, 2010 at 10:53:48PM -0600, Jim wrote: > I connect to the Internet with dialup. I have been successfully using > Tor clients for 4+ years. One of the issues with using Tor over a slow > connection is the amount of time it takes to update the information > about the network whe

Re: Bigger Thinking [was: Tor Project 2008 Tax Return]

2010-08-21 Thread Jim
Mike Perry wrote: Actually there are several large-userbase companies that want to include Tor by default in their product, either as a client, a relay, or a bridge. Unfortunately, the only answer we have for them in the immediate term is "For the love of goddess don't do that, you'll destroy To

Re: https proxy [was polipo]

2010-08-21 Thread grarpamp
> > https://anonymous-proxy-servers.net/en/anontest > As I understand it, Polipo can't scrub the headers of an HTTPS request, Nothing in the open source field can do so yet afaik. To do it, a shim needs to be coded and placed between the application and Tor. user <-> browser <-> [optional tool]

Re: polipo

2010-08-21 Thread F. Fox
For the most part, anything involving HTTPS, needs to be taken care of in the browser itself. Properly-configured extensions help a lot here. Also, that adds an extra layer of protection onto normal HTTP stuff, too. The more, the merrier... F. Fox On 8/21/10, Robert Ransom wrote: (snip) As

Re: Tor + SELinux sandbox = leak proof without VM overhead?

2010-08-21 Thread F. Fox
It certainly sounds interesting. Full VM environments not only cause system resource overhead, but maintenance overhead, too (that's always been my biggest gripe about them). F. Fox On 08/21/2010 05:55 PM, Gregory Maxwell wrote: (snip) Has anyone looked into using the SELINUX sandbox (http://

Tor + SELinux sandbox = leak proof without VM overhead?

2010-08-21 Thread Gregory Maxwell
Greetings, I've searched my copy of the lists and can't find any discussion of this. If there has been, please direct me to it. I think it's obvious that the best way of using tor is running your torrified apps in a VM which can only access the outside world via TOR. This provides the highest prot

Re: Tor Project 2008 Tax Return Now Online

2010-08-21 Thread grarpamp
On 8/19/10, Seth David Schoen wrote: Exactly! Even if any particular anon system was comprimiseable, why would any comprimising organization [save the full disclosure types] wish to play their trump card in public??? If any anon system is comprimisable, far better to listen in, under the convenie

Re: Bigger Thinking [was: Tor Project 2008 Tax Return]

2010-08-21 Thread Julie C
On Sat, Aug 21, 2010 at 4:13 AM, Mike Perry wrote: > > Actually there are several large-userbase companies that want to > include Tor by default in their product, either as a client, a relay, > or a bridge. Unfortunately, the only answer we have for them in the > immediate term is "For the love

Re: Bigger Thinking [was: Tor Project 2008 Tax Return]

2010-08-21 Thread Mike Perry
Thus spake Al MailingList (alpal.mailingl...@gmail.com): > > And what about Microsoft? I think someone should be targeting/lobbying them > > to include a Tor client and default bridge relay in every version of Windows > > 8 or 9. Find out what it would take to get them to do this, > > Sorry, what

Re: Bigger Thinking [was: Tor Project 2008 Tax Return]

2010-08-21 Thread Al MailingList
> And what about Microsoft? I think someone should be targeting/lobbying them > to include a Tor client and default bridge relay in every version of Windows > 8 or 9. Find out what it would take to get them to do this, Sorry, what's in this for Microsoft? Being a good corporate citizen? >From a bu