Re: [tor-dev] TOR C# application

2014-12-17 Thread Michael Rogers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, I don't know if it's possible to use Tor as a library, but there are a few Java apps that communicate over Tor by launching a Tor process and using it as a SOCKS proxy. Does that sound like what you're aiming to do? Here's a quick rundown of

Re: [tor-dev] Suggestions for Projects

2014-12-17 Thread Virgil Griffith
If you're into android Orbot always comes to mind. On Tuesday, December 16, 2014, Abhiram Chintangal abhiram.chintan...@gmail.com wrote: Hello, I am a student and I am thinking of getting myself more involved in the tor project over the winter break. Previously, I worked briefly on the

Re: [tor-dev] basket: More eggs in the Guard basket.

2014-12-17 Thread Nick Mathewson
On Tue, Dec 16, 2014 at 9:53 AM, Yawning Angel yawn...@schwanenlied.me wrote: Hi all, For several reasons I've been working on a bit of code that I named basket. It's almost at the point where the brave members of the general public should be aware that it exists as a potential option in

Re: [tor-dev] Internet-wide scanning for bridges

2014-12-17 Thread Sebastian Hahn
Hi there, On 14 Dec 2014, at 20:06, Vlad Tsyrklevich v...@tsyrklevich.net wrote: I'm not against keeping some around, but this warning is unlikely to turn around the thousands that currently match this configuration--hopefully it'll just encourage future bridge operators to use a 'safer'

Re: [tor-dev] Internet-wide scanning for bridges

2014-12-17 Thread Vlad Tsyrklevich
I totally agree with you, the ideal solution is for bridges to be security to by default: Either by getting rid of the ORPort for bridges and requiring the use of PTs, or changing the behavior of 'auto' for ports and having ORPort be set to auto by default. However, these changes don't appear

Re: [tor-dev] basket: More eggs in the Guard basket.

2014-12-17 Thread Yawning Angel
On Wed, 17 Dec 2014 13:51:02 -0500 Nick Mathewson ni...@alum.mit.edu wrote: [snipity] Should the handshake also a signature by Bob of (X|N), and should maybe the shared secret also include a digest of all the other parts of the communication? Hmm, maybe I shouldn't have left bits out, and I

[tor-dev] Hidden service performance

2014-12-17 Thread David Goulet
Hello tor-dev, This email is to detail the work being done on a framework to do performance measurements for hidden service. I'm looking to get some feedback on the whole idea, improvement and help on possible analysis. If this work is not thrown out the window, I'll definitely do a Wiki page for

Re: [tor-dev] Internet-wide scanning for bridges

2014-12-17 Thread David Fifield
On Fri, Dec 12, 2014 at 04:33:05PM -0800, Vlad Tsyrklevich wrote: Hello, while taking a looking at TorCloud I it used static OR and obfs2+obfs3 ports making them trivial to discover by scanning EC2's IP address space. This led me to consider the more general attack of internet-wide scanning to

Re: [tor-dev] Suggestions for Projects

2014-12-17 Thread grarpamp
Are there any projects that are in need of a volunteer? I am well versed in C, Python and Java (Android). Go here and pick random interesting tickets to complete... https://trac.torproject.org/ ___ tor-dev mailing list tor-dev@lists.torproject.org