[tor-talk] Updated Instructions to Install Obfsproxy Bridge on Windows

2012-02-21 Thread Low-Key²
I've updated the previous detailed Linux instructions in the Wiki to include a section that describes how to tweak the TBB with Obfsproxy to run as an Obfuscated Tor Bridge. As a result,I removed the instructions on installing Linux via Wubi. I was planning on adding a section for OS X as well

[tor-talk] bridges: stenography to hide Tor traffic

2012-02-21 Thread proper
>From the FAQ https://trac.torproject.org/projects/tor/wiki/doc/TorFAQ#YoushouldusesteganographytohideTortraffic. "First, in the current network topology, the Tor relays list is public and can be accessed by attackers. An attacker who wants to detect or block anonymous users could always just notic

Re: [tor-talk] Tor users trackable with common proxy?

2012-02-21 Thread proper
> On 02/21/2012 06:48 PM, Andreas Krey wrote: >> On Tue, 21 Feb 2012 14:26:06 +, Daniel .koolfy Faucon wrote: >> ... >>> Checking the software's signatures should ensure that you are not >>> bootstrapping from harcoded malicious fake nodes or looking at the >>> wrong >>> nodes list, and obfspro

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Joe Btfsplk
On 2/21/2012 4:58 PM, Greg Kalitnikoff wrote: Check this out http://privatelee.com/ Thanks. Will have a look. Tor-talk list administrators: Though this isn't church or a bible study, there's really no reason for a list subscriber to berate other subscribers & basically spam the list by pos

[tor-talk] help Tor release 0.2.3.x!

2012-02-21 Thread Jacob Appelbaum
Dear Tor community, We'd like to encourage contribution from the larger Tor community and help to get 0.2.3.x out as a proper Tor release. Often development blocks on a few people and at todays Seattle developer meeting, we've identified that we could use some help! First up - please consider sub

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Greg Kalitnikoff
Check this out http://privatelee.com/ -- Greg ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread tor
On 21/02/12 22:33, Mr Dash Four wrote: >> Because you wont be taken seriously by anyone otherwise. >> > Eh?! Why do you think I care what you, or anybody, thinks? You and your > "low-key" friend are an irrelevance - I know what I saw when I accessed > those two sites earlier today and nothing

Re: [tor-talk] Tor users trackable with common proxy?

2012-02-21 Thread Ondrej Mikle
On 02/21/2012 06:48 PM, Andreas Krey wrote: > On Tue, 21 Feb 2012 14:26:06 +, Daniel .koolfy Faucon wrote: > ... >> Checking the software's signatures should ensure that you are not >> bootstrapping from harcoded malicious fake nodes or looking at the wrong >> nodes list, and obfsproxy makes s

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Mr Dash Four
Mr Dash Four is one of those people who write their letters in all caps using large fonts because they don't really want to hear what we are saying. Like a two year old, he wants his food handed to him on a silver platter. Yeah, as if! You don't really know me, smartarse! __

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Low-Key²
--- On Tue, 2/21/12, Mr Dash Four wrote: > Really?! And who the hell do you think you are, exactly?! > Please enlighten me, and explain why should I provide you > with *any* additional "evidence" at all? Due to the way in which you've been acting, you are no more trustworthy than a fly-by-nig

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread tor
On 21/02/12 21:59, Mr Dash Four wrote: >> I have no reason to believe that you're actually >> seeing that warning unless you provide some evidence. >> > Really?! And who the hell do you think you are, exactly?! Someone who values evidence over ranting. > Please > enlighten me, and explain wh

Re: [tor-talk] tor debian repository for non x86 arch? (arm)

2012-02-21 Thread Peter Palfrader
On Tue, 21 Feb 2012, tagnaq wrote: > > Weasel doesn't have an arm machine to do the builds on, so we don't > > have those packages on deb.tpo. Sorry > > Would you consider building packages for arm if I would donate an arm > device? If we had an armel/armhf box that runs Debian natively I could

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Mr Dash Four
I'd rather figure out exactly what ixquick.com and startpage.com are doing. Is it really so difficult for you to provide us with the names of the browser plugins you used at the time? Do you think I have the word "GOOFY" written across my forehead by any chance?

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Mr Dash Four
Because you wont be taken seriously by anyone otherwise. Eh?! Why do you think I care what you, or anybody, thinks? You and your "low-key" friend are an irrelevance - I know what I saw when I accessed those two sites earlier today and nothing will compel me to access them ever again, or us

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread grarpamp
> I never met someone from the YaCy project. > > and they are reallynice people. Yeah, I heard those yacy guys are serial killin, drug dealin, baby rapin, church burnin, terrorists. Better not use yacy. Johnny's mom's is really nice, she can't code for shit though. On to more useful comparison...

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread David Carlson
On 2/21/2012 2:05 PM, Low-Key² wrote: > > > --- On Tue, 2/21/12, Mr Dash Four wrote: > >> Ask yourself this - why is a search engine site so much >> interested in my own privacy settings? And why is it that >> I've never had any such "privacy-oriented" issues with >> scroogle, ever! if you are

Re: [tor-talk] Tales from the DNSCrypt: Linux Rising

2012-02-21 Thread miniBill
Il 21 febbraio 2012 15:41, Jaromil ha scritto: > > re all, > > what is the difference between DNSCrypt and a simple compination of > ssh and socat? something like: > >  Iclient$ ssh -L 5353:127.0.0.1:5353 server >  Iserver$ socat tcp4-listen:5353,reuseaddr,fork UDP:dns.server:53 >  Iclient# socat

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Mr Dash Four
I have no reason to believe that you're actually seeing that warning unless you provide some evidence. Really?! And who the hell do you think you are, exactly?! Please enlighten me, and explain why should I provide you with *any* additional "evidence" at all? Until I have read your "recom

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread David H. Lipman
From: "Jim" | scroogle.org no longer resolves http://www.betabeat.com/2012/02/21/scroogle-privacy-first-search-engine-shuts-down-for-good http://seoonlinesource.wordpress.com/2012/02/20/scroogle-is-gone/ "Scroogle, the search engine operated by privacy militant and self-appointed Wikipedia

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread tor
On 21/02/12 19:49, Mr Dash Four wrote: >> A lot of sites are incredibly "broken" if javascript is disabled. NoScript >> would be one example of a "privacy plugin" that would thus cause a problem >> if enabled for some sites. It's why I'm curious as to what the plugin was >> that you were usin

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Mr Dash Four
A lot of sites are incredibly "broken" if javascript is disabled. NoScript would be one example of a "privacy plugin" that would thus cause a problem if enabled for some sites. It's why I'm curious as to what the plugin was that you were using. I haven't been using ixquick for very long, and s

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Low-Key²
--- On Tue, 2/21/12, Mr Dash Four wrote: > To put it simply - I am not at all interested in any of > that. > > If a search-engine site is there to present search results, > the last thing on their mind would be what privacy settings > I have on my browser or what "privacy-oriented extensions"

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Low-Key²
--- On Tue, 2/21/12, Mr Dash Four wrote: > Ask yourself this - why is a search engine site so much > interested in my own privacy settings? And why is it that > I've never had any such "privacy-oriented" issues with > scroogle, ever! if you are able to address/answer those two, > then you are i

Re: [tor-talk] Tor users trackable with common proxy?

2012-02-21 Thread Roger Dingledine
On Mon, Feb 20, 2012 at 04:15:37PM +0800, Koh Choon Lin wrote: > I would like to ask for members of this list about the following statement: > > "The authorities in Singapore are understood to have the ability to > track down a person online even if he or she uses anonymizing > facilities such as

Re: [tor-talk] Vidalia & Obsfproxy Bundle?

2012-02-21 Thread Runa A. Sandvik
On Tue, Feb 21, 2012 at 1:33 AM, Low-Key² wrote: > Does anyone know if such a bundle exists or if there are plans to make one?   > The reason I ask is because I know a number of people who would be down to > run an Obfuscated Tor Bridge, but are a bit wary of installing Linux as > they've either

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Mr Dash Four
I guess I'm just a bit confused, as I've not run into any issues or warnings with ixquick.com yet. Were you able to determine what the possibly "problematic" plugin was? To put it simply - I am not at all interested in any of that. If a search-engine site is there to present search resul

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Mr Dash Four
Again, the msg you are seeing may not accurately describe the problem. It does to me! A search engine is interested in my browser privacy settings and whether I use "privacy-oriented browser extensions". It goes on to "advice" me to turn OFF my "privacy-oriented browser extensions" in order t

Re: [tor-talk] Question about hidden services

2012-02-21 Thread Martin Hubbard
If there are multiple servers hosting a hidden service using the same private key and URL, the one that has announced most recently gets the requests. During transitions, there's apparently some network segmentation. At times, different clients can be simultaneously hitting different hosts. But

Re: [tor-talk] tor debian repository for non x86 arch? (arm)

2012-02-21 Thread tagnaq
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 > I suspect tagnaq meant arm, the architecture here - note how he > asked for tor 0.2.3.x packages. Yes, I meant the architecture arm. > Weasel doesn't have an arm machine to do the builds on, so we don't > have those packages on deb.tpo. Sorry Wo

Re: [tor-talk] Question about hidden services

2012-02-21 Thread John Smith
On Tue, Feb 21, 2012 at 7:29 PM, Martin Hubbard wrote: > If there are multiple servers hosting a hidden service using the same > private key and URL, the one that has announced most recently gets the > requests. During transitions, there's apparently some network segmentation. > At times, differen

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Low-Key²
--- On Tue, 2/21/12, Mr Dash Four wrote: > See my previous posts on the subject. I guess I'm just a bit confused, as I've not run into any issues or warnings with ixquick.com yet. Were you able to determine what the possibly "problematic" plugin was?

Re: [tor-talk] Tor users trackable with common proxy?

2012-02-21 Thread Roger Dingledine
On Tue, Feb 21, 2012 at 12:09:56PM +0100, miniBill wrote: > Paranoid mode: on > They intercept the initial bootstrapping and make you connect > to a "fake" tor network composed of malicious nodes only. > Is it feasible? Not feasible (assuming you're using Tor correctly). https://www.torproject.or

Re: [tor-talk] Tor users trackable with common proxy?

2012-02-21 Thread Andreas Krey
On Tue, 21 Feb 2012 14:26:06 +, Daniel .koolfy Faucon wrote: ... > Checking the software's signatures should ensure that you are not > bootstrapping from harcoded malicious fake nodes or looking at the wrong > nodes list, and obfsproxy makes sure there is no recognizable handshake > pattern.

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Moritz Bartl
It is not a perfect solution, but something with roughly the same model as Scroogle (and Google search results): Moxie's GoogleSharing addon. On 21.02.2012 08:25, Jim wrote: > scroogle.org no longer resolves > ___ > tor-talk mailing list > tor-talk@lists

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Mr Dash Four
Scroogle, is/was the best out there - by a mile! Nothing even comes close, unfortunately! What about ixquick.com? See my previous posts on the subject. ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Mr Dash Four
Well, seeks does works fine with SSL, that's how my node is working. Yeah, using some mickey-mouse self-signed certificate - you can't be serious! ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailma

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Joe Btfsplk
On 2/21/2012 9:41 AM, Mr Dash Four wrote: Would be interesting to find out which particular aspect of your configuration is leading to that error message. That is not the issue - the fact that startpage is snooping to see whether I use "privacy-oriented browser extension" should be good-enou

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Moritz Bartl
On 21.02.2012 17:30, Mr Dash Four wrote: >> Well, seeks does works fine with SSL, that's how my node is working. > Yeah, using some mickey-mouse self-signed certificate - you can't be > serious! I think you got the wrong idea. Seeks is not a simple "replacement search engine" with a central search

Re: [tor-talk] Tor users trackable with common proxy?

2012-02-21 Thread Moritz Bartl
On 21.02.2012 12:09, miniBill wrote: > Paranoid mode: on > They intercept the initial bootstrapping and make you connect > to a "fake" tor network composed of malicious nodes only. > Is it feasible? If you have a genuine binary, it contains the keys of the directory authorities and thus it cannot

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Low-Key²
--- On Tue, 2/21/12, Mr Dash Four wrote: > Scroogle, is/was the best out there - by a mile! Nothing even comes close, > unfortunately! What about ixquick.com? ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Joe Btfsplk
On 2/21/2012 8:38 AM, t...@lists.grepular.com wrote: On 21/02/12 14:27, Mr Dash Four wrote: I've started using this instead: https://startpage.com/ It provides Google search results, supports https, works without javascript enabled, seems to be hosted in the Netherlands and they take a good ap

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Mr Dash Four
Would be interesting to find out which particular aspect of your configuration is leading to that error message. That is not the issue - the fact that startpage is snooping to see whether I use "privacy-oriented browser extension" should be good-enough reason for any sane individual out the

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Mr Dash Four
Why did you pick seeks over YaCy? Neither are any good - from what I gather, yacy requires software installed on my machine (yeah, right, why would I want to pollute my machine with some unknown software for the "privilege" of using a bloody search engine?) and seeks isn't any good either,

Re: [tor-talk] Tales from the DNSCrypt: Linux Rising

2012-02-21 Thread Jaromil
re all, On Mon, 20 Feb 2012, pro...@tormail.net wrote: > It's an interesting update and I hope it will widespread along all > public DNS servers. what is the difference between DNSCrypt and a simple compination of ssh and socat? something like: Iclient$ ssh -L 5353:127.0.0.1:5353 server Iser

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Jaromil
On Tue, 21 Feb 2012, Eugen Leitl wrote: > On Tue, Feb 21, 2012 at 12:59:36PM +0100, Okhin wrote: > > > You should rather move to FLOSS and decentralized search engine such as > > seeks (seeks-project.info) or Yacy. > > > > I run a personnal node for seeks for more than a year now, on the > > lat

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Okhin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 21 Feb 2012 14:57:52 +0100 Eugen Leitl wrote: > On Tue, Feb 21, 2012 at 12:59:36PM +0100, Okhin wrote: > > > You should rather move to FLOSS and decentralized search engine > > such as seeks (seeks-project.info) or Yacy. > > > > I run a per

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Okhin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 21 Feb 2012 14:44:48 + Mr Dash Four wrote: > > > Why did you pick seeks over YaCy? > > > Neither are any good - from what I gather, yacy requires software > installed on my machine (yeah, right, why would I want to pollute my > mach

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Eugen Leitl
On Tue, Feb 21, 2012 at 12:59:36PM +0100, Okhin wrote: > You should rather move to FLOSS and decentralized search engine such as > seeks (seeks-project.info) or Yacy. > > I run a personnal node for seeks for more than a year now, on the > latest experimental version, and I do not use any other se

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread M Robinson
I've tried DuckduckGo, It isn't for heavy engine users. It seems like a childrens search engine, and it has a lousy results format format. I don't understand how Ixquick/Startpage can tap Google, yet Google goes out of its way to crush Scroogle, which was by far the best out of what I've found an

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread tor
On 21/02/12 14:27, Mr Dash Four wrote: >> I've started using this instead: https://startpage.com/ >> >> It provides Google search results, supports https, works without >> javascript enabled, seems to be hosted in the Netherlands and they take >> a good approach to privacy: >> >> https://startpage

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Mr Dash Four
I've tried DuckduckGo, It isn't for heavy engine users. It seems like a childrens search engine, and it has a lousy results format format. I don't understand how Ixquick/Startpage can tap Google, yet Google goes out of its way to crush Scroogle, which was by far the best out of what I've found

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Mr Dash Four
I've started using this instead: https://startpage.com/ It provides Google search results, supports https, works without javascript enabled, seems to be hosted in the Netherlands and they take a good approach to privacy: https://startpage.com/eng/protect-privacy.html "You may be using a pri

Re: [tor-talk] Tor users trackable with common proxy?

2012-02-21 Thread Daniel ".koolfy" Faucon
On 21/02/2012 12:09, miniBill wrote: > Il 21 febbraio 2012 09:09, Andrew Lewman ha scritto: >> On Mon, 20 Feb 2012 16:15:37 +0800 >> Koh Choon Lin <2choon...@gmail.com> wrote: >>> "The authorities in Singapore are understood to have the ability to >>> track down a person online even if he or she u

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Okhin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 21 Feb 2012 11:50:33 +0100 Marlon wrote: > Startpage and DuckDuckGo. > > Give them a try :) > You should rather move to FLOSS and decentralized search engine such as seeks (seeks-project.info) or Yacy. I run a personnal node for seeks for

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Mirko
DuckDuckGo is running a TOR service at http://3g2upl4pq6kufc4m.onion Marlon schrieb am 21.02.2012 11:50:33 > Startpage and DuckDuckGo. > > Give them a try :) > > 2012/2/21 Jim > >> scroogle.org no longer resolves ___ tor-talk mailing list tor-talk@l

Re: [tor-talk] Tor users trackable with common proxy?

2012-02-21 Thread miniBill
Il 21 febbraio 2012 09:09, Andrew Lewman ha scritto: > On Mon, 20 Feb 2012 16:15:37 +0800 > Koh Choon Lin <2choon...@gmail.com> wrote: >> "The authorities in Singapore are understood to have the ability to >> track down a person online even if he or she uses anonymizing >> facilities such as Virtu

[tor-talk] Question about hidden services

2012-02-21 Thread John Smith
Hey all, I was unable to find this question in the documentation, so I'll ask it here. I hope it's the right place. What happens when two servers running TOR provide a hidden service using the same private key? Which one will get the requests for that service? Will it be distributed randomly, or

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread Marlon
Startpage and DuckDuckGo. Give them a try :) 2012/2/21 Jim > scroogle.org no longer resolves > ___ > tor-talk mailing list > tor-talk@lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk > _

Re: [tor-talk] What is the new signature of new TBB?

2012-02-21 Thread eliaz
I just went through this. You have to import Erin's key into your certificate handler (Kleopatra or whatever), and then verify the browser .gz.asc file against that. HTH eliaz On 2/20/2012 11:55 AM, James Brown wrote: > Hello, friends! > > I have got a new TBB file > tor-browser-gnu-linux-x86_64-

Re: [tor-talk] Tails and a way to permanently install it on a removable media

2012-02-21 Thread anonym
02/20/2012 09:52 PM, Ian Strange: >> On Mon, Feb 20, 2012 at 10:57 PM, Runa A. Sandvik > >> >> I think this just makes a live Tail USB not an installed one. > > Yep. > > According to > https://tails.boum.org/doc/encryption_and_privacy/your_data_wont_be_saved_unless_explicitely_asked/index.en.htm

Re: [tor-talk] Scroogle is No More?

2012-02-21 Thread tor
On 21/02/12 07:25, Jim wrote: > scroogle.org no longer resolves Yes, it's been like that for a few days, and a few days prior to that it was just throwing error messages about Google blocking them. I've started using this instead: https://startpage.com/ It provides Google search results, suppor

Re: [tor-talk] Tor users trackable with common proxy?

2012-02-21 Thread Andrew Lewman
On Mon, 20 Feb 2012 16:15:37 +0800 Koh Choon Lin <2choon...@gmail.com> wrote: > "The authorities in Singapore are understood to have the ability to > track down a person online even if he or she uses anonymizing > facilities such as Virtual Private Networking, TOR onion routing, or > other forms of