[tor-talk] sock proxy port

2012-11-09 Thread jiang song
hi, I think sock proxy port should be 9050 but with TBB, I notice that the socket port changes every time I started TBB, like 49223, 58871 what is the reason for this? and is it possible to make it constant? ___ tor-talk mailing list

[tor-talk] Is using JavaScript with Tor browser safe?

2012-11-09 Thread Nam Su
I saw some Internet pages. In there, they can know my ip with JavaScript in spite of using Tor. I can't believe this but I am worried about this. Is it true? ___ tor-talk mailing list tor-talk@lists.torproject.org

[tor-talk] check.torproject.org

2012-11-09 Thread The Doctor
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Did something go pear-shaped with check.torproject.org? I've not been able to get it to respond (through the TBB or otherwise) for the past day or so. - -- The Doctor [412/724/301/703] [ZS (MED)] Developer, Project Byzantium:

Re: [tor-talk] sock proxy port

2012-11-09 Thread Damian Johnson
Hi Jiang. See SocksPort on... https://www.torproject.org/docs/tor-manual.html.en The browser bundle sets it to 'auto' to avoid port conflicts. You can set it to a static value in your torrc. That said, if you're still trying to script against tor then I'd suggest not using the browser bundle.

Re: [tor-talk] Is using JavaScript with Tor browser safe?

2012-11-09 Thread Julian Yon
On Fri, 9 Nov 2012 23:19:57 +0900 Nam Su namfree...@gmail.com wrote: I saw some Internet pages. In there, they can know my ip with JavaScript in spite of using Tor. I can't believe this but I am worried about this. Is it true? This question was answered when you asked 2 days ago. Please

Re: [tor-talk] sock proxy port

2012-11-09 Thread Roger Dingledine
On Fri, Nov 09, 2012 at 01:45:22PM +0100, jiang song wrote: hi, I think sock proxy port should be 9050 but with TBB, I notice that the socket port changes every time I started TBB, like 49223, 58871 what is the reason for this? and is it possible to make it constant?

Re: [tor-talk] Is using JavaScript with Tor browser safe?

2012-11-09 Thread Joe Btfsplk
On 11/9/2012 8:19 AM, Nam Su wrote: I saw some Internet pages. In there, they can know my ip with JavaScript in spite of using Tor. I can't believe this but I am worried about this. Is it true? Short answer is no, if you don't change a bunch of default settings in TBB, or don't use addons /

Re: [tor-talk] check.torproject.org

2012-11-09 Thread Joe Btfsplk
On 11/9/2012 9:49 AM, The Doctor wrote: Did something go pear-shaped with check.torproject.org? I've not been able to get it to respond (through the TBB or otherwise) for the past day or so. It's down for me too. You could use another What's my IP lookup site, that gives name / location of

Re: [tor-talk] check.torproject.org

2012-11-09 Thread TorOp
Same here, but it just now responded. On 11/9/2012 10:49 AM, The Doctor wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Did something go pear-shaped with check.torproject.org? I've not been able to get it to respond (through the TBB or otherwise) for the past day or so.

Re: [tor-talk] check.torproject.org

2012-11-09 Thread Roger Dingledine
On Fri, Nov 09, 2012 at 01:08:15PM -0500, TorOp wrote: Same here, but it just now responded. Yes. Apparently it doesn't start on reboot. Also, it's old and buggy. We're looking into ways to improve it, but all the Tor developers are distracted by other things, so it keeps falling out of the

Re: [tor-talk] check.torproject.org

2012-11-09 Thread Greg Norcie
Working for me. -- Greg Norcie (g...@norcie.com) GPG key: 0x1B873635 On 11/9/12 12:38 PM, Joe Btfsplk wrote: On 11/9/2012 9:49 AM, The Doctor wrote: Did something go pear-shaped with check.torproject.org? I've not been able to get it to respond (through the TBB or otherwise) for the past

Re: [tor-talk] check.torproject.org

2012-11-09 Thread Simon Brereton
Can I help? What would you need? On Nov 9, 2012 1:55 PM, Roger Dingledine a...@mit.edu wrote: On Fri, Nov 09, 2012 at 01:08:15PM -0500, TorOp wrote: Same here, but it just now responded. Yes. Apparently it doesn't start on reboot. Also, it's old and buggy. We're looking into ways to

Re: [tor-talk] check.torproject.org

2012-11-09 Thread Markus Reichelt
* The Doctor dr...@virtadpt.net wrote: Did something go pear-shaped with check.torproject.org? I've not been able to get it to respond (through the TBB or otherwise) for the past day or so. It just works for me. Does https://check.extc.org/ work for you? -- Tahoe-LAFS - You see this name,

Re: [tor-talk] sock proxy port

2012-11-09 Thread Roger Dingledine
On Fri, Nov 09, 2012 at 01:27:03PM -0600, Joe Btfsplk wrote: https://www.torproject.org/docs/faq#TBBSocksPort That article mentions OS X / Linux, but I don't know that the issue of Tor using other random ports (in the FAQ) does NOT apply also to Windows? The Windows TBB doesn't set the

Re: [tor-talk] check.torproject.org

2012-11-09 Thread adrelanos
Become a torcheck developer. Help with these tickets: https://trac.torproject.org/projects/tor/query?status=acceptedstatus=assignedstatus=newstatus=reopenedcomponent=Tor+Checkorder=prioritycol=idcol=summarycol=typecol=statuscol=prioritycol=milestonecol=component Simon Brereton: Can I help?

[tor-talk] Mapaddress wildcarding (*)

2012-11-09 Thread grarpamp
Been using the controller form of this since it was fixed. Haven't had a chance to check the torrc form and related observations. Just saying thanks for implementing it is all :) ___ tor-talk mailing list tor-talk@lists.torproject.org

[tor-talk] Unsigned Mac OS X binary for TorBrowser

2012-11-09 Thread Matthew Fisch
The installer can be verified with PGP using the published signature and GPG or PGP software. This however, is beyond the technical prowess of the vast majority of Mac OS X users of the torbrowser bundle. TorProject should be registered as an Apple software developer, and the binary should be

[tor-talk] misconfigured mailing list (mailman software) for torproject discloses passwords in plaintext (stores too?)

2012-11-09 Thread Matthew Fisch
Upon signing up for the mailing list on the list server, my password was emailed to me in plaintext. In the year 2012 this is extremely bad security practice. At the very least the sign-up page should warn users to make the password unique. The password may also be stored in reverseable

Re: [tor-talk] Unsigned Mac OS X binary for TorBrowser

2012-11-09 Thread Roger Dingledine
On Fri, Nov 09, 2012 at 06:05:58PM -0500, Matthew Fisch wrote: TorProject should be registered as an Apple software developer, and the binary should be signed, both to increase credibility of the torproject and the safety of users. I agree with you about the 'safety of users' side. But I'm not

Re: [tor-talk] misconfigured mailing list (mailman software) for torproject discloses passwords in plaintext (stores too?)

2012-11-09 Thread Roger Dingledine
On Fri, Nov 09, 2012 at 06:09:36PM -0500, Matthew Fisch wrote: I used a unique random password for this mailing list, I'm going to guess however a significant portion of the mailing list either uses this password in other locations, a significant subset of them probably can't trust their mailbox

Re: [tor-talk] Unsigned Mac OS X binary for TorBrowser

2012-11-09 Thread Jacob Appelbaum
Roger Dingledine: On Fri, Nov 09, 2012 at 06:05:58PM -0500, Matthew Fisch wrote: TorProject should be registered as an Apple software developer, and the binary should be signed, both to increase credibility of the torproject and the safety of users. I agree with you about the 'safety of

Re: [tor-talk] Unsigned Mac OS X binary for TorBrowser

2012-11-09 Thread Greg Norcie
I guess it comes down to risk calculus: Which has a worse outcome: training users to ignore security warning from OSX, or the chilling effects an Apple NDA could have on the project. (I don't pretend to know the answer myself.) -- Greg Norcie (g...@norcie.com) GPG key: 0x1B873635 On 11/9/12

Re: [tor-talk] Unsigned Mac OS X binary for TorBrowser

2012-11-09 Thread Jacob Appelbaum
Greg Norcie: I guess it comes down to risk calculus: Which has a worse outcome: training users to ignore security warning from OSX, or the chilling effects an Apple NDA could have on the project. (I don't pretend to know the answer myself.) I think the answer is near use the security

Re: [tor-talk] misconfigured mailing list (mailman software) for torproject discloses passwords in plaintext (stores too?)

2012-11-09 Thread andrew
On Fri, Nov 09, 2012 at 06:09:36PM -0500, mfi...@mfisch.com wrote 0.7K bytes in 16 lines about: : Upon signing up for the mailing list on the list server, my password was emailed to me in plaintext. In the year 2012 this is extremely bad security practice. At the very least the sign-up page

Re: [tor-talk] check.torproject.org

2012-11-09 Thread andrew
On Fri, Nov 09, 2012 at 10:49:39AM -0500, dr...@virtadpt.net wrote 0.8K bytes in 28 lines about: : Did something go pear-shaped with check.torproject.org? I've not been : able to get it to respond (through the TBB or otherwise) for the past : day or so. Yes. It comes and goes. Something yet to

Re: [tor-talk] Unsigned Mac OS X binary for TorBrowser

2012-11-09 Thread andrew
On Fri, Nov 09, 2012 at 06:05:58PM -0500, mfi...@mfisch.com wrote 1.0K bytes in 18 lines about: : TorProject should be registered as an Apple software developer, and the binary should be signed, both to increase credibility of the torproject and the safety of users. No. The last time we

Re: [tor-talk] check.torproject.org

2012-11-09 Thread Peter Tonoli
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I'm more than happy to help as well, however, how does that fix the issue of torcheck not starting on reboot? On 10/11/12 7:37 AM, adrelanos wrote: Become a torcheck developer. Help with these tickets:

Re: [tor-talk] check.torproject.org

2012-11-09 Thread andrew
On Sat, Nov 10, 2012 at 12:15:08PM +1100, peter+...@metaverse.org wrote 1.4K bytes in 41 lines about: : I'm more than happy to help as well, however, how does that fix the : issue of torcheck not starting on reboot? the check wsgi script starts with apache just fine. The issue is tordnsel

Re: [tor-talk] Is using JavaScript with Tor browser safe?

2012-11-09 Thread andrew
On Fri, Nov 09, 2012 at 11:19:57PM +0900, namfree...@gmail.com wrote 0.3K bytes in 9 lines about: : I saw some Internet pages. In there, they can know my ip with JavaScript in spite of using Tor. : I can't believe this but I am worried about this.

Re: [tor-talk] Orbot blocks internet connection when off wifi (issues when on mobile data network only)

2012-11-09 Thread Mike Perry
Thus spake Pete K (asdp...@gmail.com): Hi I have a strange Orbot issue that has puzzled me for some weeks. Orbot while on my wifi network works with most of my apps. But when I am off my wifi network (on my mobile data) my browser and apps (facebook, Pandora, internet browsing) on my Galaxy

Re: [tor-talk] Orbot blocks internet connection when off wifi (issues when on mobile data network only)

2012-11-09 Thread Pete K
I'm 3G. I'll read the thread On Nov 9, 2012 9:41 PM, Mike Perry mikepe...@torproject.org wrote: Thus spake Pete K (asdp...@gmail.com): Hi I have a strange Orbot issue that has puzzled me for some weeks. Orbot while on my wifi network works with most of my apps. But when I am off my wifi