Re: [tor-talk] TBB as a deb (was Re: Tor 0.2.4.8-alpha is out)

2013-01-15 Thread Roger Dingledine
On Tue, Jan 15, 2013 at 07:28:34PM -0500, Micah Lee wrote: > Are there plans to release the Tor Browser Bundle as a package in Tor's > official repos, e.g. http://deb.torproject.org/torproject.org/? > > This would make keeping an up-to-date TBB much more convenient. It sure would make things more

Re: [tor-talk] Tor 0.2.4.8-alpha is out

2013-01-15 Thread Micah Lee
Are there plans to release the Tor Browser Bundle as a package in Tor's official repos, e.g. http://deb.torproject.org/torproject.org/? This would make keeping an up-to-date TBB much more convenient. On 01/14/2013 08:37 PM, Roger Dingledine wrote: > Tor 0.2.4.8-alpha introduces directory guards t

Re: [tor-talk] Mail service requires "java script enabled"

2013-01-15 Thread Micah Lee
On 01/15/2013 06:57 PM, andr...@fastmail.fm wrote: > How do I enable javascipt while using Tor BB? > > Is it an addon? Javascript should actually already be enabled. TBB comes with an add-on called NoScript that blocks javascript except for for specific sites, but it's default setting is to allow

Re: [tor-talk] Stories of pwnage

2013-01-15 Thread Joe Btfsplk
Wow. I don't understand over half of that, so it must be good (or really bad news?) - or something. Just so I'm straight, which industry is failing? The computer security industry? On 1/15/2013 4:28 AM, Jaromil wrote: Apologies for cross-posting, however this list might be directly intereste

Re: [tor-talk] Mail service requires "java script enabled"

2013-01-15 Thread andre76
How do I enable javascipt while using Tor BB? Is it an addon? . On Tue, Jan 15, 2013, at 10:37 PM, Micah Lee wrote: > On 01/15/2013 12:14 AM, Joe Btfsplk wrote: > > Never say never - but I don't know that the real risk of js is leaking > > identity so much as someone running malicious code on

Re: [tor-talk] Mail service requires "java script enabled"

2013-01-15 Thread andre76
Okthat's gives me some confidence. Thanks for the help. On Tue, Jan 15, 2013, at 10:37 PM, Micah Lee wrote: > On 01/15/2013 12:14 AM, Joe Btfsplk wrote: > > Never say never - but I don't know that the real risk of js is leaking > > identity so much as someone running malicious code on sites

Re: [tor-talk] Project idea: TorBox

2013-01-15 Thread adrelanos
Thanks for suggesting this. What you suggest is impossible. Reasons are below. > *The TorBox* There was a project with that name: https://trac.torproject.org/projects/tor/wiki/doc/TorBOX It is now called Whonix. For this reasons and also for trademark reasons please don't use this as name. > *W

Re: [tor-talk] Mail service requires "java script enabled"

2013-01-15 Thread Joe Btfsplk
Something to check into: A LONG time ago, some email providers had a "simple" or "basic" view / page, to login. It was a separate URL, that may or may not have required js, IIRC. For gmail, the "basic" login page didn't require html, either. That may be no more, but at least you could ask -

Re: [tor-talk] Mail service requires "java script enabled"

2013-01-15 Thread Micah Lee
On 01/15/2013 12:14 AM, Joe Btfsplk wrote: > Never say never - but I don't know that the real risk of js is leaking > identity so much as someone running malicious code on sites you don't > know or shouldn't trust. There isn't much risk of identity leaking by enabling javascript in your browser. T

[tor-talk] Tor 0.2.4.9-alpha is out

2013-01-15 Thread Roger Dingledine
Tor 0.2.4.9-alpha provides a quick fix to make the new ntor handshake work more robustly. https://www.torproject.org/download Changes in version 0.2.4.9-alpha - 2013-01-15 o Major bugfixes: - Fix backward compatibility logic when receiving an embedded ntor handshake tunneled in a CREA

Re: [tor-talk] Gmail and Bitcoin? [OT]

2013-01-15 Thread grarpamp
>> With sacrifices, you are giving up those funds forever. You can't >> get them back and put them towards a new nym when you decide >> it's time to expire the old one. > > That's rather the point - you have to impose some cost to getting blacklisted. Sure, if you fail to perform and get deleted a

Re: [tor-talk] Mail service requires "java script enabled"

2013-01-15 Thread Zebro kojos
Java + Tor = bad Javascript in Tor browser bundle + Tor = probably OK. Ideally, you won't be using javascript, but as others have said, many mail services require javascript for more interactive and fancy UIs, and that's OK. What you *don't* want running with Tor is Java. Java is a virtual machin

Re: [tor-talk] Mail service requires "java script enabled"

2013-01-15 Thread andre76
.The problem site is Yahoo.com. It wants java script to be running. Don't know what to do. On Tue, Jan 15, 2013, at 06:14 AM, Joe Btfsplk wrote: > His subj. said java script, but in the message he said Java. Not many, > if any web mails REQUIRE java. But many sites, incl. many web mails >

Re: [tor-talk] Project idea: TorBox

2013-01-15 Thread Jaromil
On Tue, 15 Jan 2013, Maxim Kammerer wrote: > On Tue, Jan 15, 2013 at 12:41 AM, Roger Dingledine wrote: > > See > > https://trac.torproject.org/projects/tor/wiki/doc/Torouter > > http://freedomboxfoundation.org/ > > As usual, one guy who knows what he is doing does something better and > faster,

[tor-talk] Stories of pwnage

2013-01-15 Thread Jaromil
Apologies for cross-posting, however this list might be directly interested in this story since the hackers who break in our servers made extensive use of Tor. - re all, as some might have noticed or read, Dyne.org has been hacked and lulled a few weeks ago by the crewz at Everyone Gets Own