Re: [tor-talk] large increase in .onion domains

2016-02-18 Thread Collin Anderson
Last time there was such a large rate of growth in the Tor network, wasn't it the result of a botnet? On Thu, Feb 18, 2016 at 12:15 PM, Nathaniel Suchy wrote: > Could new people be using Onionchat/Torchat I can't remember the name. But > new addresses are generated for each

Re: [tor-talk] Question about something said about Tor in the Der Spiegel data dump

2014-12-29 Thread Collin Anderson
I think it means private bridges. On Mon, Dec 29, 2014 at 7:57 AM, Cypher cyp...@cpunk.us wrote: On 12/29/2014 09:52 AM, Lars Luthman wrote: On Mon, 2014-12-29 at 09:11 -0600, Cypher wrote: So I'm looking through the Der Spiegel data dump and noticed the following statement on document

Re: [tor-talk] Tor and solidarity against online harassment

2014-12-11 Thread Collin Anderson
On Thu, Dec 11, 2014 at 5:33 PM, Soul Plane soulplan...@gmail.com wrote: I think if you have any ideals you're going to end up harassed at some point. If a community is going to be subject to harassment for its positions, then there is a reciprocal need for colleagues to support other members

Re: [tor-talk] Non-free country law preventing Tor from getting donations

2014-06-14 Thread Collin Anderson
On Sat, Jun 14, 2014 at 10:07 AM, Joe Btfsplk joebtfs...@gmx.com wrote: I'm not a legal or embargo rules expert, but I wonder if an embargoed country or individuals in it, giving money to a non-profit for which they receive nothing valuable, or that benefits the country financially,

Re: [tor-talk] Tor companies

2013-09-23 Thread Collin Anderson
On Mon, Sep 23, 2013 at 4:27 PM, Roger Dingledine a...@mit.edu wrote: I don't think there's any such thing as the Tor Solutions Group. The origin of EPIC's FOIA on Tor seems to be largely based on BBG promotional material. I suspect the origin of 'Tor Solutions Group' in the request was this

Re: [tor-talk] Many more Tor users in the past week?

2013-09-03 Thread Collin Anderson
On Tue, Sep 3, 2013 at 9:39 PM, mirimir miri...@riseup.net wrote: I wonder what it might mean. I don't believe much, Syria's increase was relatively marginal and potentially related to normal trends of weekly or holiday use. For the most party, suspect countries have increased orders of

Re: [tor-talk] Iranian users cannot download Orbot from Google play store

2013-09-02 Thread Collin Anderson
It seems I was wrong about the initial request for the apk being HTTPS, however, this is a general issue with the Play Store and not Orbot specific I believe. Here is the transaction in question. GET

Re: [tor-talk] Iranian users cannot download Orbot from Google play store

2013-09-02 Thread Collin Anderson
Freitas nat...@freitas.net wrote: Collin Anderson col...@averysmallbird.com wrote: It seems I was wrong about the initial request for the apk being HTTPS, however, this is a general issue with the Play Store and not Orbot specific I believe. Here is the transaction in question. GET

Re: [tor-talk] Many more Tor users in the past week?

2013-08-30 Thread Collin Anderson
In every case the growth begins on the 19th/20th and the rate seems is susceptible to the local weekend. On Fri, Aug 30, 2013 at 12:41 AM, Griffin Boyce grif...@cryptolab.netwrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/30/2013 12:16 AM, Runa A. Sandvik wrote: Hm, there are

Re: [tor-talk] Many more Tor users in the past week?

2013-08-30 Thread Collin Anderson
Hi Mike, On Fri, Aug 30, 2013 at 3:14 AM, Mike Perry mikepe...@torproject.orgwrote: Dude I love math and whatnot. Maybe science too, but this isn't exactly a controlled experiment. So whatnot it is, then! (Also plus one to you Collin, for being awesome). Can someone with more free time than

Re: [tor-talk] Tor relay activity from Antarctica

2013-08-29 Thread Collin Anderson
MaxMind, the database that powers the location tracker is far from perfect and will accept IP prefix registration information blindly. For example on my throttling work I found Iranian hosts with orders of magnitude faster connections than anything else, only to realize they were actually web

Re: [tor-talk] Tor and Financial Transparency

2013-08-29 Thread Collin Anderson
Hi Juan, On Thu, Aug 29, 2013 at 2:46 PM, Juan Garofalo juan@gmail.com wrote: You seriously think people are going to believe that? I mean the bit parts of the US and Swedish Governments...want to see strong privacy and anonymity exist on the Internet So, this is

Re: [tor-talk] Many more Tor users in the past week?

2013-08-29 Thread Collin Anderson
Firstly congratulations Tor; secondly this seems pretty solvable with math and what not. I downloaded the direct connecting users csv and created a spreadsheet between the start of the month and the end. It seems that it was the confluence of many states increasing their censorship of the

Re: [tor-talk] News from Iran

2012-10-02 Thread Collin Anderson
wrote: We wanted to block YouTube, and Gmail was also blocked, which was involuntary. (Iran's telecommunications ministry committee) http://www.bbc.com/news/technology-19784409 Karsten N. On 10/01/2012 10:06 AM, Collin Anderson wrote: Just a notice, it appears that the rules blocking SSL

Re: [tor-talk] News from Iran

2012-10-01 Thread Collin Anderson
Just a notice, it appears that the rules blocking SSL to the IPs in Google/Gmail's DNS round robin have been removed for the two international gateways, outages are still occurring because a few of the local ISPs decided to get clever and filter it themselves. On Mon, Sep 24, 2012 at 6:29 AM,

Re: [tor-talk] News from Iran

2012-09-23 Thread Collin Anderson
To be historically accurate, Youtube has been blocked in Iran for at least three years. Last week, I had compiled a list of open HTTP proxies within country, and iterating requests for Google, Gmail, and Youtube now, everything appears to be the way they have been for some time. Somewhat

Re: [tor-talk] News from Iran

2012-09-23 Thread Collin Anderson
I spoke too soon, my host that routes through the DCI (AS12880) is unable to access Google sites through SSL. HTTP seems to still work though. On Sun, Sep 23, 2012 at 9:04 PM, Chris Smart csma...@cogeco.ca wrote: They won't be online much after the EMP :)

Re: [tor-talk] News from Iran

2012-09-23 Thread Collin Anderson
Apologies for flooding, Pastebin: http://pastebin.com/xbeQcVNa On Sun, Sep 23, 2012 at 9:39 PM, Collin Anderson col...@averysmallbird.comwrote: I spoke too soon, my host that routes through the DCI (AS12880) is unable to access Google sites through SSL. HTTP seems to still work though

Re: [tor-talk] TorBirdy suggestion: block subject header when encrypting email

2012-08-31 Thread Collin Anderson
On Fri, Aug 31, 2012 at 9:32 PM, Shew shew09...@rambler.ru wrote: However, Enigmail does not block or even warn the user if they are sending an encrypted email with something in the subject header. Yes, I agree that is bad policy, however, TorBirdy is not Enigmail and neither require each

Re: [tor-talk] 'Iran plans to unplug the Internet, launch its own clean alternative'

2012-04-10 Thread Collin Anderson
This latest 'Iran is going to disconnect the Internet' paroxysm originated from a year-old April Fools joke that was resubmitted to a popular social media aggregator last week. The meme exploded across Persian-language blogs within the day. Not only is it not posturing, it is factually incorrect.

Re: [tor-talk] Cannot finish handshake with directory server (Kazakhstan)

2012-02-28 Thread Collin Anderson
For Kazakhstan specifically, I don't know which company they use, or maybe they're building their own like Iran. While it is important in being good stewards of the Internet to recognize where Western companies are facilitating the repression of speech, there are other actors in this space

Re: [tor-talk] Sonic Firewall, Iran related?

2012-02-13 Thread Collin Anderson
Malaysia or Singapore? On Mon, Feb 13, 2012 at 1:32 PM, Nathan Freitas nat...@freitas.net wrote: I have been in touch with an Orbot user at a university somewhere in a relatively free country in Asia, who just a week or so ago found that it no longer worked for him. He was unable to connect

Re: [tor-talk] Sonic Firewall, Iran related?

2012-02-13 Thread Collin Anderson
Nathan, I see, and so on Android, where the CA was not installed, it was throwing the proper error perhaps? If the SonicWall was proxying SSL with its own CA, wouldn't all HTTPS pages be broken? More narrowly, if it was interfering with suspicious/aberrant traffic, wouldn't Tor die with an

Re: [tor-talk] How to make 100.000 bridge?

2012-01-13 Thread Collin Anderson
On Fri, Jan 13, 2012 at 12:26 PM, Runa A. Sandvik runa.sand...@gmail.comwrote: Or just https://cloud.torproject.org/ Runa, could you speak to the expectations of the bridge strategy regarding the stability and lifespan of nodes? More specifically, to ensure a healthy and stable network, how

Re: [tor-talk] Implement JSONP interface for check.torproject.org

2011-11-06 Thread Collin Anderson
Tor would not be validating the nature or security of the hosted site, rather the JSON would be confirming attributes of the visitor. I cannot imagine many scenarios where a malicious party stands to benefit from forging these credentials -- or for that matter a manner where they could not fake a

Re: [tor-talk] Tor files

2011-10-01 Thread Collin Anderson
Correct, PPTP VPNs have been blocked for the past four days. People have reported issues with Tor to me, however, I was able to connect from a machine inside the country just fine. Aaron's suggestion of gettor is the best approach, please don't trust any other methods of retrieving files. Best of

Re: [tor-talk] Dutch CA issues fake *.torproject.org cert (among many others)

2011-09-02 Thread Collin Anderson
According to a number of bloggers(1), torproject.org was include among those domains targeted in the certificate breach. In at least the case of Google, these certificates have been offered to Iranian Internet users by a number of ISPs, in a number of city. Risk is a product of situation, and if

Re: [tor-talk] Tor Usage Statistics for Iran

2011-08-31 Thread Collin Anderson
Joe - I may be of some help, as I am working on an ongoing project tracking the methods and behaviors of Iranian circumvention tool users. Between May and August, I independently noticed something of a similar trajectory of adoption numbers by Iranian users. What I've found in part is there are a

Re: [tor-talk] Hijacking Advertising to give a Tor Exit node economic sustainability?

2011-08-06 Thread Collin Anderson
For whatever it's worth, this seems to be a common model for a number of free VPN and Glype-style Web-based providers, who cater to clients attempting to get around content filtering. I've been interested in the mechanics and economics of the approach, but haven't yet had time to do any