[tor-talk] Tor Browser Bundle update mechanism for Unix

2016-08-25 Thread anonymous . coward
Dear list, can someone explain how the TBB update mechanism works precisely with Unix operating systems? Especially I´d like to know, does it use a shell script for updating the TBB? If yes, will the shell script be downloaded first or is it already existing? Is the binary Browser/updater

[tor-talk] Algorithm that chooses exit nodes

2016-08-21 Thread anonymous . coward
Dear fellows, I´d like to know, what algorithm does TOR use to chose an exit node? What I find strange is, I always get an exit node from the same region on this planet. I never had an exit node, say from Russia or Hong Kong or Japan, but always from the same region. This algorithm does not s

[tor-talk] Bitmessage still alive?

2016-08-19 Thread anonymous . coward
Hello, is Bitmessage still developed? If I remember correctly, there haven´t been updates for some years? Thanks -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

[tor-talk] Relais only within TOR

2016-08-19 Thread anonymous . coward
Good day evil people ;-) I want to help strengthen TOR by using tor as a relais, but only within TOR, thus no exit relais. Currently I start TOR using Vidalia. The TOR process that is running looks like this: /usr/bin/tor -f /home/foobar/.vidalia/torrc ControlPort 9051 __OwningControllerProces

[tor-talk] OT: Bitmessage

2016-01-29 Thread anonymous coward
Good day (again), what do you think about Bitmessage? Could it be, Bitmessage gives you some anonymity even without using TOR due to the way it works? Couldn´t TOR be extended in a way to work like Bitmessage? I guess BM is like a mesh or P2P thing, wouldn´t adding such a technology enhance TOR?

[tor-talk] does TOR do idle disconnect?

2016-01-29 Thread anonymous coward
Hi there, I start TOR using the Vidalia GUI. When I came back from lunch I saw, Firefox was disconnected from TOR. Vidalia still was running and seemed to be connected to TOR, the onion was green. The anon test said I was not connected with TOR and it shows my real IP. This makes me wonder, is

Re: [tor-talk] Plans to bring safe Firefox to Android?

2014-04-04 Thread anonymous coward
Andrew Lewman: > On Wed, Apr 02, 2014 at 10:52:45PM +, anonymous.cow...@posteo.de wrote > 1.9K bytes in 0 lines about: > : Thus, is there plans to create a Firefox for mobile that is safe to use > : with Tor? Just like the browser bundle for desktop systems. > Guardian recommends using Firefo

Re: [tor-talk] How safe is smartphones today?

2014-04-04 Thread anonymous coward
Nathan Freitas: > On 04/02/2014 07:01 PM, anonymous coward wrote: >> Many people use TOR or secure ways to chat on smartphones. > >> The last months have reveiled how hard secret services attack our >> phones. > >> This leads me to the question, how secure are o

[tor-talk] Plans to bring safe Firefox to Android?

2014-04-02 Thread anonymous coward
Hello, to me the Orweb simply is not usable at all. No tabbed browsing, no bookmarks. Hell, how can someone make a web browser that does not store bookmarks! Why don´t I have the choice to do so if I want to!? Thus, is there plans to create a Firefox for mobile that is safe to use with Tor? Jus

[tor-talk] How safe is smartphones today?

2014-04-02 Thread anonymous coward
Hello again, I hope this question is not totally off topic! Many people use TOR or secure ways to chat on smartphones. The last months have reveiled how hard secret services attack our phones. This leads me to the question, how secure are our smartphones at all? In my case I use Android 4.x.

Re: [tor-talk] Web browser for Android?

2013-12-17 Thread anonymous coward
Nathan Freitas: > It is also good for searches you don't want logged, other data you > don't want cached, opening links from the web or tweets that you may > not trust... it is useful beyond emergencies. Maybe, but no bookmarks really is a pain. I can live without tabs, but not without bookmarks.

[tor-talk] Web browser for Android?

2013-12-16 Thread anonymous coward
What is a good web browser for use with Orbot? No, Orweb is nothing I would consider. Orweb cannot save bookmarks, does not support tabbed browsing. I think Orweb is only usable in emergency situation. What else is usable and has some protection of privacy? Firefox mobile seem to send a unique i

[tor-talk] StrictExitNodes deprecated?

2013-11-22 Thread anonymous coward
Hello, I just see the options StrictExitNodes and StrictEntryNodes is deprecated? What is the correct syntax now to use fixed entry nodes and fixed exit nodes? Thank you signature.asc Description: OpenPGP digital signature -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscri

[tor-talk] Orbot for Android

2013-11-21 Thread anonymous coward
Hello, I consider to use Orbot on my Android 4.x device. I have some questions about Orbot. How mature is Orbot? Is it generally safe to use? How does it work technically, is it a kind of proxy app or does it work like a VPN software? When you start Orbot on a Droid, do all network applications

Re: [tor-talk] NIST approved crypto in Tor?

2013-09-07 Thread anonymous coward
Bruce Schneier recommends *not* to use ECC. It is safe to assume he knows what he says. -- tor-talk mailing list - tor-talk@lists.torproject.org To unsusbscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

[tor-talk] hidden services vulnerable to attacks?

2013-07-29 Thread anonymous coward
What do you think about this paper, has it already been discussed here? Thanks http://www.ieee-security.org/TC/SP2013/papers/4977a080.pdf signature.asc Description: OpenPGP digital signature -- tor-talk mailing list - tor-talk@lists.torproject.org To unsusbscribe or change other settings go

Re: [tor-talk] Using Mumble with Tor

2013-07-14 Thread anonymous coward
Nathan Freitas: > So, in short, there will soon be such a thing as OTR for voice, video > and files. :) That sounds great. By the way, I think it should be safe to publish the OTR fingerprint? I mean, the OTR key fingerprint is like the openPGP fingerprint? The more often published an OTR finger

Re: [tor-talk] Using Mumble with Tor

2013-07-14 Thread anonymous coward
David Huerta: > Hey all, > > I've put together a guide on how to use Mumble (TCP only!) with Tor if > anyone would find that sort of thing handy: > http://huertanix.tumblr.com/post/55261352264/location-anonymous-voice-communication-a-step-by-step. Hopefully useful for some people! Maybe Ed can gi

Re: [tor-talk] Mozilla Persona and Tor

2013-07-14 Thread anonymous coward
Hello, I did not much understand the technical meaning of your posting, but the subject caught my attention. So I would like to ask, is there an issue with using Firefox personas and Tor? Do personas compromize Tor in any way? I use a persona with Firefox, it just looks nice and I don´t like the v

Re: [tor-talk] how to store passwords in tbb?

2013-07-14 Thread anonymous coward
F Fake: > the setting to save passwords in tbb was removed from torbutton. I think that should be left to the user. I want to have control of what I do or not want to do. > how to store passwords in tbb? Can´t it be enabled again? Is there no option in about:config? Just a shot in the dark...

Re: [tor-talk] Speculation: Next 10 years of Tor?

2013-07-04 Thread anonymous coward
adrelanos: > Without Tor servers > in the US and a few other countries with a noticeable amount of Tor > servers, there is usable Tor network anymore. Is there no way to run "hidden Tor servers"? The schizophrenic thing about western governments is they would like to ban anonymizers like Tor, bu

[tor-talk] URL in SSL encrypted web site

2013-07-04 Thread anonymous coward
When you connect to a SSL secured web site, is the URL itself encrypted or can an attacker see the full URL? Is there any chance to encrypt a URL (besides *.onion URLs of course)? Thank you. signature.asc Description: OpenPGP digital signature ___ tor

Re: [tor-talk] Vidalia error message with TorBirdy

2013-07-04 Thread anonymous coward
The Tuber: > In SSL, if the client sends a session ID to resume a session, and the > server accepts it, no certificate is sent. But this session ID is sent encrypted or checked against a certificate? Thankx signature.asc Description: OpenPGP digital signature ___

Re: [tor-talk] Speculation: Next 10 years of Tor?

2013-07-04 Thread anonymous coward
I am confident, Tor will still be available in 10 years, because we need it. Many governments want to ban anonymity including western governments. But it is hard technically to ban anonymizers. Look at China what effort they take to prohibit free access to the net and they could never succeed to 10

[tor-talk] How intensely do you use Tor?

2013-07-03 Thread anonymous coward
How do you folks use Tor? Do you use it permanently for all your network connections or only from time to time for certain activities? I think for certain things it does not make much sense to use Tor, for example for online banking. When I connect to my bank I am not anonymous anway. When I use e

Re: [tor-talk] Vidalia error message with TorBirdy

2013-07-03 Thread anonymous coward
Sukhbir Singh: > If you did not change the port number, this is unexpected behavior, > please file a bug. Everything is fine with TorBirdy, it was me who put in manually starttls and port 143, probably it was too late night... I changed now to SSL/993 and everything is fine. Thankx R signat

Re: [tor-talk] Vidalia error message with TorBirdy

2013-07-03 Thread anonymous coward
Sukhbir Singh: > anonymous coward: > > You should use port 993 (SSL/TLS) for all IMAP accounts if you want to > connect to your mail server over Tor. That is why it is the default > setting :) > >> Thunderbird try to circumvent Tor? Isn´t it just normal, TB tries >>

Re: [tor-talk] Vidalia error message with TorBirdy

2013-07-03 Thread anonymous coward
Karsten N.: > Latest Thunderbird versions enforce STARTTLS if it was selected. The > weak option "Use STARTTLS if possible" is not available any more in > Thunderbird. You may use IMAP with STARTTLS, if your provider does not > offer IMAPS. I changed to SSL/993 which should be fine now. But, wit

Re: [tor-talk] Vidalia error message with TorBirdy

2013-07-02 Thread anonymous coward
Roger Dingledine: > On Tue, Jul 02, 2013 at 09:27:23PM +0000, anonymous coward wrote: >> Hello, >> >> I start Tor with Vidalia. And I use TorBirdy with Thunderbird. >> >> Sometimes I see a message from Vidalia: >> >> This is from the Vidalia log: >&g

Re: [tor-talk] German News magazine DER SPIEGEL reports how to set up Tor

2013-07-02 Thread anonymous coward
tor-admin: > DER SPIEGEL has an article (german) about how to setup a Tor router > using Rasperry Pie: > > http://is.gd/FhUEQ4 If they had the balls, they would operate a Tor exit relay! Maybe I write this as a comment there. Gruß Rüdi signature.asc Description: OpenPGP digital signature _

[tor-talk] Vidalia error message with TorBirdy

2013-07-02 Thread anonymous coward
Hello, I start Tor with Vidalia. And I use TorBirdy with Thunderbird. Sometimes I see a message from Vidalia: This is from the Vidalia log: Jul 02 22:34:44.907 Application request to port 143: this port is commonly used for unencrypted protocols. Please make sure you don't send anything you wou

[tor-talk] Tor email services

2013-07-02 Thread anonymous coward
I see there are email services within the Tor network that are only available with an *.onion URL. Can these services be used with a standard email client like Thunderbird (and IMAP or POP3)? Do these email services interact with the outside email world? Thanks R signature.asc Description: Open

Re: [tor-talk] safety of exit nodes

2013-07-02 Thread anonymous coward
> I am concerned too, that there are malicious exit servers out there. That is > one of the reasons why I operate Exits. To make it less probable that the > malicious ones get the traffic. How can I see what route my data use? Vidalia shows a map, but it is not that precise to my eyes. I read yo

[tor-talk] safety of exit nodes

2013-07-01 Thread anonymous . coward
Hi there, I have a concern regarding exit nodes in Tor. In my mind it is possible for an attacker to run a malicious exit server that gathers information at the exit point. Of course, this does not compromise anonymity per se, but it still can reveal sensitive data to malicious people. I think