Re: [tor-talk] Dutch police break into webservers over hidden services

2011-09-01 Thread Jeroen Massar
On 2011-09-01 15:24 , Roger Dingledine wrote: > Several people have asked us on irc about recent news articles like > http://wireupdate.com/wires/19812/dutch-police-infiltrate-hidden-child-porn-websites-in-the-u-s/ [..] In addiotion I want to refer to the below article from the Dutch "Public Minis

Re: [tor-talk] Dutch police break into webservers over hidden services

2011-09-08 Thread Orionjur Tor-admin
On 01.09.2011 13:24, Roger Dingledine wrote: > Several people have asked us on irc about recent news articles like > http://wireupdate.com/wires/19812/dutch-police-infiltrate-hidden-child-porn-websites-in-the-u-s/ > > Apparently the Dutch police exploited vulnerabilities in the webservers > reacha

Re: [tor-talk] Dutch police break into webservers over hidden services

2011-09-09 Thread tor
On 09/09/11 09:36, t...@lists.grepular.com wrote: > Set up a firewall on the VM to prevent all other network traffic > going in or out of it. I meant to say set up a firewall on the *host* OS to prevent all other traffic going in or out of the VM. I'd probably set up a firewall on the VM it's sel

Re: [tor-talk] Dutch police break into webservers over hidden services

2011-09-09 Thread tor
On 09/09/11 06:43, Orionjur Tor-admin wrote: > Very intresting what is the vulnerabilities they used for breaking systems? > In the lite of that facts I don't know what I need to advice my clients > - setting up hidden services on their home computers or on overseas > vdses? (My clients are not pr

Re: [tor-talk] Dutch police break into webservers over hidden services

2011-09-09 Thread Gozu-san
Alternatively, one could run Tor on VMs that can only access the internet via OpenVPN-based "anonymity services". OpenVPN clients can be run on physical routers, with tunnels routed to physical LANs that lack management access. Even if attackers manage to compromise VM hosts, getting real externa

Re: [tor-talk] Dutch police break into webservers over hidden services

2011-09-09 Thread Gregory Maxwell
On Fri, Sep 9, 2011 at 6:14 AM, Gozu-san wrote: > Alternatively, one could run Tor on VMs that can only access the > internet via OpenVPN-based "anonymity services".  OpenVPN clients can be OpenVPN-based "anonymity services" ~= snake oil. If you're running a hidden service you've already got a p

Re: [tor-talk] Dutch police break into webservers over hidden services

2011-09-09 Thread Orionjur Tor-admin
On 09.09.2011 08:36, t...@lists.grepular.com wrote: > On 09/09/11 06:43, Orionjur Tor-admin wrote: > >> Very intresting what is the vulnerabilities they used for breaking systems? >> In the lite of that facts I don't know what I need to advice my clients >> - setting up hidden services on their ho

Re: [tor-talk] Dutch police break into webservers over hidden services

2011-09-09 Thread tor
On 09/09/11 12:19, Orionjur Tor-admin wrote: > How I need to set my VM for thas purposes? > I use a VirtualBox under transparently torified user on host machine for > the most secure browsing in the Internet but I cannot to get access to > that machine through ssh from my host machine inspite set

Re: [tor-talk] Dutch police break into webservers over hidden services

2011-09-09 Thread andrew
On Fri, Sep 09, 2011 at 05:43:50AM +, tor-ad...@orionjurinform.com wrote 2.2K bytes in 45 lines about: : Very intresting what is the vulnerabilities they used for breaking systems? This question can likely only be answered by the authorities. The obvious attacks are against the webserver its

Re: [tor-talk] Dutch police break into webservers over hidden services

2011-09-13 Thread Gozu-san
[I initially sent this just to Mike Cardwell. Sorry about that.] On 09/09/11 10:36, Gregory Maxwell wrote: > On Fri, Sep 9, 2011 at 6:14 AM, Gozu-san wrote: >> Alternatively, one could run Tor on VMs that can only access the >> internet via OpenVPN-based "anonymity services". OpenVPN clients c