· 8 years ago · Aug 21, 2017, 09:08 AM
1NO SYSTEM IS SAFE
2 MILLIONS OF TOR EMAIL CONVERSATIONS FROM TORPROJECT.ORG (they hiding it but simple vulnerability can bring it public)
3TOR NOT HINDING THEIR DIRECTORY AND NOT HAVE PROTECTION FOR YOUR QUESTIONS (at=@) so it have your emails (public)
4I SURE THEY NOT GIVING YOU PROTECTION
5YOU ARE NOT SURFING ANONYMOUSLY have fun .
6
7From john.pinkman at yandex.com Sat Apr 1 21:32:48 2017
8From: john.pinkman at yandex.com (John Pinkman)
9Date: Sat, 01 Apr 2017 23:32:48 +0200
10Subject: [tor-talk] This video has been censored by YouTube many times
11Message-ID: <8239771491082368@web28o.yandex.ru>
12
13it explains problems that the world faces today
14https://w1r3.net/yBQEEe
15From kevinsisco61784 at gmail.com Sun Apr 2 00:17:01 2017
16From: kevinsisco61784 at gmail.com (Kevin)
17Date: Sat, 1 Apr 2017 20:17:01 -0400
18Subject: [tor-talk] This video has been censored by YouTube many times
19In-Reply-To: <8239771491082368@web28o.yandex.ru>
20References: <8239771491082368@web28o.yandex.ru>
21Message-ID: <61c15c3f-7520-763c-44b3-8b8f43f090fe@gmail.com>
22
23Maybe youtube doesn't know about this vid yet. By the way that
24was...interesting.
25
26
27
28On 4/1/2017 5:32 PM, John Pinkman wrote:
29> it explains problems that the world faces today
30> https://w1r3.net/yBQEEe.webm
31
32
33---
34This email has been checked for viruses by Avast antivirus software.
35https://www.avast.com/antivirus
36
37
38From mirimir at riseup.net Sun Apr 2 00:58:48 2017
39From: mirimir at riseup.net (Mirimir)
40Date: Sat, 1 Apr 2017 18:58:48 -0600
41Subject: [tor-talk] This video has been censored by YouTube many times
42In-Reply-To: <61c15c3f-7520-763c-44b3-8b8f43f090fe@gmail.com>
43References: <8239771491082368@web28o.yandex.ru>
44 <61c15c3f-7520-763c-44b3-8b8f43f090fe@gmail.com>
45Message-ID: <2da4a683-c06c-39a6-e124-7b550c02619f@riseup.net>
46
47On 04/01/2017 06:17 PM, Kevin wrote:
48> Maybe youtube doesn't know about this vid yet. By the way that
49> was...interesting.
50
51That was fucking evil. And totally off-topic. Just sayin'.
52
53> On 4/1/2017 5:32 PM, John Pinkman wrote:
54>> it explains problems that the world faces today
55>> https://w1r3.net/yBQEEe.webm
56>
57>
58> ---
59> This email has been checked for viruses by Avast antivirus software.
60> https://www.avast.com/antivirus
61>
62
63From john.pinkman at yandex.com Sun Apr 2 01:14:50 2017
64From: john.pinkman at yandex.com (John Pinkman)
65Date: Sun, 02 Apr 2017 03:14:50 +0200
66Subject: [tor-talk] This video has been censored by YouTube many times
67In-Reply-To: <2da4a683-c06c-39a6-e124-7b550c02619f@riseup.net>
68References: <8239771491082368@web28o.yandex.ru>
69 <61c15c3f-7520-763c-44b3-8b8f43f090fe@gmail.com>
70 <2da4a683-c06c-39a6-e124-7b550c02619f@riseup.net>
71Message-ID: <8549781491095690@web16o.yandex.ru>
72
73
74
7502.04.2017, 02:59, "Mirimir" <mirimir at riseup.net>:
76> On 04/01/2017 06:17 PM, Kevin wrote:
77>> Â Maybe youtube doesn't know about this vid yet. By the way that
78>> Â was...interesting.
79>
80> That was fucking evil. And totally off-topic. Just sayin'.
81
82You are right, it is about pure evil.
83
84>
85>> Â On 4/1/2017 5:32 PM, John Pinkman wrote:
86>>> Â it explains problems that the world faces today
87>>> Â https://w1r3.net/yBQEEe.webm
88
89From neokulak at runbox.com Sun Apr 2 02:12:26 2017
90From: neokulak at runbox.com (neokulak)
91Date: Sat, 01 Apr 2017 22:12:26 -0400
92Subject: [tor-talk] This video has been censored by YouTube many times
93In-Reply-To: <8549781491095690@web16o.yandex.ru>
94References: <8239771491082368@web28o.yandex.ru>
95 <61c15c3f-7520-763c-44b3-8b8f43f090fe@gmail.com>
96 <2da4a683-c06c-39a6-e124-7b550c02619f@riseup.net>
97 <8549781491095690@web16o.yandex.ru>
98Message-ID: <op.yx1pq0a1dcj3k7@colossus-9.local>
99
100So the Tor mailing list is now being used to promote anti-Semitic spam?
101How lovely.
102
103On Sat, 01 Apr 2017 21:14:50 -0400, John Pinkman <john.pinkman at yandex.com>
104wrote:
105
106>
107>
108> 02.04.2017, 02:59, "Mirimir" <mirimir at riseup.net>:
109>> On 04/01/2017 06:17 PM, Kevin wrote:
110>>> Maybe youtube doesn't know about this vid yet. By the way that
111>>> was...interesting.
112>>
113>> That was fucking evil. And totally off-topic. Just sayin'.
114>
115> You are right, it is about pure evil.
116>
117>>
118>>> On 4/1/2017 5:32 PM, John Pinkman wrote:
119>>>> it explains problems that the world faces today
120>>>> https://w1r3.net/yBQEEe.webm
121
122From kevinsisco61784 at gmail.com Sun Apr 2 15:01:08 2017
123From: kevinsisco61784 at gmail.com (Kevin)
124Date: Sun, 2 Apr 2017 11:01:08 -0400
125Subject: [tor-talk] This video has been censored by YouTube many times
126In-Reply-To: <op.yx1pq0a1dcj3k7@colossus-9.local>
127References: <8239771491082368@web28o.yandex.ru>
128 <61c15c3f-7520-763c-44b3-8b8f43f090fe@gmail.com>
129 <2da4a683-c06c-39a6-e124-7b550c02619f@riseup.net>
130 <8549781491095690@web16o.yandex.ru> <op.yx1pq0a1dcj3k7@colossus-9.local>
131Message-ID: <0d9194fd-33d0-1308-682e-8400078d4b6f@gmail.com>
132
133This is I think more about clearnet censorship than the evil little movie.
134
135
136
137On 4/1/2017 10:12 PM, neokulak wrote:
138> So the Tor mailing list is now being used to promote anti-Semitic
139> spam? How lovely.
140>
141> On Sat, 01 Apr 2017 21:14:50 -0400, John Pinkman
142> <john.pinkman at yandex.com> wrote:
143>
144>>
145>>
146>> 02.04.2017, 02:59, "Mirimir" <mirimir at riseup.net>:
147>>> On 04/01/2017 06:17 PM, Kevin wrote:
148>>>> Maybe youtube doesn't know about this vid yet. By the way that
149>>>> was...interesting.
150>>>
151>>> That was fucking evil. And totally off-topic. Just sayin'.
152>>
153>> You are right, it is about pure evil.
154>>
155>>>
156>>>> On 4/1/2017 5:32 PM, John Pinkman wrote:
157>>>>> it explains problems that the world faces today
158>>>>> https://w1r3.net/yBQEEe.webm
159
160
161---
162This email has been checked for viruses by Avast antivirus software.
163https://www.avast.com/antivirus
164
165
166From keb at cyblings.on.ca Sun Apr 2 15:04:27 2017
167From: keb at cyblings.on.ca (krishna e bera)
168Date: Sun, 2 Apr 2017 11:04:27 -0400
169Subject: [tor-talk] This video has been censored by YouTube many times
170In-Reply-To: <op.yx1pq0a1dcj3k7@colossus-9.local>
171References: <8239771491082368@web28o.yandex.ru>
172 <61c15c3f-7520-763c-44b3-8b8f43f090fe@gmail.com>
173 <2da4a683-c06c-39a6-e124-7b550c02619f@riseup.net>
174 <8549781491095690@web16o.yandex.ru> <op.yx1pq0a1dcj3k7@colossus-9.local>
175Message-ID: <9dac9720-ef7e-0e7c-f6ec-891000fdb865@cyblings.on.ca>
176
177On 01/04/17 10:12 PM, neokulak wrote:
178> So the Tor mailing list is now being used to promote anti-Semitic spam?
179> How lovely.
180
181This mailing list is not filtered through a moderator, which means stuff
182gets through and abusers of the list get removed after the fact.
183
184Some hate propaganda like that video is so cringeworthy as to make a
185laughing stock of its creators. If they want to remain anonymous and
186prevent it from being censored, they can set up a hidden service (aka
187.onion site) to host it. Instructions are on the torproject.org site:
188https://www.torproject.org/docs/tor-hidden-service.html.en
189
190
191From m.ajiao at tuta.io Mon Apr 3 05:31:51 2017
192From: m.ajiao at tuta.io (m.ajiao at tuta.io)
193Date: Mon, 3 Apr 2017 07:31:51 +0200 (CEST)
194Subject: [tor-talk] **SPAM** This video has been censored by YouTube
195 many times
196In-Reply-To: <9dac9720-ef7e-0e7c-f6ec-891000fdb865@cyblings.on.ca>
197References: <8239771491082368@web28o.yandex.ru>
198 <<8239771491082368@web28o.yandex.ru>>
199 <61c15c3f-7520-763c-44b3-8b8f43f090fe@gmail.com>
200 <<61c15c3f-7520-763c-44b3-8b8f43f090fe@gmail.com>>
201 <2da4a683-c06c-39a6-e124-7b550c02619f@riseup.net>
202 <<2da4a683-c06c-39a6-e124-7b550c02619f@riseup.net>>
203 <8549781491095690@web16o.yandex.ru> <<8549781491095690@web16o.yandex.ru>>
204 <op.yx1pq0a1dcj3k7@colossus-9.local> <<op.yx1pq0a1dcj3k7@colossus-9.local>>
205 <9dac9720-ef7e-0e7c-f6ec-891000fdb865@cyblings.on.ca>
206Message-ID: <KgmI3J2--3-0@tuta.io>
207
208> it explains problems that the world faces today
209
210Welcome to Tor Talk! This is a place where ordinary people can talk about Tor usability and security problems. Since this is a technical mailing list, I strong suggest:
211
212If you don't want your video to be censored, consider setting up a Tor hidden service, an I2P hidden service, a Freenet site or an IPFS upload.
213
214YouTube's censorship of a video appears to be really trivial with the presence anonymity tools. Now let's come back, calm down and start to talk about the really serious things.
215
216
217From m.ajiao at tuta.io Mon Apr 3 05:38:48 2017
218From: m.ajiao at tuta.io (m.ajiao at tuta.io)
219Date: Mon, 3 Apr 2017 07:38:48 +0200 (CEST)
220Subject: [tor-talk] Tor Browser crash
221Message-ID: <KgmJdxS--3-0@tuta.io>
222
223Hello, Tor Talk!
224
225Tor Browser crashes very predictably when I click some menu items of the NoScript plugin.
226
227Tor Browser 6.5.1 on Ubuntu
228
229Steps to reproduce:
2301. Security slider: High
2312. Go to this Medium article https://decentralize.today/decentralized-p2p-chat-in-100-lines-of-code-d6e496034cd4
2323. When the page is still loading, open the NoScript toolbar menu, and CLICK on "Blocked Objects"
2334. Tor browser exits.
234
235
236From 0xdogdev at gmail.com Mon Apr 3 15:13:33 2017
237From: 0xdogdev at gmail.com (0xdog)
238Date: Mon, 3 Apr 2017 11:13:33 -0400
239Subject: [tor-talk] tbb (disable network is set)
240Message-ID: <CAKNyJHtuSbxEk3SnekWOC4+b-+bxLie0q42=vX=HS0Wgk9kyjw@mail.gmail.com>
241
242Hello.
243I don't know if this is the correct mailing list to post this
244question, so in that case my apologies in advance.
245
246Last year I was using TBB (on windows server 2003 32bits PC) for a
247while and it was working perfect, suddenly it stopped working and the
248logs said "DisableNetwork is set. Tor will not make or accept
249non-control network connections. Shutting down all existing
250connections...". At that time I just stopped using TBB and I checked
251TBB frequently, one day, suddenly again, apparently with no change on
252my computer or my network it started working again for a while but
253right now I have the same problem as before, it stopped working again
254and the logs said "DisableNetwork is set. Tor will not make or
255accept...".
256
257Now I have a strong decision to find where is the problem:
258
2591. I have spent a lot of hours surfing the web looking for a solution.
260Many many people has the same problem, but only a few have found a
261solution.
262
2632. The rules and firewall of my antivirus are fine, even with the
264antivirus totally deactivated it does not work.
265
2663. I have normal access to torproject.org throught firefox browser so
267I don´t think my ISP is blocking the tor network or doing DPI.
268
2694. I have checked my timezone against an internet service and the time
270of my system seems to be incorrect but since I am behind a proxy
271server that is far from my hands my timezone is that of the proxy
272server and I can not fix it. Do you think this is the cause of the
273problem? In this case is there a workarround for this?
274
2755. I have been viewing the tor source code trying to figure out under
276which conditions the DisableNetwork flag is set to 1, no much advance.
277Can someone point out which source file is the one I´m looking for?
278
279I can post the whole logs if someone is interested.
280
281Thanks. Best regards.
282
283From yuri at rawbw.com Mon Apr 3 15:27:39 2017
284From: yuri at rawbw.com (Yuri)
285Date: Mon, 3 Apr 2017 08:27:39 -0700
286Subject: [tor-talk] tbb (disable network is set)
287In-Reply-To: <CAKNyJHtuSbxEk3SnekWOC4+b-+bxLie0q42=vX=HS0Wgk9kyjw@mail.gmail.com>
288References: <CAKNyJHtuSbxEk3SnekWOC4+b-+bxLie0q42=vX=HS0Wgk9kyjw@mail.gmail.com>
289Message-ID: <be15b7a4-2a37-06ec-8f91-ef095fba6add@rawbw.com>
290
291On 04/03/2017 08:13, 0xdog wrote:
292> I don't know if this is the correct mailing list to post this
293> question, so in that case my apologies in advance.
294>
295> Last year I was using TBB (on windows server 2003 32bits PC) for a
296> while and it was working perfect, suddenly it stopped working and the
297> logs said "DisableNetwork is set. Tor will not make or accept
298> non-control network connections. Shutting down all existing
299> connections...". At that time I just stopped using TBB and I checked
300> TBB frequently, one day, suddenly again, apparently with no change on
301> my computer or my network it started working again for a while but
302> right now I have the same problem as before, it stopped working again
303> and the logs said "DisableNetwork is set. Tor will not make or
304> accept...".
305
306
307Please consider using Whonix https://www.whonix.org/ instead of TBB.
308
309It runs tor in one virtual machine, and your browser in another virtual
310machine.
311
312Whonix is a much safer way to use Tor, since it isolates your OS from
313the clearnet better. It cleanly redirects all internet requests to Tor
314at one single point. TBB just can't do it quite the same way, and is
315more likely to leak requests into the clearnet.
316
317All you need to do is to install and start VirtualBox, and add 2 Whonix
318virtual machines into it.
319
320
321Yuri
322
323
324From 0xdogdev at gmail.com Mon Apr 3 15:38:00 2017
325From: 0xdogdev at gmail.com (0xdog)
326Date: Mon, 3 Apr 2017 11:38:00 -0400
327Subject: [tor-talk] tbb (disable network is set)
328In-Reply-To: <be15b7a4-2a37-06ec-8f91-ef095fba6add@rawbw.com>
329References: <CAKNyJHtuSbxEk3SnekWOC4+b-+bxLie0q42=vX=HS0Wgk9kyjw@mail.gmail.com>
330 <be15b7a4-2a37-06ec-8f91-ef095fba6add@rawbw.com>
331Message-ID: <CAKNyJHtG8hDsAkGfOUBN71VAgfM1mKhMk4sv6AVfPmYQuC8BfQ@mail.gmail.com>
332
3332017-04-03 11:27 GMT-04:00, Yuri <yuri at rawbw.com>:
334> Please consider using Whonix https://www.whonix.org/ instead of TBB.
335>
336
337Ok, I will try whonix. Thank for your answer.
338Anyway I would like to know exactly where is my problem.
339Regards.
340
341From goody2shoes at resist.ca Mon Apr 3 16:03:54 2017
342From: goody2shoes at resist.ca (goody2shoes)
343Date: Mon, 3 Apr 2017 09:03:54 -0700
344Subject: [tor-talk] Tor Browser crash
345In-Reply-To: <KgmJdxS--3-0@tuta.io>
346References: <KgmJdxS--3-0@tuta.io>
347Message-ID: <01fb1539-290f-063f-a107-b705fdb8c945@resist.ca>
348
349
350
351On 04/02/2017 10:38 PM, m.ajiao at tuta.io wrote:
352> Hello, Tor Talk!
353>
354> Tor Browser crashes very predictably when I click some menu items of the NoScript plugin.
355>
356> Tor Browser 6.5.1 on Ubuntu
357>
358> Steps to reproduce:
359> 1. Security slider: High
360> 2. Go to this Medium article https://decentralize.today/decentralized-p2p-chat-in-100-lines-of-code-d6e496034cd4
361> 3. When the page is still loading, open the NoScript toolbar menu, and CLICK on "Blocked Objects"
362> 4. Tor browser exits.
363>
364
365Current Debian Jessie (32bit). Couldn't duplicate this bug. Further, the
366'blocked object' menu within NoScript didn't appear until the page fully
367loaded and clicking the menu items in it did not crash the browser.
368
369G2s
370
371From george at queair.net Mon Apr 3 19:26:00 2017
372From: george at queair.net (George)
373Date: Mon, 03 Apr 2017 19:26:00 +0000
374Subject: [tor-talk] BeagleBone Relay on OpenBSD -current
375Message-ID: <38180b36-ba46-1d3c-937b-e92b7314c9ea@queair.net>
376
377Greetings.
378
379The Tor BSD Diversity Project continues its low-intensity war to inject
380more *BSD into the Tor ecosystem.
381
382Our TB for OpenBSD hit the -current ports in November, and 6.5 should in
383the -stable ports and packages with the release of 6.1 in the next month
384or so. The ports tree closed for 6.1 just after we submitted 6.5.1, but
385it looks like it won't make it in unfortunately.
386
387A notable recent happening is getting a -current BeagleBone Black Tor
388relay up and running.
389
390https://atlas.torproject.org/#details/577B81CD1FCE5B3E7C1BD286774758608E50AEEB
391
392It's managed to quickly hit 1.39MB/s traffic at the most recent check.
393
394We have some recent blog post about it which addresses a number of
395questions including running OpenBSD -current versus -stable for relays,
396basic OpenBSD tweaking for a relay, etc.
397
398https://torbsd.github.io/blog.html
399
400Thanks.
401
402George
403--
404
405
406
4075F77 765E 40D6 5340 A0F5 3401 4997 FF11 A86F 44E2
408
409-------------- next part --------------
410A non-text attachment was scrubbed...
411Name: signature.asc
412Type: application/pgp-signature
413Size: 833 bytes
414Desc: OpenPGP digital signature
415URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170403/9a75698d/attachment.sig>
416
417From flipchan at riseup.net Mon Apr 3 20:40:25 2017
418From: flipchan at riseup.net (Flipchan)
419Date: Mon, 03 Apr 2017 22:40:25 +0200
420Subject: [tor-talk] BeagleBone Relay on OpenBSD -current
421In-Reply-To: <38180b36-ba46-1d3c-937b-e92b7314c9ea@queair.net>
422References: <38180b36-ba46-1d3c-937b-e92b7314c9ea@queair.net>
423Message-ID: <65AA4D8A-ECD4-48D0-9A5A-394AC9EDC062@riseup.net>
424
425Nice we need More OpenBSD in Tor :)
426
427George <george at queair.net> skrev: (3 april 2017 21:26:00 CEST)
428>Greetings.
429>
430>The Tor BSD Diversity Project continues its low-intensity war to inject
431>more *BSD into the Tor ecosystem.
432>
433>Our TB for OpenBSD hit the -current ports in November, and 6.5 should
434>in
435>the -stable ports and packages with the release of 6.1 in the next
436>month
437>or so. The ports tree closed for 6.1 just after we submitted 6.5.1, but
438>it looks like it won't make it in unfortunately.
439>
440>A notable recent happening is getting a -current BeagleBone Black Tor
441>relay up and running.
442>
443>https://atlas.torproject.org/#details/577B81CD1FCE5B3E7C1BD286774758608E50AEEB
444>
445>It's managed to quickly hit 1.39MB/s traffic at the most recent check.
446>
447>We have some recent blog post about it which addresses a number of
448>questions including running OpenBSD -current versus -stable for relays,
449>basic OpenBSD tweaking for a relay, etc.
450>
451>https://torbsd.github.io/blog.html
452>
453>Thanks.
454>
455>George
456>--
457>
458>
459>
460>5F77 765E 40D6 5340 A0F5 3401 4997 FF11 A86F 44E2
461
462--
463Sincerly flipchan - LayerProx dev
464
465From mirimir at riseup.net Tue Apr 4 01:46:23 2017
466From: mirimir at riseup.net (Mirimir)
467Date: Mon, 3 Apr 2017 19:46:23 -0600
468Subject: [tor-talk] tbb (disable network is set)
469In-Reply-To: <CAKNyJHtuSbxEk3SnekWOC4+b-+bxLie0q42=vX=HS0Wgk9kyjw@mail.gmail.com>
470References: <CAKNyJHtuSbxEk3SnekWOC4+b-+bxLie0q42=vX=HS0Wgk9kyjw@mail.gmail.com>
471Message-ID: <80123bd0-0e4e-bf07-c1a6-b7bed95d9b00@riseup.net>
472
473On 04/03/2017 09:13 AM, 0xdog wrote:
474> Hello.
475> I don't know if this is the correct mailing list to post this
476> question, so in that case my apologies in advance.
477>
478> Last year I was using TBB (on windows server 2003 32bits PC) for a
479> while and it was working perfect, suddenly it stopped working and the
480> logs said "DisableNetwork is set. Tor will not make or accept
481> non-control network connections. Shutting down all existing
482> connections...". At that time I just stopped using TBB and I checked
483> TBB frequently, one day, suddenly again, apparently with no change on
484> my computer or my network it started working again for a while but
485> right now I have the same problem as before, it stopped working again
486> and the logs said "DisableNetwork is set. Tor will not make or
487> accept...".
488>
489> Now I have a strong decision to find where is the problem:
490
491Tor browser may do this if your uplink gets interrupted at a particular
492stage in getting the network consensus. I believe that it's a defense
493against attempts to force use of malicious relays. The simplest fix is
494to delete and reinstall Tor browser, after saving bookmarks if desired.
495Or you could manually reset the flag.
496
497> 1. I have spent a lot of hours surfing the web looking for a solution.
498> Many many people has the same problem, but only a few have found a
499> solution.
500>
501> 2. The rules and firewall of my antivirus are fine, even with the
502> antivirus totally deactivated it does not work.
503>
504> 3. I have normal access to torproject.org throught firefox browser so
505> I don´t think my ISP is blocking the tor network or doing DPI.
506>
507> 4. I have checked my timezone against an internet service and the time
508> of my system seems to be incorrect but since I am behind a proxy
509> server that is far from my hands my timezone is that of the proxy
510> server and I can not fix it. Do you think this is the cause of the
511> problem? In this case is there a workarround for this?
512>
513> 5. I have been viewing the tor source code trying to figure out under
514> which conditions the DisableNetwork flag is set to 1, no much advance.
515> Can someone point out which source file is the one I´m looking for?
516>
517> I can post the whole logs if someone is interested.
518>
519> Thanks. Best regards.
520>
521
522From vigdis+tor at chown.me Tue Apr 4 02:53:58 2017
523From: vigdis+tor at chown.me (Daniel Jakots)
524Date: Mon, 3 Apr 2017 22:53:58 -0400
525Subject: [tor-talk] BeagleBone Relay on OpenBSD -current
526In-Reply-To: <38180b36-ba46-1d3c-937b-e92b7314c9ea@queair.net>
527References: <38180b36-ba46-1d3c-937b-e92b7314c9ea@queair.net>
528Message-ID: <20170403225358.74d68a13@odessa.chown.me>
529
530On Mon, 03 Apr 2017 19:26:00 +0000, George <george at queair.net> wrote:
531
532> Greetings.
533>
534> The Tor BSD Diversity Project continues its low-intensity war to
535> inject more *BSD into the Tor ecosystem.
536
537\o/
538
539> Our TB for OpenBSD hit the -current ports in November, and 6.5 should
540> in the -stable ports and packages with the release of 6.1 in the next
541> month or so. The ports tree closed for 6.1 just after we submitted
542> 6.5.1, but it looks like it won't make it in unfortunately.
543
544I hope 6.5.1 will make it to -stable. Hopefully next updates will be
545backported as well.
546
547> A notable recent happening is getting a -current BeagleBone Black Tor
548> relay up and running.
549>
550> https://atlas.torproject.org/#details/577B81CD1FCE5B3E7C1BD286774758608E50AEEB
551>
552> It's managed to quickly hit 1.39MB/s traffic at the most recent check.
553>
554> We have some recent blog post about it which addresses a number of
555> questions including running OpenBSD -current versus -stable for
556> relays, basic OpenBSD tweaking for a relay, etc.
557>
558> https://torbsd.github.io/blog.html
559
560Yay
561
562From toccare1 at hotmail.com Tue Apr 4 13:52:07 2017
563From: toccare1 at hotmail.com (Beach and Yoga Lover)
564Date: Tue, 4 Apr 2017 13:52:07 +0000
565Subject: [tor-talk] Problem with TOR-browser on iMac
566Message-ID: <AM4PR02MB1700E42B4C82CEDBCE2CE82B930B0@AM4PR02MB1700.eurprd02.prod.outlook.com>
567
568Hi,
569
570
571I have a new iMac and downloaded the TOR-browser without problems.
572
573But when I try to establish a connection with the Web I get the following message:
574
575
576CANNOT FIND THE PROXYSERVER
577
578
579FIREFOX HAS BEEN CONFIGURED FOR USING A PROXYSERVER WHICH CAN NOT BEEN FOUND
580
581CHECK YOUR PROXY CONFIGURATION
582
583CHECK YOUR NETWORK = IS OK!
584
585IF YOUR COMPUTER OR NETWORK IS BEING PROTECTED BY A FIREWALL OR PROXY, BE SURE TO ALLOW THE TOR BROWSER ADMITTANCE TO THE WEB
586
587
588I ALLOWED the FIREWALL for incoming communication with TOR browser.
589
590
591Note: when I switch off the firewall, what is stupid ofcourse, I still can't establish connection with the Web.
592
593
594
595Can anyone help me pse with this problem?
596
597
598
599Many thanks in advance and my eternal gratitude!
600
601
602
603Jan
604
605From 0xdogdev at gmail.com Tue Apr 4 16:01:07 2017
606From: 0xdogdev at gmail.com (0xdog)
607Date: Tue, 4 Apr 2017 12:01:07 -0400
608Subject: [tor-talk] tbb (disable network is set)
609In-Reply-To: <80123bd0-0e4e-bf07-c1a6-b7bed95d9b00@riseup.net>
610References: <CAKNyJHtuSbxEk3SnekWOC4+b-+bxLie0q42=vX=HS0Wgk9kyjw@mail.gmail.com>
611 <80123bd0-0e4e-bf07-c1a6-b7bed95d9b00@riseup.net>
612Message-ID: <CAKNyJHseKvT4SwF5_x-w-KV3Z8V0=BcZJqM4x91oReyvv07B4Q@mail.gmail.com>
613
6142017-04-03 21:46 GMT-04:00, Mirimir <mirimir at riseup.net>:
615> Tor browser may do this if your uplink gets interrupted at a particular
616> stage in getting the network consensus. I believe that it's a defense
617> against attempts to force use of malicious relays. The simplest fix is
618> to delete and reinstall Tor browser, after saving bookmarks if desired.
619> Or you could manually reset the flag.
620
621I have deleted/reinstalled TBB many times and even updated TBB version
622any time there is a new one. I have edited torrc file but when I
623start TBB again the DisableNetwork 0 line is deleted. Could you please
624explain me the correct way to do this? I have the same results using
625Custom Bridges for obfs4. Here are the whole logs:
626
62704/04/2017 11:53:44.300 [NOTICE] DisableNetwork is set. Tor will not
628make or accept non-control network connections. Shutting down all
629existing connections.
63004/04/2017 11:53:44.300 [NOTICE] DisableNetwork is set. Tor will not
631make or accept non-control network connections. Shutting down all
632existing connections.
63304/04/2017 11:53:44.300 [NOTICE] DisableNetwork is set. Tor will not
634make or accept non-control network connections. Shutting down all
635existing connections.
63604/04/2017 11:53:44.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150
63704/04/2017 11:53:54.200 [NOTICE] Bootstrapped 5%: Connecting to
638directory server
63904/04/2017 11:53:54.300 [NOTICE] Bootstrapped 10%: Finishing handshake
640with directory server
64104/04/2017 11:53:56.500 [WARN] Proxy Client: unable to connect to
642109.74.198.252:37771 ("general SOCKS server failure")
64304/04/2017 11:53:56.700 [WARN] Proxy Client: unable to connect to
644139.162.181.34:9443 ("general SOCKS server failure")
64504/04/2017 11:53:56.700 [WARN] Proxy Client: unable to connect to
646107.170.197.223:9443 ("general SOCKS server failure")
64704/04/2017 11:58:08.700 [NOTICE] Closing no-longer-configured Socks
648listener on 127.0.0.1:9150
64904/04/2017 11:58:08.700 [NOTICE] DisableNetwork is set. Tor will not
650make or accept non-control network connections. Shutting down all
651existing connections.
65204/04/2017 11:58:08.700 [NOTICE] Closing old Socks listener on 127.0.0.1:9150
653
654Thanks for your interest.
655
656From 0xdogdev at gmail.com Tue Apr 4 16:09:52 2017
657From: 0xdogdev at gmail.com (0xdog)
658Date: Tue, 4 Apr 2017 12:09:52 -0400
659Subject: [tor-talk] Problem with TOR-browser on iMac
660In-Reply-To: <AM4PR02MB1700E42B4C82CEDBCE2CE82B930B0@AM4PR02MB1700.eurprd02.prod.outlook.com>
661References: <AM4PR02MB1700E42B4C82CEDBCE2CE82B930B0@AM4PR02MB1700.eurprd02.prod.outlook.com>
662Message-ID: <CAKNyJHu4K+jR4GgiKj-EmWAxw0q2YiPVDeF--HS2yQgxBxsK8A@mail.gmail.com>
663
6642017-04-04 9:52 GMT-04:00, Beach and Yoga Lover <toccare1 at hotmail.com>:
665> CANNOT FIND THE PROXYSERVER
666>
667>
668> FIREFOX HAS BEEN CONFIGURED FOR USING A PROXYSERVER WHICH CAN NOT BEEN FOUND
669>
670> CHECK YOUR PROXY CONFIGURATION
671
672Are you behind a proxy? It seems like you are setting a proxy that TBB
673can not find. Take into account that when you start TBB it ask you if
674you will Connect directly or if you will Configure your connection. If
675you go through Configure in the third step it ask you if you are
676behind a proxy, if not, just hit No and go ahead, if Yes you will need
677your proxy settings for the next step. Please check that.
678Good luck.
679
680From mirimir at riseup.net Tue Apr 4 16:30:46 2017
681From: mirimir at riseup.net (Mirimir)
682Date: Tue, 4 Apr 2017 10:30:46 -0600
683Subject: [tor-talk] tbb (disable network is set)
684In-Reply-To: <CAKNyJHseKvT4SwF5_x-w-KV3Z8V0=BcZJqM4x91oReyvv07B4Q@mail.gmail.com>
685References: <CAKNyJHtuSbxEk3SnekWOC4+b-+bxLie0q42=vX=HS0Wgk9kyjw@mail.gmail.com>
686 <80123bd0-0e4e-bf07-c1a6-b7bed95d9b00@riseup.net>
687 <CAKNyJHseKvT4SwF5_x-w-KV3Z8V0=BcZJqM4x91oReyvv07B4Q@mail.gmail.com>
688Message-ID: <c1b27df2-7469-775d-58e6-9ad86964b471@riseup.net>
689
690On 04/04/2017 10:01 AM, 0xdog wrote:
691> 2017-04-03 21:46 GMT-04:00, Mirimir <mirimir at riseup.net>:
692>> Tor browser may do this if your uplink gets interrupted at a particular
693>> stage in getting the network consensus. I believe that it's a defense
694>> against attempts to force use of malicious relays. The simplest fix is
695>> to delete and reinstall Tor browser, after saving bookmarks if desired.
696>> Or you could manually reset the flag.
697>
698> I have deleted/reinstalled TBB many times and even updated TBB version
699> any time there is a new one. I have edited torrc file but when I
700> start TBB again the DisableNetwork 0 line is deleted. Could you please
701> explain me the correct way to do this? I have the same results using
702> Custom Bridges for obfs4. Here are the whole logs:
703
704Yes, adding "DisableNetwork 0" to torrc doesn't seem to work. I just
705nuked the state file. But if the problem reoccurs after reinstalling Tor
706browser, there must be something else causing it. If obfs4 bridges don't
707help, I'm rather at a loss.
708
709Is there another uplink that you could test on? Alternatively, you could
710try connecting through a VPN. If either eliminates the problem, you know
711that your normal uplink is at fault.
712
713<SNIP>
714
715
716From 0xdogdev at gmail.com Wed Apr 5 13:01:40 2017
717From: 0xdogdev at gmail.com (0xdog)
718Date: Wed, 5 Apr 2017 09:01:40 -0400
719Subject: [tor-talk] tbb (disable network is set)
720In-Reply-To: <c1b27df2-7469-775d-58e6-9ad86964b471@riseup.net>
721References: <CAKNyJHtuSbxEk3SnekWOC4+b-+bxLie0q42=vX=HS0Wgk9kyjw@mail.gmail.com>
722 <80123bd0-0e4e-bf07-c1a6-b7bed95d9b00@riseup.net>
723 <CAKNyJHseKvT4SwF5_x-w-KV3Z8V0=BcZJqM4x91oReyvv07B4Q@mail.gmail.com>
724 <c1b27df2-7469-775d-58e6-9ad86964b471@riseup.net>
725Message-ID: <CAKNyJHtDYTqS1WpOtqznNgZAX-X-S-YqdL5iYAGWTc77t1-3wQ@mail.gmail.com>
726
7272017-04-04 12:30 GMT-04:00, Mirimir <mirimir at riseup.net>:
728> Is there another uplink that you could test on? Alternatively, you could
729> try connecting through a VPN. If either eliminates the problem, you know
730> that your normal uplink is at fault.
731
732I do not have another uplink to test. I can try using a VPN, yes. Can
733you point out which is the best way to configue TBB using a VPN if you
734have used before.
735Thanks in advance.
736
737From mirimir at riseup.net Wed Apr 5 13:14:31 2017
738From: mirimir at riseup.net (Mirimir)
739Date: Wed, 5 Apr 2017 07:14:31 -0600
740Subject: [tor-talk] tbb (disable network is set)
741In-Reply-To: <CAKNyJHtDYTqS1WpOtqznNgZAX-X-S-YqdL5iYAGWTc77t1-3wQ@mail.gmail.com>
742References: <CAKNyJHtuSbxEk3SnekWOC4+b-+bxLie0q42=vX=HS0Wgk9kyjw@mail.gmail.com>
743 <80123bd0-0e4e-bf07-c1a6-b7bed95d9b00@riseup.net>
744 <CAKNyJHseKvT4SwF5_x-w-KV3Z8V0=BcZJqM4x91oReyvv07B4Q@mail.gmail.com>
745 <c1b27df2-7469-775d-58e6-9ad86964b471@riseup.net>
746 <CAKNyJHtDYTqS1WpOtqznNgZAX-X-S-YqdL5iYAGWTc77t1-3wQ@mail.gmail.com>
747Message-ID: <78106c20-340b-0178-8f78-991c51003e03@riseup.net>
748
749On 04/05/2017 07:01 AM, 0xdog wrote:
750> 2017-04-04 12:30 GMT-04:00, Mirimir <mirimir at riseup.net>:
751>> Is there another uplink that you could test on? Alternatively, you could
752>> try connecting through a VPN. If either eliminates the problem, you know
753>> that your normal uplink is at fault.
754>
755> I do not have another uplink to test. I can try using a VPN, yes. Can
756> you point out which is the best way to configue TBB using a VPN if you
757> have used before.
758> Thanks in advance.
759
760What OS?
761
762https://securitykiss.com/ has a free tier, and is reputable.
763
764Are you comfortable using command line?
765
766From nickm at torproject.org Wed Apr 5 14:02:35 2017
767From: nickm at torproject.org (Nick Mathewson)
768Date: Wed, 5 Apr 2017 10:02:35 -0400
769Subject: [tor-talk] Tor 0.3.0.5-rc: almost stable!
770Message-ID: <CAKDKvuw+vD=4P+QPvvvcDq3ZLNmVAdZjXUysRFuE-s4rkSJ9gA@mail.gmail.com>
771
772Hi all!
773
774Tor 0.3.0.5-rc is now tagged and released. It's in still "release
775candidate" status, which means we think it should be pretty stable,
776but we hope you'll find more bugs for us to fix.
777
778You can download the source code from the usual place on the website.
779Packages should be out over the next several weeks, including Tor
780Browser alpha releases later this month.
781
782If you do build from source, please remember to check the signatures!
783
784=====
785Changes in version 0.3.0.5-rc - 2017-04-05
786 Tor 0.3.0.5-rc fixes a few remaining bugs, large and small, in the
787 0.3.0 release series.
788
789 This is the second release candidate in the Tor 0.3.0 series, and has
790 much fewer changes than the first. If we find no new bugs or
791 regressions here, the first stable 0.3.0 release will be nearly
792 identical to it.
793
794 o Major bugfixes (crash, directory connections):
795 - Fix a rare crash when sending a begin cell on a circuit whose
796 linked directory connection had already been closed. Fixes bug
797 21576; bugfix on 0.2.9.3-alpha. Reported by Alec Muffett.
798
799 o Major bugfixes (guard selection):
800 - Fix a guard selection bug where Tor would refuse to bootstrap in
801 some cases if the user swapped a bridge for another bridge in
802 their configuration file. Fixes bug 21771; bugfix on 0.3.0.1-alpha.
803 Reported by "torvlnt33r".
804
805 o Minor features (geoip):
806 - Update geoip and geoip6 to the March 7 2017 Maxmind GeoLite2
807 Country database.
808
809 o Minor bugfix (compilation):
810 - Fix a warning when compiling hs_service.c. Previously, it had no
811 exported symbols when compiled for libor.a, resulting in a
812 compilation warning from clang. Fixes bug 21825; bugfix
813 on 0.3.0.1-alpha.
814
815 o Minor bugfixes (hidden services):
816 - Make hidden services check for failed intro point connections,
817 even when they have exceeded their intro point creation limit.
818 Fixes bug 21596; bugfix on 0.2.7.2-alpha. Reported by Alec Muffett.
819 - Make hidden services with 8 to 10 introduction points check for
820 failed circuits immediately after startup. Previously, they would
821 wait for 5 minutes before performing their first checks. Fixes bug
822 21594; bugfix on 0.2.3.9-alpha. Reported by Alec Muffett.
823
824 o Minor bugfixes (memory leaks):
825 - Fix a memory leak when using GETCONF on a port option. Fixes bug
826 21682; bugfix on 0.3.0.3-alpha.
827
828 o Minor bugfixes (relay):
829 - Avoid a double-marked-circuit warning that could happen when we
830 receive DESTROY cells under heavy load. Fixes bug 20059; bugfix
831 on 0.1.0.1-rc.
832
833 o Minor bugfixes (tests):
834 - Run the entry_guard_parse_from_state_full() test with the time set
835 to a specific date. (The guard state that this test was parsing
836 contained guards that had expired since the test was first
837 written.) Fixes bug 21799; bugfix on 0.3.0.1-alpha.
838
839 o Documentation:
840 - Update the description of the directory server options in the
841 manual page, to clarify that a relay no longer needs to set
842 DirPort in order to be a directory cache. Closes ticket 21720.
843
844From 0xdogdev at gmail.com Wed Apr 5 14:11:07 2017
845From: 0xdogdev at gmail.com (0xdog)
846Date: Wed, 5 Apr 2017 10:11:07 -0400
847Subject: [tor-talk] tbb (disable network is set)
848In-Reply-To: <78106c20-340b-0178-8f78-991c51003e03@riseup.net>
849References: <CAKNyJHtuSbxEk3SnekWOC4+b-+bxLie0q42=vX=HS0Wgk9kyjw@mail.gmail.com>
850 <80123bd0-0e4e-bf07-c1a6-b7bed95d9b00@riseup.net>
851 <CAKNyJHseKvT4SwF5_x-w-KV3Z8V0=BcZJqM4x91oReyvv07B4Q@mail.gmail.com>
852 <c1b27df2-7469-775d-58e6-9ad86964b471@riseup.net>
853 <CAKNyJHtDYTqS1WpOtqznNgZAX-X-S-YqdL5iYAGWTc77t1-3wQ@mail.gmail.com>
854 <78106c20-340b-0178-8f78-991c51003e03@riseup.net>
855Message-ID: <CAKNyJHsLLQjZ6P-AeP67gFpwp-=tDdhKfZqoP7k_v=dLoU5OgQ@mail.gmail.com>
856
8572017-04-05 9:14 GMT-04:00, Mirimir <mirimir at riseup.net>:
858> What OS?
859>
860> https://securitykiss.com/ has a free tier, and is reputable.
861>
862> Are you comfortable using command line?
863
864I am on Windows Server 2003 and yes, I feel comfortable using command
865line on both Windows and Linux. I can access this uplink only on
866windows. I am checking https://securitykiss.com/.
867Thanks for your interest.
868
869From t8mf4nu6lizp at canaglie.net Thu Apr 6 08:14:16 2017
870From: t8mf4nu6lizp at canaglie.net (=?UTF-8?Q?Mikko_Viinam=c3=a4ki?=)
871Date: Thu, 6 Apr 2017 11:14:16 +0300
872Subject: [tor-talk] Website minor detail
873Message-ID: <e4d42f2f-1530-7b37-473d-abf86a56f064@canaglie.net>
874
875
876Please make 64 default, 32 is historical by now. I'm talking about this
877page https://www.torproject.org/docs/verifying-signatures.html.en
878
879Currently is says "For Linux users (change 32 to 64 if you have the
88064-bit package):
881
882gpg --verify tor-browser-linux32-6.5.1_en-US.tar.xz.asc
883 tor-browser-linux32-6.5.1_en-US.tar.xz"
884
885It's just a little wrinkle but still needs fixing. So swap 32 and 64 (in
886text and URLs.).
887
888cheerio
889
890From nusenu at openmailbox.org Thu Apr 6 14:10:00 2017
891From: nusenu at openmailbox.org (nusenu)
892Date: Thu, 06 Apr 2017 14:10:00 +0000
893Subject: [tor-talk] torbrowser vs. twitter picture upload?
894Message-ID: <4f31a5be-f65f-704f-bcc8-4066b1d57935@openmailbox.org>
895
896Hi,
897
898everytime I try to upload a twitter profile picture the dialog with
899resize and zoom opens and after clicking apply I get "sucessfully uploaded"
900but the resulting picture "cannot be displayed because it contains errors".
901
902Did you upload your twitter profile picture with torbrowser without
903problems?
904
905solution:
906120x120 also tried 400x400
907
908Tor Browser Version: 6.5.1
909
910thanks,
911nusenu
912
913--
914https://mastodon.social/@nusenu
915https://twitter.com/nusenu_
916
917-------------- next part --------------
918A non-text attachment was scrubbed...
919Name: signature.asc
920Type: application/pgp-signature
921Size: 801 bytes
922Desc: OpenPGP digital signature
923URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170406/3c0b9287/attachment.sig>
924
925From jeremyrand at airmail.cc Fri Apr 7 03:38:24 2017
926From: jeremyrand at airmail.cc (Jeremy Rand)
927Date: Fri, 7 Apr 2017 03:38:24 +0000
928Subject: [tor-talk] Problem with TOR-browser on iMac
929In-Reply-To: <AM4PR02MB1700E42B4C82CEDBCE2CE82B930B0@AM4PR02MB1700.eurprd02.prod.outlook.com>
930References: <AM4PR02MB1700E42B4C82CEDBCE2CE82B930B0@AM4PR02MB1700.eurprd02.prod.outlook.com>
931Message-ID: <f4dc7890-a37b-e357-5af4-5882b37b3fba@airmail.cc>
932
933Beach and Yoga Lover:
934> Hi,
935>
936>
937> I have a new iMac and downloaded the TOR-browser without problems.
938>
939> But when I try to establish a connection with the Web I get the following message:
940>
941>
942> CANNOT FIND THE PROXYSERVER
943>
944>
945> FIREFOX HAS BEEN CONFIGURED FOR USING A PROXYSERVER WHICH CAN NOT BEEN FOUND
946>
947> CHECK YOUR PROXY CONFIGURATION
948>
949> CHECK YOUR NETWORK = IS OK!
950>
951> IF YOUR COMPUTER OR NETWORK IS BEING PROTECTED BY A FIREWALL OR PROXY, BE SURE TO ALLOW THE TOR BROWSER ADMITTANCE TO THE WEB
952
953If Tor Browser complains that "Firefox" can't find the configured proxy,
954that presumably means that Tor Browser can't talk to Tor. Tor Browser
955Bundle is supposed to run both Tor and Tor Browser when you run it... so
956it sounds like Tor may have failed in some way. Or perhaps a firewall
957is preventing Tor Browser from connecting to Tor (which would presumably
958be 127.0.0.1:9150).
959
960I wouldn't expect this to be caused by Tor being unable to talk to the
961Internet.
962
963Cheers,
964--
965-Jeremy Rand
966Lead Application Engineer at Namecoin
967Mobile email: jeremyrandmobile at airmail.cc
968Mobile PGP: 2158 0643 C13B B40F B0FD 5854 B007 A32D AB44 3D9C
969Send non-security-critical things to my Mobile with PGP.
970Please don't send me unencrypted messages.
971My business email jeremy at veclabs.net is having technical issues at the
972moment.
973
974-------------- next part --------------
975A non-text attachment was scrubbed...
976Name: signature.asc
977Type: application/pgp-signature
978Size: 801 bytes
979Desc: OpenPGP digital signature
980URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170407/cc7276df/attachment.sig>
981
982From seby2kt14 at gmail.com Sat Apr 8 10:54:51 2017
983From: seby2kt14 at gmail.com (Seby)
984Date: Sat, 8 Apr 2017 06:54:51 -0400
985Subject: [tor-talk] No more logs on 0.3.1
986Message-ID: <CAHEKVboHru7_zd2LzuH79HamJaYGv1KS5i_M=1Y_fZJ0nvB3DA@mail.gmail.com>
987
988Hi list,
989
990Upgraded to a newer version on Debian (Jessie) and can't find any logs in
991/var/log/tor folder. They used to be there under 0.2.9. Tor is running,
992socks works, I can browse the web via Tor but don't find any logs. Is this
993normal?
994
995From patrick-mailinglists at whonix.org Sun Apr 9 14:07:00 2017
996From: patrick-mailinglists at whonix.org (Patrick Schleizer)
997Date: Sun, 09 Apr 2017 14:07:00 +0000
998Subject: [tor-talk] How to use Tor Browser for security not anonymity? How
999 to use TBB using clearnet?
1000Message-ID: <31500295-b6ab-0b37-33fc-a567b036d018@riseup.net>
1001
1002TLDR:
1003
10041) How can one easily hack TBB to use clearnet? [1] (idea [2])
1005
10062) How can one enable cookies to persist in TBB?
1007
10083) How can one re-enable the Firefox password manager in TBB so one can
1009store passwords?
1010
1011To archive that I've disabled private browser and tinkered with lots of
1012torbutton Firefox config settings to no avail. Could you please kindly
1013advice on how to archive that?
1014
1015Long:
1016
1017Tor Browser is better hardened than regular Firefox and over time, it
1018will be even better hardened, even sandboxed.
1019
1020For clearnet browsing where Tor is either not required or creating a
1021mess (such as online banking), it would be awesome if one could use Tor
1022Browser without going through Tor.
1023
1024I guess it's very safe to assume, the most users won't use TBB
1025exclusive. They also want to use clearnet. But the value of a super
1026hardened secure browser TBB is somewhat reduced when then using a
1027non-hardened browser for clearnet use, which could lead to system
1028compromise.
1029
1030Of course this TBB hacking for clearnet use would for now only be advise
1031able for advancement users to not mess up a Tor Browser actually using
1032Tor vs a Tor Browser actually using clearnet. Would be up to oneself to
1033have some protections in place such as using a dedicated VM or computer
1034for that purposes so that one won't accidentally confuse one browser
1035with another.
1036
1037Cheers,
1038Patrick
1039
1040[1] I hear, at some point in future, TBB will no longer have TCP
1041compiled in, and only use unix domain sockets. That's awesome for TBB
1042use with Tor, but makes TBB use with clearnet hard. Long term a solution
1043to redirect TOR_SOCKS_IPC_PATH to clearnet would be needed.
1044
1045[2] Idea how to hack TBB to use clearnet.
1046
1047We could set these environment variables:
1048
1049export TOR_NO_DISPLAY_NETWORK_SETTINGS=1
1050export TOR_SKIP_CONTROLPORTTEST=1
1051export TOR_SKIP_LAUNCH=1
1052export TOR_SOCKS_IPC_PATH=/path/to/unix-domain-socket-file
1053
1054then use socat to redirect to unix domain socket file to 9150.
1055
1056On 9150, we could have a local ssh server running
1057
1058sudo apt-get install openssh-server
1059
1060and then use ssh to open a local socks port forwarding to our local ssh
1061server, which then would use clearnet.
1062
1063sudo apt-get install openssh-client
1064
1065ssh -D 9150 user at 127.0.0.1
1066
1067From gk at torproject.org Mon Apr 10 08:52:00 2017
1068From: gk at torproject.org (Georg Koppen)
1069Date: Mon, 10 Apr 2017 08:52:00 +0000
1070Subject: [tor-talk] Website minor detail
1071In-Reply-To: <e4d42f2f-1530-7b37-473d-abf86a56f064@canaglie.net>
1072References: <e4d42f2f-1530-7b37-473d-abf86a56f064@canaglie.net>
1073Message-ID: <3f5c1979-eef9-28aa-c9fb-8c3a8df8bfeb@torproject.org>
1074
1075Mikko Viinamäki:
1076>
1077> Please make 64 default, 32 is historical by now. I'm talking about this
1078> page https://www.torproject.org/docs/verifying-signatures.html.en
1079>
1080> Currently is says "For Linux users (change 32 to 64 if you have the
1081> 64-bit package):
1082>
1083> gpg --verify tor-browser-linux32-6.5.1_en-US.tar.xz.asc
1084> tor-browser-linux32-6.5.1_en-US.tar.xz"
1085>
1086> It's just a little wrinkle but still needs fixing. So swap 32 and 64 (in
1087> text and URLs.).
1088
1089Thanks. This is https://trac.torproject.org/projects/tor/ticket/21906 now.
1090
1091Georg
1092
1093
1094-------------- next part --------------
1095A non-text attachment was scrubbed...
1096Name: signature.asc
1097Type: application/pgp-signature
1098Size: 833 bytes
1099Desc: OpenPGP digital signature
1100URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170410/99e4cc68/attachment.sig>
1101
1102From anonym at riseup.net Mon Apr 10 09:47:00 2017
1103From: anonym at riseup.net (anonym)
1104Date: Mon, 10 Apr 2017 09:47:00 +0000
1105Subject: [tor-talk] [tbb-dev] How to use Tor Browser for security not
1106 anonymity? How to use TBB using clearnet?
1107In-Reply-To: <31500295-b6ab-0b37-33fc-a567b036d018@riseup.net>
1108References: <31500295-b6ab-0b37-33fc-a567b036d018@riseup.net>
1109Message-ID: <1faedd40-1401-70e5-fc32-38df4bbb20f4@riseup.net>
1110
1111Patrick Schleizer:
1112> 1) How can one easily hack TBB to use clearnet? [1] (idea [2])
1113
1114I believe all you need is:
1115
1116 pref("network.proxy.type", 0);
1117
1118and possibly disabling Torbutton (which is a good idea any way since it will only add confusion in that setup).
1119
1120> 2) How can one enable cookies to persist in TBB?
1121
1122IIRC all you need is to disable Private Browsing mode:
1123
1124 pref("browser.privatebrowsing.autostart", false);
1125
1126That has several other consequences, but at least some has individual prefs for toggling back to what the Private Browser mode does (I wouldn't be surprised if Tor Browser already change many of these prefs like that).
1127
1128> 3) How can one re-enable the Firefox password manager in TBB so one can
1129> store passwords?
1130
1131In addition to disabling Private Browsing mode you just have to enable the feature:
1132
1133 pref("signon.rememberSignons", true);
1134
1135> To archive that I've disabled private browser and tinkered with lots of
1136> torbutton Firefox config settings to no avail. Could you please kindly
1137> advice on how to archive that?
1138
1139YMMV for the above prefs and their exact behavior, but I want to make a point that all you ask for can be achieved by setting a few prefs, so it's only a matter of providing a profile with the necessary different defaults. I don't think introducing more environment variables, like you suggest in [2], is an improvement over this.
1140
1141For the record, providing a different "clearnet" profile for Tor Browser is how we implement Tails' Unsafe Browser.
1142
1143Cheers!
1144
1145
1146From komachi at openmailbox.org Mon Apr 10 21:24:00 2017
1147From: komachi at openmailbox.org (Anton Nesterov)
1148Date: Mon, 10 Apr 2017 21:24:00 +0000
1149Subject: [tor-talk] Russian free software activist arrested for extremist
1150 materials posted from his Tor exit node
1151Message-ID: <d05466db-84d0-ae24-cb29-088bb633bb5c@openmailbox.org>
1152
1153Dmitry Bogatov aka KAction, Russian free software activist and
1154mathematics teacher at Moscow’s Finance and Law University, arrested in
1155Russia and charged with extremism.
1156
1157Here is news report about his arrest
1158https://meduza.io/en/feature/2017/04/10/mathematics-teacher-accused-of-inciting-mass-riots-now-also-accused-of-supporting-terrorism-and-once-again-detained
1159
1160>From his Tor exit node user with nickname Airat Basharov posted some
1161messages on sysadmins.ru website. Russian investigators alleged that
1162this messages contains a call to mass riots and terrorism. Messages were
1163posted from different IPs in different countries (probably another exit
1164nodes), and only one was posted from Bogatov's IP. After Bogatov's
1165arrest, Airat Basharov continue to post messages.
1166
1167Here is his Tor exit node, last seen 2017-04-05 20:00:00
1168https://atlas.torproject.org/#details/2402CD5A0D848D1DCA61EB708CC1FBD4364AB8AE
1169
1170Another report about Bogatov
1171https://meduza.io/feature/2017/04/10/kak-arestovali-matematika-dmitriya-bogatova-i-v-chem-imenno-ego-obvinyayut
1172(in Russian)
1173
1174#FreeBogatov
1175
1176--
1177https://nesterov.pw
1178GPG key: 0CE8 65F1 9043 2B11 25A5 74A7 1187 6869 67AA 56E4
1179https://keybase.io/komachi/key.asc
1180
1181From mateo.carm at protonmail.ch Mon Apr 10 23:19:17 2017
1182From: mateo.carm at protonmail.ch (Mateo Carmona)
1183Date: Mon, 10 Apr 2017 19:19:17 -0400
1184Subject: [tor-talk] release of heads 0.2 live 100% libre torified distro
1185 based on devuan
1186In-Reply-To: <20170327211938.GA24175@reflex>
1187References: <20170327211938.GA24175@reflex>
1188Message-ID: <S338uDBUCEGcDjI6qURptinnBjIBg5SYkuVlZGKOukAN97opWbsgjMtq5z6hD8lOfMHSpVgkPbeRTD_JVWdt_F7gcrviPeDKkcMh_Q0hNog=@protonmail.ch>
1189
1190Dear tor-talkers,
1191
1192In regard to the great news about the release of heads OS I have two things to say, first congratulations! second why the heads repository is hosted in a non-free software repository (github). Is it not about Libre-privacy?
1193
1194happy hacking,
1195Mateo Carmona
1196
1197-------- Original Message --------
1198Subject: [tor-talk] release of heads 0.2 live 100% libre torified distro based on devuan
1199Local Time: 27 de marzo de 2017 4:17 PM
1200UTC Time: 27 de marzo de 2017 21:17
1201From: jaromil at dyne.org
1202To: tor-talk <tor-talk at lists.torproject.org>
1203
1204dear fellow tor-talkers :^)
1205
1206with this mail let me bring to your attention heads gnu/linux, a new
1207live distribution hitting release 0.2 and mature enough for the first
1208expert opinions and tor-fingering around: https://heads.dyne.org
1209
1210heads is not only a version of tails without systemd, which we
1211consider an enormous new surface of attack many of us don't even want
1212to be exposed to.
1213
1214to protect its users from any backdoors in device firmware, heads aims
1215also to be a 100% Free linux distribution without any binary blobs or
1216proprietary software, following to the guidelines of the GNU project
1217https://www.gnu.org/distros/free-system-distribution-guidelines.html
1218at the same time heads linux kernel is patched with -grsec using an
1219hardened profile and routes all its traffic through tor.
1220
1221at Dyne.org we are great fans of the tor project and we used to run
1222exit nodes back in 2005, barely resisting police raids and what
1223not. now with heads the intention is to thank and give back to the tor
1224developers and community another useful tool in the family, that's why
1225we plan to support our mate parazyd on this long term effort.
1226
1227for those in the tor-dev roadshow willing to give it a shot we left a
1228copy in the hands of an activist following the tor-dev tour across
1229Europe these days, in the hope that will be useful.
1230
1231happy hacking
1232
1233--
1234~.,_ Denis Roio aka Jaromil http://Dyne.org think &do tank
1235"+. CTO and co-founder free/open source developers
1236@) âš· crypto κÃÂÅÀÄο úрøÿтþ à ¤—à ¥Âà ¤ªà ¥Âà ¤¤à ¥ åŠå¯†×â€Ã—Â× וסינالمشÙÂره
1237@@) GnuPG: 6113D89C A825C5CE DD02C872 73B35DA5 4ACB7D10
1238(@@@) opmsg:73a8e097a038d82b 8afb4c05804bda0d 281b3880fbc19b88
1239
1240--
1241tor-talk mailing list - tor-talk at lists.torproject.org
1242To unsubscribe or change other settings go to
1243https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
1244
1245From joebtfsplk at gmx.com Tue Apr 11 00:11:48 2017
1246From: joebtfsplk at gmx.com (Joe Btfsplk)
1247Date: Mon, 10 Apr 2017 19:11:48 -0500
1248Subject: [tor-talk] Tor Browser Linux_don't extract to root
1249Message-ID: <3fc530c6-0efe-1ea7-4b22-29e738fd341e@gmx.com>
1250
1251What is the reason(s) the TBB instructions say do not install (extract)
1252TBB to root?
1253Is it so the TBB files will be in a location where the user has write
1254permissions, so that TBB updates can automatically D/L and install?
1255
1256Other than that, does installing TBB to a location where anyone /
1257anything has full r/w/x permissions (like in /home), weaken the security
1258of Linux, compared to packages installed via a distro's software manager?
1259
1260From parazyd at dyne.org Tue Apr 11 05:58:36 2017
1261From: parazyd at dyne.org (parazyd)
1262Date: Tue, 11 Apr 2017 07:58:36 +0200
1263Subject: [tor-talk] release of heads 0.2 live 100% libre torified distro
1264 based on devuan
1265In-Reply-To: <S338uDBUCEGcDjI6qURptinnBjIBg5SYkuVlZGKOukAN97opWbsgjMtq5z6hD8lOfMHSpVgkPbeRTD_JVWdt_F7gcrviPeDKkcMh_Q0hNog=@protonmail.ch>
1266References: <20170327211938.GA24175@reflex>
1267 <S338uDBUCEGcDjI6qURptinnBjIBg5SYkuVlZGKOukAN97opWbsgjMtq5z6hD8lOfMHSpVgkPbeRTD_JVWdt_F7gcrviPeDKkcMh_Q0hNog=@protonmail.ch>
1268Message-ID: <20170411055836.GA17416@fq>
1269
1270On Mon, 10 Apr 2017, Mateo Carmona wrote:
1271
1272> Dear tor-talkers,
1273>
1274> In regard to the great news about the release of heads OS I have two things to say, first congratulations! second why the heads repository is hosted in a non-free software repository (github). Is it not about Libre-privacy?
1275>
1276> happy hacking,
1277> Mateo Carmona
1278
1279Thank you!
1280
1281I've tried hosting the repositories on git.devuan.org, but it hasn't
1282performed on-par at that time. I also don't have another place as good
1283as Github to host everything, along with the bugtracker. In any case, a
1284plethora of free software projects are hosted on Github, and I don't
1285really see an issue. All my git commits are signed with gnupg so we have
1286that going at least.
1287
1288--
1289~ parazyd
1290GPG: 0333 7671 FDE7 5BB6 A85E C91F B876 CB44 FA1B 0274
1291-------------- next part --------------
1292A non-text attachment was scrubbed...
1293Name: signature.asc
1294Type: application/pgp-signature
1295Size: 1528 bytes
1296Desc: Digital signature
1297URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170411/3cdb2908/attachment.sig>
1298
1299From lara.tor at emails.veryspeedy.net Tue Apr 11 06:41:00 2017
1300From: lara.tor at emails.veryspeedy.net (Lara)
1301Date: Tue, 11 Apr 2017 06:41:00 +0000
1302Subject: [tor-talk] release of heads 0.2 live 100% libre torified distro
1303 based on devuan
1304In-Reply-To: <20170411055836.GA17416@fq>
1305References: <20170327211938.GA24175@reflex>
1306 <S338uDBUCEGcDjI6qURptinnBjIBg5SYkuVlZGKOukAN97opWbsgjMtq5z6hD8lOfMHSpVgkPbeRTD_JVWdt_F7gcrviPeDKkcMh_Q0hNog=@protonmail.ch>
1307 <20170411055836.GA17416@fq>
1308Message-ID: <db8acd43-20fc-ad8b-3fd6-496a9706822f@emails.veryspeedy.net>
1309
1310parazyd:
1311> On Mon, 10 Apr 2017, Mateo Carmona wrote:
1312>> In regard to the great news about the release of heads OS I have two things to say, first congratulations! second why the heads repository is hosted in a non-free software repository (github). Is it not about Libre-privacy?
1313>
1314> I've tried hosting the repositories on git.devuan.org, but it hasn't
1315> performed on-par at that time. I also don't have another place as good
1316> as Github to host everything, along with the bugtracker. In any case, a
1317> plethora of free software projects are hosted on Github, and I don't
1318> really see an issue. All my git commits are signed with gnupg so we have
1319> that going at least.
1320
1321Welcome to the "free" software world!
1322
1323Where the developers aren't reliable enough to have a host and a HTTPS
1324certificate. And where those handicapped enough to be unable to write
1325software have informed oppinions as long as they don't have to pay a cent.
1326
1327
1328From parazyd at dyne.org Tue Apr 11 06:49:39 2017
1329From: parazyd at dyne.org (parazyd)
1330Date: Tue, 11 Apr 2017 08:49:39 +0200
1331Subject: [tor-talk] release of heads 0.2 live 100% libre torified distro
1332 based on devuan
1333In-Reply-To: <db8acd43-20fc-ad8b-3fd6-496a9706822f@emails.veryspeedy.net>
1334References: <20170327211938.GA24175@reflex>
1335 <S338uDBUCEGcDjI6qURptinnBjIBg5SYkuVlZGKOukAN97opWbsgjMtq5z6hD8lOfMHSpVgkPbeRTD_JVWdt_F7gcrviPeDKkcMh_Q0hNog=@protonmail.ch>
1336 <20170411055836.GA17416@fq>
1337 <db8acd43-20fc-ad8b-3fd6-496a9706822f@emails.veryspeedy.net>
1338Message-ID: <20170411064939.GA4081@fq>
1339
1340On Tue, 11 Apr 2017, Lara wrote:
1341
1342> parazyd:
1343> > On Mon, 10 Apr 2017, Mateo Carmona wrote:
1344> >> In regard to the great news about the release of heads OS I have two things to say, first congratulations! second why the heads repository is hosted in a non-free software repository (github). Is it not about Libre-privacy?
1345> >
1346> > I've tried hosting the repositories on git.devuan.org, but it hasn't
1347> > performed on-par at that time. I also don't have another place as good
1348> > as Github to host everything, along with the bugtracker. In any case, a
1349> > plethora of free software projects are hosted on Github, and I don't
1350> > really see an issue. All my git commits are signed with gnupg so we have
1351> > that going at least.
1352>
1353> Welcome to the "free" software world!
1354>
1355> Where the developers aren't reliable enough to have a host and a HTTPS
1356> certificate. And where those handicapped enough to be unable to write
1357> software have informed oppinions as long as they don't have to pay a cent.
1358
1359<3
1360
1361--
1362~ parazyd
1363GPG: 0333 7671 FDE7 5BB6 A85E C91F B876 CB44 FA1B 0274
1364-------------- next part --------------
1365A non-text attachment was scrubbed...
1366Name: signature.asc
1367Type: application/pgp-signature
1368Size: 1528 bytes
1369Desc: Digital signature
1370URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170411/83a0deaa/attachment-0001.sig>
1371
1372From intrigeri at boum.org Tue Apr 11 07:29:58 2017
1373From: intrigeri at boum.org (intrigeri)
1374Date: Tue, 11 Apr 2017 09:29:58 +0200
1375Subject: [tor-talk] release of heads 0.2 live 100% libre torified distro
1376 based on devuan
1377In-Reply-To: <db8acd43-20fc-ad8b-3fd6-496a9706822f@emails.veryspeedy.net>
1378 (Lara's message of "Tue, 11 Apr 2017 06:41:00 +0000")
1379References: <20170327211938.GA24175@reflex>
1380 <S338uDBUCEGcDjI6qURptinnBjIBg5SYkuVlZGKOukAN97opWbsgjMtq5z6hD8lOfMHSpVgkPbeRTD_JVWdt_F7gcrviPeDKkcMh_Q0hNog=@protonmail.ch>
1381 <20170411055836.GA17416@fq>
1382 <db8acd43-20fc-ad8b-3fd6-496a9706822f@emails.veryspeedy.net>
1383Message-ID: <85efwzz9jd.fsf@boum.org>
1384
1385Hi,
1386
1387Lara:
1388> those handicapped enough to be unable to write software
1389
1390This can be interpreted in a number of ways, including some that
1391I personally find problematic. But maybe you want to rephrase so
1392I understand better what you meant?
1393
1394Cheers,
1395--
1396intrigeri
1397
1398From mail at parckwart.de Tue Apr 11 08:47:05 2017
1399From: mail at parckwart.de (Jonathan Marquardt)
1400Date: Tue, 11 Apr 2017 10:47:05 +0200
1401Subject: [tor-talk] Tor Browser Linux_don't extract to root
1402In-Reply-To: <3fc530c6-0efe-1ea7-4b22-29e738fd341e@gmx.com>
1403References: <3fc530c6-0efe-1ea7-4b22-29e738fd341e@gmx.com>
1404Message-ID: <20170411084704.GA30993@parckwart.de>
1405
1406On Mon, Apr 10, 2017 at 07:11:48PM -0500, Joe Btfsplk wrote:
1407> What is the reason(s) the TBB instructions say do not install (extract) TBB
1408> to root?
1409> Is it so the TBB files will be in a location where the user has write
1410> permissions, so that TBB updates can automatically D/L and install?
1411
1412Yes, that's the biggest advantage, I think. We don’t want superold versions of
1413TBB to be used, do we?
1414
1415> Other than that, does installing TBB to a location where anyone / anything
1416> has full r/w/x permissions (like in /home), weaken the security of Linux,
1417> compared to packages installed via a distro's software manager?
1418
1419If "anyone / anything has full r/w/x permissions" in /home on your system,
1420you're doing something very wrong. Only the individual users should have write
1421permissions in their own home directories. On a multi-user system it is also a
1422good idea to give "world" zero permissions in your user home directory so no
1423other users can read your files.
1424--
14254096R/1224DBD299A4F5F3
142647BC 7DE8 3D46 2E8B ED18 AA86 1224 DBD2 99A4 F5F3
1427-------------- next part --------------
1428A non-text attachment was scrubbed...
1429Name: signature.asc
1430Type: application/pgp-signature
1431Size: 819 bytes
1432Desc: Digital signature
1433URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170411/9fde5815/attachment.sig>
1434
1435From lolint at protonmail.com Tue Apr 11 13:28:51 2017
1436From: lolint at protonmail.com (Lolint)
1437Date: Tue, 11 Apr 2017 09:28:51 -0400
1438Subject: [tor-talk] Suspicious rise in direct users connection from Israel
1439 (from ~9k to >100k)
1440Message-ID: <1NzvbAs2thgiw3Y3rg_v-tPhVBBQq0jyDpEqkRLwoDoIXnSNHoWl1vu0rDySOG27xy06Y182DPBNzXnNfxjuQvjDE1ITEUhHDkk5RhPbxe8=@protonmail.com>
1441
1442Hi,
1443
1444Direct users graph:
1445
1446https://metrics.torproject.org/userstats-relay-country.html?graph=userstats-relay-country&country=il
1447
1448Bridge users (nothing suspicious for now):
1449
1450https://metrics.torproject.org/userstats-bridge-combined.html?start=2017-01-11&end=2017-04-11&country=il
1451
1452--Jeff
1453
1454From nusenu at openmailbox.org Tue Apr 11 14:45:00 2017
1455From: nusenu at openmailbox.org (nusenu)
1456Date: Tue, 11 Apr 2017 14:45:00 +0000
1457Subject: [tor-talk] Suspicious rise in direct users connection from
1458 Israel (from ~9k to >100k)
1459In-Reply-To: <1NzvbAs2thgiw3Y3rg_v-tPhVBBQq0jyDpEqkRLwoDoIXnSNHoWl1vu0rDySOG27xy06Y182DPBNzXnNfxjuQvjDE1ITEUhHDkk5RhPbxe8=@protonmail.com>
1460References: <1NzvbAs2thgiw3Y3rg_v-tPhVBBQq0jyDpEqkRLwoDoIXnSNHoWl1vu0rDySOG27xy06Y182DPBNzXnNfxjuQvjDE1ITEUhHDkk5RhPbxe8=@protonmail.com>
1461Message-ID: <cf620fea-ee1e-502d-dc9d-8123f3395506@openmailbox.org>
1462
1463> Direct users graph:
1464>
1465> https://metrics.torproject.org/userstats-relay-country.html?graph=userstats-relay-country&country=il
1466>
1467> Bridge users (nothing suspicious for now):
1468>
1469> https://metrics.torproject.org/userstats-bridge-combined.html?start=2017-01-11&end=2017-04-11&country=il
1470
1471interesting.
1472I'm wondering why that spike of new users from IL does not show in the
1473overall user graphs. Did another country "lose" that many users at the
1474same time?
1475
1476
1477--
1478https://mastodon.social/@nusenu
1479https://twitter.com/nusenu_
1480
1481-------------- next part --------------
1482A non-text attachment was scrubbed...
1483Name: signature.asc
1484Type: application/pgp-signature
1485Size: 801 bytes
1486Desc: OpenPGP digital signature
1487URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170411/8b80586d/attachment.sig>
1488
1489From mirimir at riseup.net Tue Apr 11 14:55:22 2017
1490From: mirimir at riseup.net (Mirimir)
1491Date: Tue, 11 Apr 2017 08:55:22 -0600
1492Subject: [tor-talk] Suspicious rise in direct users connection from
1493 Israel (from ~9k to >100k)
1494In-Reply-To: <1NzvbAs2thgiw3Y3rg_v-tPhVBBQq0jyDpEqkRLwoDoIXnSNHoWl1vu0rDySOG27xy06Y182DPBNzXnNfxjuQvjDE1ITEUhHDkk5RhPbxe8=@protonmail.com>
1495References: <1NzvbAs2thgiw3Y3rg_v-tPhVBBQq0jyDpEqkRLwoDoIXnSNHoWl1vu0rDySOG27xy06Y182DPBNzXnNfxjuQvjDE1ITEUhHDkk5RhPbxe8=@protonmail.com>
1496Message-ID: <bad86a1a-9ec6-d045-b5a4-939e4da3e70a@riseup.net>
1497
1498On 04/11/2017 07:28 AM, Lolint wrote:
1499> Hi,
1500>
1501> Direct users graph:
1502>
1503> https://metrics.torproject.org/userstats-relay-country.html?graph=userstats-relay-country&country=il
1504
1505This can mean that something is forcing rapid reconnection, right?
1506
1507> Bridge users (nothing suspicious for now):
1508>
1509> https://metrics.torproject.org/userstats-bridge-combined.html?start=2017-01-11&end=2017-04-11&country=il
1510>
1511> --Jeff
1512>
1513
1514From lolint at protonmail.com Tue Apr 11 15:06:00 2017
1515From: lolint at protonmail.com (Lolint)
1516Date: Tue, 11 Apr 2017 11:06:00 -0400
1517Subject: [tor-talk] Suspicious rise in direct users connection from
1518 Israel (from ~9k to >100k)
1519In-Reply-To: <cf620fea-ee1e-502d-dc9d-8123f3395506@openmailbox.org>
1520References: <1NzvbAs2thgiw3Y3rg_v-tPhVBBQq0jyDpEqkRLwoDoIXnSNHoWl1vu0rDySOG27xy06Y182DPBNzXnNfxjuQvjDE1ITEUhHDkk5RhPbxe8=@protonmail.com>
1521 <cf620fea-ee1e-502d-dc9d-8123f3395506@openmailbox.org>
1522Message-ID: <Rpr5dYM7wPwfEHUpboHaZUgEwi0aAQhvQZoaU1GqdyIN9q2VaIXy63AmK1rtc8UDFbP4uJyjj03N5kQnOObEAlXou0BINtcvUzgFFtOjLbE=@protonmail.com>
1523
1524> I'm wondering why that spike of new users from IL does not show in theoverall user graphs.
1525> Did another country "lose" that many users at the same time?
1526
1527Another country, no. Other countries yes :) It's 91k more users, minus total losses from
1528other countries which should add up to it. For example the US lost about 20k, Brazil 7k, ...
1529
1530But I expect it to appear soon.
1531
1532From anonym at riseup.net Tue Apr 11 16:26:00 2017
1533From: anonym at riseup.net (anonym)
1534Date: Tue, 11 Apr 2017 16:26:00 +0000
1535Subject: [tor-talk] No more logs on 0.3.1
1536In-Reply-To: <CAHEKVboHru7_zd2LzuH79HamJaYGv1KS5i_M=1Y_fZJ0nvB3DA@mail.gmail.com>
1537References: <CAHEKVboHru7_zd2LzuH79HamJaYGv1KS5i_M=1Y_fZJ0nvB3DA@mail.gmail.com>
1538Message-ID: <92a0ddc0-4828-468d-dd48-53ca9515cd62@riseup.net>
1539
1540Seby:
1541> Hi list,
1542>
1543> Upgraded to a newer version on Debian (Jessie) and can't find any logs in
1544> /var/log/tor folder. They used to be there under 0.2.9. Tor is running,
1545> socks works, I can browse the web via Tor but don't find any logs. Is this
1546> normal?
1547
1548This is expected if your run tor >= 0.3: in the Debian packaging the default logging was switched to using syslog, so on a default systemd-enabled Debian Jessie system you should look in the journal, e.g.:
1549
1550 sudo journalctl -u tor at default.service
1551
1552Cheers!
1553
1554
1555From joebtfsplk at gmx.com Tue Apr 11 19:18:38 2017
1556From: joebtfsplk at gmx.com (Joe Btfsplk)
1557Date: Tue, 11 Apr 2017 14:18:38 -0500
1558Subject: [tor-talk] Tor Browser Linux_don't extract to root
1559In-Reply-To: <20170411084704.GA30993@parckwart.de>
1560References: <3fc530c6-0efe-1ea7-4b22-29e738fd341e@gmx.com>
1561 <20170411084704.GA30993@parckwart.de>
1562Message-ID: <0498ab06-a28c-87af-991e-1cf89d654bb0@gmx.com>
1563
1564
1565On 04/11/2017 03:47 AM, Jonathan Marquardt wrote:
1566> On Mon, Apr 10, 2017 at 07:11:48PM -0500, Joe Btfsplk wrote:
1567>> What is the reason(s) the TBB instructions say do not install (extract) TBB
1568>> to root?
1569>> Is it so the TBB files will be in a location where the user has write
1570>> permissions, so that TBB updates can automatically D/L and install?
1571> Yes, that's the biggest advantage, I think. We don’t want superold versions of
1572> TBB to be used, do we?
1573>
1574>> Other than that, does installing TBB to a location where anyone / anything
1575>> has full r/w/x permissions (like in /home), weaken the security of Linux,
1576>> compared to packages installed via a distro's software manager?
1577> If "anyone / anything has full r/w/x permissions" in /home on your system,
1578> you're doing something very wrong. Only the individual users should have write
1579> permissions in their own home directories. On a multi-user system it is also a
1580> good idea to give "world" zero permissions in your user home directory so no
1581> other users can read your files.
1582>
1583Thanks. I may be missing something here. Anyone feel free to correct
1584me where I'm wrong.
1585I'm not "doing" anything with /home permissions - it's Linux defaults.
1586AFAIK, once a user logs into their 'nix acct, anything that writes to
1587(most) files in /home can do so - w/o any prompting.
1588
1589For browsers - Firefox - that's full access to most things under
1590.mozilla, but not Firefox program files - installed elsewhere. In
1591/home, the user is the owner & has full r/w/x permissions for most
1592files there - no PW required to change files there (once logged in).
1593There're some exceptions to that, like .local/keyrings.
1594
1595For TBB extracted to a folder in /home, on files I checked (tor,
1596cached-certs, torrc, etc.) - the user is owner & has r/w/(x) permissions
1597by default. No PW required - like any document in /home. So anything
1598that makes it past basic defenses of the browser, NoScript, etc. - would
1599generally have r/w/x permissions on most TBB files in /home - yes?
1600
1601Conversely, Firefox installed to /usr & other protected directories that
1602most installed apps use, by default the user or anything making it onto
1603the computer don't have w/x permissions for those "program files."
1604Yes? That's part of Linux overall security.
1605
1606Maybe I'm missing something. Tor Project goes to great lengths to
1607provide uncompromised TBB copies & ways to verify them, but at least in
1608Linux - advises putting it in the least secure area, so it can update
1609automatically with one click? (because TBB wasn't installed via a Linux
1610software manager & therefore automatic updates wouldn't be allowed).
1611Seems like that's in opposition to all the other TBB security efforts.
1612
1613When Linux users choose to D/L the latest release from mozilla & install
1614to /opt or /usr/local, it won't update automatically or w/ a click,
1615AFAIK. Unless you change ownership / permissions of those directories -
1616which I've read is a bad idea, security wise. (I'm not sure the D/L
1617Linux Fx ver has "update now" available in about:firefox, anyway).
1618
1619But, for Fx or Tbird in /opt you can install update files from Mozilla
1620easily enough using sudo. It takes typing a few characters vs. one click.
1621
1622From grarpamp at gmail.com Wed Apr 12 08:19:04 2017
1623From: grarpamp at gmail.com (grarpamp)
1624Date: Wed, 12 Apr 2017 04:19:04 -0400
1625Subject: [tor-talk] Suspicious rise in direct users connection from
1626 Israel (from ~9k to >100k)
1627In-Reply-To: <cf620fea-ee1e-502d-dc9d-8123f3395506@openmailbox.org>
1628References: <1NzvbAs2thgiw3Y3rg_v-tPhVBBQq0jyDpEqkRLwoDoIXnSNHoWl1vu0rDySOG27xy06Y182DPBNzXnNfxjuQvjDE1ITEUhHDkk5RhPbxe8=@protonmail.com>
1629 <cf620fea-ee1e-502d-dc9d-8123f3395506@openmailbox.org>
1630Message-ID: <CAD2Ti28Tt81OfFbz7JHRrD7NMC5KkRrDJMVobUzjycwtEDhZvA@mail.gmail.com>
1631
1632On Tue, Apr 11, 2017 at 10:45 AM, nusenu <nusenu at openmailbox.org> wrote:
1633> I'm wondering why that spike of new users from IL does not show in the
1634> overall user graphs.
1635
1636Though perhaps unlikely, especially without it being publicly known,
1637it is possible for certain demographic cultural / religious / industry
1638"apps" to arise that might be using tor, and be academically identifiable.
1639ie: IL is 75% Jewish, presence in all other countries is
1640proportionally insignificant.
1641This sole presence of a thing in mass proportion in one place is
1642relatively unique.
1643It may be possible to aggregate other countries into sets to
1644identify bumps potentially relavant to their combined (yet unique
1645to them, and en masse therein as well) demographics.
1646You can probably come up with possible examples.
1647
1648Unlikely the Torah suddenly went digital via tor.
1649More likely GeoIP broken, or network interference / attack / research.
1650
1651From mail at parckwart.de Wed Apr 12 08:23:02 2017
1652From: mail at parckwart.de (Jonathan Marquardt)
1653Date: Wed, 12 Apr 2017 10:23:02 +0200
1654Subject: [tor-talk] Tor Browser Linux_don't extract to root
1655In-Reply-To: <0498ab06-a28c-87af-991e-1cf89d654bb0@gmx.com>
1656References: <3fc530c6-0efe-1ea7-4b22-29e738fd341e@gmx.com>
1657 <20170411084704.GA30993@parckwart.de>
1658 <0498ab06-a28c-87af-991e-1cf89d654bb0@gmx.com>
1659Message-ID: <20170412082302.GA2897@parckwart.de>
1660
1661On Tue, Apr 11, 2017 at 02:18:38PM -0500, Joe Btfsplk wrote:
1662> I'm not "doing" anything with /home permissions - it's Linux defaults.
1663> AFAIK, once a user logs into their 'nix acct, anything that writes to (most)
1664> files in /home can do so - w/o any prompting.
1665
1666I think the confusion comes from the way you phrase this. No, a user cannot
1667write to "/home", but to "/home/user". That's what you mean, right?
1668
1669It should look something like this:
1670
1671$ ls -lah /home/
1672total 12K
1673drwxr-xr-x 3 root root 4.0K Dec 23 11:33 .
1674drwxr-xr-x 24 root root 4.0K Sep 16 2016 ..
1675drwxr-xr-x 52 user user 4.0K Apr 12 09:15 user
1676
1677For the rest of this email, I'll assume that you mean "/home/user" when
1678talking about "/home".
1679
1680> For browsers - Firefox - that's full access to most things under .mozilla,
1681> but not Firefox program files - installed elsewhere. In /home, the user is
1682> the owner & has full r/w/x permissions for most files there - no PW
1683> required to change files there (once logged in). There're some exceptions
1684> to that, like .local/keyrings.
1685
1686Right.
1687
1688> For TBB extracted to a folder in /home, on files I checked (tor,
1689> cached-certs, torrc, etc.) - the user is owner & has r/w/(x) permissions by
1690> default. No PW required - like any document in /home. So anything that
1691> makes it past basic defenses of the browser, NoScript, etc. - would
1692> generally have r/w/x permissions on most TBB files in /home - yes?
1693
1694What? Do you mean like...web pages having access to the files in your home
1695directory? That's not how web browsers work. A web page should never be able
1696to just access files on your system. If something like this was possible, it
1697would be considered an exploit. Not just with TBB, but with any browser.
1698JavaScript is a sandbox and must be so.
1699
1700> Conversely, Firefox installed to /usr & other protected directories that
1701> most installed apps use, by default the user or anything making it onto the
1702> computer don't have w/x permissions for those "program files." Yes? That's
1703> part of Linux overall security.
1704
1705Right, as long as you don't talk about web pages. They don't have any file
1706access in general.
1707
1708> Maybe I'm missing something. Tor Project goes to great lengths to provide
1709> uncompromised TBB copies & ways to verify them, but at least in Linux -
1710> advises putting it in the least secure area, so it can update automatically
1711> with one click? (because TBB wasn't installed via a Linux software manager
1712> & therefore automatic updates wouldn't be allowed). Seems like that's in
1713> opposition to all the other TBB security efforts.
1714>
1715> When Linux users choose to D/L the latest release from mozilla & install to
1716> /opt or /usr/local, it won't update automatically or w/ a click, AFAIK.
1717> Unless you change ownership / permissions of those directories - which I've
1718> read is a bad idea, security wise. (I'm not sure the D/L Linux Fx ver has
1719> "update now" available in about:firefox, anyway).
1720>
1721> But, for Fx or Tbird in /opt you can install update files from Mozilla
1722> easily enough using sudo. It takes typing a few characters vs. one click.
1723
1724Both methods (putting apps into global dirs vs. putting them into home dirs)
1725have their own advantages and disadvantages. With globally installed apps, you
1726can install updates for every user simultaneously and it saves disk space. On
1727the other hand, it requires a privileged user the always keep stuff
1728up-to-date, whereas with the other method, non-privileged users can perform
1729their own updates themselfes. You need to keep in mind that there are many
1730multi-user systems out there, where some users simply don't have root/sudo
1731permissions.
1732
1733--
17344096R/1224DBD299A4F5F3
173547BC 7DE8 3D46 2E8B ED18 AA86 1224 DBD2 99A4 F5F3
1736-------------- next part --------------
1737A non-text attachment was scrubbed...
1738Name: signature.asc
1739Type: application/pgp-signature
1740Size: 819 bytes
1741Desc: Digital signature
1742URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170412/ef2b1e97/attachment.sig>
1743
1744From lolint at protonmail.com Wed Apr 12 08:32:09 2017
1745From: lolint at protonmail.com (Lolint)
1746Date: Wed, 12 Apr 2017 04:32:09 -0400
1747Subject: [tor-talk] Suspicious rise in direct users connection from
1748 Israel (from ~9k to >100k)
1749In-Reply-To: <cf620fea-ee1e-502d-dc9d-8123f3395506@openmailbox.org>
1750References: <1NzvbAs2thgiw3Y3rg_v-tPhVBBQq0jyDpEqkRLwoDoIXnSNHoWl1vu0rDySOG27xy06Y182DPBNzXnNfxjuQvjDE1ITEUhHDkk5RhPbxe8=@protonmail.com>
1751 <cf620fea-ee1e-502d-dc9d-8123f3395506@openmailbox.org>
1752Message-ID: <-lZ_r_JsASE2CZjZcdOjHI-352zUvfALvLNMan4RhV_HVnKgeiEL7eMV1sSlfaRhYWPLhbPxApolyzT4prVQO9LhcnC_HCsuMDjP05EnnX8=@protonmail.com>
1753
1754As predicted the spike is now visible in the global graph.
1755
1756Also compare these two:
1757
1758https://metrics.torproject.org/userstats-relay-country.html?start=2016-11-12&end=2017-01-23&country=ae&events=off
1759
1760https://metrics.torproject.org/userstats-relay-country.html?start=2017-01-12&end=2017-04-11&country=il&events=off
1761
1762Looks very similar.
1763
1764From nusenu at openmailbox.org Wed Apr 12 11:56:00 2017
1765From: nusenu at openmailbox.org (nusenu)
1766Date: Wed, 12 Apr 2017 11:56:00 +0000
1767Subject: [tor-talk] "Is this a Ubuntu-based Botnet deploying Tor Relays and
1768 Bridges?"
1769Message-ID: <ce51b775-0889-910a-d6e9-a13ac0994bb8@openmailbox.org>
1770
1771I put together a bit of information about the "UbuntuCore" named relays:
1772
1773https://medium.com/@nusenu/is-this-a-ubuntu-based-botnet-deploying-tor-relays-and-bridges-b4ce1a612039
1774
1775If you have any insides or comments I'd like to hear from you.
1776
1777
1778--
1779https://mastodon.social/@nusenu
1780https://twitter.com/nusenu_
1781
1782-------------- next part --------------
1783A non-text attachment was scrubbed...
1784Name: signature.asc
1785Type: application/pgp-signature
1786Size: 801 bytes
1787Desc: OpenPGP digital signature
1788URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170412/4e7ab32c/attachment.sig>
1789
1790From joebtfsplk at gmx.com Wed Apr 12 22:32:14 2017
1791From: joebtfsplk at gmx.com (Joe Btfsplk)
1792Date: Wed, 12 Apr 2017 17:32:14 -0500
1793Subject: [tor-talk] Tor Browser Linux_don't extract to root
1794In-Reply-To: <20170412082302.GA2897@parckwart.de>
1795References: <3fc530c6-0efe-1ea7-4b22-29e738fd341e@gmx.com>
1796 <20170411084704.GA30993@parckwart.de>
1797 <0498ab06-a28c-87af-991e-1cf89d654bb0@gmx.com>
1798 <20170412082302.GA2897@parckwart.de>
1799Message-ID: <ac27d293-77e7-80cc-9915-f547132d74a9@gmx.com>
1800
1801
1802
1803On 04/12/2017 03:23 AM, Jonathan Marquardt wrote:
1804> Both methods (putting apps into global dirs vs. putting them into home
1805> dirs)
1806> have their own advantages and disadvantages.
1807>
1808Jonathan - thanks. Other than automatically updating, what are the
1809advantages of installing to /home/user - or somewhere not root owned?
1810The other main disadvantage is, it makes TBB program files easily
1811accessible to malware, or anyone / thing w/ access to your machine,
1812after the user logs on.
1813
1814Yes - technically /home/user. There is a separate "/home" under System
1815Files, but if there's only one user acct, then it contains the same
1816folders as clicking /home/user. AFAIK, for single user acct setup, the
1817only things under "/home" are user files & settings. Most accessible
1818by the acct user w/o a PW.
1819
1820No, I don't mean "ordinary, non-malicious stuff" D/L through TBB. TBB
1821isn't 100% bullet proof - nor any other app. I mean malicious things
1822that could slip by, even via zero days. Zero days - maybe unlikely.
1823Other methods - apparently not terribly difficult.
1824
1825That's why I said, "So anything that makes it past basic defenses of the
1826browser, NoScript, etc. - would
1827generally have r/w/x permissions on most TBB files in /home(/user)."
1828I assumed that was clear it implied malware, or a malicious sites, or
1829adversary - say, trying to modify TBB program files, etc. Not ordinary
1830websites, following the rules.
1831
1832Again, IIUC, "malware" making it past browser & NoScript defenses and AV
1833- if using one, has far easier access to TBB program files than apps
1834installed to limited permissions directories. TBB files are less
1835protected than a normal browser installed from repositories, or even
1836installed manually to say, /opt.
1837That's the part I don't understand - why TorProject seems to encourage
1838lessening some of Linux security, rather than increasing it.
1839
1840Perhaps if Tor Project doesn't want to set up a PPA (and guard, monitor
1841it) - so TBB can auto-update, they should include a sort of "Tor / TBB
1842file checker" - to monitor for changed files that shouldn't change,
1843unless from updates.
1844Seems logical to create a PPA. They could / should check signatures -
1845automatically - when the updates / installs finish downloading from the
1846PPA, before installing.
1847
1848
1849From nima at torproject.org Thu Apr 13 02:34:00 2017
1850From: nima at torproject.org (Nima Fatemi)
1851Date: Thu, 13 Apr 2017 02:34:00 +0000
1852Subject: [tor-talk] torbrowser vs. twitter picture upload?
1853In-Reply-To: <4f31a5be-f65f-704f-bcc8-4066b1d57935@openmailbox.org>
1854References: <4f31a5be-f65f-704f-bcc8-4066b1d57935@openmailbox.org>
1855Message-ID: <d4a761b3-a797-fa98-9d60-6cdf1f9e3c7c@riseup.net>
1856
1857nusenu:
1858> Hi,
1859>
1860> everytime I try to upload a twitter profile picture the dialog with
1861> resize and zoom opens and after clicking apply I get "sucessfully uploaded"
1862> but the resulting picture "cannot be displayed because it contains errors".
1863>
1864> Did you upload your twitter profile picture with torbrowser without
1865> problems?
1866
1867I believe you need to allow running canvas, for that to work.
1868
1869--
1870Nima
18710X58C4B928A3E218F6 | @mrphs
1872
1873"I disapprove of what you say, but I will defend to the death your right
1874to say it" --Evelyn Beatrice Hall
1875
1876From lolint at protonmail.com Thu Apr 13 14:52:55 2017
1877From: lolint at protonmail.com (Lolint)
1878Date: Thu, 13 Apr 2017 10:52:55 -0400
1879Subject: [tor-talk] Suspicious rise in direct users connection from
1880 Israel (from ~9k to >100k)
1881In-Reply-To: <bad86a1a-9ec6-d045-b5a4-939e4da3e70a@riseup.net>
1882References: <1NzvbAs2thgiw3Y3rg_v-tPhVBBQq0jyDpEqkRLwoDoIXnSNHoWl1vu0rDySOG27xy06Y182DPBNzXnNfxjuQvjDE1ITEUhHDkk5RhPbxe8=@protonmail.com>
1883 <bad86a1a-9ec6-d045-b5a4-939e4da3e70a@riseup.net>
1884Message-ID: <I2ZC4aJ4820IQzlk5KylOZ-eQbv3Ys-D0CkwhIU95_F6BYtDqLaHDgdmgfsgB6cK2BpfS-o33G0ZCDAdX9UHamKtFYr-FRhIRBpmrO8uJN4=@protonmail.com>
1885
1886> This can mean that something is forcing rapid reconnection, right?
1887
1888Yes, as with the Turkey block (see Annex A):
1889
1890https://turkeyblocks.org/2016/12/18/tor-blocked-in-turkey-vpn-ban/
1891
1892From mirimir at riseup.net Thu Apr 13 15:03:34 2017
1893From: mirimir at riseup.net (Mirimir)
1894Date: Thu, 13 Apr 2017 09:03:34 -0600
1895Subject: [tor-talk] Suspicious rise in direct users connection from
1896 Israel (from ~9k to >100k)
1897In-Reply-To: <I2ZC4aJ4820IQzlk5KylOZ-eQbv3Ys-D0CkwhIU95_F6BYtDqLaHDgdmgfsgB6cK2BpfS-o33G0ZCDAdX9UHamKtFYr-FRhIRBpmrO8uJN4=@protonmail.com>
1898References: <1NzvbAs2thgiw3Y3rg_v-tPhVBBQq0jyDpEqkRLwoDoIXnSNHoWl1vu0rDySOG27xy06Y182DPBNzXnNfxjuQvjDE1ITEUhHDkk5RhPbxe8=@protonmail.com>
1899 <bad86a1a-9ec6-d045-b5a4-939e4da3e70a@riseup.net>
1900 <I2ZC4aJ4820IQzlk5KylOZ-eQbv3Ys-D0CkwhIU95_F6BYtDqLaHDgdmgfsgB6cK2BpfS-o33G0ZCDAdX9UHamKtFYr-FRhIRBpmrO8uJN4=@protonmail.com>
1901Message-ID: <f223d7bc-513a-792a-a437-b4528236f97e@riseup.net>
1902
1903On 04/13/2017 08:52 AM, Lolint wrote:
1904>> This can mean that something is forcing rapid reconnection, right?
1905>
1906> Yes, as with the Turkey block (see Annex A):
1907>
1908> https://turkeyblocks.org/2016/12/18/tor-blocked-in-turkey-vpn-ban/
1909
1910Right, that's what I was thinking (vaguely) of.
1911
1912https://metrics.torproject.org/userstats-relay-country.html?start=2016-11-01&end=2017-04-13&country=tr&events=off
1913
1914From grarpamp at gmail.com Thu Apr 13 18:00:23 2017
1915From: grarpamp at gmail.com (grarpamp)
1916Date: Thu, 13 Apr 2017 14:00:23 -0400
1917Subject: [tor-talk] Fwd: Russian FOSS activist arrested for extremist
1918 materials/Tor exit-node
1919In-Reply-To: <20170413085711.GA6762@stargrave.org>
1920References: <20170413085711.GA6762@stargrave.org>
1921Message-ID: <CAD2Ti2-cPKui1=_xOOzTLPb8ykkGr+60CrtdYkcrpqra=Ta--A@mail.gmail.com>
1922
1923---------- Forwarded message ----------
1924From: <stargrave at stargrave.org>
1925Date: Thu, Apr 13, 2017 at 4:57 AM
1926Subject: Russian FOSS activist arrested for extremist materials/Tor exit-node
1927To: cypherpunks at lists.cpunks.org
1928
1929
1930Dmitry Bogatov was arrested on the 6th of April: he became part of the
1931big penal case initiated by Russia’s Investigation Committee on
1932"incitations to mass riots" during the protest action that took place on
1933the 2nd of April in Moscow. According to the Investigation Committee,
1934Bogatov was publishing messages on the forum sysadmin.ru, inciting to
1935violent actions, for example, "he" was suggesting to bring to the Red
1936Square "bottles, fabric, gasoline, turpentine, foam plastic". According
1937to the Investigation, the experts had analyzed the text of these
1938messages and proved a "linguistic and psychological characteristics of
1939incitations to terrorism". However, Dmitry claims that he has nothing to
1940do with posting the incendiary messages.
1941
1942Dmitry Bogatov, 25 years old, teaches maths in MFUA (Moscow Finance and
1943Law University) was a free and open source software activist
1944(https://sinsekvu.github.io/pages/about.html).
1945Dmitry was administrating a Tor exit node
1946(https://atlas.torproject.org/#details/2402CD5A0D848D1DCA61EB708CC1FBD4364AB8AE)
1947from his house. In fact, the author of "incendiary messages" (called
1948"Airat Bashirov") was using Tor, and, by lack of chance, he used the ip
1949adress of Dmitry's exit node.
1950
1951Dmitry's lawyer, Alexei Teptsov, presented videos from surveillance
1952cameras, that proved that, during the moments when the "incendiary
1953messages" were posted, Dmitry was away from his computer. He was coming
1954back from a fitness center with his wife, Tatiana, a genetician, and
1955then went to a supermarket, where cameras were also working. Moreover,
1956"Airat Bashirov", the author of the provocative messages, continues to
1957post on sysadmin.ru, while Dmitry is under arrest. The last post was
1958seen on the forum on April 11.
1959
1960Dmitry will stay in pre-trial detention center until June 8 at least.
1961Now the Investigation is examining all his seized devices.
1962
1963Dmitry Bogatov aka KAction, Russian free software activist and
1964mathematics teacher at Moscow’s Finance and Law University, arrested in
1965Russia and charged with extremism.
1966
1967https://news.ycombinator.com/item?id=14096625
1968https://meduza.io/en/feature/2017/04/10/mathematics-teacher-accused-of-inciting-mass-riots-now-also-accused-of-supporting-terrorism-and-once-again-detained
1969https://geektimes.ru/post/287944/ (russian)
1970
1971From moritz at torservers.net Fri Apr 14 12:00:32 2017
1972From: moritz at torservers.net (Moritz Bartl)
1973Date: Fri, 14 Apr 2017 14:00:32 +0200
1974Subject: [tor-talk] Tor exit node operator arrested in Russia - a solidarity
1975 Tor Relay Challenge launched
1976Message-ID: <ebe7d814-a0ce-f8e6-5b01-6eea6d135109@torservers.net>
1977
1978Tor exit node operator arrested in Russia - a solidarity Tor Relay
1979Challenge launched
1980Fr 14 April 2017 by xeniax, serrObengbi, 1up
1981
1982https://blog.torservers.net/20170414/tor-exit-node-operator-arrested-in-russia-a-solidarity-tor-relay-challenge-launched.html
1983
1984Run a Tor relay or exit node in solidarity with Dmitry Bogatov!
1985
1986On April 12, Russia celebrated Yuriy Gagarin’s first flight in space. In
1987the meanwhile, a young Russian scientist, mathematician and FOSS
1988activist Dmitry Bogatov spends the Space Day in detention center. His
1989involvement in decentralized web projects, his interest to privacy and
1990anonymity, his activities as an administrator of tor exit node have
1991brought him under suspicion of the FSB. Accused of “incitation to
1992terrorism†because of some messages posted from his IP address, he will
1993stay detained till June 8 at least, and risks up to 7 years in prison if
1994the Investigation committee ‘proves’ his guilt.
1995
1996Though, the very nature of Bogatov case is a controversial one, as it
1997mixes technical and legal arguments, and makes necessary both strong
1998legal and technical expertise involved. Indeed, as a Tor exit node
1999operator, Dmitry does not have control and responsibility on the content
2000and traffic that passes through his node: it would be the same as
2001accusing someone who has a knife stolen from her house for the murder
2002committed with this knife by a stranger. In the past other exit node
2003operators in Russia had conversations with police. For example, Sergey
2004Matveev aka Stargrave been witnessing several times on the cases related
2005to the crimes commited under his IP adress (mostly, related to financial
2006fraud and hacking). Though, as Sergey states himself, he “has never been
2007accused, but was only a witnessâ€Â, as his cases were not related to
2008“extremism†On 2016-02-02 his devices were seized for 2 weeks for
2009inspection but he has never been detained, after explaining to the
2010police how Tor actually works.
2011
2012Russia counts 230.000 Tor users everyday and only 46 exit nodes. Tor is
2013extremely popular after a bunch of laws restricting usage of Internet
2014and enforcing the lawful interception procedures (obliging ISPs to store
2015all metadata for 3 years, and the traffic - even though encrypted - for
20166 months). However, the Bogatov case has had an influence on the
2017perception of Tor by ‘end users’. We’ve observed several group chats on
2018Russian most popular IM app, telegram, dedicated to anti-Putin protests:
2019these chats gather from +500 to +1500 users, and a lot of them use
2020different privacy enhancing tools. The Bogatov case was discussed
2021widely. These discussions have shown that users do not fully understand
2022the difference between running a relay and an exit node, and also
2023between relay operators and tor browser users. They perceive Tor as
2024being vulnerable to deanonymization. Misunderstanding, lack of feedback
2025from Tor community or ‘expert’ users underrepresented in these chat
2026rooms leads the discussion to a very dangerous direction: “we do not
2027care about hiding things, because the police will anyway find everything
2028about us - even Tor is not secureâ€Â.
2029
2030Tor activists have launched a flashmob - “Run a relay in solidarity with
2031Bogatovâ€Â. By April 13, in only 1 day, 18 new relays have been set up in
2032different countries, wearing names like freeBogatov and KActionLibre,
2033referring to Bogatov’s handle famous in FOSS and GnuPG forums. Bogatov’s
2034personal exit node that he had been running from his own house was also
2035wearing the ‘kaction’ name. It is the first flashmob that uses relays as
2036form of international solidarity and the nicknames of relays become a
2037means to transmit a message: Bogatov is part of the community, he is a
2038valuable, trusted person who has been contributing to various open
2039source projects and is recognized as a professional. Tor community also
2040works on technical proof/explanations to help users and Bogatov’s
2041lawyers to understand that, by the very architecture of Tor network,
2042Bogatov can not be responsible for the things he is accused of. He also
2043has alibi: he was absent when the messages were published, and video
2044recordings from surveillance cameras are in posession of Bogatov’s
2045lawyer. Another proof of Bogatov’s innocence is the fact that the user
2046continued posting incendiary messages after Bogatov has been arrested.
2047Also, the style of writing, the language, orthography do not correspond
2048to Bogatov’s style - this can be proven by psycholinguistic expertise.
2049However, FSB does not want to stop the process - they investigate the
2050version of “terrorismâ€Â, that would mean a very hard penalty for Dmitry,
2051and also does not correspond to technical, legal, psychological, social
2052situation. The judge also claimed to not trust Dmitry because of his
2053â€Âhigh skills in new technologies†that may potentially help him “erase
2054traces of his crimes†- to prove this weird hypothesis, the
2055Investigation Committee has withdrawn all the technical equipment from
2056Dmitry’s apartment - from USB drives to laptops, smartphones and cameras…
2057
2058If you can, run a relay or an exit node and give it a name that contains
2059Bogatov or KAction (Bogatov’s handle). By running more relays we
2060increase anonymity and also show solidarity and demonstrate the power of
2061shared responsibility.
2062Tor relays are publicly available for everyone to use
2063
2064The IP addresses of the Tor relays (middle relays and exit nodes) are
2065publicly available and can be freely used by the tor users. The fact
2066that relays are a publicly available resource doesn’t minimize or
2067threatens the anonymity of a tor user in fact it can be used as a proof
2068that an IP address of a server was a Tor at a given time.
2069
2070Currently running Tor relays are enumerated to Atlas, a web application
2071to learn about currently running Tor relays. In a similarly way the
2072ExoneraTor service maintains a database of IP addresses that have been
2073part of the Tor network. It answers the question whether there was a Tor
2074relay running on a given IP address on a given date. ExoneraTor may
2075store more than one IP address per relay if relays use a different IP
2076address for exiting to the Internet than for registering in the Tor
2077network, and it stores whether a relay permitted transit of Tor traffic
2078to the open Internet at that time. Exonerator is a web service that can
2079check if an IP address was a relay at a given time.
2080
2081A different type of relays; bridges are Tor relays that aren’t listed in
2082the public Tor directory. That means that ISPs or governments trying to
2083block access to the Tor network can’t simply block all bridges. Bridges
2084are useful a) for Tor users in oppressive regimes, and b) for people who
2085want an extra layer of security because they’re worried somebody will
2086recognize that it’s a public Tor relay IP address they’re contacting.
2087Further reading
2088
2089 What is a Tor relay
2090 The Legal FAQ for Tor Relay Operators
2091 How is Tor different from other proxies?
2092 What security protections does Tor provide?
2093 Interactive visualization that explains various Tor/non-Tor scenarios
2094
2095Short version
2096-------------
2097
2098Run a Tor relay or exit node in solidarity with Dmitry Bogatov!
2099
2100Tor activists launch a call to run relays and exit nodes in solidarity
2101with Dmitry Bogatov, a FOSS contributor, GnuPG and privacy advocate and
2102math teacher arrested and detained in Russia. By now 26 relays have been
2103set up in different countries.
2104
2105Bogatov will stay in detention till June 8 at least. He risks up to 7
2106years in prison as he is accused of having published messages with
2107incitations to terrorism. A user ‘Airat Bashirov’ was indeed posting a
2108number of messages inciting to organize mass rallies and protests, using
2109Bogatov’s home IP adress. However, as a Tor exit node operator, Bogatov
2110can not have access or be responsible for the content that passes by:
2111Tor’s technical architecture is in itself a proof of his innocence.
2112
2113As an active FOSS contributor, he also has a support from the peer
2114community and has a strong alibi - he was in the sport center and then
2115in the supermarket at the moment when the messages were published.
2116Moreover, after Bogatov’s arrest the same user continued posting
2117incendiary messages.
2118
2119If you can, run a tor relay or an exit node and give it a name that
2120contains Bogatov or KAction (Bogatov’s handle). By running more relays
2121we increase anonymity and also show solidarity and demonstrate the power
2122of shared responsibility.
2123
2124From mail at parckwart.de Fri Apr 14 16:46:08 2017
2125From: mail at parckwart.de (Jonathan Marquardt)
2126Date: Fri, 14 Apr 2017 18:46:08 +0200
2127Subject: [tor-talk] Tor Browser Linux_don't extract to root
2128In-Reply-To: <ac27d293-77e7-80cc-9915-f547132d74a9@gmx.com>
2129References: <3fc530c6-0efe-1ea7-4b22-29e738fd341e@gmx.com>
2130 <20170411084704.GA30993@parckwart.de>
2131 <0498ab06-a28c-87af-991e-1cf89d654bb0@gmx.com>
2132 <20170412082302.GA2897@parckwart.de>
2133 <ac27d293-77e7-80cc-9915-f547132d74a9@gmx.com>
2134Message-ID: <20170414164608.GK9830@parckwart.de>
2135
2136Look, if you have malicous software running on the system with normal user
2137priviliges, you are in big trouble anyway. There's so many things that
2138malicous software could do even if TBB was installed at a non-writable
2139location. Just as a simple example, malware could just change the location in
2140your TBB desktop and launcher links and still trick you into launching
2141malicous software. That's just a really silly example, but the point is that
2142once the malware is running, it is too late. Storing software in non-writable
2143locations is such a small useless mitigation technique in contrast to what
2144malware could do. I agree that putting TBB to /opt would give you a tiny bit
2145of extra security. But for the price of the user not being able to install
2146updates, that might just not be worth it. Having software being stored in
2147central directories is not much of a security feature.
2148
2149BTW: The user profile of TBB would still be located in the home directory. It
2150would have to be. Malware could insert malicous stuff in there too like custom
2151Tor circuit settings, browser setting, NoScript rules, Add-Ons... You get the
2152idea.
2153--
21544096R/1224DBD299A4F5F3
215547BC 7DE8 3D46 2E8B ED18 AA86 1224 DBD2 99A4 F5F3
2156-------------- next part --------------
2157A non-text attachment was scrubbed...
2158Name: signature.asc
2159Type: application/pgp-signature
2160Size: 819 bytes
2161Desc: Digital signature
2162URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170414/859729fc/attachment.sig>
2163
2164From beatthebastards at inbox.com Fri Apr 14 17:09:10 2017
2165From: beatthebastards at inbox.com (I)
2166Date: Fri, 14 Apr 2017 09:09:10 -0800
2167Subject: [tor-talk] Tor exit node operator arrested in Russia - a
2168 solidarity Tor Relay Challenge launched
2169In-Reply-To: <ebe7d814-a0ce-f8e6-5b01-6eea6d135109@torservers.net>
2170Message-ID: <315E9AD09A0.00000318beatthebastards@inbox.com>
2171
2172> Run a Tor relay or exit node in solidarity with Dmitry Bogatov!
2173
2174Do you mean run exits in Russia, near Russia or anywhere at all?
2175
2176Robert
2177
2178
2179
2180
2181
2182From moritz at torservers.net Fri Apr 14 20:45:33 2017
2183From: moritz at torservers.net (Moritz Bartl)
2184Date: Fri, 14 Apr 2017 22:45:33 +0200
2185Subject: [tor-talk] Tor exit node operator arrested in Russia - a
2186 solidarity Tor Relay Challenge launched
2187In-Reply-To: <315E9AD09A0.00000318beatthebastards@inbox.com>
2188References: <315E9AD09A0.00000318beatthebastards@inbox.com>
2189Message-ID: <d8a1b9ae-9f51-69cf-6731-ba6296d967b8@torservers.net>
2190
2191On 14.04.2017 19:09, I wrote:
2192>> Run a Tor relay or exit node in solidarity with Dmitry Bogatov!
2193> Do you mean run exits in Russia, near Russia or anywhere at all?
2194
2195The way I read it: Anywhere, in solidarity.
2196
2197--
2198Moritz Bartl
2199https://www.torservers.net/
2200
2201From joebtfsplk at gmx.com Sat Apr 15 00:48:53 2017
2202From: joebtfsplk at gmx.com (Joe Btfsplk)
2203Date: Fri, 14 Apr 2017 19:48:53 -0500
2204Subject: [tor-talk] Tor Browser Linux_don't extract to root
2205In-Reply-To: <20170414164608.GK9830@parckwart.de>
2206References: <3fc530c6-0efe-1ea7-4b22-29e738fd341e@gmx.com>
2207 <20170411084704.GA30993@parckwart.de>
2208 <0498ab06-a28c-87af-991e-1cf89d654bb0@gmx.com>
2209 <20170412082302.GA2897@parckwart.de>
2210 <ac27d293-77e7-80cc-9915-f547132d74a9@gmx.com>
2211 <20170414164608.GK9830@parckwart.de>
2212Message-ID: <672381f8-8b9f-c034-9fba-45125e7d3f21@gmx.com>
2213
2214On 04/14/2017 11:46 AM, Jonathan Marquardt wrote:
2215> Look, if you have malicous software running on the system with normal user
2216> priviliges, you are in big trouble anyway. There's so many things that
2217> malicous software could do even if TBB was installed at a non-writable
2218> location. Just as a simple example, malware could just change the location in
2219> your TBB desktop and launcher links and still trick you into launching
2220> malicous software. That's just a really silly example, but the point is that
2221> once the malware is running, it is too late. Storing software in non-writable
2222> locations is such a small useless mitigation technique in contrast to what
2223> malware could do. I agree that putting TBB to /opt would give you a tiny bit
2224> of extra security. But for the price of the user not being able to install
2225> updates, that might just not be worth it. Having software being stored in
2226> central directories is not much of a security feature.
2227>
2228> BTW: The user profile of TBB would still be located in the home directory. It
2229> would have to be. Malware could insert malicous stuff in there too like custom
2230> Tor circuit settings, browser setting, NoScript rules, Add-Ons... You get the
2231> idea.
2232>
2233You're correct - installing it to a "non-writable" location isn't
2234necessarily the end of days. The rest of your argument against
2235improving security & anonymity contradicts some long standing practices
2236of Tor Project and some basic concepts of Linux. If there was / is no
2237value of Linux installing most programs & libraries to root, they
2238wouldn't do it.
2239
2240100's of changes & methods that Tor Project makes w/ TBB, individually
2241have small impact on overall anonymity or security. Collectively they
2242make a huge difference. If installing TBB to root directories adds -
2243some - protection, it seems as valid as 100's of changes & fixes made
2244over the yrs.
2245
2246 Many trac feature changes & bug fixes to change minor TBB behaviors
2247have no more impact than installing TBB to more protected Linux
2248directories. Some had zero impact on anonymity or security.
2249
2250Tor Project could implement a script allowing auto-updating (or w/ a
2251click or 2), or they could use a PPA to install & update it.
2252
2253For yrs, there was such an Ubuntu PPA / repo & small script, to allow
2254installing & auto-updating of Mozilla Fx releases, when installed to
2255/usr or /opt, etc. Seems like Tor Project could handle that.
2256
2257
2258
2259From m.ajiao at tuta.io Sat Apr 15 03:03:45 2017
2260From: m.ajiao at tuta.io (m.ajiao at tuta.io)
2261Date: Sat, 15 Apr 2017 05:03:45 +0200 (CEST)
2262Subject: [tor-talk] Tor Browser crash
2263In-Reply-To: <01fb1539-290f-063f-a107-b705fdb8c945@resist.ca>
2264References: <KgmJdxS--3-0@tuta.io> <<KgmJdxS--3-0@tuta.io>>
2265 <01fb1539-290f-063f-a107-b705fdb8c945@resist.ca>
2266Message-ID: <KhjZEls--3-0@tuta.io>
2267
2268> the 'blocked object' menu within NoScript didn't appear until the page fully loaded and clicking the menu items in it did not crash the browser.
2269
2270Hello! The crash is not consistent, but when it happens, it appears to be a really strange crash. The same happened on some other webpages in which the "Blocked Objects" menu showed up. I just reproduced the crash again on Ubuntu 64bit. What I did is I repeatedly clicked on "Blocked Objects" right after a page was loaded. Tor browser window closed immediately. I cannot determine the reason of crash, and I did not see the crash reporter for segfault show up.
2271
2272
2273From joebtfsplk at gmx.com Sat Apr 15 05:46:39 2017
2274From: joebtfsplk at gmx.com (Joe Btfsplk)
2275Date: Sat, 15 Apr 2017 00:46:39 -0500
2276Subject: [tor-talk] Tor Browser crash
2277In-Reply-To: <KhjZEls--3-0@tuta.io>
2278References: <KgmJdxS--3-0@tuta.io> <<KgmJdxS--3-0@tuta.io>
2279 <01fb1539-290f-063f-a107-b705fdb8c945@resist.ca> <KhjZEls--3-0@tuta.io>
2280Message-ID: <9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>
2281
2282
2283
2284On 04/14/2017 10:03 PM, m.ajiao at tuta.io wrote:
2285>> the 'blocked object' menu within NoScript didn't appear until the page fully loaded and clicking the menu items in it did not crash the browser.
2286> Hello! The crash is not consistent, but when it happens, it appears to be a really strange crash. The same happened on some other webpages in which the "Blocked Objects" menu showed up. I just reproduced the crash again on Ubuntu 64bit. What I did is I repeatedly clicked on "Blocked Objects" right after a page was loaded. Tor browser window closed immediately. I cannot determine the reason of crash, and I did not see the crash reporter for segfault show up.
2287>
2288Could you give more info about which TBB version; which OS / version.
2289Any other addons / plugins besides TBB default ones?
2290
2291What exactly do you mean, "I repeatedly clicked on "Blocked Objects"
2292right after a page was loaded?"
2293What was blocked - if you know - and why do you repeatedly click on them?
2294
2295From m.ajiao at tuta.io Sun Apr 16 06:48:02 2017
2296From: m.ajiao at tuta.io (m.ajiao at tuta.io)
2297Date: Sun, 16 Apr 2017 08:48:02 +0200 (CEST)
2298Subject: [tor-talk] Tor Browser crash
2299In-Reply-To: <9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>
2300References: <KgmJdxS--3-0@tuta.io> <<KgmJdxS--3-0@tuta.io>>
2301 <01fb1539-290f-063f-a107-b705fdb8c945@resist.ca> <KhjZEls--3-0@tuta.io>
2302 <<KhjZEls--3-0@tuta.io>> <9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>
2303Message-ID: <KhpW9nH--3-0@tuta.io>
2304
2305Hello!
2306
2307I attached a screen recording showing Tor Browser crash.
2308
2309Strangely enough, I couldn't reproduce the crash in a virtual machine with Ubuntu 16.04 64-bit installed. I doubt the crash has something to do with screen resolution and the "Scale for menu and title bars" feature of Unity. (?)
2310
2311My display settings: Ubuntu 16.04 64-bit with Unity desktop environment. On a computer with HiDPI screen. Change the screen resolution to 3840x2160 (4k) resolution. Change "Scale for menu and title bars" to 2.5x
2312
23130:02 I selected a new circuit for that site.
23140:05 I clicked on the NoScript (S) icon and wait for page to reload. I did not click on any NoScript menu item at that moment.
23150:07 - 0:11 Still waiting for page to reload and waiting for the "Blocked object" menu item to appear. I did not click on any NoScript menu item at that moment.
23160:17 My cursor was on the "Blocked object" menu item. I started repeatedly clicking on this menu item.
23170:19 I clicked on the NoScript icon (S) to make the drop down menu disappear. I clicked on it again immediately to make the menu reappear.
23180:20 I moved my cursor onto the "Blocked object" menu item. This time, Tor browser window was gone after I clicked on the "Blocked object" menu item only once.
2319
2320> TBB version
23216.5.1 (based on Mozilla Firefox 45.8.0)
2322
2323> OS / version
2324Ubuntu 16.04 LTS (64-bit), default Unity desktop environment
2325
2326> addons / plugins
2327The default ones.
2328Extensions: HTTPS Everywhere, NoScript, TorButton, TorLauncher.
2329Plugins: None
2330Services: None
2331
2332> What was blocked
2333Downloadable fonts were blocked in "High" security level mode.
2334
2335> Why do you repeatedly click on them
2336When I had to temporarily allow scripts for that page, I clicked on the NoScript (S) icon and immediately selected the first menu item, but that page contains downloadable fonts, so the first menu item does not say "Temporarily allow all this page" but says "Blocked objects." So by mistake I clicked on the "Block objects" menu item. Tor Browser then crashed.
2337
2338Later when I wanted to reproduce the crash, I had to click on the menu item said "Blocked objects" many times in order to make Tor Browser crash.
2339
2340From m.ajiao at tuta.io Sun Apr 16 19:40:36 2017
2341From: m.ajiao at tuta.io (m.ajiao at tuta.io)
2342Date: Sun, 16 Apr 2017 21:40:36 +0200 (CEST)
2343Subject: [tor-talk] (Correction) Tor Browser crash
2344In-Reply-To: <KhpW9nH--3-0@tuta.io-Khs2qi3--3-0>
2345References: <KgmJdxS--3-0@tuta.io> <<KgmJdxS--3-0@tuta.io>>
2346 <01fb1539-290f-063f-a107-b705fdb8c945@resist.ca> <KhjZEls--3-0@tuta.io>
2347 <<KhjZEls--3-0@tuta.io>> <9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>
2348 <<9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>>
2349 <KhpW9nH--3-0@tuta.io-Khs2qi3--3-0>
2350Message-ID: <KhsGzy2--3-0@tuta.io>
2351
2352Hello!
2353
2354> I couldn't reproduce the crash in a virtual machine with Ubuntu 16.04 64-bit installed.
2355
2356I make a correction here: I just reproduced the crash in a virtual machine, but it took a few attempts to reproduce.
2357
2358Virtual machine OS: Ubuntu server 16.04 64-bit with lxde desktop environment.
2359TBB version: 6.5.1 with default plugins.
2360
2361Steps to reproduce:
2362Repeat the steps described in the screen recording.
2363After a few attempts, Tor Browser window was suddenly gone.
2364Click on the shortcut icon to start Tor Browser again. It does not say "Tor Browser is running."
2365
2366From m.ajiao at tuta.io Sun Apr 16 19:53:19 2017
2367From: m.ajiao at tuta.io (m.ajiao at tuta.io)
2368Date: Sun, 16 Apr 2017 21:53:19 +0200 (CEST)
2369Subject: [tor-talk] (Segmentation fault) Tor Browser crash
2370In-Reply-To: <KhsGzy2--3-0@tuta.io>
2371References: <KgmJdxS--3-0@tuta.io> <<KgmJdxS--3-0@tuta.io>>
2372 <01fb1539-290f-063f-a107-b705fdb8c945@resist.ca> <KhjZEls--3-0@tuta.io>
2373 <<KhjZEls--3-0@tuta.io>> <9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>
2374 <<9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>>
2375 <KhpW9nH--3-0@tuta.io-Khs2qi3--3-0> <KhsGzy2--3-0@tuta.io>
2376Message-ID: <KhsJu7g--3-0@tuta.io>
2377
2378I started Tor Browser with the `--debug` option. I reproduced the crash and Tor Browser logged a segmentation fault. Here is the log from bootstrap to crash. IP addresses and timestamps are redacted.
2379
2380*** [notice] Bootstrapped 100%: Done
2381*** [notice] New control connection opened from 127.0.0.1.
2382*** [notice] New control connection opened from 127.0.0.1.
2383149237*******   addons.productaddons   ERROR   Request failed certificate checks: [Exception... "SSL is required and URI scheme is not https." nsresult: "0x8000ffff (NS_ERROR_UNEXPECTED)" location: "JS frame :: resource://gre/modules/CertUtils.jsm :: checkCert :: line 145" data: no]
2384*** [notice] Owning controller connection has closed -- exiting now.
2385*** [notice] Catching signal TERM, exiting cleanly.
2386./Browser/start-tor-browser: line 368: 2301 Segmentation fault     (core dumped) TOR_CONTROL_PASSWD=${TOR_CONTROL_PASSWD} ./firefox --class "Tor Browser" -profile TorBrowser/Data/Browser/profile.default "${@}" < /dev/null
2387
2388
2389From joebtfsplk at gmx.com Mon Apr 17 19:26:31 2017
2390From: joebtfsplk at gmx.com (Joe Btfsplk)
2391Date: Mon, 17 Apr 2017 14:26:31 -0500
2392Subject: [tor-talk] (Correction) Tor Browser crash
2393In-Reply-To: <KhsGzy2--3-0@tuta.io>
2394References: <KgmJdxS--3-0@tuta.io> <<KgmJdxS--3-0@tuta.io>
2395 <01fb1539-290f-063f-a107-b705fdb8c945@resist.ca> <KhjZEls--3-0@tuta.io>
2396 <<KhjZEls--3-0@tuta.io> <9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>
2397 <<9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>
2398 <KhpW9nH--3-0@tuta.io-Khs2qi3--3-0> <KhsGzy2--3-0@tuta.io>
2399Message-ID: <f00c46d6-cb73-055c-b23c-34111be8e884@gmx.com>
2400
2401On 04/16/2017 02:40 PM, m.ajiao at tuta.io wrote:
2402> Hello!
2403>
2404>> I couldn't reproduce the crash in a virtual machine with Ubuntu 16.04 64-bit installed.
2405> I make a correction here: I just reproduced the crash in a virtual machine, but it took a few attempts to reproduce.
2406>
2407> Virtual machine OS: Ubuntu server 16.04 64-bit with lxde desktop environment.
2408> TBB version: 6.5.1 with default plugins.
2409>
2410> Steps to reproduce:
2411> Repeat the steps described in the screen recording.
2412> After a few attempts, Tor Browser window was suddenly gone.
2413> Click on the shortcut icon to start Tor Browser again. It does not say "Tor Browser is running."
2414I'm not an expert on meanings of all TBB debug logs. Someone else may
2415fully understand the following error:
2416
2417149237******* addons.productaddons ERROR Request failed certificate checks: [Exception... "SSL is required and URI scheme is not https." nsresult: "0x8000ffff (NS_ERROR_UNEXPECTED)" location: "JS frame ::resource://gre/modules/CertUtils.jsm :: checkCert :: line 145" data: no]
2418
2419Right now, TBB won't let me into my security settings. IIRC, for highest level, it says something like some pages may break or have problems. IIRC, JS is blocked in highest level. That alone will prevent many pages from loading - at all.
2420
2421As for TBB closing - it may be a bug (or not) when you repeatedly click on the blocked object place holder.
2422In general, repeatedly clicking error popups & many other items can cause problems in any browser. Clicking them 10x won't help.
2423
2424Does it show you *which* objects were blocked? Generally, when the blocked scripts or objects UI is displayed, you read it for info purposes & close it by clicking anywhere else on the page.
2425
2426Most pages - or the browser - don't crash just because fonts aren't allowed to D/L. Anything's possible.
2427Does this crashing happen when loading specific site(s), or just at TBB startup & home page (if showing TBB home page)? If it's only a couple of sites, likely a problem w/ them.
2428
2429>HiDPI screen. Change the screen resolution to 3840x2160 (4k) resolution. Change "Scale for menu and title bars" to >2.5x
2430Do you have a 3840x2160 screen? I have no idea if TBB handles this - may be fine?
2431
2432>When I had to temporarily allow scripts for that page, I clicked on the NoScript (S) icon and immediately selected >the first menu item, but that page contains downloadable fonts, so the first menu item does not say "Temporarily >allow all this page" but says "Blocked objects." So by mistake I clicked on the "Block objects" menu item. Tor >Browser then crashed.
2433"Blocked objects," not "blocked scripts?" There's a difference.
2434
2435OK, so NoScript showed you what you requested (by clicking) - I guess? Did it actually show a list of blocked objects or scripts, or did it hang producing that UI? If NS didn't show it, something's blocking - I assume. If so, sounds like a question for NoScript support (forum).
2436
2437
2438> "Later when I wanted to reproduce the crash, I had to click on the menu item [which] said "Blocked objects" many times in order to make Tor Browser crash."
2439
2440Refer to last question. But, why are you clicking NS menu popup item *so* many times? I see no point, but maybe you've left something out.
2441
2442Does blocked objects / scripts UI ever display correctly? (Y / N).
2443What happens if you wait (say 30 - 60 sec) for blocked objects UI to display?
2444If "blocked objects UI" isn't displaying or hangs or won't close, I'd post on NoScript forum.
2445
2446Do you have checked in NS options, Notifications > blocked SCRIPTS to hide notices after x seconds?
2447
2448--
2449
2450
2451
2452From m.ajiao at tuta.io Tue Apr 18 01:28:12 2017
2453From: m.ajiao at tuta.io (m.ajiao at tuta.io)
2454Date: Tue, 18 Apr 2017 03:28:12 +0200 (CEST)
2455Subject: [tor-talk] (Correction) Tor Browser crash
2456In-Reply-To: <f00c46d6-cb73-055c-b23c-34111be8e884@gmx.com>
2457References: <KgmJdxS--3-0@tuta.io> <<KgmJdxS--3-0@tuta.io>>
2458 <01fb1539-290f-063f-a107-b705fdb8c945@resist.ca> <KhjZEls--3-0@tuta.io>
2459 <<KhjZEls--3-0@tuta.io>> <9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>
2460 <<9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>>
2461 <KhpW9nH--3-0@tuta.io-Khs2qi3--3-0> <KhsGzy2--3-0@tuta.io>
2462 <<KhsGzy2--3-0@tuta.io>> <f00c46d6-cb73-055c-b23c-34111be8e884@gmx.com>
2463Message-ID: <Khyf8Y6--3-0@tuta.io>
2464
2465Hello! I reproduced the crash without clicking on the menu items fast. Generally, I found that if I click on the "Blocked Objects" menu item when the sub menu's _shadow effect_ is being drawn, Tor browser crashes.
2466
2467> In general, repeatedly clicking error popups & many other items can cause problems in any browser. Clicking them 10x won't help.
2468
2469I don't have to click on it frequently to make Tor browser crash. If I click when the _shadow_ of the menu is being drawn, Tor browser crashes.
2470
2471> Does it show you *which* objects were blocked? Most pages - or the browser - don't crash just because fonts aren't allowed to D/L. Anything's possible.
2472
2473I don't think this is really related to this crash. I think it's not the problem of the Medium page, but it might be something wrong with NoScript's UI, but anyway it is shown in the recording.
2474
2475Blocked Objects -
2476.   (A) Temporarily allow FONT at https://medium.com
2477.   - - - - - - - - - -
2478.   (S) Temporarily allow *@https://medium.com
2479.   (S) Temporarily allow *@https://medium.com (https://medium.com)
2480.   (A) Temporarily allow FONT at https://medium.com (https://medium.com)
2481.   (A) Temporarily allow FONT at https://medium.com
2482Temporarily allow all this page
2483Allow Scripts Globally (dangerous)
2484Options...
2485About NoScript 5.0.2...
2486
2487> Do you have a 3840x2160 screen? I have no idea if TBB handles this - may be fine?
2488
2489Yes, I have a 3840x2160 screen. The shadow takes a while to draw on a big screen. (But it also crashes on the unfancy LXDE running on 640x480 resolution)
2490
2491> "Blocked objects," not "blocked scripts?" There's a difference.
2492
2493"Blocked objects" menu appears. Both scripts and fonts were blocked.
2494
2495
2496From joebtfsplk at gmx.com Tue Apr 18 02:03:09 2017
2497From: joebtfsplk at gmx.com (Joe Btfsplk)
2498Date: Mon, 17 Apr 2017 21:03:09 -0500
2499Subject: [tor-talk] (Correction) Tor Browser crash
2500In-Reply-To: <Khyf8Y6--3-0@tuta.io>
2501References: <KgmJdxS--3-0@tuta.io> <<KgmJdxS--3-0@tuta.io>
2502 <01fb1539-290f-063f-a107-b705fdb8c945@resist.ca> <KhjZEls--3-0@tuta.io>
2503 <<KhjZEls--3-0@tuta.io> <9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>
2504 <<9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>
2505 <KhpW9nH--3-0@tuta.io-Khs2qi3--3-0> <KhsGzy2--3-0@tuta.io>
2506 <<KhsGzy2--3-0@tuta.io> <f00c46d6-cb73-055c-b23c-34111be8e884@gmx.com>
2507 <Khyf8Y6--3-0@tuta.io>
2508Message-ID: <51b51ddd-f335-d116-1675-a4e897daad5b@gmx.com>
2509
2510
2511> I don't think this is really related to this crash. I think it's not the problem of the Medium page, but it might be something wrong with NoScript's UI, but anyway it is shown in the recording.
2512>
2513> Blocked Objects -
2514> . (A) Temporarily allow FONT at https://medium.com
2515> . - - - - - - - - - -
2516> . (S) Temporarily allow *@https://medium.com
2517> . (S) Temporarily allow *@https://medium.com (https://medium.com)
2518> . (A) Temporarily allow FONT at https://medium.com (https://medium.com)
2519> . (A) Temporarily allow FONT at https://medium.com
2520> Temporarily allow all this page
2521> Allow Scripts Globally (dangerous)
2522> Options...
2523> About NoScript 5.0.2...
2524>
2525>> Do you have a 3840x2160 screen? I have no idea if TBB handles this - may be fine?
2526> Yes, I have a 3840x2160 screen. The shadow takes a while to draw on a big screen. (But it also crashes on the unfancy LXDE running on 640x480 resolution)
2527>
2528>> "Blocked objects," not "blocked scripts?" There's a difference.
2529> "Blocked objects" menu appears. Both scripts and fonts were blocked.
2530>
2531Do you have a discrete GPU card, and are you using the mfg's proprietary
2532drivers? Some (like Nvidia - maybe others) have GPU problems, causing
2533crashes, freezes, black screens - if use Linux open source video drivers.
2534
2535But, it could be a bug - some graphic function in which ever desktop
2536you're using (you mentioned shadows); possibly NoScript and / or TBB
2537can't handle it. Have you tried temporarily disabling NS to make sure
2538nothing else can cause the same issue. Though might take a while to
2539rule out "everything" else. Folks in NS forum / support may already
2540know about it. They're usually pretty good at looking into things.
2541You'll have to give full details of your OS flavor, version, etc.
2542
2543From art at torproject.org Thu Apr 20 13:40:48 2017
2544From: art at torproject.org (=?UTF-8?Q?Arturo_Filast=c3=b2?=)
2545Date: Thu, 20 Apr 2017 13:40:48 +0000
2546Subject: [tor-talk] The Onion Dress, a Tor inspired dress
2547Message-ID: <6c0b697c-3601-19e1-0206-b7de78425f10@torproject.org>
2548
2549Somebody made a dress inspired by hacker culture and Tor specifically.
2550
2551It's called the "Onion Dress" and it's made by fashion designer Gabriela
2552Belisario, you can see it here:
2553
2554https://www.instagram.com/p/BSI7K62g1nV/
2555
2556~ Arturo
2557
2558
2559
2560From secure-hosting at tutanota.com Thu Apr 20 14:34:05 2017
2561From: secure-hosting at tutanota.com (secure-hosting at tutanota.com)
2562Date: Thu, 20 Apr 2017 16:34:05 +0200 (CEST)
2563Subject: [tor-talk] Enabling udp packets over tor via pluggable transport
2564Message-ID: <KiAmAyn--3-0@tutanota.com>
2565
2566If I understand correctly, pluggable transports (PTs) sit behind the client and in front of the server, in other words between the tor client and the tor server. Since the client only sends TCP, there is no way to enable UDP transmission using a PT alone.
2567
2568However, what if there was a PT, lets call it that simply forwarded all packets without alteration, but simply signalled that tcp encapsulated udp packets may be transmitted and unencapsulated by a seconf program sitting in front of the tor client and behind the tor server, on otherwords wrapping the connection.
2569
2570It is already trivial to tunnel udp over tcp (I do it all the time using a standard openvpn client and server in tcp mode proxied over tor). Since tor handles all the encryption, any udp over tcp tunneling protocol, even clear text ones, could be used.
2571
2572Questions:
25731. Is it possible that a PT which does no transformations would even have to be a program? Couldn't the client packets just be sent out directly or forwarded via iptables?
2574
25752. Would a PT that forwards unaltered packets and merely signals that a certain type of tcp encapsulation is expected by the server violate the PT spec? The intra-tor traffic would still look the same as the transformation happens before entering and after leaving tor.
2576
25773. This seems like a too easy way to get udp transmisssion over tor and I suspect there issomething I'm missing. So, why wouldn't this work?
2578
2579From flipchan at riseup.net Thu Apr 20 17:17:49 2017
2580From: flipchan at riseup.net (flipchan)
2581Date: Thu, 20 Apr 2017 17:17:49 +0000
2582Subject: [tor-talk] The Onion Dress, a Tor inspired dress
2583In-Reply-To: <6c0b697c-3601-19e1-0206-b7de78425f10@torproject.org>
2584References: <6c0b697c-3601-19e1-0206-b7de78425f10@torproject.org>
2585Message-ID: <EEB25EC7-8318-4B10-9225-76A92DFE9432@riseup.net>
2586
2587Cool stuff
2588
2589On April 20, 2017 3:40:48 PM GMT+02:00, "Arturo Filastò" <art at torproject.org> wrote:
2590>Somebody made a dress inspired by hacker culture and Tor specifically.
2591>
2592>It's called the "Onion Dress" and it's made by fashion designer
2593>Gabriela
2594>Belisario, you can see it here:
2595>
2596>https://www.instagram.com/p/BSI7K62g1nV/
2597>
2598>~ Arturo
2599>
2600>
2601>--
2602>tor-talk mailing list - tor-talk at lists.torproject.org
2603>To unsubscribe or change other settings go to
2604>https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
2605
2606--
2607Sent from my Android device with K-9 Mail. Please excuse my brevity.
2608
2609From fusionman133 at gmx.de Thu Apr 20 17:45:00 2017
2610From: fusionman133 at gmx.de (Andri Effendi)
2611Date: Thu, 20 Apr 2017 17:45:00 +0000
2612Subject: [tor-talk] Regarding latest TOR Browser update 652
2613Message-ID: <58F8F3CC.20808@gmx.de>
2614
2615Hi Tor community,
2616
2617Thanks for the updates allowing Twitter.
2618
2619It really helps, since I was using Tor for just about everything except
2620twitter.
2621
2622I have noticed though that at least on the Mac version of Tor that after
2623the update "6.5.2" the tor browser window is very laggy and I don't mean
2624the page loading, I mean the system responsiveness and the rainbow spiral.
2625
2626I know it is not my Machine because it passed a clean bill of health
2627after thorough diagnostics.
2628
2629My machine handles everything else alright, just not Tor after the last
2630update.
2631
2632Please let me know if any other mac users are experiencing these issues
2633since the update.
2634
2635
2636
2637Kind Regards,
2638--
2639Andri Effendi <fusionman133 at gmx.de>
2640Organiser of The Free Software Movement in Sydney
2641www.freesoftware.org.au/sydney/
2642
2643GPG fingerprint: 8438 138D ECDA 05E0 591F F2B4 4721 0F03 AC24 DF73
2644Confidentiality cannot be guaranteed on emails sent or received unencrypted.
2645
2646-------------- next part --------------
2647A non-text attachment was scrubbed...
2648Name: signature.asc
2649Type: application/pgp-signature
2650Size: 801 bytes
2651Desc: OpenPGP digital signature
2652URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170420/93300f8f/attachment.sig>
2653
2654From alec.muffett at gmail.com Fri Apr 21 22:35:45 2017
2655From: alec.muffett at gmail.com (Alec Muffett)
2656Date: Fri, 21 Apr 2017 23:35:45 +0100
2657Subject: [tor-talk] Shodan & Hidden Services
2658Message-ID: <CAFWeb9LajGLShK=34FBjTVZoe10F5HuPskG9KUUuOy-660BjOQ@mail.gmail.com>
2659
2660So it turns out that Shodan - a kind of multi-protocol Google-alike search
2661engine for metadata and protocol headers - has indexed a bunch of Onion
2662sites which were configured to leak their (onion) hostnames into protocol
2663headers.
2664
2665https://www.shodan.io/search?query=.onion%2F
2666
2667This is... tragic, perhaps, and avoidable to varying extents (eg: my
2668proposed setup process*) but the situation also possibly presents an
2669opportunity for anyone who has identified addresses of sibyl/other naughty
2670tor-infra-impacting activity, to maybe check some logs and see if any
2671badly-configured onions were also hosted on the same addresses/subnets, get
2672some concept of what hidden services were hosted there, and what they may
2673have been up to?
2674
2675 - alec
2676
2677*
2678https://github.com/alecmuffett/the-onion-diaries/blob/master/basic-production-onion-server.md
2679
2680--
2681http://dropsafe.crypticide.com/aboutalecm
2682
2683From scott at scottainslie.me.uk Sat Apr 22 12:30:00 2017
2684From: scott at scottainslie.me.uk (Scott Ainslie)
2685Date: Sat, 22 Apr 2017 12:30:00 +0000
2686Subject: [tor-talk] tor-talk Digest, Vol 75, Issue 19
2687In-Reply-To: <mailman.9.1492862405.6382.tor-talk@lists.torproject.org>
2688References: <mailman.9.1492862405.6382.tor-talk@lists.torproject.org>
2689Message-ID: <4fc3ea8f-a0a9-77a5-1fce-6b6f77bf0256@scottainslie.me.uk>
2690
2691-----BEGIN PGP SIGNED MESSAGE-----
2692Hash: SHA512
2693
2694Hello,
2695
2696Censys also does it too. I'm unsurprised that it's still a technique
2697that can disclose co-hosting and other useful artifacts in such an
2698efficient manner.
2699
2700Censys also has a REST API for access to its aggregated datasets
2701although it should be said that the datasets are ephemeral.
2702- --
2703Scott Ainslie <scott at scottainslie.me.uk>
2704-----BEGIN PGP SIGNATURE-----
2705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2718=SIHT
2719-----END PGP SIGNATURE-----
2720
2721From jon.tullett at gmail.com Mon Apr 24 08:03:58 2017
2722From: jon.tullett at gmail.com (Jon Tullett)
2723Date: Mon, 24 Apr 2017 10:03:58 +0200
2724Subject: [tor-talk] Shodan & Hidden Services
2725In-Reply-To: <CAFWeb9LajGLShK=34FBjTVZoe10F5HuPskG9KUUuOy-660BjOQ@mail.gmail.com>
2726References: <CAFWeb9LajGLShK=34FBjTVZoe10F5HuPskG9KUUuOy-660BjOQ@mail.gmail.com>
2727Message-ID: <CAPkfgVY1GRj_V2T4ueLcV8Ac5M40GGUbSOTusV8cafQv2F7Tjg@mail.gmail.com>
2728
2729On 22 April 2017 at 00:35, Alec Muffett <alec.muffett at gmail.com> wrote:
2730> So it turns out that Shodan - a kind of multi-protocol Google-alike search
2731> engine for metadata and protocol headers - has indexed a bunch of Onion
2732> sites which were configured to leak their (onion) hostnames into protocol
2733> headers.
2734
2735Interesting. What can you do with that? Can you tie them to specific
2736hidden services?
2737
2738-J
2739
2740From alec.muffett at gmail.com Mon Apr 24 08:33:26 2017
2741From: alec.muffett at gmail.com (Alec Muffett)
2742Date: Mon, 24 Apr 2017 09:33:26 +0100
2743Subject: [tor-talk] Shodan & Hidden Services
2744In-Reply-To: <CAPkfgVY1GRj_V2T4ueLcV8Ac5M40GGUbSOTusV8cafQv2F7Tjg@mail.gmail.com>
2745References: <CAFWeb9LajGLShK=34FBjTVZoe10F5HuPskG9KUUuOy-660BjOQ@mail.gmail.com>
2746 <CAPkfgVY1GRj_V2T4ueLcV8Ac5M40GGUbSOTusV8cafQv2F7Tjg@mail.gmail.com>
2747Message-ID: <CAFWeb9+U4-=Eb3pM5y0xSkMa0QSKD1fOXWBhtRpcOWWPrrN4aA@mail.gmail.com>
2748
2749On 24 April 2017 at 09:03, Jon Tullett <jon.tullett at gmail.com> wrote:
2750
2751>
2752> Interesting. What can you do with that? Can you tie them to specific
2753> hidden services?
2754>
2755
2756Sometimes. See sample results in my Twitter thread:
2757
2758https://twitter.com/AlecMuffett/status/855542397165502464
2759
2760-a
2761
2762--
2763http://dropsafe.crypticide.com/aboutalecm
2764
2765From unpublished at wp.pl Mon Apr 24 10:16:23 2017
2766From: unpublished at wp.pl (unpublished)
2767Date: Mon, 24 Apr 2017 12:16:23 +0200
2768Subject: [tor-talk] TOR problems - seriously PLEASE HELP ME!
2769Message-ID: <2D9C0BCAAC08494483B7701FD694DB16@ARSSRV18RL>
2770
2771Hello,
2772
27731. Many web pages display information that I do not support "TOR
2774connections"?
27752. How to increase (amazon) the number of relay nodes? Because standard
2776only two redirect point?
27773. How to change the end node of the country (eg country from which I am
2778POLAND)?
2779
2780I'm using Windows 7. My provender blocks TOR connections, works only with
2781the "amazon" bridge.
2782
2783Thank you very much for your help, as no one is able to provide me with
2784answers to these questions. Only YOU as authors can do it! PLEASE HELP ME.
2785
2786Sincerely
2787
2788
2789From mail at parckwart.de Mon Apr 24 10:30:56 2017
2790From: mail at parckwart.de (Jonathan Marquardt)
2791Date: Mon, 24 Apr 2017 12:30:56 +0200
2792Subject: [tor-talk] TOR problems - seriously PLEASE HELP ME!
2793In-Reply-To: <2D9C0BCAAC08494483B7701FD694DB16@ARSSRV18RL>
2794References: <2D9C0BCAAC08494483B7701FD694DB16@ARSSRV18RL>
2795Message-ID: <20170424103056.GA5577@parckwart.de>
2796
2797On Mon, Apr 24, 2017 at 12:16:23PM +0200, unpublished wrote:
2798> 1. Many web pages display information that I do not support "TOR
2799> connections"?
2800
2801Not sure, what you mean here. Perhaps THEY don't support (i.e. block)
2802connections from Tor users, because they are afraid of spam or other stupid
2803reasons. Nothing you can really do here. Websites blocking Tor is a huge
2804problem.
2805
2806> 2. How to increase (amazon) the number of relay nodes? Because standard
2807> only two redirect point?
2808
2809There are always three nodes. The amazon node should be your guard relay
2810(where you enter the Tor network). Then there are two relays after that. There
2811isn't really any way to change that. Three hops should be sufficient for
2812decent anonymity, no real need to worry here.
2813
2814> 3. How to change the end node of the country (eg country from which I am
2815> POLAND)?
2816
2817Here's a simple guide on how to do that:
2818http://www.wikihow.com/Set-a-Specific-Country-in-a-Tor-Browser
2819--
28204096R/1224DBD299A4F5F3
282147BC 7DE8 3D46 2E8B ED18 AA86 1224 DBD2 99A4 F5F3
2822-------------- next part --------------
2823A non-text attachment was scrubbed...
2824Name: signature.asc
2825Type: application/pgp-signature
2826Size: 819 bytes
2827Desc: Digital signature
2828URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170424/2ad8d9e6/attachment.sig>
2829
2830From mail at parckwart.de Mon Apr 24 10:37:09 2017
2831From: mail at parckwart.de (Jonathan Marquardt)
2832Date: Mon, 24 Apr 2017 12:37:09 +0200
2833Subject: [tor-talk] TOR problems - seriously PLEASE HELP ME!
2834In-Reply-To: <2D9C0BCAAC08494483B7701FD694DB16@ARSSRV18RL>
2835References: <2D9C0BCAAC08494483B7701FD694DB16@ARSSRV18RL>
2836Message-ID: <20170424103709.GB5577@parckwart.de>
2837
2838By the way: Please don't cross-post across multiple mailing lists. Because I
2839didn't notice it, you just made me spam these lists when replying to you.
2840Sending to tor-talk would have been enough.
2841--
28424096R/1224DBD299A4F5F3
284347BC 7DE8 3D46 2E8B ED18 AA86 1224 DBD2 99A4 F5F3
2844-------------- next part --------------
2845A non-text attachment was scrubbed...
2846Name: signature.asc
2847Type: application/pgp-signature
2848Size: 819 bytes
2849Desc: Digital signature
2850URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170424/f7520ba8/attachment.sig>
2851
2852From jon.tullett at gmail.com Mon Apr 24 10:54:32 2017
2853From: jon.tullett at gmail.com (Jon Tullett)
2854Date: Mon, 24 Apr 2017 12:54:32 +0200
2855Subject: [tor-talk] Shodan & Hidden Services
2856In-Reply-To: <CAFWeb9+U4-=Eb3pM5y0xSkMa0QSKD1fOXWBhtRpcOWWPrrN4aA@mail.gmail.com>
2857References: <CAFWeb9LajGLShK=34FBjTVZoe10F5HuPskG9KUUuOy-660BjOQ@mail.gmail.com>
2858 <CAPkfgVY1GRj_V2T4ueLcV8Ac5M40GGUbSOTusV8cafQv2F7Tjg@mail.gmail.com>
2859 <CAFWeb9+U4-=Eb3pM5y0xSkMa0QSKD1fOXWBhtRpcOWWPrrN4aA@mail.gmail.com>
2860Message-ID: <CAPkfgVbz6G7MXv7arNtPVV+H4+r8Rjf1aSTdckBM7o6QT5M_Hw@mail.gmail.com>
2861
2862On 24 April 2017 at 10:33, Alec Muffett <alec.muffett at gmail.com> wrote:
2863> On 24 April 2017 at 09:03, Jon Tullett <jon.tullett at gmail.com> wrote:
2864>
2865>>
2866>> Interesting. What can you do with that? Can you tie them to specific
2867>> hidden services?
2868>>
2869>
2870> Sometimes. See sample results in my Twitter thread:
2871>
2872> https://twitter.com/AlecMuffett/status/855542397165502464
2873>
2874
2875Oops! At least it looks like a fairly small population of people
2876making that particular mistake.
2877
2878-J
2879
2880From gk at torproject.org Mon Apr 24 11:26:00 2017
2881From: gk at torproject.org (Georg Koppen)
2882Date: Mon, 24 Apr 2017 11:26:00 +0000
2883Subject: [tor-talk] Regarding latest TOR Browser update 652
2884In-Reply-To: <58F8F3CC.20808@gmx.de>
2885References: <58F8F3CC.20808@gmx.de>
2886Message-ID: <23614fe5-a637-fb00-a6ce-23185e1eb900@torproject.org>
2887
2888Andri Effendi:
2889> Hi Tor community,
2890>
2891> Thanks for the updates allowing Twitter.
2892>
2893> It really helps, since I was using Tor for just about everything except
2894> twitter.
2895>
2896> I have noticed though that at least on the Mac version of Tor that after
2897> the update "6.5.2" the tor browser window is very laggy and I don't mean
2898> the page loading, I mean the system responsiveness and the rainbow spiral.
2899>
2900> I know it is not my Machine because it passed a clean bill of health
2901> after thorough diagnostics.
2902>
2903> My machine handles everything else alright, just not Tor after the last
2904> update.
2905>
2906> Please let me know if any other mac users are experiencing these issues
2907> since the update.
2908
2909You've been the only one so far. So, not sure what is going on. You
2910could test with an old 6.5.1 to check whether it is really the update to
29116.5.2 that caused this:
2912https://archive.torproject.org/tor-package-archive/torbrowser/6.5.1/
2913
2914Georg
2915
2916
2917-------------- next part --------------
2918A non-text attachment was scrubbed...
2919Name: signature.asc
2920Type: application/pgp-signature
2921Size: 833 bytes
2922Desc: OpenPGP digital signature
2923URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170424/6c9344e4/attachment.sig>
2924
2925From unpublished at wp.pl Tue Apr 25 00:29:10 2017
2926From: unpublished at wp.pl (unpublished)
2927Date: Tue, 25 Apr 2017 02:29:10 +0200
2928Subject: [tor-talk] Shodan & Hidden Services
2929In-Reply-To: <CAPkfgVbz6G7MXv7arNtPVV+H4+r8Rjf1aSTdckBM7o6QT5M_Hw@mail.gmail.com>
2930References: <CAFWeb9LajGLShK=34FBjTVZoe10F5HuPskG9KUUuOy-660BjOQ@mail.gmail.com>
2931 <CAPkfgVY1GRj_V2T4ueLcV8Ac5M40GGUbSOTusV8cafQv2F7Tjg@mail.gmail.com>
2932 <CAFWeb9+U4-=Eb3pM5y0xSkMa0QSKD1fOXWBhtRpcOWWPrrN4aA@mail.gmail.com>
2933 <CAPkfgVbz6G7MXv7arNtPVV+H4+r8Rjf1aSTdckBM7o6QT5M_Hw@mail.gmail.com>
2934Message-ID: <875AE08C56094744A1F31ADD8DB7535B@ARSSRV18RL>
2935
2936Hello,
2937
2938I come from Poland (Now a country of totalitarian power - comparable to
2939China, where the Constitution is not observed and explicitly does not
2940respect the European Union's provisions and agreements - to which we
2941belong).
2942
2943I'm very sorry for the duplication, but this was caused by my confusion in
2944the structure of your operation (hard access, lack of possibility to set up
2945your own topic thread). More than that, I can not find the answers to the
2946questions I have asked, and I personally find them very important and
2947crucial in terms of security.
2948At current speeds of 120 / 250Mbps only two bridges - with the only active
2949(works) "amazon" bridge option , it's probably a little too much!
2950Another aspect of the usefulness of using TOR - web pages display a message
2951that "DON'T SUPPORT TOR CONNECTIONS"). Can you somehow mask the fact that
2952you use TOR browser, substituting the name of regular firefox?
2953A good idea would be to set the first/last COUNTRY (download/send data) of
2954the final node - as many sites do not support connections from foreign
2955countries.
2956There is still a question of what effect on the release of real IP, with use
2957Kaspersky Internet Security 2017 (PC version), during because it Windows
2958restart, injected its your packages (every couple of seconds it
2959sends/receives packets on 443 port)
2960
2961Times and technologies have changed. The TOR idea was 100% effective 8-10
2962years ago, now with surveillance for even AES256 or even PGP 8192 is not a
2963guarantee of confidentiality. At home we have 8 core processors after 4Ghz
2964and 256bit graphics on DDR5! Why not use this power of the face to protect
2965our privacy!
2966
2967Best regards sincerely.
2968
2969
2970PS. If you are interested in politics:
2971People-nation is mesmerized and manipulated and deceived by state-owned
2972public media controlled by "Current government - government, prime minister,
2973president". The opposition is torn and divided, meaning nothing and no
2974representation, struggling to keep up. People divided over the years into
2975two factions, covered by total observation and ransacking in someone else's
2976property and past, without respect for any privacy! This is a sad truth you
2977will not hear on TV.
2978
2979
2980-----Oryginalna wiadomość-----
2981From: Jon Tullett
2982Sent: Monday, April 24, 2017 12:54 PM
2983To: tor-talk at lists.torproject.org
2984Subject: Re: [tor-talk] Shodan & Hidden Services
2985
2986On 24 April 2017 at 10:33, Alec Muffett <alec.muffett at gmail.com> wrote:
2987> On 24 April 2017 at 09:03, Jon Tullett <jon.tullett at gmail.com> wrote:
2988>
2989>>
2990>> Interesting. What can you do with that? Can you tie them to specific
2991>> hidden services?
2992>>
2993>
2994> Sometimes. See sample results in my Twitter thread:
2995>
2996> https://twitter.com/AlecMuffett/status/855542397165502464
2997>
2998
2999Oops! At least it looks like a fairly small population of people
3000making that particular mistake.
3001
3002-J
3003--
3004tor-talk mailing list - tor-talk at lists.torproject.org
3005To unsubscribe or change other settings go to
3006https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
3007
3008From joebtfsplk at gmx.com Tue Apr 25 00:43:44 2017
3009From: joebtfsplk at gmx.com (Joe Btfsplk)
3010Date: Mon, 24 Apr 2017 19:43:44 -0500
3011Subject: [tor-talk] TBB uses orange Firefox icon in Linux panel
3012Message-ID: <9fa4537b-10e5-950f-86b3-67990f3a5ad3@gmx.com>
3013
3014In Mint 18.1, TBB 6.5.1 was installed to /home/user/torbrowser/. Now
3015updated to 6.5.2 - still same issue.
3016I only have one TBB launcher (icon) - on the desktop (nowhere else) & it
3017uses the correct green TBB globe icon.
3018When TBB is running, the app icon on Mint's panel is the orange / blue
3019Fx icon. Any other TBB window I open (bookmarks, NoScript options) -
3020also use the orange Fx icon in the panel.
3021
3022Confusing when TBB & Firefox are both running.
3023
3024Not sure when it happened - when 1st installed TBB in Mint, it showed
3025correct icon on the panel.
3026At some point - but before any TBB update, the panel icon switched.
3027
3028I can probably hack the right icon - to the location that Linux pulls
3029the icon for the panel (if it's different location than
3030start-tor-browser.desktop.
3031Anyone know where Linux gets the panel icon for TBB?
3032
3033In the start-tor-browser.desktop file, it shows the icon
3034"mozicon128.png" - which should be correct .
3035For installed programs, I believe Linux pulls program panel icons from
3036the <program name>.desktop file, under "icon=...."
3037
3038Any idea why this icon switch happened?
3039
3040
3041
3042From goody2shoes at resist.ca Tue Apr 25 01:47:49 2017
3043From: goody2shoes at resist.ca (goody2shoes)
3044Date: Mon, 24 Apr 2017 18:47:49 -0700
3045Subject: [tor-talk] TBB uses orange Firefox icon in Linux panel
3046In-Reply-To: <9fa4537b-10e5-950f-86b3-67990f3a5ad3@gmx.com>
3047References: <9fa4537b-10e5-950f-86b3-67990f3a5ad3@gmx.com>
3048Message-ID: <c1e7f010-8298-32d5-01ff-9ce0ac447e8a@resist.ca>
3049
3050
3051
3052On 04/24/2017 05:43 PM, Joe Btfsplk wrote:
3053> In Mint 18.1, TBB 6.5.1 was installed to /home/user/torbrowser/. Now
3054> updated to 6.5.2 - still same issue.
3055> I only have one TBB launcher (icon) - on the desktop (nowhere else) &
3056> it uses the correct green TBB globe icon.
3057> When TBB is running, the app icon on Mint's panel is the orange /
3058> blue Fx icon. Any other TBB window I open (bookmarks, NoScript
3059> options) - also use the orange Fx icon in the panel.
3060>
3061> Confusing when TBB & Firefox are both running.
3062>
3063> Not sure when it happened - when 1st installed TBB in Mint, it showed
3064> correct icon on the panel.
3065> At some point - but before any TBB update, the panel icon switched.
3066>
3067> I can probably hack the right icon - to the location that Linux pulls
3068> the icon for the panel (if it's different location than
3069> start-tor-browser.desktop.
3070> Anyone know where Linux gets the panel icon for TBB?
3071>
3072> In the start-tor-browser.desktop file, it shows the icon
3073> "mozicon128.png" - which should be correct .
3074> For installed programs, I believe Linux pulls program panel icons from
3075> the <program name>.desktop file, under "icon=...."
3076>
3077> Any idea why this icon switch happened?
3078>
3079>
3080
3081Debian Jessie 32 bit. I have torbrowser's folder in my home/opt
3082directory and my panel icon is linked to
3083/home/opt/tor-browser_en-US/Browser/browser/icons. That's where the
3084standard panel icon is located. Note the first iteration of "Browser" in
3085the path IS capitalized.
3086
3087G2s
3088
3089
3090
3091From cube at browserprint.info Tue Apr 25 06:00:03 2017
3092From: cube at browserprint.info (cube at browserprint.info)
3093Date: Mon, 24 Apr 2017 23:00:03 -0700
3094Subject: [tor-talk] TBB users, please give 1 minute of your time for science
3095Message-ID: <20170425060043.6ECA9E0870@eugeni.torproject.org>
3096
3097Hello, Tor community!
3098
3099Could you please do me (and science) a favor and go to my site ( https://browserprint.info ) using the Tor Browser Bundle and submit a fingerprint, making sure to fill in the optional questionnaire?
3100
3101At the moment I'm working on detecting a person's underlying operating system and browser family using their browser fingerprint.
3102The aim of this is to detect and defeat browser spoofing.
3103The number of Tor Browser Bundle users who have gone to my site and done this is extremely low, so I'm not able to properly train my detector to defeat the TBB, nor am I able to gauge how effective my detector is against the TBB.
3104
3105Rest assured that I will not use your data for anything malicious, nor will I attempt to deanonymise you in any way.
3106
3107Thank you!
3108
3109From mirimir at riseup.net Tue Apr 25 06:15:32 2017
3110From: mirimir at riseup.net (Mirimir)
3111Date: Mon, 24 Apr 2017 19:15:32 -1100
3112Subject: [tor-talk] TBB users,
3113 please give 1 minute of your time for science
3114In-Reply-To: <20170425060043.6ECA9E0870@eugeni.torproject.org>
3115References: <20170425060043.6ECA9E0870@eugeni.torproject.org>
3116Message-ID: <5cecbcfd-68b8-c48d-8337-6bb6a9268b06@riseup.net>
3117
3118On 04/24/2017 07:00 PM, cube at browserprint.info wrote:
3119> Hello, Tor community!
3120>
3121> Could you please do me (and science) a favor and go to my site (
3122> https://browserprint.info ) using the Tor Browser Bundle and submit a
3123> fingerprint, making sure to fill in the optional questionnaire?
3124>
3125> At the moment I'm working on detecting a person's underlying
3126> operating system and browser family using their browser fingerprint.
3127> The aim of this is to detect and defeat browser spoofing. The number
3128> of Tor Browser Bundle users who have gone to my site and done this is
3129> extremely low, so I'm not able to properly train my detector to
3130> defeat the TBB, nor am I able to gauge how effective my detector is
3131> against the TBB.
3132>
3133> Rest assured that I will not use your data for anything malicious,
3134> nor will I attempt to deanonymise you in any way.
3135>
3136> Thank you!
3137
3138Not malicious, you say? Browser spoofing is a key feature of Tor
3139browser. Defeating that sounds rather malicious.
3140
3141From grarpamp at gmail.com Tue Apr 25 06:17:51 2017
3142From: grarpamp at gmail.com (grarpamp)
3143Date: Tue, 25 Apr 2017 02:17:51 -0400
3144Subject: [tor-talk] Shodan & Hidden Services
3145In-Reply-To: <CAFWeb9LajGLShK=34FBjTVZoe10F5HuPskG9KUUuOy-660BjOQ@mail.gmail.com>
3146References: <CAFWeb9LajGLShK=34FBjTVZoe10F5HuPskG9KUUuOy-660BjOQ@mail.gmail.com>
3147Message-ID: <CAD2Ti2-pG+oOUQViuqujdNuewcxqEbRhrbrwnpD5kR5PfQWWTQ@mail.gmail.com>
3148
3149> So it turns out that Shodan - a kind of multi-protocol Google-alike search
3150> engine for metadata and protocol headers - has indexed a bunch of Onion
3151> sites which were configured to leak their (onion) hostnames into protocol
3152> headers.
3153>
3154> https://www.shodan.io/search?query=.onion%2F
3155>
3156> This is... tragic, perhaps, and avoidable to varying extents (eg: my
3157> proposed setup process*) but the situation also possibly presents an
3158> opportunity for anyone who has identified addresses of sibyl/other naughty
3159> tor-infra-impacting activity, to maybe check some logs and see if any
3160> badly-configured onions were also hosted on the same addresses/subnets, get
3161> some concept of what hidden services were hosted there, and what they may
3162> have been up to?
3163>
3164> https://twitter.com/AlecMuffett/status/855542397165502464
3165
3166If people think onionland is some errorproof perfect
3167configuration zone, free from scam, free from agents, free from
3168discovery, free from all manner of trickery, buggery, debuggery,
3169bauchery, exploit, or the bore of ever September, and so on....
3170nope, it's been quite the opposite since day one.
3171That people are only recently studying finding and publishing
3172these things, claiming as news twatter to a hat, is rather amusing.
3173And of course such work is fine endeavour and report as well.
3174Have fun.
3175
3176From cube at browserprint.info Tue Apr 25 06:20:27 2017
3177From: cube at browserprint.info (cube at browserprint.info)
3178Date: Mon, 24 Apr 2017 23:20:27 -0700
3179Subject: [tor-talk] TBB users,
3180 please give 1 minute of your time for science
3181Message-ID: <20170425062042.429C1E092E@eugeni.torproject.org>
3182
3183
3184
3185> On 04/24/2017 07:00 PM, cube at browserprint.info wrote:
3186> > Hello, Tor community!
3187> >
3188> > Could you please do me (and science) a favor and go to my site (
3189> > https://browserprint.info ) using the Tor Browser Bundle and submit a
3190> > fingerprint, making sure to fill in the optional questionnaire?
3191> >
3192> > At the moment I'm working on detecting a person's underlying
3193> > operating system and browser family using their browser fingerprint.
3194> > The aim of this is to detect and defeat browser spoofing. The number
3195> > of Tor Browser Bundle users who have gone to my site and done this is
3196> > extremely low, so I'm not able to properly train my detector to
3197> > defeat the TBB, nor am I able to gauge how effective my detector is
3198> > against the TBB.
3199> >
3200> > Rest assured that I will not use your data for anything malicious,
3201> > nor will I attempt to deanonymise you in any way.
3202> >
3203> > Thank you!
3204>
3205> Not malicious, you say? Browser spoofing is a key feature of Tor
3206> browser. Defeating that sounds rather malicious.
3207> --
3208> tor-talk mailing list - tor-talk at lists.torproject.org
3209> To unsubscribe or change other settings go to
3210> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
3211> e
3212>
3213>
3214
3215You can't build defenses to attacks that nobody knows about.
3216And if I'm the one who develops the attack it'll be public knowledge; can't say the NSA would be so gracious.
3217
3218From grarpamp at gmail.com Tue Apr 25 06:21:11 2017
3219From: grarpamp at gmail.com (grarpamp)
3220Date: Tue, 25 Apr 2017 02:21:11 -0400
3221Subject: [tor-talk] TBB users,
3222 please give 1 minute of your time for science
3223In-Reply-To: <5cecbcfd-68b8-c48d-8337-6bb6a9268b06@riseup.net>
3224References: <20170425060043.6ECA9E0870@eugeni.torproject.org>
3225 <5cecbcfd-68b8-c48d-8337-6bb6a9268b06@riseup.net>
3226Message-ID: <CAD2Ti2-upPoWuLC4C+eJPfKi=Q2aJCKM3v=5CT2+=C5JpMfgSA@mail.gmail.com>
3227
3228On Tue, Apr 25, 2017 at 2:15 AM, Mirimir <mirimir at riseup.net> wrote:
3229> On 04/24/2017 07:00 PM, cube at browserprint.info wrote:>>
3230>> Could you please do me (and science) a favor and go to my site (
3231>> https://browserprint.info ) using the Tor Browser Bundle and submit a
3232>> fingerprint, making sure to fill in the optional questionnaire?
3233>>
3234>> At the moment I'm working on detecting a person's underlying
3235>> operating system and browser family using their browser fingerprint.
3236>> The aim of this is to detect and defeat browser spoofing. The number
3237>> of Tor Browser Bundle users who have gone to my site and done this is
3238>> extremely low, so I'm not able to properly train my detector to
3239>> defeat the TBB, nor am I able to gauge how effective my detector is
3240>> against the TBB.
3241>>
3242>> Rest assured that I will not use your data for anything malicious,
3243>> nor will I attempt to deanonymise you in any way.
3244>
3245> Not malicious, you say? Browser spoofing is a key feature of Tor
3246> browser. Defeating that sounds rather malicious.
3247
3248Were it to be defeated, the feature sounds pretty weak.
3249
3250From david.m.o at telia.com Tue Apr 25 07:29:03 2017
3251From: david.m.o at telia.com (David Olofsson)
3252Date: Tue, 25 Apr 2017 09:29:03 +0200
3253Subject: [tor-talk] TBB users,
3254 please give 1 minute of your time for science
3255In-Reply-To: <CAD2Ti2-upPoWuLC4C+eJPfKi=Q2aJCKM3v=5CT2+=C5JpMfgSA@mail.gmail.com>
3256References: <20170425060043.6ECA9E0870@eugeni.torproject.org>
3257 <5cecbcfd-68b8-c48d-8337-6bb6a9268b06@riseup.net>
3258 <CAD2Ti2-upPoWuLC4C+eJPfKi=Q2aJCKM3v=5CT2+=C5JpMfgSA@mail.gmail.com>
3259Message-ID: <CAKKXmSNZX2qgi1_4daM13W6_kYa6m5aBfU2yKgJJby+xnwwyzw@mail.gmail.com>
3260
3261There is always a risk of bugs and exploits in the code. Having a security
3262researcher study these gives us better knowledge of the current flaws and
3263how to correct them. If you truly trust the browsers current security this
3264should have no downside, otherwise it is the path to improving it.
3265
3266//Sidju
3267
3268On 25 Apr 2017 08:21, "grarpamp" <grarpamp at gmail.com> wrote:
3269
3270> On Tue, Apr 25, 2017 at 2:15 AM, Mirimir <mirimir at riseup.net> wrote:
3271> > On 04/24/2017 07:00 PM, cube at browserprint.info wrote:>>
3272> >> Could you please do me (and science) a favor and go to my site (
3273> >> https://browserprint.info ) using the Tor Browser Bundle and submit a
3274> >> fingerprint, making sure to fill in the optional questionnaire?
3275> >>
3276> >> At the moment I'm working on detecting a person's underlying
3277> >> operating system and browser family using their browser fingerprint.
3278> >> The aim of this is to detect and defeat browser spoofing. The number
3279> >> of Tor Browser Bundle users who have gone to my site and done this is
3280> >> extremely low, so I'm not able to properly train my detector to
3281> >> defeat the TBB, nor am I able to gauge how effective my detector is
3282> >> against the TBB.
3283> >>
3284> >> Rest assured that I will not use your data for anything malicious,
3285> >> nor will I attempt to deanonymise you in any way.
3286> >
3287> > Not malicious, you say? Browser spoofing is a key feature of Tor
3288> > browser. Defeating that sounds rather malicious.
3289>
3290> Were it to be defeated, the feature sounds pretty weak.
3291> --
3292> tor-talk mailing list - tor-talk at lists.torproject.org
3293> To unsubscribe or change other settings go to
3294> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
3295>
3296
3297From jeremyrand at airmail.cc Tue Apr 25 08:39:43 2017
3298From: jeremyrand at airmail.cc (Jeremy Rand)
3299Date: Tue, 25 Apr 2017 08:39:43 +0000
3300Subject: [tor-talk] TBB users,
3301 please give 1 minute of your time for science
3302In-Reply-To: <CAKKXmSNZX2qgi1_4daM13W6_kYa6m5aBfU2yKgJJby+xnwwyzw@mail.gmail.com>
3303References: <20170425060043.6ECA9E0870@eugeni.torproject.org>
3304 <5cecbcfd-68b8-c48d-8337-6bb6a9268b06@riseup.net>
3305 <CAD2Ti2-upPoWuLC4C+eJPfKi=Q2aJCKM3v=5CT2+=C5JpMfgSA@mail.gmail.com>
3306 <CAKKXmSNZX2qgi1_4daM13W6_kYa6m5aBfU2yKgJJby+xnwwyzw@mail.gmail.com>
3307Message-ID: <7fb9e6c5-43ba-60fc-1e48-8aff451da328@airmail.cc>
3308
3309David Olofsson:
3310> There is always a risk of bugs and exploits in the code. Having a security
3311> researcher study these gives us better knowledge of the current flaws and
3312> how to correct them. If you truly trust the browsers current security this
3313> should have no downside, otherwise it is the path to improving it.
3314>
3315> //Sidju
3316
3317It wasn't obvious to me whether OP intends to give their analysis to the
3318Tor Browser devs (seems ethical) or instead keep it for proprietary
3319purposes (seems unethical).
3320
3321Can OP clarify on this point?
3322
3323Cheers,
3324--
3325-Jeremy Rand
3326Lead Application Engineer at Namecoin
3327Mobile email: jeremyrandmobile at airmail.cc
3328Mobile OpenPGP: 2158 0643 C13B B40F B0FD 5854 B007 A32D AB44 3D9C
3329Send non-security-critical things to my Mobile with OpenPGP.
3330Please don't send me unencrypted messages.
3331My business email jeremy at veclabs.net is having technical issues at the
3332moment.
3333
3334From cube at browserprint.info Tue Apr 25 09:37:33 2017
3335From: cube at browserprint.info (cube at browserprint.info)
3336Date: Tue, 25 Apr 2017 02:37:33 -0700
3337Subject: [tor-talk] TBB users,
3338 please give 1 minute of your time for science
3339Message-ID: <20170425093742.CECFDE0826@eugeni.torproject.org>
3340
3341I'm a PhD student.
3342I have no employer other than my university.
3343All my work is done with the intention of publishing it in academic journals, conferences, my blog, and my thesis.
3344
3345> David Olofsson:
3346> > There is always a risk of bugs and exploits in the code. Having a security
3347> > researcher study these gives us better knowledge of the current flaws and
3348> > how to correct them. If you truly trust the browsers current security this
3349> > should have no downside, otherwise it is the path to improving it.
3350> >
3351> > //Sidju
3352>
3353> It wasn't obvious to me whether OP intends to give their analysis to the
3354> Tor Browser devs (seems ethical) or instead keep it for proprietary
3355> purposes (seems unethical).
3356>
3357> Can OP clarify on this point?
3358>
3359> Cheers,
3360> --
3361> -Jeremy Rand
3362> Lead Application Engineer at Namecoin
3363> Mobile email: jeremyrandmobile at airmail.cc
3364> Mobile OpenPGP: 2158 0643 C13B B40F B0FD 5854 B007 A32D AB44 3D9C
3365> Send non-security-critical things to my Mobile with OpenPGP.
3366> Please don't send me unencrypted messages.
3367> My business email jeremy at veclabs.net is having technical issues at the
3368> moment.
3369> --
3370> tor-talk mailing list - tor-talk at lists.torproject.org
3371> To unsubscribe or change other settings go to
3372> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
3373> e
3374>
3375>
3376
3377From lolint at protonmail.com Tue Apr 25 11:12:37 2017
3378From: lolint at protonmail.com (Lolint)
3379Date: Tue, 25 Apr 2017 07:12:37 -0400
3380Subject: [tor-talk] TBB users,
3381 please give 1 minute of your time for science
3382In-Reply-To: <20170425060043.6ECA9E0870@eugeni.torproject.org>
3383References: <20170425060043.6ECA9E0870@eugeni.torproject.org>
3384Message-ID: <HwLmxgkma1740Dokda03HNkcJMGAffyRJ58lJDBUH4FQ-J69u4aJeayaZ0KnclIKeja8V0UAhx3RNqQDG51fXzwltrr79zJnWZ54XZH9ZYg=@protonmail.com>
3385
3386Hi!
3387
3388I've been making those tests on your website multiple times with the TBB but most of the
3389time I get a unique fingerprint even when re-doing the test at different times with the same
3390browser.
3391
3392There also some wrong measurements such as the Facebook button that gets labeled as
3393being blocked by an Adblock list or similar when I didn't use any addon that serves that
3394purpose.
3395
3396--Jeff
3397
3398From pipatron at gmail.com Tue Apr 25 12:01:05 2017
3399From: pipatron at gmail.com (Anders Andersson)
3400Date: Tue, 25 Apr 2017 14:01:05 +0200
3401Subject: [tor-talk] TBB users,
3402 please give 1 minute of your time for science
3403In-Reply-To: <HwLmxgkma1740Dokda03HNkcJMGAffyRJ58lJDBUH4FQ-J69u4aJeayaZ0KnclIKeja8V0UAhx3RNqQDG51fXzwltrr79zJnWZ54XZH9ZYg=@protonmail.com>
3404References: <20170425060043.6ECA9E0870@eugeni.torproject.org>
3405 <HwLmxgkma1740Dokda03HNkcJMGAffyRJ58lJDBUH4FQ-J69u4aJeayaZ0KnclIKeja8V0UAhx3RNqQDG51fXzwltrr79zJnWZ54XZH9ZYg=@protonmail.com>
3406Message-ID: <CAKkunMYnpmNKcna0w5aRgaA+z=kBL3uEtpgPeKLMt9LSJBLUQw@mail.gmail.com>
3407
3408On 25 April 2017 at 13:12, Lolint <lolint at protonmail.com> wrote:
3409> I've been making those tests on your website multiple times with the TBB but most of the
3410> time I get a unique fingerprint even when re-doing the test at different times with the same
3411> browser.
3412
3413This is something worth pointing out. How does the current
3414browser-identification websites handle that?
3415
3416If you always show up as "unique", even when returning, it means that
3417you are not really that unique or identifiable after all. This also
3418applies if you end up in small groups.
3419
3420From am26590 at email.vccs.edu Tue Apr 25 12:07:55 2017
3421From: am26590 at email.vccs.edu (Andre Mankel)
3422Date: Tue, 25 Apr 2017 08:07:55 -0400
3423Subject: [tor-talk] Fwd: TOR problems - seriously PLEASE HELP ME!
3424In-Reply-To: <20170424103056.GA5577@parckwart.de>
3425References: <2D9C0BCAAC08494483B7701FD694DB16@ARSSRV18RL>
3426 <20170424103056.GA5577@parckwart.de>
3427Message-ID: <CA+4M3o1MZCMNiZEUvEVJ93WmgeZskUeA3B9x1go5xayqZEv_yQ@mail.gmail.com>
3428
3429>A good idea would be to set the first/last COUNTRY (download/send data) of
3430the final node - as many sites do not support connections from foreign
3431countries.
3432As Jonathan mentioned in a reply to your post already, you are able to
3433define a set of allowed exit countries (ie poland only) by following these
3434instructions on wikihow: http://www.wikihow.com/Set-a-
3435Specific-Country-in-a-Tor-Browser
3436
3437>Can you somehow mask the fact that you use TOR browser, substituting the
3438name of regular firefox?
3439The destination server (the website which says "don't support tor
3440connections") probably doesn't block connections because of the browser you
3441are using. Since every node in the tor network exposes its "tor-membership"
3442to the network itself, it will always be possible to determine whether you
3443are using tor or not. On this specific manner, a VPN connection may help
3444you out, but please be aware that the provider of this VPN will then be
3445able to log and maybe intercept your traffic.
3446
3447>There is still a question of what effect on the release of real IP, with
3448use Kaspersky Internet Security 2017 (PC version), during because it
3449Windows restart, injected its your packages (every couple of seconds it
3450sends/receives packets on 443 port)
3451The most internet security solutions intercept ssl traffic to scan the
3452contents of these connections for any Trojans or viruses. If not
3453implemented with perfect care, these solutions probably more harm you than
3454they help securing anything. You find an example of this here:
3455http://www.securityweek.com/google-researcher-finds-certificate-flaws-kaspersky-products
3456
3457
3458On Mon, Apr 24, 2017 at 8:29 PM, unpublished <unpublished at wp.pl> wrote:
3459
3460> Hello,
3461>
3462> I come from Poland (Now a country of totalitarian power - comparable to
3463> China, where the Constitution is not observed and explicitly does not
3464> respect the European Union's provisions and agreements - to which we
3465> belong).
3466>
3467> I'm very sorry for the duplication, but this was caused by my confusion in
3468> the structure of your operation (hard access, lack of possibility to set up
3469> your own topic thread). More than that, I can not find the answers to the
3470> questions I have asked, and I personally find them very important and
3471> crucial in terms of security.
3472> At current speeds of 120 / 250Mbps only two bridges - with the only active
3473> (works) "amazon" bridge option , it's probably a little too much!
3474> Another aspect of the usefulness of using TOR - web pages display a
3475> message that "DON'T SUPPORT TOR CONNECTIONS"). Can you somehow mask the
3476> fact that you use TOR browser, substituting the name of regular firefox?
3477> A good idea would be to set the first/last COUNTRY (download/send data) of
3478> the final node - as many sites do not support connections from foreign
3479> countries.
3480> There is still a question of what effect on the release of real IP, with
3481> use Kaspersky Internet Security 2017 (PC version), during because it
3482> Windows restart, injected its your packages (every couple of seconds it
3483> sends/receives packets on 443 port)
3484>
3485> Times and technologies have changed. The TOR idea was 100% effective 8-10
3486> years ago, now with surveillance for even AES256 or even PGP 8192 is not a
3487> guarantee of confidentiality. At home we have 8 core processors after 4Ghz
3488> and 256bit graphics on DDR5! Why not use this power of the face to protect
3489> our privacy!
3490>
3491> Best regards sincerely.
3492>
3493>
3494> PS. If you are interested in politics:
3495> People-nation is mesmerized and manipulated and deceived by state-owned
3496> public media controlled by "Current government - government, prime
3497> minister, president". The opposition is torn and divided, meaning nothing
3498> and no representation, struggling to keep up. People divided over the years
3499> into two factions, covered by total observation and ransacking in someone
3500> else's property and past, without respect for any privacy! This is a sad
3501> truth you will not hear on TV.
3502>
3503>
3504---------- Forwarded message ----------
3505From: Jonathan Marquardt <mail at parckwart.de>
3506Date: Mon, Apr 24, 2017 at 6:30 AM
3507Subject: Re: [tor-talk] TOR problems - seriously PLEASE HELP ME!
3508To: tor-talk at lists.torproject.org
3509Cc: tor-onions at lists.torproject.org, tor-relays at lists.torproject.org,
3510global-south at lists.torproject.org
3511
3512
3513On Mon, Apr 24, 2017 at 12:16:23PM +0200, unpublished wrote:
3514> 1. Many web pages display information that I do not support "TOR
3515> connections"?
3516
3517Not sure, what you mean here. Perhaps THEY don't support (i.e. block)
3518connections from Tor users, because they are afraid of spam or other stupid
3519reasons. Nothing you can really do here. Websites blocking Tor is a huge
3520problem.
3521
3522> 2. How to increase (amazon) the number of relay nodes? Because standard
3523> only two redirect point?
3524
3525There are always three nodes. The amazon node should be your guard relay
3526(where you enter the Tor network). Then there are two relays after that.
3527There
3528isn't really any way to change that. Three hops should be sufficient for
3529decent anonymity, no real need to worry here.
3530
3531> 3. How to change the end node of the country (eg country from which I am
3532> POLAND)?
3533
3534Here's a simple guide on how to do that:
3535http://www.wikihow.com/Set-a-Specific-Country-in-a-Tor-Browser
3536--
35374096R/1224DBD299A4F5F3
353847BC 7DE8 3D46 2E8B ED18 AA86 1224 DBD2 99A4 F5F3
3539
3540--
3541tor-talk mailing list - tor-talk at lists.torproject.org
3542To unsubscribe or change other settings go to
3543https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
3544
3545From cube at browserprint.info Tue Apr 25 21:51:39 2017
3546From: cube at browserprint.info (cube at browserprint.info)
3547Date: Tue, 25 Apr 2017 14:51:39 -0700
3548Subject: [tor-talk] TBB users,
3549 please give 1 minute of your time for science
3550Message-ID: <20170425215203.CAB48E057B@eugeni.torproject.org>
3551
3552
3553
3554> Hi!
3555>
3556> I've been making those tests on your website multiple times with the TBB but most of the
3557> time I get a unique fingerprint even when re-doing the test at different times with the same
3558> browser.
3559>
3560> There also some wrong measurements such as the Facebook button that gets labeled as
3561> being blocked by an Adblock list or similar when I didn't use any addon that serves that
3562> purpose.
3563>
3564> --Jeff
3565> --
3566> tor-talk mailing list - tor-talk at lists.torproject.org
3567> To unsubscribe or change other settings go to
3568> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
3569> %
3570>
3571>
3572
3573Hi.
3574When you submit a fingerprint it sets a cookie in your browser that prevents double submission of identical fingeprints.
3575This could cause you to appear unique upon resubmission.
3576
3577The ad-block thing is probably caused by one of Tor's advanced security features. It happens when the security slider is on high, but not low.
3578
3579Thanks!
3580
3581From unpublished at wp.pl Wed Apr 26 01:17:29 2017
3582From: unpublished at wp.pl (unpublished)
3583Date: Wed, 26 Apr 2017 03:17:29 +0200
3584Subject: [tor-talk] Fwd: TOR problems - seriously PLEASE HELP ME!
3585In-Reply-To: <CA+4M3o1MZCMNiZEUvEVJ93WmgeZskUeA3B9x1go5xayqZEv_yQ@mail.gmail.com>
3586References: <2D9C0BCAAC08494483B7701FD694DB16@ARSSRV18RL>
3587 <20170424103056.GA5577@parckwart.de>
3588 <CA+4M3o1MZCMNiZEUvEVJ93WmgeZskUeA3B9x1go5xayqZEv_yQ@mail.gmail.com>
3589Message-ID: <8F0E77534835441BBF13D8E8BBBA5619@ARSSRV18RL>
3590
3591Thank you for your help and specific answer!
3592
3593I do not know yet how to put my reply (our correspondence question-answer) to everyone on the TOR blog (different from the standard forum)? I'm afraid that something of my actions it is a bad - doing something wrong.? I do not want to impose your politeness, but could you please explain it to me, or paste the content in the right place?
3594
3595I >A good idea would be to set the first/last COUNTRY (download/send data) of the final node - as many sites do not support connections from foreign countries.
3596>>As Jonathan mentioned in a reply to your post already, you are able to define a set of allowed exit countries (ie poland only) by following these instructions on wikihow: http://www.wikihow.com/Set-a-Specific-Country-in-a-Tor-Browser
3597
3598Super, works as it should. This solves one already my problem! It is a pity that we country have so few nodes. Is it possible to add the number of intermediate nodes (it seems very dangerous when the end-country is my own) in two TOR settings to 4 or at least 3 ? (only available working "amazon" settings).
3599I will try to run old 2 or 4 core PC, and share it as TOR 24h Poland node. (speeds IPv6 250/50Mbps be enough?) Maybe someone will help me to run this on free Linux (stable and maintenance-free working).
3600
3601I >Can you somehow mask the fact that you use TOR browser, substituting the name of regular firefox?
3602>>The destination server (the website which says "don't support tor connections") probably doesn't block connections because of the browser you are using. Since every node in the tor network exposes its "tor-membership" to the network itself, it will always be possible to determine whether you are using tor or not. On this specific manner, a VPN connection may help you out, but please be aware that the provider of this VPN will then be able to log and maybe intercept your traffic.
3603
3604I have a static IPv6 address they TOR work only with amazon settings (250Mbps TV cable network). Optionally I can uses the “open†non protected Wi-Fi network which blocks TOR connections also “amazon†and 2 bridges! (2.4Ghz only, and very slow max 50Mbps with 300Mbps - b,g,n, cards /8192 chip/, use beam aerial and 78% reach).
3605
3606Nice to have you explained that this is not a browser issue just a "signature" node. Is there a way to change settings in the settings so that the recipient does not see that the TOR is being used?
3607
3608I >There is still a question of what effect on the release of real IP, with use Kaspersky Internet Security 2017 (PC version), during because it Windows restart, injected its your packages (every couple of seconds it sends/receives packets on 443 port)
3609>>The most internet security solutions intercept ssl traffic to scan the contents of these connections for any Trojans or viruses. If not implemented with perfect care, these solutions probably more harm you than they help securing anything. You find an example of this here: http://www.securityweek.com/google-researcher-finds-certificate-flaws-kaspersky-products
3610
3611Thank you, I read. Does anyone in TOR are really interested in Kaspersky LAB and whether (eg. Kaspersky Internet Security 2017 PC version) it not threatens to expose IP (un hidden) when using TOR worked at Windows 7,8,10???
3612
3613Assuming that I use only secure pages, is not it safe to disable protection and then shut down KIS? I give up the protection of files and additionally I lose the useful option 1) effective "firewall" blocking telemetry and other spy sites (using svchost and raw RAW to retrieve information type whois, my location, markmonitor, etc.), 2) "Surfing Incognito" , 3) "Blocking banners". The question is worth it?
3614
3615
3616Once again great thanks for the help!
3617
3618Regards
3619
3620
3621From keb at cyblings.on.ca Wed Apr 26 03:26:00 2017
3622From: keb at cyblings.on.ca (krishna e bera)
3623Date: Tue, 25 Apr 2017 23:26:00 -0400
3624Subject: [tor-talk] TBB users,
3625 please give 1 minute of your time for science
3626In-Reply-To: <20170425093742.CECFDE0826@eugeni.torproject.org>
3627References: <20170425093742.CECFDE0826@eugeni.torproject.org>
3628Message-ID: <cb2ed68e-5cf1-5492-fb78-c985f094826e@cyblings.on.ca>
3629
3630On 25/04/17 05:37 AM, cube at browserprint.info wrote:
3631> I'm a PhD student.
3632> I have no employer other than my university.
3633> All my work is done with the intention of publishing it in academic journals, conferences, my blog, and my thesis.
3634
3635Going to the site we can see this project purports to be run by
3636Lachlan Kang of University of Adelaide and funded by ACEMS.org.au
3637with code available on https://github.com/qqTYXn7/browserprint
3638MIT licence and website CC-by 4.0.
3639Including all that info in the original call for our time might have
3640reduced the number of raised hackles - or at least mine.
3641
3642Now using iceweasel plus RequestPolicy-Continued add-on, clicking on the
3643fingerprint me button i fill the captcha and see "Please wait..."
3644followed by "An error has occurred."
3645
3646My TBB results are like others reported here.
3647
3648
3649From mirimir at riseup.net Wed Apr 26 03:52:25 2017
3650From: mirimir at riseup.net (Mirimir)
3651Date: Tue, 25 Apr 2017 16:52:25 -1100
3652Subject: [tor-talk] TBB users,
3653 please give 1 minute of your time for science
3654In-Reply-To: <cb2ed68e-5cf1-5492-fb78-c985f094826e@cyblings.on.ca>
3655References: <20170425093742.CECFDE0826@eugeni.torproject.org>
3656 <cb2ed68e-5cf1-5492-fb78-c985f094826e@cyblings.on.ca>
3657Message-ID: <4cc45156-9364-289e-e69c-8e69b1883d0c@riseup.net>
3658
3659On 04/25/2017 04:26 PM, krishna e bera wrote:
3660> On 25/04/17 05:37 AM, cube at browserprint.info wrote:
3661>> I'm a PhD student.
3662>> I have no employer other than my university.
3663>> All my work is done with the intention of publishing it in academic
3664>> journals, conferences, my blog, and my thesis.
3665>
3666> Going to the site we can see this project purports to be run by
3667> Lachlan Kang of University of Adelaide and funded by ACEMS.org.au
3668> with code available on https://github.com/qqTYXn7/browserprint
3669> MIT licence and website CC-by 4.0.
3670> Including all that info in the original call for our time might have
3671> reduced the number of raised hackles - or at least mine.
3672>
3673> Now using iceweasel plus RequestPolicy-Continued add-on, clicking on the
3674> fingerprint me button i fill the captcha and see "Please wait..."
3675> followed by "An error has occurred."
3676>
3677> My TBB results are like others reported here.
3678
3679Just to be clear, I am not at all opposed to research that helps Tor.
3680Finding vulnerabilities is a key part of that. What annoyed me was op's
3681statement: "The aim of this is to detect and defeat browser spoofing."
3682As if spoofing is a bad thing, that ought to be defeated. An aim like
3683"identifying bugs in browser spoofing" would have been more diplomatic.
3684
3685Also, it would perhaps have been more useful to first contact Tor
3686Project privately, after reading <https://research.torproject.org/> and
3687<https://blog.torproject.org/blog/ethical-tor-research-guidelines>.
3688
3689
3690
3691From joebtfsplk at gmx.com Wed Apr 26 04:20:54 2017
3692From: joebtfsplk at gmx.com (Joe Btfsplk)
3693Date: Tue, 25 Apr 2017 23:20:54 -0500
3694Subject: [tor-talk] TBB uses orange Firefox icon in Linux panel
3695In-Reply-To: <c1e7f010-8298-32d5-01ff-9ce0ac447e8a@resist.ca>
3696References: <9fa4537b-10e5-950f-86b3-67990f3a5ad3@gmx.com>
3697 <c1e7f010-8298-32d5-01ff-9ce0ac447e8a@resist.ca>
3698Message-ID: <1a000895-0a37-359b-8b7e-5a5953e1b644@gmx.com>
3699
3700On 04/24/2017 08:47 PM, goody2shoes wrote:
3701>
3702> On 04/24/2017 05:43 PM, Joe Btfsplk wrote:
3703>> In Mint 18.1, TBB 6.5.1 was installed to /home/user/torbrowser/. Now
3704>> updated to 6.5.2 - still same issue.
3705>> I only have one TBB launcher (icon) - on the desktop (nowhere else) &
3706>> it uses the correct green TBB globe icon.
3707>> When TBB is running, the app icon on Mint's panel is the orange /
3708>> blue Fx icon. Any other TBB window I open (bookmarks, NoScript
3709>> options) - also use the orange Fx icon in the panel.
3710>>
3711>>
3712>> In the start-tor-browser.desktop file, it shows the icon
3713>> "mozicon128.png" - which should be correct .
3714>>
3715>> Any idea why this icon switch happened?
3716>>
3717> Debian Jessie 32 bit. I have torbrowser's folder in my home/opt
3718> directory and my panel icon is linked to
3719> /home/opt/tor-browser_en-US/Browser/browser/icons. That's where the
3720> standard panel icon is located. Note the first iteration of "Browser" in
3721> the path IS capitalized.
3722>
3723> G2s
3724Thanks, G. Yep, that is apparently the path the TBB desktop file
3725(start-tor-browser.desktop) points for the icon.
3726/tor-browser_en-US/Browser/browser/icons/mozicon128.png.
3727As said, it worked, then it didn't.
3728
3729I just edited the desktop launcher & re-selected the same icon (was
3730already using - the one you mentioned). For now it's displaying OK in
3731the panel.
3732Looks like that icon file was changed in the update to 6.5.2. Maybe the
3733previous file got damaged, so Linux pulled the standard Fx icon from
3734another place. I'm not sure the orange Fx icon is included in the
3735Linux TBB package.
3736
3737
3738From cube at browserprint.info Wed Apr 26 06:51:16 2017
3739From: cube at browserprint.info (cube at browserprint.info)
3740Date: Tue, 25 Apr 2017 23:51:16 -0700
3741Subject: [tor-talk] TBB users,
3742 please give 1 minute of your time for science
3743Message-ID: <20170426065504.8852AE03BC@eugeni.torproject.org>
3744
3745
3746
3747> On 25/04/17 05:37 AM, cube at browserprint.info wrote:
3748> > I'm a PhD student.
3749> > I have no employer other than my university.
3750> > All my work is done with the intention of publishing it in academic journals, conferences, my blog, and my thesis.
3751>
3752> Going to the site we can see this project purports to be run by
3753> Lachlan Kang of University of Adelaide and funded by ACEMS.org.au
3754> with code available on https://github.com/qqTYXn7/browserprint
3755> MIT licence and website CC-by 4.0.
3756> Including all that info in the original call for our time might have
3757> reduced the number of raised hackles - or at least mine.
3758>
3759> Now using iceweasel plus RequestPolicy-Continued add-on, clicking on the
3760> fingerprint me button i fill the captcha and see "Please wait..."
3761> followed by "An error has occurred."
3762>
3763> My TBB results are like others reported here.
3764>
3765> --
3766> tor-talk mailing list - tor-talk at lists.torproject.org
3767> To unsubscribe or change other settings go to
3768> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
3769>
3770>
3771>
3772
3773Hi.
3774Yup, that's me!
3775
3776Thanks for reporting that error.
3777Sadly I was not able to replicate your bug (I tried the extension on IceCat and the site worked fine, but I couldn't try with IceWeasel because it doesn't seem to be available on my machine).
3778Looking through the logs it seems like there was some kind of special characters in your fonts list that the database didn't like, which is odd because I know it works with stuff like Chinese characters.
3779
3780I hope I'm not asking too much, but it would help me greatly if you could go here https://valve.github.io/fingerprintjs2/ (another person's site) and fingerprint yourself, then PM me your js_fonts.
3781I don't think they collect any data if you're worried about privacy.
3782
3783From am26590 at email.vccs.edu Wed Apr 26 08:38:50 2017
3784From: am26590 at email.vccs.edu (Andre Mankel)
3785Date: Wed, 26 Apr 2017 04:38:50 -0400
3786Subject: [tor-talk] Fwd: TOR problems - seriously PLEASE HELP ME!
3787In-Reply-To: <8F0E77534835441BBF13D8E8BBBA5619@ARSSRV18RL>
3788References: <2D9C0BCAAC08494483B7701FD694DB16@ARSSRV18RL>
3789 <20170424103056.GA5577@parckwart.de>
3790 <CA+4M3o1MZCMNiZEUvEVJ93WmgeZskUeA3B9x1go5xayqZEv_yQ@mail.gmail.com>
3791 <8F0E77534835441BBF13D8E8BBBA5619@ARSSRV18RL>
3792Message-ID: <CA+4M3o063VtH9sB7O3DN8wH2Z4QTe26jx-BRUiTZ24XOVsRBCQ@mail.gmail.com>
3793
3794>I do not know yet how to put my reply (our correspondence question-answer)
3795to everyone on the TOR blog (different from the standard forum)? I'm afraid
3796that something of my actions it is a bad - doing something wrong.? I do not
3797want to impose your politeness, but could you please explain it to me, or
3798paste the content in the right place?
3799I think you are already at the right place here. As this is the general
3800talk and tech mailing list for tor users, every other user subscribed to
3801this list is already able to read your messages and reply if applicable.
3802Please just leave the messages subject intact when replying to messages so
3803the system can merge messages with the same subject or topic to a thread.
3804There were some plans to improve the handling of requests for help like
3805yours but I have absolutely no idea how far they have been implemented yet.
3806
3807>Is it possible to add the number of intermediate nodes (it seems very
3808dangerous when the end-country is my own) in two TOR settings to >4 or at
3809least 3 ?
3810As far as I know there is no such option, but this isn't necessary however.
3811The Tor protocols design already assures that no of these three nodes is
3812able to determine your identity completely. Please have a look at the
3813following two sites below (1+2). The give you a deeper understanding how
3814these nodes communicate with each other and why a fourth hop wouldn't
3815provide that much more security or anonymity.
3816
3817
3818>I will try to run old 2 or 4 core PC, and share it as TOR 24h Poland node.
3819(speeds IPv6 250/50Mbps be enough?) Maybe someone will help >me to run this
3820on free Linux (stable and maintenance-free working).
3821That would be absolutely great, there are already a plenty of guides and
3822how-tos available on the internet showing you how to setup a tor relay
3823depending on your choice of operating systems. You can find some for debian
3824/ ubuntu below (3)
3825
3826>Nice to have you explained that this is not a browser issue just a
3827"signature" node. Is there a way to change settings in the settings so
3828>that the recipient does not see that the TOR is being used?
3829No problem, you're welcome. When someone provides a tor node, the network
3830needs to know whether this is a working tor node or not to send traffic
3831from other users connections to it. Therefore its always possible to lookup
3832a "list" of computers which are providing a relay for other tor users.
3833These lists are automatically generated and publicly available. Some
3834website operators filter requests coming from these nodes mostly for
3835unreasonable reasons. Obviously they distrust users of Tor or have been
3836facing a high level of misuse coming from Tor nodes in the past. Again, as
3837far as I know there's nothing you can do about it.
3838
3839>Thank you, I read. Does anyone in TOR are really interested in Kaspersky
3840LAB and whether (eg. Kaspersky Internet Security 2017 PC >version) it not
3841threatens to expose IP (un hidden) when using TOR worked at Windows
38427,8,10???
3843I don't think so. Also, this is not the exact area Tor works on. While
3844Kaspersky software tries to secure a single computer / endpoint from
3845viruses and trojans, Tor is a network providing anonymity to its users.
3846This is a little bit like you would compare apples and oranges ;)
3847
3848>Assuming that I use only secure pages, is not it safe to disable
3849protection and then shut down KIS? I give up the protection of files and
3850>additionally I lose the useful option 1) effective "firewall" blocking
3851telemetry and other spy sites (using svchost and raw RAW to retrieve
3852>information type whois, my location, markmonitor, etc.), 2) "Surfing
3853Incognito" , 3) "Blocking banners". The question is worth it?
3854I'm not fully aware what you exactly mean. I think for every approach you
3855listed, there are better solutions than Kaspersky but this is only my
3856humble opinion. Due to the fact that the Tor Browser Bundle includes
3857NoScript, a huge amount of scripts who may load banners or other ads is
3858already deactivated (and becomes active only if you manually enable them).
3859Also, the Tor Browser is in the 'Incognito' or 'Private-Browsing' mode
3860permanently. If you are able to evaluate which types of links / websites /
3861scripts and files you download may be a danger to your computer, you don't
3862need a AV solution like Kaspersky necessarily.
3863
3864Best regards,
3865Andre
3866
3867(1) What protections does Tor provide?
3868https://www.torproject.org/docs/faq.html.en#WhatProtectionsDoesTorProvide
3869(2) The solution: Distributed, anonymous network
3870https://www.torproject.org/about/overview#thesolution
3871(3) Tor Project: Debian / Ubuntu instructions
3872https://www.torproject.org/docs/debian.html.en
3873
3874On Tue, Apr 25, 2017 at 9:17 PM, unpublished <unpublished at wp.pl> wrote:
3875
3876> Thank you for your help and specific answer!
3877>
3878> I do not know yet how to put my reply (our correspondence question-answer)
3879> to everyone on the TOR blog (different from the standard forum)? I'm afraid
3880> that something of my actions it is a bad - doing something wrong.? I do not
3881> want to impose your politeness, but could you please explain it to me, or
3882> paste the content in the right place?
3883>
3884> I >A good idea would be to set the first/last COUNTRY (download/send data)
3885> of the final node - as many sites do not support connections from foreign
3886> countries.
3887> >>As Jonathan mentioned in a reply to your post already, you are able to
3888> define a set of allowed exit countries (ie poland only) by following these
3889> instructions on wikihow: http://www.wikihow.com/Set-a-
3890> Specific-Country-in-a-Tor-Browser
3891>
3892> Super, works as it should. This solves one already my problem! It is a
3893> pity that we country have so few nodes. Is it possible to add the number of
3894> intermediate nodes (it seems very dangerous when the end-country is my own)
3895> in two TOR settings to 4 or at least 3 ? (only available working "amazon"
3896> settings).
3897> I will try to run old 2 or 4 core PC, and share it as TOR 24h Poland node.
3898> (speeds IPv6 250/50Mbps be enough?) Maybe someone will help me to run this
3899> on free Linux (stable and maintenance-free working).
3900>
3901> I >Can you somehow mask the fact that you use TOR browser, substituting
3902> the name of regular firefox?
3903> >>The destination server (the website which says "don't support tor
3904> connections") probably doesn't block connections because of the browser you
3905> are using. Since every node in the tor network exposes its "tor-membership"
3906> to the network itself, it will always be possible to determine whether you
3907> are using tor or not. On this specific manner, a VPN connection may help
3908> you out, but please be aware that the provider of this VPN will then be
3909> able to log and maybe intercept your traffic.
3910>
3911> I have a static IPv6 address they TOR work only with amazon settings
3912> (250Mbps TV cable network). Optionally I can uses the “open†non protected
3913> Wi-Fi network which blocks TOR connections also “amazon†and 2 bridges!
3914> (2.4Ghz only, and very slow max 50Mbps with 300Mbps - b,g,n, cards /8192
3915> chip/, use beam aerial and 78% reach).
3916>
3917> Nice to have you explained that this is not a browser issue just a
3918> "signature" node. Is there a way to change settings in the settings so that
3919> the recipient does not see that the TOR is being used?
3920>
3921> I >There is still a question of what effect on the release of real IP,
3922> with use Kaspersky Internet Security 2017 (PC version), during because it
3923> Windows restart, injected its your packages (every couple of seconds it
3924> sends/receives packets on 443 port)
3925> >>The most internet security solutions intercept ssl traffic to scan the
3926> contents of these connections for any Trojans or viruses. If not
3927> implemented with perfect care, these solutions probably more harm you than
3928> they help securing anything. You find an example of this here:
3929> http://www.securityweek.com/google-researcher-finds-
3930> certificate-flaws-kaspersky-products
3931>
3932> Thank you, I read. Does anyone in TOR are really interested in Kaspersky
3933> LAB and whether (eg. Kaspersky Internet Security 2017 PC version) it not
3934> threatens to expose IP (un hidden) when using TOR worked at Windows
3935> 7,8,10???
3936>
3937> Assuming that I use only secure pages, is not it safe to disable
3938> protection and then shut down KIS? I give up the protection of files and
3939> additionally I lose the useful option 1) effective "firewall" blocking
3940> telemetry and other spy sites (using svchost and raw RAW to retrieve
3941> information type whois, my location, markmonitor, etc.), 2) "Surfing
3942> Incognito" , 3) "Blocking banners". The question is worth it?
3943>
3944>
3945> Once again great thanks for the help!
3946>
3947> Regards
3948>
3949> --
3950> tor-talk mailing list - tor-talk at lists.torproject.org
3951> To unsubscribe or change other settings go to
3952> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
3953>
3954
3955From nusenu-lists at riseup.net Wed Apr 26 22:03:00 2017
3956From: nusenu-lists at riseup.net (nusenu)
3957Date: Wed, 26 Apr 2017 22:03:00 +0000
3958Subject: [tor-talk] Does tor v0.3.0.6 help with #9001?
3959Message-ID: <a030f7b4-d9ee-4c04-d08b-13cc826df74f@riseup.net>
3960
3961tor 0.3.0.6 changelog [1]:
3962> We have also replaced
3963> the guard selection [...] to resist guard-
3964> capture attacks.
3965
3966
3967> o Major features (guard selection algorithm):
3968> - Tor's guard selection algorithm has been redesigned from the
3969> ground up, to better support unreliable networks and restrictive
3970> sets of entry nodes, and to better resist guard-capture attacks by
3971> hostile local networks. Implements proposal 271; closes
3972> ticket 19877.
3973
3974
3975So I guess this is unrelated to #9001? (open)
3976
3977
3978
3979https://trac.torproject.org/projects/tor/ticket/9001
3980http://www.ieee-security.org/TC/SP2013/papers/4977a080.pdf
3981
3982
3983[1] https://gitweb.torproject.org/tor.git/plain/ReleaseNotes?id=tor-0.3.0.6
3984
3985--
3986https://mastodon.social/@nusenu
3987https://twitter.com/nusenu_
3988
3989-------------- next part --------------
3990A non-text attachment was scrubbed...
3991Name: signature.asc
3992Type: application/pgp-signature
3993Size: 801 bytes
3994Desc: OpenPGP digital signature
3995URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170426/2fc6477a/attachment.sig>
3996
3997From beatthebastards at inbox.com Wed Apr 26 23:55:12 2017
3998From: beatthebastards at inbox.com (I)
3999Date: Wed, 26 Apr 2017 15:55:12 -0800
4000Subject: [tor-talk] Tor exit node operator arrested in Russia - a
4001 solidarity Tor Relay Challenge launched
4002In-Reply-To: <ebe7d814-a0ce-f8e6-5b01-6eea6d135109@torservers.net>
4003Message-ID: <CBC9FC5DE63.0000036Bbeatthebastards@inbox.com>
4004
4005
4006
4007https://freebogatov.org
4008
4009
4010
4011
4012From udovdh at xs4all.nl Thu Apr 27 11:43:37 2017
4013From: udovdh at xs4all.nl (Udo van den Heuvel)
4014Date: Thu, 27 Apr 2017 13:43:37 +0200
4015Subject: [tor-talk] 0.3.0.6 on fedora 24: systemd?
4016Message-ID: <b8884235-daae-1db4-39d2-6057fd80c65c@xs4all.nl>
4017
4018Hello,
4019
4020I noticed that 0.3.0.6 was out so I started a build.
4021I noticed this popping up:
4022
4023checking pkg-config is at least version 0.9.0... yes
4024checking for SYSTEMD... no
4025configure: Okay, checking for systemd a different way...
4026checking for SYSTEMD... no
4027
4028
4029Fedora 24 /does/ use systemd, so what is wrong?
4030
4031Kind regards,
4032Udo
4033
4034From david.m.o at telia.com Thu Apr 27 14:30:20 2017
4035From: david.m.o at telia.com (David Olofsson)
4036Date: Thu, 27 Apr 2017 16:30:20 +0200
4037Subject: [tor-talk] 0.3.0.6 on fedora 24: systemd?
4038In-Reply-To: <b8884235-daae-1db4-39d2-6057fd80c65c@xs4all.nl>
4039References: <b8884235-daae-1db4-39d2-6057fd80c65c@xs4all.nl>
4040Message-ID: <CAKKXmSM3r9wuMoBRck3XTrHSPyiU=+HfAR8snS_SmBa3ZD8=RQ@mail.gmail.com>
4041
4042My spontaneous thought is to check the configure script (I'm not really
4043into the source but I'm guessing it's a script) to see what the tests are.
4044It is not improbable that the tests assume a certain configuration and look
4045for files that aren't necessarily present when you have systemd installed.
4046
4047Hopefully someone with actual knowledge can tell you more.
4048
4049/Sidju
4050
4051On 27 Apr 2017 13:43, "Udo van den Heuvel" <udovdh at xs4all.nl> wrote:
4052
4053> Hello,
4054>
4055> I noticed that 0.3.0.6 was out so I started a build.
4056> I noticed this popping up:
4057>
4058> checking pkg-config is at least version 0.9.0... yes
4059> checking for SYSTEMD... no
4060> configure: Okay, checking for systemd a different way...
4061> checking for SYSTEMD... no
4062>
4063>
4064> Fedora 24 /does/ use systemd, so what is wrong?
4065>
4066> Kind regards,
4067> Udo
4068> --
4069> tor-talk mailing list - tor-talk at lists.torproject.org
4070> To unsubscribe or change other settings go to
4071> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
4072>
4073
4074From cbell44 at cfl.rr.com Thu Apr 27 23:33:52 2017
4075From: cbell44 at cfl.rr.com (Charles T. Bell)
4076Date: Thu, 27 Apr 2017 19:33:52 -0400
4077Subject: [tor-talk] 0.3.0.6 on fedora 24: systemd?
4078In-Reply-To: <CAKKXmSM3r9wuMoBRck3XTrHSPyiU=+HfAR8snS_SmBa3ZD8=RQ@mail.gmail.com>
4079References: <b8884235-daae-1db4-39d2-6057fd80c65c@xs4all.nl>
4080 <CAKKXmSM3r9wuMoBRck3XTrHSPyiU=+HfAR8snS_SmBa3ZD8=RQ@mail.gmail.com>
4081Message-ID: <d3796e2f-4cd8-6474-6f2b-13dd557f802d@cfl.rr.com>
4082
4083
4084
4085On 04/27/2017 10:30 AM, David Olofsson wrote:
4086> My spontaneous thought is to check the configure script (I'm not really
4087> into the source but I'm guessing it's a script) to see what the tests are.
4088> It is not improbable that the tests assume a certain configuration and look
4089> for files that aren't necessarily present when you have systemd installed.
4090>
4091> Hopefully someone with actual knowledge can tell you more.
4092>
4093> /Sidju
4094>
4095I asked the question online and got this suggestion:
4096At the commandline type:
4097command -v systemctl
4098echo $?
4099
4100If the response to "echo" is 0 then you have systemd working.
4101If the response is 1 then you don't have systemd working.
4102Then you can check the script and see what you need to change to
4103have the script show systemd working.
4104Good luck!
4105
4106Tom Bell
4107> On 27 Apr 2017 13:43, "Udo van den Heuvel" <udovdh at xs4all.nl> wrote:
4108>
4109>> Hello,
4110>>
4111>> I noticed that 0.3.0.6 was out so I started a build.
4112>> I noticed this popping up:
4113>>
4114>> checking pkg-config is at least version 0.9.0... yes
4115>> checking for SYSTEMD... no
4116>> configure: Okay, checking for systemd a different way...
4117>> checking for SYSTEMD... no
4118>>
4119>>
4120>> Fedora 24 /does/ use systemd, so what is wrong?
4121>>
4122>> Kind regards,
4123>> Udo
4124>> --
4125>> tor-talk mailing list - tor-talk at lists.torproject.org
4126>> To unsubscribe or change other settings go to
4127>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
4128>>
4129
4130--
4131The thing about quotes on the internet is you
4132cannot confirm their validity. ~Abraham Lincoln
4133
4134From ilv at riseup.net Fri Apr 28 02:24:40 2017
4135From: ilv at riseup.net (ilv)
4136Date: Thu, 27 Apr 2017 23:24:40 -0300
4137Subject: [tor-talk] Tor meetup in Sao Paulo, Brazil (Cryptorave)
4138Message-ID: <20170428022438.le655qirusyhdihd@riseup.net>
4139
4140
4141
4142Abrazos.
4143--ilv
4144-------------- next part --------------
4145A non-text attachment was scrubbed...
4146Name: signature.asc
4147Type: application/pgp-signature
4148Size: 833 bytes
4149Desc: not available
4150URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170427/d77708dd/attachment.sig>
4151
4152From tim.smy at gmx.net Sun Apr 30 18:58:27 2017
4153From: tim.smy at gmx.net (tim smy)
4154Date: Sun, 30 Apr 2017 20:58:27 +0200
4155Subject: [tor-talk] everytime startup tor same log same obtfs4- why?
4156Message-ID: <trinity-73cb6203-9df5-454a-a724-b618b05a939e-1493578706808@3capp-gmx-bs29>
4157
41580/04/17 18:37:07.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.
415930/04/17 18:37:07.000 [NOTICE] Opening Socks listener on 127.0.0.1:9150
416030/04/17 18:37:09.700 [NOTICE] Bootstrapped 5%: Connecting to directory server
416130/04/17 18:37:09.700 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server
416230/04/17 18:37:10.200 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection
416330/04/17 18:37:10.200 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus
416430/04/17 18:37:10.300 [NOTICE] new bridge descriptor 'ndnop5' (fresh): $BBB28DF0F201E706BE564EFE690FE9577DD8386D~ndnop5 at 109.105.109.147
416530/04/17 18:37:10.300 [NOTICE] Bootstrapped 80%: Connecting to the Tor network
416630/04/17 18:37:10.400 [NOTICE] Bridge 'NX01' has both an IPv4 and an IPv6 address. Will prefer using its IPv4 address (85.17.30.79:443) based on the configured Bridge address.
416730/04/17 18:37:10.400 [NOTICE] new bridge descriptor 'NX01' (fresh): $FC259A04A328A07FED1413E9FC6526530D9FD87A~NX01 at 85.17.30.79
416830/04/17 18:37:10.600 [NOTICE] new bridge descriptor 'ndnop3' (fresh): $8DFCD8FB3285E855F5A55EDDA35696C743ABFC4E~ndnop3 at 109.105.109.165
416930/04/17 18:37:10.700 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit
417030/04/17 18:37:10.700 [NOTICE] Bridge 'Lisbeth' has both an IPv4 and an IPv6 address. Will prefer using its IPv4 address (192.95.36.142:443) based on the configured Bridge address.
417130/04/17 18:37:10.700 [NOTICE] new bridge descriptor 'Lisbeth' (fresh): $CDF2E852BF539B82BD10E27E9115A31734E378C2~Lisbeth at 192.95.36.142
417230/04/17 18:37:10.700 [NOTICE] new bridge descriptor 'noether' (fresh): $7B126FAB960E5AC6A629C729434FF84FB5074EC2~noether at 192.99.11.54
417330/04/17 18:37:10.800 [NOTICE] new bridge descriptor 'cymrubridge31' (fresh): $C8CBDB2464FC9804A69531437BCF2BE31FDD2EE4~cymrubridge31 at 38.229.1.78
417430/04/17 18:37:10.800 [NOTICE] new bridge descriptor 'riemann' (fresh): $752CF7825B3B9EA6A98C83AC41F7099D67007EA5~riemann at 198.245.60.50
417530/04/17 18:37:11.200 [NOTICE] new bridge descriptor 'Azadi' (fresh): $FE7840FE1E21FE0A0639ED176EDA00A3ECA1E34D~Azadi at 154.35.22.13
417630/04/17 18:37:12.900 [NOTICE] Tor has successfully opened a circuit. Looks like client functionality is working.
417730/04/17 18:37:12.900 [NOTICE] Bootstrapped 100%: Done
417830/04/17 18:37:13.600 [NOTICE] new bridge descriptor 'cymrubridge33' (fresh): $0BAC39417268B96B9F514E7F63FA6FBA1A788955~cymrubridge33 at 38.229.33.83
417930/04/17 18:37:14.500 [NOTICE] New control connection opened from 127.0.0.1.
418030/04/17 18:37:14.500 [NOTICE] New control connection opened from 127.0.0.1.
418130/04/17 18:37:15.700 [NOTICE] new bridge descriptor 'LeifEricson' (fresh): $A09D536DD1752D542E1FBB3C9CE4449D51298239~LeifEricson at 83.212.101.3
418230/04/17 18:37:19.000 [WARN] Proxy Client: unable to connect to 154.35.22.9:80 ("general SOCKS server failure")
418330/04/17 18:37:19.000 [WARN] Proxy Client: unable to connect to 154.35.22.11:443 ("general SOCKS server failure")
418430/04/17 18:37:19.000 [WARN] Proxy Client: unable to connect to 154.35.22.10:80 ("general SOCKS server failure")
418530/04/17 18:37:29.300 [WARN] Proxy Client: unable to connect to 154.35.22.9:80 ("general SOCKS server failure")
418630/04/17 18:37:29.300 [WARN] Proxy Client: unable to connect to 154.35.22.10:80 ("general SOCKS server failure")
418730/04/17 18:37:29.300 [WARN] Proxy Client: unable to connect to 154.35.22.11:443 ("general SOCKS server failure")
4188
4189
4190now connected as follows
4191obfs4 (unuted states
4192France 89.3.97.118
4193France 178.32.181.96
4194on the tor browser check it says your ip apprears to be 37.187.129.166
4195
4196From lolint at protonmail.com Sun Apr 30 21:20:20 2017
4197From: lolint at protonmail.com (Lolint)
4198Date: Sun, 30 Apr 2017 17:20:20 -0400
4199Subject: [tor-talk] everytime startup tor same log same obtfs4- why?
4200In-Reply-To: <trinity-73cb6203-9df5-454a-a724-b618b05a939e-1493578706808@3capp-gmx-bs29>
4201References: <trinity-73cb6203-9df5-454a-a724-b618b05a939e-1493578706808@3capp-gmx-bs29>
4202Message-ID: <Un6XlOsjD6JlBxAjyZjVa7qSfXd4k6T5aJQIwvSANo648dG7EEc87Pbf99VoZJKutHSDgJefNfBEk2i66rWd1nHKZKBmCX4942VGG4OPzwQ=@protonmail.com>
4203
4204> everytime startup tor same log same obtfs4- why?
4205
4206Yes, that's perfectly normal, read this great blog post:
4207
4208https://blog.torproject.org/blog/improving-tors-anonymity-changing-guard-parameters
4209
4210And the FAQ entry:
4211
4212https://www.torproject.org/docs/faq.html.en#EntryGuards
4213
4214(Hope I didn't misunderstand your question.)
4215
4216Also please never publish bridges IPs in a public place, you may be rendering them useless.