· 8 years ago · Aug 20, 2017, 02:46 AM
1NO SYSSTEM IS SAFE
2WE HAVKED TOR DATABASE AND GOT MILLIONS OF TOR EMAIL CONVERSATIONS FROM TORPROJECT.ORG
3IT'S JUST A WARNING
4DON'T BELIEVE ANYTHING
5YOU ARE NOT SURFING ANONYMOUSLY
6MAKE YOUR SYSTEM SAFE
7LEAKED BY ANONYMOUS GHOST & MINION GHOST
8FB.COM/ANONYMOUSGHOST7 T/@AnonGhost07
9FB/MINIONGHOST1 THE/Scode404
10(SHARING FEW EMAIL FROM THE APRIL)
11CONTACT US TO GET THEIR EMAIL FILTER BY TIME
12WE WILL LEAKE TOR EMAIL CONVERSATIONS IF YOU WAND ;-)
13JUST MESSAHE US
14
15
16From john.pinkman at yandex.com Sat Apr 1 21:32:48 2017
17From: john.pinkman at yandex.com (John Pinkman)
18Date: Sat, 01 Apr 2017 23:32:48 +0200
19Subject: [tor-talk] This video has been censored by YouTube many times
20Message-ID: <8239771491082368@web28o.yandex.ru>
21
22it explains problems that the world faces today
23https://w1r3.net/yBQEEe.webm
24
25From kevinsisco61784 at gmail.com Sun Apr 2 00:17:01 2017
26From: kevinsisco61784 at gmail.com (Kevin)
27Date: Sat, 1 Apr 2017 20:17:01 -0400
28Subject: [tor-talk] This video has been censored by YouTube many times
29In-Reply-To: <8239771491082368@web28o.yandex.ru>
30References: <8239771491082368@web28o.yandex.ru>
31Message-ID: <61c15c3f-7520-763c-44b3-8b8f43f090fe@gmail.com>
32
33Maybe youtube doesn't know about this vid yet. By the way that
34was...interesting.
35
36
37
38On 4/1/2017 5:32 PM, John Pinkman wrote:
39> it explains problems that the world faces today
40> https://w1r3.net/yBQEEe.webm
41
42
43---
44This email has been checked for viruses by Avast antivirus software.
45https://www.avast.com/antivirus
46
47
48From mirimir at riseup.net Sun Apr 2 00:58:48 2017
49From: mirimir at riseup.net (Mirimir)
50Date: Sat, 1 Apr 2017 18:58:48 -0600
51Subject: [tor-talk] This video has been censored by YouTube many times
52In-Reply-To: <61c15c3f-7520-763c-44b3-8b8f43f090fe@gmail.com>
53References: <8239771491082368@web28o.yandex.ru>
54 <61c15c3f-7520-763c-44b3-8b8f43f090fe@gmail.com>
55Message-ID: <2da4a683-c06c-39a6-e124-7b550c02619f@riseup.net>
56
57On 04/01/2017 06:17 PM, Kevin wrote:
58> Maybe youtube doesn't know about this vid yet. By the way that
59> was...interesting.
60
61That was fucking evil. And totally off-topic. Just sayin'.
62
63> On 4/1/2017 5:32 PM, John Pinkman wrote:
64>> it explains problems that the world faces today
65>> https://w1r3.net/yBQEEe.webm
66>
67>
68> ---
69> This email has been checked for viruses by Avast antivirus software.
70> https://www.avast.com/antivirus
71>
72
73From john.pinkman at yandex.com Sun Apr 2 01:14:50 2017
74From: john.pinkman at yandex.com (John Pinkman)
75Date: Sun, 02 Apr 2017 03:14:50 +0200
76Subject: [tor-talk] This video has been censored by YouTube many times
77In-Reply-To: <2da4a683-c06c-39a6-e124-7b550c02619f@riseup.net>
78References: <8239771491082368@web28o.yandex.ru>
79 <61c15c3f-7520-763c-44b3-8b8f43f090fe@gmail.com>
80 <2da4a683-c06c-39a6-e124-7b550c02619f@riseup.net>
81Message-ID: <8549781491095690@web16o.yandex.ru>
82
83
84
8502.04.2017, 02:59, "Mirimir" <mirimir at riseup.net>:
86> On 04/01/2017 06:17 PM, Kevin wrote:
87>> Â Maybe youtube doesn't know about this vid yet. By the way that
88>> Â was...interesting.
89>
90> That was fucking evil. And totally off-topic. Just sayin'.
91
92You are right, it is about pure evil.
93
94>
95>> Â On 4/1/2017 5:32 PM, John Pinkman wrote:
96>>> Â it explains problems that the world faces today
97>>> Â https://w1r3.net/yBQEEe.webm
98
99From neokulak at runbox.com Sun Apr 2 02:12:26 2017
100From: neokulak at runbox.com (neokulak)
101Date: Sat, 01 Apr 2017 22:12:26 -0400
102Subject: [tor-talk] This video has been censored by YouTube many times
103In-Reply-To: <8549781491095690@web16o.yandex.ru>
104References: <8239771491082368@web28o.yandex.ru>
105 <61c15c3f-7520-763c-44b3-8b8f43f090fe@gmail.com>
106 <2da4a683-c06c-39a6-e124-7b550c02619f@riseup.net>
107 <8549781491095690@web16o.yandex.ru>
108Message-ID: <op.yx1pq0a1dcj3k7@colossus-9.local>
109
110So the Tor mailing list is now being used to promote anti-Semitic spam?
111How lovely.
112
113On Sat, 01 Apr 2017 21:14:50 -0400, John Pinkman <john.pinkman at yandex.com>
114wrote:
115
116>
117>
118> 02.04.2017, 02:59, "Mirimir" <mirimir at riseup.net>:
119>> On 04/01/2017 06:17 PM, Kevin wrote:
120>>> Maybe youtube doesn't know about this vid yet. By the way that
121>>> was...interesting.
122>>
123>> That was fucking evil. And totally off-topic. Just sayin'.
124>
125> You are right, it is about pure evil.
126>
127>>
128>>> On 4/1/2017 5:32 PM, John Pinkman wrote:
129>>>> it explains problems that the world faces today
130>>>> https://w1r3.net/yBQEEe.webm
131
132From kevinsisco61784 at gmail.com Sun Apr 2 15:01:08 2017
133From: kevinsisco61784 at gmail.com (Kevin)
134Date: Sun, 2 Apr 2017 11:01:08 -0400
135Subject: [tor-talk] This video has been censored by YouTube many times
136In-Reply-To: <op.yx1pq0a1dcj3k7@colossus-9.local>
137References: <8239771491082368@web28o.yandex.ru>
138 <61c15c3f-7520-763c-44b3-8b8f43f090fe@gmail.com>
139 <2da4a683-c06c-39a6-e124-7b550c02619f@riseup.net>
140 <8549781491095690@web16o.yandex.ru> <op.yx1pq0a1dcj3k7@colossus-9.local>
141Message-ID: <0d9194fd-33d0-1308-682e-8400078d4b6f@gmail.com>
142
143This is I think more about clearnet censorship than the evil little movie.
144
145
146
147On 4/1/2017 10:12 PM, neokulak wrote:
148> So the Tor mailing list is now being used to promote anti-Semitic
149> spam? How lovely.
150>
151> On Sat, 01 Apr 2017 21:14:50 -0400, John Pinkman
152> <john.pinkman at yandex.com> wrote:
153>
154>>
155>>
156>> 02.04.2017, 02:59, "Mirimir" <mirimir at riseup.net>:
157>>> On 04/01/2017 06:17 PM, Kevin wrote:
158>>>> Maybe youtube doesn't know about this vid yet. By the way that
159>>>> was...interesting.
160>>>
161>>> That was fucking evil. And totally off-topic. Just sayin'.
162>>
163>> You are right, it is about pure evil.
164>>
165>>>
166>>>> On 4/1/2017 5:32 PM, John Pinkman wrote:
167>>>>> it explains problems that the world faces today
168>>>>> https://w1r3.net/yBQEEe.webm
169
170
171---
172This email has been checked for viruses by Avast antivirus software.
173https://www.avast.com/antivirus
174
175
176From keb at cyblings.on.ca Sun Apr 2 15:04:27 2017
177From: keb at cyblings.on.ca (krishna e bera)
178Date: Sun, 2 Apr 2017 11:04:27 -0400
179Subject: [tor-talk] This video has been censored by YouTube many times
180In-Reply-To: <op.yx1pq0a1dcj3k7@colossus-9.local>
181References: <8239771491082368@web28o.yandex.ru>
182 <61c15c3f-7520-763c-44b3-8b8f43f090fe@gmail.com>
183 <2da4a683-c06c-39a6-e124-7b550c02619f@riseup.net>
184 <8549781491095690@web16o.yandex.ru> <op.yx1pq0a1dcj3k7@colossus-9.local>
185Message-ID: <9dac9720-ef7e-0e7c-f6ec-891000fdb865@cyblings.on.ca>
186
187On 01/04/17 10:12 PM, neokulak wrote:
188> So the Tor mailing list is now being used to promote anti-Semitic spam?
189> How lovely.
190
191This mailing list is not filtered through a moderator, which means stuff
192gets through and abusers of the list get removed after the fact.
193
194Some hate propaganda like that video is so cringeworthy as to make a
195laughing stock of its creators. If they want to remain anonymous and
196prevent it from being censored, they can set up a hidden service (aka
197.onion site) to host it. Instructions are on the torproject.org site:
198https://www.torproject.org/docs/tor-hidden-service.html.en
199
200
201From m.ajiao at tuta.io Mon Apr 3 05:31:51 2017
202From: m.ajiao at tuta.io (m.ajiao at tuta.io)
203Date: Mon, 3 Apr 2017 07:31:51 +0200 (CEST)
204Subject: [tor-talk] **SPAM** This video has been censored by YouTube
205 many times
206In-Reply-To: <9dac9720-ef7e-0e7c-f6ec-891000fdb865@cyblings.on.ca>
207References: <8239771491082368@web28o.yandex.ru>
208 <<8239771491082368@web28o.yandex.ru>>
209 <61c15c3f-7520-763c-44b3-8b8f43f090fe@gmail.com>
210 <<61c15c3f-7520-763c-44b3-8b8f43f090fe@gmail.com>>
211 <2da4a683-c06c-39a6-e124-7b550c02619f@riseup.net>
212 <<2da4a683-c06c-39a6-e124-7b550c02619f@riseup.net>>
213 <8549781491095690@web16o.yandex.ru> <<8549781491095690@web16o.yandex.ru>>
214 <op.yx1pq0a1dcj3k7@colossus-9.local> <<op.yx1pq0a1dcj3k7@colossus-9.local>>
215 <9dac9720-ef7e-0e7c-f6ec-891000fdb865@cyblings.on.ca>
216Message-ID: <KgmI3J2--3-0@tuta.io>
217
218> it explains problems that the world faces today
219
220Welcome to Tor Talk! This is a place where ordinary people can talk about Tor usability and security problems. Since this is a technical mailing list, I strong suggest:
221
222If you don't want your video to be censored, consider setting up a Tor hidden service, an I2P hidden service, a Freenet site or an IPFS upload.
223
224YouTube's censorship of a video appears to be really trivial with the presence anonymity tools. Now let's come back, calm down and start to talk about the really serious things.
225
226
227From m.ajiao at tuta.io Mon Apr 3 05:38:48 2017
228From: m.ajiao at tuta.io (m.ajiao at tuta.io)
229Date: Mon, 3 Apr 2017 07:38:48 +0200 (CEST)
230Subject: [tor-talk] Tor Browser crash
231Message-ID: <KgmJdxS--3-0@tuta.io>
232
233Hello, Tor Talk!
234
235Tor Browser crashes very predictably when I click some menu items of the NoScript plugin.
236
237Tor Browser 6.5.1 on Ubuntu
238
239Steps to reproduce:
2401. Security slider: High
2412. Go to this Medium article https://decentralize.today/decentralized-p2p-chat-in-100-lines-of-code-d6e496034cd4
2423. When the page is still loading, open the NoScript toolbar menu, and CLICK on "Blocked Objects"
2434. Tor browser exits.
244
245
246From 0xdogdev at gmail.com Mon Apr 3 15:13:33 2017
247From: 0xdogdev at gmail.com (0xdog)
248Date: Mon, 3 Apr 2017 11:13:33 -0400
249Subject: [tor-talk] tbb (disable network is set)
250Message-ID: <CAKNyJHtuSbxEk3SnekWOC4+b-+bxLie0q42=vX=HS0Wgk9kyjw@mail.gmail.com>
251
252Hello.
253I don't know if this is the correct mailing list to post this
254question, so in that case my apologies in advance.
255
256Last year I was using TBB (on windows server 2003 32bits PC) for a
257while and it was working perfect, suddenly it stopped working and the
258logs said "DisableNetwork is set. Tor will not make or accept
259non-control network connections. Shutting down all existing
260connections...". At that time I just stopped using TBB and I checked
261TBB frequently, one day, suddenly again, apparently with no change on
262my computer or my network it started working again for a while but
263right now I have the same problem as before, it stopped working again
264and the logs said "DisableNetwork is set. Tor will not make or
265accept...".
266
267Now I have a strong decision to find where is the problem:
268
2691. I have spent a lot of hours surfing the web looking for a solution.
270Many many people has the same problem, but only a few have found a
271solution.
272
2732. The rules and firewall of my antivirus are fine, even with the
274antivirus totally deactivated it does not work.
275
2763. I have normal access to torproject.org throught firefox browser so
277I don´t think my ISP is blocking the tor network or doing DPI.
278
2794. I have checked my timezone against an internet service and the time
280of my system seems to be incorrect but since I am behind a proxy
281server that is far from my hands my timezone is that of the proxy
282server and I can not fix it. Do you think this is the cause of the
283problem? In this case is there a workarround for this?
284
2855. I have been viewing the tor source code trying to figure out under
286which conditions the DisableNetwork flag is set to 1, no much advance.
287Can someone point out which source file is the one I´m looking for?
288
289I can post the whole logs if someone is interested.
290
291Thanks. Best regards.
292
293From yuri at rawbw.com Mon Apr 3 15:27:39 2017
294From: yuri at rawbw.com (Yuri)
295Date: Mon, 3 Apr 2017 08:27:39 -0700
296Subject: [tor-talk] tbb (disable network is set)
297In-Reply-To: <CAKNyJHtuSbxEk3SnekWOC4+b-+bxLie0q42=vX=HS0Wgk9kyjw@mail.gmail.com>
298References: <CAKNyJHtuSbxEk3SnekWOC4+b-+bxLie0q42=vX=HS0Wgk9kyjw@mail.gmail.com>
299Message-ID: <be15b7a4-2a37-06ec-8f91-ef095fba6add@rawbw.com>
300
301On 04/03/2017 08:13, 0xdog wrote:
302> I don't know if this is the correct mailing list to post this
303> question, so in that case my apologies in advance.
304>
305> Last year I was using TBB (on windows server 2003 32bits PC) for a
306> while and it was working perfect, suddenly it stopped working and the
307> logs said "DisableNetwork is set. Tor will not make or accept
308> non-control network connections. Shutting down all existing
309> connections...". At that time I just stopped using TBB and I checked
310> TBB frequently, one day, suddenly again, apparently with no change on
311> my computer or my network it started working again for a while but
312> right now I have the same problem as before, it stopped working again
313> and the logs said "DisableNetwork is set. Tor will not make or
314> accept...".
315
316
317Please consider using Whonix https://www.whonix.org/ instead of TBB.
318
319It runs tor in one virtual machine, and your browser in another virtual
320machine.
321
322Whonix is a much safer way to use Tor, since it isolates your OS from
323the clearnet better. It cleanly redirects all internet requests to Tor
324at one single point. TBB just can't do it quite the same way, and is
325more likely to leak requests into the clearnet.
326
327All you need to do is to install and start VirtualBox, and add 2 Whonix
328virtual machines into it.
329
330
331Yuri
332
333
334From 0xdogdev at gmail.com Mon Apr 3 15:38:00 2017
335From: 0xdogdev at gmail.com (0xdog)
336Date: Mon, 3 Apr 2017 11:38:00 -0400
337Subject: [tor-talk] tbb (disable network is set)
338In-Reply-To: <be15b7a4-2a37-06ec-8f91-ef095fba6add@rawbw.com>
339References: <CAKNyJHtuSbxEk3SnekWOC4+b-+bxLie0q42=vX=HS0Wgk9kyjw@mail.gmail.com>
340 <be15b7a4-2a37-06ec-8f91-ef095fba6add@rawbw.com>
341Message-ID: <CAKNyJHtG8hDsAkGfOUBN71VAgfM1mKhMk4sv6AVfPmYQuC8BfQ@mail.gmail.com>
342
3432017-04-03 11:27 GMT-04:00, Yuri <yuri at rawbw.com>:
344> Please consider using Whonix https://www.whonix.org/ instead of TBB.
345>
346
347Ok, I will try whonix. Thank for your answer.
348Anyway I would like to know exactly where is my problem.
349Regards.
350
351From goody2shoes at resist.ca Mon Apr 3 16:03:54 2017
352From: goody2shoes at resist.ca (goody2shoes)
353Date: Mon, 3 Apr 2017 09:03:54 -0700
354Subject: [tor-talk] Tor Browser crash
355In-Reply-To: <KgmJdxS--3-0@tuta.io>
356References: <KgmJdxS--3-0@tuta.io>
357Message-ID: <01fb1539-290f-063f-a107-b705fdb8c945@resist.ca>
358
359
360
361On 04/02/2017 10:38 PM, m.ajiao at tuta.io wrote:
362> Hello, Tor Talk!
363>
364> Tor Browser crashes very predictably when I click some menu items of the NoScript plugin.
365>
366> Tor Browser 6.5.1 on Ubuntu
367>
368> Steps to reproduce:
369> 1. Security slider: High
370> 2. Go to this Medium article https://decentralize.today/decentralized-p2p-chat-in-100-lines-of-code-d6e496034cd4
371> 3. When the page is still loading, open the NoScript toolbar menu, and CLICK on "Blocked Objects"
372> 4. Tor browser exits.
373>
374
375Current Debian Jessie (32bit). Couldn't duplicate this bug. Further, the
376'blocked object' menu within NoScript didn't appear until the page fully
377loaded and clicking the menu items in it did not crash the browser.
378
379G2s
380
381From george at queair.net Mon Apr 3 19:26:00 2017
382From: george at queair.net (George)
383Date: Mon, 03 Apr 2017 19:26:00 +0000
384Subject: [tor-talk] BeagleBone Relay on OpenBSD -current
385Message-ID: <38180b36-ba46-1d3c-937b-e92b7314c9ea@queair.net>
386
387Greetings.
388
389The Tor BSD Diversity Project continues its low-intensity war to inject
390more *BSD into the Tor ecosystem.
391
392Our TB for OpenBSD hit the -current ports in November, and 6.5 should in
393the -stable ports and packages with the release of 6.1 in the next month
394or so. The ports tree closed for 6.1 just after we submitted 6.5.1, but
395it looks like it won't make it in unfortunately.
396
397A notable recent happening is getting a -current BeagleBone Black Tor
398relay up and running.
399
400https://atlas.torproject.org/#details/577B81CD1FCE5B3E7C1BD286774758608E50AEEB
401
402It's managed to quickly hit 1.39MB/s traffic at the most recent check.
403
404We have some recent blog post about it which addresses a number of
405questions including running OpenBSD -current versus -stable for relays,
406basic OpenBSD tweaking for a relay, etc.
407
408https://torbsd.github.io/blog.html
409
410Thanks.
411
412George
413--
414
415
416
4175F77 765E 40D6 5340 A0F5 3401 4997 FF11 A86F 44E2
418
419-------------- next part --------------
420A non-text attachment was scrubbed...
421Name: signature.asc
422Type: application/pgp-signature
423Size: 833 bytes
424Desc: OpenPGP digital signature
425URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170403/9a75698d/attachment.sig>
426
427From flipchan at riseup.net Mon Apr 3 20:40:25 2017
428From: flipchan at riseup.net (Flipchan)
429Date: Mon, 03 Apr 2017 22:40:25 +0200
430Subject: [tor-talk] BeagleBone Relay on OpenBSD -current
431In-Reply-To: <38180b36-ba46-1d3c-937b-e92b7314c9ea@queair.net>
432References: <38180b36-ba46-1d3c-937b-e92b7314c9ea@queair.net>
433Message-ID: <65AA4D8A-ECD4-48D0-9A5A-394AC9EDC062@riseup.net>
434
435Nice we need More OpenBSD in Tor :)
436
437George <george at queair.net> skrev: (3 april 2017 21:26:00 CEST)
438>Greetings.
439>
440>The Tor BSD Diversity Project continues its low-intensity war to inject
441>more *BSD into the Tor ecosystem.
442>
443>Our TB for OpenBSD hit the -current ports in November, and 6.5 should
444>in
445>the -stable ports and packages with the release of 6.1 in the next
446>month
447>or so. The ports tree closed for 6.1 just after we submitted 6.5.1, but
448>it looks like it won't make it in unfortunately.
449>
450>A notable recent happening is getting a -current BeagleBone Black Tor
451>relay up and running.
452>
453>https://atlas.torproject.org/#details/577B81CD1FCE5B3E7C1BD286774758608E50AEEB
454>
455>It's managed to quickly hit 1.39MB/s traffic at the most recent check.
456>
457>We have some recent blog post about it which addresses a number of
458>questions including running OpenBSD -current versus -stable for relays,
459>basic OpenBSD tweaking for a relay, etc.
460>
461>https://torbsd.github.io/blog.html
462>
463>Thanks.
464>
465>George
466>--
467>
468>
469>
470>5F77 765E 40D6 5340 A0F5 3401 4997 FF11 A86F 44E2
471
472--
473Sincerly flipchan - LayerProx dev
474
475From mirimir at riseup.net Tue Apr 4 01:46:23 2017
476From: mirimir at riseup.net (Mirimir)
477Date: Mon, 3 Apr 2017 19:46:23 -0600
478Subject: [tor-talk] tbb (disable network is set)
479In-Reply-To: <CAKNyJHtuSbxEk3SnekWOC4+b-+bxLie0q42=vX=HS0Wgk9kyjw@mail.gmail.com>
480References: <CAKNyJHtuSbxEk3SnekWOC4+b-+bxLie0q42=vX=HS0Wgk9kyjw@mail.gmail.com>
481Message-ID: <80123bd0-0e4e-bf07-c1a6-b7bed95d9b00@riseup.net>
482
483On 04/03/2017 09:13 AM, 0xdog wrote:
484> Hello.
485> I don't know if this is the correct mailing list to post this
486> question, so in that case my apologies in advance.
487>
488> Last year I was using TBB (on windows server 2003 32bits PC) for a
489> while and it was working perfect, suddenly it stopped working and the
490> logs said "DisableNetwork is set. Tor will not make or accept
491> non-control network connections. Shutting down all existing
492> connections...". At that time I just stopped using TBB and I checked
493> TBB frequently, one day, suddenly again, apparently with no change on
494> my computer or my network it started working again for a while but
495> right now I have the same problem as before, it stopped working again
496> and the logs said "DisableNetwork is set. Tor will not make or
497> accept...".
498>
499> Now I have a strong decision to find where is the problem:
500
501Tor browser may do this if your uplink gets interrupted at a particular
502stage in getting the network consensus. I believe that it's a defense
503against attempts to force use of malicious relays. The simplest fix is
504to delete and reinstall Tor browser, after saving bookmarks if desired.
505Or you could manually reset the flag.
506
507> 1. I have spent a lot of hours surfing the web looking for a solution.
508> Many many people has the same problem, but only a few have found a
509> solution.
510>
511> 2. The rules and firewall of my antivirus are fine, even with the
512> antivirus totally deactivated it does not work.
513>
514> 3. I have normal access to torproject.org throught firefox browser so
515> I don´t think my ISP is blocking the tor network or doing DPI.
516>
517> 4. I have checked my timezone against an internet service and the time
518> of my system seems to be incorrect but since I am behind a proxy
519> server that is far from my hands my timezone is that of the proxy
520> server and I can not fix it. Do you think this is the cause of the
521> problem? In this case is there a workarround for this?
522>
523> 5. I have been viewing the tor source code trying to figure out under
524> which conditions the DisableNetwork flag is set to 1, no much advance.
525> Can someone point out which source file is the one I´m looking for?
526>
527> I can post the whole logs if someone is interested.
528>
529> Thanks. Best regards.
530>
531
532From vigdis+tor at chown.me Tue Apr 4 02:53:58 2017
533From: vigdis+tor at chown.me (Daniel Jakots)
534Date: Mon, 3 Apr 2017 22:53:58 -0400
535Subject: [tor-talk] BeagleBone Relay on OpenBSD -current
536In-Reply-To: <38180b36-ba46-1d3c-937b-e92b7314c9ea@queair.net>
537References: <38180b36-ba46-1d3c-937b-e92b7314c9ea@queair.net>
538Message-ID: <20170403225358.74d68a13@odessa.chown.me>
539
540On Mon, 03 Apr 2017 19:26:00 +0000, George <george at queair.net> wrote:
541
542> Greetings.
543>
544> The Tor BSD Diversity Project continues its low-intensity war to
545> inject more *BSD into the Tor ecosystem.
546
547\o/
548
549> Our TB for OpenBSD hit the -current ports in November, and 6.5 should
550> in the -stable ports and packages with the release of 6.1 in the next
551> month or so. The ports tree closed for 6.1 just after we submitted
552> 6.5.1, but it looks like it won't make it in unfortunately.
553
554I hope 6.5.1 will make it to -stable. Hopefully next updates will be
555backported as well.
556
557> A notable recent happening is getting a -current BeagleBone Black Tor
558> relay up and running.
559>
560> https://atlas.torproject.org/#details/577B81CD1FCE5B3E7C1BD286774758608E50AEEB
561>
562> It's managed to quickly hit 1.39MB/s traffic at the most recent check.
563>
564> We have some recent blog post about it which addresses a number of
565> questions including running OpenBSD -current versus -stable for
566> relays, basic OpenBSD tweaking for a relay, etc.
567>
568> https://torbsd.github.io/blog.html
569
570Yay
571
572From toccare1 at hotmail.com Tue Apr 4 13:52:07 2017
573From: toccare1 at hotmail.com (Beach and Yoga Lover)
574Date: Tue, 4 Apr 2017 13:52:07 +0000
575Subject: [tor-talk] Problem with TOR-browser on iMac
576Message-ID: <AM4PR02MB1700E42B4C82CEDBCE2CE82B930B0@AM4PR02MB1700.eurprd02.prod.outlook.com>
577
578Hi,
579
580
581I have a new iMac and downloaded the TOR-browser without problems.
582
583But when I try to establish a connection with the Web I get the following message:
584
585
586CANNOT FIND THE PROXYSERVER
587
588
589FIREFOX HAS BEEN CONFIGURED FOR USING A PROXYSERVER WHICH CAN NOT BEEN FOUND
590
591CHECK YOUR PROXY CONFIGURATION
592
593CHECK YOUR NETWORK = IS OK!
594
595IF YOUR COMPUTER OR NETWORK IS BEING PROTECTED BY A FIREWALL OR PROXY, BE SURE TO ALLOW THE TOR BROWSER ADMITTANCE TO THE WEB
596
597
598I ALLOWED the FIREWALL for incoming communication with TOR browser.
599
600
601Note: when I switch off the firewall, what is stupid ofcourse, I still can't establish connection with the Web.
602
603
604
605Can anyone help me pse with this problem?
606
607
608
609Many thanks in advance and my eternal gratitude!
610
611
612
613Jan
614
615From 0xdogdev at gmail.com Tue Apr 4 16:01:07 2017
616From: 0xdogdev at gmail.com (0xdog)
617Date: Tue, 4 Apr 2017 12:01:07 -0400
618Subject: [tor-talk] tbb (disable network is set)
619In-Reply-To: <80123bd0-0e4e-bf07-c1a6-b7bed95d9b00@riseup.net>
620References: <CAKNyJHtuSbxEk3SnekWOC4+b-+bxLie0q42=vX=HS0Wgk9kyjw@mail.gmail.com>
621 <80123bd0-0e4e-bf07-c1a6-b7bed95d9b00@riseup.net>
622Message-ID: <CAKNyJHseKvT4SwF5_x-w-KV3Z8V0=BcZJqM4x91oReyvv07B4Q@mail.gmail.com>
623
6242017-04-03 21:46 GMT-04:00, Mirimir <mirimir at riseup.net>:
625> Tor browser may do this if your uplink gets interrupted at a particular
626> stage in getting the network consensus. I believe that it's a defense
627> against attempts to force use of malicious relays. The simplest fix is
628> to delete and reinstall Tor browser, after saving bookmarks if desired.
629> Or you could manually reset the flag.
630
631I have deleted/reinstalled TBB many times and even updated TBB version
632any time there is a new one. I have edited torrc file but when I
633start TBB again the DisableNetwork 0 line is deleted. Could you please
634explain me the correct way to do this? I have the same results using
635Custom Bridges for obfs4. Here are the whole logs:
636
63704/04/2017 11:53:44.300 [NOTICE] DisableNetwork is set. Tor will not
638make or accept non-control network connections. Shutting down all
639existing connections.
64004/04/2017 11:53:44.300 [NOTICE] DisableNetwork is set. Tor will not
641make or accept non-control network connections. Shutting down all
642existing connections.
64304/04/2017 11:53:44.300 [NOTICE] DisableNetwork is set. Tor will not
644make or accept non-control network connections. Shutting down all
645existing connections.
64604/04/2017 11:53:44.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150
64704/04/2017 11:53:54.200 [NOTICE] Bootstrapped 5%: Connecting to
648directory server
64904/04/2017 11:53:54.300 [NOTICE] Bootstrapped 10%: Finishing handshake
650with directory server
65104/04/2017 11:53:56.500 [WARN] Proxy Client: unable to connect to
652109.74.198.252:37771 ("general SOCKS server failure")
65304/04/2017 11:53:56.700 [WARN] Proxy Client: unable to connect to
654139.162.181.34:9443 ("general SOCKS server failure")
65504/04/2017 11:53:56.700 [WARN] Proxy Client: unable to connect to
656107.170.197.223:9443 ("general SOCKS server failure")
65704/04/2017 11:58:08.700 [NOTICE] Closing no-longer-configured Socks
658listener on 127.0.0.1:9150
65904/04/2017 11:58:08.700 [NOTICE] DisableNetwork is set. Tor will not
660make or accept non-control network connections. Shutting down all
661existing connections.
66204/04/2017 11:58:08.700 [NOTICE] Closing old Socks listener on 127.0.0.1:9150
663
664Thanks for your interest.
665
666From 0xdogdev at gmail.com Tue Apr 4 16:09:52 2017
667From: 0xdogdev at gmail.com (0xdog)
668Date: Tue, 4 Apr 2017 12:09:52 -0400
669Subject: [tor-talk] Problem with TOR-browser on iMac
670In-Reply-To: <AM4PR02MB1700E42B4C82CEDBCE2CE82B930B0@AM4PR02MB1700.eurprd02.prod.outlook.com>
671References: <AM4PR02MB1700E42B4C82CEDBCE2CE82B930B0@AM4PR02MB1700.eurprd02.prod.outlook.com>
672Message-ID: <CAKNyJHu4K+jR4GgiKj-EmWAxw0q2YiPVDeF--HS2yQgxBxsK8A@mail.gmail.com>
673
6742017-04-04 9:52 GMT-04:00, Beach and Yoga Lover <toccare1 at hotmail.com>:
675> CANNOT FIND THE PROXYSERVER
676>
677>
678> FIREFOX HAS BEEN CONFIGURED FOR USING A PROXYSERVER WHICH CAN NOT BEEN FOUND
679>
680> CHECK YOUR PROXY CONFIGURATION
681
682Are you behind a proxy? It seems like you are setting a proxy that TBB
683can not find. Take into account that when you start TBB it ask you if
684you will Connect directly or if you will Configure your connection. If
685you go through Configure in the third step it ask you if you are
686behind a proxy, if not, just hit No and go ahead, if Yes you will need
687your proxy settings for the next step. Please check that.
688Good luck.
689
690From mirimir at riseup.net Tue Apr 4 16:30:46 2017
691From: mirimir at riseup.net (Mirimir)
692Date: Tue, 4 Apr 2017 10:30:46 -0600
693Subject: [tor-talk] tbb (disable network is set)
694In-Reply-To: <CAKNyJHseKvT4SwF5_x-w-KV3Z8V0=BcZJqM4x91oReyvv07B4Q@mail.gmail.com>
695References: <CAKNyJHtuSbxEk3SnekWOC4+b-+bxLie0q42=vX=HS0Wgk9kyjw@mail.gmail.com>
696 <80123bd0-0e4e-bf07-c1a6-b7bed95d9b00@riseup.net>
697 <CAKNyJHseKvT4SwF5_x-w-KV3Z8V0=BcZJqM4x91oReyvv07B4Q@mail.gmail.com>
698Message-ID: <c1b27df2-7469-775d-58e6-9ad86964b471@riseup.net>
699
700On 04/04/2017 10:01 AM, 0xdog wrote:
701> 2017-04-03 21:46 GMT-04:00, Mirimir <mirimir at riseup.net>:
702>> Tor browser may do this if your uplink gets interrupted at a particular
703>> stage in getting the network consensus. I believe that it's a defense
704>> against attempts to force use of malicious relays. The simplest fix is
705>> to delete and reinstall Tor browser, after saving bookmarks if desired.
706>> Or you could manually reset the flag.
707>
708> I have deleted/reinstalled TBB many times and even updated TBB version
709> any time there is a new one. I have edited torrc file but when I
710> start TBB again the DisableNetwork 0 line is deleted. Could you please
711> explain me the correct way to do this? I have the same results using
712> Custom Bridges for obfs4. Here are the whole logs:
713
714Yes, adding "DisableNetwork 0" to torrc doesn't seem to work. I just
715nuked the state file. But if the problem reoccurs after reinstalling Tor
716browser, there must be something else causing it. If obfs4 bridges don't
717help, I'm rather at a loss.
718
719Is there another uplink that you could test on? Alternatively, you could
720try connecting through a VPN. If either eliminates the problem, you know
721that your normal uplink is at fault.
722
723<SNIP>
724
725
726From 0xdogdev at gmail.com Wed Apr 5 13:01:40 2017
727From: 0xdogdev at gmail.com (0xdog)
728Date: Wed, 5 Apr 2017 09:01:40 -0400
729Subject: [tor-talk] tbb (disable network is set)
730In-Reply-To: <c1b27df2-7469-775d-58e6-9ad86964b471@riseup.net>
731References: <CAKNyJHtuSbxEk3SnekWOC4+b-+bxLie0q42=vX=HS0Wgk9kyjw@mail.gmail.com>
732 <80123bd0-0e4e-bf07-c1a6-b7bed95d9b00@riseup.net>
733 <CAKNyJHseKvT4SwF5_x-w-KV3Z8V0=BcZJqM4x91oReyvv07B4Q@mail.gmail.com>
734 <c1b27df2-7469-775d-58e6-9ad86964b471@riseup.net>
735Message-ID: <CAKNyJHtDYTqS1WpOtqznNgZAX-X-S-YqdL5iYAGWTc77t1-3wQ@mail.gmail.com>
736
7372017-04-04 12:30 GMT-04:00, Mirimir <mirimir at riseup.net>:
738> Is there another uplink that you could test on? Alternatively, you could
739> try connecting through a VPN. If either eliminates the problem, you know
740> that your normal uplink is at fault.
741
742I do not have another uplink to test. I can try using a VPN, yes. Can
743you point out which is the best way to configue TBB using a VPN if you
744have used before.
745Thanks in advance.
746
747From mirimir at riseup.net Wed Apr 5 13:14:31 2017
748From: mirimir at riseup.net (Mirimir)
749Date: Wed, 5 Apr 2017 07:14:31 -0600
750Subject: [tor-talk] tbb (disable network is set)
751In-Reply-To: <CAKNyJHtDYTqS1WpOtqznNgZAX-X-S-YqdL5iYAGWTc77t1-3wQ@mail.gmail.com>
752References: <CAKNyJHtuSbxEk3SnekWOC4+b-+bxLie0q42=vX=HS0Wgk9kyjw@mail.gmail.com>
753 <80123bd0-0e4e-bf07-c1a6-b7bed95d9b00@riseup.net>
754 <CAKNyJHseKvT4SwF5_x-w-KV3Z8V0=BcZJqM4x91oReyvv07B4Q@mail.gmail.com>
755 <c1b27df2-7469-775d-58e6-9ad86964b471@riseup.net>
756 <CAKNyJHtDYTqS1WpOtqznNgZAX-X-S-YqdL5iYAGWTc77t1-3wQ@mail.gmail.com>
757Message-ID: <78106c20-340b-0178-8f78-991c51003e03@riseup.net>
758
759On 04/05/2017 07:01 AM, 0xdog wrote:
760> 2017-04-04 12:30 GMT-04:00, Mirimir <mirimir at riseup.net>:
761>> Is there another uplink that you could test on? Alternatively, you could
762>> try connecting through a VPN. If either eliminates the problem, you know
763>> that your normal uplink is at fault.
764>
765> I do not have another uplink to test. I can try using a VPN, yes. Can
766> you point out which is the best way to configue TBB using a VPN if you
767> have used before.
768> Thanks in advance.
769
770What OS?
771
772https://securitykiss.com/ has a free tier, and is reputable.
773
774Are you comfortable using command line?
775
776From nickm at torproject.org Wed Apr 5 14:02:35 2017
777From: nickm at torproject.org (Nick Mathewson)
778Date: Wed, 5 Apr 2017 10:02:35 -0400
779Subject: [tor-talk] Tor 0.3.0.5-rc: almost stable!
780Message-ID: <CAKDKvuw+vD=4P+QPvvvcDq3ZLNmVAdZjXUysRFuE-s4rkSJ9gA@mail.gmail.com>
781
782Hi all!
783
784Tor 0.3.0.5-rc is now tagged and released. It's in still "release
785candidate" status, which means we think it should be pretty stable,
786but we hope you'll find more bugs for us to fix.
787
788You can download the source code from the usual place on the website.
789Packages should be out over the next several weeks, including Tor
790Browser alpha releases later this month.
791
792If you do build from source, please remember to check the signatures!
793
794=====
795Changes in version 0.3.0.5-rc - 2017-04-05
796 Tor 0.3.0.5-rc fixes a few remaining bugs, large and small, in the
797 0.3.0 release series.
798
799 This is the second release candidate in the Tor 0.3.0 series, and has
800 much fewer changes than the first. If we find no new bugs or
801 regressions here, the first stable 0.3.0 release will be nearly
802 identical to it.
803
804 o Major bugfixes (crash, directory connections):
805 - Fix a rare crash when sending a begin cell on a circuit whose
806 linked directory connection had already been closed. Fixes bug
807 21576; bugfix on 0.2.9.3-alpha. Reported by Alec Muffett.
808
809 o Major bugfixes (guard selection):
810 - Fix a guard selection bug where Tor would refuse to bootstrap in
811 some cases if the user swapped a bridge for another bridge in
812 their configuration file. Fixes bug 21771; bugfix on 0.3.0.1-alpha.
813 Reported by "torvlnt33r".
814
815 o Minor features (geoip):
816 - Update geoip and geoip6 to the March 7 2017 Maxmind GeoLite2
817 Country database.
818
819 o Minor bugfix (compilation):
820 - Fix a warning when compiling hs_service.c. Previously, it had no
821 exported symbols when compiled for libor.a, resulting in a
822 compilation warning from clang. Fixes bug 21825; bugfix
823 on 0.3.0.1-alpha.
824
825 o Minor bugfixes (hidden services):
826 - Make hidden services check for failed intro point connections,
827 even when they have exceeded their intro point creation limit.
828 Fixes bug 21596; bugfix on 0.2.7.2-alpha. Reported by Alec Muffett.
829 - Make hidden services with 8 to 10 introduction points check for
830 failed circuits immediately after startup. Previously, they would
831 wait for 5 minutes before performing their first checks. Fixes bug
832 21594; bugfix on 0.2.3.9-alpha. Reported by Alec Muffett.
833
834 o Minor bugfixes (memory leaks):
835 - Fix a memory leak when using GETCONF on a port option. Fixes bug
836 21682; bugfix on 0.3.0.3-alpha.
837
838 o Minor bugfixes (relay):
839 - Avoid a double-marked-circuit warning that could happen when we
840 receive DESTROY cells under heavy load. Fixes bug 20059; bugfix
841 on 0.1.0.1-rc.
842
843 o Minor bugfixes (tests):
844 - Run the entry_guard_parse_from_state_full() test with the time set
845 to a specific date. (The guard state that this test was parsing
846 contained guards that had expired since the test was first
847 written.) Fixes bug 21799; bugfix on 0.3.0.1-alpha.
848
849 o Documentation:
850 - Update the description of the directory server options in the
851 manual page, to clarify that a relay no longer needs to set
852 DirPort in order to be a directory cache. Closes ticket 21720.
853
854From 0xdogdev at gmail.com Wed Apr 5 14:11:07 2017
855From: 0xdogdev at gmail.com (0xdog)
856Date: Wed, 5 Apr 2017 10:11:07 -0400
857Subject: [tor-talk] tbb (disable network is set)
858In-Reply-To: <78106c20-340b-0178-8f78-991c51003e03@riseup.net>
859References: <CAKNyJHtuSbxEk3SnekWOC4+b-+bxLie0q42=vX=HS0Wgk9kyjw@mail.gmail.com>
860 <80123bd0-0e4e-bf07-c1a6-b7bed95d9b00@riseup.net>
861 <CAKNyJHseKvT4SwF5_x-w-KV3Z8V0=BcZJqM4x91oReyvv07B4Q@mail.gmail.com>
862 <c1b27df2-7469-775d-58e6-9ad86964b471@riseup.net>
863 <CAKNyJHtDYTqS1WpOtqznNgZAX-X-S-YqdL5iYAGWTc77t1-3wQ@mail.gmail.com>
864 <78106c20-340b-0178-8f78-991c51003e03@riseup.net>
865Message-ID: <CAKNyJHsLLQjZ6P-AeP67gFpwp-=tDdhKfZqoP7k_v=dLoU5OgQ@mail.gmail.com>
866
8672017-04-05 9:14 GMT-04:00, Mirimir <mirimir at riseup.net>:
868> What OS?
869>
870> https://securitykiss.com/ has a free tier, and is reputable.
871>
872> Are you comfortable using command line?
873
874I am on Windows Server 2003 and yes, I feel comfortable using command
875line on both Windows and Linux. I can access this uplink only on
876windows. I am checking https://securitykiss.com/.
877Thanks for your interest.
878
879From t8mf4nu6lizp at canaglie.net Thu Apr 6 08:14:16 2017
880From: t8mf4nu6lizp at canaglie.net (=?UTF-8?Q?Mikko_Viinam=c3=a4ki?=)
881Date: Thu, 6 Apr 2017 11:14:16 +0300
882Subject: [tor-talk] Website minor detail
883Message-ID: <e4d42f2f-1530-7b37-473d-abf86a56f064@canaglie.net>
884
885
886Please make 64 default, 32 is historical by now. I'm talking about this
887page https://www.torproject.org/docs/verifying-signatures.html.en
888
889Currently is says "For Linux users (change 32 to 64 if you have the
89064-bit package):
891
892gpg --verify tor-browser-linux32-6.5.1_en-US.tar.xz.asc
893 tor-browser-linux32-6.5.1_en-US.tar.xz"
894
895It's just a little wrinkle but still needs fixing. So swap 32 and 64 (in
896text and URLs.).
897
898cheerio
899
900From nusenu at openmailbox.org Thu Apr 6 14:10:00 2017
901From: nusenu at openmailbox.org (nusenu)
902Date: Thu, 06 Apr 2017 14:10:00 +0000
903Subject: [tor-talk] torbrowser vs. twitter picture upload?
904Message-ID: <4f31a5be-f65f-704f-bcc8-4066b1d57935@openmailbox.org>
905
906Hi,
907
908everytime I try to upload a twitter profile picture the dialog with
909resize and zoom opens and after clicking apply I get "sucessfully uploaded"
910but the resulting picture "cannot be displayed because it contains errors".
911
912Did you upload your twitter profile picture with torbrowser without
913problems?
914
915solution:
916120x120 also tried 400x400
917
918Tor Browser Version: 6.5.1
919
920thanks,
921nusenu
922
923--
924https://mastodon.social/@nusenu
925https://twitter.com/nusenu_
926
927-------------- next part --------------
928A non-text attachment was scrubbed...
929Name: signature.asc
930Type: application/pgp-signature
931Size: 801 bytes
932Desc: OpenPGP digital signature
933URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170406/3c0b9287/attachment.sig>
934
935From jeremyrand at airmail.cc Fri Apr 7 03:38:24 2017
936From: jeremyrand at airmail.cc (Jeremy Rand)
937Date: Fri, 7 Apr 2017 03:38:24 +0000
938Subject: [tor-talk] Problem with TOR-browser on iMac
939In-Reply-To: <AM4PR02MB1700E42B4C82CEDBCE2CE82B930B0@AM4PR02MB1700.eurprd02.prod.outlook.com>
940References: <AM4PR02MB1700E42B4C82CEDBCE2CE82B930B0@AM4PR02MB1700.eurprd02.prod.outlook.com>
941Message-ID: <f4dc7890-a37b-e357-5af4-5882b37b3fba@airmail.cc>
942
943Beach and Yoga Lover:
944> Hi,
945>
946>
947> I have a new iMac and downloaded the TOR-browser without problems.
948>
949> But when I try to establish a connection with the Web I get the following message:
950>
951>
952> CANNOT FIND THE PROXYSERVER
953>
954>
955> FIREFOX HAS BEEN CONFIGURED FOR USING A PROXYSERVER WHICH CAN NOT BEEN FOUND
956>
957> CHECK YOUR PROXY CONFIGURATION
958>
959> CHECK YOUR NETWORK = IS OK!
960>
961> IF YOUR COMPUTER OR NETWORK IS BEING PROTECTED BY A FIREWALL OR PROXY, BE SURE TO ALLOW THE TOR BROWSER ADMITTANCE TO THE WEB
962
963If Tor Browser complains that "Firefox" can't find the configured proxy,
964that presumably means that Tor Browser can't talk to Tor. Tor Browser
965Bundle is supposed to run both Tor and Tor Browser when you run it... so
966it sounds like Tor may have failed in some way. Or perhaps a firewall
967is preventing Tor Browser from connecting to Tor (which would presumably
968be 127.0.0.1:9150).
969
970I wouldn't expect this to be caused by Tor being unable to talk to the
971Internet.
972
973Cheers,
974--
975-Jeremy Rand
976Lead Application Engineer at Namecoin
977Mobile email: jeremyrandmobile at airmail.cc
978Mobile PGP: 2158 0643 C13B B40F B0FD 5854 B007 A32D AB44 3D9C
979Send non-security-critical things to my Mobile with PGP.
980Please don't send me unencrypted messages.
981My business email jeremy at veclabs.net is having technical issues at the
982moment.
983
984-------------- next part --------------
985A non-text attachment was scrubbed...
986Name: signature.asc
987Type: application/pgp-signature
988Size: 801 bytes
989Desc: OpenPGP digital signature
990URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170407/cc7276df/attachment.sig>
991
992From seby2kt14 at gmail.com Sat Apr 8 10:54:51 2017
993From: seby2kt14 at gmail.com (Seby)
994Date: Sat, 8 Apr 2017 06:54:51 -0400
995Subject: [tor-talk] No more logs on 0.3.1
996Message-ID: <CAHEKVboHru7_zd2LzuH79HamJaYGv1KS5i_M=1Y_fZJ0nvB3DA@mail.gmail.com>
997
998Hi list,
999
1000Upgraded to a newer version on Debian (Jessie) and can't find any logs in
1001/var/log/tor folder. They used to be there under 0.2.9. Tor is running,
1002socks works, I can browse the web via Tor but don't find any logs. Is this
1003normal?
1004
1005From patrick-mailinglists at whonix.org Sun Apr 9 14:07:00 2017
1006From: patrick-mailinglists at whonix.org (Patrick Schleizer)
1007Date: Sun, 09 Apr 2017 14:07:00 +0000
1008Subject: [tor-talk] How to use Tor Browser for security not anonymity? How
1009 to use TBB using clearnet?
1010Message-ID: <31500295-b6ab-0b37-33fc-a567b036d018@riseup.net>
1011
1012TLDR:
1013
10141) How can one easily hack TBB to use clearnet? [1] (idea [2])
1015
10162) How can one enable cookies to persist in TBB?
1017
10183) How can one re-enable the Firefox password manager in TBB so one can
1019store passwords?
1020
1021To archive that I've disabled private browser and tinkered with lots of
1022torbutton Firefox config settings to no avail. Could you please kindly
1023advice on how to archive that?
1024
1025Long:
1026
1027Tor Browser is better hardened than regular Firefox and over time, it
1028will be even better hardened, even sandboxed.
1029
1030For clearnet browsing where Tor is either not required or creating a
1031mess (such as online banking), it would be awesome if one could use Tor
1032Browser without going through Tor.
1033
1034I guess it's very safe to assume, the most users won't use TBB
1035exclusive. They also want to use clearnet. But the value of a super
1036hardened secure browser TBB is somewhat reduced when then using a
1037non-hardened browser for clearnet use, which could lead to system
1038compromise.
1039
1040Of course this TBB hacking for clearnet use would for now only be advise
1041able for advancement users to not mess up a Tor Browser actually using
1042Tor vs a Tor Browser actually using clearnet. Would be up to oneself to
1043have some protections in place such as using a dedicated VM or computer
1044for that purposes so that one won't accidentally confuse one browser
1045with another.
1046
1047Cheers,
1048Patrick
1049
1050[1] I hear, at some point in future, TBB will no longer have TCP
1051compiled in, and only use unix domain sockets. That's awesome for TBB
1052use with Tor, but makes TBB use with clearnet hard. Long term a solution
1053to redirect TOR_SOCKS_IPC_PATH to clearnet would be needed.
1054
1055[2] Idea how to hack TBB to use clearnet.
1056
1057We could set these environment variables:
1058
1059export TOR_NO_DISPLAY_NETWORK_SETTINGS=1
1060export TOR_SKIP_CONTROLPORTTEST=1
1061export TOR_SKIP_LAUNCH=1
1062export TOR_SOCKS_IPC_PATH=/path/to/unix-domain-socket-file
1063
1064then use socat to redirect to unix domain socket file to 9150.
1065
1066On 9150, we could have a local ssh server running
1067
1068sudo apt-get install openssh-server
1069
1070and then use ssh to open a local socks port forwarding to our local ssh
1071server, which then would use clearnet.
1072
1073sudo apt-get install openssh-client
1074
1075ssh -D 9150 user at 127.0.0.1
1076
1077From gk at torproject.org Mon Apr 10 08:52:00 2017
1078From: gk at torproject.org (Georg Koppen)
1079Date: Mon, 10 Apr 2017 08:52:00 +0000
1080Subject: [tor-talk] Website minor detail
1081In-Reply-To: <e4d42f2f-1530-7b37-473d-abf86a56f064@canaglie.net>
1082References: <e4d42f2f-1530-7b37-473d-abf86a56f064@canaglie.net>
1083Message-ID: <3f5c1979-eef9-28aa-c9fb-8c3a8df8bfeb@torproject.org>
1084
1085Mikko Viinamäki:
1086>
1087> Please make 64 default, 32 is historical by now. I'm talking about this
1088> page https://www.torproject.org/docs/verifying-signatures.html.en
1089>
1090> Currently is says "For Linux users (change 32 to 64 if you have the
1091> 64-bit package):
1092>
1093> gpg --verify tor-browser-linux32-6.5.1_en-US.tar.xz.asc
1094> tor-browser-linux32-6.5.1_en-US.tar.xz"
1095>
1096> It's just a little wrinkle but still needs fixing. So swap 32 and 64 (in
1097> text and URLs.).
1098
1099Thanks. This is https://trac.torproject.org/projects/tor/ticket/21906 now.
1100
1101Georg
1102
1103
1104-------------- next part --------------
1105A non-text attachment was scrubbed...
1106Name: signature.asc
1107Type: application/pgp-signature
1108Size: 833 bytes
1109Desc: OpenPGP digital signature
1110URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170410/99e4cc68/attachment.sig>
1111
1112From anonym at riseup.net Mon Apr 10 09:47:00 2017
1113From: anonym at riseup.net (anonym)
1114Date: Mon, 10 Apr 2017 09:47:00 +0000
1115Subject: [tor-talk] [tbb-dev] How to use Tor Browser for security not
1116 anonymity? How to use TBB using clearnet?
1117In-Reply-To: <31500295-b6ab-0b37-33fc-a567b036d018@riseup.net>
1118References: <31500295-b6ab-0b37-33fc-a567b036d018@riseup.net>
1119Message-ID: <1faedd40-1401-70e5-fc32-38df4bbb20f4@riseup.net>
1120
1121Patrick Schleizer:
1122> 1) How can one easily hack TBB to use clearnet? [1] (idea [2])
1123
1124I believe all you need is:
1125
1126 pref("network.proxy.type", 0);
1127
1128and possibly disabling Torbutton (which is a good idea any way since it will only add confusion in that setup).
1129
1130> 2) How can one enable cookies to persist in TBB?
1131
1132IIRC all you need is to disable Private Browsing mode:
1133
1134 pref("browser.privatebrowsing.autostart", false);
1135
1136That has several other consequences, but at least some has individual prefs for toggling back to what the Private Browser mode does (I wouldn't be surprised if Tor Browser already change many of these prefs like that).
1137
1138> 3) How can one re-enable the Firefox password manager in TBB so one can
1139> store passwords?
1140
1141In addition to disabling Private Browsing mode you just have to enable the feature:
1142
1143 pref("signon.rememberSignons", true);
1144
1145> To archive that I've disabled private browser and tinkered with lots of
1146> torbutton Firefox config settings to no avail. Could you please kindly
1147> advice on how to archive that?
1148
1149YMMV for the above prefs and their exact behavior, but I want to make a point that all you ask for can be achieved by setting a few prefs, so it's only a matter of providing a profile with the necessary different defaults. I don't think introducing more environment variables, like you suggest in [2], is an improvement over this.
1150
1151For the record, providing a different "clearnet" profile for Tor Browser is how we implement Tails' Unsafe Browser.
1152
1153Cheers!
1154
1155
1156From komachi at openmailbox.org Mon Apr 10 21:24:00 2017
1157From: komachi at openmailbox.org (Anton Nesterov)
1158Date: Mon, 10 Apr 2017 21:24:00 +0000
1159Subject: [tor-talk] Russian free software activist arrested for extremist
1160 materials posted from his Tor exit node
1161Message-ID: <d05466db-84d0-ae24-cb29-088bb633bb5c@openmailbox.org>
1162
1163Dmitry Bogatov aka KAction, Russian free software activist and
1164mathematics teacher at Moscow’s Finance and Law University, arrested in
1165Russia and charged with extremism.
1166
1167Here is news report about his arrest
1168https://meduza.io/en/feature/2017/04/10/mathematics-teacher-accused-of-inciting-mass-riots-now-also-accused-of-supporting-terrorism-and-once-again-detained
1169
1170>From his Tor exit node user with nickname Airat Basharov posted some
1171messages on sysadmins.ru website. Russian investigators alleged that
1172this messages contains a call to mass riots and terrorism. Messages were
1173posted from different IPs in different countries (probably another exit
1174nodes), and only one was posted from Bogatov's IP. After Bogatov's
1175arrest, Airat Basharov continue to post messages.
1176
1177Here is his Tor exit node, last seen 2017-04-05 20:00:00
1178https://atlas.torproject.org/#details/2402CD5A0D848D1DCA61EB708CC1FBD4364AB8AE
1179
1180Another report about Bogatov
1181https://meduza.io/feature/2017/04/10/kak-arestovali-matematika-dmitriya-bogatova-i-v-chem-imenno-ego-obvinyayut
1182(in Russian)
1183
1184#FreeBogatov
1185
1186--
1187https://nesterov.pw
1188GPG key: 0CE8 65F1 9043 2B11 25A5 74A7 1187 6869 67AA 56E4
1189https://keybase.io/komachi/key.asc
1190
1191From mateo.carm at protonmail.ch Mon Apr 10 23:19:17 2017
1192From: mateo.carm at protonmail.ch (Mateo Carmona)
1193Date: Mon, 10 Apr 2017 19:19:17 -0400
1194Subject: [tor-talk] release of heads 0.2 live 100% libre torified distro
1195 based on devuan
1196In-Reply-To: <20170327211938.GA24175@reflex>
1197References: <20170327211938.GA24175@reflex>
1198Message-ID: <S338uDBUCEGcDjI6qURptinnBjIBg5SYkuVlZGKOukAN97opWbsgjMtq5z6hD8lOfMHSpVgkPbeRTD_JVWdt_F7gcrviPeDKkcMh_Q0hNog=@protonmail.ch>
1199
1200Dear tor-talkers,
1201
1202In regard to the great news about the release of heads OS I have two things to say, first congratulations! second why the heads repository is hosted in a non-free software repository (github). Is it not about Libre-privacy?
1203
1204happy hacking,
1205Mateo Carmona
1206
1207-------- Original Message --------
1208Subject: [tor-talk] release of heads 0.2 live 100% libre torified distro based on devuan
1209Local Time: 27 de marzo de 2017 4:17 PM
1210UTC Time: 27 de marzo de 2017 21:17
1211From: jaromil at dyne.org
1212To: tor-talk <tor-talk at lists.torproject.org>
1213
1214dear fellow tor-talkers :^)
1215
1216with this mail let me bring to your attention heads gnu/linux, a new
1217live distribution hitting release 0.2 and mature enough for the first
1218expert opinions and tor-fingering around: https://heads.dyne.org
1219
1220heads is not only a version of tails without systemd, which we
1221consider an enormous new surface of attack many of us don't even want
1222to be exposed to.
1223
1224to protect its users from any backdoors in device firmware, heads aims
1225also to be a 100% Free linux distribution without any binary blobs or
1226proprietary software, following to the guidelines of the GNU project
1227https://www.gnu.org/distros/free-system-distribution-guidelines.html
1228at the same time heads linux kernel is patched with -grsec using an
1229hardened profile and routes all its traffic through tor.
1230
1231at Dyne.org we are great fans of the tor project and we used to run
1232exit nodes back in 2005, barely resisting police raids and what
1233not. now with heads the intention is to thank and give back to the tor
1234developers and community another useful tool in the family, that's why
1235we plan to support our mate parazyd on this long term effort.
1236
1237for those in the tor-dev roadshow willing to give it a shot we left a
1238copy in the hands of an activist following the tor-dev tour across
1239Europe these days, in the hope that will be useful.
1240
1241happy hacking
1242
1243--
1244~.,_ Denis Roio aka Jaromil http://Dyne.org think &do tank
1245"+. CTO and co-founder free/open source developers
1246@) âš· crypto κÃÂÅÀÄο úрøÿтþ à ¤—à ¥Âà ¤ªà ¥Âà ¤¤à ¥ åŠå¯†×â€Ã—Â× וסינالمشÙÂره
1247@@) GnuPG: 6113D89C A825C5CE DD02C872 73B35DA5 4ACB7D10
1248(@@@) opmsg:73a8e097a038d82b 8afb4c05804bda0d 281b3880fbc19b88
1249
1250--
1251tor-talk mailing list - tor-talk at lists.torproject.org
1252To unsubscribe or change other settings go to
1253https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
1254
1255From joebtfsplk at gmx.com Tue Apr 11 00:11:48 2017
1256From: joebtfsplk at gmx.com (Joe Btfsplk)
1257Date: Mon, 10 Apr 2017 19:11:48 -0500
1258Subject: [tor-talk] Tor Browser Linux_don't extract to root
1259Message-ID: <3fc530c6-0efe-1ea7-4b22-29e738fd341e@gmx.com>
1260
1261What is the reason(s) the TBB instructions say do not install (extract)
1262TBB to root?
1263Is it so the TBB files will be in a location where the user has write
1264permissions, so that TBB updates can automatically D/L and install?
1265
1266Other than that, does installing TBB to a location where anyone /
1267anything has full r/w/x permissions (like in /home), weaken the security
1268of Linux, compared to packages installed via a distro's software manager?
1269
1270From parazyd at dyne.org Tue Apr 11 05:58:36 2017
1271From: parazyd at dyne.org (parazyd)
1272Date: Tue, 11 Apr 2017 07:58:36 +0200
1273Subject: [tor-talk] release of heads 0.2 live 100% libre torified distro
1274 based on devuan
1275In-Reply-To: <S338uDBUCEGcDjI6qURptinnBjIBg5SYkuVlZGKOukAN97opWbsgjMtq5z6hD8lOfMHSpVgkPbeRTD_JVWdt_F7gcrviPeDKkcMh_Q0hNog=@protonmail.ch>
1276References: <20170327211938.GA24175@reflex>
1277 <S338uDBUCEGcDjI6qURptinnBjIBg5SYkuVlZGKOukAN97opWbsgjMtq5z6hD8lOfMHSpVgkPbeRTD_JVWdt_F7gcrviPeDKkcMh_Q0hNog=@protonmail.ch>
1278Message-ID: <20170411055836.GA17416@fq>
1279
1280On Mon, 10 Apr 2017, Mateo Carmona wrote:
1281
1282> Dear tor-talkers,
1283>
1284> In regard to the great news about the release of heads OS I have two things to say, first congratulations! second why the heads repository is hosted in a non-free software repository (github). Is it not about Libre-privacy?
1285>
1286> happy hacking,
1287> Mateo Carmona
1288
1289Thank you!
1290
1291I've tried hosting the repositories on git.devuan.org, but it hasn't
1292performed on-par at that time. I also don't have another place as good
1293as Github to host everything, along with the bugtracker. In any case, a
1294plethora of free software projects are hosted on Github, and I don't
1295really see an issue. All my git commits are signed with gnupg so we have
1296that going at least.
1297
1298--
1299~ parazyd
1300GPG: 0333 7671 FDE7 5BB6 A85E C91F B876 CB44 FA1B 0274
1301-------------- next part --------------
1302A non-text attachment was scrubbed...
1303Name: signature.asc
1304Type: application/pgp-signature
1305Size: 1528 bytes
1306Desc: Digital signature
1307URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170411/3cdb2908/attachment.sig>
1308
1309From lara.tor at emails.veryspeedy.net Tue Apr 11 06:41:00 2017
1310From: lara.tor at emails.veryspeedy.net (Lara)
1311Date: Tue, 11 Apr 2017 06:41:00 +0000
1312Subject: [tor-talk] release of heads 0.2 live 100% libre torified distro
1313 based on devuan
1314In-Reply-To: <20170411055836.GA17416@fq>
1315References: <20170327211938.GA24175@reflex>
1316 <S338uDBUCEGcDjI6qURptinnBjIBg5SYkuVlZGKOukAN97opWbsgjMtq5z6hD8lOfMHSpVgkPbeRTD_JVWdt_F7gcrviPeDKkcMh_Q0hNog=@protonmail.ch>
1317 <20170411055836.GA17416@fq>
1318Message-ID: <db8acd43-20fc-ad8b-3fd6-496a9706822f@emails.veryspeedy.net>
1319
1320parazyd:
1321> On Mon, 10 Apr 2017, Mateo Carmona wrote:
1322>> In regard to the great news about the release of heads OS I have two things to say, first congratulations! second why the heads repository is hosted in a non-free software repository (github). Is it not about Libre-privacy?
1323>
1324> I've tried hosting the repositories on git.devuan.org, but it hasn't
1325> performed on-par at that time. I also don't have another place as good
1326> as Github to host everything, along with the bugtracker. In any case, a
1327> plethora of free software projects are hosted on Github, and I don't
1328> really see an issue. All my git commits are signed with gnupg so we have
1329> that going at least.
1330
1331Welcome to the "free" software world!
1332
1333Where the developers aren't reliable enough to have a host and a HTTPS
1334certificate. And where those handicapped enough to be unable to write
1335software have informed oppinions as long as they don't have to pay a cent.
1336
1337
1338From parazyd at dyne.org Tue Apr 11 06:49:39 2017
1339From: parazyd at dyne.org (parazyd)
1340Date: Tue, 11 Apr 2017 08:49:39 +0200
1341Subject: [tor-talk] release of heads 0.2 live 100% libre torified distro
1342 based on devuan
1343In-Reply-To: <db8acd43-20fc-ad8b-3fd6-496a9706822f@emails.veryspeedy.net>
1344References: <20170327211938.GA24175@reflex>
1345 <S338uDBUCEGcDjI6qURptinnBjIBg5SYkuVlZGKOukAN97opWbsgjMtq5z6hD8lOfMHSpVgkPbeRTD_JVWdt_F7gcrviPeDKkcMh_Q0hNog=@protonmail.ch>
1346 <20170411055836.GA17416@fq>
1347 <db8acd43-20fc-ad8b-3fd6-496a9706822f@emails.veryspeedy.net>
1348Message-ID: <20170411064939.GA4081@fq>
1349
1350On Tue, 11 Apr 2017, Lara wrote:
1351
1352> parazyd:
1353> > On Mon, 10 Apr 2017, Mateo Carmona wrote:
1354> >> In regard to the great news about the release of heads OS I have two things to say, first congratulations! second why the heads repository is hosted in a non-free software repository (github). Is it not about Libre-privacy?
1355> >
1356> > I've tried hosting the repositories on git.devuan.org, but it hasn't
1357> > performed on-par at that time. I also don't have another place as good
1358> > as Github to host everything, along with the bugtracker. In any case, a
1359> > plethora of free software projects are hosted on Github, and I don't
1360> > really see an issue. All my git commits are signed with gnupg so we have
1361> > that going at least.
1362>
1363> Welcome to the "free" software world!
1364>
1365> Where the developers aren't reliable enough to have a host and a HTTPS
1366> certificate. And where those handicapped enough to be unable to write
1367> software have informed oppinions as long as they don't have to pay a cent.
1368
1369<3
1370
1371--
1372~ parazyd
1373GPG: 0333 7671 FDE7 5BB6 A85E C91F B876 CB44 FA1B 0274
1374-------------- next part --------------
1375A non-text attachment was scrubbed...
1376Name: signature.asc
1377Type: application/pgp-signature
1378Size: 1528 bytes
1379Desc: Digital signature
1380URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170411/83a0deaa/attachment-0001.sig>
1381
1382From intrigeri at boum.org Tue Apr 11 07:29:58 2017
1383From: intrigeri at boum.org (intrigeri)
1384Date: Tue, 11 Apr 2017 09:29:58 +0200
1385Subject: [tor-talk] release of heads 0.2 live 100% libre torified distro
1386 based on devuan
1387In-Reply-To: <db8acd43-20fc-ad8b-3fd6-496a9706822f@emails.veryspeedy.net>
1388 (Lara's message of "Tue, 11 Apr 2017 06:41:00 +0000")
1389References: <20170327211938.GA24175@reflex>
1390 <S338uDBUCEGcDjI6qURptinnBjIBg5SYkuVlZGKOukAN97opWbsgjMtq5z6hD8lOfMHSpVgkPbeRTD_JVWdt_F7gcrviPeDKkcMh_Q0hNog=@protonmail.ch>
1391 <20170411055836.GA17416@fq>
1392 <db8acd43-20fc-ad8b-3fd6-496a9706822f@emails.veryspeedy.net>
1393Message-ID: <85efwzz9jd.fsf@boum.org>
1394
1395Hi,
1396
1397Lara:
1398> those handicapped enough to be unable to write software
1399
1400This can be interpreted in a number of ways, including some that
1401I personally find problematic. But maybe you want to rephrase so
1402I understand better what you meant?
1403
1404Cheers,
1405--
1406intrigeri
1407
1408From mail at parckwart.de Tue Apr 11 08:47:05 2017
1409From: mail at parckwart.de (Jonathan Marquardt)
1410Date: Tue, 11 Apr 2017 10:47:05 +0200
1411Subject: [tor-talk] Tor Browser Linux_don't extract to root
1412In-Reply-To: <3fc530c6-0efe-1ea7-4b22-29e738fd341e@gmx.com>
1413References: <3fc530c6-0efe-1ea7-4b22-29e738fd341e@gmx.com>
1414Message-ID: <20170411084704.GA30993@parckwart.de>
1415
1416On Mon, Apr 10, 2017 at 07:11:48PM -0500, Joe Btfsplk wrote:
1417> What is the reason(s) the TBB instructions say do not install (extract) TBB
1418> to root?
1419> Is it so the TBB files will be in a location where the user has write
1420> permissions, so that TBB updates can automatically D/L and install?
1421
1422Yes, that's the biggest advantage, I think. We don’t want superold versions of
1423TBB to be used, do we?
1424
1425> Other than that, does installing TBB to a location where anyone / anything
1426> has full r/w/x permissions (like in /home), weaken the security of Linux,
1427> compared to packages installed via a distro's software manager?
1428
1429If "anyone / anything has full r/w/x permissions" in /home on your system,
1430you're doing something very wrong. Only the individual users should have write
1431permissions in their own home directories. On a multi-user system it is also a
1432good idea to give "world" zero permissions in your user home directory so no
1433other users can read your files.
1434--
14354096R/1224DBD299A4F5F3
143647BC 7DE8 3D46 2E8B ED18 AA86 1224 DBD2 99A4 F5F3
1437-------------- next part --------------
1438A non-text attachment was scrubbed...
1439Name: signature.asc
1440Type: application/pgp-signature
1441Size: 819 bytes
1442Desc: Digital signature
1443URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170411/9fde5815/attachment.sig>
1444
1445From lolint at protonmail.com Tue Apr 11 13:28:51 2017
1446From: lolint at protonmail.com (Lolint)
1447Date: Tue, 11 Apr 2017 09:28:51 -0400
1448Subject: [tor-talk] Suspicious rise in direct users connection from Israel
1449 (from ~9k to >100k)
1450Message-ID: <1NzvbAs2thgiw3Y3rg_v-tPhVBBQq0jyDpEqkRLwoDoIXnSNHoWl1vu0rDySOG27xy06Y182DPBNzXnNfxjuQvjDE1ITEUhHDkk5RhPbxe8=@protonmail.com>
1451
1452Hi,
1453
1454Direct users graph:
1455
1456https://metrics.torproject.org/userstats-relay-country.html?graph=userstats-relay-country&country=il
1457
1458Bridge users (nothing suspicious for now):
1459
1460https://metrics.torproject.org/userstats-bridge-combined.html?start=2017-01-11&end=2017-04-11&country=il
1461
1462--Jeff
1463
1464From nusenu at openmailbox.org Tue Apr 11 14:45:00 2017
1465From: nusenu at openmailbox.org (nusenu)
1466Date: Tue, 11 Apr 2017 14:45:00 +0000
1467Subject: [tor-talk] Suspicious rise in direct users connection from
1468 Israel (from ~9k to >100k)
1469In-Reply-To: <1NzvbAs2thgiw3Y3rg_v-tPhVBBQq0jyDpEqkRLwoDoIXnSNHoWl1vu0rDySOG27xy06Y182DPBNzXnNfxjuQvjDE1ITEUhHDkk5RhPbxe8=@protonmail.com>
1470References: <1NzvbAs2thgiw3Y3rg_v-tPhVBBQq0jyDpEqkRLwoDoIXnSNHoWl1vu0rDySOG27xy06Y182DPBNzXnNfxjuQvjDE1ITEUhHDkk5RhPbxe8=@protonmail.com>
1471Message-ID: <cf620fea-ee1e-502d-dc9d-8123f3395506@openmailbox.org>
1472
1473> Direct users graph:
1474>
1475> https://metrics.torproject.org/userstats-relay-country.html?graph=userstats-relay-country&country=il
1476>
1477> Bridge users (nothing suspicious for now):
1478>
1479> https://metrics.torproject.org/userstats-bridge-combined.html?start=2017-01-11&end=2017-04-11&country=il
1480
1481interesting.
1482I'm wondering why that spike of new users from IL does not show in the
1483overall user graphs. Did another country "lose" that many users at the
1484same time?
1485
1486
1487--
1488https://mastodon.social/@nusenu
1489https://twitter.com/nusenu_
1490
1491-------------- next part --------------
1492A non-text attachment was scrubbed...
1493Name: signature.asc
1494Type: application/pgp-signature
1495Size: 801 bytes
1496Desc: OpenPGP digital signature
1497URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170411/8b80586d/attachment.sig>
1498
1499From mirimir at riseup.net Tue Apr 11 14:55:22 2017
1500From: mirimir at riseup.net (Mirimir)
1501Date: Tue, 11 Apr 2017 08:55:22 -0600
1502Subject: [tor-talk] Suspicious rise in direct users connection from
1503 Israel (from ~9k to >100k)
1504In-Reply-To: <1NzvbAs2thgiw3Y3rg_v-tPhVBBQq0jyDpEqkRLwoDoIXnSNHoWl1vu0rDySOG27xy06Y182DPBNzXnNfxjuQvjDE1ITEUhHDkk5RhPbxe8=@protonmail.com>
1505References: <1NzvbAs2thgiw3Y3rg_v-tPhVBBQq0jyDpEqkRLwoDoIXnSNHoWl1vu0rDySOG27xy06Y182DPBNzXnNfxjuQvjDE1ITEUhHDkk5RhPbxe8=@protonmail.com>
1506Message-ID: <bad86a1a-9ec6-d045-b5a4-939e4da3e70a@riseup.net>
1507
1508On 04/11/2017 07:28 AM, Lolint wrote:
1509> Hi,
1510>
1511> Direct users graph:
1512>
1513> https://metrics.torproject.org/userstats-relay-country.html?graph=userstats-relay-country&country=il
1514
1515This can mean that something is forcing rapid reconnection, right?
1516
1517> Bridge users (nothing suspicious for now):
1518>
1519> https://metrics.torproject.org/userstats-bridge-combined.html?start=2017-01-11&end=2017-04-11&country=il
1520>
1521> --Jeff
1522>
1523
1524From lolint at protonmail.com Tue Apr 11 15:06:00 2017
1525From: lolint at protonmail.com (Lolint)
1526Date: Tue, 11 Apr 2017 11:06:00 -0400
1527Subject: [tor-talk] Suspicious rise in direct users connection from
1528 Israel (from ~9k to >100k)
1529In-Reply-To: <cf620fea-ee1e-502d-dc9d-8123f3395506@openmailbox.org>
1530References: <1NzvbAs2thgiw3Y3rg_v-tPhVBBQq0jyDpEqkRLwoDoIXnSNHoWl1vu0rDySOG27xy06Y182DPBNzXnNfxjuQvjDE1ITEUhHDkk5RhPbxe8=@protonmail.com>
1531 <cf620fea-ee1e-502d-dc9d-8123f3395506@openmailbox.org>
1532Message-ID: <Rpr5dYM7wPwfEHUpboHaZUgEwi0aAQhvQZoaU1GqdyIN9q2VaIXy63AmK1rtc8UDFbP4uJyjj03N5kQnOObEAlXou0BINtcvUzgFFtOjLbE=@protonmail.com>
1533
1534> I'm wondering why that spike of new users from IL does not show in theoverall user graphs.
1535> Did another country "lose" that many users at the same time?
1536
1537Another country, no. Other countries yes :) It's 91k more users, minus total losses from
1538other countries which should add up to it. For example the US lost about 20k, Brazil 7k, ...
1539
1540But I expect it to appear soon.
1541
1542From anonym at riseup.net Tue Apr 11 16:26:00 2017
1543From: anonym at riseup.net (anonym)
1544Date: Tue, 11 Apr 2017 16:26:00 +0000
1545Subject: [tor-talk] No more logs on 0.3.1
1546In-Reply-To: <CAHEKVboHru7_zd2LzuH79HamJaYGv1KS5i_M=1Y_fZJ0nvB3DA@mail.gmail.com>
1547References: <CAHEKVboHru7_zd2LzuH79HamJaYGv1KS5i_M=1Y_fZJ0nvB3DA@mail.gmail.com>
1548Message-ID: <92a0ddc0-4828-468d-dd48-53ca9515cd62@riseup.net>
1549
1550Seby:
1551> Hi list,
1552>
1553> Upgraded to a newer version on Debian (Jessie) and can't find any logs in
1554> /var/log/tor folder. They used to be there under 0.2.9. Tor is running,
1555> socks works, I can browse the web via Tor but don't find any logs. Is this
1556> normal?
1557
1558This is expected if your run tor >= 0.3: in the Debian packaging the default logging was switched to using syslog, so on a default systemd-enabled Debian Jessie system you should look in the journal, e.g.:
1559
1560 sudo journalctl -u tor at default.service
1561
1562Cheers!
1563
1564
1565From joebtfsplk at gmx.com Tue Apr 11 19:18:38 2017
1566From: joebtfsplk at gmx.com (Joe Btfsplk)
1567Date: Tue, 11 Apr 2017 14:18:38 -0500
1568Subject: [tor-talk] Tor Browser Linux_don't extract to root
1569In-Reply-To: <20170411084704.GA30993@parckwart.de>
1570References: <3fc530c6-0efe-1ea7-4b22-29e738fd341e@gmx.com>
1571 <20170411084704.GA30993@parckwart.de>
1572Message-ID: <0498ab06-a28c-87af-991e-1cf89d654bb0@gmx.com>
1573
1574
1575On 04/11/2017 03:47 AM, Jonathan Marquardt wrote:
1576> On Mon, Apr 10, 2017 at 07:11:48PM -0500, Joe Btfsplk wrote:
1577>> What is the reason(s) the TBB instructions say do not install (extract) TBB
1578>> to root?
1579>> Is it so the TBB files will be in a location where the user has write
1580>> permissions, so that TBB updates can automatically D/L and install?
1581> Yes, that's the biggest advantage, I think. We don’t want superold versions of
1582> TBB to be used, do we?
1583>
1584>> Other than that, does installing TBB to a location where anyone / anything
1585>> has full r/w/x permissions (like in /home), weaken the security of Linux,
1586>> compared to packages installed via a distro's software manager?
1587> If "anyone / anything has full r/w/x permissions" in /home on your system,
1588> you're doing something very wrong. Only the individual users should have write
1589> permissions in their own home directories. On a multi-user system it is also a
1590> good idea to give "world" zero permissions in your user home directory so no
1591> other users can read your files.
1592>
1593Thanks. I may be missing something here. Anyone feel free to correct
1594me where I'm wrong.
1595I'm not "doing" anything with /home permissions - it's Linux defaults.
1596AFAIK, once a user logs into their 'nix acct, anything that writes to
1597(most) files in /home can do so - w/o any prompting.
1598
1599For browsers - Firefox - that's full access to most things under
1600.mozilla, but not Firefox program files - installed elsewhere. In
1601/home, the user is the owner & has full r/w/x permissions for most
1602files there - no PW required to change files there (once logged in).
1603There're some exceptions to that, like .local/keyrings.
1604
1605For TBB extracted to a folder in /home, on files I checked (tor,
1606cached-certs, torrc, etc.) - the user is owner & has r/w/(x) permissions
1607by default. No PW required - like any document in /home. So anything
1608that makes it past basic defenses of the browser, NoScript, etc. - would
1609generally have r/w/x permissions on most TBB files in /home - yes?
1610
1611Conversely, Firefox installed to /usr & other protected directories that
1612most installed apps use, by default the user or anything making it onto
1613the computer don't have w/x permissions for those "program files."
1614Yes? That's part of Linux overall security.
1615
1616Maybe I'm missing something. Tor Project goes to great lengths to
1617provide uncompromised TBB copies & ways to verify them, but at least in
1618Linux - advises putting it in the least secure area, so it can update
1619automatically with one click? (because TBB wasn't installed via a Linux
1620software manager & therefore automatic updates wouldn't be allowed).
1621Seems like that's in opposition to all the other TBB security efforts.
1622
1623When Linux users choose to D/L the latest release from mozilla & install
1624to /opt or /usr/local, it won't update automatically or w/ a click,
1625AFAIK. Unless you change ownership / permissions of those directories -
1626which I've read is a bad idea, security wise. (I'm not sure the D/L
1627Linux Fx ver has "update now" available in about:firefox, anyway).
1628
1629But, for Fx or Tbird in /opt you can install update files from Mozilla
1630easily enough using sudo. It takes typing a few characters vs. one click.
1631
1632From grarpamp at gmail.com Wed Apr 12 08:19:04 2017
1633From: grarpamp at gmail.com (grarpamp)
1634Date: Wed, 12 Apr 2017 04:19:04 -0400
1635Subject: [tor-talk] Suspicious rise in direct users connection from
1636 Israel (from ~9k to >100k)
1637In-Reply-To: <cf620fea-ee1e-502d-dc9d-8123f3395506@openmailbox.org>
1638References: <1NzvbAs2thgiw3Y3rg_v-tPhVBBQq0jyDpEqkRLwoDoIXnSNHoWl1vu0rDySOG27xy06Y182DPBNzXnNfxjuQvjDE1ITEUhHDkk5RhPbxe8=@protonmail.com>
1639 <cf620fea-ee1e-502d-dc9d-8123f3395506@openmailbox.org>
1640Message-ID: <CAD2Ti28Tt81OfFbz7JHRrD7NMC5KkRrDJMVobUzjycwtEDhZvA@mail.gmail.com>
1641
1642On Tue, Apr 11, 2017 at 10:45 AM, nusenu <nusenu at openmailbox.org> wrote:
1643> I'm wondering why that spike of new users from IL does not show in the
1644> overall user graphs.
1645
1646Though perhaps unlikely, especially without it being publicly known,
1647it is possible for certain demographic cultural / religious / industry
1648"apps" to arise that might be using tor, and be academically identifiable.
1649ie: IL is 75% Jewish, presence in all other countries is
1650proportionally insignificant.
1651This sole presence of a thing in mass proportion in one place is
1652relatively unique.
1653It may be possible to aggregate other countries into sets to
1654identify bumps potentially relavant to their combined (yet unique
1655to them, and en masse therein as well) demographics.
1656You can probably come up with possible examples.
1657
1658Unlikely the Torah suddenly went digital via tor.
1659More likely GeoIP broken, or network interference / attack / research.
1660
1661From mail at parckwart.de Wed Apr 12 08:23:02 2017
1662From: mail at parckwart.de (Jonathan Marquardt)
1663Date: Wed, 12 Apr 2017 10:23:02 +0200
1664Subject: [tor-talk] Tor Browser Linux_don't extract to root
1665In-Reply-To: <0498ab06-a28c-87af-991e-1cf89d654bb0@gmx.com>
1666References: <3fc530c6-0efe-1ea7-4b22-29e738fd341e@gmx.com>
1667 <20170411084704.GA30993@parckwart.de>
1668 <0498ab06-a28c-87af-991e-1cf89d654bb0@gmx.com>
1669Message-ID: <20170412082302.GA2897@parckwart.de>
1670
1671On Tue, Apr 11, 2017 at 02:18:38PM -0500, Joe Btfsplk wrote:
1672> I'm not "doing" anything with /home permissions - it's Linux defaults.
1673> AFAIK, once a user logs into their 'nix acct, anything that writes to (most)
1674> files in /home can do so - w/o any prompting.
1675
1676I think the confusion comes from the way you phrase this. No, a user cannot
1677write to "/home", but to "/home/user". That's what you mean, right?
1678
1679It should look something like this:
1680
1681$ ls -lah /home/
1682total 12K
1683drwxr-xr-x 3 root root 4.0K Dec 23 11:33 .
1684drwxr-xr-x 24 root root 4.0K Sep 16 2016 ..
1685drwxr-xr-x 52 user user 4.0K Apr 12 09:15 user
1686
1687For the rest of this email, I'll assume that you mean "/home/user" when
1688talking about "/home".
1689
1690> For browsers - Firefox - that's full access to most things under .mozilla,
1691> but not Firefox program files - installed elsewhere. In /home, the user is
1692> the owner & has full r/w/x permissions for most files there - no PW
1693> required to change files there (once logged in). There're some exceptions
1694> to that, like .local/keyrings.
1695
1696Right.
1697
1698> For TBB extracted to a folder in /home, on files I checked (tor,
1699> cached-certs, torrc, etc.) - the user is owner & has r/w/(x) permissions by
1700> default. No PW required - like any document in /home. So anything that
1701> makes it past basic defenses of the browser, NoScript, etc. - would
1702> generally have r/w/x permissions on most TBB files in /home - yes?
1703
1704What? Do you mean like...web pages having access to the files in your home
1705directory? That's not how web browsers work. A web page should never be able
1706to just access files on your system. If something like this was possible, it
1707would be considered an exploit. Not just with TBB, but with any browser.
1708JavaScript is a sandbox and must be so.
1709
1710> Conversely, Firefox installed to /usr & other protected directories that
1711> most installed apps use, by default the user or anything making it onto the
1712> computer don't have w/x permissions for those "program files." Yes? That's
1713> part of Linux overall security.
1714
1715Right, as long as you don't talk about web pages. They don't have any file
1716access in general.
1717
1718> Maybe I'm missing something. Tor Project goes to great lengths to provide
1719> uncompromised TBB copies & ways to verify them, but at least in Linux -
1720> advises putting it in the least secure area, so it can update automatically
1721> with one click? (because TBB wasn't installed via a Linux software manager
1722> & therefore automatic updates wouldn't be allowed). Seems like that's in
1723> opposition to all the other TBB security efforts.
1724>
1725> When Linux users choose to D/L the latest release from mozilla & install to
1726> /opt or /usr/local, it won't update automatically or w/ a click, AFAIK.
1727> Unless you change ownership / permissions of those directories - which I've
1728> read is a bad idea, security wise. (I'm not sure the D/L Linux Fx ver has
1729> "update now" available in about:firefox, anyway).
1730>
1731> But, for Fx or Tbird in /opt you can install update files from Mozilla
1732> easily enough using sudo. It takes typing a few characters vs. one click.
1733
1734Both methods (putting apps into global dirs vs. putting them into home dirs)
1735have their own advantages and disadvantages. With globally installed apps, you
1736can install updates for every user simultaneously and it saves disk space. On
1737the other hand, it requires a privileged user the always keep stuff
1738up-to-date, whereas with the other method, non-privileged users can perform
1739their own updates themselfes. You need to keep in mind that there are many
1740multi-user systems out there, where some users simply don't have root/sudo
1741permissions.
1742
1743--
17444096R/1224DBD299A4F5F3
174547BC 7DE8 3D46 2E8B ED18 AA86 1224 DBD2 99A4 F5F3
1746-------------- next part --------------
1747A non-text attachment was scrubbed...
1748Name: signature.asc
1749Type: application/pgp-signature
1750Size: 819 bytes
1751Desc: Digital signature
1752URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170412/ef2b1e97/attachment.sig>
1753
1754From lolint at protonmail.com Wed Apr 12 08:32:09 2017
1755From: lolint at protonmail.com (Lolint)
1756Date: Wed, 12 Apr 2017 04:32:09 -0400
1757Subject: [tor-talk] Suspicious rise in direct users connection from
1758 Israel (from ~9k to >100k)
1759In-Reply-To: <cf620fea-ee1e-502d-dc9d-8123f3395506@openmailbox.org>
1760References: <1NzvbAs2thgiw3Y3rg_v-tPhVBBQq0jyDpEqkRLwoDoIXnSNHoWl1vu0rDySOG27xy06Y182DPBNzXnNfxjuQvjDE1ITEUhHDkk5RhPbxe8=@protonmail.com>
1761 <cf620fea-ee1e-502d-dc9d-8123f3395506@openmailbox.org>
1762Message-ID: <-lZ_r_JsASE2CZjZcdOjHI-352zUvfALvLNMan4RhV_HVnKgeiEL7eMV1sSlfaRhYWPLhbPxApolyzT4prVQO9LhcnC_HCsuMDjP05EnnX8=@protonmail.com>
1763
1764As predicted the spike is now visible in the global graph.
1765
1766Also compare these two:
1767
1768https://metrics.torproject.org/userstats-relay-country.html?start=2016-11-12&end=2017-01-23&country=ae&events=off
1769
1770https://metrics.torproject.org/userstats-relay-country.html?start=2017-01-12&end=2017-04-11&country=il&events=off
1771
1772Looks very similar.
1773
1774From nusenu at openmailbox.org Wed Apr 12 11:56:00 2017
1775From: nusenu at openmailbox.org (nusenu)
1776Date: Wed, 12 Apr 2017 11:56:00 +0000
1777Subject: [tor-talk] "Is this a Ubuntu-based Botnet deploying Tor Relays and
1778 Bridges?"
1779Message-ID: <ce51b775-0889-910a-d6e9-a13ac0994bb8@openmailbox.org>
1780
1781I put together a bit of information about the "UbuntuCore" named relays:
1782
1783https://medium.com/@nusenu/is-this-a-ubuntu-based-botnet-deploying-tor-relays-and-bridges-b4ce1a612039
1784
1785If you have any insides or comments I'd like to hear from you.
1786
1787
1788--
1789https://mastodon.social/@nusenu
1790https://twitter.com/nusenu_
1791
1792-------------- next part --------------
1793A non-text attachment was scrubbed...
1794Name: signature.asc
1795Type: application/pgp-signature
1796Size: 801 bytes
1797Desc: OpenPGP digital signature
1798URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170412/4e7ab32c/attachment.sig>
1799
1800From joebtfsplk at gmx.com Wed Apr 12 22:32:14 2017
1801From: joebtfsplk at gmx.com (Joe Btfsplk)
1802Date: Wed, 12 Apr 2017 17:32:14 -0500
1803Subject: [tor-talk] Tor Browser Linux_don't extract to root
1804In-Reply-To: <20170412082302.GA2897@parckwart.de>
1805References: <3fc530c6-0efe-1ea7-4b22-29e738fd341e@gmx.com>
1806 <20170411084704.GA30993@parckwart.de>
1807 <0498ab06-a28c-87af-991e-1cf89d654bb0@gmx.com>
1808 <20170412082302.GA2897@parckwart.de>
1809Message-ID: <ac27d293-77e7-80cc-9915-f547132d74a9@gmx.com>
1810
1811
1812
1813On 04/12/2017 03:23 AM, Jonathan Marquardt wrote:
1814> Both methods (putting apps into global dirs vs. putting them into home
1815> dirs)
1816> have their own advantages and disadvantages.
1817>
1818Jonathan - thanks. Other than automatically updating, what are the
1819advantages of installing to /home/user - or somewhere not root owned?
1820The other main disadvantage is, it makes TBB program files easily
1821accessible to malware, or anyone / thing w/ access to your machine,
1822after the user logs on.
1823
1824Yes - technically /home/user. There is a separate "/home" under System
1825Files, but if there's only one user acct, then it contains the same
1826folders as clicking /home/user. AFAIK, for single user acct setup, the
1827only things under "/home" are user files & settings. Most accessible
1828by the acct user w/o a PW.
1829
1830No, I don't mean "ordinary, non-malicious stuff" D/L through TBB. TBB
1831isn't 100% bullet proof - nor any other app. I mean malicious things
1832that could slip by, even via zero days. Zero days - maybe unlikely.
1833Other methods - apparently not terribly difficult.
1834
1835That's why I said, "So anything that makes it past basic defenses of the
1836browser, NoScript, etc. - would
1837generally have r/w/x permissions on most TBB files in /home(/user)."
1838I assumed that was clear it implied malware, or a malicious sites, or
1839adversary - say, trying to modify TBB program files, etc. Not ordinary
1840websites, following the rules.
1841
1842Again, IIUC, "malware" making it past browser & NoScript defenses and AV
1843- if using one, has far easier access to TBB program files than apps
1844installed to limited permissions directories. TBB files are less
1845protected than a normal browser installed from repositories, or even
1846installed manually to say, /opt.
1847That's the part I don't understand - why TorProject seems to encourage
1848lessening some of Linux security, rather than increasing it.
1849
1850Perhaps if Tor Project doesn't want to set up a PPA (and guard, monitor
1851it) - so TBB can auto-update, they should include a sort of "Tor / TBB
1852file checker" - to monitor for changed files that shouldn't change,
1853unless from updates.
1854Seems logical to create a PPA. They could / should check signatures -
1855automatically - when the updates / installs finish downloading from the
1856PPA, before installing.
1857
1858
1859From nima at torproject.org Thu Apr 13 02:34:00 2017
1860From: nima at torproject.org (Nima Fatemi)
1861Date: Thu, 13 Apr 2017 02:34:00 +0000
1862Subject: [tor-talk] torbrowser vs. twitter picture upload?
1863In-Reply-To: <4f31a5be-f65f-704f-bcc8-4066b1d57935@openmailbox.org>
1864References: <4f31a5be-f65f-704f-bcc8-4066b1d57935@openmailbox.org>
1865Message-ID: <d4a761b3-a797-fa98-9d60-6cdf1f9e3c7c@riseup.net>
1866
1867nusenu:
1868> Hi,
1869>
1870> everytime I try to upload a twitter profile picture the dialog with
1871> resize and zoom opens and after clicking apply I get "sucessfully uploaded"
1872> but the resulting picture "cannot be displayed because it contains errors".
1873>
1874> Did you upload your twitter profile picture with torbrowser without
1875> problems?
1876
1877I believe you need to allow running canvas, for that to work.
1878
1879--
1880Nima
18810X58C4B928A3E218F6 | @mrphs
1882
1883"I disapprove of what you say, but I will defend to the death your right
1884to say it" --Evelyn Beatrice Hall
1885
1886From lolint at protonmail.com Thu Apr 13 14:52:55 2017
1887From: lolint at protonmail.com (Lolint)
1888Date: Thu, 13 Apr 2017 10:52:55 -0400
1889Subject: [tor-talk] Suspicious rise in direct users connection from
1890 Israel (from ~9k to >100k)
1891In-Reply-To: <bad86a1a-9ec6-d045-b5a4-939e4da3e70a@riseup.net>
1892References: <1NzvbAs2thgiw3Y3rg_v-tPhVBBQq0jyDpEqkRLwoDoIXnSNHoWl1vu0rDySOG27xy06Y182DPBNzXnNfxjuQvjDE1ITEUhHDkk5RhPbxe8=@protonmail.com>
1893 <bad86a1a-9ec6-d045-b5a4-939e4da3e70a@riseup.net>
1894Message-ID: <I2ZC4aJ4820IQzlk5KylOZ-eQbv3Ys-D0CkwhIU95_F6BYtDqLaHDgdmgfsgB6cK2BpfS-o33G0ZCDAdX9UHamKtFYr-FRhIRBpmrO8uJN4=@protonmail.com>
1895
1896> This can mean that something is forcing rapid reconnection, right?
1897
1898Yes, as with the Turkey block (see Annex A):
1899
1900https://turkeyblocks.org/2016/12/18/tor-blocked-in-turkey-vpn-ban/
1901
1902From mirimir at riseup.net Thu Apr 13 15:03:34 2017
1903From: mirimir at riseup.net (Mirimir)
1904Date: Thu, 13 Apr 2017 09:03:34 -0600
1905Subject: [tor-talk] Suspicious rise in direct users connection from
1906 Israel (from ~9k to >100k)
1907In-Reply-To: <I2ZC4aJ4820IQzlk5KylOZ-eQbv3Ys-D0CkwhIU95_F6BYtDqLaHDgdmgfsgB6cK2BpfS-o33G0ZCDAdX9UHamKtFYr-FRhIRBpmrO8uJN4=@protonmail.com>
1908References: <1NzvbAs2thgiw3Y3rg_v-tPhVBBQq0jyDpEqkRLwoDoIXnSNHoWl1vu0rDySOG27xy06Y182DPBNzXnNfxjuQvjDE1ITEUhHDkk5RhPbxe8=@protonmail.com>
1909 <bad86a1a-9ec6-d045-b5a4-939e4da3e70a@riseup.net>
1910 <I2ZC4aJ4820IQzlk5KylOZ-eQbv3Ys-D0CkwhIU95_F6BYtDqLaHDgdmgfsgB6cK2BpfS-o33G0ZCDAdX9UHamKtFYr-FRhIRBpmrO8uJN4=@protonmail.com>
1911Message-ID: <f223d7bc-513a-792a-a437-b4528236f97e@riseup.net>
1912
1913On 04/13/2017 08:52 AM, Lolint wrote:
1914>> This can mean that something is forcing rapid reconnection, right?
1915>
1916> Yes, as with the Turkey block (see Annex A):
1917>
1918> https://turkeyblocks.org/2016/12/18/tor-blocked-in-turkey-vpn-ban/
1919
1920Right, that's what I was thinking (vaguely) of.
1921
1922https://metrics.torproject.org/userstats-relay-country.html?start=2016-11-01&end=2017-04-13&country=tr&events=off
1923
1924From grarpamp at gmail.com Thu Apr 13 18:00:23 2017
1925From: grarpamp at gmail.com (grarpamp)
1926Date: Thu, 13 Apr 2017 14:00:23 -0400
1927Subject: [tor-talk] Fwd: Russian FOSS activist arrested for extremist
1928 materials/Tor exit-node
1929In-Reply-To: <20170413085711.GA6762@stargrave.org>
1930References: <20170413085711.GA6762@stargrave.org>
1931Message-ID: <CAD2Ti2-cPKui1=_xOOzTLPb8ykkGr+60CrtdYkcrpqra=Ta--A@mail.gmail.com>
1932
1933---------- Forwarded message ----------
1934From: <stargrave at stargrave.org>
1935Date: Thu, Apr 13, 2017 at 4:57 AM
1936Subject: Russian FOSS activist arrested for extremist materials/Tor exit-node
1937To: cypherpunks at lists.cpunks.org
1938
1939
1940Dmitry Bogatov was arrested on the 6th of April: he became part of the
1941big penal case initiated by Russia’s Investigation Committee on
1942"incitations to mass riots" during the protest action that took place on
1943the 2nd of April in Moscow. According to the Investigation Committee,
1944Bogatov was publishing messages on the forum sysadmin.ru, inciting to
1945violent actions, for example, "he" was suggesting to bring to the Red
1946Square "bottles, fabric, gasoline, turpentine, foam plastic". According
1947to the Investigation, the experts had analyzed the text of these
1948messages and proved a "linguistic and psychological characteristics of
1949incitations to terrorism". However, Dmitry claims that he has nothing to
1950do with posting the incendiary messages.
1951
1952Dmitry Bogatov, 25 years old, teaches maths in MFUA (Moscow Finance and
1953Law University) was a free and open source software activist
1954(https://sinsekvu.github.io/pages/about.html).
1955Dmitry was administrating a Tor exit node
1956(https://atlas.torproject.org/#details/2402CD5A0D848D1DCA61EB708CC1FBD4364AB8AE)
1957from his house. In fact, the author of "incendiary messages" (called
1958"Airat Bashirov") was using Tor, and, by lack of chance, he used the ip
1959adress of Dmitry's exit node.
1960
1961Dmitry's lawyer, Alexei Teptsov, presented videos from surveillance
1962cameras, that proved that, during the moments when the "incendiary
1963messages" were posted, Dmitry was away from his computer. He was coming
1964back from a fitness center with his wife, Tatiana, a genetician, and
1965then went to a supermarket, where cameras were also working. Moreover,
1966"Airat Bashirov", the author of the provocative messages, continues to
1967post on sysadmin.ru, while Dmitry is under arrest. The last post was
1968seen on the forum on April 11.
1969
1970Dmitry will stay in pre-trial detention center until June 8 at least.
1971Now the Investigation is examining all his seized devices.
1972
1973Dmitry Bogatov aka KAction, Russian free software activist and
1974mathematics teacher at Moscow’s Finance and Law University, arrested in
1975Russia and charged with extremism.
1976
1977https://news.ycombinator.com/item?id=14096625
1978https://meduza.io/en/feature/2017/04/10/mathematics-teacher-accused-of-inciting-mass-riots-now-also-accused-of-supporting-terrorism-and-once-again-detained
1979https://geektimes.ru/post/287944/ (russian)
1980
1981From moritz at torservers.net Fri Apr 14 12:00:32 2017
1982From: moritz at torservers.net (Moritz Bartl)
1983Date: Fri, 14 Apr 2017 14:00:32 +0200
1984Subject: [tor-talk] Tor exit node operator arrested in Russia - a solidarity
1985 Tor Relay Challenge launched
1986Message-ID: <ebe7d814-a0ce-f8e6-5b01-6eea6d135109@torservers.net>
1987
1988Tor exit node operator arrested in Russia - a solidarity Tor Relay
1989Challenge launched
1990Fr 14 April 2017 by xeniax, serrObengbi, 1up
1991
1992https://blog.torservers.net/20170414/tor-exit-node-operator-arrested-in-russia-a-solidarity-tor-relay-challenge-launched.html
1993
1994Run a Tor relay or exit node in solidarity with Dmitry Bogatov!
1995
1996On April 12, Russia celebrated Yuriy Gagarin’s first flight in space. In
1997the meanwhile, a young Russian scientist, mathematician and FOSS
1998activist Dmitry Bogatov spends the Space Day in detention center. His
1999involvement in decentralized web projects, his interest to privacy and
2000anonymity, his activities as an administrator of tor exit node have
2001brought him under suspicion of the FSB. Accused of “incitation to
2002terrorism†because of some messages posted from his IP address, he will
2003stay detained till June 8 at least, and risks up to 7 years in prison if
2004the Investigation committee ‘proves’ his guilt.
2005
2006Though, the very nature of Bogatov case is a controversial one, as it
2007mixes technical and legal arguments, and makes necessary both strong
2008legal and technical expertise involved. Indeed, as a Tor exit node
2009operator, Dmitry does not have control and responsibility on the content
2010and traffic that passes through his node: it would be the same as
2011accusing someone who has a knife stolen from her house for the murder
2012committed with this knife by a stranger. In the past other exit node
2013operators in Russia had conversations with police. For example, Sergey
2014Matveev aka Stargrave been witnessing several times on the cases related
2015to the crimes commited under his IP adress (mostly, related to financial
2016fraud and hacking). Though, as Sergey states himself, he “has never been
2017accused, but was only a witnessâ€Â, as his cases were not related to
2018“extremism†On 2016-02-02 his devices were seized for 2 weeks for
2019inspection but he has never been detained, after explaining to the
2020police how Tor actually works.
2021
2022Russia counts 230.000 Tor users everyday and only 46 exit nodes. Tor is
2023extremely popular after a bunch of laws restricting usage of Internet
2024and enforcing the lawful interception procedures (obliging ISPs to store
2025all metadata for 3 years, and the traffic - even though encrypted - for
20266 months). However, the Bogatov case has had an influence on the
2027perception of Tor by ‘end users’. We’ve observed several group chats on
2028Russian most popular IM app, telegram, dedicated to anti-Putin protests:
2029these chats gather from +500 to +1500 users, and a lot of them use
2030different privacy enhancing tools. The Bogatov case was discussed
2031widely. These discussions have shown that users do not fully understand
2032the difference between running a relay and an exit node, and also
2033between relay operators and tor browser users. They perceive Tor as
2034being vulnerable to deanonymization. Misunderstanding, lack of feedback
2035from Tor community or ‘expert’ users underrepresented in these chat
2036rooms leads the discussion to a very dangerous direction: “we do not
2037care about hiding things, because the police will anyway find everything
2038about us - even Tor is not secureâ€Â.
2039
2040Tor activists have launched a flashmob - “Run a relay in solidarity with
2041Bogatovâ€Â. By April 13, in only 1 day, 18 new relays have been set up in
2042different countries, wearing names like freeBogatov and KActionLibre,
2043referring to Bogatov’s handle famous in FOSS and GnuPG forums. Bogatov’s
2044personal exit node that he had been running from his own house was also
2045wearing the ‘kaction’ name. It is the first flashmob that uses relays as
2046form of international solidarity and the nicknames of relays become a
2047means to transmit a message: Bogatov is part of the community, he is a
2048valuable, trusted person who has been contributing to various open
2049source projects and is recognized as a professional. Tor community also
2050works on technical proof/explanations to help users and Bogatov’s
2051lawyers to understand that, by the very architecture of Tor network,
2052Bogatov can not be responsible for the things he is accused of. He also
2053has alibi: he was absent when the messages were published, and video
2054recordings from surveillance cameras are in posession of Bogatov’s
2055lawyer. Another proof of Bogatov’s innocence is the fact that the user
2056continued posting incendiary messages after Bogatov has been arrested.
2057Also, the style of writing, the language, orthography do not correspond
2058to Bogatov’s style - this can be proven by psycholinguistic expertise.
2059However, FSB does not want to stop the process - they investigate the
2060version of “terrorismâ€Â, that would mean a very hard penalty for Dmitry,
2061and also does not correspond to technical, legal, psychological, social
2062situation. The judge also claimed to not trust Dmitry because of his
2063â€Âhigh skills in new technologies†that may potentially help him “erase
2064traces of his crimes†- to prove this weird hypothesis, the
2065Investigation Committee has withdrawn all the technical equipment from
2066Dmitry’s apartment - from USB drives to laptops, smartphones and cameras…
2067
2068If you can, run a relay or an exit node and give it a name that contains
2069Bogatov or KAction (Bogatov’s handle). By running more relays we
2070increase anonymity and also show solidarity and demonstrate the power of
2071shared responsibility.
2072Tor relays are publicly available for everyone to use
2073
2074The IP addresses of the Tor relays (middle relays and exit nodes) are
2075publicly available and can be freely used by the tor users. The fact
2076that relays are a publicly available resource doesn’t minimize or
2077threatens the anonymity of a tor user in fact it can be used as a proof
2078that an IP address of a server was a Tor at a given time.
2079
2080Currently running Tor relays are enumerated to Atlas, a web application
2081to learn about currently running Tor relays. In a similarly way the
2082ExoneraTor service maintains a database of IP addresses that have been
2083part of the Tor network. It answers the question whether there was a Tor
2084relay running on a given IP address on a given date. ExoneraTor may
2085store more than one IP address per relay if relays use a different IP
2086address for exiting to the Internet than for registering in the Tor
2087network, and it stores whether a relay permitted transit of Tor traffic
2088to the open Internet at that time. Exonerator is a web service that can
2089check if an IP address was a relay at a given time.
2090
2091A different type of relays; bridges are Tor relays that aren’t listed in
2092the public Tor directory. That means that ISPs or governments trying to
2093block access to the Tor network can’t simply block all bridges. Bridges
2094are useful a) for Tor users in oppressive regimes, and b) for people who
2095want an extra layer of security because they’re worried somebody will
2096recognize that it’s a public Tor relay IP address they’re contacting.
2097Further reading
2098
2099 What is a Tor relay
2100 The Legal FAQ for Tor Relay Operators
2101 How is Tor different from other proxies?
2102 What security protections does Tor provide?
2103 Interactive visualization that explains various Tor/non-Tor scenarios
2104
2105Short version
2106-------------
2107
2108Run a Tor relay or exit node in solidarity with Dmitry Bogatov!
2109
2110Tor activists launch a call to run relays and exit nodes in solidarity
2111with Dmitry Bogatov, a FOSS contributor, GnuPG and privacy advocate and
2112math teacher arrested and detained in Russia. By now 26 relays have been
2113set up in different countries.
2114
2115Bogatov will stay in detention till June 8 at least. He risks up to 7
2116years in prison as he is accused of having published messages with
2117incitations to terrorism. A user ‘Airat Bashirov’ was indeed posting a
2118number of messages inciting to organize mass rallies and protests, using
2119Bogatov’s home IP adress. However, as a Tor exit node operator, Bogatov
2120can not have access or be responsible for the content that passes by:
2121Tor’s technical architecture is in itself a proof of his innocence.
2122
2123As an active FOSS contributor, he also has a support from the peer
2124community and has a strong alibi - he was in the sport center and then
2125in the supermarket at the moment when the messages were published.
2126Moreover, after Bogatov’s arrest the same user continued posting
2127incendiary messages.
2128
2129If you can, run a tor relay or an exit node and give it a name that
2130contains Bogatov or KAction (Bogatov’s handle). By running more relays
2131we increase anonymity and also show solidarity and demonstrate the power
2132of shared responsibility.
2133
2134From mail at parckwart.de Fri Apr 14 16:46:08 2017
2135From: mail at parckwart.de (Jonathan Marquardt)
2136Date: Fri, 14 Apr 2017 18:46:08 +0200
2137Subject: [tor-talk] Tor Browser Linux_don't extract to root
2138In-Reply-To: <ac27d293-77e7-80cc-9915-f547132d74a9@gmx.com>
2139References: <3fc530c6-0efe-1ea7-4b22-29e738fd341e@gmx.com>
2140 <20170411084704.GA30993@parckwart.de>
2141 <0498ab06-a28c-87af-991e-1cf89d654bb0@gmx.com>
2142 <20170412082302.GA2897@parckwart.de>
2143 <ac27d293-77e7-80cc-9915-f547132d74a9@gmx.com>
2144Message-ID: <20170414164608.GK9830@parckwart.de>
2145
2146Look, if you have malicous software running on the system with normal user
2147priviliges, you are in big trouble anyway. There's so many things that
2148malicous software could do even if TBB was installed at a non-writable
2149location. Just as a simple example, malware could just change the location in
2150your TBB desktop and launcher links and still trick you into launching
2151malicous software. That's just a really silly example, but the point is that
2152once the malware is running, it is too late. Storing software in non-writable
2153locations is such a small useless mitigation technique in contrast to what
2154malware could do. I agree that putting TBB to /opt would give you a tiny bit
2155of extra security. But for the price of the user not being able to install
2156updates, that might just not be worth it. Having software being stored in
2157central directories is not much of a security feature.
2158
2159BTW: The user profile of TBB would still be located in the home directory. It
2160would have to be. Malware could insert malicous stuff in there too like custom
2161Tor circuit settings, browser setting, NoScript rules, Add-Ons... You get the
2162idea.
2163--
21644096R/1224DBD299A4F5F3
216547BC 7DE8 3D46 2E8B ED18 AA86 1224 DBD2 99A4 F5F3
2166-------------- next part --------------
2167A non-text attachment was scrubbed...
2168Name: signature.asc
2169Type: application/pgp-signature
2170Size: 819 bytes
2171Desc: Digital signature
2172URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170414/859729fc/attachment.sig>
2173
2174From beatthebastards at inbox.com Fri Apr 14 17:09:10 2017
2175From: beatthebastards at inbox.com (I)
2176Date: Fri, 14 Apr 2017 09:09:10 -0800
2177Subject: [tor-talk] Tor exit node operator arrested in Russia - a
2178 solidarity Tor Relay Challenge launched
2179In-Reply-To: <ebe7d814-a0ce-f8e6-5b01-6eea6d135109@torservers.net>
2180Message-ID: <315E9AD09A0.00000318beatthebastards@inbox.com>
2181
2182> Run a Tor relay or exit node in solidarity with Dmitry Bogatov!
2183
2184Do you mean run exits in Russia, near Russia or anywhere at all?
2185
2186Robert
2187
2188
2189
2190
2191
2192From moritz at torservers.net Fri Apr 14 20:45:33 2017
2193From: moritz at torservers.net (Moritz Bartl)
2194Date: Fri, 14 Apr 2017 22:45:33 +0200
2195Subject: [tor-talk] Tor exit node operator arrested in Russia - a
2196 solidarity Tor Relay Challenge launched
2197In-Reply-To: <315E9AD09A0.00000318beatthebastards@inbox.com>
2198References: <315E9AD09A0.00000318beatthebastards@inbox.com>
2199Message-ID: <d8a1b9ae-9f51-69cf-6731-ba6296d967b8@torservers.net>
2200
2201On 14.04.2017 19:09, I wrote:
2202>> Run a Tor relay or exit node in solidarity with Dmitry Bogatov!
2203> Do you mean run exits in Russia, near Russia or anywhere at all?
2204
2205The way I read it: Anywhere, in solidarity.
2206
2207--
2208Moritz Bartl
2209https://www.torservers.net/
2210
2211From joebtfsplk at gmx.com Sat Apr 15 00:48:53 2017
2212From: joebtfsplk at gmx.com (Joe Btfsplk)
2213Date: Fri, 14 Apr 2017 19:48:53 -0500
2214Subject: [tor-talk] Tor Browser Linux_don't extract to root
2215In-Reply-To: <20170414164608.GK9830@parckwart.de>
2216References: <3fc530c6-0efe-1ea7-4b22-29e738fd341e@gmx.com>
2217 <20170411084704.GA30993@parckwart.de>
2218 <0498ab06-a28c-87af-991e-1cf89d654bb0@gmx.com>
2219 <20170412082302.GA2897@parckwart.de>
2220 <ac27d293-77e7-80cc-9915-f547132d74a9@gmx.com>
2221 <20170414164608.GK9830@parckwart.de>
2222Message-ID: <672381f8-8b9f-c034-9fba-45125e7d3f21@gmx.com>
2223
2224On 04/14/2017 11:46 AM, Jonathan Marquardt wrote:
2225> Look, if you have malicous software running on the system with normal user
2226> priviliges, you are in big trouble anyway. There's so many things that
2227> malicous software could do even if TBB was installed at a non-writable
2228> location. Just as a simple example, malware could just change the location in
2229> your TBB desktop and launcher links and still trick you into launching
2230> malicous software. That's just a really silly example, but the point is that
2231> once the malware is running, it is too late. Storing software in non-writable
2232> locations is such a small useless mitigation technique in contrast to what
2233> malware could do. I agree that putting TBB to /opt would give you a tiny bit
2234> of extra security. But for the price of the user not being able to install
2235> updates, that might just not be worth it. Having software being stored in
2236> central directories is not much of a security feature.
2237>
2238> BTW: The user profile of TBB would still be located in the home directory. It
2239> would have to be. Malware could insert malicous stuff in there too like custom
2240> Tor circuit settings, browser setting, NoScript rules, Add-Ons... You get the
2241> idea.
2242>
2243You're correct - installing it to a "non-writable" location isn't
2244necessarily the end of days. The rest of your argument against
2245improving security & anonymity contradicts some long standing practices
2246of Tor Project and some basic concepts of Linux. If there was / is no
2247value of Linux installing most programs & libraries to root, they
2248wouldn't do it.
2249
2250100's of changes & methods that Tor Project makes w/ TBB, individually
2251have small impact on overall anonymity or security. Collectively they
2252make a huge difference. If installing TBB to root directories adds -
2253some - protection, it seems as valid as 100's of changes & fixes made
2254over the yrs.
2255
2256 Many trac feature changes & bug fixes to change minor TBB behaviors
2257have no more impact than installing TBB to more protected Linux
2258directories. Some had zero impact on anonymity or security.
2259
2260Tor Project could implement a script allowing auto-updating (or w/ a
2261click or 2), or they could use a PPA to install & update it.
2262
2263For yrs, there was such an Ubuntu PPA / repo & small script, to allow
2264installing & auto-updating of Mozilla Fx releases, when installed to
2265/usr or /opt, etc. Seems like Tor Project could handle that.
2266
2267
2268
2269From m.ajiao at tuta.io Sat Apr 15 03:03:45 2017
2270From: m.ajiao at tuta.io (m.ajiao at tuta.io)
2271Date: Sat, 15 Apr 2017 05:03:45 +0200 (CEST)
2272Subject: [tor-talk] Tor Browser crash
2273In-Reply-To: <01fb1539-290f-063f-a107-b705fdb8c945@resist.ca>
2274References: <KgmJdxS--3-0@tuta.io> <<KgmJdxS--3-0@tuta.io>>
2275 <01fb1539-290f-063f-a107-b705fdb8c945@resist.ca>
2276Message-ID: <KhjZEls--3-0@tuta.io>
2277
2278> the 'blocked object' menu within NoScript didn't appear until the page fully loaded and clicking the menu items in it did not crash the browser.
2279
2280Hello! The crash is not consistent, but when it happens, it appears to be a really strange crash. The same happened on some other webpages in which the "Blocked Objects" menu showed up. I just reproduced the crash again on Ubuntu 64bit. What I did is I repeatedly clicked on "Blocked Objects" right after a page was loaded. Tor browser window closed immediately. I cannot determine the reason of crash, and I did not see the crash reporter for segfault show up.
2281
2282
2283From joebtfsplk at gmx.com Sat Apr 15 05:46:39 2017
2284From: joebtfsplk at gmx.com (Joe Btfsplk)
2285Date: Sat, 15 Apr 2017 00:46:39 -0500
2286Subject: [tor-talk] Tor Browser crash
2287In-Reply-To: <KhjZEls--3-0@tuta.io>
2288References: <KgmJdxS--3-0@tuta.io> <<KgmJdxS--3-0@tuta.io>
2289 <01fb1539-290f-063f-a107-b705fdb8c945@resist.ca> <KhjZEls--3-0@tuta.io>
2290Message-ID: <9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>
2291
2292
2293
2294On 04/14/2017 10:03 PM, m.ajiao at tuta.io wrote:
2295>> the 'blocked object' menu within NoScript didn't appear until the page fully loaded and clicking the menu items in it did not crash the browser.
2296> Hello! The crash is not consistent, but when it happens, it appears to be a really strange crash. The same happened on some other webpages in which the "Blocked Objects" menu showed up. I just reproduced the crash again on Ubuntu 64bit. What I did is I repeatedly clicked on "Blocked Objects" right after a page was loaded. Tor browser window closed immediately. I cannot determine the reason of crash, and I did not see the crash reporter for segfault show up.
2297>
2298Could you give more info about which TBB version; which OS / version.
2299Any other addons / plugins besides TBB default ones?
2300
2301What exactly do you mean, "I repeatedly clicked on "Blocked Objects"
2302right after a page was loaded?"
2303What was blocked - if you know - and why do you repeatedly click on them?
2304
2305From m.ajiao at tuta.io Sun Apr 16 06:48:02 2017
2306From: m.ajiao at tuta.io (m.ajiao at tuta.io)
2307Date: Sun, 16 Apr 2017 08:48:02 +0200 (CEST)
2308Subject: [tor-talk] Tor Browser crash
2309In-Reply-To: <9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>
2310References: <KgmJdxS--3-0@tuta.io> <<KgmJdxS--3-0@tuta.io>>
2311 <01fb1539-290f-063f-a107-b705fdb8c945@resist.ca> <KhjZEls--3-0@tuta.io>
2312 <<KhjZEls--3-0@tuta.io>> <9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>
2313Message-ID: <KhpW9nH--3-0@tuta.io>
2314
2315Hello!
2316
2317I attached a screen recording showing Tor Browser crash.
2318
2319Strangely enough, I couldn't reproduce the crash in a virtual machine with Ubuntu 16.04 64-bit installed. I doubt the crash has something to do with screen resolution and the "Scale for menu and title bars" feature of Unity. (?)
2320
2321My display settings: Ubuntu 16.04 64-bit with Unity desktop environment. On a computer with HiDPI screen. Change the screen resolution to 3840x2160 (4k) resolution. Change "Scale for menu and title bars" to 2.5x
2322
23230:02 I selected a new circuit for that site.
23240:05 I clicked on the NoScript (S) icon and wait for page to reload. I did not click on any NoScript menu item at that moment.
23250:07 - 0:11 Still waiting for page to reload and waiting for the "Blocked object" menu item to appear. I did not click on any NoScript menu item at that moment.
23260:17 My cursor was on the "Blocked object" menu item. I started repeatedly clicking on this menu item.
23270:19 I clicked on the NoScript icon (S) to make the drop down menu disappear. I clicked on it again immediately to make the menu reappear.
23280:20 I moved my cursor onto the "Blocked object" menu item. This time, Tor browser window was gone after I clicked on the "Blocked object" menu item only once.
2329
2330> TBB version
23316.5.1 (based on Mozilla Firefox 45.8.0)
2332
2333> OS / version
2334Ubuntu 16.04 LTS (64-bit), default Unity desktop environment
2335
2336> addons / plugins
2337The default ones.
2338Extensions: HTTPS Everywhere, NoScript, TorButton, TorLauncher.
2339Plugins: None
2340Services: None
2341
2342> What was blocked
2343Downloadable fonts were blocked in "High" security level mode.
2344
2345> Why do you repeatedly click on them
2346When I had to temporarily allow scripts for that page, I clicked on the NoScript (S) icon and immediately selected the first menu item, but that page contains downloadable fonts, so the first menu item does not say "Temporarily allow all this page" but says "Blocked objects." So by mistake I clicked on the "Block objects" menu item. Tor Browser then crashed.
2347
2348Later when I wanted to reproduce the crash, I had to click on the menu item said "Blocked objects" many times in order to make Tor Browser crash.
2349
2350From m.ajiao at tuta.io Sun Apr 16 19:40:36 2017
2351From: m.ajiao at tuta.io (m.ajiao at tuta.io)
2352Date: Sun, 16 Apr 2017 21:40:36 +0200 (CEST)
2353Subject: [tor-talk] (Correction) Tor Browser crash
2354In-Reply-To: <KhpW9nH--3-0@tuta.io-Khs2qi3--3-0>
2355References: <KgmJdxS--3-0@tuta.io> <<KgmJdxS--3-0@tuta.io>>
2356 <01fb1539-290f-063f-a107-b705fdb8c945@resist.ca> <KhjZEls--3-0@tuta.io>
2357 <<KhjZEls--3-0@tuta.io>> <9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>
2358 <<9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>>
2359 <KhpW9nH--3-0@tuta.io-Khs2qi3--3-0>
2360Message-ID: <KhsGzy2--3-0@tuta.io>
2361
2362Hello!
2363
2364> I couldn't reproduce the crash in a virtual machine with Ubuntu 16.04 64-bit installed.
2365
2366I make a correction here: I just reproduced the crash in a virtual machine, but it took a few attempts to reproduce.
2367
2368Virtual machine OS: Ubuntu server 16.04 64-bit with lxde desktop environment.
2369TBB version: 6.5.1 with default plugins.
2370
2371Steps to reproduce:
2372Repeat the steps described in the screen recording.
2373After a few attempts, Tor Browser window was suddenly gone.
2374Click on the shortcut icon to start Tor Browser again. It does not say "Tor Browser is running."
2375
2376From m.ajiao at tuta.io Sun Apr 16 19:53:19 2017
2377From: m.ajiao at tuta.io (m.ajiao at tuta.io)
2378Date: Sun, 16 Apr 2017 21:53:19 +0200 (CEST)
2379Subject: [tor-talk] (Segmentation fault) Tor Browser crash
2380In-Reply-To: <KhsGzy2--3-0@tuta.io>
2381References: <KgmJdxS--3-0@tuta.io> <<KgmJdxS--3-0@tuta.io>>
2382 <01fb1539-290f-063f-a107-b705fdb8c945@resist.ca> <KhjZEls--3-0@tuta.io>
2383 <<KhjZEls--3-0@tuta.io>> <9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>
2384 <<9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>>
2385 <KhpW9nH--3-0@tuta.io-Khs2qi3--3-0> <KhsGzy2--3-0@tuta.io>
2386Message-ID: <KhsJu7g--3-0@tuta.io>
2387
2388I started Tor Browser with the `--debug` option. I reproduced the crash and Tor Browser logged a segmentation fault. Here is the log from bootstrap to crash. IP addresses and timestamps are redacted.
2389
2390*** [notice] Bootstrapped 100%: Done
2391*** [notice] New control connection opened from 127.0.0.1.
2392*** [notice] New control connection opened from 127.0.0.1.
2393149237*******   addons.productaddons   ERROR   Request failed certificate checks: [Exception... "SSL is required and URI scheme is not https." nsresult: "0x8000ffff (NS_ERROR_UNEXPECTED)" location: "JS frame :: resource://gre/modules/CertUtils.jsm :: checkCert :: line 145" data: no]
2394*** [notice] Owning controller connection has closed -- exiting now.
2395*** [notice] Catching signal TERM, exiting cleanly.
2396./Browser/start-tor-browser: line 368: 2301 Segmentation fault     (core dumped) TOR_CONTROL_PASSWD=${TOR_CONTROL_PASSWD} ./firefox --class "Tor Browser" -profile TorBrowser/Data/Browser/profile.default "${@}" < /dev/null
2397
2398
2399From joebtfsplk at gmx.com Mon Apr 17 19:26:31 2017
2400From: joebtfsplk at gmx.com (Joe Btfsplk)
2401Date: Mon, 17 Apr 2017 14:26:31 -0500
2402Subject: [tor-talk] (Correction) Tor Browser crash
2403In-Reply-To: <KhsGzy2--3-0@tuta.io>
2404References: <KgmJdxS--3-0@tuta.io> <<KgmJdxS--3-0@tuta.io>
2405 <01fb1539-290f-063f-a107-b705fdb8c945@resist.ca> <KhjZEls--3-0@tuta.io>
2406 <<KhjZEls--3-0@tuta.io> <9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>
2407 <<9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>
2408 <KhpW9nH--3-0@tuta.io-Khs2qi3--3-0> <KhsGzy2--3-0@tuta.io>
2409Message-ID: <f00c46d6-cb73-055c-b23c-34111be8e884@gmx.com>
2410
2411On 04/16/2017 02:40 PM, m.ajiao at tuta.io wrote:
2412> Hello!
2413>
2414>> I couldn't reproduce the crash in a virtual machine with Ubuntu 16.04 64-bit installed.
2415> I make a correction here: I just reproduced the crash in a virtual machine, but it took a few attempts to reproduce.
2416>
2417> Virtual machine OS: Ubuntu server 16.04 64-bit with lxde desktop environment.
2418> TBB version: 6.5.1 with default plugins.
2419>
2420> Steps to reproduce:
2421> Repeat the steps described in the screen recording.
2422> After a few attempts, Tor Browser window was suddenly gone.
2423> Click on the shortcut icon to start Tor Browser again. It does not say "Tor Browser is running."
2424I'm not an expert on meanings of all TBB debug logs. Someone else may
2425fully understand the following error:
2426
2427149237******* addons.productaddons ERROR Request failed certificate checks: [Exception... "SSL is required and URI scheme is not https." nsresult: "0x8000ffff (NS_ERROR_UNEXPECTED)" location: "JS frame ::resource://gre/modules/CertUtils.jsm :: checkCert :: line 145" data: no]
2428
2429Right now, TBB won't let me into my security settings. IIRC, for highest level, it says something like some pages may break or have problems. IIRC, JS is blocked in highest level. That alone will prevent many pages from loading - at all.
2430
2431As for TBB closing - it may be a bug (or not) when you repeatedly click on the blocked object place holder.
2432In general, repeatedly clicking error popups & many other items can cause problems in any browser. Clicking them 10x won't help.
2433
2434Does it show you *which* objects were blocked? Generally, when the blocked scripts or objects UI is displayed, you read it for info purposes & close it by clicking anywhere else on the page.
2435
2436Most pages - or the browser - don't crash just because fonts aren't allowed to D/L. Anything's possible.
2437Does this crashing happen when loading specific site(s), or just at TBB startup & home page (if showing TBB home page)? If it's only a couple of sites, likely a problem w/ them.
2438
2439>HiDPI screen. Change the screen resolution to 3840x2160 (4k) resolution. Change "Scale for menu and title bars" to >2.5x
2440Do you have a 3840x2160 screen? I have no idea if TBB handles this - may be fine?
2441
2442>When I had to temporarily allow scripts for that page, I clicked on the NoScript (S) icon and immediately selected >the first menu item, but that page contains downloadable fonts, so the first menu item does not say "Temporarily >allow all this page" but says "Blocked objects." So by mistake I clicked on the "Block objects" menu item. Tor >Browser then crashed.
2443"Blocked objects," not "blocked scripts?" There's a difference.
2444
2445OK, so NoScript showed you what you requested (by clicking) - I guess? Did it actually show a list of blocked objects or scripts, or did it hang producing that UI? If NS didn't show it, something's blocking - I assume. If so, sounds like a question for NoScript support (forum).
2446
2447
2448> "Later when I wanted to reproduce the crash, I had to click on the menu item [which] said "Blocked objects" many times in order to make Tor Browser crash."
2449
2450Refer to last question. But, why are you clicking NS menu popup item *so* many times? I see no point, but maybe you've left something out.
2451
2452Does blocked objects / scripts UI ever display correctly? (Y / N).
2453What happens if you wait (say 30 - 60 sec) for blocked objects UI to display?
2454If "blocked objects UI" isn't displaying or hangs or won't close, I'd post on NoScript forum.
2455
2456Do you have checked in NS options, Notifications > blocked SCRIPTS to hide notices after x seconds?
2457
2458--
2459
2460
2461
2462From m.ajiao at tuta.io Tue Apr 18 01:28:12 2017
2463From: m.ajiao at tuta.io (m.ajiao at tuta.io)
2464Date: Tue, 18 Apr 2017 03:28:12 +0200 (CEST)
2465Subject: [tor-talk] (Correction) Tor Browser crash
2466In-Reply-To: <f00c46d6-cb73-055c-b23c-34111be8e884@gmx.com>
2467References: <KgmJdxS--3-0@tuta.io> <<KgmJdxS--3-0@tuta.io>>
2468 <01fb1539-290f-063f-a107-b705fdb8c945@resist.ca> <KhjZEls--3-0@tuta.io>
2469 <<KhjZEls--3-0@tuta.io>> <9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>
2470 <<9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>>
2471 <KhpW9nH--3-0@tuta.io-Khs2qi3--3-0> <KhsGzy2--3-0@tuta.io>
2472 <<KhsGzy2--3-0@tuta.io>> <f00c46d6-cb73-055c-b23c-34111be8e884@gmx.com>
2473Message-ID: <Khyf8Y6--3-0@tuta.io>
2474
2475Hello! I reproduced the crash without clicking on the menu items fast. Generally, I found that if I click on the "Blocked Objects" menu item when the sub menu's _shadow effect_ is being drawn, Tor browser crashes.
2476
2477> In general, repeatedly clicking error popups & many other items can cause problems in any browser. Clicking them 10x won't help.
2478
2479I don't have to click on it frequently to make Tor browser crash. If I click when the _shadow_ of the menu is being drawn, Tor browser crashes.
2480
2481> Does it show you *which* objects were blocked? Most pages - or the browser - don't crash just because fonts aren't allowed to D/L. Anything's possible.
2482
2483I don't think this is really related to this crash. I think it's not the problem of the Medium page, but it might be something wrong with NoScript's UI, but anyway it is shown in the recording.
2484
2485Blocked Objects -
2486.   (A) Temporarily allow FONT at https://medium.com
2487.   - - - - - - - - - -
2488.   (S) Temporarily allow *@https://medium.com
2489.   (S) Temporarily allow *@https://medium.com (https://medium.com)
2490.   (A) Temporarily allow FONT at https://medium.com (https://medium.com)
2491.   (A) Temporarily allow FONT at https://medium.com
2492Temporarily allow all this page
2493Allow Scripts Globally (dangerous)
2494Options...
2495About NoScript 5.0.2...
2496
2497> Do you have a 3840x2160 screen? I have no idea if TBB handles this - may be fine?
2498
2499Yes, I have a 3840x2160 screen. The shadow takes a while to draw on a big screen. (But it also crashes on the unfancy LXDE running on 640x480 resolution)
2500
2501> "Blocked objects," not "blocked scripts?" There's a difference.
2502
2503"Blocked objects" menu appears. Both scripts and fonts were blocked.
2504
2505
2506From joebtfsplk at gmx.com Tue Apr 18 02:03:09 2017
2507From: joebtfsplk at gmx.com (Joe Btfsplk)
2508Date: Mon, 17 Apr 2017 21:03:09 -0500
2509Subject: [tor-talk] (Correction) Tor Browser crash
2510In-Reply-To: <Khyf8Y6--3-0@tuta.io>
2511References: <KgmJdxS--3-0@tuta.io> <<KgmJdxS--3-0@tuta.io>
2512 <01fb1539-290f-063f-a107-b705fdb8c945@resist.ca> <KhjZEls--3-0@tuta.io>
2513 <<KhjZEls--3-0@tuta.io> <9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>
2514 <<9da39c75-c147-047a-e32d-8cbcaf7bcda4@gmx.com>
2515 <KhpW9nH--3-0@tuta.io-Khs2qi3--3-0> <KhsGzy2--3-0@tuta.io>
2516 <<KhsGzy2--3-0@tuta.io> <f00c46d6-cb73-055c-b23c-34111be8e884@gmx.com>
2517 <Khyf8Y6--3-0@tuta.io>
2518Message-ID: <51b51ddd-f335-d116-1675-a4e897daad5b@gmx.com>
2519
2520
2521> I don't think this is really related to this crash. I think it's not the problem of the Medium page, but it might be something wrong with NoScript's UI, but anyway it is shown in the recording.
2522>
2523> Blocked Objects -
2524> . (A) Temporarily allow FONT at https://medium.com
2525> . - - - - - - - - - -
2526> . (S) Temporarily allow *@https://medium.com
2527> . (S) Temporarily allow *@https://medium.com (https://medium.com)
2528> . (A) Temporarily allow FONT at https://medium.com (https://medium.com)
2529> . (A) Temporarily allow FONT at https://medium.com
2530> Temporarily allow all this page
2531> Allow Scripts Globally (dangerous)
2532> Options...
2533> About NoScript 5.0.2...
2534>
2535>> Do you have a 3840x2160 screen? I have no idea if TBB handles this - may be fine?
2536> Yes, I have a 3840x2160 screen. The shadow takes a while to draw on a big screen. (But it also crashes on the unfancy LXDE running on 640x480 resolution)
2537>
2538>> "Blocked objects," not "blocked scripts?" There's a difference.
2539> "Blocked objects" menu appears. Both scripts and fonts were blocked.
2540>
2541Do you have a discrete GPU card, and are you using the mfg's proprietary
2542drivers? Some (like Nvidia - maybe others) have GPU problems, causing
2543crashes, freezes, black screens - if use Linux open source video drivers.
2544
2545But, it could be a bug - some graphic function in which ever desktop
2546you're using (you mentioned shadows); possibly NoScript and / or TBB
2547can't handle it. Have you tried temporarily disabling NS to make sure
2548nothing else can cause the same issue. Though might take a while to
2549rule out "everything" else. Folks in NS forum / support may already
2550know about it. They're usually pretty good at looking into things.
2551You'll have to give full details of your OS flavor, version, etc.
2552
2553From art at torproject.org Thu Apr 20 13:40:48 2017
2554From: art at torproject.org (=?UTF-8?Q?Arturo_Filast=c3=b2?=)
2555Date: Thu, 20 Apr 2017 13:40:48 +0000
2556Subject: [tor-talk] The Onion Dress, a Tor inspired dress
2557Message-ID: <6c0b697c-3601-19e1-0206-b7de78425f10@torproject.org>
2558
2559Somebody made a dress inspired by hacker culture and Tor specifically.
2560
2561It's called the "Onion Dress" and it's made by fashion designer Gabriela
2562Belisario, you can see it here:
2563
2564https://www.instagram.com/p/BSI7K62g1nV/
2565
2566~ Arturo
2567
2568
2569
2570From secure-hosting at tutanota.com Thu Apr 20 14:34:05 2017
2571From: secure-hosting at tutanota.com (secure-hosting at tutanota.com)
2572Date: Thu, 20 Apr 2017 16:34:05 +0200 (CEST)
2573Subject: [tor-talk] Enabling udp packets over tor via pluggable transport
2574Message-ID: <KiAmAyn--3-0@tutanota.com>
2575
2576If I understand correctly, pluggable transports (PTs) sit behind the client and in front of the server, in other words between the tor client and the tor server. Since the client only sends TCP, there is no way to enable UDP transmission using a PT alone.
2577
2578However, what if there was a PT, lets call it that simply forwarded all packets without alteration, but simply signalled that tcp encapsulated udp packets may be transmitted and unencapsulated by a seconf program sitting in front of the tor client and behind the tor server, on otherwords wrapping the connection.
2579
2580It is already trivial to tunnel udp over tcp (I do it all the time using a standard openvpn client and server in tcp mode proxied over tor). Since tor handles all the encryption, any udp over tcp tunneling protocol, even clear text ones, could be used.
2581
2582Questions:
25831. Is it possible that a PT which does no transformations would even have to be a program? Couldn't the client packets just be sent out directly or forwarded via iptables?
2584
25852. Would a PT that forwards unaltered packets and merely signals that a certain type of tcp encapsulation is expected by the server violate the PT spec? The intra-tor traffic would still look the same as the transformation happens before entering and after leaving tor.
2586
25873. This seems like a too easy way to get udp transmisssion over tor and I suspect there issomething I'm missing. So, why wouldn't this work?
2588
2589From flipchan at riseup.net Thu Apr 20 17:17:49 2017
2590From: flipchan at riseup.net (flipchan)
2591Date: Thu, 20 Apr 2017 17:17:49 +0000
2592Subject: [tor-talk] The Onion Dress, a Tor inspired dress
2593In-Reply-To: <6c0b697c-3601-19e1-0206-b7de78425f10@torproject.org>
2594References: <6c0b697c-3601-19e1-0206-b7de78425f10@torproject.org>
2595Message-ID: <EEB25EC7-8318-4B10-9225-76A92DFE9432@riseup.net>
2596
2597Cool stuff
2598
2599On April 20, 2017 3:40:48 PM GMT+02:00, "Arturo Filastò" <art at torproject.org> wrote:
2600>Somebody made a dress inspired by hacker culture and Tor specifically.
2601>
2602>It's called the "Onion Dress" and it's made by fashion designer
2603>Gabriela
2604>Belisario, you can see it here:
2605>
2606>https://www.instagram.com/p/BSI7K62g1nV/
2607>
2608>~ Arturo
2609>
2610>
2611>--
2612>tor-talk mailing list - tor-talk at lists.torproject.org
2613>To unsubscribe or change other settings go to
2614>https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
2615
2616--
2617Sent from my Android device with K-9 Mail. Please excuse my brevity.
2618
2619From fusionman133 at gmx.de Thu Apr 20 17:45:00 2017
2620From: fusionman133 at gmx.de (Andri Effendi)
2621Date: Thu, 20 Apr 2017 17:45:00 +0000
2622Subject: [tor-talk] Regarding latest TOR Browser update 652
2623Message-ID: <58F8F3CC.20808@gmx.de>
2624
2625Hi Tor community,
2626
2627Thanks for the updates allowing Twitter.
2628
2629It really helps, since I was using Tor for just about everything except
2630twitter.
2631
2632I have noticed though that at least on the Mac version of Tor that after
2633the update "6.5.2" the tor browser window is very laggy and I don't mean
2634the page loading, I mean the system responsiveness and the rainbow spiral.
2635
2636I know it is not my Machine because it passed a clean bill of health
2637after thorough diagnostics.
2638
2639My machine handles everything else alright, just not Tor after the last
2640update.
2641
2642Please let me know if any other mac users are experiencing these issues
2643since the update.
2644
2645
2646
2647Kind Regards,
2648--
2649Andri Effendi <fusionman133 at gmx.de>
2650Organiser of The Free Software Movement in Sydney
2651www.freesoftware.org.au/sydney/
2652
2653GPG fingerprint: 8438 138D ECDA 05E0 591F F2B4 4721 0F03 AC24 DF73
2654Confidentiality cannot be guaranteed on emails sent or received unencrypted.
2655
2656-------------- next part --------------
2657A non-text attachment was scrubbed...
2658Name: signature.asc
2659Type: application/pgp-signature
2660Size: 801 bytes
2661Desc: OpenPGP digital signature
2662URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170420/93300f8f/attachment.sig>
2663
2664From alec.muffett at gmail.com Fri Apr 21 22:35:45 2017
2665From: alec.muffett at gmail.com (Alec Muffett)
2666Date: Fri, 21 Apr 2017 23:35:45 +0100
2667Subject: [tor-talk] Shodan & Hidden Services
2668Message-ID: <CAFWeb9LajGLShK=34FBjTVZoe10F5HuPskG9KUUuOy-660BjOQ@mail.gmail.com>
2669
2670So it turns out that Shodan - a kind of multi-protocol Google-alike search
2671engine for metadata and protocol headers - has indexed a bunch of Onion
2672sites which were configured to leak their (onion) hostnames into protocol
2673headers.
2674
2675https://www.shodan.io/search?query=.onion%2F
2676
2677This is... tragic, perhaps, and avoidable to varying extents (eg: my
2678proposed setup process*) but the situation also possibly presents an
2679opportunity for anyone who has identified addresses of sibyl/other naughty
2680tor-infra-impacting activity, to maybe check some logs and see if any
2681badly-configured onions were also hosted on the same addresses/subnets, get
2682some concept of what hidden services were hosted there, and what they may
2683have been up to?
2684
2685 - alec
2686
2687*
2688https://github.com/alecmuffett/the-onion-diaries/blob/master/basic-production-onion-server.md
2689
2690--
2691http://dropsafe.crypticide.com/aboutalecm
2692
2693From scott at scottainslie.me.uk Sat Apr 22 12:30:00 2017
2694From: scott at scottainslie.me.uk (Scott Ainslie)
2695Date: Sat, 22 Apr 2017 12:30:00 +0000
2696Subject: [tor-talk] tor-talk Digest, Vol 75, Issue 19
2697In-Reply-To: <mailman.9.1492862405.6382.tor-talk@lists.torproject.org>
2698References: <mailman.9.1492862405.6382.tor-talk@lists.torproject.org>
2699Message-ID: <4fc3ea8f-a0a9-77a5-1fce-6b6f77bf0256@scottainslie.me.uk>
2700
2701-----BEGIN PGP SIGNED MESSAGE-----
2702Hash: SHA512
2703
2704Hello,
2705
2706Censys also does it too. I'm unsurprised that it's still a technique
2707that can disclose co-hosting and other useful artifacts in such an
2708efficient manner.
2709
2710Censys also has a REST API for access to its aggregated datasets
2711although it should be said that the datasets are ephemeral.
2712- --
2713Scott Ainslie <scott at scottainslie.me.uk>
2714-----BEGIN PGP SIGNATURE-----
2715
2716iQIcBAEBCgAGBQJY+0zTAAoJEM18vpeSzTzCNYMQAJordisq1W6g/1jZ4C/4cIy4
2717rBsrEjJCXr9VHZrRnJY1dkYlrOJGZ+wrHR215Apb+Ku1Y8hQwC2roBoU/3SCVVhx
27180d6j7qW76W1y/QgSLDzB4zOot1xmFRsvn5Wi4SVwTa8WpUTcV5b1IpjmHksNOLHx
27191bxDMK4yX79ke+tSQYGDzOPd3g3wV829TizUeTaRIKRDaHYYdv7iWhA8SlXtijzN
2720rY8PphE2ukWPbGS3rcB52uoEOLR+CoOR73RN3chbn7UAJYNsSC+EmVMyIG0GBr4x
272164dPPpTcho+9RRrOqKE6BeySacPpDC3m9HafUa6J2WyKK5esAtxQ3cAXaWT/NGyO
2722a4L0doXiLggelzk38DzjW/YXKy0RIWQUcN7U90iqrF4Nvjz7sXHj8L5C+KS6I3vo
2723h3wUDeLUhNXhaDHswOINbmJ4RMarwzctkI2hxPn32jf8WJFJ2w9thShw3l3E3Aab
2724FTT4RCW+nDvx2t4FUd8sr6fErHV9Tvnn9e6Vn/O6rBAodbkASVCsGP3S32H0ninO
27254ZmVAZd6b25hNsaDVUU3VkB9e6c3/LoSgG3v14h1Hcyq0cuZ55cjXPL6j5SniqRN
2726/9aAfPp3mV1a+losuhqO04ZFZsxSy2IO7lZeGPAkOUpEOGexdiMRuzd6iE4gCpF5
2727Ar2k9ce2oX1mHFbWgWzu
2728=SIHT
2729-----END PGP SIGNATURE-----
2730
2731From jon.tullett at gmail.com Mon Apr 24 08:03:58 2017
2732From: jon.tullett at gmail.com (Jon Tullett)
2733Date: Mon, 24 Apr 2017 10:03:58 +0200
2734Subject: [tor-talk] Shodan & Hidden Services
2735In-Reply-To: <CAFWeb9LajGLShK=34FBjTVZoe10F5HuPskG9KUUuOy-660BjOQ@mail.gmail.com>
2736References: <CAFWeb9LajGLShK=34FBjTVZoe10F5HuPskG9KUUuOy-660BjOQ@mail.gmail.com>
2737Message-ID: <CAPkfgVY1GRj_V2T4ueLcV8Ac5M40GGUbSOTusV8cafQv2F7Tjg@mail.gmail.com>
2738
2739On 22 April 2017 at 00:35, Alec Muffett <alec.muffett at gmail.com> wrote:
2740> So it turns out that Shodan - a kind of multi-protocol Google-alike search
2741> engine for metadata and protocol headers - has indexed a bunch of Onion
2742> sites which were configured to leak their (onion) hostnames into protocol
2743> headers.
2744
2745Interesting. What can you do with that? Can you tie them to specific
2746hidden services?
2747
2748-J
2749
2750From alec.muffett at gmail.com Mon Apr 24 08:33:26 2017
2751From: alec.muffett at gmail.com (Alec Muffett)
2752Date: Mon, 24 Apr 2017 09:33:26 +0100
2753Subject: [tor-talk] Shodan & Hidden Services
2754In-Reply-To: <CAPkfgVY1GRj_V2T4ueLcV8Ac5M40GGUbSOTusV8cafQv2F7Tjg@mail.gmail.com>
2755References: <CAFWeb9LajGLShK=34FBjTVZoe10F5HuPskG9KUUuOy-660BjOQ@mail.gmail.com>
2756 <CAPkfgVY1GRj_V2T4ueLcV8Ac5M40GGUbSOTusV8cafQv2F7Tjg@mail.gmail.com>
2757Message-ID: <CAFWeb9+U4-=Eb3pM5y0xSkMa0QSKD1fOXWBhtRpcOWWPrrN4aA@mail.gmail.com>
2758
2759On 24 April 2017 at 09:03, Jon Tullett <jon.tullett at gmail.com> wrote:
2760
2761>
2762> Interesting. What can you do with that? Can you tie them to specific
2763> hidden services?
2764>
2765
2766Sometimes. See sample results in my Twitter thread:
2767
2768https://twitter.com/AlecMuffett/status/855542397165502464
2769
2770-a
2771
2772--
2773http://dropsafe.crypticide.com/aboutalecm
2774
2775From unpublished at wp.pl Mon Apr 24 10:16:23 2017
2776From: unpublished at wp.pl (unpublished)
2777Date: Mon, 24 Apr 2017 12:16:23 +0200
2778Subject: [tor-talk] TOR problems - seriously PLEASE HELP ME!
2779Message-ID: <2D9C0BCAAC08494483B7701FD694DB16@ARSSRV18RL>
2780
2781Hello,
2782
27831. Many web pages display information that I do not support "TOR
2784connections"?
27852. How to increase (amazon) the number of relay nodes? Because standard
2786only two redirect point?
27873. How to change the end node of the country (eg country from which I am
2788POLAND)?
2789
2790I'm using Windows 7. My provender blocks TOR connections, works only with
2791the "amazon" bridge.
2792
2793Thank you very much for your help, as no one is able to provide me with
2794answers to these questions. Only YOU as authors can do it! PLEASE HELP ME.
2795
2796Sincerely
2797
2798
2799From mail at parckwart.de Mon Apr 24 10:30:56 2017
2800From: mail at parckwart.de (Jonathan Marquardt)
2801Date: Mon, 24 Apr 2017 12:30:56 +0200
2802Subject: [tor-talk] TOR problems - seriously PLEASE HELP ME!
2803In-Reply-To: <2D9C0BCAAC08494483B7701FD694DB16@ARSSRV18RL>
2804References: <2D9C0BCAAC08494483B7701FD694DB16@ARSSRV18RL>
2805Message-ID: <20170424103056.GA5577@parckwart.de>
2806
2807On Mon, Apr 24, 2017 at 12:16:23PM +0200, unpublished wrote:
2808> 1. Many web pages display information that I do not support "TOR
2809> connections"?
2810
2811Not sure, what you mean here. Perhaps THEY don't support (i.e. block)
2812connections from Tor users, because they are afraid of spam or other stupid
2813reasons. Nothing you can really do here. Websites blocking Tor is a huge
2814problem.
2815
2816> 2. How to increase (amazon) the number of relay nodes? Because standard
2817> only two redirect point?
2818
2819There are always three nodes. The amazon node should be your guard relay
2820(where you enter the Tor network). Then there are two relays after that. There
2821isn't really any way to change that. Three hops should be sufficient for
2822decent anonymity, no real need to worry here.
2823
2824> 3. How to change the end node of the country (eg country from which I am
2825> POLAND)?
2826
2827Here's a simple guide on how to do that:
2828http://www.wikihow.com/Set-a-Specific-Country-in-a-Tor-Browser
2829--
28304096R/1224DBD299A4F5F3
283147BC 7DE8 3D46 2E8B ED18 AA86 1224 DBD2 99A4 F5F3
2832-------------- next part --------------
2833A non-text attachment was scrubbed...
2834Name: signature.asc
2835Type: application/pgp-signature
2836Size: 819 bytes
2837Desc: Digital signature
2838URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170424/2ad8d9e6/attachment.sig>
2839
2840From mail at parckwart.de Mon Apr 24 10:37:09 2017
2841From: mail at parckwart.de (Jonathan Marquardt)
2842Date: Mon, 24 Apr 2017 12:37:09 +0200
2843Subject: [tor-talk] TOR problems - seriously PLEASE HELP ME!
2844In-Reply-To: <2D9C0BCAAC08494483B7701FD694DB16@ARSSRV18RL>
2845References: <2D9C0BCAAC08494483B7701FD694DB16@ARSSRV18RL>
2846Message-ID: <20170424103709.GB5577@parckwart.de>
2847
2848By the way: Please don't cross-post across multiple mailing lists. Because I
2849didn't notice it, you just made me spam these lists when replying to you.
2850Sending to tor-talk would have been enough.
2851--
28524096R/1224DBD299A4F5F3
285347BC 7DE8 3D46 2E8B ED18 AA86 1224 DBD2 99A4 F5F3
2854-------------- next part --------------
2855A non-text attachment was scrubbed...
2856Name: signature.asc
2857Type: application/pgp-signature
2858Size: 819 bytes
2859Desc: Digital signature
2860URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170424/f7520ba8/attachment.sig>
2861
2862From jon.tullett at gmail.com Mon Apr 24 10:54:32 2017
2863From: jon.tullett at gmail.com (Jon Tullett)
2864Date: Mon, 24 Apr 2017 12:54:32 +0200
2865Subject: [tor-talk] Shodan & Hidden Services
2866In-Reply-To: <CAFWeb9+U4-=Eb3pM5y0xSkMa0QSKD1fOXWBhtRpcOWWPrrN4aA@mail.gmail.com>
2867References: <CAFWeb9LajGLShK=34FBjTVZoe10F5HuPskG9KUUuOy-660BjOQ@mail.gmail.com>
2868 <CAPkfgVY1GRj_V2T4ueLcV8Ac5M40GGUbSOTusV8cafQv2F7Tjg@mail.gmail.com>
2869 <CAFWeb9+U4-=Eb3pM5y0xSkMa0QSKD1fOXWBhtRpcOWWPrrN4aA@mail.gmail.com>
2870Message-ID: <CAPkfgVbz6G7MXv7arNtPVV+H4+r8Rjf1aSTdckBM7o6QT5M_Hw@mail.gmail.com>
2871
2872On 24 April 2017 at 10:33, Alec Muffett <alec.muffett at gmail.com> wrote:
2873> On 24 April 2017 at 09:03, Jon Tullett <jon.tullett at gmail.com> wrote:
2874>
2875>>
2876>> Interesting. What can you do with that? Can you tie them to specific
2877>> hidden services?
2878>>
2879>
2880> Sometimes. See sample results in my Twitter thread:
2881>
2882> https://twitter.com/AlecMuffett/status/855542397165502464
2883>
2884
2885Oops! At least it looks like a fairly small population of people
2886making that particular mistake.
2887
2888-J
2889
2890From gk at torproject.org Mon Apr 24 11:26:00 2017
2891From: gk at torproject.org (Georg Koppen)
2892Date: Mon, 24 Apr 2017 11:26:00 +0000
2893Subject: [tor-talk] Regarding latest TOR Browser update 652
2894In-Reply-To: <58F8F3CC.20808@gmx.de>
2895References: <58F8F3CC.20808@gmx.de>
2896Message-ID: <23614fe5-a637-fb00-a6ce-23185e1eb900@torproject.org>
2897
2898Andri Effendi:
2899> Hi Tor community,
2900>
2901> Thanks for the updates allowing Twitter.
2902>
2903> It really helps, since I was using Tor for just about everything except
2904> twitter.
2905>
2906> I have noticed though that at least on the Mac version of Tor that after
2907> the update "6.5.2" the tor browser window is very laggy and I don't mean
2908> the page loading, I mean the system responsiveness and the rainbow spiral.
2909>
2910> I know it is not my Machine because it passed a clean bill of health
2911> after thorough diagnostics.
2912>
2913> My machine handles everything else alright, just not Tor after the last
2914> update.
2915>
2916> Please let me know if any other mac users are experiencing these issues
2917> since the update.
2918
2919You've been the only one so far. So, not sure what is going on. You
2920could test with an old 6.5.1 to check whether it is really the update to
29216.5.2 that caused this:
2922https://archive.torproject.org/tor-package-archive/torbrowser/6.5.1/
2923
2924Georg
2925
2926
2927-------------- next part --------------
2928A non-text attachment was scrubbed...
2929Name: signature.asc
2930Type: application/pgp-signature
2931Size: 833 bytes
2932Desc: OpenPGP digital signature
2933URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170424/6c9344e4/attachment.sig>
2934
2935From unpublished at wp.pl Tue Apr 25 00:29:10 2017
2936From: unpublished at wp.pl (unpublished)
2937Date: Tue, 25 Apr 2017 02:29:10 +0200
2938Subject: [tor-talk] Shodan & Hidden Services
2939In-Reply-To: <CAPkfgVbz6G7MXv7arNtPVV+H4+r8Rjf1aSTdckBM7o6QT5M_Hw@mail.gmail.com>
2940References: <CAFWeb9LajGLShK=34FBjTVZoe10F5HuPskG9KUUuOy-660BjOQ@mail.gmail.com>
2941 <CAPkfgVY1GRj_V2T4ueLcV8Ac5M40GGUbSOTusV8cafQv2F7Tjg@mail.gmail.com>
2942 <CAFWeb9+U4-=Eb3pM5y0xSkMa0QSKD1fOXWBhtRpcOWWPrrN4aA@mail.gmail.com>
2943 <CAPkfgVbz6G7MXv7arNtPVV+H4+r8Rjf1aSTdckBM7o6QT5M_Hw@mail.gmail.com>
2944Message-ID: <875AE08C56094744A1F31ADD8DB7535B@ARSSRV18RL>
2945
2946Hello,
2947
2948I come from Poland (Now a country of totalitarian power - comparable to
2949China, where the Constitution is not observed and explicitly does not
2950respect the European Union's provisions and agreements - to which we
2951belong).
2952
2953I'm very sorry for the duplication, but this was caused by my confusion in
2954the structure of your operation (hard access, lack of possibility to set up
2955your own topic thread). More than that, I can not find the answers to the
2956questions I have asked, and I personally find them very important and
2957crucial in terms of security.
2958At current speeds of 120 / 250Mbps only two bridges - with the only active
2959(works) "amazon" bridge option , it's probably a little too much!
2960Another aspect of the usefulness of using TOR - web pages display a message
2961that "DON'T SUPPORT TOR CONNECTIONS"). Can you somehow mask the fact that
2962you use TOR browser, substituting the name of regular firefox?
2963A good idea would be to set the first/last COUNTRY (download/send data) of
2964the final node - as many sites do not support connections from foreign
2965countries.
2966There is still a question of what effect on the release of real IP, with use
2967Kaspersky Internet Security 2017 (PC version), during because it Windows
2968restart, injected its your packages (every couple of seconds it
2969sends/receives packets on 443 port)
2970
2971Times and technologies have changed. The TOR idea was 100% effective 8-10
2972years ago, now with surveillance for even AES256 or even PGP 8192 is not a
2973guarantee of confidentiality. At home we have 8 core processors after 4Ghz
2974and 256bit graphics on DDR5! Why not use this power of the face to protect
2975our privacy!
2976
2977Best regards sincerely.
2978
2979
2980PS. If you are interested in politics:
2981People-nation is mesmerized and manipulated and deceived by state-owned
2982public media controlled by "Current government - government, prime minister,
2983president". The opposition is torn and divided, meaning nothing and no
2984representation, struggling to keep up. People divided over the years into
2985two factions, covered by total observation and ransacking in someone else's
2986property and past, without respect for any privacy! This is a sad truth you
2987will not hear on TV.
2988
2989
2990-----Oryginalna wiadomość-----
2991From: Jon Tullett
2992Sent: Monday, April 24, 2017 12:54 PM
2993To: tor-talk at lists.torproject.org
2994Subject: Re: [tor-talk] Shodan & Hidden Services
2995
2996On 24 April 2017 at 10:33, Alec Muffett <alec.muffett at gmail.com> wrote:
2997> On 24 April 2017 at 09:03, Jon Tullett <jon.tullett at gmail.com> wrote:
2998>
2999>>
3000>> Interesting. What can you do with that? Can you tie them to specific
3001>> hidden services?
3002>>
3003>
3004> Sometimes. See sample results in my Twitter thread:
3005>
3006> https://twitter.com/AlecMuffett/status/855542397165502464
3007>
3008
3009Oops! At least it looks like a fairly small population of people
3010making that particular mistake.
3011
3012-J
3013--
3014tor-talk mailing list - tor-talk at lists.torproject.org
3015To unsubscribe or change other settings go to
3016https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
3017
3018From joebtfsplk at gmx.com Tue Apr 25 00:43:44 2017
3019From: joebtfsplk at gmx.com (Joe Btfsplk)
3020Date: Mon, 24 Apr 2017 19:43:44 -0500
3021Subject: [tor-talk] TBB uses orange Firefox icon in Linux panel
3022Message-ID: <9fa4537b-10e5-950f-86b3-67990f3a5ad3@gmx.com>
3023
3024In Mint 18.1, TBB 6.5.1 was installed to /home/user/torbrowser/. Now
3025updated to 6.5.2 - still same issue.
3026I only have one TBB launcher (icon) - on the desktop (nowhere else) & it
3027uses the correct green TBB globe icon.
3028When TBB is running, the app icon on Mint's panel is the orange / blue
3029Fx icon. Any other TBB window I open (bookmarks, NoScript options) -
3030also use the orange Fx icon in the panel.
3031
3032Confusing when TBB & Firefox are both running.
3033
3034Not sure when it happened - when 1st installed TBB in Mint, it showed
3035correct icon on the panel.
3036At some point - but before any TBB update, the panel icon switched.
3037
3038I can probably hack the right icon - to the location that Linux pulls
3039the icon for the panel (if it's different location than
3040start-tor-browser.desktop.
3041Anyone know where Linux gets the panel icon for TBB?
3042
3043In the start-tor-browser.desktop file, it shows the icon
3044"mozicon128.png" - which should be correct .
3045For installed programs, I believe Linux pulls program panel icons from
3046the <program name>.desktop file, under "icon=...."
3047
3048Any idea why this icon switch happened?
3049
3050
3051
3052From goody2shoes at resist.ca Tue Apr 25 01:47:49 2017
3053From: goody2shoes at resist.ca (goody2shoes)
3054Date: Mon, 24 Apr 2017 18:47:49 -0700
3055Subject: [tor-talk] TBB uses orange Firefox icon in Linux panel
3056In-Reply-To: <9fa4537b-10e5-950f-86b3-67990f3a5ad3@gmx.com>
3057References: <9fa4537b-10e5-950f-86b3-67990f3a5ad3@gmx.com>
3058Message-ID: <c1e7f010-8298-32d5-01ff-9ce0ac447e8a@resist.ca>
3059
3060
3061
3062On 04/24/2017 05:43 PM, Joe Btfsplk wrote:
3063> In Mint 18.1, TBB 6.5.1 was installed to /home/user/torbrowser/. Now
3064> updated to 6.5.2 - still same issue.
3065> I only have one TBB launcher (icon) - on the desktop (nowhere else) &
3066> it uses the correct green TBB globe icon.
3067> When TBB is running, the app icon on Mint's panel is the orange /
3068> blue Fx icon. Any other TBB window I open (bookmarks, NoScript
3069> options) - also use the orange Fx icon in the panel.
3070>
3071> Confusing when TBB & Firefox are both running.
3072>
3073> Not sure when it happened - when 1st installed TBB in Mint, it showed
3074> correct icon on the panel.
3075> At some point - but before any TBB update, the panel icon switched.
3076>
3077> I can probably hack the right icon - to the location that Linux pulls
3078> the icon for the panel (if it's different location than
3079> start-tor-browser.desktop.
3080> Anyone know where Linux gets the panel icon for TBB?
3081>
3082> In the start-tor-browser.desktop file, it shows the icon
3083> "mozicon128.png" - which should be correct .
3084> For installed programs, I believe Linux pulls program panel icons from
3085> the <program name>.desktop file, under "icon=...."
3086>
3087> Any idea why this icon switch happened?
3088>
3089>
3090
3091Debian Jessie 32 bit. I have torbrowser's folder in my home/opt
3092directory and my panel icon is linked to
3093/home/opt/tor-browser_en-US/Browser/browser/icons. That's where the
3094standard panel icon is located. Note the first iteration of "Browser" in
3095the path IS capitalized.
3096
3097G2s
3098
3099
3100
3101From cube at browserprint.info Tue Apr 25 06:00:03 2017
3102From: cube at browserprint.info (cube at browserprint.info)
3103Date: Mon, 24 Apr 2017 23:00:03 -0700
3104Subject: [tor-talk] TBB users, please give 1 minute of your time for science
3105Message-ID: <20170425060043.6ECA9E0870@eugeni.torproject.org>
3106
3107Hello, Tor community!
3108
3109Could you please do me (and science) a favor and go to my site ( https://browserprint.info ) using the Tor Browser Bundle and submit a fingerprint, making sure to fill in the optional questionnaire?
3110
3111At the moment I'm working on detecting a person's underlying operating system and browser family using their browser fingerprint.
3112The aim of this is to detect and defeat browser spoofing.
3113The number of Tor Browser Bundle users who have gone to my site and done this is extremely low, so I'm not able to properly train my detector to defeat the TBB, nor am I able to gauge how effective my detector is against the TBB.
3114
3115Rest assured that I will not use your data for anything malicious, nor will I attempt to deanonymise you in any way.
3116
3117Thank you!
3118
3119From mirimir at riseup.net Tue Apr 25 06:15:32 2017
3120From: mirimir at riseup.net (Mirimir)
3121Date: Mon, 24 Apr 2017 19:15:32 -1100
3122Subject: [tor-talk] TBB users,
3123 please give 1 minute of your time for science
3124In-Reply-To: <20170425060043.6ECA9E0870@eugeni.torproject.org>
3125References: <20170425060043.6ECA9E0870@eugeni.torproject.org>
3126Message-ID: <5cecbcfd-68b8-c48d-8337-6bb6a9268b06@riseup.net>
3127
3128On 04/24/2017 07:00 PM, cube at browserprint.info wrote:
3129> Hello, Tor community!
3130>
3131> Could you please do me (and science) a favor and go to my site (
3132> https://browserprint.info ) using the Tor Browser Bundle and submit a
3133> fingerprint, making sure to fill in the optional questionnaire?
3134>
3135> At the moment I'm working on detecting a person's underlying
3136> operating system and browser family using their browser fingerprint.
3137> The aim of this is to detect and defeat browser spoofing. The number
3138> of Tor Browser Bundle users who have gone to my site and done this is
3139> extremely low, so I'm not able to properly train my detector to
3140> defeat the TBB, nor am I able to gauge how effective my detector is
3141> against the TBB.
3142>
3143> Rest assured that I will not use your data for anything malicious,
3144> nor will I attempt to deanonymise you in any way.
3145>
3146> Thank you!
3147
3148Not malicious, you say? Browser spoofing is a key feature of Tor
3149browser. Defeating that sounds rather malicious.
3150
3151From grarpamp at gmail.com Tue Apr 25 06:17:51 2017
3152From: grarpamp at gmail.com (grarpamp)
3153Date: Tue, 25 Apr 2017 02:17:51 -0400
3154Subject: [tor-talk] Shodan & Hidden Services
3155In-Reply-To: <CAFWeb9LajGLShK=34FBjTVZoe10F5HuPskG9KUUuOy-660BjOQ@mail.gmail.com>
3156References: <CAFWeb9LajGLShK=34FBjTVZoe10F5HuPskG9KUUuOy-660BjOQ@mail.gmail.com>
3157Message-ID: <CAD2Ti2-pG+oOUQViuqujdNuewcxqEbRhrbrwnpD5kR5PfQWWTQ@mail.gmail.com>
3158
3159> So it turns out that Shodan - a kind of multi-protocol Google-alike search
3160> engine for metadata and protocol headers - has indexed a bunch of Onion
3161> sites which were configured to leak their (onion) hostnames into protocol
3162> headers.
3163>
3164> https://www.shodan.io/search?query=.onion%2F
3165>
3166> This is... tragic, perhaps, and avoidable to varying extents (eg: my
3167> proposed setup process*) but the situation also possibly presents an
3168> opportunity for anyone who has identified addresses of sibyl/other naughty
3169> tor-infra-impacting activity, to maybe check some logs and see if any
3170> badly-configured onions were also hosted on the same addresses/subnets, get
3171> some concept of what hidden services were hosted there, and what they may
3172> have been up to?
3173>
3174> https://twitter.com/AlecMuffett/status/855542397165502464
3175
3176If people think onionland is some errorproof perfect
3177configuration zone, free from scam, free from agents, free from
3178discovery, free from all manner of trickery, buggery, debuggery,
3179bauchery, exploit, or the bore of ever September, and so on....
3180nope, it's been quite the opposite since day one.
3181That people are only recently studying finding and publishing
3182these things, claiming as news twatter to a hat, is rather amusing.
3183And of course such work is fine endeavour and report as well.
3184Have fun.
3185
3186From cube at browserprint.info Tue Apr 25 06:20:27 2017
3187From: cube at browserprint.info (cube at browserprint.info)
3188Date: Mon, 24 Apr 2017 23:20:27 -0700
3189Subject: [tor-talk] TBB users,
3190 please give 1 minute of your time for science
3191Message-ID: <20170425062042.429C1E092E@eugeni.torproject.org>
3192
3193
3194
3195> On 04/24/2017 07:00 PM, cube at browserprint.info wrote:
3196> > Hello, Tor community!
3197> >
3198> > Could you please do me (and science) a favor and go to my site (
3199> > https://browserprint.info ) using the Tor Browser Bundle and submit a
3200> > fingerprint, making sure to fill in the optional questionnaire?
3201> >
3202> > At the moment I'm working on detecting a person's underlying
3203> > operating system and browser family using their browser fingerprint.
3204> > The aim of this is to detect and defeat browser spoofing. The number
3205> > of Tor Browser Bundle users who have gone to my site and done this is
3206> > extremely low, so I'm not able to properly train my detector to
3207> > defeat the TBB, nor am I able to gauge how effective my detector is
3208> > against the TBB.
3209> >
3210> > Rest assured that I will not use your data for anything malicious,
3211> > nor will I attempt to deanonymise you in any way.
3212> >
3213> > Thank you!
3214>
3215> Not malicious, you say? Browser spoofing is a key feature of Tor
3216> browser. Defeating that sounds rather malicious.
3217> --
3218> tor-talk mailing list - tor-talk at lists.torproject.org
3219> To unsubscribe or change other settings go to
3220> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
3221> e
3222>
3223>
3224
3225You can't build defenses to attacks that nobody knows about.
3226And if I'm the one who develops the attack it'll be public knowledge; can't say the NSA would be so gracious.
3227
3228From grarpamp at gmail.com Tue Apr 25 06:21:11 2017
3229From: grarpamp at gmail.com (grarpamp)
3230Date: Tue, 25 Apr 2017 02:21:11 -0400
3231Subject: [tor-talk] TBB users,
3232 please give 1 minute of your time for science
3233In-Reply-To: <5cecbcfd-68b8-c48d-8337-6bb6a9268b06@riseup.net>
3234References: <20170425060043.6ECA9E0870@eugeni.torproject.org>
3235 <5cecbcfd-68b8-c48d-8337-6bb6a9268b06@riseup.net>
3236Message-ID: <CAD2Ti2-upPoWuLC4C+eJPfKi=Q2aJCKM3v=5CT2+=C5JpMfgSA@mail.gmail.com>
3237
3238On Tue, Apr 25, 2017 at 2:15 AM, Mirimir <mirimir at riseup.net> wrote:
3239> On 04/24/2017 07:00 PM, cube at browserprint.info wrote:>>
3240>> Could you please do me (and science) a favor and go to my site (
3241>> https://browserprint.info ) using the Tor Browser Bundle and submit a
3242>> fingerprint, making sure to fill in the optional questionnaire?
3243>>
3244>> At the moment I'm working on detecting a person's underlying
3245>> operating system and browser family using their browser fingerprint.
3246>> The aim of this is to detect and defeat browser spoofing. The number
3247>> of Tor Browser Bundle users who have gone to my site and done this is
3248>> extremely low, so I'm not able to properly train my detector to
3249>> defeat the TBB, nor am I able to gauge how effective my detector is
3250>> against the TBB.
3251>>
3252>> Rest assured that I will not use your data for anything malicious,
3253>> nor will I attempt to deanonymise you in any way.
3254>
3255> Not malicious, you say? Browser spoofing is a key feature of Tor
3256> browser. Defeating that sounds rather malicious.
3257
3258Were it to be defeated, the feature sounds pretty weak.
3259
3260From david.m.o at telia.com Tue Apr 25 07:29:03 2017
3261From: david.m.o at telia.com (David Olofsson)
3262Date: Tue, 25 Apr 2017 09:29:03 +0200
3263Subject: [tor-talk] TBB users,
3264 please give 1 minute of your time for science
3265In-Reply-To: <CAD2Ti2-upPoWuLC4C+eJPfKi=Q2aJCKM3v=5CT2+=C5JpMfgSA@mail.gmail.com>
3266References: <20170425060043.6ECA9E0870@eugeni.torproject.org>
3267 <5cecbcfd-68b8-c48d-8337-6bb6a9268b06@riseup.net>
3268 <CAD2Ti2-upPoWuLC4C+eJPfKi=Q2aJCKM3v=5CT2+=C5JpMfgSA@mail.gmail.com>
3269Message-ID: <CAKKXmSNZX2qgi1_4daM13W6_kYa6m5aBfU2yKgJJby+xnwwyzw@mail.gmail.com>
3270
3271There is always a risk of bugs and exploits in the code. Having a security
3272researcher study these gives us better knowledge of the current flaws and
3273how to correct them. If you truly trust the browsers current security this
3274should have no downside, otherwise it is the path to improving it.
3275
3276//Sidju
3277
3278On 25 Apr 2017 08:21, "grarpamp" <grarpamp at gmail.com> wrote:
3279
3280> On Tue, Apr 25, 2017 at 2:15 AM, Mirimir <mirimir at riseup.net> wrote:
3281> > On 04/24/2017 07:00 PM, cube at browserprint.info wrote:>>
3282> >> Could you please do me (and science) a favor and go to my site (
3283> >> https://browserprint.info ) using the Tor Browser Bundle and submit a
3284> >> fingerprint, making sure to fill in the optional questionnaire?
3285> >>
3286> >> At the moment I'm working on detecting a person's underlying
3287> >> operating system and browser family using their browser fingerprint.
3288> >> The aim of this is to detect and defeat browser spoofing. The number
3289> >> of Tor Browser Bundle users who have gone to my site and done this is
3290> >> extremely low, so I'm not able to properly train my detector to
3291> >> defeat the TBB, nor am I able to gauge how effective my detector is
3292> >> against the TBB.
3293> >>
3294> >> Rest assured that I will not use your data for anything malicious,
3295> >> nor will I attempt to deanonymise you in any way.
3296> >
3297> > Not malicious, you say? Browser spoofing is a key feature of Tor
3298> > browser. Defeating that sounds rather malicious.
3299>
3300> Were it to be defeated, the feature sounds pretty weak.
3301> --
3302> tor-talk mailing list - tor-talk at lists.torproject.org
3303> To unsubscribe or change other settings go to
3304> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
3305>
3306
3307From jeremyrand at airmail.cc Tue Apr 25 08:39:43 2017
3308From: jeremyrand at airmail.cc (Jeremy Rand)
3309Date: Tue, 25 Apr 2017 08:39:43 +0000
3310Subject: [tor-talk] TBB users,
3311 please give 1 minute of your time for science
3312In-Reply-To: <CAKKXmSNZX2qgi1_4daM13W6_kYa6m5aBfU2yKgJJby+xnwwyzw@mail.gmail.com>
3313References: <20170425060043.6ECA9E0870@eugeni.torproject.org>
3314 <5cecbcfd-68b8-c48d-8337-6bb6a9268b06@riseup.net>
3315 <CAD2Ti2-upPoWuLC4C+eJPfKi=Q2aJCKM3v=5CT2+=C5JpMfgSA@mail.gmail.com>
3316 <CAKKXmSNZX2qgi1_4daM13W6_kYa6m5aBfU2yKgJJby+xnwwyzw@mail.gmail.com>
3317Message-ID: <7fb9e6c5-43ba-60fc-1e48-8aff451da328@airmail.cc>
3318
3319David Olofsson:
3320> There is always a risk of bugs and exploits in the code. Having a security
3321> researcher study these gives us better knowledge of the current flaws and
3322> how to correct them. If you truly trust the browsers current security this
3323> should have no downside, otherwise it is the path to improving it.
3324>
3325> //Sidju
3326
3327It wasn't obvious to me whether OP intends to give their analysis to the
3328Tor Browser devs (seems ethical) or instead keep it for proprietary
3329purposes (seems unethical).
3330
3331Can OP clarify on this point?
3332
3333Cheers,
3334--
3335-Jeremy Rand
3336Lead Application Engineer at Namecoin
3337Mobile email: jeremyrandmobile at airmail.cc
3338Mobile OpenPGP: 2158 0643 C13B B40F B0FD 5854 B007 A32D AB44 3D9C
3339Send non-security-critical things to my Mobile with OpenPGP.
3340Please don't send me unencrypted messages.
3341My business email jeremy at veclabs.net is having technical issues at the
3342moment.
3343
3344From cube at browserprint.info Tue Apr 25 09:37:33 2017
3345From: cube at browserprint.info (cube at browserprint.info)
3346Date: Tue, 25 Apr 2017 02:37:33 -0700
3347Subject: [tor-talk] TBB users,
3348 please give 1 minute of your time for science
3349Message-ID: <20170425093742.CECFDE0826@eugeni.torproject.org>
3350
3351I'm a PhD student.
3352I have no employer other than my university.
3353All my work is done with the intention of publishing it in academic journals, conferences, my blog, and my thesis.
3354
3355> David Olofsson:
3356> > There is always a risk of bugs and exploits in the code. Having a security
3357> > researcher study these gives us better knowledge of the current flaws and
3358> > how to correct them. If you truly trust the browsers current security this
3359> > should have no downside, otherwise it is the path to improving it.
3360> >
3361> > //Sidju
3362>
3363> It wasn't obvious to me whether OP intends to give their analysis to the
3364> Tor Browser devs (seems ethical) or instead keep it for proprietary
3365> purposes (seems unethical).
3366>
3367> Can OP clarify on this point?
3368>
3369> Cheers,
3370> --
3371> -Jeremy Rand
3372> Lead Application Engineer at Namecoin
3373> Mobile email: jeremyrandmobile at airmail.cc
3374> Mobile OpenPGP: 2158 0643 C13B B40F B0FD 5854 B007 A32D AB44 3D9C
3375> Send non-security-critical things to my Mobile with OpenPGP.
3376> Please don't send me unencrypted messages.
3377> My business email jeremy at veclabs.net is having technical issues at the
3378> moment.
3379> --
3380> tor-talk mailing list - tor-talk at lists.torproject.org
3381> To unsubscribe or change other settings go to
3382> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
3383> e
3384>
3385>
3386
3387From lolint at protonmail.com Tue Apr 25 11:12:37 2017
3388From: lolint at protonmail.com (Lolint)
3389Date: Tue, 25 Apr 2017 07:12:37 -0400
3390Subject: [tor-talk] TBB users,
3391 please give 1 minute of your time for science
3392In-Reply-To: <20170425060043.6ECA9E0870@eugeni.torproject.org>
3393References: <20170425060043.6ECA9E0870@eugeni.torproject.org>
3394Message-ID: <HwLmxgkma1740Dokda03HNkcJMGAffyRJ58lJDBUH4FQ-J69u4aJeayaZ0KnclIKeja8V0UAhx3RNqQDG51fXzwltrr79zJnWZ54XZH9ZYg=@protonmail.com>
3395
3396Hi!
3397
3398I've been making those tests on your website multiple times with the TBB but most of the
3399time I get a unique fingerprint even when re-doing the test at different times with the same
3400browser.
3401
3402There also some wrong measurements such as the Facebook button that gets labeled as
3403being blocked by an Adblock list or similar when I didn't use any addon that serves that
3404purpose.
3405
3406--Jeff
3407
3408From pipatron at gmail.com Tue Apr 25 12:01:05 2017
3409From: pipatron at gmail.com (Anders Andersson)
3410Date: Tue, 25 Apr 2017 14:01:05 +0200
3411Subject: [tor-talk] TBB users,
3412 please give 1 minute of your time for science
3413In-Reply-To: <HwLmxgkma1740Dokda03HNkcJMGAffyRJ58lJDBUH4FQ-J69u4aJeayaZ0KnclIKeja8V0UAhx3RNqQDG51fXzwltrr79zJnWZ54XZH9ZYg=@protonmail.com>
3414References: <20170425060043.6ECA9E0870@eugeni.torproject.org>
3415 <HwLmxgkma1740Dokda03HNkcJMGAffyRJ58lJDBUH4FQ-J69u4aJeayaZ0KnclIKeja8V0UAhx3RNqQDG51fXzwltrr79zJnWZ54XZH9ZYg=@protonmail.com>
3416Message-ID: <CAKkunMYnpmNKcna0w5aRgaA+z=kBL3uEtpgPeKLMt9LSJBLUQw@mail.gmail.com>
3417
3418On 25 April 2017 at 13:12, Lolint <lolint at protonmail.com> wrote:
3419> I've been making those tests on your website multiple times with the TBB but most of the
3420> time I get a unique fingerprint even when re-doing the test at different times with the same
3421> browser.
3422
3423This is something worth pointing out. How does the current
3424browser-identification websites handle that?
3425
3426If you always show up as "unique", even when returning, it means that
3427you are not really that unique or identifiable after all. This also
3428applies if you end up in small groups.
3429
3430From am26590 at email.vccs.edu Tue Apr 25 12:07:55 2017
3431From: am26590 at email.vccs.edu (Andre Mankel)
3432Date: Tue, 25 Apr 2017 08:07:55 -0400
3433Subject: [tor-talk] Fwd: TOR problems - seriously PLEASE HELP ME!
3434In-Reply-To: <20170424103056.GA5577@parckwart.de>
3435References: <2D9C0BCAAC08494483B7701FD694DB16@ARSSRV18RL>
3436 <20170424103056.GA5577@parckwart.de>
3437Message-ID: <CA+4M3o1MZCMNiZEUvEVJ93WmgeZskUeA3B9x1go5xayqZEv_yQ@mail.gmail.com>
3438
3439>A good idea would be to set the first/last COUNTRY (download/send data) of
3440the final node - as many sites do not support connections from foreign
3441countries.
3442As Jonathan mentioned in a reply to your post already, you are able to
3443define a set of allowed exit countries (ie poland only) by following these
3444instructions on wikihow: http://www.wikihow.com/Set-a-
3445Specific-Country-in-a-Tor-Browser
3446
3447>Can you somehow mask the fact that you use TOR browser, substituting the
3448name of regular firefox?
3449The destination server (the website which says "don't support tor
3450connections") probably doesn't block connections because of the browser you
3451are using. Since every node in the tor network exposes its "tor-membership"
3452to the network itself, it will always be possible to determine whether you
3453are using tor or not. On this specific manner, a VPN connection may help
3454you out, but please be aware that the provider of this VPN will then be
3455able to log and maybe intercept your traffic.
3456
3457>There is still a question of what effect on the release of real IP, with
3458use Kaspersky Internet Security 2017 (PC version), during because it
3459Windows restart, injected its your packages (every couple of seconds it
3460sends/receives packets on 443 port)
3461The most internet security solutions intercept ssl traffic to scan the
3462contents of these connections for any Trojans or viruses. If not
3463implemented with perfect care, these solutions probably more harm you than
3464they help securing anything. You find an example of this here:
3465http://www.securityweek.com/google-researcher-finds-certificate-flaws-kaspersky-products
3466
3467
3468On Mon, Apr 24, 2017 at 8:29 PM, unpublished <unpublished at wp.pl> wrote:
3469
3470> Hello,
3471>
3472> I come from Poland (Now a country of totalitarian power - comparable to
3473> China, where the Constitution is not observed and explicitly does not
3474> respect the European Union's provisions and agreements - to which we
3475> belong).
3476>
3477> I'm very sorry for the duplication, but this was caused by my confusion in
3478> the structure of your operation (hard access, lack of possibility to set up
3479> your own topic thread). More than that, I can not find the answers to the
3480> questions I have asked, and I personally find them very important and
3481> crucial in terms of security.
3482> At current speeds of 120 / 250Mbps only two bridges - with the only active
3483> (works) "amazon" bridge option , it's probably a little too much!
3484> Another aspect of the usefulness of using TOR - web pages display a
3485> message that "DON'T SUPPORT TOR CONNECTIONS"). Can you somehow mask the
3486> fact that you use TOR browser, substituting the name of regular firefox?
3487> A good idea would be to set the first/last COUNTRY (download/send data) of
3488> the final node - as many sites do not support connections from foreign
3489> countries.
3490> There is still a question of what effect on the release of real IP, with
3491> use Kaspersky Internet Security 2017 (PC version), during because it
3492> Windows restart, injected its your packages (every couple of seconds it
3493> sends/receives packets on 443 port)
3494>
3495> Times and technologies have changed. The TOR idea was 100% effective 8-10
3496> years ago, now with surveillance for even AES256 or even PGP 8192 is not a
3497> guarantee of confidentiality. At home we have 8 core processors after 4Ghz
3498> and 256bit graphics on DDR5! Why not use this power of the face to protect
3499> our privacy!
3500>
3501> Best regards sincerely.
3502>
3503>
3504> PS. If you are interested in politics:
3505> People-nation is mesmerized and manipulated and deceived by state-owned
3506> public media controlled by "Current government - government, prime
3507> minister, president". The opposition is torn and divided, meaning nothing
3508> and no representation, struggling to keep up. People divided over the years
3509> into two factions, covered by total observation and ransacking in someone
3510> else's property and past, without respect for any privacy! This is a sad
3511> truth you will not hear on TV.
3512>
3513>
3514---------- Forwarded message ----------
3515From: Jonathan Marquardt <mail at parckwart.de>
3516Date: Mon, Apr 24, 2017 at 6:30 AM
3517Subject: Re: [tor-talk] TOR problems - seriously PLEASE HELP ME!
3518To: tor-talk at lists.torproject.org
3519Cc: tor-onions at lists.torproject.org, tor-relays at lists.torproject.org,
3520global-south at lists.torproject.org
3521
3522
3523On Mon, Apr 24, 2017 at 12:16:23PM +0200, unpublished wrote:
3524> 1. Many web pages display information that I do not support "TOR
3525> connections"?
3526
3527Not sure, what you mean here. Perhaps THEY don't support (i.e. block)
3528connections from Tor users, because they are afraid of spam or other stupid
3529reasons. Nothing you can really do here. Websites blocking Tor is a huge
3530problem.
3531
3532> 2. How to increase (amazon) the number of relay nodes? Because standard
3533> only two redirect point?
3534
3535There are always three nodes. The amazon node should be your guard relay
3536(where you enter the Tor network). Then there are two relays after that.
3537There
3538isn't really any way to change that. Three hops should be sufficient for
3539decent anonymity, no real need to worry here.
3540
3541> 3. How to change the end node of the country (eg country from which I am
3542> POLAND)?
3543
3544Here's a simple guide on how to do that:
3545http://www.wikihow.com/Set-a-Specific-Country-in-a-Tor-Browser
3546--
35474096R/1224DBD299A4F5F3
354847BC 7DE8 3D46 2E8B ED18 AA86 1224 DBD2 99A4 F5F3
3549
3550--
3551tor-talk mailing list - tor-talk at lists.torproject.org
3552To unsubscribe or change other settings go to
3553https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
3554
3555From cube at browserprint.info Tue Apr 25 21:51:39 2017
3556From: cube at browserprint.info (cube at browserprint.info)
3557Date: Tue, 25 Apr 2017 14:51:39 -0700
3558Subject: [tor-talk] TBB users,
3559 please give 1 minute of your time for science
3560Message-ID: <20170425215203.CAB48E057B@eugeni.torproject.org>
3561
3562
3563
3564> Hi!
3565>
3566> I've been making those tests on your website multiple times with the TBB but most of the
3567> time I get a unique fingerprint even when re-doing the test at different times with the same
3568> browser.
3569>
3570> There also some wrong measurements such as the Facebook button that gets labeled as
3571> being blocked by an Adblock list or similar when I didn't use any addon that serves that
3572> purpose.
3573>
3574> --Jeff
3575> --
3576> tor-talk mailing list - tor-talk at lists.torproject.org
3577> To unsubscribe or change other settings go to
3578> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
3579> %
3580>
3581>
3582
3583Hi.
3584When you submit a fingerprint it sets a cookie in your browser that prevents double submission of identical fingeprints.
3585This could cause you to appear unique upon resubmission.
3586
3587The ad-block thing is probably caused by one of Tor's advanced security features. It happens when the security slider is on high, but not low.
3588
3589Thanks!
3590
3591From unpublished at wp.pl Wed Apr 26 01:17:29 2017
3592From: unpublished at wp.pl (unpublished)
3593Date: Wed, 26 Apr 2017 03:17:29 +0200
3594Subject: [tor-talk] Fwd: TOR problems - seriously PLEASE HELP ME!
3595In-Reply-To: <CA+4M3o1MZCMNiZEUvEVJ93WmgeZskUeA3B9x1go5xayqZEv_yQ@mail.gmail.com>
3596References: <2D9C0BCAAC08494483B7701FD694DB16@ARSSRV18RL>
3597 <20170424103056.GA5577@parckwart.de>
3598 <CA+4M3o1MZCMNiZEUvEVJ93WmgeZskUeA3B9x1go5xayqZEv_yQ@mail.gmail.com>
3599Message-ID: <8F0E77534835441BBF13D8E8BBBA5619@ARSSRV18RL>
3600
3601Thank you for your help and specific answer!
3602
3603I do not know yet how to put my reply (our correspondence question-answer) to everyone on the TOR blog (different from the standard forum)? I'm afraid that something of my actions it is a bad - doing something wrong.? I do not want to impose your politeness, but could you please explain it to me, or paste the content in the right place?
3604
3605I >A good idea would be to set the first/last COUNTRY (download/send data) of the final node - as many sites do not support connections from foreign countries.
3606>>As Jonathan mentioned in a reply to your post already, you are able to define a set of allowed exit countries (ie poland only) by following these instructions on wikihow: http://www.wikihow.com/Set-a-Specific-Country-in-a-Tor-Browser
3607
3608Super, works as it should. This solves one already my problem! It is a pity that we country have so few nodes. Is it possible to add the number of intermediate nodes (it seems very dangerous when the end-country is my own) in two TOR settings to 4 or at least 3 ? (only available working "amazon" settings).
3609I will try to run old 2 or 4 core PC, and share it as TOR 24h Poland node. (speeds IPv6 250/50Mbps be enough?) Maybe someone will help me to run this on free Linux (stable and maintenance-free working).
3610
3611I >Can you somehow mask the fact that you use TOR browser, substituting the name of regular firefox?
3612>>The destination server (the website which says "don't support tor connections") probably doesn't block connections because of the browser you are using. Since every node in the tor network exposes its "tor-membership" to the network itself, it will always be possible to determine whether you are using tor or not. On this specific manner, a VPN connection may help you out, but please be aware that the provider of this VPN will then be able to log and maybe intercept your traffic.
3613
3614I have a static IPv6 address they TOR work only with amazon settings (250Mbps TV cable network). Optionally I can uses the “open†non protected Wi-Fi network which blocks TOR connections also “amazon†and 2 bridges! (2.4Ghz only, and very slow max 50Mbps with 300Mbps - b,g,n, cards /8192 chip/, use beam aerial and 78% reach).
3615
3616Nice to have you explained that this is not a browser issue just a "signature" node. Is there a way to change settings in the settings so that the recipient does not see that the TOR is being used?
3617
3618I >There is still a question of what effect on the release of real IP, with use Kaspersky Internet Security 2017 (PC version), during because it Windows restart, injected its your packages (every couple of seconds it sends/receives packets on 443 port)
3619>>The most internet security solutions intercept ssl traffic to scan the contents of these connections for any Trojans or viruses. If not implemented with perfect care, these solutions probably more harm you than they help securing anything. You find an example of this here: http://www.securityweek.com/google-researcher-finds-certificate-flaws-kaspersky-products
3620
3621Thank you, I read. Does anyone in TOR are really interested in Kaspersky LAB and whether (eg. Kaspersky Internet Security 2017 PC version) it not threatens to expose IP (un hidden) when using TOR worked at Windows 7,8,10???
3622
3623Assuming that I use only secure pages, is not it safe to disable protection and then shut down KIS? I give up the protection of files and additionally I lose the useful option 1) effective "firewall" blocking telemetry and other spy sites (using svchost and raw RAW to retrieve information type whois, my location, markmonitor, etc.), 2) "Surfing Incognito" , 3) "Blocking banners". The question is worth it?
3624
3625
3626Once again great thanks for the help!
3627
3628Regards
3629
3630
3631From keb at cyblings.on.ca Wed Apr 26 03:26:00 2017
3632From: keb at cyblings.on.ca (krishna e bera)
3633Date: Tue, 25 Apr 2017 23:26:00 -0400
3634Subject: [tor-talk] TBB users,
3635 please give 1 minute of your time for science
3636In-Reply-To: <20170425093742.CECFDE0826@eugeni.torproject.org>
3637References: <20170425093742.CECFDE0826@eugeni.torproject.org>
3638Message-ID: <cb2ed68e-5cf1-5492-fb78-c985f094826e@cyblings.on.ca>
3639
3640On 25/04/17 05:37 AM, cube at browserprint.info wrote:
3641> I'm a PhD student.
3642> I have no employer other than my university.
3643> All my work is done with the intention of publishing it in academic journals, conferences, my blog, and my thesis.
3644
3645Going to the site we can see this project purports to be run by
3646Lachlan Kang of University of Adelaide and funded by ACEMS.org.au
3647with code available on https://github.com/qqTYXn7/browserprint
3648MIT licence and website CC-by 4.0.
3649Including all that info in the original call for our time might have
3650reduced the number of raised hackles - or at least mine.
3651
3652Now using iceweasel plus RequestPolicy-Continued add-on, clicking on the
3653fingerprint me button i fill the captcha and see "Please wait..."
3654followed by "An error has occurred."
3655
3656My TBB results are like others reported here.
3657
3658
3659From mirimir at riseup.net Wed Apr 26 03:52:25 2017
3660From: mirimir at riseup.net (Mirimir)
3661Date: Tue, 25 Apr 2017 16:52:25 -1100
3662Subject: [tor-talk] TBB users,
3663 please give 1 minute of your time for science
3664In-Reply-To: <cb2ed68e-5cf1-5492-fb78-c985f094826e@cyblings.on.ca>
3665References: <20170425093742.CECFDE0826@eugeni.torproject.org>
3666 <cb2ed68e-5cf1-5492-fb78-c985f094826e@cyblings.on.ca>
3667Message-ID: <4cc45156-9364-289e-e69c-8e69b1883d0c@riseup.net>
3668
3669On 04/25/2017 04:26 PM, krishna e bera wrote:
3670> On 25/04/17 05:37 AM, cube at browserprint.info wrote:
3671>> I'm a PhD student.
3672>> I have no employer other than my university.
3673>> All my work is done with the intention of publishing it in academic
3674>> journals, conferences, my blog, and my thesis.
3675>
3676> Going to the site we can see this project purports to be run by
3677> Lachlan Kang of University of Adelaide and funded by ACEMS.org.au
3678> with code available on https://github.com/qqTYXn7/browserprint
3679> MIT licence and website CC-by 4.0.
3680> Including all that info in the original call for our time might have
3681> reduced the number of raised hackles - or at least mine.
3682>
3683> Now using iceweasel plus RequestPolicy-Continued add-on, clicking on the
3684> fingerprint me button i fill the captcha and see "Please wait..."
3685> followed by "An error has occurred."
3686>
3687> My TBB results are like others reported here.
3688
3689Just to be clear, I am not at all opposed to research that helps Tor.
3690Finding vulnerabilities is a key part of that. What annoyed me was op's
3691statement: "The aim of this is to detect and defeat browser spoofing."
3692As if spoofing is a bad thing, that ought to be defeated. An aim like
3693"identifying bugs in browser spoofing" would have been more diplomatic.
3694
3695Also, it would perhaps have been more useful to first contact Tor
3696Project privately, after reading <https://research.torproject.org/> and
3697<https://blog.torproject.org/blog/ethical-tor-research-guidelines>.
3698
3699
3700
3701From joebtfsplk at gmx.com Wed Apr 26 04:20:54 2017
3702From: joebtfsplk at gmx.com (Joe Btfsplk)
3703Date: Tue, 25 Apr 2017 23:20:54 -0500
3704Subject: [tor-talk] TBB uses orange Firefox icon in Linux panel
3705In-Reply-To: <c1e7f010-8298-32d5-01ff-9ce0ac447e8a@resist.ca>
3706References: <9fa4537b-10e5-950f-86b3-67990f3a5ad3@gmx.com>
3707 <c1e7f010-8298-32d5-01ff-9ce0ac447e8a@resist.ca>
3708Message-ID: <1a000895-0a37-359b-8b7e-5a5953e1b644@gmx.com>
3709
3710On 04/24/2017 08:47 PM, goody2shoes wrote:
3711>
3712> On 04/24/2017 05:43 PM, Joe Btfsplk wrote:
3713>> In Mint 18.1, TBB 6.5.1 was installed to /home/user/torbrowser/. Now
3714>> updated to 6.5.2 - still same issue.
3715>> I only have one TBB launcher (icon) - on the desktop (nowhere else) &
3716>> it uses the correct green TBB globe icon.
3717>> When TBB is running, the app icon on Mint's panel is the orange /
3718>> blue Fx icon. Any other TBB window I open (bookmarks, NoScript
3719>> options) - also use the orange Fx icon in the panel.
3720>>
3721>>
3722>> In the start-tor-browser.desktop file, it shows the icon
3723>> "mozicon128.png" - which should be correct .
3724>>
3725>> Any idea why this icon switch happened?
3726>>
3727> Debian Jessie 32 bit. I have torbrowser's folder in my home/opt
3728> directory and my panel icon is linked to
3729> /home/opt/tor-browser_en-US/Browser/browser/icons. That's where the
3730> standard panel icon is located. Note the first iteration of "Browser" in
3731> the path IS capitalized.
3732>
3733> G2s
3734Thanks, G. Yep, that is apparently the path the TBB desktop file
3735(start-tor-browser.desktop) points for the icon.
3736/tor-browser_en-US/Browser/browser/icons/mozicon128.png.
3737As said, it worked, then it didn't.
3738
3739I just edited the desktop launcher & re-selected the same icon (was
3740already using - the one you mentioned). For now it's displaying OK in
3741the panel.
3742Looks like that icon file was changed in the update to 6.5.2. Maybe the
3743previous file got damaged, so Linux pulled the standard Fx icon from
3744another place. I'm not sure the orange Fx icon is included in the
3745Linux TBB package.
3746
3747
3748From cube at browserprint.info Wed Apr 26 06:51:16 2017
3749From: cube at browserprint.info (cube at browserprint.info)
3750Date: Tue, 25 Apr 2017 23:51:16 -0700
3751Subject: [tor-talk] TBB users,
3752 please give 1 minute of your time for science
3753Message-ID: <20170426065504.8852AE03BC@eugeni.torproject.org>
3754
3755
3756
3757> On 25/04/17 05:37 AM, cube at browserprint.info wrote:
3758> > I'm a PhD student.
3759> > I have no employer other than my university.
3760> > All my work is done with the intention of publishing it in academic journals, conferences, my blog, and my thesis.
3761>
3762> Going to the site we can see this project purports to be run by
3763> Lachlan Kang of University of Adelaide and funded by ACEMS.org.au
3764> with code available on https://github.com/qqTYXn7/browserprint
3765> MIT licence and website CC-by 4.0.
3766> Including all that info in the original call for our time might have
3767> reduced the number of raised hackles - or at least mine.
3768>
3769> Now using iceweasel plus RequestPolicy-Continued add-on, clicking on the
3770> fingerprint me button i fill the captcha and see "Please wait..."
3771> followed by "An error has occurred."
3772>
3773> My TBB results are like others reported here.
3774>
3775> --
3776> tor-talk mailing list - tor-talk at lists.torproject.org
3777> To unsubscribe or change other settings go to
3778> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
3779>
3780>
3781>
3782
3783Hi.
3784Yup, that's me!
3785
3786Thanks for reporting that error.
3787Sadly I was not able to replicate your bug (I tried the extension on IceCat and the site worked fine, but I couldn't try with IceWeasel because it doesn't seem to be available on my machine).
3788Looking through the logs it seems like there was some kind of special characters in your fonts list that the database didn't like, which is odd because I know it works with stuff like Chinese characters.
3789
3790I hope I'm not asking too much, but it would help me greatly if you could go here https://valve.github.io/fingerprintjs2/ (another person's site) and fingerprint yourself, then PM me your js_fonts.
3791I don't think they collect any data if you're worried about privacy.
3792
3793From am26590 at email.vccs.edu Wed Apr 26 08:38:50 2017
3794From: am26590 at email.vccs.edu (Andre Mankel)
3795Date: Wed, 26 Apr 2017 04:38:50 -0400
3796Subject: [tor-talk] Fwd: TOR problems - seriously PLEASE HELP ME!
3797In-Reply-To: <8F0E77534835441BBF13D8E8BBBA5619@ARSSRV18RL>
3798References: <2D9C0BCAAC08494483B7701FD694DB16@ARSSRV18RL>
3799 <20170424103056.GA5577@parckwart.de>
3800 <CA+4M3o1MZCMNiZEUvEVJ93WmgeZskUeA3B9x1go5xayqZEv_yQ@mail.gmail.com>
3801 <8F0E77534835441BBF13D8E8BBBA5619@ARSSRV18RL>
3802Message-ID: <CA+4M3o063VtH9sB7O3DN8wH2Z4QTe26jx-BRUiTZ24XOVsRBCQ@mail.gmail.com>
3803
3804>I do not know yet how to put my reply (our correspondence question-answer)
3805to everyone on the TOR blog (different from the standard forum)? I'm afraid
3806that something of my actions it is a bad - doing something wrong.? I do not
3807want to impose your politeness, but could you please explain it to me, or
3808paste the content in the right place?
3809I think you are already at the right place here. As this is the general
3810talk and tech mailing list for tor users, every other user subscribed to
3811this list is already able to read your messages and reply if applicable.
3812Please just leave the messages subject intact when replying to messages so
3813the system can merge messages with the same subject or topic to a thread.
3814There were some plans to improve the handling of requests for help like
3815yours but I have absolutely no idea how far they have been implemented yet.
3816
3817>Is it possible to add the number of intermediate nodes (it seems very
3818dangerous when the end-country is my own) in two TOR settings to >4 or at
3819least 3 ?
3820As far as I know there is no such option, but this isn't necessary however.
3821The Tor protocols design already assures that no of these three nodes is
3822able to determine your identity completely. Please have a look at the
3823following two sites below (1+2). The give you a deeper understanding how
3824these nodes communicate with each other and why a fourth hop wouldn't
3825provide that much more security or anonymity.
3826
3827
3828>I will try to run old 2 or 4 core PC, and share it as TOR 24h Poland node.
3829(speeds IPv6 250/50Mbps be enough?) Maybe someone will help >me to run this
3830on free Linux (stable and maintenance-free working).
3831That would be absolutely great, there are already a plenty of guides and
3832how-tos available on the internet showing you how to setup a tor relay
3833depending on your choice of operating systems. You can find some for debian
3834/ ubuntu below (3)
3835
3836>Nice to have you explained that this is not a browser issue just a
3837"signature" node. Is there a way to change settings in the settings so
3838>that the recipient does not see that the TOR is being used?
3839No problem, you're welcome. When someone provides a tor node, the network
3840needs to know whether this is a working tor node or not to send traffic
3841from other users connections to it. Therefore its always possible to lookup
3842a "list" of computers which are providing a relay for other tor users.
3843These lists are automatically generated and publicly available. Some
3844website operators filter requests coming from these nodes mostly for
3845unreasonable reasons. Obviously they distrust users of Tor or have been
3846facing a high level of misuse coming from Tor nodes in the past. Again, as
3847far as I know there's nothing you can do about it.
3848
3849>Thank you, I read. Does anyone in TOR are really interested in Kaspersky
3850LAB and whether (eg. Kaspersky Internet Security 2017 PC >version) it not
3851threatens to expose IP (un hidden) when using TOR worked at Windows
38527,8,10???
3853I don't think so. Also, this is not the exact area Tor works on. While
3854Kaspersky software tries to secure a single computer / endpoint from
3855viruses and trojans, Tor is a network providing anonymity to its users.
3856This is a little bit like you would compare apples and oranges ;)
3857
3858>Assuming that I use only secure pages, is not it safe to disable
3859protection and then shut down KIS? I give up the protection of files and
3860>additionally I lose the useful option 1) effective "firewall" blocking
3861telemetry and other spy sites (using svchost and raw RAW to retrieve
3862>information type whois, my location, markmonitor, etc.), 2) "Surfing
3863Incognito" , 3) "Blocking banners". The question is worth it?
3864I'm not fully aware what you exactly mean. I think for every approach you
3865listed, there are better solutions than Kaspersky but this is only my
3866humble opinion. Due to the fact that the Tor Browser Bundle includes
3867NoScript, a huge amount of scripts who may load banners or other ads is
3868already deactivated (and becomes active only if you manually enable them).
3869Also, the Tor Browser is in the 'Incognito' or 'Private-Browsing' mode
3870permanently. If you are able to evaluate which types of links / websites /
3871scripts and files you download may be a danger to your computer, you don't
3872need a AV solution like Kaspersky necessarily.
3873
3874Best regards,
3875Andre
3876
3877(1) What protections does Tor provide?
3878https://www.torproject.org/docs/faq.html.en#WhatProtectionsDoesTorProvide
3879(2) The solution: Distributed, anonymous network
3880https://www.torproject.org/about/overview#thesolution
3881(3) Tor Project: Debian / Ubuntu instructions
3882https://www.torproject.org/docs/debian.html.en
3883
3884On Tue, Apr 25, 2017 at 9:17 PM, unpublished <unpublished at wp.pl> wrote:
3885
3886> Thank you for your help and specific answer!
3887>
3888> I do not know yet how to put my reply (our correspondence question-answer)
3889> to everyone on the TOR blog (different from the standard forum)? I'm afraid
3890> that something of my actions it is a bad - doing something wrong.? I do not
3891> want to impose your politeness, but could you please explain it to me, or
3892> paste the content in the right place?
3893>
3894> I >A good idea would be to set the first/last COUNTRY (download/send data)
3895> of the final node - as many sites do not support connections from foreign
3896> countries.
3897> >>As Jonathan mentioned in a reply to your post already, you are able to
3898> define a set of allowed exit countries (ie poland only) by following these
3899> instructions on wikihow: http://www.wikihow.com/Set-a-
3900> Specific-Country-in-a-Tor-Browser
3901>
3902> Super, works as it should. This solves one already my problem! It is a
3903> pity that we country have so few nodes. Is it possible to add the number of
3904> intermediate nodes (it seems very dangerous when the end-country is my own)
3905> in two TOR settings to 4 or at least 3 ? (only available working "amazon"
3906> settings).
3907> I will try to run old 2 or 4 core PC, and share it as TOR 24h Poland node.
3908> (speeds IPv6 250/50Mbps be enough?) Maybe someone will help me to run this
3909> on free Linux (stable and maintenance-free working).
3910>
3911> I >Can you somehow mask the fact that you use TOR browser, substituting
3912> the name of regular firefox?
3913> >>The destination server (the website which says "don't support tor
3914> connections") probably doesn't block connections because of the browser you
3915> are using. Since every node in the tor network exposes its "tor-membership"
3916> to the network itself, it will always be possible to determine whether you
3917> are using tor or not. On this specific manner, a VPN connection may help
3918> you out, but please be aware that the provider of this VPN will then be
3919> able to log and maybe intercept your traffic.
3920>
3921> I have a static IPv6 address they TOR work only with amazon settings
3922> (250Mbps TV cable network). Optionally I can uses the “open†non protected
3923> Wi-Fi network which blocks TOR connections also “amazon†and 2 bridges!
3924> (2.4Ghz only, and very slow max 50Mbps with 300Mbps - b,g,n, cards /8192
3925> chip/, use beam aerial and 78% reach).
3926>
3927> Nice to have you explained that this is not a browser issue just a
3928> "signature" node. Is there a way to change settings in the settings so that
3929> the recipient does not see that the TOR is being used?
3930>
3931> I >There is still a question of what effect on the release of real IP,
3932> with use Kaspersky Internet Security 2017 (PC version), during because it
3933> Windows restart, injected its your packages (every couple of seconds it
3934> sends/receives packets on 443 port)
3935> >>The most internet security solutions intercept ssl traffic to scan the
3936> contents of these connections for any Trojans or viruses. If not
3937> implemented with perfect care, these solutions probably more harm you than
3938> they help securing anything. You find an example of this here:
3939> http://www.securityweek.com/google-researcher-finds-
3940> certificate-flaws-kaspersky-products
3941>
3942> Thank you, I read. Does anyone in TOR are really interested in Kaspersky
3943> LAB and whether (eg. Kaspersky Internet Security 2017 PC version) it not
3944> threatens to expose IP (un hidden) when using TOR worked at Windows
3945> 7,8,10???
3946>
3947> Assuming that I use only secure pages, is not it safe to disable
3948> protection and then shut down KIS? I give up the protection of files and
3949> additionally I lose the useful option 1) effective "firewall" blocking
3950> telemetry and other spy sites (using svchost and raw RAW to retrieve
3951> information type whois, my location, markmonitor, etc.), 2) "Surfing
3952> Incognito" , 3) "Blocking banners". The question is worth it?
3953>
3954>
3955> Once again great thanks for the help!
3956>
3957> Regards
3958>
3959> --
3960> tor-talk mailing list - tor-talk at lists.torproject.org
3961> To unsubscribe or change other settings go to
3962> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
3963>
3964
3965From nusenu-lists at riseup.net Wed Apr 26 22:03:00 2017
3966From: nusenu-lists at riseup.net (nusenu)
3967Date: Wed, 26 Apr 2017 22:03:00 +0000
3968Subject: [tor-talk] Does tor v0.3.0.6 help with #9001?
3969Message-ID: <a030f7b4-d9ee-4c04-d08b-13cc826df74f@riseup.net>
3970
3971tor 0.3.0.6 changelog [1]:
3972> We have also replaced
3973> the guard selection [...] to resist guard-
3974> capture attacks.
3975
3976
3977> o Major features (guard selection algorithm):
3978> - Tor's guard selection algorithm has been redesigned from the
3979> ground up, to better support unreliable networks and restrictive
3980> sets of entry nodes, and to better resist guard-capture attacks by
3981> hostile local networks. Implements proposal 271; closes
3982> ticket 19877.
3983
3984
3985So I guess this is unrelated to #9001? (open)
3986
3987
3988
3989https://trac.torproject.org/projects/tor/ticket/9001
3990http://www.ieee-security.org/TC/SP2013/papers/4977a080.pdf
3991
3992
3993[1] https://gitweb.torproject.org/tor.git/plain/ReleaseNotes?id=tor-0.3.0.6
3994
3995--
3996https://mastodon.social/@nusenu
3997https://twitter.com/nusenu_
3998
3999-------------- next part --------------
4000A non-text attachment was scrubbed...
4001Name: signature.asc
4002Type: application/pgp-signature
4003Size: 801 bytes
4004Desc: OpenPGP digital signature
4005URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170426/2fc6477a/attachment.sig>
4006
4007From beatthebastards at inbox.com Wed Apr 26 23:55:12 2017
4008From: beatthebastards at inbox.com (I)
4009Date: Wed, 26 Apr 2017 15:55:12 -0800
4010Subject: [tor-talk] Tor exit node operator arrested in Russia - a
4011 solidarity Tor Relay Challenge launched
4012In-Reply-To: <ebe7d814-a0ce-f8e6-5b01-6eea6d135109@torservers.net>
4013Message-ID: <CBC9FC5DE63.0000036Bbeatthebastards@inbox.com>
4014
4015
4016
4017https://freebogatov.org
4018
4019
4020
4021
4022From udovdh at xs4all.nl Thu Apr 27 11:43:37 2017
4023From: udovdh at xs4all.nl (Udo van den Heuvel)
4024Date: Thu, 27 Apr 2017 13:43:37 +0200
4025Subject: [tor-talk] 0.3.0.6 on fedora 24: systemd?
4026Message-ID: <b8884235-daae-1db4-39d2-6057fd80c65c@xs4all.nl>
4027
4028Hello,
4029
4030I noticed that 0.3.0.6 was out so I started a build.
4031I noticed this popping up:
4032
4033checking pkg-config is at least version 0.9.0... yes
4034checking for SYSTEMD... no
4035configure: Okay, checking for systemd a different way...
4036checking for SYSTEMD... no
4037
4038
4039Fedora 24 /does/ use systemd, so what is wrong?
4040
4041Kind regards,
4042Udo
4043
4044From david.m.o at telia.com Thu Apr 27 14:30:20 2017
4045From: david.m.o at telia.com (David Olofsson)
4046Date: Thu, 27 Apr 2017 16:30:20 +0200
4047Subject: [tor-talk] 0.3.0.6 on fedora 24: systemd?
4048In-Reply-To: <b8884235-daae-1db4-39d2-6057fd80c65c@xs4all.nl>
4049References: <b8884235-daae-1db4-39d2-6057fd80c65c@xs4all.nl>
4050Message-ID: <CAKKXmSM3r9wuMoBRck3XTrHSPyiU=+HfAR8snS_SmBa3ZD8=RQ@mail.gmail.com>
4051
4052My spontaneous thought is to check the configure script (I'm not really
4053into the source but I'm guessing it's a script) to see what the tests are.
4054It is not improbable that the tests assume a certain configuration and look
4055for files that aren't necessarily present when you have systemd installed.
4056
4057Hopefully someone with actual knowledge can tell you more.
4058
4059/Sidju
4060
4061On 27 Apr 2017 13:43, "Udo van den Heuvel" <udovdh at xs4all.nl> wrote:
4062
4063> Hello,
4064>
4065> I noticed that 0.3.0.6 was out so I started a build.
4066> I noticed this popping up:
4067>
4068> checking pkg-config is at least version 0.9.0... yes
4069> checking for SYSTEMD... no
4070> configure: Okay, checking for systemd a different way...
4071> checking for SYSTEMD... no
4072>
4073>
4074> Fedora 24 /does/ use systemd, so what is wrong?
4075>
4076> Kind regards,
4077> Udo
4078> --
4079> tor-talk mailing list - tor-talk at lists.torproject.org
4080> To unsubscribe or change other settings go to
4081> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
4082>
4083
4084From cbell44 at cfl.rr.com Thu Apr 27 23:33:52 2017
4085From: cbell44 at cfl.rr.com (Charles T. Bell)
4086Date: Thu, 27 Apr 2017 19:33:52 -0400
4087Subject: [tor-talk] 0.3.0.6 on fedora 24: systemd?
4088In-Reply-To: <CAKKXmSM3r9wuMoBRck3XTrHSPyiU=+HfAR8snS_SmBa3ZD8=RQ@mail.gmail.com>
4089References: <b8884235-daae-1db4-39d2-6057fd80c65c@xs4all.nl>
4090 <CAKKXmSM3r9wuMoBRck3XTrHSPyiU=+HfAR8snS_SmBa3ZD8=RQ@mail.gmail.com>
4091Message-ID: <d3796e2f-4cd8-6474-6f2b-13dd557f802d@cfl.rr.com>
4092
4093
4094
4095On 04/27/2017 10:30 AM, David Olofsson wrote:
4096> My spontaneous thought is to check the configure script (I'm not really
4097> into the source but I'm guessing it's a script) to see what the tests are.
4098> It is not improbable that the tests assume a certain configuration and look
4099> for files that aren't necessarily present when you have systemd installed.
4100>
4101> Hopefully someone with actual knowledge can tell you more.
4102>
4103> /Sidju
4104>
4105I asked the question online and got this suggestion:
4106At the commandline type:
4107command -v systemctl
4108echo $?
4109
4110If the response to "echo" is 0 then you have systemd working.
4111If the response is 1 then you don't have systemd working.
4112Then you can check the script and see what you need to change to
4113have the script show systemd working.
4114Good luck!
4115
4116Tom Bell
4117> On 27 Apr 2017 13:43, "Udo van den Heuvel" <udovdh at xs4all.nl> wrote:
4118>
4119>> Hello,
4120>>
4121>> I noticed that 0.3.0.6 was out so I started a build.
4122>> I noticed this popping up:
4123>>
4124>> checking pkg-config is at least version 0.9.0... yes
4125>> checking for SYSTEMD... no
4126>> configure: Okay, checking for systemd a different way...
4127>> checking for SYSTEMD... no
4128>>
4129>>
4130>> Fedora 24 /does/ use systemd, so what is wrong?
4131>>
4132>> Kind regards,
4133>> Udo
4134>> --
4135>> tor-talk mailing list - tor-talk at lists.torproject.org
4136>> To unsubscribe or change other settings go to
4137>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
4138>>
4139
4140--
4141The thing about quotes on the internet is you
4142cannot confirm their validity. ~Abraham Lincoln
4143
4144From ilv at riseup.net Fri Apr 28 02:24:40 2017
4145From: ilv at riseup.net (ilv)
4146Date: Thu, 27 Apr 2017 23:24:40 -0300
4147Subject: [tor-talk] Tor meetup in Sao Paulo, Brazil (Cryptorave)
4148Message-ID: <20170428022438.le655qirusyhdihd@riseup.net>
4149
4150Hello there,
4151
4152If you live in Sao Paulo and you are interested in Tor, please join us in
4153the Tor meetup that will take place at Cryptorave [1], the biggest hacker
4154party in the world. The meetup will be on May 6th, 12.00 pm (noon) [2].
4155
4156See you there.
4157
4158[1] https://cryptorave.org
4159[2] https://cpa.cryptorave.org/pt-BR/CR2017/public/events/89
4160
4161Abrazos.
4162--ilv
4163-------------- next part --------------
4164A non-text attachment was scrubbed...
4165Name: signature.asc
4166Type: application/pgp-signature
4167Size: 833 bytes
4168Desc: not available
4169URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20170427/d77708dd/attachment.sig>
4170
4171From tim.smy at gmx.net Sun Apr 30 18:58:27 2017
4172From: tim.smy at gmx.net (tim smy)
4173Date: Sun, 30 Apr 2017 20:58:27 +0200
4174Subject: [tor-talk] everytime startup tor same log same obtfs4- why?
4175Message-ID: <trinity-73cb6203-9df5-454a-a724-b618b05a939e-1493578706808@3capp-gmx-bs29>
4176
41770/04/17 18:37:07.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.
417830/04/17 18:37:07.000 [NOTICE] Opening Socks listener on 127.0.0.1:9150
417930/04/17 18:37:09.700 [NOTICE] Bootstrapped 5%: Connecting to directory server
418030/04/17 18:37:09.700 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server
418130/04/17 18:37:10.200 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection
418230/04/17 18:37:10.200 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus
418330/04/17 18:37:10.300 [NOTICE] new bridge descriptor 'ndnop5' (fresh): $BBB28DF0F201E706BE564EFE690FE9577DD8386D~ndnop5 at 109.105.109.147
418430/04/17 18:37:10.300 [NOTICE] Bootstrapped 80%: Connecting to the Tor network
418530/04/17 18:37:10.400 [NOTICE] Bridge 'NX01' has both an IPv4 and an IPv6 address. Will prefer using its IPv4 address (85.17.30.79:443) based on the configured Bridge address.
418630/04/17 18:37:10.400 [NOTICE] new bridge descriptor 'NX01' (fresh): $FC259A04A328A07FED1413E9FC6526530D9FD87A~NX01 at 85.17.30.79
418730/04/17 18:37:10.600 [NOTICE] new bridge descriptor 'ndnop3' (fresh): $8DFCD8FB3285E855F5A55EDDA35696C743ABFC4E~ndnop3 at 109.105.109.165
418830/04/17 18:37:10.700 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit
418930/04/17 18:37:10.700 [NOTICE] Bridge 'Lisbeth' has both an IPv4 and an IPv6 address. Will prefer using its IPv4 address (192.95.36.142:443) based on the configured Bridge address.
419030/04/17 18:37:10.700 [NOTICE] new bridge descriptor 'Lisbeth' (fresh): $CDF2E852BF539B82BD10E27E9115A31734E378C2~Lisbeth at 192.95.36.142
419130/04/17 18:37:10.700 [NOTICE] new bridge descriptor 'noether' (fresh): $7B126FAB960E5AC6A629C729434FF84FB5074EC2~noether at 192.99.11.54
419230/04/17 18:37:10.800 [NOTICE] new bridge descriptor 'cymrubridge31' (fresh): $C8CBDB2464FC9804A69531437BCF2BE31FDD2EE4~cymrubridge31 at 38.229.1.78
419330/04/17 18:37:10.800 [NOTICE] new bridge descriptor 'riemann' (fresh): $752CF7825B3B9EA6A98C83AC41F7099D67007EA5~riemann at 198.245.60.50
419430/04/17 18:37:11.200 [NOTICE] new bridge descriptor 'Azadi' (fresh): $FE7840FE1E21FE0A0639ED176EDA00A3ECA1E34D~Azadi at 154.35.22.13
419530/04/17 18:37:12.900 [NOTICE] Tor has successfully opened a circuit. Looks like client functionality is working.
419630/04/17 18:37:12.900 [NOTICE] Bootstrapped 100%: Done
419730/04/17 18:37:13.600 [NOTICE] new bridge descriptor 'cymrubridge33' (fresh): $0BAC39417268B96B9F514E7F63FA6FBA1A788955~cymrubridge33 at 38.229.33.83
419830/04/17 18:37:14.500 [NOTICE] New control connection opened from 127.0.0.1.
419930/04/17 18:37:14.500 [NOTICE] New control connection opened from 127.0.0.1.
420030/04/17 18:37:15.700 [NOTICE] new bridge descriptor 'LeifEricson' (fresh): $A09D536DD1752D542E1FBB3C9CE4449D51298239~LeifEricson at 83.212.101.3
420130/04/17 18:37:19.000 [WARN] Proxy Client: unable to connect to 154.35.22.9:80 ("general SOCKS server failure")
420230/04/17 18:37:19.000 [WARN] Proxy Client: unable to connect to 154.35.22.11:443 ("general SOCKS server failure")
420330/04/17 18:37:19.000 [WARN] Proxy Client: unable to connect to 154.35.22.10:80 ("general SOCKS server failure")
420430/04/17 18:37:29.300 [WARN] Proxy Client: unable to connect to 154.35.22.9:80 ("general SOCKS server failure")
420530/04/17 18:37:29.300 [WARN] Proxy Client: unable to connect to 154.35.22.10:80 ("general SOCKS server failure")
420630/04/17 18:37:29.300 [WARN] Proxy Client: unable to connect to 154.35.22.11:443 ("general SOCKS server failure")
4207
4208
4209now connected as follows
4210obfs4 (unuted states
4211France 89.3.97.118
4212France 178.32.181.96
4213on the tor browser check it says your ip apprears to be 37.187.129.166
4214
4215From lolint at protonmail.com Sun Apr 30 21:20:20 2017
4216From: lolint at protonmail.com (Lolint)
4217Date: Sun, 30 Apr 2017 17:20:20 -0400
4218Subject: [tor-talk] everytime startup tor same log same obtfs4- why?
4219In-Reply-To: <trinity-73cb6203-9df5-454a-a724-b618b05a939e-1493578706808@3capp-gmx-bs29>
4220References: <trinity-73cb6203-9df5-454a-a724-b618b05a939e-1493578706808@3capp-gmx-bs29>
4221Message-ID: <Un6XlOsjD6JlBxAjyZjVa7qSfXd4k6T5aJQIwvSANo648dG7EEc87Pbf99VoZJKutHSDgJefNfBEk2i66rWd1nHKZKBmCX4942VGG4OPzwQ=@protonmail.com>
4222
4223> everytime startup tor same log same obtfs4- why?
4224
4225Yes, that's perfectly normal, read this great blog post:
4226
4227https://blog.torproject.org/blog/improving-tors-anonymity-changing-guard-parameters
4228
4229And the FAQ entry:
4230
4231https://www.torproject.org/docs/faq.html.en#EntryGuards
4232
4233(Hope I didn't misunderstand your question.)
4234
4235Also please never publish bridges IPs in a public place, you may be rendering them useless.