Re: [tor-dev] Tor and BGP integration

2011-06-09 Thread Jacob Appelbaum
On Thu, Jun 9, 2011 at 10:23 PM, Robert Ransom wrote: > On Thu, 9 Jun 2011 21:34:17 + > Jacob Appelbaum wrote: > > > On Thu, Jun 9, 2011 at 8:40 PM, grarpamp wrote: > > > > > Some thoughts from a quasi network operator... > > > > > > Perhaps a tracking reason not to do this... > > > > > > No

Re: [tor-dev] Tor and BGP integration

2011-06-09 Thread Robert Ransom
On Thu, 9 Jun 2011 21:34:17 + Jacob Appelbaum wrote: > On Thu, Jun 9, 2011 at 8:40 PM, grarpamp wrote: > > > Some thoughts from a quasi network operator... > > > > Perhaps a tracking reason not to do this... > > > > Normally exit traffic is free to travel the globe across jurisdictions > >

Re: [tor-dev] The Torouter and the DreamPlug

2011-06-09 Thread tagnaq
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 06/09/2011 09:57 PM, Ian Goldberg wrote: > On Thu, Jun 09, 2011 at 07:50:09PM +, Jacob Appelbaum wrote: >>> Sounds like a plan. I prefer bridge by default, but we can discuss that >>> later. >>> >> What's the rational there? While we certainly

Re: [tor-dev] Tor and BGP integration

2011-06-09 Thread Jeroen Massar
On 2011-Jun-09 23:34, Jacob Appelbaum wrote: > For Tor itself doing some programmatic things... There are plenty > of BGP looking glasses out there. But for the purposes of some > script banging away at them (times the number of nodes doing so), > yes, it is definitely considered pr

Re: [tor-dev] Tor and BGP integration

2011-06-09 Thread Jacob Appelbaum
On Thu, Jun 9, 2011 at 8:40 PM, grarpamp wrote: > Some thoughts from a quasi network operator... > > Perhaps a tracking reason not to do this... > > Normally exit traffic is free to travel the globe across jurisdictions > on its way to its final destination (ie: webserver). Doing this > forces th

Re: [tor-dev] Tor and BGP integration

2011-06-09 Thread grarpamp
Some thoughts from a quasi network operator... Perhaps a tracking reason not to do this... Normally exit traffic is free to travel the globe across jurisdictions on its way to its final destination (ie: webserver). Doing this forces that traffic to sink at the exit jurisdiction... removing that p

Re: [tor-dev] The Torouter and the DreamPlug

2011-06-09 Thread Jacob Appelbaum
> > > I think it's fine to ship one web interface for us now and later find a > good > > integration point with the Freedom Box later... > > Yep, I agree. > > Great. I'm sure that if the web UI is free software and it works well, we can see if the FB will be interested in using it. > > What's the

Re: [tor-dev] The Torouter and the DreamPlug

2011-06-09 Thread Runa A. Sandvik
On Thu, Jun 9, 2011 at 8:50 PM, Jacob Appelbaum wrote: > On Thu, Jun 9, 2011 at 7:34 PM, Runa A. Sandvik > wrote: >> >> On Thu, Jun 9, 2011 at 4:55 PM, Jacob Appelbaum >> wrote: >> > On Thu, Jun 9, 2011 at 2:57 PM, Runa A. Sandvik >> > wrote: >> >> >> >> On Wed, Jun 8, 2011 at 4:02 PM, Andrew L

Re: [tor-dev] The Torouter and the DreamPlug

2011-06-09 Thread Jacob Appelbaum
On Thu, Jun 9, 2011 at 7:57 PM, Ian Goldberg wrote: > On Thu, Jun 09, 2011 at 07:50:09PM +, Jacob Appelbaum wrote: > > > Sounds like a plan. I prefer bridge by default, but we can discuss that > > > later. > > > > > What's the rational there? While we certainly need more bridges, I'd like > t

Re: [tor-dev] The Torouter and the DreamPlug

2011-06-09 Thread Ian Goldberg
On Thu, Jun 09, 2011 at 07:50:09PM +, Jacob Appelbaum wrote: > > Sounds like a plan. I prefer bridge by default, but we can discuss that > > later. > > > What's the rational there? While we certainly need more bridges, I'd like to > see an increase in relays and encourage more Friend of Friend

Re: [tor-dev] The Torouter and the DreamPlug

2011-06-09 Thread Jacob Appelbaum
On Thu, Jun 9, 2011 at 7:34 PM, Runa A. Sandvik wrote: > On Thu, Jun 9, 2011 at 4:55 PM, Jacob Appelbaum > wrote: > > On Thu, Jun 9, 2011 at 2:57 PM, Runa A. Sandvik > > wrote: > >> > >> On Wed, Jun 8, 2011 at 4:02 PM, Andrew Lewman > >> wrote: > >> > On Tue, 7 Jun 2011 15:36:45 -0700 > >> > Ja

Re: [tor-dev] Tor and BGP integration

2011-06-09 Thread Jeroen Massar
On 2011-Jun-09 20:07, Linus Nordberg wrote: [..] > I'm already running something[1] that is collecting a feed and storing > it in an SQL database. I should tech it i) how to emit torrc Export > lines and ii) the Tor control protocol ("exit-policy/default"). If you want an IPv6 dump (aka grh.sixxs

Re: [tor-dev] The Torouter and the DreamPlug

2011-06-09 Thread Runa A. Sandvik
On Thu, Jun 9, 2011 at 4:55 PM, Jacob Appelbaum wrote: > On Thu, Jun 9, 2011 at 2:57 PM, Runa A. Sandvik > wrote: >> >> On Wed, Jun 8, 2011 at 4:02 PM, Andrew Lewman >> wrote: >> > On Tue, 7 Jun 2011 15:36:45 -0700 >> > Jacob Appelbaum wrote: >> > >> >> > We would also need a way for users to e

Re: [tor-dev] Reg : using the keep alive messages

2011-06-09 Thread Sambuddho Chakravarty
Dear Roger Thanks for your response. I read the spec document about the RELAY_DROP cells. You say that no one has understood the passive correlation attack to utilize the RELAY_DROP cells. I am however little curious to see if "moderate padding" (enough to not mess up QoS of various services) can

Re: [tor-dev] Tor and BGP integration

2011-06-09 Thread Linus Nordberg
Jacob Appelbaum wrote Thu, 9 Jun 2011 14:59:55 +: | Hello from Iceland, Hello from a strikestrucken Keflavíkurflugvöllur, | We came up with two main ideas for making this happen. Thanks for the writeup. | Another method would be to write a controller that watches for BGP network | updat

Re: [tor-dev] Tor and BGP integration

2011-06-09 Thread Arturo
Hello, This seems to me like a really neat idea! Reading from real time BGP feeds is not a simple task and I think it might be a bit of an overhead for the average Tor user. On the other hand it could be a good idea to have some nodes run tools to generate exit policies or at least provide BGP r

Re: [tor-dev] Reg : using the keep alive messages

2011-06-09 Thread Roger Dingledine
On Wed, Jun 08, 2011 at 08:11:58PM -0400, Sambuddho Chakravarty wrote: > Hi All > I read in the Tor design spec that Tor control protocol supports keepalive > messages which could be used for link padding . I wonder if anyone has ever > explored using them... I don't think you mean the Tor control

Re: [tor-dev] The Torouter and the DreamPlug

2011-06-09 Thread Jacob Appelbaum
On Thu, Jun 9, 2011 at 2:57 PM, Runa A. Sandvik wrote: > On Wed, Jun 8, 2011 at 4:02 PM, Andrew Lewman > wrote: > > On Tue, 7 Jun 2011 15:36:45 -0700 > > Jacob Appelbaum wrote: > > > >> > We would also need a way for users to easily change the hashed > >> > password. I can't remember if this is

[tor-dev] Tor and BGP integration

2011-06-09 Thread Jacob Appelbaum
Hello from Iceland, Linus invited me to Reykjavik to talk about Tor at the NORDUnet conference and this idea is the result of a bit of feedback from some network operators here. Tor needs a way to be friendly to large network operators who wish to enable exiting to anonymous communication for the

Re: [tor-dev] The Torouter and the DreamPlug

2011-06-09 Thread Runa A. Sandvik
On Wed, Jun 8, 2011 at 4:02 PM, Andrew Lewman wrote: > On Tue, 7 Jun 2011 15:36:45 -0700 > Jacob Appelbaum wrote: > >> > We would also need a way for users to easily change the hashed >> > password. I can't remember if this is a feature that is already >> > present in Vidalia. >> Yes, we do need