[tor-dev] Descriptor Monitors

2013-07-29 Thread Damian Johnson
Hi all. Over this last weekend I started taking advantage of stem's shiny new remote descriptor fetching module [1] to implement some simple monitors... * Descriptor Checker Hourly task that downloads the server descriptors, extrainfo descriptors, and consensus to check for malformed content. In

Re: [tor-dev] RFC: obfsproxyssh

2013-07-29 Thread Yawning Angel
On 2013-07-29 00:05, Andreas Krey wrote: > On Sat, 27 Jul 2013 09:52:52 +, Tom Ritter wrote: > ... >> I've always thought with SSH-based obsproxies, that you could >> distribute the SSH private key to connect to the server with the >> bridge IP address:port. > > I couldn't quite avoid the refl

Re: [tor-dev] Onionoo protocol/implementation nuances / Onionoo-connected metrics project stuff

2013-07-29 Thread Kostas Jakeliunas
Last link of an unbroken email flood chain -- my (and perhaps only that one) last sentence may be aimed at a more general audience, reiterating: The usefulness of all this really depends on intended use cases, and I > suppose here some discussion could be had who / *how would an Onionoo > system*

Re: [tor-dev] Onionoo protocol/implementation nuances / Onionoo-connected metrics project stuff

2013-07-29 Thread Kostas Jakeliunas
It should also be possible to do efficient *estimated* COUNTs (using reltuples [1, 2], provided the DB can be regularly VACUUMed + ANALYZEd (postgres-specific awesomeness)) - i.e. if everything is set up right, doing COUNTs would be efficient. This would be nice not only because one could run very

Re: [tor-dev] Onionoo protocol/implementation nuances / Onionoo-connected metrics project stuff

2013-07-29 Thread Kostas Jakeliunas
> > But would such arbitrary returned results make sense? It would look just > like Onionoo results, but - a (small) subset of them. Meant, But would such arbitrary returned results make sense? It would look just > like Onionoo results, but - a (small) subset of *all* the results in the > new-On

[tor-dev] Onionoo protocol/implementation nuances / Onionoo-connected metrics project stuff

2013-07-29 Thread Kostas Jakeliunas
Hi Karsten, (not sure whom to CC and whom not to, I have a couple of fairly specific technical questions / comments (which (again) I should have delved into earlier), but then again, maybe the scope of the tor-dev mailing list includes such cases..) @tor-dev: This is in regard to the Searchable m

Re: [tor-dev] how much havoc can a compromised baseband do to a Guardian ROM device?

2013-07-29 Thread Nathan Freitas
On 07/29/2013 09:44 AM, Andrew Lewman wrote: > On Mon, 29 Jul 2013 15:00:05 +0200 > Eugen Leitl wrote: > >> > Anyone knows whether a Nexus 4 baseband processor has r/w >> > access to system memory? > How does this relate to tor development? It is a bit of a tangent, but understanding new ways i

Re: [tor-dev] how much havoc can a compromised baseband do to a Guardian ROM device?

2013-07-29 Thread Eugen Leitl
On Mon, Jul 29, 2013 at 09:44:52AM -0400, Andrew Lewman wrote: > On Mon, 29 Jul 2013 15:00:05 +0200 > Eugen Leitl wrote: > > > Anyone knows whether a Nexus 4 baseband processor has r/w > > access to system memory? > > How does this relate to tor development? In that Nexus 4 is the major suppor

Re: [tor-dev] how much havoc can a compromised baseband do to a Guardian ROM device?

2013-07-29 Thread Andrew Lewman
On Mon, 29 Jul 2013 15:00:05 +0200 Eugen Leitl wrote: > Anyone knows whether a Nexus 4 baseband processor has r/w > access to system memory? How does this relate to tor development? -- Andrew http://tpo.is/contact pgp 0x6B4D6475 ___ tor-dev mailing

Re: [tor-dev] how much havoc can a compromised baseband do to a Guardian ROM device?

2013-07-29 Thread Nathan Freitas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/29/2013 09:00 AM, Eugen Leitl wrote: > Anyone knows whether a Nexus 4 baseband processor has r/w access to > system memory? The firmware doesn't seem to be loaded at boot, so I > presume it's entirely out of reach/ reversing? - From what I know,

[tor-dev] how much havoc can a compromised baseband do to a Guardian ROM device?

2013-07-29 Thread Eugen Leitl
Anyone knows whether a Nexus 4 baseband processor has r/w access to system memory? The firmware doesn't seem to be loaded at boot, so I presume it's entirely out of reach/ reversing? signature.asc Description: Digital signature ___ tor-dev mailing list

Re: [tor-dev] RFC: obfsproxyssh

2013-07-29 Thread Andreas Krey
On Sat, 27 Jul 2013 09:52:52 +, Tom Ritter wrote: ... > I've always thought with SSH-based obsproxies, that you could > distribute the SSH private key to connect to the server with the > bridge IP address:port. I couldn't quite avoid the reflexive cringe at 'distribute private key'. :-) ... >