[tor-dev] onion_client_auth_add Flags=Permanent fails with 553 Unable to store creds for

2020-06-05 Thread Patrick Schleizer
Hi! sudo -u debian-tor socat - UNIX-CONNECT:/var/run/tor/control AUTHENTICATE "test" 250 OK onion_client_auth_add m5bmcnsk64naezc26scz2xb3l3n2nd5xobsljljrpvf77tclmykn7wid x25519:uBKh6DGrkcFxB1adYuyKQltUDDUT9IZrOsne3nfHbHI= 252 Registered client and decrypted desc onion_client_auth_add m5bmcnsk6

[tor-dev] onionbalance useful on same server / for high-spec non-location hidden servers?

2020-06-03 Thread Patrick Schleizer
Would it be useful to run multiple Tor instances and onionbalance on the very same server? Or does that totally defeat the purpose of onionbalance? In my case, it's not a location hidden service. Just an alternative way to connect to a server which is available over clearnet anyhow. I guess the p

Re: [tor-dev] OK got mix vanguards from packages.debian.org with Tor from deb.torproject.org repository?

2020-01-17 Thread Patrick Schleizer
Iain Learmonth: > Hi, > > On 09/01/2020 16:15, Patrick Schleizer wrote: >> I am considering to install vanguards by default in Whonix. This is now implemented in git master and will be tested and released as per usual. >> Is it sane to mix the Debian 'tor' pac

[tor-dev] OK got mix vanguards from packages.debian.org with Tor from deb.torproject.org repository?

2020-01-09 Thread Patrick Schleizer
I am considering to install vanguards by default in Whonix. Is it sane to mix the Debian 'tor' package deb.torproject.org (buster repository) with packages.debian.org buster version of 'vanguards' or do you foresee any issues? Cheers, Patrick ___ tor-de

Re: [tor-dev] TBB Memory Allocator choice fingerprint implications

2019-08-19 Thread Patrick Schleizer
Btw Hardened Malloc does not require recompilation of TBB. Compilation of Hardened Malloc is easy. https://github.com/GrapheneOS/hardened_malloc It then can be used with TBB or any application using LD_PRELOAD environment variable. LD_PRELOAD='/path/to/libhardened_malloc.so' /path/to/program J

Re: [tor-dev] GSOC 2017: Proposal for anon-connection-wizard

2017-03-28 Thread Patrick Schleizer
anonym: > irykoon: >> Currently, the Tor Launcher is shipped with the Tor Browser Bundle >> and heavily relies on the Tor Browser for its implementation. These >> facts cause using Tor Launcher without having the Tor Browser >> impossible. I agree with the wh

[tor-dev] Should Whonix recommend against using multiple workstations behind the same Tor-Gateway in all situations?

2016-12-03 Thread Patrick Schleizer
TLDR: Should Whonix recommend against using multiple workstations behind the same Tor-Gateway in all situations? Long: We at Whonix are currently wondering if we should recommend against using multiple workstations behind the same Tor-Gateway. It's not something we are looking forward to do sinc

Re: [tor-dev] Different trust levels using single client instance

2016-11-04 Thread Patrick Schleizer
Thank you for your answers! teor: > * Caching of DNS, HS descriptors, preemptive circuits, etc. Can you please elaborate on 'etc.'? I am asking because stream isolation for DNS already has a ticket: https://trac.torproject.org/projects/tor/ticket/20555 HS cache isolation also has a ticket: htt

Re: [tor-dev] Tor Browser and Privoxy

2016-08-02 Thread Patrick Schleizer
Arthur D. Edelstein: > Hi Paulo, > > This sounds highly inadvisable to me. Interposing Privoxy between Tor > Browser and Tor will most likely drastically reduce the anonymity > provided by Tor Browser, for multiple reasons: > > 1. Privoxy filters and modifies the web page in ways that are likely

Re: [tor-dev] Further sandboxing Tor Browser (aka Tor + Firejail redux).

2016-07-22 Thread Patrick Schleizer
I think this could be wrong: TOR_CONTROL_COOKIE_AUTH_FILE=/var/run/tor/control_auth_cookie Debian /usr/share/tor/tor-service-defaults-torrc uses: CookieAuthFile /var/run/tor/control.authcookie Common paths are: - /var/run/tor/control.authcookie - /var/lib/tor/control_auth_cookie I suggested to

Re: [tor-dev] Introducing Snowflake (webrtc pt)

2016-03-19 Thread Patrick Schleizer
they're just WebRTC peers, which automatically and > easily traverse NATs in most cases. "Hosting a bridge" for snowflake > can be accomplished by leaving a tab open in your browser (or later > on, running an extension) > > Cheers, > ~serene > > On Tue, Mar 15,

Re: [tor-dev] Introducing Snowflake (webrtc pt)

2016-03-15 Thread Patrick Schleizer
Cool! Does the server (hosting a bridge) work also out of the box behind NAT? Cheers, Patrick ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

[tor-dev] Tor Control Protocol: multiple commands in a single line possible?

2016-01-10 Thread Patrick Schleizer
TLDR: Does Tor's control protocol actually support something like ; ? I.e. something like signal newnym ; getinfo address ? How many of there separators are there? Can you provide examples please? Background: At the moment we are implementing support for whitelisting wildcards for control-port-f

[tor-dev] trac account 'proper' - Full Disclosure

2016-01-02 Thread Patrick Schleizer
Hi, I've learned that using the trac account 'proper' [1] has lead to some confusion and/or curiosity. That account name is really old, it's been created while I was still anonymous. Tickets created by the trac account are created by me, Patrick Schleizer, nickname adrelanos

Re: [tor-dev] Brainstorming ideas for controller features for improved testing; want feedback

2015-04-02 Thread Patrick Schleizer
Hi, please also consider the 'Better hidden service support on Tor control interface': https://trac.torproject.org/projects/tor/ticket/8993 Looks like what's currently missing is a control port keyword for trac. Cheers, Patrick ___ tor-dev mailing list

Re: [tor-dev] Brainstorming ideas for controller features for improved testing; want feedback

2015-04-02 Thread Patrick Schleizer
Hi! Let Tor tell us what relays, bridges, authority [mirrors] think what time it is to be able to implement a distributed time fetcher: https://trac.torproject.org/projects/tor/ticket/6894 Useful in context of 'get independent from host clock time / insecure NTP': https://trac.torproject.org/proj

Re: [tor-dev] RFC: Tor Messenger Alpha

2015-01-24 Thread Patrick Schleizer
The compressed folder name is: tor-messenger-0 Can you please make that tor-messenger next time? ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] Stormy - request for feedback

2014-11-19 Thread Patrick Schleizer
Hi! I think it's non-ideal to modify config files using cat/sed/echo. That breaks sooner or later. And if later settings are supposed to be changed in the same file, things get messy. Some suggestions... It would be better to put the config files into (debian) packages. Want to disable popcon? H

[tor-dev] getting clock skew on demand rather than by event?

2014-06-19 Thread Patrick Schleizer
Hi, whonixcheck is a diagnostic utility that can be run on demand. Not a Tor controller, that is supposed to be run continuously. It checks things such as if Tor's pid is running, bootstrap status, DisableNetwork 1, tor --verify-config and more. There is one thing in the logs, that would be worth

Re: [tor-dev] Get the latest TBB

2014-06-06 Thread Patrick Schleizer
Israel Leiva: >> >> >> https://check.torproject.org/RecommendedTBBVersions >> >> By the way there is python and bash parsing code available already. >> >> > Thanks! Where can I find these codes? - https://github.com/Whonix/tb-updater/blob/master/usr/lib/tbbversion_parser - https://github.com/micah

Re: [tor-dev] Get the latest TBB

2014-06-05 Thread Patrick Schleizer
Israel Leiva: > Is there a better way to get a link for the latest TBB rather than looking > at https://www.torproject.org/dist/torbrowser/? I'm thinking on something > easy to automate (for the Revamp GetTor project). https://check.torproject.org/RecommendedTBBVersions By the way there is python

Re: [tor-dev] Whonix's help_check_tor_bootstrap.py

2014-05-03 Thread Patrick Schleizer
Damian Johnson: >> That script is stable, no bug reports in a while, stem is working fine. :) > > Great! > >> That authentication line and "password" is only in there to make stem >> happy. > > Stem should be perfectly fine without providing a password (that's an > optional argument). If your pr

Re: [tor-dev] Whonix's help_check_tor_bootstrap.py

2014-05-01 Thread Patrick Schleizer
Hi Damian, thank you for your e-mail! That script is stable, no bug reports in a while, stem is working fine. :) That authentication line and "password" is only in there to make stem happy. help_check_tor_bootstrap.py/stem isn't "really" using Tor's control port. It connects to Control Port Filt

Re: [tor-dev] Mockup for a hidden services publishing tool

2014-03-10 Thread Patrick Schleizer
I can second what Lunar said. Nevertheless, it looks useful. With my Whonix hat on, I can say I'd be interested to add this gui to Whonix-Gateway. One-click setting up common webapps such as wordpress, smf, mediawiki ,etc. as hidden services would be most interesting.