Re: [tor-dev] Tor Browser Launcher

2013-02-21 Thread Micah Lee
Thanks for all this feedback! On 02/19/2013 02:56 PM, Jacob Appelbaum wrote: >> https://github.com/ioerror/torbrowser-launcher/commit/bfe97f49e53c1de5a697216bbab3ac6eb5d20090#L0R64 >> >> I'm not sure if arch is portable. I could easily switch it to uname -m, >> if that's more portable. > > My gue

Re: [tor-dev] Tor Browser Launcher

2013-02-20 Thread adrelanos
Micah Lee: > On 02/19/2013 06:39 PM, adrelanos wrote: >>> What operating system are you using? >> >> Debian Wheezy. > > Weird, that's what I'm running Wheezy too. But just to be safe, I > decided I'd make a new Debian Squeeze vm and try to build it and run it > in there. I found several small prob

Re: [tor-dev] Tor Browser Launcher

2013-02-19 Thread Micah Lee
On 02/19/2013 06:39 PM, adrelanos wrote: >> What operating system are you using? > > Debian Wheezy. Weird, that's what I'm running Wheezy too. But just to be safe, I decided I'd make a new Debian Squeeze vm and try to build it and run it in there. I found several small problems and fixed them. >

Re: [tor-dev] Tor Browser Launcher

2013-02-19 Thread Jacob Appelbaum
Micah Lee: > On 02/18/2013 12:29 PM, Jacob Appelbaum wrote: >>> I was assuming that making the launcher depend on a system Tor would be >>> troublesome. However now that I'm looking at >>> https://www.torproject.org/docs/debian again, it seems like it could >>> totally work. What about for Ubuntu u

Re: [tor-dev] Tor Browser Launcher

2013-02-19 Thread k e bera
On Wed, 20 Feb 2013 02:39:10 + adrelanos wrote: > Micah Lee: > > On 02/19/2013 03:29 AM, adrelanos wrote: > >> I followed the readme for dependency installing, building and installing > >> from the develop branch. Running into two issues trying this... > >> > >> LC_ALL and LANG is not set on

Re: [tor-dev] Tor Browser Launcher

2013-02-19 Thread adrelanos
Micah Lee: > On 02/19/2013 03:29 AM, adrelanos wrote: >> I followed the readme for dependency installing, building and installing >> from the develop branch. Running into two issues trying this... >> >> LC_ALL and LANG is not set on my system. >> >> develop ~/torbrowser-launcher/dist/deb_dist $ tor

Re: [tor-dev] Tor Browser Launcher

2013-02-19 Thread Micah Lee
On 02/19/2013 03:29 AM, adrelanos wrote: > I followed the readme for dependency installing, building and installing > from the develop branch. Running into two issues trying this... > > LC_ALL and LANG is not set on my system. > > develop ~/torbrowser-launcher/dist/deb_dist $ torbrowser-launcher

Re: [tor-dev] Tor Browser Launcher

2013-02-19 Thread adrelanos
I followed the readme for dependency installing, building and installing from the develop branch. Running into two issues trying this... LC_ALL and LANG is not set on my system. develop ~/torbrowser-launcher/dist/deb_dist $ torbrowser-launcher Tor Browser Launcher https://github.com/micahflee/tor

Re: [tor-dev] Tor Browser Launcher

2013-02-18 Thread Douglas Lucas
You can't even download Ubuntu off Ubuntu.com via SSL. Only HTTP. On 02/19/2013 01:06 AM, adrelanos wrote: > Leo Unglaub: >> Hey, >> >> On 2013-02-18 18:33, adrelanos wrote: >>> Right, for such users it wouldn't work anyway, because downloading >>> Tor Browser Launcher from the repository is unenc

Re: [tor-dev] Tor Browser Launcher

2013-02-18 Thread adrelanos
Leo Unglaub: > Hey, > > On 2013-02-18 18:33, adrelanos wrote: >> Right, for such users it wouldn't work anyway, because downloading >> Tor Browser Launcher from the repository is unencrypted (but >> signed) anyway. > > thats not 100% correct. You can use transport encryption (HTTPS) for > the rep

Re: [tor-dev] Tor Browser Launcher

2013-02-18 Thread adrelanos
Micah Lee: > On 02/18/2013 02:31 PM, adrelanos wrote: >> Why not phrase https://check.torproject.org/RecommendedTBBVersions ? No >> updates planed for it even in long term as far I am following trac... > > Oh cool, so Tor already has a file with the recommended TBB version! And > this gets updated

Re: [tor-dev] Tor Browser Launcher

2013-02-18 Thread adrelanos
Jacob Appelbaum: > adrelanos: >> Micah Lee: > > Well, which should your users be using? From my perspective, I think you > should give them the alpha and help them report bugs! :-) >>> Interesting idea. Anyone else have opinions on this? I think I'd be fine >>> giving people the alpha,

Re: [tor-dev] Tor Browser Launcher

2013-02-18 Thread Jacob Appelbaum
adrelanos: > Micah Lee: Well, which should your users be using? From my perspective, I think you should give them the alpha and help them report bugs! :-) >> Interesting idea. Anyone else have opinions on this? I think I'd be fine >> giving people the alpha, but I also don't want to

Re: [tor-dev] Tor Browser Launcher

2013-02-18 Thread Micah Lee
On 02/18/2013 02:31 PM, adrelanos wrote: > Why not phrase https://check.torproject.org/RecommendedTBBVersions ? No > updates planed for it even in long term as far I am following trac... Oh cool, so Tor already has a file with the recommended TBB version! And this gets updated regularly when new T

Re: [tor-dev] Tor Browser Launcher

2013-02-18 Thread adrelanos
Micah Lee: >> > >> > Well, which should your users be using? From my perspective, I think you >> > should give them the alpha and help them report bugs! :-) > Interesting idea. Anyone else have opinions on this? I think I'd be fine > giving people the alpha, but I also don't want to annoy people w

Re: [tor-dev] Tor Browser Launcher

2013-02-18 Thread adrelanos
Jacob Appelbaum: > Micah Lee: >> On 02/18/2013 12:15 AM, Jacob Appelbaum wrote: >>> Do you plan to download TBB over Tor that is provided by the system, say >>> by adding a dependency on a system Tor? >> >> I was assuming that making the launcher depend on a system Tor would be >> troublesome. Howe

Re: [tor-dev] Tor Browser Launcher

2013-02-18 Thread krugar
Jacob Appelbaum: > Well, which should your users be using? From my perspective, I think you > should give them the alpha and help them report bugs! :-) maybe give the user the choice, with stable as the default? after all, this project aims to make it easier for non-powerusers to get TBB running,

Re: [tor-dev] Tor Browser Launcher

2013-02-18 Thread Micah Lee
On 02/18/2013 12:29 PM, Jacob Appelbaum wrote: >> I was assuming that making the launcher depend on a system Tor would be >> troublesome. However now that I'm looking at >> https://www.torproject.org/docs/debian again, it seems like it could >> totally work. What about for Ubuntu users? > > For no

Re: [tor-dev] Tor Browser Launcher

2013-02-18 Thread Jacob Appelbaum
Micah Lee: > On 02/18/2013 12:15 AM, Jacob Appelbaum wrote: >> Do you plan to download TBB over Tor that is provided by the system, say >> by adding a dependency on a system Tor? > > I was assuming that making the launcher depend on a system Tor would be > troublesome. However now that I'm looking

Re: [tor-dev] Tor Browser Launcher

2013-02-18 Thread Micah Lee
On 02/18/2013 12:15 AM, Jacob Appelbaum wrote: > Do you plan to download TBB over Tor that is provided by the system, say > by adding a dependency on a system Tor? I was assuming that making the launcher depend on a system Tor would be troublesome. However now that I'm looking at https://www.torpr

Re: [tor-dev] Tor Browser Launcher - applying TUF threat model

2013-02-18 Thread adrelanos
Citing: https://www.updateframework.com/wiki/Docs/Security#AttacksandWeaknesses > Arbitrary software installation. An attacker installs anything they want on the client system. That is, an attacker can provide arbitrary files in response to download requests and the files will not be detected as i

Re: [tor-dev] Tor Browser Launcher

2013-02-18 Thread adrelanos
Leo Unglaub: > Hey, > > On 2013-02-18 18:33, adrelanos wrote: >> Right, for such users it wouldn't work anyway, because downloading >> Tor Browser Launcher from the repository is unencrypted (but >> signed) anyway. > > thats not 100% correct. You can use transport encryption (HTTPS) for > the rep

Re: [tor-dev] Tor Browser Launcher

2013-02-18 Thread Leo Unglaub
Hey, On 2013-02-18 18:33, adrelanos wrote: > Right, for such users it wouldn't work anyway, because downloading > Tor Browser Launcher from the repository is unencrypted (but > signed) anyway. thats not 100% correct. You can use transport encryption (HTTPS) for the repository servers. You simply

Re: [tor-dev] Tor Browser Launcher

2013-02-18 Thread adrelanos
Jacob Appelbaum: >> What about bridge users? They have to edit a system wide torrc and the >> TBB torrc? >> > > You're over thinking it. Connecting to the Tor Project website often > fails - far more than the Tor network being blocked. Ok. >> What about users who don't want to ever connect to th

Re: [tor-dev] Tor Browser Launcher

2013-02-18 Thread Jacob Appelbaum
adrelanos: > Jacob Appelbaum: >> Do you plan to download TBB over Tor that is provided by the system, say >> by adding a dependency on a system Tor? > > There has been a bit discussion about this in > https://trac.torproject.org/projects/tor/ticket/5236 already. (Search > for "over Tor" to quickly

Re: [tor-dev] Tor Browser Launcher

2013-02-18 Thread adrelanos
Jacob Appelbaum: > Do you plan to download TBB over Tor that is provided by the system, say > by adding a dependency on a system Tor? There has been a bit discussion about this in https://trac.torproject.org/projects/tor/ticket/5236 already. (Search for "over Tor" to quickly navigate it it.) I th

Re: [tor-dev] Tor Browser Launcher

2013-02-18 Thread Jacob Appelbaum
Micah Lee: > In my spare time I've been working on a way to make the Tor Browser > Bundle easier to use for GNU/Linux users. I've mostly been talking about > it with other people on tor-talk and in this bug: > https://trac.torproject.org/projects/tor/ticket/5236 Thanks for documenting so much on t

[tor-dev] Tor Browser Launcher

2013-02-17 Thread Micah Lee
In my spare time I've been working on a way to make the Tor Browser Bundle easier to use for GNU/Linux users. I've mostly been talking about it with other people on tor-talk and in this bug: https://trac.torproject.org/projects/tor/ticket/5236 I decided to write Tor Browser Launcher, a completely