Re: [tor-talk] apt-get over tor

2012-05-27 Thread proper
My very first considerations... > What are the dangers of using apt-get over Tor? > > Is privoxy + Tor the safest way to go? I don't think so. > What attacks are possible? 1. Some are documented in the Torify HOWTO. [1] 2. Stale mirror attack. [2] 3. What kind of software you have installed. [

Re: [tor-talk] Tor's stream isolation features defaults

2012-05-27 Thread Nick Mathewson
On Sun, May 27, 2012 at 4:56 PM, wrote: > We like to understand Tor's stream isolation features better. For those who > don't know, they will be included in Tor 0.2.3 and are already available in > the Tor Alpha 0.2.3. See > https://www.torproject.org/docs/tor-manual-dev.html.en for more infor

Re: [tor-talk] Tor + VPN + DNS (?)

2012-05-27 Thread Maxim Kammerer
On Sun, May 27, 2012 at 11:46 PM, Aaron Whiteman wrote: > I think that if I run Tor with a VPN (and that the VPN does the DNS) then Tor > will still do the DNS at the exit node. > > Me > VPN > Tor Node 1 -> Tor Node 2 --> Tor Node 3 (exit > node) -> Internet Yes, and with pl

[tor-talk] Tor's stream isolation features defaults

2012-05-27 Thread proper
We like to understand Tor's stream isolation features better. For those who don't know, they will be included in Tor 0.2.3 and are already available in the Tor Alpha 0.2.3. See https://www.torproject.org/docs/tor-manual-dev.html.en for more information on the following flags. The following ques

[tor-talk] Vidalia Greys Out.

2012-05-27 Thread Aaron Whiteman
I am using the Tor Browser Bundle under Ubuntu 10.04. However, Vidalia invariably greys out when running Firefox. This is annoying since I want to see the bandwidth usage and message log. It means I can only kill Vidalia with killall -9. Is there a way to deal with this problem? Thanks.

[tor-talk] Tor + VPN + DNS (?)

2012-05-27 Thread Aaron Whiteman
I think that if I run Tor with a VPN (and that the VPN does the DNS) then Tor will still do the DNS at the exit node. Me > VPN > Tor Node 1 -> Tor Node 2 --> Tor Node 3 (exit node) -> Internet Correct? Thanks. ___ tor-talk maili

Re: [tor-talk] TorBirdy version 0.0.2

2012-05-27 Thread tagnaq
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 > Wouldn't this (or some of the other header settings) allow the > recipient or general public (if a mailing list post) to learn that > a person was using TorBirdy? Note: TorBirdy doesn't support a toggle model. There has been an attack vector agai

Re: [tor-talk] wget - secure?

2012-05-27 Thread David H. Lipman
From: Hi Original Message From: Matthew Kaufman Apparently from: tor-talk-boun...@lists.torproject.org To: "tor-talk@lists.torproject.org" Subject: Re: [tor-talk] wget - secure? Date: Sat, 26 May 2012 19:14:51 -0400 Hello, Thanks for these config settings, Does it also l

Re: [tor-talk] Multiple Tor instances

2012-05-27 Thread tagnaq
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 >> If I run two Vidalia instances with unique SOCKS ports and >> Control ports and connect two applications (say 2 instances of >> pidgin) on the unique SOCKS ports, a remote observer shouldn't be >> able to know that both my identities are the same

Re: [tor-talk] Torbutton-birdy version 0.0.2

2012-05-27 Thread Tom Ritter
On 26 May 2012 08:18, Sukhbir Singh wrote: > > Hi, > > Karsten N.: > The `reply_header_authorwrote' issue has now been fixed and if you > notice this email, this is the approach we are following: > >    %s: > > where %s is the author. So the language preference of the user is not > revealed. If yo

Re: [tor-talk] wget - secure?

2012-05-27 Thread helpfulnoob
Hi Original Message From: Matthew Kaufman Apparently from: tor-talk-boun...@lists.torproject.org To: "tor-talk@lists.torproject.org" Subject: Re: [tor-talk] wget - secure? Date: Sat, 26 May 2012 19:14:51 -0400 > Hello, > > Thanks for these config settings, Does it also leak i

Re: [tor-talk] Multiple Tor instances

2012-05-27 Thread Sam Whited
On Sun, May 27, 2012 at 2:53 AM, A K wrote: > If I run two Vidalia instances with unique SOCKS ports and Control ports > and connect two applications (say 2 instances of pidgin) on the unique > SOCKS ports, a remote observer shouldn't be able to know that both my > identities are the same right?

[tor-talk] Multiple Tor instances

2012-05-27 Thread A K
If I run two Vidalia instances with unique SOCKS ports and Control ports and connect two applications (say 2 instances of pidgin) on the unique SOCKS ports, a remote observer shouldn't be able to know that both my identities are the same right? Thanks. _