[tor-talk] SERIOUS ISSUE / HOLE With Details! Re: Base64 Encoded Images: How to block them?

2012-11-14 Thread ratlimo
From: https://tails.boum.org/forum/Base64_Encoded_Images:_How_to_block_them__63__/ @comment 9: "This has been a known "trivial" bug since 2006. Looking it over, it appears that the security benefit of being able to reduce ones browser's attack surface might have been overlooked. Or perhaps we've

[tor-talk] Base64 Encoded Images: How to block them?

2012-11-14 Thread ratlimo
Visit news.google.com with images disabled in your browser. You'll notice [some] images are displayed. Right click on one of the images and select View Image Info. Now browse through the files listed and you'll discover some beginning with the following instead of http:// data:image/jpeg;base64,/

[tor-talk] Firefox ESR: Using Hardware Acceleration: good or bad?

2012-11-14 Thread ratlimo
In Firefox ESR Preferences: Use hardware acceleration when available Is there any attack vector by allowing this feature? (it is on by default) I've read articles on malware replacing or altering [graphics card(s)] firmware and since Tor users shouldn't use Flash [though some use HTML5 - could th

Re: [tor-talk] Use of socat and tor-resolve with Tor

2012-11-14 Thread whistler
On: Mon, 12 Nov 2012 16:23:13 -0500, grarpamp wrote: >> I have been using socat to torify connections. Since I was unsure >> where a network address was being translated > >tor-resolve is not needed, socat is sufficient. >Both can resolve dns via socks4a and/or socks5. >Verify the behavior with t

Re: [tor-talk] Guard flag vs relay bandwidth

2012-11-14 Thread Paul Syverson
On Wed, Nov 14, 2012 at 04:18:34PM +0600, Roman Mamedov wrote: > On Wed, 14 Nov 2012 04:47:38 -0500 > Roger Dingledine wrote: > > > Right. I've got a half-drafted "the lifecycle of a new Tor relay" blog > > post sitting around here somewhere. > > That would be great. :) > > > If you want to rea

Re: [tor-talk] Guard flag vs relay bandwidth

2012-11-14 Thread Roman Mamedov
On Wed, 14 Nov 2012 04:47:38 -0500 Roger Dingledine wrote: > Right. I've got a half-drafted "the lifecycle of a new Tor relay" blog > post sitting around here somewhere. That would be great. :) > If you want to read a lot more about guard flag allocation, see > "Changing of the Guards: A Framew

Re: [tor-talk] Guard flag vs relay bandwidth

2012-11-14 Thread Roger Dingledine
On Wed, Nov 14, 2012 at 02:08:16PM +0600, Roman Mamedov wrote: > From what I can tell the Guard flag affects routed bandwidth very negatively. > After getting the flag the bandwidth drops off sharply and a Guard node will > typically push an order of magnitude (TEN times) less traffic than a non-gu

[tor-talk] Guard flag vs relay bandwidth

2012-11-14 Thread Roman Mamedov
Hello, I am looking for ways to optimize several relay nodes to ensure maximum possible bandwidth consumption. The actual numbers I have are within 20-50 megabits in one direction per node (i.e. not the gigabit-scale tuning discussed in the FAQ). From what I can tell the Guard flag affects routed