Re: [tor-talk] do Cloudfare captchas ever work?

2015-06-23 Thread Çağıl P . Şesto
On Tue, Jun 23, 2015 at 06:58:57PM -0500, Joe Btfsplk wrote: > Thanks Çağıl, You are welcome. > On certain points you made (it seems), it's absolutely trivial for Cloudfare > or any entity operating on a large number of sites, to track Tor / TBB users > - across domains - on every site visited, t

Re: [tor-talk] Tor-ramdisk 20150616 released

2015-06-23 Thread Çağıl P . Şesto
On Tue, Jun 23, 2015 at 01:46:38PM -0600, Mirimir wrote: > Will this work on micro PCs like Raspberry Pi2, Banana Pi, etc? No, Tor-Ramdisk works only on Intel/AMD 32/64Bit x86 and compatible cpus, and MIPS Atheros AR7161, PI has an Broadcom ARM cpu, the LeMaker Banana PI use a Allwinner A20 cpu.

Re: [tor-talk] Matryoshka: Are TOR holes intentional?

2015-06-23 Thread Çağıl P . Şesto
On Tue, Jun 23, 2015 at 12:06:41AM -0400, grarpamp wrote: > Longer reply may come, but I think it is useful to again say > that it may be that you must disassociate the classical "tor > centric" idea of fill away from the idea of filling the "tor circuit". There is no benefit in padding, it does t

Re: [tor-talk] do Cloudfare captchas ever work?

2015-06-23 Thread Joe Btfsplk
Thanks Çağıl, I'll have to ponder some of your comments. On other points, some highly advanced users may have to jump in & comment. On certain points you made (it seems), it's absolutely trivial for Cloudfare or any entity operating on a large number of sites, to track Tor / TBB users - across

Re: [tor-talk] Circuits in Orbot

2015-06-23 Thread Nathan Freitas
On Tue, Jun 23, 2015, at 04:27 PM, forc...@safe-mail.net wrote: > I am using Orbot for Android and was surprised to see that circuits are > up to 5 nodes. I remember having read that TOR would not be more secure > (and even could be UNsecure) if it would use more than 3 nodes to build a > circuit.

Re: [tor-talk] Tor-ramdisk 20150616 released

2015-06-23 Thread Anthony G. Basile
On 6/23/15 3:46 PM, Mirimir wrote: On 06/22/2015 08:58 AM, Anthony G. Basile wrote: Hi everyone I want to announce to the list that a new release of tor-ramdisk is out. Tor-ramdisk is a uClibc-based micro Linux distribution whose only purpose is to host a Tor server in an environment that maxim

Re: [tor-talk] Mistake in translation

2015-06-23 Thread Colin Childs
Hi Bahaa, There does appear to be a mistake with the translation here, however this is a mistake in the Firefox translation. Please report this issue to Mozilla's Arabic translation team[1]. Thanks! [1]: https://lists.mozilla.org/listinfo/dev-l10n-ar On Tue, Jun 23, 2015 at 11:16 AM Bahaa Nas

Re: [tor-talk] do Cloudfare captchas ever work?

2015-06-23 Thread Çağıl P . Şesto
On Tue, Jun 23, 2015 at 11:04:37AM +0200, kleft wrote: > Boards with illegal content like crimenetwork.biz are using cloudflare too. Thats, why cloudflare should offer them, to distribute their content via a HS via their cdn, and that would be fun for all involved parties. Since a cdn is always

Re: [tor-talk] do Cloudfare captchas ever work?

2015-06-23 Thread Çağıl P . Şesto
On Mon, Jun 22, 2015 at 07:15:24PM -0500, Joe Btfsplk wrote: > Is that actually true? (they can track you over various exits) > Is that what the design document says? Tor can't protect you, if your browser emits cookies or information about cached content back to an entity that operates global sc

[tor-talk] Circuits in Orbot

2015-06-23 Thread force44
Hello! I am using Orbot for Android and was surprised to see that circuits are up to 5 nodes. I remember having read that TOR would not be more secure (and even could be UNsecure) if it would use more than 3 nodes to build a circuit. Any explanation? -- tor-talk mailing list - tor-talk@lists.t

Re: [tor-talk] Tor-ramdisk 20150616 released

2015-06-23 Thread Mirimir
On 06/22/2015 08:58 AM, Anthony G. Basile wrote: > Hi everyone > > I want to announce to the list that a new release of tor-ramdisk is out. > Tor-ramdisk is a uClibc-based micro Linux distribution whose only > purpose is to host a Tor server in an environment that maximizes > security and privacy.

Re: [tor-talk] Important Information for TorBirdy Users: OS upgrade (might) results in failure to mask timezone (observed on Fedora20-21 Qubes OS R2)

2015-06-23 Thread Roger Dingledine
On Mon, Jun 22, 2015 at 10:14:45PM +0200, torbirdy...@ruggedinbox.com wrote: > @TorProject: the 'cypherpunks' account is not working, could you > enable it agains so that people can use it? Fixed; sorry for the trouble. (I recommend sending more direct mail in the future, rather than tucking it a

Re: [tor-talk] Important Information for TorBirdy/Qubes OS Users: Update your iin-template packages

2015-06-23 Thread torbirdyfoo
Marek (Qubes OS) identified the root cause and updates have been released. Thanks for the fast response time! Affected Platforms -- Qubes OS R2 and R3 Fedora 21 Template and potentially others if /etc/localtime is not a copy but a symlink pointing to the actual timezone f

Re: [tor-talk] do Cloudfare captchas ever work?

2015-06-23 Thread Çağıl P . Şesto
On Mon, Jun 22, 2015 at 06:53:23PM -0400, Mansour Moufid wrote: > Sometimes I wonder if it's really Cloudflare, or some bad exit node > running a CAPTCHA solving business. If one doesn't use TLS that is a valid claim. Since the captcha image delivery should originate from google with https in mos

Re: [tor-talk] do Cloudfare captchas ever work?

2015-06-23 Thread Ben Tasker
>You're saying that some exit relay operator would form business partnerships with sites, to provide captcha services? I think the suggestion is they'd provide captcha _solving_ services. If you know where to look, you can find 'businesses' that provide just those services - workers (or users) sat

Re: [tor-talk] do Cloudfare captchas ever work?

2015-06-23 Thread Joe Btfsplk
On 6/23/2015 4:04 AM, kleft wrote: mansour moufid wrote: "Sometimes I wonder if it's really Cloudflare, or some bad exit node running a CAPTCHA solving business." Mansour, to what end would they run a captcha solving business? If they were, I don't understand how they'd benefit. It's useful f

[tor-talk] Mistake in translation

2015-06-23 Thread Bahaa Nasr
There is mistake in the Arabic translation in the Tor browser. when you open any website that use https and click on the lock in the Arabic version of Tor it always say the connection to this website is not secure. the English version work fine. Best -- tor-talk mailing list - tor-talk@lists.torp

Re: [tor-talk] Matryoshka: Are TOR holes intentional?

2015-06-23 Thread Paul Syverson
On Tue, Jun 23, 2015 at 12:06:41AM -0400, grarpamp wrote: > Longer reply may come, but I think it is useful to again say > that it may be that you must disassociate the classical "tor > centric" idea of fill away from the idea of filling the "tor circuit". > Of course any circuit level fill from en

Re: [tor-talk] Tor-ramdisk 20150616 released

2015-06-23 Thread Anthony G. Basile
On 6/23/15 12:03 AM, Çağıl P. Şesto wrote: Aren't you worried about GPL violation? Since the school were you distribute the images has no sources. Some of your components are LGPL/GPL. First thought was, ah thats the school were all the embedded engineers learn to properly violate the L/GPL and

Re: [tor-talk] do Cloudfare captchas ever work?

2015-06-23 Thread kleft
Hey there, (TL;dr) > "Anyway, funny is pirates are using cloudflare too..." > Please explain? Boards with illegal content like crimenetwork.biz are using cloudflare too. You can't really access sites with cloudflare's security-settings switched to "very secure" if you don't enable JavaScript.

[tor-talk] Bridges vs Guards

2015-06-23 Thread Thomas White
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Are there any performance tradeoffs or differences between the use of a regular guard node or the use of a bridge, assuming the hardware and uplinks etc were identical and were controlled by myself for use in high capacity hidden service clusters? T