Re: [tor-talk] Tor for everyone; introducing Eccentric Authentication

2016-02-24 Thread Paul Syverson
On Thu, Feb 25, 2016 at 12:26:02AM +0100, Guido Witmond wrote: > > I don't want *people* to exchange keys. I envision people to exchange > names and let computers do the key lookup. > The description below sounds a fair amount like Keybase (https://keybase.io) Perhaps it would be helpful to cont

Re: [tor-talk] Thoughts on Tor router hardware

2016-02-24 Thread Jason Cooper
Hi Rob, On Tue, Feb 23, 2016 at 09:46:53PM +0100, Rob van der Hoeven wrote: > The last month I have been playing with cheap Tor router hardware. This > turned out to be quite a nice experience and it got me thinking about > the benefits of running Tor on the router. There are many benefits, but

Re: [tor-talk] Tor for everyone; introducing Eccentric Authentication

2016-02-24 Thread juan
On Thu, 25 Feb 2016 00:26:02 +0100 Guido Witmond wrote: > So, to answer your question: people communicate id@site names, the > computer verifies the uniqness properties to determine the > corresponding public keys. The requirement to make the relation > between names and public keys is key. Pun

Re: [tor-talk] Tor for everyone; introducing Eccentric Authentication

2016-02-24 Thread Guido Witmond
On 02/24/16 23:26, juan wrote: > On Wed, 24 Feb 2016 23:04:39 +0100 > Guido Witmond wrote: > >> My drive is to make key exchange happen as a natural part of normal >> interactions between people. > > So teach people how to exchange keys. Teaching is not a solution. See Peter Gutmann's bo

Re: [tor-talk] Tor for everyone; introducing Eccentric Authentication

2016-02-24 Thread juan
On Wed, 24 Feb 2016 23:04:39 +0100 Guido Witmond wrote: > My drive is to make key exchange happen as a natural part of normal > interactions between people. So teach people how to exchange keys. > Not as a separate step that could be > neglected, forgotten or done wrong. Ah yo

Re: [tor-talk] Tor for everyone; introducing Eccentric Authentication

2016-02-24 Thread Guido Witmond
On 02/24/16 00:22, Allen wrote: >> >> Secondly, with the requirement that nickn...@sitename.tld to be unique, >> I could write that nickname on a business card and hand it out. People >> could verify at a verification service that there is only one >> certificate (and public key) for that name and

Re: [tor-talk] Not able to download Tor to droid

2016-02-24 Thread Nathaniel Suchy
If you stop Tor (Orbot) and then start it again the issue should be fixed. On a side note why isn't Tor built into Orfox on Android? On iPhone there is an open source project OnionBrowser where the Tor Binary is built in. I am curious why the Orbot/Orfox team hasn't done the same. Webpage: https://

Re: [tor-talk] Not able to download Tor to droid

2016-02-24 Thread Jeremy Rand
Firefox for Android is not sufficient for good anonymity. Something like Orfox or Orweb is probably much safer. (Sorry for top post, I'm on a phone.) On February 24, 2016 3:18:14 PM CST, libertyinpe...@riseup.net wrote: >Did a factory reset on the droid tablet. Was finally able to properly >do

Re: [tor-talk] Thoughts on Tor router hardware

2016-02-24 Thread Roger Dingledine
On Wed, Feb 24, 2016 at 01:22:01PM -0500, Nathan Freitas wrote: > On Tue, Feb 23, 2016, at 03:46 PM, Rob van der Hoeven wrote: > > My conclusions are that running Tor on the router can enhance both > > security and usability. It further opens new possibilities for expanding > > the Tor-network and

Re: [tor-talk] Not able to download Tor to droid

2016-02-24 Thread libertyinperil
Did a factory reset on the droid tablet. Was finally able to properly download Orbot. As well as Orfox. Is Orfox necessary for Orbot to work properly? Firefox installed is not enough as it is with Windows? I was able to get to the Tor browser page and it verified it was indeed Tor. When I t

Re: [tor-talk] Thoughts on Tor router hardware

2016-02-24 Thread Nathan Freitas
On Wed, Feb 24, 2016, at 03:04 PM, some_guy...@safe-mail.net wrote: > > My conclusions are that running Tor on the router can enhance both > > security and usability. > > You are dead wrong on that. (Semi-) transparent proxying is bad for quite > a few reasons. > Unless you know what you are doin

Re: [tor-talk] Thoughts on Tor router hardware

2016-02-24 Thread some_guy123
> My conclusions are that running Tor on the router can enhance both > security and usability. You are dead wrong on that. (Semi-) transparent proxying is bad for quite a few reasons. There is a huge number of applications with their own automatic update process that's insecure and vulnerable t

Re: [tor-talk] Thoughts on Tor router hardware

2016-02-24 Thread Nathan Freitas
On Tue, Feb 23, 2016, at 03:46 PM, Rob van der Hoeven wrote: > My conclusions are that running Tor on the router can enhance both > security and usability. It further opens new possibilities for expanding > the Tor-network and can provide a stable source of income for the > Tor-project. > Wrote an

[tor-talk] Fwd: Orbot v15.1.2 released

2016-02-24 Thread Nathan Freitas
We are now using obfs4proxy to support both obfs4 and meek connectivity using the new "meek_lite" feature provided by Yawning. It is working great, and Bridges+VPN support now works back to Android 4.1. This is also reduced the distribution binary size of Orbot from 14MB to 11MB. - Original m

Re: [tor-talk] Vulnerability

2016-02-24 Thread Josef 'veloc1ty' Stautner
Hi, what do you mean? ~Josef Am 24.02.2016 um 15:57 schrieb Jackson Miller: > Is there are hope on fixing Tor's vulnerability with it's entry and > exit nodes? -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cg

Re: [tor-talk] Tor for everyone; introducing Eccentric Authentication

2016-02-24 Thread Aymeric Vitte
I am not sure neither to understand the interest of the system. Why should it be better than systems such as Namecoin? Why this (umpteenth) concept of discussing using hidden services (unlikely to be usable by normal people) on a small network like Tor? How do you prevent name squatting/spoofing

Re: [tor-talk] Tor-users per capita in Tor metrics

2016-02-24 Thread sajolida
chloe: > Hello, > > I thought it would be a great idea to have data on how many Tor-users > each country has per capitaa as it would show a more accurate number on > how active a country uses Tor. Indeed :) > How can I reach out to the Tor Metrics devs to get this data implemented? Maybe there: