[tor-talk] Tails 0.16: DEBsig-verify disabled by default? EXCELLENT so I can get pwned and never know it, thanks guys.

2013-02-08 Thread ratlimo
cat /etc/dpkg/dpkg.cfg # dpkg configuration file # # This file can contain default options for dpkg. All command-line # options are allowed. Values can be specified by putting them after # the option, separated by whitespace and/or an `=' sign. # # Do not enable debsig-verify by default; since t

[tor-talk] Tails 0.16: Why the fsck does Tails 0.16 use an ancient version of OpenSSL? And has it been crippled somehow?

2013-02-08 Thread ratlimo
Look at this: [notice] No AES engine found; using AES_* functions. [notice] This version of OpenSSL has a slow implementation of counter mode; not using it. [notice] OpenSSL OpenSSL 0.9.8o 01 Jun 2010 looks like version 0.9.8m or later; I will try SSL_OP to enable renegotiation [notice] We weren't

[tor-talk] Vidalia Network Map list blank

2013-02-04 Thread ratlimo
Tails 0.16 - Vidalia relays list is blank at start and with continued use without a refresh. Bug is identical in previous versions. Functions without refreshing the list but with some errors in the circuit build area. I click refresh. Vidalia loads relay list - around 3000 relays. Circuits are

[tor-talk] SERIOUS ISSUE / HOLE With Details! Re: Base64 Encoded Images: How to block them?

2012-11-14 Thread ratlimo
From: https://tails.boum.org/forum/Base64_Encoded_Images:_How_to_block_them__63__/ @comment 9: "This has been a known "trivial" bug since 2006. Looking it over, it appears that the security benefit of being able to reduce ones browser's attack surface might have been overlooked. Or perhaps we've

[tor-talk] Base64 Encoded Images: How to block them?

2012-11-14 Thread ratlimo
Visit news.google.com with images disabled in your browser. You'll notice [some] images are displayed. Right click on one of the images and select View Image Info. Now browse through the files listed and you'll discover some beginning with the following instead of http:// data:image/jpeg;base64,/

[tor-talk] Firefox ESR: Using Hardware Acceleration: good or bad?

2012-11-14 Thread ratlimo
In Firefox ESR Preferences: Use hardware acceleration when available Is there any attack vector by allowing this feature? (it is on by default) I've read articles on malware replacing or altering [graphics card(s)] firmware and since Tor users shouldn't use Flash [though some use HTML5 - could th