logs archiveIRC Archive / Oftc / #tor / 2009 / December / 16 / 1
tpa
keb: one other quick question
why did privoxy get replaced with polipo? is one better than than the other?
keb
https://wiki.torproject.org/noreply/TheOnionRouter/TorFAQ#WhyHttpProxy
i just updated that yesterday :D
boas
mackan: 46877 ?? S 0:00.01 /Applications/Vidalia.app/Contents/MacOS/polipo
It's running.
I think this "Use Polipo" button in tor is not pointing to the right ports or something, because when I switched to port 8123 as 'custom setting' it at least seems to be talking to polipo (although does not connect to the site)
Sebastian
boas: that means you're not using the correct polipo configuration file
well, your package is.
boas
Sebastian: Well, I didn't have Tor on this machine before, and downloaded the stable release.
nsa
or: nickm@seul.org (Nick Mathewson) committed patch by Mike Perry <mikeperry-git@fscked.org> at Tue, 15 Dec 2009 17:10:42 -0500 (EST) to tor/master: Update translations.txt with new torbutton process.
or: nickm@seul.org (Nick Mathewson) committed patch by Nick Mathewson <nickm@torproject.org> at Tue, 15 Dec 2009 17:10:43 -0500 (EST) to tor/master: Stop using lround in or.h, and check for bad values of RECENT_CIRCUITS
or: nickm@seul.org (Nick Mathewson) committed patch by Nick Mathewson <nickm@torproject.org> at Tue, 15 Dec 2009 17:10:42 -0500 (EST) to tor/master: Fix bug 1173: remove an assert(unsigned >= 0).
boas
Sebastian: Well, I didn't have Tor on this machine before, and downloaded the stable release.
Sebastian
boas: I didn't mean to say that it is your fault
boas
So I don't know how that could be possible.
I think the Mac Vidalia.app packages may need to be looked at then
         

Sebastian
Can you give me the exact download link you used?
boas
https://www.torproject.org/dist/vidalia-bundles/vidalia-bundle-0.2.1.20-0.2.5-ppc.dmg
'stable' for PPC
(and BTW your universal download actually seems to be intel only)
phobos
it's not called universal anymore
it's called x86
;(
boas
OK
Universal binary not possible?
Sure would make the download page simpler for Mac users
Sebastian
boas: you're right
phobos
we have ppc or i386 osx binaries
Sebastian
boas: fixing the website
keb
there is a polipo config file included with the mac package, but you can compare it with the linux one https://svn.torproject.org/svn/torbrowser/trunk/build-scripts/config/polipo.conf
dont use the linux config on mac without reading the docs and knowing your systems setup
boas
Do you guys not have Macs to test with?
Do you need Mac testers? Is there a mailing list for something like that?
phobos
i build on real macs and test on a panther ppc, tiger ppc, and leopard i386
Sebastian
boas: no, we don't. Testers would be greatly appreciated
boas: not all system configs are available, unfortunately.
nsa
or: sebastian committed revision 21226 (/website/trunk/en): We don't do universal bundles anymore, let's not lie to our users.
boas
BTW what is the reason for not doing universal bundles?
phobos
because they are large, and people complained
Sebastian
One reason is that they're larger, and many people who fetch Tor are on slow connections
phobos
and apple is going i386 only
keb
or fetching via email
boas
Seems to me that Vidalia itself could be slimmed down a bit
14MB for the executable... That's a lot for a controller.
keb
grab teh source and go with it :)
phobos
why is 0.2.1.20-0.2.5 the stable
hmm
it should be 0.2.1.20-0.2.6
         

keb
so there is no development version of vidalia
boas
Sebastian: Is there any kind of standardized, distributed testing system in place right now?
phobos
no
http://git.torproject.org/checkout/tor/master/doc/tor-osx-dmg-creation.txt is I build all the packages for os x
...is how I
lagtastic
boas
phobos: Do you build on a Mac?
phobos: What is your primary OS, if I may?
keb
[17:15] phobos> i build on real macs and test on a panther ppc, tiger ppc, and leopard i386
boas
Sorry, missed that. ;-)
phobos
since you can't legally virtualize os x clients
i have 3 mac minis
the mac build stack
boas
Interesting that makers of a software used to skate around stupid laws are bound by stupid laws :)
nsa
or: nickm@seul.org (Nick Mathewson) committed patch by Nick Mathewson <nickm@torproject.org> at Tue, 15 Dec 2009 17:25:25 -0500 (EST) to tor/master: Cache the parsed value of SafeLogging as an enum.
or: nickm@seul.org (Nick Mathewson) committed patch by Nick Mathewson <nickm@torproject.org> at Tue, 15 Dec 2009 17:25:25 -0500 (EST) to tor/master: Refactor the safe_str_*() API to make more sense.
or: nickm@seul.org (Nick Mathewson) committed patch by Sebastian Hahn <sebastian@torproject.org> at Tue, 15 Dec 2009 17:25:25 -0500 (EST) to tor/master: Allow SafeLogging to exclude client related information
phobos
we make software to protect your privacy online, not to violate laws
boas
In some cases that's the same thing.
Perhaps many.
Be back in a bit...
nsa
or: phobos committed revision 21227 (/website/trunk/include): created and uploaded osx-ppc vidalia bundles with 0.2.6 vidalia.
or: phobos committed revision 21228 (/website/trunk/en): add erinn
SwissTorExit
what mean the option Safelogging on the new git ?
as relay need i enable something more in toorc ?
torrc*
good evening btw :P
nsa
or: phobos committed revision 21229 (/website/trunk/en): add back which OSes x86 mac works for, add a link for powerpc people.
Sebastian
SwissTorExit: no, as always, the defaults are ok
SwissTorExit
thanks Sebastian, :P
have a good night, i was to update today so i would be sure :P
bye bye
nsa
polipo: chrisd@seul.org committed patch by Christopher Davis <chrisd@mangrin.org> at Tue, 15 Dec 2009 19:11:09 -0500 (EST) to polipo-commits: [polipo/master] Don't crash when parsing a malformed Cache-Control: header.
polipo: chrisd@seul.org committed patch by Christopher Davis <chrisd@mangrin.org> at Tue, 15 Dec 2009 19:14:34 -0500 (EST) to polipo-commits: [polipo/master] Fix CHANGES.
or: phobos committed revision 21230 (/website/trunk/en): add 10.6
arma
chrisd_: does that same code snippet really repeat itself like 5 times? sounds like a job for mr refactorman.
nickm
cut-and-paste programming is for people with a deep abiding mistrust of procedural abstraction
chrisd_
arma: it does repeat.
refactoring it would probably be a good idea
noncombatant
Tor more important than ever in Australia pretty soon, eh?
gouki
Is there a list of people working on a particular language i18n? Trying to find some help for the website translation.
phobos
what's the issue?
Sebastian
gouki: not for most languages
Daikoku
hey guys. i am using the tor IM browser bundle for windows. How is it possible to enable referrers to be sent?
Sebastian
Daikoku: hm, referers should be sent, actually
Daikoku
Sebastian: i tested. it does not. I am using the included firefox
which was delivered with the bundle
Sebastian
when you right-click on the torbutton string in the lower right corner, and go to preferences -> security settings -> headers, is the "Don't send referer during Tor usage" option checked?
Daikoku
no, it is not checked :(
Sebastian
hrm
that sounds like a bug, then
Daikoku
it tested like this: i typed in "referer test" in google, went to www.stardrifter.org/cgi-bin/ref.cgi from there
there should stand the google url
Sebastian
Please report it at https://bugs.torproject.org/flyspray/index.php?tasks=all&project=5 if you've made sure you are using the latest torbutton version (1.2.3 at this time)
Daikoku
i downloaded it some hours ago, so yes :)
could it be a proxy-server-problem? maybe it has nothing to do with tor itself
Sebastian
It is possible that a proxy inbetween your browser and Tor is configured to scrap referer headers, but polipo (the proxy we're recommending) doesn't do that
Daikoku
polipo is just for IM i thought
Sebastian
no, polipo is not for IM, but for firefox
Daikoku
is it like vidalia?
keb
polipo connects between firefox and tor
pidgin is the IM component, it connects directly to tor
Sebastian
the Tor IM bundle consists of quite a few different programs, and they all have different purposes
Daikoku
oh ok. i see. i thought of Pidgin :)
Sebastian
Tor itself acts as a socks proxy, and every application speaking the socks porotocl can use it
Daikoku
another question would be: Java cannot be routet through proxy, right?
Sebastian
So Pidgin connects to Tor via socks
Polipo is used as a way to connect Firefox to the socks proxy, because Firefox has some bugs that make it undesirable to use Tor directly
keb
java is a language that runs in your browser/operating system. however torbutton might turn off java and some javascript in firefox.
Sebastian
Vidalia is not required for this at all, but it gives a gui to easily control Tor and see what is going on
Daikoku
Sebastian: thank u for the information. now I know more about how it works :)
Sebastian
Daikoku: when you say "java cannot be routed through a proxy", what do you mean exactly?
The reason why Torbutton disables Java is that Java (and Flash) have ways to bypass your browser's proxy settings, meaning they can be used to deanonymize you
Daikoku
Sebastian and keb: I want to enter a chat room (www.chat4free.de) but it uses Java
Sebastian: yes, that's right. I was searching for a solution to make my whole VM run with Tor
but this is not possible I think
Sebastian
oh, it is.
keb
many chatrooms have irc equivalents
Sebastian
See for example "tor vm"
https://www.torproject.org/torvm/
Daikoku
keb: the chat is not irc based
Sebastian: ok, if this is really possible, then it should be impossible for a Java program to deanonymize me
right?
Sebastian
never say never, but I would agree that it would by extremely unlikely.
keb
mostly. there wont be any non-tor connections out of your computer, but the java program could still broadcast your private data (whatever it has access to) into the chat channel.
Sebastian
ah, that's an excellent point. You would want your vm to be as clean as possible
Daikoku
keb: no, the java program of the chat site would run on the VM, which would be completely routet via Tor-Proxies
but unfortunately Tor VM is just available for Windows and not for Mac or Linux
Sebastian
Daikoku: there is a bootable cd image that contains Tor. It is called incognito
It might be an option for you
though I am _not_ sure how well it works for Java and the like
keb
there are instructions for making a transparent tor proxy on linux and forcing all traffic through it
that is how the bootable cd image works
Daikoku
keb: also for mac?
keb
i havent checked recently if there are mac instructions
transparent tor proxy setup isnt meant for the non-technically inclined ;)
Daikoku
i see... ok. that would be too much for me now :) i will search it later. it's a pitty that referrers dont work. i will report the bug. but do u know where i could register an anonymous domain using Tor? dot.tk does not work because of the referrer issue
keb
sorry i dont have the url handy but its on the tor site
Daikoku
or u know a free anonymous webspace service?
keb
if you have an email address you can try http://www.webs.com/
Daikoku
keb: thank you very much
keb
not sure where you can get an anonymous email address though
phobos
lavabit, gmail
keb
doesnt gmail require a sms now
phobos
never has for me
Daikoku
sometimes it does
but only if you have register multiple accounts
dr|z3d
Daikoku: I2P also has a good anonymous e-mail service. Anonymous by design.
lavaramano
hushmail works fine too
xtoaster
try spamavert
Daikoku
i have created one on live.com now
lavaramano
doesn't have much space as gmail or lavabit, tho
dr|z3d
Daikoku: http://hq.postman.i2p.to/
Daikoku
but: can javascript also view my real ip?
dr|z3d
javascript can, sure. depends on the javascript.
http://decloack.net
phobos
doesn't hushmail require java?
dr|z3d
hushmail is java based, yup.
that's if you're doing the crypto locally; not sure about the remote option.
Daikoku
live.com webmailer uses javascript as well i think
dr|z3d
http://decloak.net even, Daikoku.. try that with js enabled to see what's possible.
feel free to try with torbutton, also.
Daikoku
thx ;)
ok, firefox asks for security reasons to execute the script. thats good
dr|z3d
Daikoku: http://eng.anarchopedia.org/I2P#Susimail
Wouldn't be #tor without the occasional anarchopedida reference.
(Action) chuckles.
nsa
polipo: chrisd@seul.org committed patch by Christopher Davis <chrisd@mangrin.org> at Tue, 15 Dec 2009 23:24:36 -0500 (EST) to polipo-commits: [polipo/master] Simplify Cache-Control: parsing.
unixinixwenix
hello
xtoaster
ÓÐÊÂÆð×ìÎÞÊÂÍ󯡣
unixinixwenix
what is that
xtoaster
:-p
unixinixwenix
what is it?
xtoaster
ok forget about it.
unixinixwenix
no, tell! :P
(Action) leans forward and waits
Torbutton's user agent may as well cry, "Hey! Look at me! I stand out!"
xtoaster
its a classic line for the chinese emperors in the old days.
unixinixwenix
Torbutton's user agent, should one choose to use it, stands out with only a few thousand matches on search engines
I suggest using a generic Internet Explorer user agent which yields search results in the millions
that is of course if Torbutton's user agent string's basis is to "blend in"
which at present it does not, it stands out!
keb
are you using torbutton 1.2.3
unixinixwenix
One other suggestion for Torbutton: the option to not use cookies should be a feature, rather than simply the option to "manage this yourself (dangerous)"
keb: I've been using all versions for testing
keb: call for testing and I'm testing!
Now I've suggested two items, I ask one question: Is Torbutton available for iceweasel?
Sebastian
unixinixwenix: it is already trivial to detect that someone is using Tor. The main goal of a uniform user agent with torbutton is to allow people to blend in with other Tor users.
unixinixwenix
Sebastian: would it not be a preferred method of using a more common user agent than a firefox user agent which stands out?
Sebastian: the idea is to blend, why not blend more
Sebastian
Choosing an Internet Explorer user agent would not only mean that websites might try to enable some IE hacks to work right, it also means we're misrepresenting firefox in web browser usage statistics without any need.
« prev 1 2 3 next »