logs archiveIRC Archive / Oftc / #tor / 2010 / January / 13 / 1
ilter
Links at download site refer same site.
nickm
the actual thing you download, not the page where you get it
sorry, gotta go afk for a while.
ilter
nickm: Ok, thank you so much for your helps.
Also thank you dr|zed for your helps.
dr|z3d
Always a pleasure, ilter :)
mikeperry
wow
http://googleblog.blogspot.com/2010/01/new-approach-to-china.html
chinese attacks on human rights activists
kmacy
does that surprise you?
dr|z3d
What's most surprsing is that google are publicly reconsidering their stance in China.
mikeperry
yes
jr_
dr|z3d: *that* surprises me
         

mikeperry
I do think the scope of the attack and compromise is suprising, as is their public announcement about that fact
dr|z3d
mikeperry: It augurs well for a new and more honest and open google. Let's hope!
jr_
yup, the scope was also surprising but the actual attacks don't surprise me
keb
they might be publishing a statement before it leaks out that gmail accounts were compromised and people lose confidence
jr_
heh
murb
have people seen http://googleblog.blogspot.com/2010/01/new-approach-to-china.html </offtopic>
?
jr_
scrollback
dr|z3d
mikeperry got there first, murb..
murb
ah
MoiraA
can anyone confirm that if your ISP handed over logs of your activity the fact you had used tor would not totally protect you?
not that I have done anything awful :)
dr|z3d
Protect you from what?
Sebastian
nothing totally protects you.
MoiraA
it's just that I want to know if they would be able to trace your activity
sites you clicked on
dr|z3d
Not your Tor activities, no.
MoiraA
why not?
they click on you going to the first IP
that is it?
dr|z3d
They can't track that.. that's exactly what Tor prevents them doing.
They can see you using Tor, just not what you're using it for.
MoiraA
but the correlation of time
dr|z3d
Correlation of time? Bah. They don't have te resources to check for that.
MoiraA
say you committed identity theft
hacked a forum
and .... ok
depends though
pipe
the forum owners would have to check with every ISP in the world
         

MoiraA
suppose you had the location of osama bin laden on your hdd
pipe
pretty much
MoiraA
or you got some nerd who totally lost the meaning of life
pipe
Ok, suppose I have his location on my hd
then what
MoiraA
and interested half the scientists around the world in taking your computer apart
jr_
heh
dr|z3d
If you had the location of Osama on your HD, and the police confiscate your pc, you better be sure you've got some heavy encryption and a very bad memory. Tor won't protect you, there.
pipe
Yeah, my HD isn't the internet
I don't use tor to access my HD :P
MoiraA
even if they had someone's strong claim you had his location, they would get a magistrate to sign a warrant and seize your pc
woudn't they?
tor would be forgotten
jr_
Tor protects you from what you do *elsewhere*
pipe
MoiraA: Look, you should really read up about basic computer security if you're interested in this
jr_
getting a warrant signed is trivial
it is basically a procedural nicety protecting you from overzealous LE
keb
oic. so someone claimed on a forum they had Obama's location on their HD, and now they are worried about being traced
MoiraA
yes my point is that they wouldn't use IP logs if they could get your computer
so if you were tryint to lead a blameless life after someone accused you of something
pipe
(Action) lost track
MoiraA
and you religiously used tor or clicked on tame sites for a month
that would probably not stop them seizing your pcs
pipe
I think MoiraA is using tor for transporting logic
jr_
heh
MoiraA
:)
(Action) is tired
very
pipe
Because I can't trace it :P
jr_
pipe: it is very circuitous
keb
they can trace all activities that occurred before you used Tor
[Fiore]
.:::] Ci40 @ Tutti [:::.
mfwitten
I want to keep certain web resources (servers) from being accessed by various websites. Should I try to configure Tor, torsocks, or privoxy?
keb
are you running a Tor exit node?
or are you looking for something to put on your servers to protect them from Tor users?
or other users
mfwitten in other words, i did not understand your question or situation
dr|z3d
mfwitten: Yeah, it's not entirely clear what you're trying to achieve. Can you rephrase?
Or perhaps tell us your use case?
mfwitten
I want to block lookups of google-analytics, and I would expect that editing /etc/hosts ain't gonna do it.
lookups/usages/whatever
dr|z3d
mfwitten: That's easy enough. Use NoScript in Firefox.
And then blacklist google-analytics and whatever other domains you find undesirable.
If you want ip level blocking, try Peerguardian on Windows, or moblock (and mobloquer) on Linux.
keb
i find that RequestPolicy also blocks google-analytics
dr|z3d
Yup. Request Policy also a good option.
Request Policy's a bit heavy handed, though.
keb
thats how i like my blocking ;)
dr|z3d
And it's whitelist/blacklist functionality not so hot.
keb
true
dr|z3d
mfwitten: Does that answer your question?
mfwitten
dr|z3d: Yeah, I'm reading about them.
keb, dr|z3d: Thanks.
L0rD`
mfwitten: another useful firefox addon is: ghostery , it can block up to 231 web bugs (like google analytics etc.)
keb
i've stopped using add-ons that require long blacklists to work, i prefer the whitelisting approach
mfwitten
keb: I prefer blacklists AND whitelists :-)
dr|z3d
mfwitten: adblock plus, element hiding helper and the easylist+easyprivacy subscription you might also like to check out.
keb
ehh?
Zarion
I'm trying to setup a tor/polipo setup on my Debian box, but I can't get it to work through polipo, only directly to sock5 9050
I want to be able to access it via my windoze machine
keb
lol
Zarion
Do I even need polipo or privoxy?
keb
did you get polipo to listen on the machine's LAN address on port 8118
you need an http proxy until they fix firefox
Zarion
I was using 8123, I culdn't find the port number in the config
keb
for non-http applications, you can point them directly at Tor's socks port
polipo listens on 8123 by default
Zarion
I try using it, and the page goes white and it just stops
keb
thats ok. if you are using Torbutton on firefox in windows, you might to manually change the port for proxy
may be simpler to make polipo listen on 8118
Zarion
I have polipo setup to connect socks5 to the 192.168.1.250:9050 what I have setup for the tor listen addie, that works as I can point firefox to it and access some sites, like .onion sites
I'm using foxyproxy
Dosen't torbutton do the same thing?
dr|z3d
No.
FoxyProxy provides no protection against leaks at all; Torbutton does.
keb
if tor is on the same machine, you could have polipo forward to Tor on 127.0.0.1:9050
but i guess it should work as is
Zarion
Its a on or off settings isn't it?
tor and polipo is on a seperate machine running Debian
keb
yeah
Zarion
I like foxyproxy because I can setup to use tor for only certain sites
dr|z3d
FoxyProxy and Torbutton you can run together.
keb
torbutton prevents leakage of information from Tor to non-Tor sessions
Zarion
okay ;P
dr|z3d
Otherwise, you're better off actually running two separate instances of Firefox on different profiles, at the same time.
"firefox -no-remote -P" for the second instance. One profile for normal use, one for Tor use (with Torbutton).
Zarion
I'm looking into setting with a exit relay when I get my VPS setup
Yea
keb
excellent
Zarion
VPS's are cheap now days ;P
$10 for 75 Gig worth of traffic
keb
how cheap
how much for 750GB
a fast node generates a lot of traffic
s/generates/carries/
Zarion
300 gig is $65
keb
yeah im paying about the same rates
$100 for 2000GB
Zarion
yea, I see their were bandwidth setting in tor though, so atht would defently have to be used ;P
I was going through byethost
keb
netelligent
Zarion
I had a free www account, and was very impressed with their server, so I figured it might be a good idea to look at their other offers
I'll look them up, as I'm still asking sites abuot the charges of going over and such
keb
so they have good marketing :)
Zarion
keb, yup they give you phpmyadmin and cpanel, very nicely setup, I was able to get a forum up with -0- issues
keb
nice
Zarion
keb, do you think it's possible to run tor on Google Code?
Their opentracker Bit Torrent trackers on their ;P
keb
google runs user apps on their server?
Zarion
Yup, just google up [Google code]
But I'm no programmer
I mess with limux, and thats about it
jrabbit
On google appengine they do.
keb
someone was translating Tor into Java. maybe that will run on the google app engine
Fred_
yeah because when i think google, i think privacy
keb
:P
dr|z3d
(Action) laughs. "good one, Fred_!"
Fred_
as a matter of fact, lets run all relays on google servers
keb
hey, they have the bandwidth. running middle relays should be ok
Zarion
Is their a way to stop firefox from timing out every time I go to a tor site unless I hit retry about 5 times then it usually loads
keb
if firefox goes directly to the socks port, it will timeout. with a http proxy it shouldnt take more than a couple tries
dr|z3d
Zarion: You might also try adding the boolean network.dns.disablePrefetch to about:config and setting to false, then restarting Firefox.
keb
lots of hidden services are a bit slow
dr|z3d
Erm, setting to true, sorry.
Zarion
guess I need to find out why my polipo isnt working
dr|z3d
Zarion: Did you install it from a repo, and if so, did you also download the example polipo conf?
j_r
keb: tor on android would be cool
Zarion
torbutton don't seem to work
•dr|z3d• I used a apt-get install polipo
that was it
dr|z3d
Then it isn't configured for Tor.
And it will be listening on :8123
Zarion
I set the same as I have in foxyproxy but it says theirs something wrong, probably polipo not talking to tor
torbutton listens on 8123?
dr|z3d
No. Polipo does, if you haven't configured it for Tor.
Which you haven't. Which is why it's not working, nor Torbutton, most likely.
keb
torbutton is a firefox patch, not a separate process
dr|z3d
http://www.pps.jussieu.fr/~jch/software/polipo/tor.html
http://www.torproject.org/docs/tor-doc-unix.html.en
http://www.antagonism.org/anon/polipo-tor.shtml
That should put you on the right page, Zarion :)
Zarion
the .fr one I did
dr|z3d
Recommend you also look at the tpo page. It has explicit instructions.
(and a demo config file)
Zarion
okay 8118 is working ;P
Could foxyproxy be used to turn torbutton on for certain sites?
dr|z3d
No.
If you're using FoxyProxy and want safety, you need to leave Torbutton on fulltime. Otherwise, like I said, use 2 instances of Fx.
Zarion
yea, a site said you could use foxyproxy for a white list of non-tor sites, but that just wouldn't work very good
dr|z3d
The author obviously is a bit uninformed.
(or doesn't actually care that much about privacy and anonymity).
Zarion
hmm .onion sites don't work if I use torbutton and turn foxyproxy off
dr|z3d
FoxyProxy off probably unsets your proxy.
Zarion
yup is disables torbutton also, but I reenable it and the test shows its working okay
keb
proxy wars
*add-on
Zarion
no polipo is junk
dr|z3d
Polipo is fine. Your ears just aren't working.
« prev 1 2 3 next »