logs archiveIRC Archive / Oftc / #tor / 2010 / May / 24 / 1
xiando
git pull gives me "fatal: read error: Connection reset by peer", they won't let me get access to the fancy new technology, anyone working on fixing this?
Sebastian
yes, it is known
Might be a while until it is fixed, maybe try tomorrow
xiando
OK, thanks.
nsa
or: [Tor Bug Tracker & Wiki] #1503 was updated: #1503: Torbutton prevents GUI customizations in Firefox on Ubuntu - http://trac.torproject.org/projects/tor/ticket/1503#comment:3
or: Comment(by phobos):
or: rather than finding an old version, you may want to enable debug logging
or: for extensions and see what torbutton or tab mix plus reports as errors[...]
or: [Tor Bug Tracker & Wiki] #1507 was updated: #1507: Country Of Origin Malfunction - http://trac.torproject.org/projects/tor/ticket/1507#comment:3
or: Comment(by phobos):
or: Tor nodes don't choose a location. Your client ships with a geoip
or: database. Your client resolves tor nodes to countries. Vidalia resolves[...]
xtoaster
anyone know orbot ?
Runa
I know what it is, but haven't used it :)
xtoaster
there is a sentence which seems odd to me: For Android 2.x devices, you MUST ROOT your device in order for Orbot to work transparently, as there is no browser that will work for non-root devices.
it seems to suggest there is no browser on non-root browser
device*/browser
arma
the key word is 'transparently'
if you want to transparently redirect connections into tor, there are extra steps needed.
i don't have an android, but i'm under the impression that "proxy settings" are an uncommon notion on android
xtoaster
oh. i see. this sentence is half finshed
so it means no root no browser support tor
         

Runa
xtoaster: seems like it, yes :)
xtoaster
hm thanks got ya
nsa
or: pootle committed revision 22382 (/translation/trunk/projects/orbot/zh_CN): Commit from The Tor Translation Portal by user xtoaster. 32 of 32 messages translated (0 fuzzy).
arma
xtoaster: ah, you were trying to figure out what the sentence meant, to translate it?
seems like we should make the sentence better in english too.
xtoaster
yah. it failed to realize that transparent proxifing is what it meant to say.
i/it*
(Action) is looking forward to an android phone to give orbot a test drive :)
arma
so what's been going on with bridge blocking in china? looks like they're blocking lots of bridges, regardless of distribution scheme?
might be time for us to resume thinking about ways you can block tor by network fingerprint, and resolve them
http://metrics.torproject.org/torperf-graphs.html
this is a good couple of days for the tor network
xtoaster
ah. tor is really doing well around apr10
arma
that's "apr 2010"
and no, high is bad
this is the number of seconds on average it takes to fetch a 50kb file through tor
in april, it was up to 20 seconds on average
now it's back to 4-5 seconds
xtoaster
oh. oops :-p
xiando
those graphs should go down down down xtoaster
xtoaster
many times, i read graph first and axis second :-/
hm at least it looks good now.
xiando
I never got a reply on the mailling list why MyFamily can't be done with some sort of Private Key, maby it's not important, maby everyone missed it. If I could make a Private Key for XiandoTorWorldOrderFamily then that would ensure that nobody else could claim to be in the XiandoWorldOrderGang without stealing my key, and I wouldn't have to maintain a long list - which is what I understand was the PerfectPrivacy issue
xtoaster
btw, no matter if i use it or not, my tor loads as service at startup. my recently it is in a strange status here when i use it. i always got time out error. but in netstat i can always see tor has a connection with a remote host in established status.
xiando
always? strange. I rarely if ever get timeout
xtoaster
tor seems to be lazy. and reluctant to close that connection and try other nodes. unless i refresh my page like crazy or to close its connection by force
i think its a entry guard since the connection is always that host for days. but really that guard doesnt work, i doubt if it has successfully transferred any payload
arma
xiando: sounds like your idea would work. i haven't finished reading that thread. it blew up while i was on a plane.
xiando: the challenge from my perspective is: since the 'family' thing is a very rough approximation anyway, how much complexity should we force on the relay operators, for an unknown return?
xiando
always force as little complexity as possible? Making and sticking a key in torrc sounds less complex in this case, but how many relay operator(s) will be showing up with 20+ tor nodes? I have no idea. I doubt it'll _that_ many. Current MyFamily really does work just fine if you run 2-3 boxes
I also doubt the return would be that great, if I am The Bad Guy and I show up with the 20+ nodes to Attack Everyone then I'm not about to care about MyFamily
xtoaster
family reminds me of that tor cluster family. it sounds reasonable that such big families should have some protection from impostors.
arma
xiando: right. maybe people who run lots of relays and would like to label them as families are actually very safe.
xiando: it gets even more complex when we think of network-level adversaries. tor avoids using two relays on the same /16, but what about two relays in the same AS? what about two relays that share an internet exchange?
xiando
uhm now you're talking about something "not easy" to solve, avoiding those by family would leave the tor network with what? 5 different families?
         

arma
and the resulting reduction in entropy for path selection would aid an attacker
Sebastian
xiando: git works again, in case you haven't noticed
SwissTorExit
hello to everyone , seem to really more quick to browser for me, the latency are many reduce , 600 to 1000 instead 3000 - 4000 the last months , really nice open are quick open ^^
linuxhippy
Hi, which signal is used to gracefully shutdown a tor-daemon?
SIGTRAP?
phobos
SwissTorExit: I suspect that has more to do with china successfully blocking tor than anything else
removing a 100k+ users from the tor network seems to help speed up tor
SwissTorExit
oh ok, like you said last time, yeah, it's lot of help for sure :P
phobos
linuxhippy: sigterm i think
xtoaster
which seems the only bright side of a sad story :-o
phobos
and apparently most chinese people repeatedly hit the website looking for bridges
where i suspect china gfw admins already crawled the bridges website
or they found some other way to block tor
SwissTorExit
that's really bad .. :/
phobos
but the bridges given out by instant messaging or social networking haven't been blocked
xtoaster
+ the chiese idc spy nodes :-)
linuxhippy
@phobos: just found it. Its sigint
thanks, bye :)
nsa
or: [tor/master] 2010-05-24 16:17:43 Nick Mathewson <nickm@torproject.org>: Merge branch 'port_to_wince'
or: [tor/master] 2010-05-21 02:59:48 Nick Mathewson <nickm@torproject.org>: Add 'changes' file for Windows CE port
or: [tor/master] 2010-05-21 02:50:37 valerino <valerino@te4i.com>: Don't use "try" as an identifier
or: [tor/master] 2010-05-22 01:02:32 valerino <valerino@te4i.com>: moved wince related includes and defs to compat.h where possible, removed unused/redundant wince includes
or: [tor/master] 2010-05-21 02:51:47 valerino <valerino@te4i.com>: Log the correct address when purging a mismatchd DNS cache address
or: [tor/master] 2010-05-21 02:53:39 valerino <valerino@te4i.com>: Port Tor to work on Windows CE
or: [tor/master] 2010-05-24 16:30:19 Nick Mathewson <nickm@torproject.org>: Make pointer types correct in WinCE patch
Jadoza
holy cow .... The bridge has gone from 300 MByte/day to 1.5 GByte/hour of traffic :) And it is a multitude of clients connected
United arab emirates, iran, china, pakistan, saudi arabia ... aswell as not-so-opressed countries as france and the US
waggle
how does he know who is connecting if it's just a bridge? unless a bridge can be an entry point too? I thought "bridge" meant that it was the middle node.
Jadoza
testing
There ... chatting on #tor using tor
I hope
darrob
Jadoza: looking good :)
waggle: a bridge is an unpublished entry node which allows people from countries that block tor to connect to the network.
Jadoza
darrob, Looks like it. I thought it would be a good idea to mask my IP
waggle
darrob, would that add a 4th node?
Jadoza, why does it matter now?
(at this point)
Jadoza
waggle, Since I run a bridge, the fewer that knows my IP, the better
darrob
waggle: no, bridges are normal entry nodes. the difference is that they're not listed anywhere so they can't be blocked quite as easily.
Jadoza
Should have been done earlier I guess
waggle
darrob, how do you use an bridge entry node instead of a normal entry node?
darrob
Jadoza: well it looks like your bridge is doing fine so far :)
Jadoza
I'm still curious what is using all the tor bandwidth ... 1.5 GB/hour is not massive, but it's quite a step up from 300 MB/day
darrob
waggle: you get a bridge address and tell tor specifically to use it. i can't be more specific because i've never done it myself.
Jadoza
darrob, I had regularly 100+ chinese clients a few weeks ago, now it's just 1-8
so you never know who's watching and blocking
darrob
interesting
waggle
Jadoza, do you know how to use a bridge as a client?
Jadoza
Not sure what that means vene :)
even*
so I connect my bridge to the network as a client?
waggle
i want to use a bridge. how do i do it?
darrob
you should be able to find some info on that on torproject.org
Jadoza
my head starts to hurt .... It's like thinking about time travel
waggle
:P
darrob
waggle: is tor blocked in your country?
uSuRa
yesterday 244.61 GB | 276.21 GB | 520.82 GB
Jadoza
uSuRa, That's the bandwidth of your three tor nodes? :)
uSuRa
only 1
in - out - total
Jadoza
aah, up/down/total
that's massive
waggle
I wonder if Tor is infested with chinese and american spies
Jadoza
20 gig / hour is like 5 MB/s
that's 50 Mbit just for tor :)
waggle
did any of you hear about that massive spy ring that was uncovered in late march?
Jadoza
I have heard about uzbekistan and how they spy on refugees trying to get into sweden
some countries ... :)
waggle
some countries what?
Jadoza
are totally effed up
waggle
Jadoza, this was much bigger.
enki
is the Tor doxygen hosted anywhere? I can't seem to find it.
« prev next »