Shewstring v1.0.1

Hi everyone,

I have released Shewstring v1.0.1.

Shewstring is a collection of Bourne Shell functions and scripts for building installers of secure and
anonymous FreeBSD distros. It is primarily intended for developers of anonymity systems,
administrators of anonymous services (such as Tor hidden services), security experts, etc., but
ordinary users that have some skill in the art of security and anonymity may find it very useful too. One use
of it might be to build an installer for easy to set up inproxies and outproxies for the darknets; another
might be to host a service across all major darknets; or the user of the software might just want a secure
desktop with cryptography tools and access to all major darknets. Shewstring abstracts away most of the
complexities of building secure systems, so an installer can consist of simple function calls and script
executions. Only customization or use of darknet features that dont have functions yet would need custom shellcode.

Here are the major changes:

    * Vidalia now works, thanks to the Tor community.
    * Fixed Tor hidden services.
    * Add anti-tracking entries in Adblock Plus.
    * Fixed a bug where calling some scripts with a relative path instead of an absolute one caused them to malfunction.
    * Added two scripts for users: scripts/backup.sh and scripts/restore.sh to create and restore encrypted
7z backups of your Shewstring files.
    * You can now install Shewstring using only one removable medium, instead of two.
    * Add ExcludeExitNodes entries generated by InspecTor.
    * Protect users of scripts/upload_ftp.sh from file modification time leaks.
    * audit.sh now securely wipes the trash folder in /usr/shew/data, if it exists.
    * Fixed XFBurn.
    * Many programs updated, and configurations tweaked.
    * Many small bugs fixed.

dead bridge....

_______________________________________________
tor-talk mailing list
tor-talk <at> lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Feedback on new Orbot data stats

Sathya (our fantastic GSoC 2011 dev) has been working on improving the
display of information that we can glean from Tor via the control port
interface.

You can see the results of his work (including an initial screenshot) so
far here: http://gsathya.in/blog/?p=66

We would like feedback from Tor/Vidalia and Orbot users out there on
what data from Tor that you feel is useful and necessary both as a
general case, and perhaps what might be more relevant in a mobile context.

One case to consider is that in mobile, we are constantly losing our IP
connection, switching from 2G to 3G to Wifi to no service at all. What
information does Tor produce that can help the user understand better
the state that Orbot is actually in?

We are also trying to consider three modes of display: the main screen
"dashboard", a full screen detail view, and background notifications
that alert the user to important state changes.

Thanks!

+n8fr8

_______________________________________________
tor-talk mailing list
tor-talk <at> lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Torbutton 1.4.0 released

Torbutton 1.4.0 has been released at:
https://www.torproject.org/torbutton/

The addon has been disabled on addons.mozilla.org. Our URL is now
canonical.

This release features support for Firefox 5.0, and has been tested
against the vanilla release for basic functionality. However, it has
not been audited for Network Isolation, State Separation, Tor
Undiscoverability or Interoperability issues[1] due to toggling under
Firefox 5. 

If you desire Torbutton functionality with Firefox 4/5, we recommend
you download the Tor Browser Bundle 2.2.x alphas from
https://www.torproject.org/dist/torbrowser/ or run Torbutton in its
own separate Firefox profile.

The reasons for this shift are explained here:
https://blog.torproject.org/blog/toggle-or-not-toggle-end-torbutton

If you find bugs specific to Firefox 5, toggling, and/or extension
conflicts, file them under the component "Torbutton":
https://trac.torproject.org/projects/tor/report/14

Bugs that still apply to Tor Browser should be filed under component
"TorBrowserButton":
https://trac.torproject.org/projects/tor/report/39

Bugs in the "Torbutton" component currently have no maintainer
available to fix them. Feel free to step up.

(No, simply mis-filing your Torbutton toggle bugs under
TorBrowserButton won't cause them to get fixed accidentally. It will
just annoy me slightly as I relocate them to the correct component).

Here is the complete changelog:
 * bug 3101: Disable WebGL. Too many unknowns for now.
 * bug 3345: Make Google Captcha redirect work again.
 * bug 3399: Fix a reversed exception check found by arno.
 * bug 3177: Update torbutton to use new TorBrowser prefs.
 * bug 2843: Update proxy preferences window to support env var.
 * bug 2338: Force toggle at startup if tor is enabled
 * bug 3554: Make Cookie protections obey disk settings
 * bug 3441: Enable cookie protection UI by default.
 * bug 3446: We're Firefox 5.0, we swear.
 * bug 3506: Remove window resize event listener.
 * bug 1282: Set fixed window size for each new window.
 * bug 3508: Apply Stanford SafeCache patch (thanks Edward, Collin et al).
 * bug 2361: Make about window work again on FF4+.
 * bug 3436: T(A)ILS was renamed to Tails.
 * bugfix: Fix a transparent context menu issue on Linux FF4+.
 * misc: Squelch exception from app launcher in error console.
 * misc: Make DuckDuckGo the default Google Captcha redirect destination.
 * misc: Make it harder to accidentally toggle torbutton.

1. https://www.torproject.org/torbutton/en/design/#requirements

--

-- 
Mike Perry
Mad Computer Scientist
fscked.org evil labs

_______________________________________________
tor-talk mailing list
tor-talk <at> lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Maintaining your privacy sending e-mails

Hello, all!

How do you manage to send e-mails? I'd like to send e-mails in an
anonymous way but most of the webmails make it very difficult. I bet
that it is not easy to do using my own SMTP and POP3 servers either.
Is that possible?

(My intentions are not illegal, so it would be ok to use a method
which would force me to present myself on a jugde :) )

Thanks in advance!

--
Adam Victor Nazareth Brandizzi
http://brandizzi.googlepages.com/
_______________________________________________
tor-talk mailing list
tor-talk <at> lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: Maintaining your privacy sending e-mails

> How do you manage to send e-mails? I'd like to send e-mails in an
> anonymous way but most of the webmails make it very difficult. I bet
> that it is not easy to do using my own SMTP and POP3 servers either.
> Is that possible?

Try to use an anonymous e-mail account and connect to that account via
TOR. E-mails shoud be encrypted locally (with GnuPG) so that servers do
not see the unencrypted text. Mail shoul be stored locally on a
Truecrypt volume.

There was a Firefox extension called FireGPG which supported some
webmails but it is discontinued now.

Jacek Szymona
_______________________________________________
tor-talk mailing list
tor-talk <at> lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: Maintaining your privacy sending e-mails

On 07/07/2011 07:04, jsz wrote:

> There was a Firefox extension called FireGPG which supported some
> webmails but it is discontinued now.

FYI, FireGPG is still alive (ish). I am running FireGPG on Firefox 5.
See: https://grepular.com/FireGPG_on_Firefox_5

--

-- 
Mike Cardwell https://grepular.com/  https://twitter.com/mickeyc
Professional  http://cardwellit.com/ http://linkedin.com/in/mikecardwell
PGP.mit.edu   0018461F/35BC AF1D 3AA2 1F84 3DC3 B0CF 70A5 F512 0018 461F

_______________________________________________
tor-talk mailing list
tor-talk <at> lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: Maintaining your privacy sending e-mails

> FYI, FireGPG is still alive (ish). I am running FireGPG on Firefox 5.
> See: https://grepular.com/FireGPG_on_Firefox_5
Is there a binary for Windows?
_______________________________________________
tor-talk mailing list
tor-talk <at> lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: Maintaining your privacy sending e-mails

On 07/07/2011 20:22, jsz wrote:

>> FYI, FireGPG is still alive (ish). I am running FireGPG on Firefox 5.
>> See: https://grepular.com/FireGPG_on_Firefox_5
> Is there a binary for Windows?

It works on Windows, OSX and Linux using the method described at that
URL. Nobody is distributing an XPI, but you can build your own by
following the instructions in the git repository.

--

-- 
Mike Cardwell https://grepular.com/  https://twitter.com/mickeyc
Professional  http://cardwellit.com/ http://linkedin.com/in/mikecardwell
PGP.mit.edu   0018461F/35BC AF1D 3AA2 1F84 3DC3 B0CF 70A5 F512 0018 461F

_______________________________________________
tor-talk mailing list
tor-talk <at> lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: Maintaining your privacy sending e-mails

On 7/7/2011 1:04 AM, jsz wrote:
>> How do you manage to send e-mails? I'd like to send e-mails in an
>> anonymous way but most of the webmails make it very difficult....
> Try to use an anonymous e-mail account and connect to that account via
> TOR. E-mails shoud be encrypted locally (with GnuPG) so that servers do
> not see the unencrypted text. Mail shoul be stored locally on a
> Truecrypt volume.
>
> Jacek Szymona
I'm just throwing this out there - haven't used / investigated it.  
Thunderbird (5, maybe 3?) has a selection under Options to "Encrypt this 
message."  Have NOT read what type encryption or effectiveness.  A very 
brief search a few wks ago turned up nothing.

In compose window, when click the "use encryption," if you haven't set 
it up, will get a popup, "You need to set up one or more personal 
certificates before you can use this security feature. Would you like to 
do so now?"  That's as far as I got investigating it.

Enigmail addon for Thunderbird is fairly popular & uses GnuPG for 
encryption.  I've been thinking of trying it myself.
_______________________________________________
tor-talk mailing list
tor-talk <at> lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk