Re: [tor-talk] Tor powered wifi hotspot / Multiple choice test your Tor knowledge

[adrelanos <adrelanos@xxxxxxxxxx>]

tor@xxxxxxxxxxxxxxxxxx:
> On 04/08/12 17:59, Noel Pluny wrote:
> 
>>> It's just an idea... Could Tor be a solution? The wifi interfaces
>>> routes all traffic over Tor. Before people can start using the
>>> wifi they have to notice a small website explaining Tor, exit
>>> sniffing, recommendation to avoid unencrypted traffic, logging
>>> into bank accounts (to prevent getting them frozen) and so on.
> 
>> In my idea this is not compulsory but could be an add on.
> 
> I think this part is essential. Ask yourself this: Would you install
> Tor on a friend or families laptop without explaining to them exactly
> what it is and how to use it safely? I know I wouldn't.

No.

> The trouble is, most people will probably ignore the warnings, and
> some of them will end up having their SSL sessions stripped and their
> accounts hacked. Some will end up having access to their accounts
> blocked for logging in from multiple countries in a short period of
> time, and when they get phoned up by their banks to ask them why this
> happened, they'll have no idea.
> 
> I wouldn't feel happy routing somebody elses Internet traffic over Tor
> without *making sure* they understood the risks. For the general
> public, I don't think anything short of a face to face discussion can
> do that. Certainly not a landing page.

We can make a complex landing page.

That landing page would explain what Tor is and test the knowledge with
a multiple choice test. Only if they succeed they may continue.

What may happen if I login using the Tor powered wifi hotspot?
[ ] Win lottery.
[*] Account may get frozen or canceled.
[ ] Get a free burger.
[ ] My device will run better and faster.

Show a SSL warning... What to do?
[ ] Click accept anyway.
[ ] Call police.
[*] Expect transmission being read by third party.
[ ] Add exception.

Can exit nodes read your traffic?
[*] Yes, unless it's encrypted.
[ ] No.
[ ] Only police can.
[ ] They don't care.

Just quick example. Etc...

That test could be re-used elsewhere. Regular Tor users could voluntary
do the test, of course with no repercussions if they don't or don't want
to. Just as a gimmick for torproject.org.
_______________________________________________
tor-talk mailing list
tor-talk@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk