Re: [tor-talk] staggeringly unhelpful

[Jeremy Rand <biolizard89@xxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 12/24/2015 11:07 PM, Akater wrote:
> After all, the message is staggeringly unhelpful.
> 
> 1) It doesn't try at all to inform what actuatlly happened; 2) 
> Twitter didn't sign it so at the moment anyone who wishes, for some
> reason, to get on @qbi's list can pretend they got it; 3) switching
> to Tor would probably lock the user from Twitter's web interface,
> and from who knows what else, and yet Twitter recommends to take a
> look at Tor Project, and it does so to users who've been connecting
> through Tor (via various clients) already, and had already
> experienced problems, and had already tweeted about that.
> 
> In the end, the message induces some mildly unnerving atmosphere 
> and accomplishes pretty much nothing else. I can't even be sure 
> what state they're talking about.

Yep, it certainly was a bit unnerving when I got the message.  I can't
entirely blame Twitter though.  It's plausible that Twitter is using
methods of detecting state-sponsored attacks that would become
unreliable if Twitter gave full details to affected users.

To add a data point, I had been using Twitter exclusively over Tor for
a few months before I got that message.  I have not ever been locked
out of my Twitter account, possibly because I have 2FA enabled.

The message I received from Twitter was signed via DKIM.  I'm not
familiar enough with DKIM to know if the DKIM signature is sufficient
to prove that I received such an email.

- -Jeremy Rand
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJWfI8CAAoJEAHN/EbZ1y06NDsP/0bGwLD/cfuiOzLiJCO3JFGj
f9MqK6QNbTICgeT0i4vGgRYfXzxtzk0zevGzTA+FjBsmDyrDqpj7hcSY/sjYA7Um
w/fgpA28r0ManKEaKYJvrlUkLnWJP6V3y5FvqivqzgACvgB5Ctr3xedEZK481AZ1
MuEMZIUK9kELJIwGOnGt2v/lzMoX3foT4xoa6N/uWhvyopc/vwmMdtGe/7e7UlfU
AdQHAlGS/tuRn0cBaMZ33SF21hd8h8ZCK87UBbClI1TiXIKe24OeQ3fw3MrD67ks
668IQ585MvNU9F6ADExVXpuhPYAjg6RFLKADF6pwb82ICnzHayq0CyvP7YcXu5KO
/qr2R6CmKqiMsg6MdwOoWED8EH1+R3+mA0onr85kLwZrQHLfI2Ugmm/rDw6zr8sw
RI0DgACPLamyVct2dL7Lt6hDg0vmKEt0982a2sNmdkRZ4asqIGYD+9wuA5GDCVAG
T8GBnDzo34rpSWavtjOMcjrX9NKK7UgWMak8F0xAbxG1rP5jEjSCCsbIfRrOKzkx
xcZCRjgOeUW8CnX4mTchgjsCs+m0lHSLkudgxB/xOiwDbKiQuvcit/mHDsuPHGV6
HRL3hTbYIjBYkuGjp2m6mzrvuAdQuFiidJk3Hb+ZAlcluFMzKKvUn+Ugyx/2GqzO
9DgRAE14LsfeMmYDniCt
=3/AI
-----END PGP SIGNATURE-----
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk