Answering your different emails at once:- anonathing indiegogo: incredible... you can be sure that these guys are cheating on the crowdfunding campaign, as far as they can
- configuration: as you say the less needs to be configired, the better, but I am not sure we will reach a consensus of what should go through Tor and what sould not, as we can see in this thread people have different opinions
- cable connection: I think this is required, then minimum configuration is needed
- "do not send anything outside" wifi: I think it is required too- all TCP through Tor: you say that it's difficult for the Cloak to detect SSL vs non SSL, but you are proposing a SSL only wifi, so the Cloak is supposed to know how to do this, no?
- all SSL through Tor, non SSL outside: I think I would choose that option myself by default for the reasons explained previously (see my latest answer, stupid traffic going outside will necessarily be ssl, my ws example does apply too for Tor flash proxies relayers)
- bittorrent: yes that's definitely an issue I think, I suppose the Cloak does relay the UDP traffic, I don't know what happened for your test but of course if UDP does not work nothing will happen, bittorrent trackers (which people should not use at all) and DHT are using UDP, the bittorrent protocol is using TCP and uTP (UDP), as far as I know it tries to establish both and breaks the TCP connection if uTP is successfull, I don't know really what is the most use, as far as I have seen both are used equally, but I did not study this precisely, maybe some other people can give inputs here. It's unlikely that the seeders are blocking the exit nodes, so once the bittorrent protocol establishes TCP connections with the peers in the swarm through Tor, there are no reasons that it does not work.
- maybe that's another reason to use "my" default, since the Cloak can not recognize bittorrent traffic it would go outside automatically
- as previously mentioned I will contact you off the list (when I have time) for the other topics.
Le 09/11/2014 10:27, Lars Boegild Thomsen a écrit :
On Friday 07 November 2014 17:29:23 Aymeric Vitte wrote:And 5 "do not send anything outside", no? Usually you can restrict with your ISP box but can you trust it? What happens if you connect directly your PC to the Cloak with a cable?I haven't really decided. The box have a wan as well as a lan port. I sort of expected to leave the lan port open and it certainly is in the current firmware version. One option would be to make it possible to toggle it with a press on a button, but I really haven't thought that one through at all. Any ideas appreciated.Maybe the concept of several wifis is good but I don't see it very usable, not sure what would be the security requirements for this but assuming that I am trusting my local network why not a simple web interface where you can configure the same for any device connected to the box:I think that is mostly related to the target audience for a device such as this. The less that needs to be configured the better - assuming that most users interested in a box such as the Cloak won't want to make massive reconfiguration. Of course a "power user" can squeeze the box to run exactly as they prefer. But it's important to me to have sensible default so that as many people as possible can use it without changing anything.- do not allow anything outside - allow all traffic outside Tor - force everything through Tor (warning: close your bittorrent clients) option: the Cloak could detect the bittorrent traffic - force eveything through Tor except torrents - force ssl through Tor, non ssl outsideQuestion - is Bittorrent still an issue at all? I actually tried a few days ago - a quite popular torrent (thousands of seeds) bootstrapping using a magnet link - my netbook connected to a Cloak prototype with every single TCP port routed through Tor. After 24 hours the magnet hadn't even downloaded - not a single byte received. I suspect all trackers are using UDP now - and I guess most bittorrent clients too.
-- Peersm : http://www.peersm.com torrent-live: https://github.com/Ayms/torrent-live node-Tor : https://www.github.com/Ayms/node-Tor GitHub : https://www.github.com/Ayms -- tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk