[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: funneling a wireless net's outbound connections through tor
- To: or-talk@xxxxxxxxxxxxx
- Subject: Re: funneling a wireless net's outbound connections through tor
- From: "Michael_google gmail_Gersten" <keybounce@xxxxxxxxx>
- Date: Mon, 1 Oct 2007 16:25:50 -0700
- Delivered-to: archiver@xxxxxxxx
- Delivered-to: or-talk-outgoing@xxxxxxxx
- Delivered-to: or-talk@xxxxxxxx
- Delivery-date: Mon, 01 Oct 2007 19:25:59 -0400
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=wbaQFRXO2wnFQUItZEhwF4O/QeNoMOUTL5xF0fNiQUc=; b=feRtuKdK66gsrKGzSHlU7ZlS6IxCN9OdOousY0XBdaNR+0f02A9Rm7IHyikte5KCS5hlC5t5jiEBfhoARIP0YQKEfMtpd2glVoxtsMUdoT1w/CpQh3d1dsY1Fuov8kYgAj6W7HLySvTIdMOHDWELbCP+deLWd5miSg8nW8VnALk=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=gpQluWW1WUsBdc8XQ5HncphOhhMc01hLzDMBhbOhdQNS1PjlQFEpqBaSz4yurX54/lDuTFivHDpziBkXb1DMUP5LJRzbrjxh03yzWHY6D9pGfwKOUagldLKXYrBeohhZAzEIFBJdRboybVW7wopqwRcxZ7MYrBDwdndagUF3u+I=
- In-reply-to: <874phafojc.fsf@xxxxxxxxxxxxxx>
- References: <200710010648.l916mNRM006600@xxxxxxxxxxxxx> <874phafojc.fsf@xxxxxxxxxxxxxx>
- Reply-to: or-talk@xxxxxxxxxxxxx
- Sender: owner-or-talk@xxxxxxxxxxxxx
I think this discussion brings up an interesting point, again.
Tor [b] changes [/b] the risks you are opened to.
It removes the risk of ISP's, search engines, and advertisers from
tracking your click stream, and being the receipt of a government
request for your online history. (Most people don't need tor because
of the anonymity. The more people using tor, the better hidden those
that do need it are hidden.)
It exposes serious MITM attacks for anything that is not HTTPS: unless
you use exit guards.
We have entry guards specifically because otherwise evil node group X
will at some point grab your entry node and exit node, and correlate
who you are.
We need exit guards specifically because otherwise evil exit node X
will at some point grab your authentication cookies.
Previously, someone said that having both entry guards and exit guards
together was self defeating. Do we need exit guards more than we need
entry guards?