Re: [tor-talk] Vidalia for Iphone 3g

[Roger Dingledine <arma@xxxxxxx>]

On Thu, Nov 17, 2011 at 02:44:36PM -0500, Andrew Lewman wrote:
> On Thursday, November 17, 2011 13:20:43 M wrote:
> > Can anyone guide me to an eays tutorial for installing vidalia or any other
> > TOR related application on my iphone 3g?
> 
> There's Marco's packages, http://sid77.slackware.it/iphone/ and the new Covert 
> Browser app, http://www.covertbrowser.com/. 

Hm. I wonder if the better answer to this question is "an easy tutorial
for ordinary users? there isn't one."

Marco's Tor-for-iphone packages are great for testing, but without an
analysis of the application-level vulnerabilities, like the one for
Tor Browser (https://www.torproject.org/projects/torbrowser/design/),
you're going to have to really know what you're doing to use it correctly.
And I suspect a better way of phrasing that is that you're going to need
to really understand what protections you're missing, understand your
threats, and change your behavior to match the threats to the missing
protections.

The case of 'covert browser' is even worse: does anybody know if that's
even using Tor under the hood? In the case of Marco's packages, we know
what application-level protections to expect (basically none). In the case
of 'covert browser'... what should we expect? How do we evaluate whether
it achieves them? Does it screw up something else and not realize it,
so e.g. it's broadcasting something about you and you don't know?

I don't know that the answer is 'yes', but I also don't know that it's
'no'. We hear they've changed the Tor source, and we know they haven't
shown us the changes. That's not a good sign.

So it seems unwise to call either of these, especially the second one,
"an easy tutorial".

--Roger

_______________________________________________
tor-talk mailing list
tor-talk@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk