maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Applications (https://talk.maemo.org/forumdisplay.php?f=41)
-   -   edit.............................................. .............................. (https://talk.maemo.org/showthread.php?t=80625)

moscatomg1 2011-12-03 22:30

edit.............................................. ..............................
 
edit.............................................. ..............................

p900 2011-12-03 22:47

Re: tor (the onion router) & transmission, how secure?
 
I am not really sure about this but, I wouldn't trust those channels for security purposes, like credit card transactions, passwords etc.
I would only use TOR or proxies for browsing etc.
I am not sure who else might look at information transmitted through TOR.

Android_808 2011-12-03 23:44

Re: tor (the onion router) & transmission, how secure?
 
i would imagine very slowly and very battery hungry on N900. Tor bandwidth is not great with websites like google often slow to load. bittorrent would be even worse

handaxe 2011-12-04 00:49

Re: tor (the onion router) & transmission, how secure?
 
Quote:

Originally Posted by moscatomg1 (Post 1132874)
I mean security wise, though?

And as to what you say: I've tested Transmission (w/ Tor's log confirming that it's working and a browser ip test showing the same), and the torrent through Transmission was at a very fast dl--not slow at all like you indicate. . . . Does that seem to suggest that Tor is *not* working w/ regards to Transmission but only working w/ the browser?

You indeed need to be careful as to what gets routed thru tor. Not everything unless you take steps. One way is via "torify" - a program provided with a tor install on the n900.

handaxe 2011-12-04 01:48

Re: tor (the onion router) & transmission, how secure?
 
Quote:

Originally Posted by moscatomg1 (Post 1132898)
So given what I said about Transmission doing dls so quickly, it's suspect whether TOR is working correctly w/ it?

"Torify"? I don't see that app listed in any of the N900 catalogs--not even in extras-devel. Does it have another name?

As I wrote :) above, it is installed by the package "tor".

I doubt that transmission is "torified" by default.

handaxe 2011-12-04 03:16

Re: tor (the onion router) & transmission, how secure?
 
Quote:

Originally Posted by moscatomg1 (Post 1132922)
Mis-communication. I thought you meant that Torify was an app that came with Tor. Well, considering it's the other way around: as far as I see w/ my limited skills, I still can't find any settings or evidence of "Torify" on my device.

And I do have an updated version of TOR. So how can I find these Torify settings?

(They don't seem to be in the convenient TOR status applet.)

I guess this is important in determining if TOR is indeed working w/ Transmission?

Torify IS an app that gets installed when one installs Tor..... It is located at /usr/bin/torify. If Tor is installed it is there. Google for usage. It is run from the CLI.

p900 2011-12-04 05:34

Re: tor (the onion router) & transmission, how secure?
 
By the way, I didn't make TOR to connect on my N900 AND on my windows PC. do I need to open some ports on my wireless router in order to connect?
I only made connection to TOR on my computer with an app (Gpass.exe) and only connected via skype)

linuxeventually 2011-12-04 07:04

Re: tor (the onion router) & transmission, how secure?
 
Torrenting on TOR is an abuse of the service.

Also it will be very very slow.

TOR was designed to allow people to access websites that would otherwise be blocked for them, not so much for protecting your privacy.

Some good talks (well these are the pdf slideshows) on TOR:
* https://www.defcon.org/images/defcon...ledine-tor.pdf (quickview)
* https://www.defcon.org/images/defcon...acking_tor.pdf (quickview)

Android_808 2011-12-04 09:12

Re: tor (the onion router) & transmission, how secure?
 
there are alternatives to tor if your looking just for anonymous sharing. i only use tor on laptop if i think a link may be suspicious (shortened urls, certain countries etc) to avoid logging. desktop toolbar turns off javascript etc. hiding ip so that my ip is safer from being targetted by hackers. for normal browsing its too slow.

handaxe 2011-12-04 10:08

Re: tor (the onion router) & transmission, how secure?
 
http://talk.maemo.org/showthread.php?t=66901

take look there perhaps.

linuxeventually 2011-12-04 12:47

Re: tor (the onion router) & transmission, how secure?
 
@Android_808

If you don't trust a link, use curl and look through the source code.

moscatomg1 2011-12-08 14:44

Re: tor (the onion router) & transmission, how secure?
 
I still can't figure out how to even look at torify option/commands in n900's xterminal (someone said run from cli, but I don't understand how or what that is).

I type /usr/bin/torify and it says not found. I type torify only and it says something about tor sockets not found. I'm not finding a simple guide on how to proceed here or w/ google. please--I need some more help.

Also, does anyone happen to know if TOR on n900 is set ready to work with the phone's built-in Skype app? Or if this is another thing that would need to be manually set up?

sulu 2011-12-08 15:41

Re: tor (the onion router) & transmission, how secure?
 
Transmission:
If used with TOR only the connection is negotiated via TOR, the data itself is still transmitted via insecure channels. So the impact on the TOR network should be minimal and the transfer rate is the same like without TOR.
Don't ask me how that works in detail or if it even actually works at all when the reason for using TOR is to mask your identity.
So technically it shouldn't classify as abuse but morally I think it still does. Let's face it, the #1 reason for using torrent via TOR is illegal activity (e.g. copyrighted material) and everybody who uses TOR for such purposes weakens the legitimation as a means for free information gathering or simply anonymous surfing just because you don't like the big G to know you better than you know yourself.

TOR security:
Basically TOR is a 3-level proxy chain. Your security depends on how trustworthy these proxies in your chain are. There have been rumors in the past of companies or countries running huge TOR server farms. If you by chance get three servers from the same farm, there is no increase in security at all. In fact security even decreases in that case just like it does if you browse via a forced proxy like the one of your mobile internet vendor.
btw: TOR does not implement or replace end-to-end encryption. So don't forget to use ssh just because you're in the TOR network!

moscatomg1 2011-12-08 17:59

Re: tor (the onion router) & transmission, how secure?
 
Sulu, thanks for the extra info--it's helpful to know. . . .

But I'm still curious about those other questions/issues I posted about today--anyone else care to weigh in?

thanks

handaxe 2011-12-09 23:14

Re: edit.............................................. ..............................
 
To use torify you need to first connect tor to the network. Once the little onion icon appears then you open a terminal (the CLI) and type "torify your_prog_name". Note that this will leak DNS info so if you want you can, once tor is running, use "tor-resolve host.name.here" to retrieve the IP address anonymously. Then use the IP no. with torify instead of the host name.

I have no idea if your program will work with tor. Google....

regards HA


All times are GMT. The time now is 21:39.

vBulletin® Version 3.8.8