Delivery-Date: Sun, 03 Apr 2016 06:28:18 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-2.4 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,T_DKIM_INVALID,T_RP_MATCHES_RCVD,URIBL_BLACK autolearn=ham
	version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id B0AB31E0192;
	Sun,  3 Apr 2016 06:28:14 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 687FB3A14E;
	Sun,  3 Apr 2016 10:28:10 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id E6AE13A164
 for <tor-talk@lists.torproject.org>; Sun,  3 Apr 2016 10:28:06 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id nwN-3Aty8LMm for <tor-talk@lists.torproject.org>;
 Sun,  3 Apr 2016 10:28:06 +0000 (UTC)
Received: from outbound.mailhostbox.com (outbound.mailhostbox.com
 [162.222.225.18])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (Client did not present a certificate)
 by eugeni.torproject.org (Postfix) with ESMTPS id C089C39ECD
 for <tor-talk@lists.torproject.org>; Sun,  3 Apr 2016 10:28:06 +0000 (UTC)
Received: from [0.0.0.0] (isoroku-tor-exit.itnowork.com [209.159.137.59])
 (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits))
 (No client certificate requested)
 (Authenticated sender: s7r@sky-ip.org)
 by outbound.mailhostbox.com (Postfix) with ESMTPSA id 1DEEC782AA3
 for <tor-talk@lists.torproject.org>; Sun,  3 Apr 2016 10:28:01 +0000 (GMT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sky-ip.org;
 s=20110108; t=1459679283;
 bh=TDZaZA+HBG2WS6Nod0sSGMcSJ2S4x4lT3Ph9d1FTjzE=;
 h=Reply-To:Subject:References:To:From:Date:In-Reply-To;
 b=FYRjFHhigaUVJ0jfypFCf/NXNZQN/4n0f8tfB4fJZY871Cs4ZtfuI85D0JMwt4Kyc
 kP3QChSYBYThuuErrh27+HtSJXvqIuuKy6B2KqZ/WVYkDjaldEEK3HmZFt9lyhhIlF
 LXGiZuTADF7h33Jbo2OIb1i5eL20pFWg71+7772k=
References: <mailman.21.1459670749.3173.tor-dev@lists.torproject.org>
 <CAPN_wDB_qpx5VuQnxRLOQRjrvBEm-hC7WeBmZnbPaYvVjciogg@mail.gmail.com>
 <CAPN_wDAaB6yT2FFe8EbvAVLQ+ECW_Ou4HqPgdtmifr+eCiJo1A@mail.gmail.com>
 <20160403090430.GC1690@sarek.noreply.org>
 <CAPN_wDD-C4fbmKCBJdV8siOG8MXuk8jZtv3+=BPP0qxy2POZ3g@mail.gmail.com>
 <CAPN_wDDOwoBp8VEaRu64UwyO+DZTcBZ+mWxyKJqF_rWFxMY0hQ@mail.gmail.com>
To: tor-talk@lists.torproject.org
From: s7r <s7r@sky-ip.org>
Message-ID: <5700F01C.1030900@sky-ip.org>
Date: Sun, 3 Apr 2016 13:27:40 +0300
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101
 Thunderbird/38.7.0
MIME-Version: 1.0
In-Reply-To: <CAPN_wDDOwoBp8VEaRu64UwyO+DZTcBZ+mWxyKJqF_rWFxMY0hQ@mail.gmail.com>
X-CMAE-Score: 0
X-CMAE-Analysis: v=2.1 cv=CZ2onOfl c=1 sm=1 tr=0
 a=keZrpZoM65XyD2/j8F+MnQ==:117 a=keZrpZoM65XyD2/j8F+MnQ==:17
 a=L9H7d07YOLsA:10 a=9cW_t1CCXrUA:10 a=s5jvgZ67dGcA:10 a=eIhxMilvRf8A:10
 a=13zjGPudsaEWiJwPRgMA:9 a=WbPmnYzAfxEA:10 a=45JyrJQ8UW6n9swuGgwA:9
 a=mj6Bi-VZ1HsyO94X:21 a=iJKUWaC8obZ30MFf:21 a=QEXdDO2ut3YA:10
 a=70aJzn_Nf0I0mvLhgyMA:9
X-Content-Filtered-By: Mailman/MimeDel 2.1.15
Subject: Re: [tor-talk] Fwd: Fwd: This account is currently being used in 1
 other location at this IP (171.25.193.25).
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============1821972266844510063=="
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============1821972266844510063==
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="M3g6FlMJdg2fE1hOTrXxRjKnGWwKuwFl6"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--M3g6FlMJdg2fE1hOTrXxRjKnGWwKuwFl6
From: s7r <s7r@sky-ip.org>
Reply-To: s7r@sky-ip.org
To: tor-talk@lists.torproject.org
Message-ID: <5700F01C.1030900@sky-ip.org>
Subject: Re: [tor-talk] Fwd: Fwd: This account is currently being used in 1
 other location at this IP (171.25.193.25).
References: <mailman.21.1459670749.3173.tor-dev@lists.torproject.org>
 <CAPN_wDB_qpx5VuQnxRLOQRjrvBEm-hC7WeBmZnbPaYvVjciogg@mail.gmail.com>
 <CAPN_wDAaB6yT2FFe8EbvAVLQ+ECW_Ou4HqPgdtmifr+eCiJo1A@mail.gmail.com>
 <20160403090430.GC1690@sarek.noreply.org>
 <CAPN_wDD-C4fbmKCBJdV8siOG8MXuk8jZtv3+=BPP0qxy2POZ3g@mail.gmail.com>
 <CAPN_wDDOwoBp8VEaRu64UwyO+DZTcBZ+mWxyKJqF_rWFxMY0hQ@mail.gmail.com>
In-Reply-To: <CAPN_wDDOwoBp8VEaRu64UwyO+DZTcBZ+mWxyKJqF_rWFxMY0hQ@mail.gmail.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hello Alin,

Both IP addresses indicated by you are Tor exit nodes, so I think this
is normal.

It is normal for Tor browser to use different exit IP addresses
(different circuits) for all Tabs open (all destinations / domains) - it
is called circuit isolation per url domain bar. So, if you are connected
to gmail.com using exit IP A and you open another tab to connect to
other domain, for example whatsmyipaddress.com it is totally normal to
get a different exit IP address with the second domain - there is
nothing wrong here.

If you are using 2 factor authentication with gmail and you are totally
sure your computer is not compromised, i think it's safe. There are many
technical possibilities which could happen, for example you were
connected to gmail using a circuit and a certain exit node, and that
circuit failed for a reason (a relay in the chain got disconnected,
etc.) and Tor immediately rebuilt a new circuit to the same destination
gmail.com obviously with a new exit node / new exit IP address. Until
gmail notified that session was killed, it shown you that message.

On 4/3/2016 12:18 PM, Alin Craciunescu wrote:
>> ---------- Forwarded message ----------
>> From: Alin Craciunescu <alinxcraciunescu@gmail.com>
>> To: tor-dev@lists.torproject.org
>> Cc:
>> Date: Sun, 3 Apr 2016 10:05:46 +0200
>> Subject: This account is currently being used in 1 other location at
>> this IP (171.25.193.25).
>> Hi,
>>
>> A few minutes ago while I was composing an e-mail from this e-mail
>> using Tor browser in the button of the e-mail window showed the beyond=

>> message, and I wasn't to my e-mail to any other device:
>>
>> This account is currently being used in 1 other location at this IP
>> (171.25.193.25).
>> =E2=80=8BThis was for a few seconds, minutes from the time I saw.=E2=80=
=8B
>>
>>
>> I checked from my current Tor browser while showing the above message
>> and I was: http://whatismyipaddress.com/ - Your IPv4 Address Is:
>> 85.93.218.204
>>
>>
>> And after that I logged in to my e-mail form the normal Firefox
>> browser and in the bottom of the page showed This account is currently=

>> being used in 1 other location at this IP (my real ip address). Which
>> was normal
>>
>> What does this mean?
>> Only I have access to this e-mail.
>> The e-mail has two step verification through a phone which is not
>> connected to the Internet at all.=E2=80=8B and for that session of Tor=
 browser
>> I had just login with a few minutes before starting to compose the
>> e-mail, asking for the two step verification from my phone.
>>
>> Is it possible that someone login to my e-mail in the same time with
>> me, from tor browser, or from my Firefox browser?
>>
>> Thank you.
>>
>=20


--M3g6FlMJdg2fE1hOTrXxRjKnGWwKuwFl6
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)

iQEcBAEBCAAGBQJXAPApAAoJEIN/pSyBJlsRSggH/jwr25BZGEHIN6Ln+ICb0jjN
c4/kyAmam9WiK9crecVo6R9v0+kqQF6GB3Fd8tETKeSE/H6osR742xtm4STQu2el
NtSgusFpfoowPRKquhKerEFnilqQ2v9EHNbeo097iaji0DYmgP3PdKyUX7WhAldp
0qEiyJz6StfK7N+RHxTvi9ZL13N4rrTupqGcGjoC9us4qY2fcONIFattfUs/NrY1
QQX5JvG8bEu0dzeaOB1JE150lCnI5CBaP3/pgUp0dMW/XwNjI+IzOF0M//H7W29S
HuzBEVWD0szGALuUtgTC1VHwFKBthc54AxVgWJDVWp6j5aZxTjhFWd2Kmug6ZPk=
=GCas
-----END PGP SIGNATURE-----

--M3g6FlMJdg2fE1hOTrXxRjKnGWwKuwFl6--

--===============1821972266844510063==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

--===============1821972266844510063==--

