Delivery-Date: Sat, 30 Aug 2014 12:41:25 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-3.9 required=5.0 tests=BAYES_00,DKIM_ADSP_ALL,
	DKIM_SIGNED,RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD,T_DKIM_INVALID autolearn=ham
	version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id A40D71E044D;
	Sat, 30 Aug 2014 12:41:23 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id B9DD330D17;
	Sat, 30 Aug 2014 16:41:19 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 7FA8B30D13
 for <tor-talk@lists.torproject.org>; Sat, 30 Aug 2014 16:41:16 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at eugeni.torproject.org
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id iCnvjdMDvn4q for <tor-talk@lists.torproject.org>;
 Sat, 30 Aug 2014 16:41:16 +0000 (UTC)
Received: from latitanza.investici.org (latitanza.investici.org
 [IPv6:2001:888:2000:56::19])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "smtp.autistici.org",
 Issuer "Autistici/Inventati Certification Authority" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id 37F8830D12
 for <tor-talk@lists.torproject.org>; Sat, 30 Aug 2014 16:41:16 +0000 (UTC)
Received: from [82.94.249.234] (latitanza [82.94.249.234]) (Authenticated
 sender: griffin@cryptolab.net) by localhost (Postfix) with ESMTPSA id
 A18591209EC; Sat, 30 Aug 2014 16:41:09 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cryptolab.net;
 s=stigmate; t=1409416870;
 bh=LEw/MB8TjOvj7Me5XKEboM1Zrr6ZQiD4385Vc0b7dg8=;
 h=In-Reply-To:References:Subject:From:Date:To;
 b=Gvq1WLe9DJ+K6eZqzgKblLrvkLw8w2CVUXNsVwOZc1BIwJDPgXUyGv5GQ/ykQLRYY
 Qi5BZCEa3Nsq1zpIuOo89jpH7TWYlXuA06hTl+tjuQrzkThh6KtO8bn8ZT+FgxdCkx
 jWbbAAOb+ZB3wjnXeLqja9G9gJ14UjCzq2a3UMWQ=
User-Agent: K-9 Mail for Android
In-Reply-To: <5401DC97.6030506@cyblings.on.ca>
References: <53FAA2EC.6080006@riseup.net> <53FBB25F.7060804@cpunk.us>
 <5401B62E.9000604@whonix.org> <5401DC97.6030506@cyblings.on.ca>
MIME-Version: 1.0
From: Griffin Boyce <griffin@cryptolab.net>
Date: Sat, 30 Aug 2014 12:41:04 -0400
To: tor-talk@lists.torproject.org,krishna e bera <keb@cyblings.on.ca>
Message-ID: <a1e92f47-cc28-440e-a143-e9d08a59328e@email.android.com>
X-Content-Filtered-By: Mailman/MimeDel 2.1.15
Subject: Re: [tor-talk] BBC: NSA and GCHQ agents 'leak Tor bugs',
	alleges developer
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>



krishna e bera <keb@cyblings.on.ca> wrote:
>There are several pseudonymous development sponsors (named only by
>single letters).  Any of them could be GCHQ or NSA or one of their
>front
>agencies.
>It doesnt matter - all of the code remains open source and the
>developers have their own public reputation to maintain.

Patches are reviewed by some of the most conscientious and intelligently-paranoid security engineers on the planet.

The constant "but what if nsa?" refrain tries my patience like nothing else. It assumes that both the US government and Tor are monoliths. Neither could be farther from the truth. The ecosystem is also arranged in such a way that the most competent security engineers, cryptographers, and circumvention developers have their eyes on Tor. 

If someone doesn't trust Tor, then they shouldn't use it. Tor devs consistently push security fixes to Firefox, so maybe they shouldn't use that, either. =P

As for funding, read the tax forms and you'll see where Tor's funding comes from. It's not from the NSA, and I'm happy to stake my reputation on that. I wouldn't be involved if that were the case.

~ Griffin


-- 
Sent from my tracking device. Please excuse brevity and cat photos.
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

