Delivery-Date: Sun, 31 Aug 2014 15:58:29 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.7 required=5.0 tests=BAYES_00,DKIM_ADSP_CUSTOM_MED,
	DKIM_SIGNED,FREEMAIL_FROM,RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD,T_DKIM_INVALID
	autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 79B641E08DC;
	Sun, 31 Aug 2014 15:58:27 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 0CF4030BED;
	Sun, 31 Aug 2014 19:58:24 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id C45E3308EC
 for <tor-talk@lists.torproject.org>; Sun, 31 Aug 2014 19:58:20 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at eugeni.torproject.org
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 3Akxa8yknuDV for <tor-talk@lists.torproject.org>;
 Sun, 31 Aug 2014 19:58:20 +0000 (UTC)
Received: from mail-qc0-x22b.google.com (mail-qc0-x22b.google.com
 [IPv6:2607:f8b0:400d:c01::22b])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id A3C7C302E9
 for <tor-talk@lists.torproject.org>; Sun, 31 Aug 2014 19:58:17 +0000 (UTC)
Received: by mail-qc0-f171.google.com with SMTP id x3so4586708qcv.16
 for <tor-talk@lists.torproject.org>; Sun, 31 Aug 2014 12:58:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=message-id:date:from:to:subject:in-reply-to:references:mime-version
 :content-type:content-transfer-encoding;
 bh=4JlgA3LMAbJ2JH62lu9JzzFTDJprqKkKf6YgMXELwGI=;
 b=qrDocdepFSCYHGEkEBAZA1hJ3Gbi2jR6phkGZ8AtDLxd4f7kSC0vSzeZ+Ags2G4rda
 4sSVKIT51Z4C/26tPWNhW5lVIuSlaE49F2Eq7RXkL4Gr1BYl++UTJ+9Wee9ReE7JiKYc
 jg2s5qoxSSVpwExx0ItChDqLiN47gQRKjny4pGL2Abfsv2PyLKfAIytoBnAnm/nnOktZ
 ssB+cwGaSgEJsK97dIleiOqOb7Qa33W+2HPVt5nr6MoV9Dml5zajBX+w2A0UZHUlutBL
 qUcNEHO1BoXsRa6xkIFx4C7Iy+Xx1OQlOlHWFmzg4ClGGUOkdNQA+eYjBoHQLnpG3eas
 nz5g==
X-Received: by 10.224.28.133 with SMTP id m5mr38636159qac.16.1409515095330;
 Sun, 31 Aug 2014 12:58:15 -0700 (PDT)
Received: from localhost (host111.181-14-225.telecom.net.ar. [181.14.225.111])
 by mx.google.com with ESMTPSA id
 j6sm9058744qge.46.2014.08.31.12.58.13
 for <tor-talk@lists.torproject.org>
 (version=TLSv1 cipher=RC4-SHA bits=128/128);
 Sun, 31 Aug 2014 12:58:14 -0700 (PDT)
Message-ID: <54037e56.06608c0a.949b.ffff881c@mx.google.com>
Date: Sun, 31 Aug 2014 17:05:21 -0300
From: Juan <juan.g71@gmail.com>
To: tor-talk@lists.torproject.org
In-Reply-To: <53FBB25F.7060804@cpunk.us>
References: <53FAA2EC.6080006@riseup.net>
	<53FBB25F.7060804@cpunk.us>
X-Mailer: Claws Mail 3.7.10 (GTK+ 2.24.10; i486-slitaz-linux-gnu)
Mime-Version: 1.0
Subject: Re: [tor-talk] BBC: NSA and GCHQ agents 'leak Tor bugs',
 alleges developer
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

On Mon, 25 Aug 2014 17:02:07 -0500
Cypher <cypher@cpunk.us> wrote:

> On 08/24/2014 09:43 PM, Michael Wolf wrote:
> > I haven't seen this mentioned here, but thought it would be of
> > interest to the list.  Perhaps something for TWN?
> > 
> > "NSA and GCHQ agents 'leak Tor bugs', alleges developer"
> > http://www.bbc.com/news/technology-28886462
> > 
> >> Spies from both countries have been working on finding flaws in
> >> Tor, a popular way of anonymously accessing "hidden" sites.
> >>
> >> But the team behind Tor says other spies are tipping them off,
> >> allowing them to quickly fix any vulnerabilities.
> >>
> >> The agencies declined to comment.
> >>
> >> The allegations were made in an interview given to the BBC by
> >> Andrew Lewman, who is responsible for all the Tor Project's
> >> operations.
> >>
> >> He said leaks had come from both the UK Government Communications
> >> Headquarters (GCHQ) and the US National Security Agency (NSA).
> 
> Interesting. We should remember that the spies are really living in a
> two sided world. On one side, they need a reliable, hardened, Tor that
> doesn't stand out from anyone else using Tor so that they can
> communicate amongst themselves.
	
	False. What makes you think the 'spies'  use tor? 


> On the other hand, they need to be
> able to break Tor so they can do their jobs. It has to be a tough
> place for them to be.

	They just break tor. They have more than enough resources to do
	it. 




> 
> The article was very interesting - except the part about 'here's how
> you might want to fix this'. I certainly hope that the Tor
> project /is not/ accepting patches submitted by NSA or GCHQ! Sure, I
> realize those agencies could very easily embed someone within the
> project (in fact, don't a few of the Tor project folks work in
> intel?) but developing a trusting relationship by accepting patches
> just seems like a bad idea to me.
> 
> /me puts on tinfoil hat
> 
> Cypher

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

