Delivery-Date: Mon, 15 Dec 2014 20:07:30 -0500
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.7 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD,T_DKIM_INVALID,URIBL_BLOCKED autolearn=ham
	version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 8F66D1E0E40;
	Mon, 15 Dec 2014 20:07:28 -0500 (EST)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 2D2C43201C;
	Tue, 16 Dec 2014 01:07:25 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id D8F8531ED9
 for <tor-talk@lists.torproject.org>; Tue, 16 Dec 2014 01:07:21 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id JVmL4eCy0P2q for <tor-talk@lists.torproject.org>;
 Tue, 16 Dec 2014 01:07:21 +0000 (UTC)
Received: from mail-ob0-x22e.google.com (mail-ob0-x22e.google.com
 [IPv6:2607:f8b0:4003:c01::22e])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id A95983195C
 for <tor-talk@lists.torproject.org>; Tue, 16 Dec 2014 01:07:21 +0000 (UTC)
Received: by mail-ob0-f174.google.com with SMTP id nt9so22676961obb.5
 for <tor-talk@lists.torproject.org>; Mon, 15 Dec 2014 17:07:19 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=mime-version:sender:in-reply-to:references:date:message-id:subject
 :from:to:content-type;
 bh=+uaAzXL48g9fypJNr4sx1EusRZmf/7Gq0q9BgAIJDLw=;
 b=NuAtk1qzTMxPf/UyDMhBeVIRS6igIA4Mr4l3Dhp5gXy7L0+p+EXHPqmI9+pTN+Y2UQ
 W6RIZKVC2WFcsV+brtFJP9VqwJYGnnFgXvWCuJCt1uyrsNO8FZlzBKr6C9MrpUE+mXWq
 0F+ioxE5tCJ1KHZgd8oum5bmVx17KGOkSKwTENyuXMETtFCSM0IbWVtrAN0tXyjtYUc6
 OALS2jngmb8XhwSP3lqu+TdwgcU96/ifP6QgzRv2t32Ogj6I4nwzFXmunXsN/9+koAoy
 9X8QIGbhHQMHVR93mFhgFGhIjFUrHkfJUXftX8qbOltusnJxJDjA8bbkL7B3kvAguZAn
 Boog==
MIME-Version: 1.0
X-Received: by 10.182.55.35 with SMTP id o3mr4174110obp.8.1418692039250; Mon,
 15 Dec 2014 17:07:19 -0800 (PST)
Received: by 10.182.204.97 with HTTP; Mon, 15 Dec 2014 17:07:19 -0800 (PST)
In-Reply-To: <548E88C2.2030104@riseup.net>
References: <20141212192012.gi34412@moria.seul.org>
 <548b52ee.f4698c0a.3562.ffffe389@mx.google.com>
 <548b322b.0480e00a.1143.ffffb753@mx.google.com>
 <caas2fgtnwcjcdoq6nd_xjc2e=ipcrxk-a4kiogxqfnq+2k8ahg@mail.gmail.com>
 <20141211223234.gh34412@moria.seul.org>
 <548b69b5.4010801@riseup.net>
 <20141211220732.gg34412@moria.seul.org>
 <548b9707.275f8c0a.9917.1e7c@mx.google.com>
 <4501644E616.00000588beatthebastards@inbox.com>
 <CAEydrT8JR3T0vtY3T7WU2cQrZ01c95hz0it7QS7nux0E6CHefQ@mail.gmail.com>
 <1418529175.1604076.202607849.52A4D1BD@webmail.messagingengine.com>
 <CAOsGNST_4o9-PDsSZxXcnfqiJERc0ta2xu61wMWPhJ-pR2+C0w@mail.gmail.com>
 <548E88C2.2030104@riseup.net>
Date: Tue, 16 Dec 2014 12:07:19 +1100
X-Google-Sender-Auth: xqJ1NuZtnZC9qzeWlZeGISEG3RQ
Message-ID: <CAOsGNSTHRYsh_oAHvmxnqj9DnaiPhZtBNTYKm=sdQaSKrNs1Jg@mail.gmail.com>
From: Zenaan Harkness <zen@freedbms.net>
To: tor-talk@lists.torproject.org
Subject: Re: [tor-talk] Tor and solidarity against online harassment
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

>>> I was interested in hearing what he had to say. You folks may argue
>>> against him/her but it seems to me he had some valid points though the
>>> poster probably knows that no one will listen to his frustration.
>>
>> Juan's voice is an important voice, as he is hard-core "BE CAREFUL",
>> and this is a very good thing for anyone who might genuinely -need-
>> privacy in their communications, against USA Corp.
>
> Upon reflection, I totally agree. And I apologize to Juan for being mean
> and dismissive.
>
>> In particular, a healthy (very healthy :)  paranoia enema is important
>> for some people. And if a newcomer comes to this list genuinely
>> needing privacy, and everyone speaks "TOR is, OMG, like soooo awesome,
>> it's just the greatest privacy for everyone", then that newcomer is
>> likely to guarantee themselves a serious problem.
>
> Indeed. In that regard, I am most troubled by the Tor browser.
>
>> So caution, paranoia, attention to detail, proper assessment of the
>> risks and technical foundations/ requirements/ possibilities of what
>> TOR can, and more importantly cannot provide, is (in such
>> circumstances) of utmost importance.
>
> Yes. I write a lot about such matters.
>
> However, as Jonathan Wilkes noted yesterday, there's a risk of
> frightening away users and potential relay operators. For better or
> worse, Tor is the best low-latency anonymity network around. In the
> short term at least, hurting Tor benefits many enemies of freedom.

"Educating new users" must not be allowed to be seen the same as
"hurting tor", I'm sure Juan would agree here.

"Hurting tor" might not be the best term, but perhaps we can say
'scare-mongering' may cause potential users to run away, thereby
reducing our community, and that this is undesirable; I'd hope Juan
would agree with this.

But I have to agree that whenever we see "omg tor is so ponies and
freedom", that Juan's voice of "whoah, slow the fuck down guys, Tor
and TBB cannot save you from nation-state monitoring, and make sure
you're aware of potential problems a b and c" is much better than no
genuine voice of caution.

And I have to say - every newcomer that appears here, must be the
beneficiary of our best efforts in communication, for we simply cannot
know if -this-particular- newbie is in need of the most careful advice
to be cautious or not.

So -because- Tor is the currently most viable "privacy of some level/
some sort" newtwork today, we particularly owe it to be diligent and
-never- fail to impress upon newcomers what they may need to keep in
their minds.


> There is no question that Tor was developed for the US military. And the
> Tor Project is still funded largely (and for argument sake, entirely) by
> the US government. But even so, I've seen no credible evidence that Tor
> is backdoored or intentionally vulnerable.
>
> It is true that Tor's threat model explicitly excludes global
> adversaries, who can break anonymity by correlating entry and exit
> traffic. It's also true that some proposed low-latency anonymity
> networks may resist traffic analysis far better than Tor does. However,
> these are highly technical matters, and there is much room for debate. I
> am by no means qualified to have an opinion on the merits.
>
> One might argue that the US government funding gives Tor an unwarranted
> advantage, or even that it suppresses work on alternatives. As paranoid
> as I am, that seems unworkable. But of course, I defer to evidence.

Mirimir, your words in this email might make a good start for a "Quick
educational caution" which newcomers ought be pointed to, say on the
tp.o wiki.

To help those who need it stay as safe as might be needed and/ or
possible, certainly requires helping them, as early as possible,
framing a mindset and certain understandings. Perhaps we can do better
on this front.

Over to others,
Zenaan
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

