Delivery-Date: Mon, 02 Feb 2015 05:07:12 -0500
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.7 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD,T_DKIM_INVALID,URIBL_BLOCKED autolearn=ham
	version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 71C971E0430
	for <archiver@seul.org>; Mon,  2 Feb 2015 05:07:10 -0500 (EST)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 185533353E;
	Mon,  2 Feb 2015 10:07:07 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id C871733538
 for <tor-talk@lists.torproject.org>; Mon,  2 Feb 2015 10:07:03 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id AmMjZJqjOADY for <tor-talk@lists.torproject.org>;
 Mon,  2 Feb 2015 10:07:03 +0000 (UTC)
Received: from secure.techwang.com (secure.techwang.com [37.247.49.218])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by eugeni.torproject.org (Postfix) with ESMTPS id 7B7A0334DA
 for <tor-talk@lists.torproject.org>; Mon,  2 Feb 2015 10:07:03 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by secure.techwang.com (Postfix) with ESMTP id E0C721CDAC3
 for <tor-talk@lists.torproject.org>; Mon,  2 Feb 2015 10:05:44 +0000 (GMT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=techwang.com; h=
 content-transfer-encoding:content-type:content-type:in-reply-to
 :references:subject:subject:to:mime-version:user-agent:from:from
 :date:date:message-id; s=dkim; t=1422871541; x=1423735542; bh=FV
 1QU16kBUzrC600GhOaHhPGjStITy+NWQVz27uOgvE=; b=CcCLQim07ByINobQib
 SsuCKBZIaBw1mlCtar2NlMcQNVUXBmn7xwj4tblRcNKu6eikTt6P5OlvjZzwoT/U
 L8BAhSrsFWEMtVSGKViQcca9fA5Gr2yyU/prMDiIBc53b/iWm5K9dqxDmpUxaJZ/
 QB0vkIq1/VIK++3UK/gYCNQuE=
X-Virus-Scanned: Debian amavisd-new at unicornbox.unicorn
Received: from secure.techwang.com ([127.0.0.1])
 by localhost (secure.techwang.com [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id LK9OUPzBrUHu for <tor-talk@lists.torproject.org>;
 Mon,  2 Feb 2015 10:05:41 +0000 (GMT)
Received: from [10.10.0.6] (unknown [37.48.81.52])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (No client certificate requested)
 by secure.techwang.com (Postfix) with ESMTPSA id 057861CDAC1
 for <tor-talk@lists.torproject.org>; Mon,  2 Feb 2015 10:05:39 +0000 (GMT)
Message-ID: <54CF4C36.2010608@techwang.com>
Date: Mon, 02 Feb 2015 10:06:46 +0000
From: Bill Berry <bill@techwang.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64;
 rv:31.0) Gecko/20100101 Thunderbird/31.4.0
MIME-Version: 1.0
To: tor-talk@lists.torproject.org
References: <54CB577A.9000100@riseup.net> <54CD1B02.70304@whonix.org>
 <54CD85A8.6080601@riseup.net> <op.xtc9exdbbgbjo9@work-pc.lan>
 <54CDD77E.6010700@riseup.net> <54CDFBBC.5080909@techwang.com>
 <54CE4461.4020106@gmx.com> <20150201215150.311ACC03CC@smtp.hushmail.com>
 <54CEACB5.5020000@gmx.com> <54CEC199.9080206@riseup.net>
In-Reply-To: <54CEC199.9080206@riseup.net>
Subject: Re: [tor-talk] Tor -> VPN  Clarification
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

> As I recall, nobody in this thread has actually opined that "VPN -> Tor"
> is "definitely not good". People have quoted Grugq to that effect, from
> a 2012 presentation. But nobody here has made an argument for it.

I think leeroy presented some compelling reasons why in his case 1 
(easier to do correlation attacks on VPN over Tor etc)


On 02/02/15 00:15, Mirimir wrote:
> On 02/01/2015 03:46 PM, Joe Btfsplk wrote:
>> On 2/1/2015 3:51 PM, l.m wrote:
>>> Now I'm not saying either is better [Case 1, Tor connect to a VPN;
>>> Case 2, VPN connect to Tor]
>>> but I prefer the one with more variables in my favor.
>>>
>>> --leeroy
>> Thanks.  I read Case 1 & 2 - couple times (need a few more).
>> I gather the one with "more variables in my favor" is Case 2 - Using VPN
>> to connect to Tor?
>> That is the one (some) have said is definitely not good - yes? Still
>> others may have said that VPN  connecting to Tor, isn't as bad as some
>> have indicated?
> As I recall, nobody in this thread has actually opined that "VPN -> Tor"
> is "definitely not good". People have quoted Grugq to that effect, from
> a 2012 presentation. But nobody here has made an argument for it.
>
>> Observation:  There are a LOT of assumptions about VPNs & adversaries.
>> And they may / could be true.  Just sayin'.
>> The scenarios you describe, would almost seem to say (equivalent of):
>> "Either of these is *full* of pitfalls, but since I'm gonna die if I
>> don't do something, I can pick one (then pray)."
> That is insane! Look, maybe I'm a raving lunatic. Fine, ignore me.
> Except this bit: For the love of grod, listen to Paul Syverson.[0]
>
>> Reason I ask (about using Tor & *anything* else), is I need to do some
>> legitimate, online research.
>> Not political / terrorist issues, etc., nor anything socially taboo.
>> But still something I don't want anyone looking over my shoulder.
>>
>> And I'm not sure if using TBB by itself (in Windows) is "good enough."
> It's not. Use Whonix, or better yet, Qubes with the Whonix-team mods.
>
> [0] https://lists.torproject.org/pipermail/tor-talk/2015-January/036644.html
>

-- 
--
High quality Shiba Inu at the right price! Quality dogs for over 15 years!

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

