Delivery-Date: Mon, 02 Feb 2015 06:19:55 -0500
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.7 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD,T_DKIM_INVALID,UNPARSEABLE_RELAY,
	URIBL_BLOCKED autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 2A2771E04CC
	for <archiver@seul.org>; Mon,  2 Feb 2015 06:19:53 -0500 (EST)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 809933355E;
	Mon,  2 Feb 2015 11:19:49 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 7DDD533554
 for <tor-talk@lists.torproject.org>; Mon,  2 Feb 2015 11:19:45 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id G-UOAAQcavbk for <tor-talk@lists.torproject.org>;
 Mon,  2 Feb 2015 11:19:45 +0000 (UTC)
Received: from mx1.riseup.net (mx1.riseup.net [198.252.153.129])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "*.riseup.net",
 Issuer "COMODO RSA Domain Validation Secure Server CA" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id 491CC3351F
 for <tor-talk@lists.torproject.org>; Mon,  2 Feb 2015 11:19:45 +0000 (UTC)
Received: from plantcutter.riseup.net (plantcutter-pn.riseup.net [10.0.1.121])
 (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
 (Client CN "*.riseup.net",
 Issuer "COMODO RSA Domain Validation Secure Server CA" (verified OK))
 by mx1.riseup.net (Postfix) with ESMTPS id 9370A410AB
 for <tor-talk@lists.torproject.org>; Mon,  2 Feb 2015 11:19:42 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak;
 t=1422875982; bh=GI3deXVbasCKvFOGrLZP/5HHPvECWItTjkF6q9SZiOQ=;
 h=Date:From:To:Subject:References:In-Reply-To:From;
 b=U0Yx0qgI0mko1sv5PMM4bFIAFn8DazZZ80mH2bCoZQTkZ+RLIxgC/KdRSUPfiVatK
 vZc+2zwXXs0HPbGgFQQKhl6ZjHnVyyMn+FLZhr+XTpYPo3VjfZxR4yn+Q+W9qFYXeR
 P2Q1bX7l9+KHVjKRJIMnxuRu356M6MfQrDgefdTQ=
Received: from [127.0.0.1] (localhost [127.0.0.1])
 (Authenticated sender: mirimir) with ESMTPSA id B619F21CB5
Message-ID: <54CF5D4A.5080407@riseup.net>
Date: Mon, 02 Feb 2015 04:19:38 -0700
From: Mirimir <mirimir@riseup.net>
User-Agent: Mozilla/5.0 (X11; Linux x86_64;
 rv:31.0) Gecko/20100101 Thunderbird/31.4.0
MIME-Version: 1.0
To: tor-talk@lists.torproject.org
References: <54CB577A.9000100@riseup.net> <54CD1B02.70304@whonix.org>
 <54CD85A8.6080601@riseup.net> <op.xtc9exdbbgbjo9@work-pc.lan>
 <54CDD77E.6010700@riseup.net> <54CDFBBC.5080909@techwang.com>
 <54CE4461.4020106@gmx.com> <20150201215150.311ACC03CC@smtp.hushmail.com>
 <54CEACB5.5020000@gmx.com> <54CEC199.9080206@riseup.net>
 <54CF4C36.2010608@techwang.com>
In-Reply-To: <54CF4C36.2010608@techwang.com>
X-Virus-Scanned: clamav-milter 0.98.5 at mx1
X-Virus-Status: Clean
Subject: Re: [tor-talk] Tor -> VPN  Clarification
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

On 02/02/2015 03:06 AM, Bill Berry wrote:
>> As I recall, nobody in this thread has actually opined that "VPN -> Tor"
>> is "definitely not good". People have quoted Grugq to that effect, from
>> a 2012 presentation. But nobody here has made an argument for it.
> 
> I think leeroy presented some compelling reasons why in his case 1
> (easier to do correlation attacks on VPN over Tor etc)

Sorry, I wasn't clear. I meant that nobody here has made an argument
that "VPN -> Tor" is "definitely not good". I agree that leeroy seems to
favor Case 2 aka "Using a VPN to connect to Tor".[0]

[0]
https://lists.torproject.org/pipermail/tor-talk/2015-February/036687.html

> On 02/02/15 00:15, Mirimir wrote:
>> On 02/01/2015 03:46 PM, Joe Btfsplk wrote:
>>> On 2/1/2015 3:51 PM, l.m wrote:
>>>> Now I'm not saying either is better [Case 1, Tor connect to a VPN;
>>>> Case 2, VPN connect to Tor]
>>>> but I prefer the one with more variables in my favor.
>>>>
>>>> --leeroy
>>> Thanks.  I read Case 1 & 2 - couple times (need a few more).
>>> I gather the one with "more variables in my favor" is Case 2 - Using VPN
>>> to connect to Tor?
>>> That is the one (some) have said is definitely not good - yes? Still
>>> others may have said that VPN  connecting to Tor, isn't as bad as some
>>> have indicated?
>> As I recall, nobody in this thread has actually opined that "VPN -> Tor"
>> is "definitely not good". People have quoted Grugq to that effect, from
>> a 2012 presentation. But nobody here has made an argument for it.
>>
>>> Observation:  There are a LOT of assumptions about VPNs & adversaries.
>>> And they may / could be true.  Just sayin'.
>>> The scenarios you describe, would almost seem to say (equivalent of):
>>> "Either of these is *full* of pitfalls, but since I'm gonna die if I
>>> don't do something, I can pick one (then pray)."
>> That is insane! Look, maybe I'm a raving lunatic. Fine, ignore me.
>> Except this bit: For the love of grod, listen to Paul Syverson.[0]
>>
>>> Reason I ask (about using Tor & *anything* else), is I need to do some
>>> legitimate, online research.
>>> Not political / terrorist issues, etc., nor anything socially taboo.
>>> But still something I don't want anyone looking over my shoulder.
>>>
>>> And I'm not sure if using TBB by itself (in Windows) is "good enough."
>> It's not. Use Whonix, or better yet, Qubes with the Whonix-team mods.
>>
>> [0]
>> https://lists.torproject.org/pipermail/tor-talk/2015-January/036644.html
>>
> 
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

