Delivery-Date: Tue, 15 Jul 2014 08:41:37 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.7 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD,T_DKIM_INVALID autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 3FACA1E0B7E
	for <archiver@seul.org>; Tue, 15 Jul 2014 08:41:36 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 86C55306AE;
	Tue, 15 Jul 2014 12:41:32 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id EAF17306B5
 for <tor-talk@lists.torproject.org>; Tue, 15 Jul 2014 12:34:01 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at eugeni.torproject.org
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 65kYYbwhQrbp for <tor-talk@lists.torproject.org>;
 Tue, 15 Jul 2014 12:34:01 +0000 (UTC)
Received: from mail.bitmessage.ch (mail.bitmessage.ch [146.228.112.252])
 by eugeni.torproject.org (Postfix) with SMTP id 7BF83306A8
 for <tor-talk@lists.torproject.org>; Tue, 15 Jul 2014 12:34:01 +0000 (UTC)
dkim-signature: v=1; a=rsa-sha256; d=bitmessage.ch; s=mail;
 c=relaxed/relaxed; q=dns/txt;
 h=From:Subject:Date:Message-ID:To:MIME-Version:Content-Type:In-Reply-To:References;
 bh=pHfD+d0ZfsyFXZ7eM1HZUZW+/5K1TWebns5ZIqJ+0+Y=;
 b=CP/3PG58judKMnvXxWsoZ+1yhh/ZaIhflf8Ubh1uWDg+OQYIGiFC/6VL1YCdhH6p3r7uJmvwIIrI21EFi+9GX7LeGiGM/WlB503+xEz0GZ/HLNPx44fBIgAWUIENKxlFkOWwWh81CpKbYnMdd2YcG/SSb7CeTguDHLrseR74Bd0=
Received: from 127.0.0.1 (BITMESSAGE [127.0.0.1]) by mail.bitmessage.ch
 ; Tue, 15 Jul 2014 14:32:44 +0200
Message-ID: <53C51FAA.7000501@bitmessage.ch>
Date: Tue, 15 Jul 2014 12:33:46 +0000
From: Red Sonja <BM-2cTpEdTADjx2bQf6WuuX1CPER78Sq3xL76@bitmessage.ch>
MIME-Version: 1.0
To: tor-talk@lists.torproject.org
References: <53C3C7C1.4020707@bitmessage.ch> <53C49132.30407@riseup.net>
 <53C4A6C5.5000505@bitmessage.ch> <53C4B03A.8090006@riseup.net>
 <53C4E2E8.8050105@bitmessage.ch> <53C50EDF.2000902@riseup.net>
In-Reply-To: <53C50EDF.2000902@riseup.net>
Subject: Re: [tor-talk] Fast and clean free provider for a couple of HTML
 pages
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============4767003623938135484=="
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============4767003623938135484==
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="6gMWlGajCAv1GwoRCLgbTwA5ShAXbt6Wc"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--6gMWlGajCAv1GwoRCLgbTwA5ShAXbt6Wc
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Mirimir:
>> Yes, but I have no idea what the server is seeing from me.
>=20
> As long as you're using Tor browser or Tails, I doubt that the server i=
s
> seeing anything except a Tor exit IP.

So Tails would be a good idea. Although I prefer my customized desktop.

>> So I was hoping for somebody who already went through this to share
>> info. The couple I have tried so far do not even use HTTPS for the
>> control panel.
>=20
> Using HTTPS for the control panel is another important criterion.

So far no option. Half a day wasted on sites I have a feeling they are
the same with slightly different themes. The email, the captcha, even
the procedure is identical. I should make a microsite as review means
some ahole who makes a list and wants badly to help you click through
his reseller account.

>> I searched for ssh support and it is a web console that simulates ssh
>> in the browser. FTP so far is plain and open.
>=20
> I doubt that you'll find free web hosting that works with command line
> tools. You won't get that until VPS hosting.

Good to know that.

>> And to make things nicer, they do email me the account and password.
>=20
> That's all too common :( There's less need for support that way. It's
> really bad when they email you the new password whenever you change it.=


Never thought about it. And yes, they do remail you the new password.
And it's no temporary one time password either.

>> But when most people ask the answers are like this. How's =ABproperly
>> configured=BB? How do I know it is properly configured?
>=20
> Ultimately, you know that when it works, and it doesn't leak, no matter=

> how you try to break it. Sorry :(

No matter? Like using a credit card or just your real address?

> Actually, the "properly configured" part is easy:
>=20
> SocksPort 127.0.0.1:9050
> DnsPort 127.0.0.1:53
>=20
> The hard part is the iptables rules. I'll post something useful ASAP.

Thank you.

>> The wiki is quite messy. And you have old stuff and new stuff. None is=

>> dated so the new stuff can be old as well.
>=20
> I agree. It's confusing.

As all the info in this area is only on a temporary basis, see
Heartbleed and the rest, there should be a large banner with tall bold
red letters with the year: 2010 this is how you do IRC over Tor, 2012
this is how you do IRC...

>> I fully agree with you: complex apps are simply complex. I want basic
>> tools and for that I am ready to pass the GUI and go for the shell. Bu=
t
>> how do I test for leaks?
>=20
> You install Wireshark, and then capture on eth0. You should see no
> non-local traffic except with your entry guards.

Does it work with Wifi?

I don't have big deal to hide. It's not snuff movies and the cheapest
crack on a 100 mile radius. Only that I am a gypsy and today I have free
wifi available. And tomorrow not. And maybe the day after tomorrow it's
going to be Macdonalds. I don't think is anybody's business my moves.

> To install Wireshark, open a terminal and run these commands:
>=20
> sudo apt-get update
> sudo apt-get install wireshark
>=20
> To configure wireshark to allow a non-root user to sniff packets, run
> these commands:
>=20
> sudo dpkg-reconfigure wireshark-common
> sudo adduser $USER wireshark

And repeat that for Tails, I don't recall having Wireshark in the menu.

>> Please understand, I have nothing against you: on the contrary, you ar=
e
>> the only one who answered me. But the whole thing is a mess. A year or=

>> so I asked the Tails guys why doesn't my USB installed from VirtualBox=

>> doesn't work. They were rather cold and the main guy said something
>> along the lines: it's not free and we don't support it. Yes, the USB
>> part of VirtualBox is not supported.
>=20
> I'm not sure that I understand that. USB support in VirtualBox does
> require the extensions plug-in, and that's free but not "free" in a
> purist sense. Is that it?

Neither did I. One year later things are blurrier. Virtual Box was the
reason why nobody could answer. Whonix supports only Virtual Box. I
don't doubt they have good reasons behind those decisions. It only looks
messy and hard to understand from my side of the screen.

>> Whonix needs it. And it's a 3Gb download.
>=20
> As long as you're not hiding Tor from your ISP, I don't see why you nee=
d
> to download Whonix via Tails. And yet, Whonix is large. The Tor gateway=

> VM could be much smaller. I can point you to instructions for setting u=
p
> a pfSense VM as a Tor gateway, if you're interested.

I don't have an ISP. Never had for a few years. And Tor has helped me a
lot to get to pornographic sites like PortableApps.com when at a local
library.

But I guess I'll stick to Tails. I just have to identify the nice free
webhoster. Today I'm like looking for Lavabit in a world of Yahoo Mail
and Gmail.

And you know what? Wordpress.com works like a dream. And I can even post
by email and forget the whole mess with FTP and SSH. But a 2Kb post
blows into a 68Kb html file and a torrent of css, js and png.

>> I feel so lost...
>=20
> It's very good to know that you're lost, when you're lost ;)
>=20

I find it frustrating


--6gMWlGajCAv1GwoRCLgbTwA5ShAXbt6Wc
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=
=P1jQ
-----END PGP SIGNATURE-----

--6gMWlGajCAv1GwoRCLgbTwA5ShAXbt6Wc--


--===============4767003623938135484==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

--===============4767003623938135484==--

