Delivery-Date: Thu, 24 Jul 2014 10:12:19 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.9 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED,
	RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id CCBD51E0241
	for <archiver@seul.org>; Thu, 24 Jul 2014 10:12:16 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 672852F19E;
	Thu, 24 Jul 2014 14:12:13 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id F1D332EDF5
 for <tor-talk@lists.torproject.org>; Thu, 24 Jul 2014 14:04:28 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at eugeni.torproject.org
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id wda9Yx7Bwvl7 for <tor-talk@lists.torproject.org>;
 Thu, 24 Jul 2014 14:04:28 +0000 (UTC)
Received: from leitl.org (v8.ativel.com [164.177.174.8])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "leitl.org", Issuer "leitl.org" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id A321A2E76D
 for <tor-talk@lists.torproject.org>; Thu, 24 Jul 2014 14:04:28 +0000 (UTC)
Received: by leitl.org (Postfix, from userid 1000)
 id AE9D9540F7F; Thu, 24 Jul 2014 16:04:24 +0200 (CEST)
Date: Thu, 24 Jul 2014 16:04:24 +0200
From: Eugen Leitl <eugen@leitl.org>
To: tor-talk@lists.torproject.org, cypherpunks@cpunks.org
Message-ID: <20140724140424.GK26986@leitl.org>
MIME-Version: 1.0
Content-Disposition: inline
User-Agent: Mutt/1.5.21 (2010-09-15)
Subject: [tor-talk] Tails vulnerability specific to I2P, not Tor
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>
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