Delivery-Date: Mon, 16 Jun 2014 04:56:26 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.7 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	FREEMAIL_FROM,RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD,T_DKIM_INVALID autolearn=ham
	version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by moria.seul.org (Postfix) with ESMTPS id 71EE01E0A39
	for <archiver@seul.org>; Mon, 16 Jun 2014 04:56:24 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 812E62F9FB;
	Mon, 16 Jun 2014 08:56:22 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 162392FE76
 for <tor-talk@lists.torproject.org>; Mon, 16 Jun 2014 08:46:16 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at eugeni.torproject.org
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 7h0falXVsO27 for <tor-talk@lists.torproject.org>;
 Mon, 16 Jun 2014 08:46:16 +0000 (UTC)
Received: from forward2l.mail.yandex.net (forward2l.mail.yandex.net
 [84.201.143.145])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "forwards.mail.yandex.net",
 Issuer "Certum Level IV CA" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id E03FD2F56E
 for <tor-talk@lists.torproject.org>; Mon, 16 Jun 2014 08:46:15 +0000 (UTC)
Received: from smtp1h.mail.yandex.net (smtp1h.mail.yandex.net [84.201.187.144])
 by forward2l.mail.yandex.net (Yandex) with ESMTP id 6AAB81AC1860
 for <tor-talk@lists.torproject.org>; Mon, 16 Jun 2014 12:46:12 +0400 (MSK)
Received: from smtp1h.mail.yandex.net (localhost [127.0.0.1])
 by smtp1h.mail.yandex.net (Yandex) with ESMTP id 24E2E13401CF
 for <tor-talk@lists.torproject.org>; Mon, 16 Jun 2014 12:46:12 +0400 (MSK)
Received: from tor20.anonymizer.ccc.de (tor20.anonymizer.ccc.de [31.172.30.3])
 by smtp1h.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id
 jaCPW8xBKT-k9CuRmOO; Mon, 16 Jun 2014 12:46:10 +0400
 (using TLSv1.2 with cipher AES128-SHA (128/128 bits))
 (Client certificate not present)
X-Yandex-Uniq: 79b54327-2488-47c7-919a-1cfac719f079
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail;
 t=1402908371; bh=bkSh2da00zExs/bFxThEVzacjK3kAsA9n/m0rIXcH2A=;
 h=Date:From:To:Subject:Message-ID:Mail-Followup-To:References:
 MIME-Version:Content-Type:Content-Disposition:
 Content-Transfer-Encoding:In-Reply-To:User-Agent;
 b=OfuZBn5nUkBl1LYEkPXdT/mIySFjPl3Emlsp6ZnkcqyW3KK0NtJmhitUqIZEdHJSb
 XDqzwYlLZuEdHWLGEsqvu5CZ8JULT4do4u71XWlmuWYNVFNyhwmzSFVF5bQ0YdpUEV
 r9Z3ATRL2SphxbdnhedhFJXFDqz4iUKw4lgmYzY4=
Authentication-Results: smtp1h.mail.yandex.net; dkim=pass header.i=@yandex.ru
Date: Mon, 16 Jun 2014 08:43:06 +0000
From: =?utf-8?B?0JDRgNGC0YPRgCDQmNGB0YLQvtC80LjQvQ==?= <art.istom@yandex.ru>
To: tor-talk@lists.torproject.org
Message-ID: <20140616084305.GC4741@localhost>
Mail-Followup-To: tor-talk@lists.torproject.org
References: <539BCD4A.1020805@torproject.is> <539BF7EF.3050806@googlemail.com>
 <539D15C7.4030702@torproject.is> <539DC3B5.3070903@gmx.com>
 <CAD2Ti282+TmKEOVX_8=gG7VaF3FDHuytn4OhwJAiag3QzRbwug@mail.gmail.com>
 <20140616055435.GB4741@localhost> <20140616090024.27849a8c@meilong>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <20140616090024.27849a8c@meilong>
User-Agent: Mutt/1.5.23 (2014-03-12)
Subject: Re: [tor-talk] Non-free country law preventing Tor from getting
 donations
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

On Mon, Jun 16, 2014 at 09:00:24AM +0200, =D6yvind Saether wrote:
> > Ordinary people do not know this word "code" (especially open
> > source). They believe that the piper calls the tune. And in fact it
> > is very difficult to argue with such a statement without falling into
> > the technical details ("code is open")
> =

> "code is open" means NOTHING, so sorry - just look at OpenSSL.
> =

> That "open code" is somehow safe is a completely false myth. It is very
> easy to insert "bugs" that result in huge security holes into any "open
> code" project and we have seen more than enough examples of this to
> keep wearing blinders and pretend that "the code is available" means
> that the code is safe.

Much easier insert backdoor into proprietary software. Even hide
nothing/"nowhere"

> =

> "code is audited" means a tiny bit more. I would really like to see
> some truly independent audit. Such an audit could (like Tor itself) be
> funded using cryptocurrencies like Bitcoin so that governments can not
> easily prevent donations.

Agreed 100%. Today it is more important than auditing TrueCrypt.


-- =

tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

