Delivery-Date: Sat, 28 Jun 2014 14:56:48 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.7 required=5.0 tests=BAYES_00,DKIM_ADSP_CUSTOM_MED,
	DKIM_SIGNED,FREEMAIL_FROM,RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD,T_DKIM_INVALID
	autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 1AB121E0BC7
	for <archiver@seul.org>; Sat, 28 Jun 2014 14:56:46 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 8EE462F7A0;
	Sat, 28 Jun 2014 18:56:43 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id D7B1C2F7A0
 for <tor-talk@lists.torproject.org>; Sat, 28 Jun 2014 18:41:57 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at eugeni.torproject.org
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id akwCM0wrXyIa for <tor-talk@lists.torproject.org>;
 Sat, 28 Jun 2014 18:41:57 +0000 (UTC)
Received: from nm38.bullet.mail.ne1.yahoo.com (nm38.bullet.mail.ne1.yahoo.com
 [98.138.229.31])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (Client did not present a certificate)
 by eugeni.torproject.org (Postfix) with ESMTPS id B45FF2F78A
 for <tor-talk@lists.torproject.org>; Sat, 28 Jun 2014 18:41:57 +0000 (UTC)
Received: from [127.0.0.1] by nm38.bullet.mail.ne1.yahoo.com with NNFMP;
 28 Jun 2014 18:41:54 -0000
Received: from [98.138.100.116] by nm38.bullet.mail.ne1.yahoo.com with NNFMP;
 28 Jun 2014 18:38:54 -0000
Received: from [98.138.101.165] by tm107.bullet.mail.ne1.yahoo.com with NNFMP;
 28 Jun 2014 18:38:24 -0000
Received: from [127.0.0.1] by omp1076.mail.ne1.yahoo.com with NNFMP;
 28 Jun 2014 18:38:24 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: 298200.91118.bm@omp1076.mail.ne1.yahoo.com
Received: (qmail 18214 invoked by uid 60001); 28 Jun 2014 18:38:24 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024;
 t=1403980704; bh=nCShgluhqoy7lIiCO4QeYHRHQXHv4fQdpu0a/h3oWns=;
 h=References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
 b=iOGLTk6AGahgAt3yMgLfeo3ozU9tCPUNd4MyACHJdWQt5um3YMAZtexEPq+kOviaNvg9ovDLHuLk3mI7XRdvmrD4kQIrzc66k+VOy2ZcsX8uLz9Cn8ydo7ZNwKj+BtbkNjXlfGRWkwtqhtExBOPLk68rpKY2z7KYCtPLmJXwS0o=
X-YMail-OSG: D5F29_8VM1nyj_ge6GjFGKtkfLoRYV35O8ZdFGrfySRhb7I
 NWyM4fT7BYcBLO6WkIm7W.zVoLxxvSIM.1KD5x358_4YQ2vd.uqjiQTROEeY
 V273d0Xf7ecXS.dqwunIhTm5ai.mEa9F85MgyQlzQFfrMdTo1iGap1c5fOry
 E9M8YX9E8rmZmcGXEbJMs_JlUU4ZpFOHryYPMJql46gsf9bGia27uTc8uOc9
 9NrZfHP.1dhyzf5iJ09eaJVPudlvEymZPbVOnBEJwA_0zsdRkIUJ6w0ehWQc
 .b1U5nrenoi877MYOKxDTAylMYENlDgJXojshpYBItKYdNgix7zCtimgiWeL
 swWE7w9lm2lCbpaSWkAdlbuESmm5Y0RObgifglGJON2wWWxZSbcG1EOG6xam
 4hQoFyzPlyfzhtuBNOZP_3EhVwRM6Rr96FEtfaNiGP2v.8t9Czy4WRGa3Dhr
 oiECCfddIVz.KmK6cAJ_JaOyLvXvyeT7DNdenuONn74eYVgRpxxySFFR3rJB
 NmFZCT4Cq
Received: from [46.246.52.10] by web122403.mail.ne1.yahoo.com via HTTP;
 Sat, 28 Jun 2014 11:38:24 PDT
X-Rocket-MIMEInfo: 002.001,
 VGhlIG9ubHkgdGhpbmcgSSBjYW4gYWRkIGlzIHRoYXQgd2hlbiBJIGRvd25sb2FkZWQgYSBsYXJnZSBQREYgYW5kIGxvYWRlZCBXaXJlc2hhcmsgdXAsIHRoZXJlIHdhcyBhIHN0ZWFkeSBzdHJlYW0gb2YgdHJhZmZpYyB1bnRpbCBGaXJlZm94IHRvbGQgbWUgdGhhdCB0aGUgZG93bmxvYWQgaGFkIGJlZW4gY29tcGxldGVkLiBBbHNvLCB0aGUgY29ubmVjdGlvbnMgd2VyZSBiZXR3ZWVuIG15IElQIGFuZCB0aGUgSVAgb2YgdGhlIFRvciBlbnRyeSBub2RlIChhcyBjb25maXJtZWQgaW4gYmx1dG1hZ2llKS4gVGgBMAEBAQE-
X-Mailer: YahooMailWebService/0.8.191.1
References: <1403807644.83828.YahooMailNeo@web122402.mail.ne1.yahoo.com>
 <53AC76C6.2050508@gmx.com>
Message-ID: <1403980704.15476.YahooMailNeo@web122403.mail.ne1.yahoo.com>
Date: Sat, 28 Jun 2014 11:38:24 -0700
From: Bobby Brewster <bobbybrewster203@yahoo.com>
To: "tor-talk@lists.torproject.org" <tor-talk@lists.torproject.org>
In-Reply-To: <53AC76C6.2050508@gmx.com>
MIME-Version: 1.0
X-Content-Filtered-By: Mailman/MimeDel 2.1.15
Subject: Re: [tor-talk] Downloading Programs with TBB - dangerous???
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

The only thing I can add is that when I downloaded a large PDF and loaded W=
ireshark up, there was a steady stream of traffic until Firefox told me tha=
t the download had been completed. Also, the connections were between my IP=
 and the IP of the Tor entry node (as confirmed in blutmagie). This suggest=
s that the download itself did happen within the Tor network.



On Thursday, June 26, 2014 9:12 PM, Joe Btfsplk <joebtfsplk@gmx.com> wrote:
 =



On 6/26/2014 1:34 PM, Bobby Brewster wrote:
> /Let's say I download a PDF with Tor. I get the warning that I might down=
load it outside Tor./
That used to be the norm, but I believe the message was changed in later =

TB versions.=A0 Which version are you using?
I'm not sure I've seen that warning lately, for just saving a PDF.
>
> /What is the liklihood of that actually happening?=A0 Are there some dang=
erous file types that one should not download./
Pretty much the same precautions as regular surfing, as far as =

"dangerous" files - whether inside Tor / Torbrowser or not.
The advice is generally, don't open downloaded files while online. =

Certainly not in or using Torbrowser (like a PDF, using built PDF viewer).
But that viewer isn't AS big of an anonymity breaking threat as using =

3rd party software over the Tor network.=A0 They don't always follow the =

Tor proxy rules.

For some (like Thunderbird) people have gone to great lengths to create =

software / plugins, etc., to make sure it stays inside the Tor network.=A0 =

Even those methods aren't 100% foolproof, 100% of the time.

>
> /Please note that I am talking about the downloading itself. I'm not talk=
ing about downloaded files containing an image which makes a request to the=
 server so that the user's real IP is exposed./
>
>
Much depends on whether using 3rd party software for the downloading, or =

even Fx addons used in Torbrowser.=A0 If just d/l a PDF or txt file, etc., =

saving it to disk / DVD - from the browser save window isn't a problem.
Of course, most any file could be malicious or its extension be =

intentionally mislabeled.

The addons may be OK, or they may leak data like real IPa, or something =

else.=A0 One shouldn't assume because they're listed on Mozilla AMO, that =

they maintain anonymity over Tor.=A0 They might - but they might not.
-- =

tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
-- =

tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

