Delivery-Date: Mon, 17 Nov 2014 11:47:15 -0500
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.7 required=5.0 tests=BAYES_00,DKIM_ADSP_CUSTOM_MED,
	DKIM_SIGNED,FREEMAIL_FROM,RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD,T_DKIM_INVALID
	autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id B2C161E0C80;
	Mon, 17 Nov 2014 11:47:13 -0500 (EST)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id E40663190A;
	Mon, 17 Nov 2014 16:47:08 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id B0282318E5
 for <tor-talk@lists.torproject.org>; Mon, 17 Nov 2014 16:47:05 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id Xm-orIQZvkaW for <tor-talk@lists.torproject.org>;
 Mon, 17 Nov 2014 16:47:05 +0000 (UTC)
Received: from mail-wi0-x22b.google.com (mail-wi0-x22b.google.com
 [IPv6:2a00:1450:400c:c05::22b])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id 5D615314C9
 for <tor-talk@lists.torproject.org>; Mon, 17 Nov 2014 16:47:05 +0000 (UTC)
Received: by mail-wi0-f171.google.com with SMTP id bs8so3887052wib.4
 for <tor-talk@lists.torproject.org>; Mon, 17 Nov 2014 08:47:02 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=from:date:to:subject:message-id:references:mime-version
 :content-type:content-disposition:in-reply-to:user-agent;
 bh=SCo2sX6ObBIdjxo6C2SlRCH/ePePoQ0F6ZhzV9H3jbA=;
 b=a6PEWyULDalzksP8HVRabuHZLVfNwlvQt81rYYlGSoE1ZaOrchReuUZcAseW5BnjOm
 /inyoS9Rr+ZlmmZvy7xEqyONuqzLQk+JL0OawobX/AtfhDJVxOKgpi0V8p5TfB11zU5/
 YlOcptEgpnOm4D5CJXoNtcDRX9CGeiifIfqk+aDmdTke9ms8t3gjw2J4rSdL8LfrDjt0
 yyWCda0ygxt2yjpFsv4p7jibVjiIEoWD9RtJwl5jIRsdjXoCG6DOk71X1vCb+p2nl5V3
 AvXUFZx/sJ2Qp7NZ/ZSK3KJB7uYGGh/VQKa0LscRXsyvNQ3SxAPlkYMp53pnw9zd5dFu
 Fvcg==
X-Received: by 10.194.205.132 with SMTP id lg4mr39133398wjc.84.1416242822301; 
 Mon, 17 Nov 2014 08:47:02 -0800 (PST)
Received: from localhost (31.transminn.cz. [185.8.239.43])
 by mx.google.com with ESMTPSA id y5sm15957388wix.9.2014.11.17.08.46.59
 for <tor-talk@lists.torproject.org>
 (version=TLSv1.2 cipher=RC4-SHA bits=128/128);
 Mon, 17 Nov 2014 08:47:01 -0800 (PST)
From: Matthew Finkel <matthew.finkel@gmail.com>
X-Google-Original-From: Matthew Finkel <Matthew.Finkel@gmail.com>
Date: Mon, 17 Nov 2014 16:46:52 +0000
To: tor-talk@lists.torproject.org
Message-ID: <20141117164648.GA14719@localhost>
References: <5469A0EA.204@riseup.net>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <5469A0EA.204@riseup.net>
User-Agent: Mutt/1.5.21 (2010-09-15)
Subject: Re: [tor-talk] misleading advice in Ars Technica article about
 patched binaries
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

On Mon, Nov 17, 2014 at 07:16:58AM +0000, wyory wrote:
> Hello Tor friends:
> 
> AN article on Ars Technica about the malicious exit nodes contains some
> misleading advice attributed to "Tor officials."
> 
> From end of article: "Tor officials have long counseled people to employ
> a VPN when using the privacy service, and OnionDuke provides a strong
> cautionary tale when users fail to heed that advice."
> 
> http://arstechnica.com/security/2014/11/for-a-year-one-rogue-tor-node-added-malware-to-windows-executables/

Thanks wyory. A new week, a new Tor headline. Happy Monday.

> 
> Maybe the article was supposed to read "HTTPS" instead of "VPN". Or,
> "verify binaries" instead of "employ a VPN."
> 
> Could a real "Tor official" contact the author and ask for a correction?

Probably a good idea. VPNs are useful, sometimes, but not very often and
definitely not for most use-cases.


- Matt
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

