Tor Researchers' Tool Aims To Map Out Internet Censorship
Sparrowvsrevolution writes "Tor developers Arturo Filasto and Jacob Appelbaum have released OONI-probe, an open-source software tool designed to be installed on any PC and run to collect data about local meddling with the computer's network connections, whether it be website blocking, surveillance or selective bandwidth slowdowns. Unlike other censorship tracking projects like HerdictWeb or the Open Net Initiative, OONI will allow anyone to run the testing application and share their results publicly. The tool has already been used to expose censorship by T-Mobile of its prepaid phones' browser and also by the Palestinian Authority, which was found to be blocking opposition websites. The minister responsible for the Palestinian censorship was forced to resign last week."
What are the risks for anyone found running OONI-probe in a surveillance heavy country?
Especially in light of the UK's recent decision to block The Pirate Bay.
I wonder what the legal recourse would be if this tool found the government in your respective 'free' democratic country was blocking sites for political reasons...? Could anyone sue the UK government if they were found to be blocking sites without providing a genuine legal reason for doing so?
Kind of ironic that with the multiple tor-centered stories on slashdot today that just now, when I tried to view this story, I was told that my IP was banned! I thought WTH, then realized that I had tor enabled on the device I was browsing on... (HP touchpad running cm9). I guess I can post AC, I just can't BROWSE anonymous...
I cannot find anything on the site that appears to make it available to me in a form I can run, a GIT repo for devs and some press releases is all. I suppose I could hit the "secure" .onion site but I see nothing to indicate there's code there. the summary appears to make it sound like they want participation and I'd love to help but see no way to do so.
Am I the only one that finds this clear as mud?
Build it, Drive it, Improve it! Hybridz.org
Appelbaum found another programmer to leech reputation off of. Maybe eventually he'll learn to program one of these days...
http://pgpboard.com/viewtopic.php?f=2&t=651
This service attempts to make a connection to a website of your choice so you can see if it is just your ISP that can't access it.
echo '[q]sa[ln0=aln80~Psnlbx]16isb572CCB9AE9DB03273snlbxq' |dc
Quick links to .onion forums which require Tor:
1. HackBB Discussion Forum:
Quick Link: http://www.tinyurl.com/hackbbonion
Real Address: http://clsvtzwzdgzkjda7.onion/
#####
2. Onion Forum 2
Quick Link: http://www.tinyurl.com/onionforum2
Real Address: http://65bgvta7yos3sce5.onion/
Warning: view either site with images and cookies disabled in your browser. Never visit .onion sites with images enabled in your browser!
that quote has always bugged me. i'd rather be killed first and then raped and then sewn into their clothing; that would be much better. the only other alternative, being sewn into the clothing and then raped and then killed seems only slightly worse than the so-called "very, very lucky" scenario.
We can analyze this using a 'truth table' approach..
1st 2nd 3rd Conclusion
1) Kill Rape Sew Bad
2) Kill Sew Rape Bad
3) Rape Kill Sew Bad+
4) Rape Sew Kill Bad++
5) Sew Kill Rape Bad+
6) Sew Rape Kill Bad++
The question is, which is worse, option 4 or option 6? This will of course vary, depending on what kind of seamstresses the Reavers are. Clearly it will not be pleasant.
A deeper and more interesting question is, what is the nature of 'Reaver Space'? If the zone of space they inhabit is a spherical shell, then I can understand why Mal flies near Reaver space, he has no choice. It is a min-max game between the Alliance core and the spherical shell of Reavers that lurk outside that zone, where he keeps maximum distance between both groups. However, in the movie, they indicate that there is a central location that the Reavers originated from. If that is the case, why doesn't he just fly to the other end of known space where there are no Reavers?
HA! I just wasted some of your bandwidth with a frivolous sig!
The web page has a big onion in the top left, which is the icon for the Onion Network, and I don't see any reference to Onions in the text.
OT, but since the article mentioned it, I got a throwaway prepaid T-Mobile phone for use when I'm outdoors and didn't want to bring my expensive Android phone. The first time I tried browsing and was blocked by the "Web Guard", I called and cussed them out. They refused, under any circumstances, to remove the "Web Guard" unless I came in to a corporate T-Mobile store and showed them a "valid government issued identification". It's a prepaid SIM card. FFS. I hate invoking Godwin, but is there anything we *can* do without producing our papers nowadays? (On a side note, I was recently told by a waitress at a pizza place that *everyone* in my state now has to have valid papers in order to drink a beer, regardless of age or anything else, you must produce your papers, citizen.)
The mouth-breather on the other end of the line actually said "are you saying we shouldn't keep children safe from danger on the internet". Mind-blowing how far the mind-numbed morons will take us in the name of "just doing their job".
I would like to see that happen in Europe too.
What do you expect from a former Soviet client terrorist organization?
Firefox security bug (proxy-bypass) in current TBBs
https://blog.torproject.org/blog/firefox-security-bug-proxy-bypass-current-tbbs
"A user has discovered a severe security bug in Firefox related to websockets bypassing the SOCKS proxy DNS configuration. This means when connecting to a websocket service, your Firefox will query your local DNS resolver, rather than only communicating through its proxy (Tor) as it is configured to do. This bug is present in current Tor Browser Bundles (2.2.35-9 on Windows; 2.2.35-10 on MacOS and Linux).
To fix this dns leak/security hole, follow these steps:
Type âoeabout:configâ (without the quotes) into the Firefox URL bar. Press Enter.
Type âoewebsocketâ (again, without the quotes) into the search bar that appears below "about:config".
Double-click on âoenetwork.websocket.enabledâ. That line should now show âoefalseâ in the âValueâ(TM) column.
See Tor bug 5741 for more details.
(https://bugs.torproject.org/5741)
We are currently working on new bundles with a better fix."
- http://pastebin.com/xajsbiyh
#
Anonymous comments:
#
On May 2nd, 2012 Anonymous said:
Oh dear :(
Does anyone know if IP addresses leaked to Twitter when (through NoScript) I enabled javascript for that site?
If yes, I may be in trouble.
#
On May 2nd, 2012 Anonymous said:
@anon, AFAIK Twitter does not use web sockets, so even if you enabled Javascript on Twitter it should not be an issue. I could be wrong or there could be other issues.
#
On May 2nd, 2012 Anonymous said:
Theoretically, an exit node can embed a websocket into your traffic stream if you are using HTTP.
#
On May 2nd, 2012 Anonymous said:
As long as you weren't doing anything illegal in the United States you should be fine. Tor has never been about hiding illegal activity. And since Twitter is in the US and doesn't respond to foreign court orders⦠wellâ¦
#
On May 2nd, 2012 Anonymous said:
Ah right, maybe Anonymous "Oh dear" is a fucking communist, or even a dirty whistle blower like Maning! Brave, law abide citizens haven't got anything, that must be hidden, so maybe you want to forbid TOR, Mr. McCarthy?
#
On May 2nd, 2012 Anonymous said:
Oh great, so all my Pastebins are belong to the Feds?
#
THE DRAMA CONTINUES...
TBB proxy bypass: Some DNS requests not going through Tor
Ticket #5741 (closed defect: fixed)
https://trac.torproject.org/projects/tor/ticket/5741
"This is not the first time some rarely triggered bug in Firefox causes Tor to be bypassed, and certainly will not be the last one. Since these bugs have a very high security impact I propose they are guarded against. How about running Firefox inside some kind of firewall that drops all network packets not going to Tor?"
#
Comments:
#
by mikeperry
Good catch Robert. Disabling about:config pref network.websocket.enabled prevents it from happening for me... I'm now grepping through the Firefox WebSocket code looking for the issue..
#
by mikeperry
This is fixed and pushed to all TBB branches. I fixed it by blocking all DNS requests while socks_remote_dns is enabled, so we don't end up with this showing up in new components in the future.
Interested folks can review the patch here: https://gitweb.torproject.org/torbrowser.git/blob/maint-2.2:/src/current-patches/firefox/0018-Prevent-WebSocket-DNS-leak.patch
#
Additional Reference:
[tor-talk] Firefox security bug (proxy-bypass