July 2018 - cypherpunks-legacy

[Announce] Introducing Tor VM b Tor in a virtual machine.
by Kyle Williams 06 Jul '18

06 Jul '18

[1]http://www.janusvm.com/tor_vm/ Tor VM is a small virtual machine that acts as a router and redirects your TCP traffic and DNS request through Tor while filtering out protocols that could jeopardize your anonymity. Tor VM is built using all open source software and is free. There are many advantages to running Tor in a virtual machine. Any application on any operating system that uses TCP for communication is routed over Tor. By using a small virtual machine that acts as a router, protocols such as UDP and ICMP are filtered, preventing a compromise of your anonymity. Placing Tor in a virtual machine separates Tor from potentially insecure applications that could compromises Tor's integrity and your security. The Tor VM ISO is designed to be run in a virtual machine, not on physical hardware. The ISO requires two virtual NICs to be used; one bridged interface, one OpenVPN Tun/Tap adapter. The Windows build of Tor VM is portable and includes QEMU to run the virtual machine, but requires Administrator privileges to install the Tap32 adapter. Traffic is routed through the Tap interface, into the VM, TCP and DNS are directed to Tor's Transport while other protocols are discarded, then Tor does it's magic with your traffic. More details can be found in the design documentation. Lots of people are going to ask "What's the difference between JanusVM and Tor VM?", so I'll address this now. JanusVM was designed to be used by multiple users, runs HTTP traffic through Squid and Privoxy, and was build on top of Debian packages. Tor VM is built from entirely 100% open source software, is pre-configured to support only a single user, is much smaller in size, uses less memory than JanusVM, and works with QEMU. Is Tor VM going to replace JanusVM?? It's too soon to tell. This software is in the late alpha stages of development; work is still in progress. For the time being, Tor VM is being hosted on the JanusVM server. Martin and I would appreciate it if a few of you would give Tor VM a go and provide us with your feedback. Feel free to review the We look forward to hearing from the community. One last thing. Mad props to coderman! Martin did an amazing job hacking QEMU and the WinPCAP drivers in order to create an interface that is a raw bridge into the existing network card. This is just as good as VMware bridge service, if not better! It's Amazing work; make sure to take a close look at what is under the hood. Tor VM wouldn't have been possible if it wasn't for his insane amount of knowledge and skill. Let me be the first to say it; Thank You. :) Best Regards, Kyle Williams References 1. http://www.janusvm.com/tor_vm/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Tor's three-year development roadmap
by Roger Dingledine 06 Jul '18

06 Jul '18

Hi folks, I've finally finished writing up our three-year development roadmap. This document describes Tor research and development items that should happen on a three-year timeframe to move Tor forward at being both a useful circumvention tool and a useful privacy tool: https://svn.torproject.org/svn/tor/trunk/doc/roadmaps/2008-12-19-roadmap-fu… We've got enough funding to get good starts on many of the items in the roadmap (more detail on that coming soon), but of course we could use some more to get even further. So if you know anybody interested in these topics, please let them know -- and let us know. :) While The Tor Project makes sure to do a great job at being transparent in our research and design discussions and outcomes ("how Tor works and why" from the researcher perspective), we haven't done as good a job lately at being transparent to our *users* about what we're working on, what we hope to work on next, who's working on what, etc. Hopefully this pdf will help change that. Andrew also produced an actual press release for us, so we can become more press friendly and provide a way for the media to start a conversation with us: https://blog.torproject.org/blog/our-three-year-development-roadmap-publish… https://www.torproject.org/press/2008-12-19-roadmap-press-release You may also be interested to follow the more detailed TODO list I've been maintaining to help keep all the developers coordinated: https://svn.torproject.org/svn/tor/trunk/doc/TODO.external Thanks! --Roger ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Syrian Internet shutdown
by Joly MacFie 06 Jul '18

06 Jul '18

Renesys yesterday reported a Syrian Internet shutdown. http://www.renesys.com/blog/2011/06/syrian-internet-shutdown.shtml I'm getting through to some but not all of the sites reported down. Any further info? <http://www.renesys.com/blog/2011/06/syrian-internet-shutdown.shtml> -- --------------------------------------------------------------- Joly MacFie 218 565 9365 Skype:punkcast WWWhatsup NYC - http://wwwhatsup.com http://pinstand.com - http://punkcast.com VP (Admin) - ISOC-NY - http://isoc-ny.org -------------------------------------------------------------- - ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: Fun with Rosslyn Chapel, or, What *was* the Templar's Cipher,
by T. Wolf 06 Jul '18

06 Jul '18

anyway? Dear RAH, I just found the old attached message of yours doing a web search. Coincidentally, I'm currently looking for the very the same thing (i.e. the ciphers the Templars used for their bearer certificates). Since your message is two years old already, I'm hoping you found the solution by now. If you did, PLEASE PLEASE PLEASE tell me! Thanks, Thomas ----- Your old message (http://archives.neohapsis.com/archives/crypto/2000-q2/0315.html) ----- I'm dong an IBUC shirt for EFCE2K, and, given that we're in Edinburgh, and Rosslyn Chapel, the famous Templar, um, Mecca, is here, and the Templars ran the original money transfer business, using cryptography no less, Fearghas and I popped out to Roslin to root around for stuff to stick on the aforesaid shirt. Close, but, more or less, no cigar. We saw the faded remains of a Templar floriated cross on the Earl of St. Clair's supposed crypt-cover (kinda small, people speculate about all kinds of goodies in there), which might have been cool, but it was all eroded and I haven't found line art of one on the web and it's late. I've gotten a couple kinda-crypto things, of which I'll pick one for the shirt tomorrow morning before we mail it out to the silkscreener, but what I'd *really* like to know, if it's not one of the many "secrets" of the Templars [like the shroud of Turin is DeMolay, or that the Templars were Masons, or vice versa, or that they had the head of John the Baptist (or christ, or Joseph, or the original Green Man) or that they *really* had the Ark of the Covenent, or the Holy Grail, or that DeMolay was the Second Gunman on the Grassy Knoll :-), or, whatever] is... Has anyone ever figured out, or "discovered" or whatever, what kind of cryptosystem the Templars used to encrypt, decrypt, sign/modify the chits (dare I say bearer certificates? ;-)) they used so that people could go from preceptory to preceptory, getting cash/food/whatever, all the way to the holy land (and get the remains of their money back, or a bill :-), when they returned home? Cheers, RAH, Who, oddly enough, and by the sheerest coincidence (and I swear on a stack of Illuminati), lives in the Roslindale section of Boston, named for Roslin, home of Rosslyn Chapel.... --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)wasabisystems.com

1 0

Syrian Internet shutdown
by Joly MacFie 06 Jul '18

06 Jul '18

Renesys yesterday reported a Syrian Internet shutdown. http://www.renesys.com/blog/2011/06/syrian-internet-shutdown.shtml I'm getting through to some but not all of the sites reported down. Any further info? <http://www.renesys.com/blog/2011/06/syrian-internet-shutdown.shtml> -- --------------------------------------------------------------- Joly MacFie 218 565 9365 Skype:punkcast WWWhatsup NYC - http://wwwhatsup.com http://pinstand.com - http://punkcast.com VP (Admin) - ISOC-NY - http://isoc-ny.org -------------------------------------------------------------- - ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[ZS] Re: Prestige Bitcoin
by Michael Hrenka 06 Jul '18

06 Jul '18

Pasting a private mail exchange between me and Lodewijk "Lewis" Andri de la Porte: On Wed, May 9, 2012 at 1:30 AM, lodewijk andri de la porte <lodewijkadlp(a)gmail.com> wrote: Hey Michael, I figured it'd be more easier (and less taxing for others) if I'd send you this mail directly. I've send a quite critical e-mail which Eugen was kind enough to forward, in fact he send your answer back. My mail must have been a bit harsh to read and I apologize. The intuitive idea was based upon the mechanic of Bitcoins and a vague feeling about how a reputation based currency might work. He included a link to your paper-ish document "Pretige Fluido Documentation" V0.01. I'm glad it was worked out in more detail than I'd first expected yet somewhat saddened by the fact that none of the issues I felt were difficult were solved. I'm also glad I was quite on point when it came to guessing how it would work, but that's just personal vanity. Let me first say that I too think currency the way we use it now is limiting. Limiting in the sense that it doesn't accurately represent what it should, value added to the community. It should serve to allow you to balance that value, letting the community do things for you. It's obvious from the document you've worked, in the mathematical sense, hard to produce formula's that describe the mechanic. The system should in fact work excellently if everyone were benevolent. Sadly if everyone were benevolent there'd be no need for currency in the first place. On the other hand if everyone were benevolent the world would be a boring place. Currency is essential to motivate useful work. Useful is usually defined as that which others would work for. Food, tools, raw materials, medicine, knowledge but curiously also (imagery of) sex, music, art and other entertainment. It is not our task to determine what another thinks is right or wrong, neither what is useful and what is not. That I consider an axiom of ethics. That it motivates work to produce such things is also important. Sloth will not get anyone anywhere. I seem to have trailed off a bit too far. Bitcoins are the hardest of hard currencies. That is to say, there is no love. Just math. This is visible through irrevocable transactions. There's also no mass-market control mechanism like inflation in it. It is meant to be a digital perfect gold standard and it practically is that. The reason it can be that is because it's supply is limited and there is no notion of a person. Without persons there is no trust, no organisations, nothing. There's just hashes in a flow, so to speak. To combine that with the highly attributed principles of Prestige is ridiculous. Not only is the Prestige system heavily dependent on a per person limited amount of DP's. A problem Bitcoin geniously EVADES. This is actually on of the mentioned problems but I'm afraid it's also the show stopper. Not even governments can get identity right. Identities are regularly traded on black market. I have some wild ideas about how to deal with identification but it's a hard nut to crack. Skipping all the problems imported from politics and traditional currencies there is still simple cases of fraud that are effective. Take for example a DP pool, a group of uses simply agreeing to divide among each other as thinly as possible as many DP as they have. Join the pool and everyone becomes richer. In fact this will allow them to have the maximum amount of balanced income. Note also that evaporating Fluido (a pretty name) will simply encourage spending. This in the view of a planet with finite resources. Any bump in fame will cause a bump in Fluido. Just after your movie released you're the richest man on the planet. Halfway through the subsequent 10 year project your funds run low enough to bother working out fantasies. So what you do is buy a lot of some other currency. In fact you always do that. Lest materials are cheaper, in which case you always buy a ton of materials. In the worst case your a man with truly more than he can spend. I feel more for a (bit)coin with an evaporation rate. Ideally a fairly high one. That should make it more of a trade currency and less of a long term investment. The distribution ideas you've presented are readily usable in certain limited environments, like MMORPG's. And they would provide quite valuable an addition there. If ever you mange to work out the kinks in the Prestige system I'd love to help implement it. I currently operate an e-wallet (bitvau.lt) that is still under heavy development ("public testing" means just that, don't trust me yet and you don't have to like the homepage's looks. I've a new one in the pipeline) and I wouldn't mind at some point adding Prestige/Fluido to the mix. I love the idea of a continuous currency and currency flows, maybe I'll even emulate them somehow. And if I ever get around to working on identities properly I'll make sure you find out, Maybe even steal some ideas from you :). Feel free to repost (parts of) this message elsewhere, I've send it to you directly because I think it's too long to bother people without an interest in currency and I can never tell if my babbling makes enough sense, not because I don't want anyone to read it. Best regards, Lodewijk "Lewis" Andri de la Porte P.S.: If I could give you some DP, I totally would. Michael Hrenka (sent by metahorse(a)googlemail.com) 12:08 AM (0 minutes ago) to lodewijk Hi Lewis, thank you for your direct feedback. We actually seem to think very much alike. I am very much aware that the fixed quota of DPs is the most critical issue of the Prestige system, and that it could become a show stopper. It would work if identity could be verified reliably, but as you said that's extremely hard to do. At the moment the best approach to fix that problem is to include a kind of trust rating into the system. First you need to get some trust to "unlock" your DPs. Unfortunately I'm still far from having a clear idea how that would work exactly. This is the part of the project that needs work most urgently. The core of my system is definitely the Prestige system. I guess it makes more sense to add Fluido as add-on to that core. Also, Bitcoin integration with Prestige would be made with an add-on, too. It probably doesn't hurt to have a single reputation index and different currencies that are attached to that index. Bitcoin is great for storing value, but Fluido would have the advantage that it's more abundant and can be spent more freely on promising projects and other things (evaporation obviously encourages that). Both currencies have their own justification and purposes. From my point of view a crypto version of Fluido is essentially a (bit)coin with evaporation. You probably would be able to mine those "crypto Fluido". The only real problem with that is that is sounds weird ;) I am aware that the Prestige system could be applied in many limited environments. Basically, I want to create a web platform that makes doing so really easy, but that's a rather long-term project. Your e-wallet sounds good. I will definitely consider using it. :) And your "babbling" does make lots of sense. I'll repost it to the Zero State list. That's the place where most of the discussion is happening. Cheers, Michael Hrenka http://radivis.com Want a signature like mine? Click here. P.S.: Thanks for your potential DPs :) I wonder whether it would make sense to start with a simple private app that just manages DPs you want to attribute to others. You'll get at least 1 DP from me for the inspiration I got from you. ;) -- Zero State mailing list: http://groups.google.com/group/DoctrineZero ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [liberationtech] Thoughts on decentralized DNS, and OpenNIC particularly?
by Rohan Dixit 06 Jul '18

06 Jul '18

Thanks for this, really helpful. My purpose in doing this is to figure out what the most practical/quickest to deployment solution is for distributed DNS records, so this is definitely useful. I looked at both namecoin and CJDNS. Looks like namecoin has attracted most of the developers from the initial project, with CJDNS still limping along (I'm guessing based on activity here.) Links to the code: namecoin: https://github.com/cjdelisle/cjdns/graphs/impact CJDNS: https://github.com/vinced/namecoin/graphs/impact Could you speak to the structure of namecoin a bit more? Looks like it uses the "proof-of-work" trick from bitcoin to validate DNS records (and arbitrary key-value pairs), unless my skimming was totally off. That's pretty ingenious, for those who are interested I found a great blog post that serves both as an introduction to Bitcoin and explains how it could be used to make a distributed DNS. http://paulbohm.com/2011/06/17/bitcoins-value-is-decentralization It appears they're also proposing integrating with providers like OpenNIC, OpenDNS, etc. although I'm not qualified to judge how feasible that is. http://dot-bit.org/Project_Roadmap They also share computing resources with current bitcoin generators.... seems they've thought of everything. Someone mentioned DNSSEC in a new off-shoot thread. DNSSEC within the existing DNS paradigm is only a half-measure (although I think you'll agree, an important one.) *Notes on other dDNS providers:* So besides namecoin and CJDNS, there's also Dot-P2p, the dDNS system that was proposed based on the BitTorrent protocol. Some info was here: http://p2pfoundation.net/Dot-P2P but the link to http://dot-p2p.org/index.php?title=Main_Page looks dead. The first hit Googling "distributed dns" brings up another codebase that hasn't been modified seemingly since 2005 ( http://sourceforge.net/projects/distributeddns/files) I checked out DIANNA as well, but didn't see a link to active code so assumed it was mostly dead. http://dianna-project.org/wiki/Main_Page On Wed, Mar 14, 2012 at 4:36 PM, <liberationtech(a)lewman.us> wrote: > On Wed, Mar 14, 2012 at 02:19:47PM -0700, rohandixit86(a)gmail.com wrote > 14K bytes in 317 lines about: > : Curious if anyone had thoughts on OpenNIC as a provider of decentralized > : DNS. From my naive point of view, it often seems like dDNS is a good way > to > : stop lazy types of censorship. But perhaps I'm missing something and the > : problem is more complicated than that? > > It is not distributed. It is just a rebirth of the non-ICANN root > servers. See https://en.wikipedia.org/wiki/AlterNIC for past history on > this idea. > > See also https://en.wikipedia.org/wiki/Alternative_DNS_root for more > history and current status. > > -- > Andrew > http://tpo.is/contact > pgp 0x6B4D6475 > _______________________________________________ liberationtech mailing list liberationtech(a)lists.stanford.edu Should you need to change your subscription options, please go to: https://mailman.stanford.edu/mailman/listinfo/liberationtech If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?" You will need the user name and password you receive from the list moderator in monthly reminders. You may ask for a reminder here: https://mailman.stanford.edu/mailman/listinfo/liberationtech Should you need immediate assistance, please contact the list moderator. Please don't forget to follow us on http://twitter.com/#!/Liberationtech ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[IP] New travel document requirements for USA citizens
by David Farber 06 Jul '18

06 Jul '18

________________________________________ From: Sent: Thursday, February 07, 2008 6:55 AM To: David Farber Subject: Re: [IP] New travel document requirements for USA citizens For IP... pls snip my name. As a USG employee, I can give a little background on the passport issue. The price primarily changed because Congress freaked when they found that processing offices (in the U.S., usually the Post Office) charged a little more than it cost to process the passports. So State reduced that fee, but increased the security fee. The security involves all those things that you didn't mention -- the huge amounts of data crunching that makes sure that you're really an American, not a terrorist, not selling your passport, and not owing child support, among other things. The biggest benefit of that is that it's only a little bit more, but it's a nice round number. And, truly... you're traveling abroad. You're probably buying a plane ticket. You really can't afford $10 per year? ($100 for a 10-year passport.) The Passport Card goes under less scrutiny -- hence the lesser charge -- and is much cheaper to produce. Does it make sense? Probably not if you're from Ohio, going to Toronto for vacation this summer -- you could use the passport on your next trip abroad. (Since it isn't just DHS that requires them -- every other country outside of North America will want to see it too.) But if you live on the Maine or Montana border? Perhaps it does. As for the Australian model.. I've used it before, and it works great. It's a hell of a lot easier than traveling to Ethiopia, where you get a visa at the airport; or China or India, where you have to wait for an actual visa foil. ------------------------------------------- Archives: http://v2.listbox.com/member/archive/247/=now RSS Feed: http://v2.listbox.com/member/archive/rss/247/ Powered by Listbox: http://www.listbox.com ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: Bitcoin v0.1 released
by hal＠finney.org 06 Jul '18

06 Jul '18

Jonathan Thornburg writes: > In the modern world, no major government wants to allow untracable > international financial transactions above some fairly modest size > thresholds. (The usual catch-phrases are things like "laundering > drug money", "tax evasion", and/or "financing terrorist groups".) > To this end, electronic financial transactions are currently monitored > by various governments & their agencies, and any but the smallest of > transactions now come with various ID requirements for the humans > on each end. > > But if each machine in a million-node botnet sends 10 cents to a > randomly chosen machine in another botnet on the other side of the > world, you've just moved $100K, in a way that seems very hard to > trace. To me, this means that no major government is likely to allow > Bitcoin in its present form to operate on a large scale. Certainly a valid point, and one which has been widely discussed in the debates over the years about electronic cash. Bitcoin has a couple of things going for it: one is that it is distributed, with no single point of failure, no "mint", no company with officers that can be subpoenaed and arrested and shut down. It is more like a P2P network, and as we have seen, despite degrees of at least governmental distaste, those are still around. Bitcoin could also conceivably operate in a less anonymous mode, with transfers being linked to individuals, rather than single-use keys. It would still be useful to have a large scale, decentralized electronic payment system. It also might be possible to refactor and restructure Bitcoin to separate out the key new idea, a decentralized, global, irreversible transaction database. Such a functionality might be useful for other purposes. Once it exists, using it to record monetary transfers would be a sort of side effect and might be harder to shut down. > I also worry about other "domestic" ways nasty people could exploit > a widespread Bitcoin deployment: > * Spammer botnets could burn through pay-per-send email filters > trivially (as usual, the costs would fall on people other than the > botnet herders & spammers). > * If each machine in a botnet sends 1 cent to a herder, that can add > up to a significant amount of money. In other words, Bitcoin would > make botnet herding and the assorted malware industry even more > profitable than it already is. It's important to understand that the proof-of-work (POW) aspect of Bitcoin is primarily oriented around ensuring the soundness of the historical transaction database. Each Bitcoin data block records a set of transactions, and includes a hash collision. Subsequent data blocks have their own transactions, their own collisions, and also chain to all earlier hashes. The result is that once a block is "buried" under enough new blocks, it is essentially certain (given the threat model, namely that attackers cannot muster more than X% of the compute power of legitimate node operators) that old transactions can't be reversed. Creating new coins is indeed currently also being done by POW, but I think that is seen as a temporary expedient, and in fact the current software phases that out over several years. Hence worries about botnets being able to manufacture large quantities of POW tokens are only a temporary concern, in the context of Bitcoin. There have been a number of discussions in the past about POW tokens as anti spam measures, given the botnet threat. References are available from "Proof-of-work system" on Wikipedia. Analyses have yielded mixed results, depending on the assumptions and system design. If POW tokens do become useful, and especially if they become money, machines will no longer sit idle. Users will expect their computers to be earning them money (assuming the reward is greater than the cost to operate). A computer whose earnings are being stolen by a botnet will be more noticeable to its owner than is the case today, hence we might expect that in that world, users will work harder to maintain their computers and clean them of botnet infestations. Countermeasures by botnet operators would include moderating their take, perhaps only stealing 10% of the productive capacity of invaded computers, so that their owners would be unlikely to notice. This kind of thinking quickly degenerates into unreliable speculation, but it points out the difficulties of analyzing the full ramifications of a world where POW tokens are valuble. Hal Finney --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)metzdowd.com

1 0

Re: Help Iranian dissidents
by Andrew Lewman 06 Jul '18

06 Jul '18

On 06/24/2009 01:41 PM, Bill McGonigle wrote: > On 06/24/2009 11:44 AM, Eugen Leitl wrote: >> Speaking about guerilla, http://www.google.com/search?q=sheevaplug >> would seem like an ideal throwaway Tor appliance. With Bluetooth >> or WLAN dongles even casting a small (or long-distance, with >> suitable directional aerials) wireless cloud. > > The Fonera 2 might be a candidate platform. Half the price, 32MB RAM, > built-in wifi, support for 3g modems. IIRC, somebody already did a tor > mod for the first version. In general, we encourage people to work on these types of ports of Tor. We will work with you and help you turn this into a reality. However, be aware that it takes work, research, and effort to get tor to work correctly on these platforms. I'm sure there are a list of features "micro-environments" would need to have in Tor to make everything work better. We'd love to have the help and your experience in turning this into a reality. We have the beginnings of a certification program in place, so an end-user/customer can tell if this is really tor, works with the current tor network, is a solid design as good as Tor, or is complete bunk and merely includes the Tor tarball to say "uses Tor!" for their marketing purposes. However, coming up with the idea, and then punting all of the next steps to the Tor Project doesn't work too well. I have a list of platforms that people have stated, "If you can turn Tor into an appliance on device X, we'll sell it for you and donate x% back to you quarterly." These platforms include: fonera2, embedded linux variants, polar cloud's tomato, sheevaplugs, bug lab's modules, openwrt, ddwrt, windows ce, windows xp embedded, and the list goes on. In conversations with the requesters, they want: Step 1) Generate an idea. Step 2) Wait for Tor Project to do the technical work. Step 3) Profit! If only it were that easy. -- Andrew Lewman The Tor Project pgp 0x31B0974B Website: https://torproject.org/ Blog: https://blog.torproject.org/ Identica/Twitter: torproject ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0