Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - astor

Pages: 1 ... 158 159 [160] 161 162 ... 208
2386
Well, the purpose of an e-tag is to check if you have cached a specific resource, so by disabling all caching you prevent that attack.

e-tags can potentially link your activity between different web sites, but they (alone) can't deanonymize you.

The Tor developers sometimes have to make trade offs between security and usability. Turning off JavaScript by default would be safer but it would also break half the web. Most people wouldn't know what was going on or how to fix it, they would just think that TorBrowser is shitty software and stop using it. The Tor devs decided that it's better for people to use Tor with JavaScript than no Tor at all.

e-tags are the same way. The Tor devs believe that the linkability threat is minimal compared to the potential breakage of turing off memory cache.

2387
@libertarian

-----BEGIN PGP MESSAGE-----

hQIMA8ab7T6NkEElAQ/+I/uVQPijdNbUe2jGiqjjS4kTPf+FrWkOZA3rL0V4oLxa
H5bIGgzQSEedtft/OxXwhazGPYGtUFXoQT1mX5vg8GZjN3IX9QqfMDPbXHQuvmfb
ccNG9obo4Vq8sk0osSxVhMRbbJxek26G57hCIB/8iEPznZ0BnyFilYEs2Mw9CqQp
ecVyKB5xJ0CqdqAPk63fPZNwUv6/3oj8I/XHAKdBShIJVSvCPnRMlIjJZ1nxKasy
LcXCjpXfwqBmpB8mht8W/vqP64uXZVTVcHeJ5KHezHI6OprufIqSUVg6VfKcRfHm
NZdHoRpLnJyNYuoD3SK7NA7TpagmURwF6ufL7jl0aMWMVQIFqFH3iTsvm+TF11jF
PTKU5mnqxiEZEBANdduG9hK6589zC7H1g0vbGkT3ua0MC+ZjEZRL0n2vUJgWA4Lm
19fTDW8ijndC6io7kfPRjX7qskydkbRhtU8Mtz0AqrdRh77YegDSvhbkwjZp3Ua5
UFhuIOfqz7PXEZKchYu0F/hLtcGy7xaizn6Gbwdw8XDSsL2nBLs5DHrG7oM1xJM3
9epji6PL5N6pQ87XRKkhYR4at15aGX7EuIp9BHSTbjfmJggR51vO29T823QYjNmB
q2Com9PfgEZszvwMd3vYWgCcwy/IrWVlolZwqKxEMi+4klD8HWYzoQFNUwUfDz6F
AgwD/6flA8ySWtcBD/4wlTNOa6XY8RJ3RBcOziFgSsBLP/tgPLHeJa8uyMjV2ON5
m6MAbu+6mIgoEL4eVnHin/LnWr//NSX0G9p1kIp8tl+8UYdi2O29EwHZxJma3RBB
s1qmxHMZI4iLqBABiHE+IyhOHNTT8fbWt77N6G13E6+LAyc9PYLUwwM+UFcj6+ji
5S9l44ItO1eRFiKM2YjYCxDOUX6GlebufGun3iOxhAmGvB6FmsAqu5ba35BSOkvr
OKYjVoZjzF+JblKo71UKsponteIdaWdz8ptEFuYblpy5P2jzovioQB0nAsF4s41v
710wyrOUKFu4ZXaCFhJhv8Yg/CQ5CFLooHqJdlR/N2S0IpI4IUXd6rDAugOdJXpQ
iq+lyDxNzqaG0WmoG9+FEV9uAeb7tL1TLGtQl5KUan2ySznsrbFfi7n0SKvP/2cg
10Qm2NJLD7JgaITJq6JP0YGKDVlUUp2zFQnLBsmiRp/HYGEiDoZCDq7jC/wTGHEv
wJfs7xCgCEGin1utFh5xfih3jnKtnHpfC3bBEM0p1PJNS6izEQOqNALSwXMlvxLv
7fNkfCUi35lM5j8T4Sjiuv7R8z73f0423ucOHkhgl+7xO1GBhNwyj5ysu9Qp+sjv
OiDOsP0r46lpk5t+7zaIzBXjdK97umTNzqHBfcofMP+/YB4+6zRVRS1IuYk55dLA
9gGnpzPL5Rb896yoDD0dKSOgeSV3vjGMtCbiSxgplwXdfGPb1lD6Dv6qWLm/Czu8
nuFrHuHBszveIjCp/z6J4+3JKY8CtRtRUnvsL0YY33TSwExljPhhpm7uDFrjm8EX
ah90Weq3oqvkQ1EeaJB4Zxw6bTJsZ7ZCypW5Tb6ruMAAlIHZdDe7022Zwds8M7bU
qWw5KOkVU9R9UvDYrF5U9Tdp0LPEhTdKRgKYBy1FjBkUS52UUTJO+YLrK1zJLn05
2cbICh6wHIIndkHlTd8UYqicmJGjNQ5R+0oWE6S6dMH7eTmzTXY+ztdoQWlYIloV
m9cTbCUBYHkYPSsAM8VPmewve9PxaqN6IqR/eWywi+hR4kf5H1HXCV48GvdeJZgL
rizuUCURQgyhFDphwP2f0N5dOCGzMLLQDNsXKfRscfkW7Zq64UB/DyB26NpfmJMt
pOFS4T3XroGS+huu73ayDOBC6a7mVXddpTIK2wzAL/K4+osuI03xKjzjbr4yagW6
s0lmppi4SOMdlpTI8Hjn16Mp3YiQuhwP/hxr+dDDSPfLVgSwOzNlHK5KjsZ4s9uZ
kUO8jldvhw==
=ao4r
-----END PGP MESSAGE-----

2388
When an account gets deleted, do their PMs to other people get deleted too? Maybe the spammer PM spammed you and then his account was deleted.

2389
LOL, I'll put another notch on my head board.  :)

2390
Are you on Windows? Try this

http://32yehzkk7jflf6r2.onion/gpg4usb/

2391
^^ This. Or Facebook, or any web site that you previously logged into over clearnet.

2392
Off topic / Re: + KARMA
« on: January 10, 2013, 02:08 am »
+1
NOTspacecase
anonman88
Ballzinator
seshat
Wadozo
PrincessHIGH
InternetDealer
nitpi950
Scampony
typtap
thecrackhead
CrazyBart
betaraybob
iceman8989

2393
You can disable memory cache, but I strongly recommend against it. It can severely impact your browsing.

The only thing e-tags can do is link you between sites or exit nodes. They can't identify you (unless you're using your real identity over Tor on one of those sites, which is stupid).

However, if you still want to do it, type about:config in the URL bar and click through the warning.

type in: browser.cache.memory.enable

and double click it so it says false.

2394
Silk Road discussion / Re: Other .onion sites?
« on: January 09, 2013, 09:59 pm »
Since you already have tor installed you need only add a line to your config file to create a hidden service domain and point it to a local port.

It's even easier than that with the browser bundle. Go to onion icon -> Settings -> Services -> and enter the target (localhost) and port info. Voila, you have a hidden service right on your desktop (you'll have to install a web server or whatever, though).

The hard part is making sure your application will not reveal information about your location.

Right. Maximum security looks something like this:

http://dkn255hz262ypmii.onion/index.php?topic=100998.msg705761#msg705761

2395
Security / Re: what if LE took over tor?
« on: January 09, 2013, 09:03 pm »
Tor is actually partially funded by the military, and the lead developer has frequent contact with the FBI.  Some of them use it too, apparently.

While it started out as a project of the Naval Research Laboratory, which is a military research facility, today it is funded by more mundane government agencies like the National Science Foundation and the Broadcasting Board of Governors.

All their finances are open.

https://www.torproject.org/about/sponsors.html.en

https://www.torproject.org/about/financials.html.en

2396
Silk Road discussion / Re: SR Commission
« on: January 09, 2013, 08:33 pm »
Great information as when I have to cancel larger orders (most recently because a buyer put his name down a Sylvester Stallone) and after I cancelled his order he was dismayed with me saying I pocketed the some money from him. I explained this situation but the buyer didn't want to hear it.

If you want to inform buyers how much they are losing due to SR commission, then you actually want to get that from the total product price. That's what the buyers see. The original graphs were based on the initial price. I have updated them so you can look it up either way. It's not much different. In my original example, the total price is $216.50, which has a commission of $16.50, while a total price of $200 has a commission closer to $15.50.

But hey I'm pedantic. :)

2397
Silk Road discussion / Re: SR Commission
« on: January 09, 2013, 05:14 pm »
@Tessellated

The commission is

$0 - 50         ->  10%
$50 - 150     ->  8.5%
$150 - 300   -> 6%
$300 - 500   -> 3%
$500 - 1000 -> 2%
$1000+       -> 1.5%

BTW, I put bigger, more detailed graphs up. If you click on the graphs you get the bigger ones. :)


2398
Silk Road discussion / Re: America, we're sorry!
« on: January 09, 2013, 04:01 pm »
something does need to be done about gun laws over there (I still think they should have weapons but there should be limits to what guns and ammo you can actually have)

I like the Chris Rock solution to gun violence.

"I think all bullets should cost five thousand dollars… five thousand dollars per bullet… You know why? Cause if a bullet cost five thousand dollars there would be no more innocent bystanders. Yeah! Every time somebody get shot we'd say, 'Damn, he must have done something ... Shit, he's got fifty thousand dollars worth of bullets in his ass.' And people would think before they killed somebody if a bullet cost five thousand dollars. 'Man I would blow your fucking head off…if I could afford it.' 'I'm gonna get me another job, I'm going to start saving some money, and you're a dead man. You better hope I can't get no bullets on layaway.'"

2399
Security / Re: what if LE took over tor?
« on: January 09, 2013, 02:24 pm »
Right, and that's where option 2 comes in. You can download the source code, read it yourself or get a competent, trusted friend to read it, confirm that it isn't doing anything malicious, compile and run it.

2400
Silk Road discussion / SR Commission
« on: January 09, 2013, 07:42 am »
I noticed that people ask about the SR commission a few times a week, so I made these handy graphs

http://32yehzkk7jflf6r2.onion/srcom/

The first graph is the total SR commission in dollars and the second one is the SR commission as a percent of the product price.

Here's how it works. Let's say the product costs $200. You find 200 on the x-axis and move in a straight line up until you reach the blue line, then move in a straight line left until you reach the y-axis (I drew some grid lines to help you along). You'll intersect somewhere between $16 and $17. If you do the actual math, it's $16.50, but this gives you a good estimate, no calculator required.

The grid lines are every $50 on the x-axes, and $2 or 0.5% on the y-axes.

Pages: 1 ... 158 159 [160] 161 162 ... 208