November 2016 - tor-onions - lists.torproject.org

Tor Services not working with higher number ports
by J. S. Evans 23 Nov '16

23 Nov '16

Previously, I had set my my ssh port to 12222 instead of port 22 so that it would be a little harder to find and that worked OK. This week I started adding this port to my onion service so that I could log into ssh via tor and I continuously received this kind of error: Ncat: Error: Connection refused. ssh_exchange_identification: Connection closed by remote host I worked on this for two days and this morning I decided to change sshd back to the standard port 22 and updated torrc accordingly and voilà it works. My question is, is this a bug or a known limitation of the tor software? Best Regards, Jason

2 1

(no subject)
by Brandykins 19 Nov '16

19 Nov '16

Sent on the go with Vodafone

1 0

Limits on Next-Gen Hidden Services
by teor 19 Nov '16

19 Nov '16

Hi, asn has done some great design work on next-generation hidden services, and has arrived at some size limits: "- I feel that the max settings imposed by the 50k max size limit, will satisfy most crazy hidden service use cases that someone might have wrt scalability or number of authed clients. It can support up to 350 authed clients, and 20 intro points. We should increase the max size limit, if we want to support more advanced use cases. - I also feel the configurations that fit in the default descriptor (of 10k bytes blob) will probably satisfy most hidden service use cases out there as it can support up to 80 authed clients, and up to 11 intro points. The anonymity set of those hidden services descriptors will be good wrt snooping HSDirs - Giant hidden service descriptors will stand out and their anonymity set will likely be small. I think such giant hidden services should perhaps split their info to multiple descriptors using some sort of stealth-auth mechanism (where they give different onion address to different clients). Alternatively, we should change our padding rules, or always pad to max descriptor size." asn has also made the maximum size a consensus parameter, so it can be changed if needed. Please reply to asn's tor-dev email: https://lists.torproject.org/pipermail/tor-dev/2016-November/011658.html T -- Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B ricochet:ekmygaiu4rzgsk6n xmpp: teor at torproject dot org ------------------------------------------------------------------------

1 0

Testing 0.2.9 (and Single Onion Services)
by teor 10 Nov '16

10 Nov '16

Hi, We recently put out a call for testing Tor 0.2.9, which includes the Single Onion Service feature. https://lists.torproject.org/pipermail/tor-dev/2016-October/011541.html To use this feature, put the following lines in your torrc: HiddenServiceSingleHopMode 1 HiddenServiceNonAnonymousMode 1 Tim T -- Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B ricochet:ekmygaiu4rzgsk6n xmpp: teor at torproject dot org ------------------------------------------------------------------------------

3 2

Research - Tor and the shaping of resistance technologies
by COLLIER Ben 09 Nov '16

09 Nov '16

Hello all, Greetings from (currently freezing cold) Scotland and apologies for the cross-posting. I'm a researcher at the University of Edinburgh studying antisurveillance technologies, software development and how these are shaped at different levels by ideas about crime and surveillance. I'd describe my work as criminological but with a strong critical dimension - my research isn't about "fighting crime" or developing cybersecurity policy. I'm interested instead in exploring the power relationships, social and technological factors which determine how actions and communities are labelled criminal, and include harms caused by states and other powerful actors which may not traditionally be considered as "crimes". >From this perspective, I would like to explore how the values and perspectives of people who develop software to resist surveillance and promote anonymity online shape the technologies they work on, and whether this expertise changes how they see these issues. I have a background in (statistical) programming and I'm particularly interested in finding out how people see these issues playing out in practice in their work. While I'd like to carry out more in-depth research in the new year, at this stage I'm interested in making sure I'm asking the right questions. As such, I'd be very grateful if anyone involved in Tor development, either as a core developer or as a volunteer, would be interested in having a chat, or if possible a short interview. Any discussions would be anonymous and carried out in accordance with the ethics policy of the University of Edinburgh, and you would be able to withdraw consent for participation at any time for any reason - or none at all. I'll be contactable at this email address (listed in my signature) and on the IRC channels as JHistone - if you're interested (or just want to say hi or have a chat) please feel free to get in touch. Best wishes, Ben Collier Doctoral Researcher The University of Edinburgh SCCJR profile: http://www.sccjr.ac.uk/about-us/people/ben-collier/ Edinburgh University profile: http://www.law.ed.ac.uk/research/students/viewstudent?ref=339 Twitter: @JohnnyHistone Email: s1263350(a)sms.ed.ac.uk The University of Edinburgh is a charitable body, registered in Scotland, with registration number SC005336.

1 0