TOR in Java? [signed]

[loki tiwaz]

yes: don't use java

>Can you solve the java DNS leak problem?
>
>loki tiwaz wrote:
>
>>is it not implicit that a third party tor proxy service, that is not being 
>>run by YOU, is gonna be implicitly insecure? If you can't run tor off a 
>>cd/usb key, don't use the access point.
>>
>>>Dudes. For the 80,000th time.... Using Java is a bad idea for security 
>>>reasons. Granted, an application-level implementation isn't as bad as 
>>>using web-based applets, but still.
>>>~ADB
>>>
>>>Christian Beil wrote:
>>>
>>>>Hi Lexi,
>>>>which crypto library do you use. We were thinking about doing a Tor port 
>>>>to Java using the cryptlib library.
>>>>Is your code accessible?
>>>>
>>>>Lexi Pimenidis schrieb:
>>>>
>>>>>On Thu, Oct 06, 2005 at 08:51:09PM CEST, Nick Mathewson wrote:
>>>>>
>>>>>Hi,
>>>>>
>>>>>
>>>>>
>>>>>>need more implementations for the Tor protocol, and Java is a popular
>>>>>>choice these days.  You might want to start with the code from the
>>>>>>Java Anon Proxy people; I don't know their current status here, but
>>>>>>for a while, they had a working Tor *client* written in Java.
>>>>>>
>>>>>
>>>>>
>>>>>our group is currently developing a Java-Client for the Tor-protocol in
>>>>>Java. It's in a pre-alpha version, but we can connect and transmit 
>>>>>data.
>>>>>We expect to have something stable by the end of the year (and yes...
>>>>>we're doing it in our spare time).  We also took a look at the
>>>>>JAP-Tor-Code and decided to write a new one from scratch.
>>>>>
>>>>>Taking the code, it would be possible to e.g. compile tor into a
>>>>>java-application.
>>>>>
>>>>>Comments are welcome, of course :)
>>>>>
>>>>>     Lexi
>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>>
>>>>
>>>
>>>
>>>--
>>>The domain Phoenixoflight.org is for sale! 
>>><http://www.sedo.com/search/details.php4?tracked=&partnerid=19673&language=us&domain=PHOENIXOFLIGHT.ORG>
>>>
>>>
>>>
>>>
>>>
>>>--
>>>
>>>------------------------ [ SECURITY NOTICE ]
>>>------------------------
>>>
>>>To: or-talk at freehaven.net.
>>>
>>>For your security, firefox-gen at walala.org
>>>
>>>digitally signed this message on 22 October 2005 at 01:25:57 UTC.
>>>
>>>Verify this digital signature at http://www.ciphire.com/verify.
>>>
>>>------------------- [ CIPHIRE DIGITAL SIGNATURE ]
>>>-------------------
>>>
>>>Q2lwaGlyZSBTaWcuAjhvci10YWxrQGZyZWVoYXZlbi5uZXQAZmlyZWZveC1nZW5Ad2FsY
>>>WxhLm9yZwBlbWFpbCBib2R5AJUEAAB8AHwAAAABAAAAJZVZQ5UEAABsAgACAAIAAgAgPn
>>>D83eWmGCbOLDlwNW7+dbygr2FGLmvXHgPLFYnm4w8BAHOXCA/fwnUeLVCfzukYakxesIu
>>>YN6YdwUxZqlEUlaavq6EAgiz8osl0iui9hfljZjBTKbnm8nakeIdKLyfskNQTU7pmU2ln
>>>RW5k
>>>--------------------- [ END DIGITAL SIGNATURE ]
>>>---------------------
>>>
>>
>>_________________________________________________________________
>>Express yourself instantly with MSN Messenger! Download today it's FREE! 
>>http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
>>
>>
>>
>>
>
>
>--
>The domain Phoenixoflight.org is for sale! 
><http://www.sedo.com/search/details.php4?tracked=&partnerid=19673&language=us&domain=PHOENIXOFLIGHT.ORG>
>
>
>
>
>--
>
>------------------------ [ SECURITY NOTICE ]
>------------------------
>
>To: or-talk at freehaven.net.
>
>For your security, firefox-gen at walala.org
>
>digitally signed this message on 22 October 2005 at 08:56:09 UTC.
>
>Verify this digital signature at http://www.ciphire.com/verify.
>
>------------------- [ CIPHIRE DIGITAL SIGNATURE ]
>-------------------
>
>Q2lwaGlyZSBTaWcuAjhvci10YWxrQGZyZWVoYXZlbi5uZXQAZmlyZWZveC1nZW5Ad2FsY
>WxhLm9yZwBlbWFpbCBib2R5AOUJAAB8AHwAAAABAAAAqf5ZQ+UJAACuAwACAAIAAgAgPn
>D83eWmGCbOLDlwNW7+dbygr2FGLmvXHgPLFYnm4w8BAHOXCA/fwnUeLVCfzukYakxesIu
>YN6YdwUxZqlEUlaavVUqbqZ1m2woYykUL4oSx4OzL3OuDp66NjhglOcxfqwIsfldCU2ln
>RW5k
>--------------------- [ END DIGITAL SIGNATURE ]
>---------------------
>

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/