[tor-talk] Not comfortable with the new single-hop system merged into Tor

[Ben Tasker]

> Which is exactly why you should have this feature as it is. You say its
insulting to users, we say the actual reality of the situation is that
people use TOR who arent computer experts and sane defaults are a needed
thing, to help keep people safe.

You mean the default where it's off, and you need to deliberately set TWO
different config variables in order to enable it? How is that not a sane
default position?

> This is just begging for sites to be even more insecure than they are
already.

You mean if they deliberately enable settings that are clearly labelled as
reducing the anonymity of the hidden service?

> This is the most people unaware, human behavior unaware feature to come
out of programming since they made logging default on for OTR+Pidgin.

Except this isn't defaulted to on, and you'd have to screw up pretty
heavily to turn it on by accident.

Personally, I don't see an issue here that hasn't been addressed by devs
earlier in the thread



On Thu, Dec 22, 2016 at 11:21 AM, laurelai bailey <laurelaistorm at gmail.com>
wrote:

> This is the most people unaware, human behavior unaware feature to come out
> of programming since they made logging default on for OTR+Pidgin. This is
> just begging for sites to be even more insecure than they are already.
>
> >People do stupid stuff.
>
> Which is exactly why you should have this feature as it is. You say its
> insulting to users, we say the actual reality of the situation is that
> people use TOR who arent computer experts and sane defaults are a needed
> thing, to help keep people safe. Dissidents and vulnerable people use this
> service, you cant expect them all to be experts and you cant treat them
> like they are, because they arent.
>
> This is pants on head stupid. Fix it.
>
> On Wed, Dec 21, 2016 at 9:33 AM, Alec Muffett <alec.muffett at gmail.com>
> wrote:
>
> > On 21 December 2016 at 14:01, Allen <allenpmd at gmail.com> wrote:
> >
> > > Alex,
> >
> >
> > Typo.
> >
> >
> > > that is inappropriate language and behavior for a public
> > > discussion list.  You have demeaned yourself greatly with that
> > > outburst, and only succeeding in damaging the Tor project.  Please
> > > stop.
> > >
> >
> > For clarity, I'm not a member of the Tor project.  I am independent,
> > freelance, and I am very good at what I do.
> >
> > And I do own my words, but for the sake of this posting I'll try to be
> > "polite". In future you might want to block me, just in case.
> >
> > To reiterate my position, in case you missed it:
> >
> > Thesis: we should not treat users as stupid.
> >
> > Second, as someone who firmly believes in Murphy's Law, I share the
> > > concerns that have been expressed.  The only solution to address these
> > > concerns if to discuss the steps that have or will be taken to ensure
> > > the situation cannot happen, not to attack the concerns themselves or
> > > the intelligence of the people who hold them.
> > >
> >
> > So, that means you are happy to implicitly denigrate the intelligence of
> > people who run onion sites, yet not happy to have that perspective itself
> > called prejudicial, stupid and daft?
> >
> > As I say above: I feel we should work from the assumption that people are
> > smart until proven otherwise, and that includes those who set up onion
> > sites.
> >
> > If it proves to be a problem, later, then fix it, later.
> >
> >    -a
> >
> >
> > --
> > http://dropsafe.crypticide.com/aboutalecm
> > --
> > tor-talk mailing list - tor-talk at lists.torproject.org
> > To unsubscribe or change other settings go to
> > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
> >
> --
> tor-talk mailing list - tor-talk at lists.torproject.org
> To unsubscribe or change other settings go to
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
>



-- 
Ben Tasker
https://www.bentasker.co.uk