topic title: PRISM vs Tor
Posts: 1,308
BitJam
Joined: 31 Aug 2009
#1

========= SCRAPER REMOVED AN EMBEDDED LINK HERE ===========
url was:"https://blog.torproject.org/blog/prism-vs-tor"
linktext was:"PRISM vs Tor"
====================================
:
For now, let's review what Tor can do, what tools go well with Tor to give you defense-in-depth for your communications, and what work needs to be done so we can make it easier to protect communications from instances where the existing centralized communications infrastructure is compromised by the NSA, China, Iran, or by anyone else who manages to get ahold of the keys to the kingdom.

The core Tor software's job is to conceal your identity from your recipient, and to conceal your recipient and your content from observers on your end. By itself, Tor does not protect the actual communications content once it leaves the Tor network. This can make it useful against some forms of metadata analysis, but this also means Tor is best used in combination with other tools.
Is it time for a Tor-enabled version of antiX? Imagine a swarm of encrypted Tor nodes on LiveUSBs. Or imagine an encrypted LiveUSB that has Tor and related goodies set up and ready to be used.
Posts: 1,308
BitJam
Joined: 31 Aug 2009
#2

========= SCRAPER REMOVED AN EMBEDDED LINK HERE ===========
url was:"http://learn.adafruit.com/onion-pi?view=all"
linktext was:"Onion Pie Tor Proxy"
====================================
:
Feel like someone is snooping on you? Browse anonymously anywhere you go with the Onion Pi Tor proxy. This is fun weekend project that uses a Raspberry Pi, a USB WiFi adapter and Ethernet cable to create a small, low-power and portable privacy Pi.

What is Tor?

Tor is an onion routing service - every internet packet goes through 3 layers of relays before going to your destination. This makes it much harder for the server you are accessing (or anyone snooping on your Internet use) to figure out who you are and where you are coming from. It is an excellent way to allow people who are blocked from accessing websites to get around those restritions.
nadir
Posts 0
nadir
#3
To me it is astonishing how few distros come with tor. Well: i don't check that much distros anymore ... but i think this is still valid.

I think tor shall be integrated into the freedombox.

i2p is another interesting option, but it is focused at other goals (i2p is a net on it's own, not a way to browse the usual or public WWW anonymously, though you can do that too). I don't know all tor options well (especially not torchat and onion-land). But i2p comes with torrents, email, web-server (jetty), chat-client (i didn't try it, ain't got much to say), IRC ... etc.


In general the subject (security) is above me. If i think or read about it too long i get headaches, and know as little as i knew before.
I always use tor anyway. For WWW. For a while i send all cli operations over tor too. I forgot why i gave up on that.
(and that is where the headaches start: I think about DNS leaks ... and get from nowhere to nowhere).
Posts: 1,308
BitJam
Joined: 31 Aug 2009
#4
There are lots of good resources here:
========= SCRAPER REMOVED AN EMBEDDED LINK HERE ===========
url was:"http://prism-break.org/"
linktext was:"PRISM Break"
====================================


I've been playing around with the Tails distro to see if I can get our LiveUSB stuff to work with it.
nadir
Posts 0
nadir
#5
I don't know the liveUSB stuff, but i can't imagine what might cause problems.
install privoxy or polipo and tor, configure the browser to use it.
btw: there is a package in the debian repos called: freedombox-privoxy (from what i understand it integrates addblock with privoxy, but i am not sure)
torbutton is giving me hard times (after some upgrades), so i gave up on it.
the tor site recommends to use the browser-bundle, though (i would, but i use both, i2p and tor, and don't want to switch browsers or settings all the time, hence privoxy for me).

tails comes with i2p, last time i looked at it (i found it good, but it didn't come with the apps i use).
Did you check i2p? If yes, what do you think?
If you got problems to find good sites,i got pages which contain lists of links.
I think tails also contained some gui tools for encryption ( a notepad and a frontend for encfs->cryptkeeper ? ).

ah, yes, the prism break site looks good. thanks.
I know a few of those tools. retroshare is interesting, especially for a community (you can do instant messaging, set up something similar to a forum, something like news-read and share/exchange data/music/etc). bad news: qt. more bad news: it is nothing without a community, and really nothing. You do need friends.

To make a long story short:
I like the idea a lot, and would test anything, in case that is needed.
nadir
Posts 0
nadir
#6
Another idea might be to include security related plugins. I am not sure what antiX offers per default. I use https-everywhere, cookie-monster, ghostery, adblock and noscript.
Like in: once you are at it.
Alanarchy
Posts 0
Alanarchy
#7
Some guy has made a new Firefox-plugin called"Dark Side of the Prism" which plays a Pink Floyd track from"Dark Side of the Moon" everytime you get tracked by the NSA.


========= SCRAPER REMOVED AN EMBEDDED LINK HERE ===========
url was:"http://projects.justinblinder.com/Dark-side-of-the-Prism"
linktext was:"http://projects.justinblinder.com/Dark- ... -the-Prism"
====================================
Posts: 137
duncan_mk
Joined: 19 Sep 2012
#8
I use StartPage (
========= SCRAPER REMOVED AN EMBEDDED LINK HERE ===========
url was:"https://startpage.com"
linktext was:"https://startpage.com"
====================================
) as a search engine. They use Google but pass your query through a proxy. Once you've made your selection, of course, you become visible but they offer an"View by Ixquick Proxy" option - doesn't work for everything, can't log-on here by proxy for instance - but it helps. I alo have the EFF's"HTTPS Everywhere" utility which seems pretty good (thanks Eino for putting me onto the EFF).

It's hardly high security I suppose but it's very easy.

dmk
nadir
Posts 0
nadir
#9
first draw or (very) raw notes about iceweasel security settings:

========= SCRAPER REMOVED AN EMBEDDED LINK HERE ===========
url was:"http://www.debianuserforums.org/viewtopic.php?f=62&t=2434"
linktext was:"http://www.debianuserforums.org/viewtop ... 3baeb06ae4"
====================================

partly inspired by prism (the thread itself, not the subject. I am interested for long, but it is still above me. I was and am hoping for more additions by others).