Warnings on the download page (was: yet another tor attack)

[Roger Dingledine]

On Wed, Mar 07, 2007 at 02:14:33PM -0600, Mike Perry wrote:
> The Tor download page should have a concice "Things to know before
> downloading" section that lists a few key points about the most easy
> ways your identity can be revealed through Tor. Something like

Mike and I just whipped up an early version of this here:

http://tor.eff.org/download.html.en#Warning

(Thanks Mike!)

Let us know if you have any fixes or more issues to list. Eventually
this should get its own page, with more details, etc, and then we can
put just a concise summary (ha ha) on the download page. There are so
many permutations of applications out there...it's depressing sometimes
how hard it is to secure the whole Internet.

Also, somebody should write up a page with recommendations for
configurations/etc of common applications that work well with Tor, for
tasks other than web browsing -- Gaim comes to mind first for AIM + IRC,
and we can recommend OTR at the same time. What else is a very common
task by Tor users who need basic documentation? We probably shouldn't
try to document Torifying mail delivery at this point (other than "use
web mail") or Skype ("don't bother, stick with web browsing").

This document could be based on
http://wiki.noreply.org/noreply/TheOnionRouter/TorifyHOWTO but needs to
be simpler and more right. I'm guessing the somebody will end up being
me, but if you send me drafts/notes/etc it'll happen faster. :)

Whee,
--Roger