Tor server using Vista?

[vikingserver at gmail.com]

Algenon,

I agree with Steve.

I recommend running tor server on Vista, so that You can report bugs to 
the developers.


About security:

Ringo thinks running Tor on Windows is a security risk because of 
backdoors. But every OS has bugs, including linux, unix, bsd, mac OS. 
And probably almost every program running on any OS isn't programmed in 
an optimal way, and probably a majority contains bugs.
There is no perfect program, and there is no perfect OS. Ask any 
engineer/programmer you know, and he will confirm this.

When running Tor+Vidalia+Privoxy on Vista, the biggest security risk 
will probably be one of these three programs, rather than Vista itself. 
Tor+Vidalia+Privoxy will probably contain bugs that create security 
risks on your computer.
So in my opinion, you should only run a Tor server on a Vista computer 
without important documents.

I wouldn't myself run a Tor server on a computer that I use to access 
banks, or a computer where I store my digital pictures, work/school 
documents, and other important things.
I run my server on a computer only used for unimportant programs that 
don't need a secure environment. If a hacker would format the hard 
drive, or delete files it wouldn't matter much. (I have a backup of 
everything of any importance on my server, but 99% is of low importance.)

Others run a Tor server on a dedicated server. This is of course the 
best solution, but not a very effective use of a computer's resources.
When running a dedicated Tor server you have the possibility to run a 
very secure OS, like a minimalistic ultra secure version of linux or 
bsd. So the only reason to run a dedicated Tor server on Vista is for 
testing purposes.

If you want to run a Tor server on a PC that contain your digital 
pictures and other important things, make backups often.
If you use your computer to access your bank(s) don't run: a Tor server, 
file sharing program, web-server, ftp-server, or other server programs 
that are accessible from the outside.
Those programs are probably a bigger security risk than Windows itself, 
as Microsoft almost weekly update their security problems through 
windows updates.

/Vikingserver


Steve Crook skrev:
> On Fri, Jan 04, 2008 at 07:23:38AM -0500, Ringo Kamens wrote:
>>    This is certainly not adviseable because of the lack of security built
>>    into windows and the possible backdoors.
> 
> Anonymity systems like Tor are designed to be resistant to bad nodes,
> even when the operator of the node is a bad guy.  Working on this
> premise, how can the security weakness of Windows be sufficient
> justification for not running a Tor node on it?  Certainly some degree
> of caution and careful monitoring would be advisable but this holds true
> when opening any public service.
> 
> Running a Tor server on Vista seems like a very good idea, if only to
> provide the developers with feedback on how well it works.
> 
> Steve
>