[tor-talk] Tor 0.2.7.6 is released

[Oskar Wendel]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

nusenu <nusenu at openmailbox.org>:

> the changelog says "bugfix on 0.2.4.8-alpha" which means all tor
> releases since 0.2.4.8-alpha  and released before 2015-12-10 are affected.

Thanks.

I'm just wondering if users that rely on maximum anonymity should switch 
to 0.2.7.6, given it is still an unstable branch.

> but most ordinary users will probably (and should) just use torbrowser
> and the tor version that comes with it (so we might see an update there
> soon?)

I don't want to use torbrowser because of three things.

1. As I understand, torbrowser allows only browsing the web. I use tor 
mainly with protocols different than http.

2. I have a tor node constantly in network, which is better both for the 
network and for me, as I believe that there might be greater risk of 
deanonymization by correlating when the node is up and when my network 
activity takes place.

3. I have tor on one machine and all stuff that uses it on another 
machine. Tor machine obviously has access to the Internet, while this 
"user" machine has access only to the tor machine with a dedicated 
interface. Access to anything other than tor socks port is externally 
blocked. This way, even if some bug in browser (or any other program that 
I use with tor) causes it to leak anything, I can be pretty sure that my 
external IP address will never be exposed. This approach is similar to the 
Tails approach.

> If you want to read more about directory guards (compared to an entry
> guards):

Thanks, I will read it.

- -- 
Oskar Wendel, o.wendel at wp.pl.REMOVE.THIS
Pubkey at https://pgp.mit.edu/pks/lookup?search=0x6690CC52318DB84C
-----BEGIN PGP SIGNATURE-----

iQEcBAEBAgAGBQJWbEQsAAoJEGaQzFIxjbhMm2sIALegnN+NJcC2npCpNOF+QNc9
p2tl2lzWWwHq1YEKfzh6vvLweF75O1b2BCSru7YMjAslO3dVsRuHLXM8pRE/BDFl
kU/KG9YxQUk1L768cWf1lSuT0nG8WeUQQEdq/b8ytBRm57em/kioEMB0tE5O6XfE
FR3WXj9EonlQ0DaK7GfyxNF7DxlVvQdS2qKiFG2N8v2MnASs5keZ1EjFD1HQj2NI
TGFj570t01Dsz9MXp8aYJQoLI5lOeYoom+Gb9xJktiiG2oxH6jjOXlhb4Eqbsytz
B9E90wNGUuALFS1Lwuoz+BKcRVGnB38HuSRTexLCJrM+VAfMcYWWuL4EiiFj4Wg=
=uy1g
-----END PGP SIGNATURE-----