[tor-talk] FBI cracked Tor security

[Jonathan Wilkes]

> OK, they're naive and trusting. For which "sheep" is common metaphor.

Meaning that, for TBB, they're going to click the big "Download" button that 
probably is automatically linked to the binary for the OS detected by js on 
the Tor download page.
So:1. Click the big "Download" button to download a 47.3 megabyte file
2. Click the icon to Install3. Run TBB

> Running VirtualBox and Whonix is hardly "vastly more complex".
So:1. Click the big "Download" button on Whonix' frontpage.2. Click "Download" or "Virtualbox" in the row marked for Windows3. Download a 1.7 gigabyte file4. Download a 2.0 gigabyte file5. Realize that they don't have virtual box installed.6. Download 115 megabyte virtualbox installer for Windows.7. Install Virtualbox8. Run Virtualbox9. Navigate to the Whonix page that tells you what to do with the two big files they downloaded earlier10. Start virtualbox11. Import appliance12. Navigate and select Whonix Gateway image13. Click import, then Agree, then wait...14. Import applicance again
15. Select Whonix Workstation16. Start Whonix Gateway and Whonix Workstation17. Wait while the startup scripts initialize everything, then open the browser in the workstation.
That's two orders of magnitude more data to download, a virtual 
machine running two OSes, and three more windows open on the desktop 
(counting TBB window itself which is nested in the workstation window).
-Jonathan


    On Saturday, July 16, 2016 11:11 PM, Mirimir <mirimir at riseup.net> wrote:
 

 -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/16/2016 08:21 PM, Jonathan Wilkes wrote:
>> I'm hardly asking for perfection. Just a little heads up for the
>> sheep.
> You're unwilling to even describe non-technical users as human
> beings, yet you want Tor to suggest a vastly more complex
> alternative for them?

OK, they're naive and trusting. For which "sheep" is common metaphor.

Running VirtualBox and Whonix is hardly "vastly more complex".

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJXivdtAAoJEGINZVEXwuQ+lRUH/R/sHjOUZWZ6hcA92K8G+1A9
vU5xmgFaOQUczERi1NCnBWdD57EMS+ci0VTYwRsORq+R/iLROfI7GkqDLIJAjBCE
BEcb4wmg6CyKeqQj52EVtTURJJfrcnwW8CS7tiuqwnE1xP9olB2DlqMdOhCWdH3W
yP9KwDe6MprRPTuqJywRiwfSPEKcD4p/n3k/stcWa73lrVHdYSKOfwT/PropD9ED
myQaxrRBBuRvmNWlAH+XhsQkFRxCTagc+F1DDJPaqRPGlAYFd5qMZIZ6g+XbXjO5
mkUUqC6kzM+/CKwsTj3msL6IH90kWqXnKocypVChOS78NB1JkF44VXMKpjrtguc=
=ArE5
-----END PGP SIGNATURE-----
-- 
tor-talk mailing list - tor-talk at lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk