[tor-talk] FBI cracked Tor security

[Mirimir]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/17/2016 09:58 AM, Jonathan Wilkes wrote:
>> OK, they're naive and trusting. For which "sheep" is common
>> metaphor.
> 
> Meaning that, for TBB, they're going to click the big "Download"
> button that probably is automatically linked to the binary for the
> OS detected by js on the Tor download page. So:1. Click the big
> "Download" button to download a 47.3 megabyte file 2. Click the
> icon to Install3. Run TBB
> 
>> Running VirtualBox and Whonix is hardly "vastly more complex".
> So:1. Click the big "Download" button on Whonix' frontpage.2. Click
> "Download" or "Virtualbox" in the row marked for Windows3. Download
> a 1.7 gigabyte file4. Download a 2.0 gigabyte file5. Realize that
> they don't have virtual box installed.6. Download 115 megabyte
> virtualbox installer for Windows.7. Install Virtualbox8. Run
> Virtualbox9. Navigate to the Whonix page that tells you what to do
> with the two big files they downloaded earlier10. Start
> virtualbox11. Import appliance12. Navigate and select Whonix
> Gateway image13. Click import, then Agree, then wait...14. Import
> applicance again 15. Select Whonix Workstation16. Start Whonix
> Gateway and Whonix Workstation17. Wait while the startup scripts
> initialize everything, then open the browser in the workstation. 
> That's two orders of magnitude more data to download, a virtual 
> machine running two OSes, and three more windows open on the
> desktop (counting TBB window itself which is nested in the
> workstation window). -Jonathan

Well, pick one of those dudes in jail, and ask whether he would have
appreciated the pointer to Whonix ;)

> On Saturday, July 16, 2016 11:11 PM, Mirimir <mirimir at riseup.net>
> wrote:
> 
> 
> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
> 
> On 07/16/2016 08:21 PM, Jonathan Wilkes wrote:
>>> I'm hardly asking for perfection. Just a little heads up for
>>> the sheep.
>> You're unwilling to even describe non-technical users as human 
>> beings, yet you want Tor to suggest a vastly more complex 
>> alternative for them?
> 
> OK, they're naive and trusting. For which "sheep" is common
> metaphor.
> 
> Running VirtualBox and Whonix is hardly "vastly more complex".
> 
> -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux)
> 
> iQEcBAEBAgAGBQJXivdtAAoJEGINZVEXwuQ+lRUH/R/sHjOUZWZ6hcA92K8G+1A9 
> vU5xmgFaOQUczERi1NCnBWdD57EMS+ci0VTYwRsORq+R/iLROfI7GkqDLIJAjBCE 
> BEcb4wmg6CyKeqQj52EVtTURJJfrcnwW8CS7tiuqwnE1xP9olB2DlqMdOhCWdH3W 
> yP9KwDe6MprRPTuqJywRiwfSPEKcD4p/n3k/stcWa73lrVHdYSKOfwT/PropD9ED 
> myQaxrRBBuRvmNWlAH+XhsQkFRxCTagc+F1DDJPaqRPGlAYFd5qMZIZ6g+XbXjO5 
> mkUUqC6kzM+/CKwsTj3msL6IH90kWqXnKocypVChOS78NB1JkF44VXMKpjrtguc= 
> =ArE5 -----END PGP SIGNATURE-----
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJXi8GrAAoJEGINZVEXwuQ+7SQH/A4hLbDGNiyNMWc50ELd+7Gy
5u6AUt0K/A45wNPXgnjYh8t+n9yPm0Yo2zzUo7fOCHO/Wy3xrF3sBOg+IHrU7NUk
qZlkHTCUTD1x7Wx+dfqZVcN8JFeByqCvKjpMUa/nPcRgvymw9T5vKTVfqv0JGQa7
/hiWoBMBxkAjExMq4ySaxyGZGPR3qMV/6F6h5XhNT1N1kUINR0zDhmHZ7tZppJPA
UQ1tIXC7EwYU4YOxYqTDvfxDf2AfftDpjDoQBJ0t06VBL54bzdwcY9ImRXrpFYR7
1qNfD3LvrF6RLUtCqnZwYyEqaZVFJ8+gGW3DY2fXTPnNCFldypIfRlxqugNH5a4=
=2egF
-----END PGP SIGNATURE-----