[liberationtech] Jacob Appelbaum's Ultrasurf Report

[StealthMonger]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jacob Appelbaum <jacob at appelbaum.net> writes:

> On 04/24/2012 12:19 PM, Meredith L. Patterson wrote:

>> http://freehaven.net/doc/batching-taxonomy/taxonomy.pdf

> http://freehaven.net/anonbib/

Excellent, a propos references.  Thank you both.  I shall be reading.

Earlier, Jacob Appelbaum <jacob at appelbaum.net> wrote:

> Oh - sure - if you want to rope in mixmaster/mixminion networks, I
> believe that those are also suitable for certain activities.  I do
> not however view those are competitors, one of the creators of Tor
> is the main mixminion person and I think he basically hacked a ton
> on mixmaster.

That doesn't alter the fact that Tor's anonymity is broken.

If the channel has low latency, no hacking can conceal the packet
timing and volume correlation at the endpoints.  It is high random
latency and thorough mixing that gain mixmaster its anonymity.
Dingledine and company would agree.

> In any case, is it possible to use anonget with a lot of modern
> websites in any practical manner where users won't just walk away?

It depends on details of the website.  I have successfully dealt with
some sites that were obviously designed for interactive use only, by
capturing a browser's GET or POST request, reshaping it into a proper
URL, and requesting that URL by mail.

> I like the idea to be certain but only for a limited set of tasks.

True, sadly.  For the others, strong anonymity may be difficult.

A constructive attitude to take is to encourage such sites to offer
email access as well as web, as for example a subscription to this
mailing list can be initiated and controlled entirely by email, thanks
to mailman.


- -- 


 -- StealthMonger <StealthMonger at nym.mixmin.net>
    Long, random latency is part of the price of Internet anonymity.

   anonget: Is this anonymous browsing, or what?
   http://groups.google.ws/group/alt.privacy.anon-server/msg/073f34abb668df33?dmode=source&output=gplain

   stealthmail: Hide whether you're doing email, or when, or with whom.
   mailto:stealthsuite at nym.mixmin.net?subject=send%20index.html


Key: mailto:stealthsuite at nym.mixmin.net?subject=send%20stealthmonger-key

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Processed by Mailcrypt 3.5.9 <http://mailcrypt.sourceforge.net/>

iEYEARECAAYFAk+X8AAACgkQDkU5rhlDCl7d9wCeK1+0dgBWIORgyJYlsQAqDf0f
cCYAoLVmRuoUXybNy/1hXNIx0SuKjrmh
=iP3T
-----END PGP SIGNATURE-----