Tor VPN not running Java

Revolt · 21 Feb 2011 at 18:35

I use Tor to hide my IP adress online and when I use normal browsers Java works fine and is fully up to date but when I use Tor it acts like I still haven't downloaded it. What should I do to get the Java running on Tor while still keeping my IP adress private?

Revolt · 21 Feb 2011 at 21:11

tntcoder · 21 Feb 2011 at 21:22

What do you mean by 'Java'?

Is it a Java applet? Java based application?

Basically whatever it is needs support for a socks proxy.

If that's missing you would need to set up something to catch the traffic and route it through the proxy.

Some tips here: https://trac.torproject.org/projects/tor/wiki/TheOnionRouter/TorifyHOWTO

So,

a) don't bump a thread within 2.5 hours of posting
b) provide more info

KIA · 22 Feb 2011 at 18:47

You don't need Tor.

m4rkw7 · 22 Feb 2011 at 22:24

Just a note, I wouldn't use tor to log into anything. A lot of tor exit nodes are sniffed.

tntcoder · 22 Feb 2011 at 22:45

m4rkw7 said:
Just a note, I wouldn't use tor to log into anything. A lot of tor exit nodes are sniffed.

If it's an SSL login/session though you're obviously ok.

m4rkw7 · 22 Feb 2011 at 23:19

You're not OK, SSL traffic can still be sniffed.

tntcoder · 22 Feb 2011 at 23:53

m4rkw7 said:
You're not OK, SSL traffic can still be sniffed.

Yes but it's encrypted so useless to an exit node sniffer. So long as you check for invalid certs it's fine.

m4rkw7 · 23 Feb 2011 at 00:24

It's encrypted, but SSL data can still be sniffed as it's a broken cypher.

zel · 23 Feb 2011 at 00:34

m4rkw7 said:
It's encrypted, but SSL data can still be sniffed as it's a broken cypher.

Evidence?

AFAIK there have been some some published attacks on SSL but they rely on the user not paying attention to browser warnings etc.

tntcoder · 23 Feb 2011 at 00:36

There is no evidence... SSL is strong and RSA/aes are not broken.

Rroff · 23 Feb 2011 at 00:45

I would not be to sure on that... the guy who originally broke the encryption (not Luigi Auriemma) on the quakelive beta data files (pretty simple 1KB XOR) also showed off a proof of concept attack on 2048bit RSA that could brute force something that should take ~16 million years in about 4 days on a pair of 9800GX2 and this was awhile back so theres a good chance hes got a lot further than that.

zel · 23 Feb 2011 at 00:50

Rroff said:
I would not be to sure on that... the guy who originally broke the encryption (not Luigi Auriemma) on the quakelive beta data files (pretty simple 1KB XOR) also showed off a proof of concept attack on 2048bit RSA that could brute force something that should take ~16 million years in about 4 days on a pair of 9800GX2 and this was awhile back so theres a good chance hes got a lot further than that.

Have you got a link for that? Sounds fishy!

Rroff · 23 Feb 2011 at 00:59

zel said:
Have you got a link for that? Sounds fishy!

I think I still have the IRC logs, will have a look later.

tntcoder · 23 Feb 2011 at 00:59

Rroff said:
I would not be to sure on that... the guy who originally broke the encryption (not Luigi Auriemma) on the quakelive beta data files (pretty simple 1KB XOR) also showed off a proof of concept attack on 2048bit RSA that could brute force something that should take ~16 million years in about 4 days on a pair of 9800GX2 and this was awhile back so theres a good chance hes got a lot further than that.

The biggest RSA key ever factored was 768 bits last year on a huge distributed cluster over many months with top notch algorithms, a 1024 bit key would require over 1000x the work involved for a 768bit key.

1024 is still safe for a while yet on super computers yet alone 1 guy with a few graphics cards.

Rroff · 23 Feb 2011 at 01:11

Yeah I'm aware of the logistics of it, not an expert on the subject but the approach he used did not use rainbow tables.