Petter Reinholdtsen: Always download Debian packages using Tor

diff --git a/blog/draft/2012-06-rfid-pass.txt b/blog/draft/2012-06-rfid-pass.txt index b282eaa554..f180e00923 100644 --- a/blog/draft/2012-06-rfid-pass.txt +++ b/blog/draft/2012-06-rfid-pass.txt @@ -166,3 +166,5 @@ http://www.networkworld.com/article/2215057/wireless/bad-guys-could-read-rfid-pa http://www.theguardian.com/technology/2006/nov/17/news.homeaffairs http://www.icao.int/Security/mrtd/Pages/Document9303.aspx + +http://www.nrk.no/norge/slik-skal-kripos-identifisere-lovbrytere-raskere-1.12724904 diff --git a/blog/index.html b/blog/index.html index bcb4c26d5d..b99402b7aa 100644 --- a/blog/index.html +++ b/blog/index.html @@ -19,6 +19,78 @@ +

Always download Debian packages using Tor - the simple recipe

15th January 2016

During his DebConf15 keynote, Jacob Applebaum +observed +that those listening on the Internet lines would have good reason to +believe a computer have a given security hole if it download a +security fix from a Debian mirror. This is a good reason to always +use encrypted connections to the Debian mirror, to make sure those +listening do not know which IP address to attack. In August, Richard +Hartmann observed that encryption was not enough, when it was possible +to interfere download size to security patches or the fact that +download took place shortly after a security fix was released, and +proposed +to always use Tor to download packages from the Debian mirror. He +was not the first to propose this, as the apt-transport-tor +package by Tim Retout already existed to make it easy to convince apt +to use Tor, but I was not +aware of that package when I read the blog post from Richard.

+ +

Richard discussed the idea with Peter Palfrader, one of the Debian +sysadmins, and he set up a Tor hidden service on one of the central +Debian mirrors using the address vwakviie2ienjx6t.onion, thus making +it possible to download packages directly between two tor nodes, +making sure the network traffic always were encrypted.

+ +

Here is a short recipe for enabling this on your machine, by +installing apt-transport-tor and replacing http and https +urls with tor+http and https, and using the hidden service instead of +the official Debian mirror site. I recommend installing +etckeeper before you start to have a history of the changes +done in /etc/.

+ +

+apt install apt-transport-tor
+sed -i 's% http://ftp.debian.org/%tor+http://vwakviie2ienjx6t.onion/%' /etc/apt/sources.list
+sed -i 's% http% tor+http%' /etc/apt/sources.list
+

+ +

If you have more sources listed in /etc/apt/sources.list.d/, run +the sed commands for these too. The sed command is assuming your are +using the ftp.debian.org Debian mirror. Adjust the command (or just +edit the file manually) to match your mirror.

+ +

This work in Debian Jessie and later. Note that tools like +apt-file only recently started using the apt transport +system, and do not work with these tor+http URLs. For +apt-file you need the version currently in experimental, +which need a recent apt version currently only in unstable. So if you +need a working apt-file, this is not for you.

+ +

Another advantage from this change is that your machine will start +using Tor regularly and at fairly random intervals (every time you +update the package lists or upgrade or install a new package), thus +masking other Tor traffic done from the same machine. Using Tor will +become normal for the machine in question.

+ +

On Freedombox, APT +is set up by default to use apt-transport-tor when Tor is +enabled. It would be great if it was the default on any Debian +system.

+ + + Tags: debian, english, sikkerhet. + + +

Nedlasting fra NRK, som Matroska med undertekster

2nd January 2016

@@ -1045,128 +1117,6 @@ penger, og se om jeg har kapasitet til Ã¥ bidra med mer.

Is Pentagon deciding the Norwegian negotiating position on Internet governance?

3rd November 2015

In Norway, all government offices are required by law to keep a -list of every document or letter arriving and leaving their offices. -Internal notes should also be documented. The document list (called a mail -journal - "postjournal" in Norwegian) is public information and thanks -to the Norwegian Freedom of Information Act (Offentleglova) the mail -journal is available for everyone. Most offices even publish the mail -journal on their web pages, as PDFs or tables in web pages. The state-level offices even have a shared web based search service (called -Offentlig Elektronisk Postjournal - -OEP) to make it possible to search the entries in the list. Not -all journal entries show up on OEP, and the search service is hard to -use, but OEP does make it easier to find at least some interesting -journal entries .

- -

In 2012 I came across a document in the mail journal for the -Norwegian Ministry of Transport and Communications on OEP that -piqued my interest. The title of the document was -"Internet -Governance and how it affects national security" (Norwegian: -"Internet Governance og pÃ¥virkning pÃ¥ nasjonal sikkerhet"). The -document date was 2012-05-22, and it was said to be sent from the -"Permanent Mission of Norway to the United Nations". I asked for a -copy, but my request was rejected with a reference to a legal clause said to authorize them to reject it -(offentleglova Â§ 20, -letter c) and an explanation that the document was exempt because -of foreign policy interests as it contained information related to the -Norwegian negotiating position, negotiating strategies or similar. I -was told the information in the document related to the ongoing -negotiation in the International Telecommunications Union (ITU). The -explanation made sense to me in early January 2013, as a ITU -conference in Dubay discussing Internet Governance -(World -Conference on International Telecommunications - WCIT-12) had just -ended, -reportedly -in chaos when USA walked out of the negotiations and 25 countries -including Norway refused to sign the new treaty. It seemed -reasonable to believe talks were still going on a few weeks later. -Norway was represented at the ITU meeting by two authorities, the -Norwegian Communications Authority -and the Ministry of -Transport and Communications. This might be the reason the letter -was sent to the ministry. As I was unable to find the document in the -mail journal of any Norwegian UN mission, I asked the ministry who had -sent the document to the ministry, and was told that it was the Deputy -Permanent Representative with the Permanent Mission of Norway in -Geneva.

- -

Three years later, I was still curious about the content of that -document, and again asked for a copy, believing the negotiation was -over now. This time -I -asked both the Ministry of Transport and Communications as the -receiver and -asked -the Permanent Mission of Norway in Geneva as the sender for a -copy, to see if they both agreed that it should be withheld from the -public. The ministry upheld its rejection quoting the same law -reference as before, while the permanent mission rejected it quoting a -different clause -(offentleglova Â§ 20 -letter b), claiming that they were required to keep the -content of the document from the public because it contained -information given to Norway with the expressed or implied expectation -that the information should not be made public. I asked the permanent -mission for an explanation, and was told that the document contained -an account from a meeting held in the Pentagon for a limited group of NATO -nations where the organiser of the meeting did not intend the content -of the meeting to be publicly known. They explained that giving me a -copy might cause Norway to not get access to similar information in -the future and thus hurt the future foreign interests of Norway. They -also explained that the Permanent Mission of Norway in Geneva was not -the author of the document, they only got a copy of it, and because of -this had not listed it in their mail journal.

- -

Armed with this -knowledge I asked the Ministry to reconsider and asked who was the -author of the document, now realising that it was not same as the -"sender" according to Ministry of Transport and Communications. The -ministry upheld its rejection but told me the name of the author of -the document. According to -a -government report the author was with the Permanent Mission of -Norway in New York a bit more than a year later (2014-09-22), so I -guessed that might be the office responsible for writing and sending -the report initially and -asked -them for a copy but I was obviously wrong as I was told that the -document was unknown to them and that the author did not work there -when the document was written. Next, I asked the Permanent Mission of -Norway in Geneva and the Foreign Ministry to reconsider and at least -tell me who sent the document to Deputy Permanent Representative with -the Permanent Mission of Norway in Geneva. The Foreign Ministry also -upheld its rejection, but told me that the person sending the document -to Permanent Mission of Norway in Geneva was the defence attachÃ© with -the Norwegian Embassy in Washington. I do not know if this is the -same person as the author of the document.

- -

If I understand the situation correctly, someone capable of -inviting selected NATO nations to a meeting in Pentagon organised a -meeting where someone representing the Norwegian defence attachÃ© in -Washington attended, and the account from this meeting is interpreted -by the Ministry of Transport and Communications to expose Norways -negotiating position, negotiating strategies and similar regarding the -ITU negotiations on Internet Governance. It is truly amazing what can -be derived from mere meta-data.

- -

I wonder which NATO countries besides Norway attended this meeting? -And what exactly was said and done at the meeting? Anyone know?

- - - Tags: english, offentlig innsyn, opphavsrett, personvern. - - -

@@ -1178,7 +1128,7 @@ And what exactly was said and done at the meeting? Anyone know?

2016

January (1)
January (2)

@@ -1417,7 +1367,7 @@ And what exactly was said and done at the meeting? Anyone know?

@@ -1429,7 +1379,7 @@ And what exactly was said and done at the meeting? Anyone know?

@@ -1491,7 +1441,7 @@ And what exactly was said and done at the meeting? Anyone know?

diff --git a/blog/index.rss b/blog/index.rss index c9928e4caa..460593e254 100644 --- a/blog/index.rss +++ b/blog/index.rss @@ -6,6 +6,72 @@ http://people.skolelinux.org/pere/blog/ + + Always download Debian packages using Tor - the simple recipe + http://people.skolelinux.org/pere/blog/Always_download_Debian_packages_using_Tor___the_simple_recipe.html + http://people.skolelinux.org/pere/blog/Always_download_Debian_packages_using_Tor___the_simple_recipe.html + Fri, 15 Jan 2016 00:30:00 +0100 + During his DebConf15 keynote, Jacob Applebaum +<a href="https://summit.debconf.org/debconf15/meeting/331/what-is-to-be-done/">observed +that those listening on the Internet lines would have good reason to +believe a computer have a given security hole</a> if it download a +security fix from a Debian mirror. This is a good reason to always +use encrypted connections to the Debian mirror, to make sure those +listening do not know which IP address to attack. In August, Richard +Hartmann observed that encryption was not enough, when it was possible +to interfere download size to security patches or the fact that +download took place shortly after a security fix was released, and +<a href="http://richardhartmann.de/blog/posts/2015/08/24-Tor-enabled_Debian_mirror/">proposed +to always use Tor to download packages from the Debian mirror</a>. He +was not the first to propose this, as the <tt>apt-transport-tor</tt> +package by Tim Retout already existed to make it easy to convince apt +to use <a href="https://www.torproject.org/">Tor</a>, but I was not +aware of that package when I read the blog post from Richard. + +Richard discussed the idea with Peter Palfrader, one of the Debian +sysadmins, and he set up a Tor hidden service on one of the central +Debian mirrors using the address vwakviie2ienjx6t.onion, thus making +it possible to download packages directly between two tor nodes, +making sure the network traffic always were encrypted. + +Here is a short recipe for enabling this on your machine, by +installing <tt>apt-transport-tor</tt> and replacing http and https +urls with tor+http and https, and using the hidden service instead of +the official Debian mirror site. I recommend installing +<tt>etckeeper</tt> before you start to have a history of the changes +done in /etc/. + +<blockquote><pre> +apt install apt-transport-tor +sed -i 's% http://ftp.debian.org/%tor+http://vwakviie2ienjx6t.onion/%' /etc/apt/sources.list +sed -i 's% http% tor+http%' /etc/apt/sources.list +</pre></blockquote> + +If you have more sources listed in /etc/apt/sources.list.d/, run +the sed commands for these too. The sed command is assuming your are +using the ftp.debian.org Debian mirror. Adjust the command (or just +edit the file manually) to match your mirror. + +This work in Debian Jessie and later. Note that tools like +<tt>apt-file</tt> only recently started using the apt transport +system, and do not work with these tor+http URLs. For +<tt>apt-file</tt> you need the version currently in experimental, +which need a recent apt version currently only in unstable. So if you +need a working <tt>apt-file</tt>, this is not for you. + +Another advantage from this change is that your machine will start +using Tor regularly and at fairly random intervals (every time you +update the package lists or upgrade or install a new package), thus +masking other Tor traffic done from the same machine. Using Tor will +become normal for the machine in question. + +On <a href="https://wiki.debian.org/FreedomBox">Freedombox</a>, APT +is set up by default to use <tt>apt-transport-tor</tt> when Tor is +enabled. It would be great if it was the default on any Debian +system. + + + Nedlasting fra NRK, som Matroska med undertekster http://people.skolelinux.org/pere/blog/Nedlasting_fra_NRK__som_Matroska_med_undertekster.html @@ -978,121 +1044,5 @@ penger, og se om jeg har kapasitet til Ã¥ bidra med mer. - - Is Pentagon deciding the Norwegian negotiating position on Internet governance? - http://people.skolelinux.org/pere/blog/Is_Pentagon_deciding_the_Norwegian_negotiating_position_on_Internet_governance_.html - http://people.skolelinux.org/pere/blog/Is_Pentagon_deciding_the_Norwegian_negotiating_position_on_Internet_governance_.html - Tue, 3 Nov 2015 13:40:00 +0100 - In Norway, all government offices are required by law to keep a -list of every document or letter arriving and leaving their offices. -Internal notes should also be documented. The document list (called a mail -journal - "postjournal" in Norwegian) is public information and thanks -to the Norwegian Freedom of Information Act (Offentleglova) the mail -journal is available for everyone. Most offices even publish the mail -journal on their web pages, as PDFs or tables in web pages. The state-level offices even have a shared web based search service (called -<a href="https://www.oep.no/">Offentlig Elektronisk Postjournal - -OEP</a>) to make it possible to search the entries in the list. Not -all journal entries show up on OEP, and the search service is hard to -use, but OEP does make it easier to find at least some interesting -journal entries . - -In 2012 I came across a document in the mail journal for the -Norwegian Ministry of Transport and Communications on OEP that -piqued my interest. The title of the document was -"<a href="https://www.oep.no/search/resultSingle.html?journalPostId=4192362">Internet -Governance and how it affects national security</a>" (Norwegian: -"Internet Governance og pÃ¥virkning pÃ¥ nasjonal sikkerhet"). The -document date was 2012-05-22, and it was said to be sent from the -"Permanent Mission of Norway to the United Nations". I asked for a -copy, but my request was rejected with a reference to a legal clause said to authorize them to reject it -(<a href="http://lovdata.no/lov/2006-05-19-16/Â§20">offentleglova Â§ 20, -letter c</a>) and an explanation that the document was exempt because -of foreign policy interests as it contained information related to the -Norwegian negotiating position, negotiating strategies or similar. I -was told the information in the document related to the ongoing -negotiation in the International Telecommunications Union (ITU). The -explanation made sense to me in early January 2013, as a ITU -conference in Dubay discussing Internet Governance -(<a href="https://en.wikipedia.org/wiki/International_Telecommunication_Union#World_Conference_on_International_Telecommunications_2012_.28WCIT-12.29">World -Conference on International Telecommunications - WCIT-12</a>) had just -ended, -<a href="http://www.digi.no/kommentarer/2012/12/18/tvil-om-usas-rolle-pa-teletoppmote">reportedly -in chaos</a> when USA walked out of the negotiations and 25 countries -including Norway refused to sign the new treaty. It seemed -reasonable to believe talks were still going on a few weeks later. -Norway was represented at the ITU meeting by two authorities, the -<a href="http://www.nkom.no/">Norwegian Communications Authority</a> -and the <a href="https://www.regjeringen.no/no/dep/sd/">Ministry of -Transport and Communications</a>. This might be the reason the letter -was sent to the ministry. As I was unable to find the document in the -mail journal of any Norwegian UN mission, I asked the ministry who had -sent the document to the ministry, and was told that it was the Deputy -Permanent Representative with the Permanent Mission of Norway in -Geneva. - -Three years later, I was still curious about the content of that -document, and again asked for a copy, believing the negotiation was -over now. This time -<a href="https://mimesbronn.no/request/kopi_av_dokumenter_i_sak_2012914">I -asked both the Ministry of Transport and Communications as the -receiver</a> and -<a href="https://mimesbronn.no/request/brev_om_internet_governance_og_p">asked -the Permanent Mission of Norway in Geneva as the sender</a> for a -copy, to see if they both agreed that it should be withheld from the -public. The ministry upheld its rejection quoting the same law -reference as before, while the permanent mission rejected it quoting a -different clause -(<a href="http://lovdata.no/lov/2006-05-19-16/Â§20">offentleglova Â§ 20 -letter b</a>), claiming that they were required to keep the -content of the document from the public because it contained -information given to Norway with the expressed or implied expectation -that the information should not be made public. I asked the permanent -mission for an explanation, and was told that the document contained -an account from a meeting held in the Pentagon for a limited group of NATO -nations where the organiser of the meeting did not intend the content -of the meeting to be publicly known. They explained that giving me a -copy might cause Norway to not get access to similar information in -the future and thus hurt the future foreign interests of Norway. They -also explained that the Permanent Mission of Norway in Geneva was not -the author of the document, they only got a copy of it, and because of -this had not listed it in their mail journal. - -Armed with this -knowledge I asked the Ministry to reconsider and asked who was the -author of the document, now realising that it was not same as the -"sender" according to Ministry of Transport and Communications. The -ministry upheld its rejection but told me the name of the author of -the document. According to -<a href="https://www.regjeringen.no/no/aktuelt/unga69_rapport1/id2001204/">a -government report</a> the author was with the Permanent Mission of -Norway in New York a bit more than a year later (2014-09-22), so I -guessed that might be the office responsible for writing and sending -the report initially and -<a href="https://www.mimesbronn.no/request/mote_2012_i_pentagon_om_itu">asked -them for a copy</a> but I was obviously wrong as I was told that the -document was unknown to them and that the author did not work there -when the document was written. Next, I asked the Permanent Mission of -Norway in Geneva and the Foreign Ministry to reconsider and at least -tell me who sent the document to Deputy Permanent Representative with -the Permanent Mission of Norway in Geneva. The Foreign Ministry also -upheld its rejection, but told me that the person sending the document -to Permanent Mission of Norway in Geneva was the defence attachÃ© with -the Norwegian Embassy in Washington. I do not know if this is the -same person as the author of the document. - -If I understand the situation correctly, someone capable of -inviting selected NATO nations to a meeting in Pentagon organised a -meeting where someone representing the Norwegian defence attachÃ© in -Washington attended, and the account from this meeting is interpreted -by the Ministry of Transport and Communications to expose Norways -negotiating position, negotiating strategies and similar regarding the -ITU negotiations on Internet Governance. It is truly amazing what can -be derived from mere meta-data. - -I wonder which NATO countries besides Norway attended this meeting? -And what exactly was said and done at the meeting? Anyone know? - - - diff --git a/blog/jXplorer__a_very_nice_LDAP_GUI.html b/blog/jXplorer__a_very_nice_LDAP_GUI.html index 2684b52d4f..3df5087ff9 100644 --- a/blog/jXplorer__a_very_nice_LDAP_GUI.html +++ b/blog/jXplorer__a_very_nice_LDAP_GUI.html @@ -56,7 +56,7 @@ and remove the failing query. Nothing big, but very annoying.

2016

January (1)
January (2)

@@ -295,7 +295,7 @@ and remove the failing query. Nothing big, but very annoying.

@@ -307,7 +307,7 @@ and remove the failing query. Nothing big, but very annoying.

@@ -369,7 +369,7 @@ and remove the failing query. Nothing big, but very annoying.

diff --git a/blog/listadmin__the_quick_way_to_moderate_mailman_lists___nice_free_software.html b/blog/listadmin__the_quick_way_to_moderate_mailman_lists___nice_free_software.html index 7e758881cd..4e33c02fe6 100644 --- a/blog/listadmin__the_quick_way_to_moderate_mailman_lists___nice_free_software.html +++ b/blog/listadmin__the_quick_way_to_moderate_mailman_lists___nice_free_software.html @@ -125,7 +125,7 @@ sure why.

2016

January (1)
January (2)

@@ -364,7 +364,7 @@ sure why.

@@ -376,7 +376,7 @@ sure why.

@@ -438,7 +438,7 @@ sure why.

diff --git a/blog/sitemap.xml b/blog/sitemap.xml index 4b82287c89..02faae8774 100644 --- a/blog/sitemap.xml +++ b/blog/sitemap.xml @@ -160,6 +160,11 @@ 0.50 weekly + + http://people.skolelinux.org/pere/blog/Always_download_Debian_packages_using_Tor___the_simple_recipe.html + 0.50 + weekly + http://people.skolelinux.org/pere/blog/Amazon_steal_books_from_customer_and_throw_out_her_out_without_any_explanation.html 0.50 @@ -1770,6 +1775,11 @@ 0.50 weekly + + http://people.skolelinux.org/pere/blog/Nedlasting_fra_NRK__som_Matruska_med_undertekster.html + 0.50 + weekly + http://people.skolelinux.org/pere/blog/Netflix_krever_at_du_frasier_deg_dine_forbrukerrettigheter___.html 0.50 @@ -2740,6 +2750,11 @@ 0.50 weekly + + http://people.skolelinux.org/pere/blog/Using_Tor_to_download_Debian_packages___the_simple_recipe.html + 0.50 + weekly + http://people.skolelinux.org/pere/blog/V_rt_konkurransebidrag_til__apps4norge_bruker__opnedata.html 0.50 diff --git a/blog/systemd__an_interesting_alternative_to_upstart.html b/blog/systemd__an_interesting_alternative_to_upstart.html index 74582feb87..0b4b7ef284 100644 --- a/blog/systemd__an_interesting_alternative_to_upstart.html +++ b/blog/systemd__an_interesting_alternative_to_upstart.html @@ -74,7 +74,7 @@ with parallel booting enabled by default.

2016

January (1)
January (2)

@@ -313,7 +313,7 @@ with parallel booting enabled by default.

@@ -325,7 +325,7 @@ with parallel booting enabled by default.

@@ -387,7 +387,7 @@ with parallel booting enabled by default.

diff --git a/blog/tags/3d-printer/index.html b/blog/tags/3d-printer/index.html index 23765def75..20e86678b9 100644 --- a/blog/tags/3d-printer/index.html +++ b/blog/tags/3d-printer/index.html @@ -606,7 +606,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

2016

January (1)
January (2)

@@ -845,7 +845,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

@@ -857,7 +857,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

@@ -919,7 +919,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

diff --git a/blog/tags/amiga/index.html b/blog/tags/amiga/index.html index 88543e5161..e7e638d6a4 100644 --- a/blog/tags/amiga/index.html +++ b/blog/tags/amiga/index.html @@ -60,7 +60,7 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

2016

January (1)
January (2)

@@ -299,7 +299,7 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

@@ -311,7 +311,7 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

@@ -373,7 +373,7 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

diff --git a/blog/tags/aros/index.html b/blog/tags/aros/index.html index 5fadc3eea9..60ea3077a8 100644 --- a/blog/tags/aros/index.html +++ b/blog/tags/aros/index.html @@ -60,7 +60,7 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

2016

January (1)
January (2)

@@ -299,7 +299,7 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

@@ -311,7 +311,7 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

@@ -373,7 +373,7 @@ pakke. Kanskje Aros kunne vÃ¦rt interessant for et NUUG-foredrag?

diff --git a/blog/tags/bankid/index.html b/blog/tags/bankid/index.html index 274453e909..ae4d0d8d11 100644 --- a/blog/tags/bankid/index.html +++ b/blog/tags/bankid/index.html @@ -472,7 +472,7 @@ omtalt over. Anbefalt lesning.

2016

January (1)
January (2)

@@ -711,7 +711,7 @@ omtalt over. Anbefalt lesning.

@@ -723,7 +723,7 @@ omtalt over. Anbefalt lesning.

@@ -785,7 +785,7 @@ omtalt over. Anbefalt lesning.

diff --git a/blog/tags/bitcoin/index.html b/blog/tags/bitcoin/index.html index 53827bc5f3..201260743d 100644 --- a/blog/tags/bitcoin/index.html +++ b/blog/tags/bitcoin/index.html @@ -629,7 +629,7 @@ donations to the address

2016

January (1)
January (2)

@@ -868,7 +868,7 @@ donations to the address

@@ -880,7 +880,7 @@ donations to the address

@@ -942,7 +942,7 @@ donations to the address

diff --git a/blog/tags/bootsystem/index.html b/blog/tags/bootsystem/index.html index d3f14cfede..c43ce266f3 100644 --- a/blog/tags/bootsystem/index.html +++ b/blog/tags/bootsystem/index.html @@ -1175,7 +1175,7 @@ insserv'. Will need to test if that work. :)

2016

January (1)
January (2)

@@ -1414,7 +1414,7 @@ insserv'. Will need to test if that work. :)

@@ -1426,7 +1426,7 @@ insserv'. Will need to test if that work. :)

@@ -1488,7 +1488,7 @@ insserv'. Will need to test if that work. :)

diff --git a/blog/tags/bsa/index.html b/blog/tags/bsa/index.html index ccac6ee637..f6c4028e90 100644 --- a/blog/tags/bsa/index.html +++ b/blog/tags/bsa/index.html @@ -148,7 +148,7 @@ pÃ¥ Slashdot.

2016

January (1)
January (2)

@@ -387,7 +387,7 @@ pÃ¥ Slashdot.

@@ -399,7 +399,7 @@ pÃ¥ Slashdot.

@@ -461,7 +461,7 @@ pÃ¥ Slashdot.

diff --git a/blog/tags/chrpath/index.html b/blog/tags/chrpath/index.html index ff13e7bb4c..9e58245ec7 100644 --- a/blog/tags/chrpath/index.html +++ b/blog/tags/chrpath/index.html @@ -155,7 +155,7 @@ include a testsuite check.

2016

January (1)
January (2)

@@ -394,7 +394,7 @@ include a testsuite check.

@@ -406,7 +406,7 @@ include a testsuite check.

@@ -468,7 +468,7 @@ include a testsuite check.

diff --git a/blog/tags/debian edu/index.html b/blog/tags/debian edu/index.html index efea94f648..aa8267e014 100644 --- a/blog/tags/debian edu/index.html +++ b/blog/tags/debian edu/index.html @@ -14723,7 +14723,7 @@ be the only one fitting our needs. :/

2016

January (1)
January (2)

@@ -14962,7 +14962,7 @@ be the only one fitting our needs. :/

@@ -14974,7 +14974,7 @@ be the only one fitting our needs. :/

@@ -15036,7 +15036,7 @@ be the only one fitting our needs. :/

diff --git a/blog/tags/debian/debian.rss b/blog/tags/debian/debian.rss index 784f87430d..74596913a8 100644 --- a/blog/tags/debian/debian.rss +++ b/blog/tags/debian/debian.rss @@ -6,6 +6,72 @@ http://people.skolelinux.org/pere/blog/ + + Always download Debian packages using Tor - the simple recipe + http://people.skolelinux.org/pere/blog/Always_download_Debian_packages_using_Tor___the_simple_recipe.html + http://people.skolelinux.org/pere/blog/Always_download_Debian_packages_using_Tor___the_simple_recipe.html + Fri, 15 Jan 2016 00:30:00 +0100 + During his DebConf15 keynote, Jacob Applebaum +<a href="https://summit.debconf.org/debconf15/meeting/331/what-is-to-be-done/">observed +that those listening on the Internet lines would have good reason to +believe a computer have a given security hole</a> if it download a +security fix from a Debian mirror. This is a good reason to always +use encrypted connections to the Debian mirror, to make sure those +listening do not know which IP address to attack. In August, Richard +Hartmann observed that encryption was not enough, when it was possible +to interfere download size to security patches or the fact that +download took place shortly after a security fix was released, and +<a href="http://richardhartmann.de/blog/posts/2015/08/24-Tor-enabled_Debian_mirror/">proposed +to always use Tor to download packages from the Debian mirror</a>. He +was not the first to propose this, as the <tt>apt-transport-tor</tt> +package by Tim Retout already existed to make it easy to convince apt +to use <a href="https://www.torproject.org/">Tor</a>, but I was not +aware of that package when I read the blog post from Richard. + +Richard discussed the idea with Peter Palfrader, one of the Debian +sysadmins, and he set up a Tor hidden service on one of the central +Debian mirrors using the address vwakviie2ienjx6t.onion, thus making +it possible to download packages directly between two tor nodes, +making sure the network traffic always were encrypted. + +Here is a short recipe for enabling this on your machine, by +installing <tt>apt-transport-tor</tt> and replacing http and https +urls with tor+http and https, and using the hidden service instead of +the official Debian mirror site. I recommend installing +<tt>etckeeper</tt> before you start to have a history of the changes +done in /etc/. + +<blockquote><pre> +apt install apt-transport-tor +sed -i 's% http://ftp.debian.org/%tor+http://vwakviie2ienjx6t.onion/%' /etc/apt/sources.list +sed -i 's% http% tor+http%' /etc/apt/sources.list +</pre></blockquote> + +If you have more sources listed in /etc/apt/sources.list.d/, run +the sed commands for these too. The sed command is assuming your are +using the ftp.debian.org Debian mirror. Adjust the command (or just +edit the file manually) to match your mirror. + +This work in Debian Jessie and later. Note that tools like +<tt>apt-file</tt> only recently started using the apt transport +system, and do not work with these tor+http URLs. For +<tt>apt-file</tt> you need the version currently in experimental, +which need a recent apt version currently only in unstable. So if you +need a working <tt>apt-file</tt>, this is not for you. + +Another advantage from this change is that your machine will start +using Tor regularly and at fairly random intervals (every time you +update the package lists or upgrade or install a new package), thus +masking other Tor traffic done from the same machine. Using Tor will +become normal for the machine in question. + +On <a href="https://wiki.debian.org/FreedomBox">Freedombox</a>, APT +is set up by default to use <tt>apt-transport-tor</tt> when Tor is +enabled. It would be great if it was the default on any Debian +system. + + + OpenALPR, find car license plates in video streams - nice free software http://people.skolelinux.org/pere/blog/OpenALPR__find_car_license_plates_in_video_streams___nice_free_software.html diff --git a/blog/tags/debian/index.html b/blog/tags/debian/index.html index 97000cc4d8..2a46629a46 100644 --- a/blog/tags/debian/index.html +++ b/blog/tags/debian/index.html @@ -20,6 +20,84 @@

Entries tagged "debian".

+ Always download Debian packages using Tor - the simple recipe +

+ 15th January 2016 +

+ +

+apt install apt-transport-tor
+sed -i 's% http://ftp.debian.org/%tor+http://vwakviie2ienjx6t.onion/%' /etc/apt/sources.list
+sed -i 's% http% tor+http%' /etc/apt/sources.list
+

+ +

On Freedombox, APT +is set up by default to use apt-transport-tor when Tor is +enabled. It would be great if it was the default on any Debian +system.

+ +

+ + + Tags: debian, english, sikkerhet. + + +

OpenALPR, find car license plates in video streams - nice free software @@ -9635,7 +9713,7 @@ be the only one fitting our needs. :/

2016

January (1)
January (2)

@@ -9874,7 +9952,7 @@ be the only one fitting our needs. :/

@@ -9886,7 +9964,7 @@ be the only one fitting our needs. :/

@@ -9948,7 +10026,7 @@ be the only one fitting our needs. :/

diff --git a/blog/tags/digistan/index.html b/blog/tags/digistan/index.html index eed5c0b8b8..be1ec42874 100644 --- a/blog/tags/digistan/index.html +++ b/blog/tags/digistan/index.html @@ -1247,7 +1247,7 @@ produkter basert pÃ¥ standarden.

2016

January (1)
January (2)

@@ -1486,7 +1486,7 @@ produkter basert pÃ¥ standarden.

@@ -1498,7 +1498,7 @@ produkter basert pÃ¥ standarden.

@@ -1560,7 +1560,7 @@ produkter basert pÃ¥ standarden.

diff --git a/blog/tags/dld/index.html b/blog/tags/dld/index.html index 9bf6992d28..8e8fff5a3c 100644 --- a/blog/tags/dld/index.html +++ b/blog/tags/dld/index.html @@ -1388,7 +1388,7 @@ fÃ¥r snart se om det stemmer.

2016

January (1)
January (2)

@@ -1627,7 +1627,7 @@ fÃ¥r snart se om det stemmer.

@@ -1639,7 +1639,7 @@ fÃ¥r snart se om det stemmer.

@@ -1701,7 +1701,7 @@ fÃ¥r snart se om det stemmer.

diff --git a/blog/tags/docbook/index.html b/blog/tags/docbook/index.html index f5781b534f..7aa86cb0c4 100644 --- a/blog/tags/docbook/index.html +++ b/blog/tags/docbook/index.html @@ -1408,7 +1408,7 @@ slik at du kan oppdatere direkte.

2016

January (1)
January (2)

@@ -1647,7 +1647,7 @@ slik at du kan oppdatere direkte.

@@ -1659,7 +1659,7 @@ slik at du kan oppdatere direkte.

@@ -1721,7 +1721,7 @@ slik at du kan oppdatere direkte.

diff --git a/blog/tags/drivstoffpriser/index.html b/blog/tags/drivstoffpriser/index.html index b58d4f07bb..e36e447663 100644 --- a/blog/tags/drivstoffpriser/index.html +++ b/blog/tags/drivstoffpriser/index.html @@ -489,7 +489,7 @@ en liste med stasjoner pÃ¥ samme format som PriserVedStasjoner.

2016

January (1)
January (2)

@@ -728,7 +728,7 @@ en liste med stasjoner pÃ¥ samme format som PriserVedStasjoner.

@@ -740,7 +740,7 @@ en liste med stasjoner pÃ¥ samme format som PriserVedStasjoner.

@@ -802,7 +802,7 @@ en liste med stasjoner pÃ¥ samme format som PriserVedStasjoner.

diff --git a/blog/tags/english/english.rss b/blog/tags/english/english.rss index 165c64d43f..18359f06e3 100644 --- a/blog/tags/english/english.rss +++ b/blog/tags/english/english.rss @@ -6,6 +6,72 @@ http://people.skolelinux.org/pere/blog/ + + Always download Debian packages using Tor - the simple recipe + http://people.skolelinux.org/pere/blog/Always_download_Debian_packages_using_Tor___the_simple_recipe.html + http://people.skolelinux.org/pere/blog/Always_download_Debian_packages_using_Tor___the_simple_recipe.html + Fri, 15 Jan 2016 00:30:00 +0100 + During his DebConf15 keynote, Jacob Applebaum +<a href="https://summit.debconf.org/debconf15/meeting/331/what-is-to-be-done/">observed +that those listening on the Internet lines would have good reason to +believe a computer have a given security hole</a> if it download a +security fix from a Debian mirror. This is a good reason to always +use encrypted connections to the Debian mirror, to make sure those +listening do not know which IP address to attack. In August, Richard +Hartmann observed that encryption was not enough, when it was possible +to interfere download size to security patches or the fact that +download took place shortly after a security fix was released, and +<a href="http://richardhartmann.de/blog/posts/2015/08/24-Tor-enabled_Debian_mirror/">proposed +to always use Tor to download packages from the Debian mirror</a>. He +was not the first to propose this, as the <tt>apt-transport-tor</tt> +package by Tim Retout already existed to make it easy to convince apt +to use <a href="https://www.torproject.org/">Tor</a>, but I was not +aware of that package when I read the blog post from Richard. + +Richard discussed the idea with Peter Palfrader, one of the Debian +sysadmins, and he set up a Tor hidden service on one of the central +Debian mirrors using the address vwakviie2ienjx6t.onion, thus making +it possible to download packages directly between two tor nodes, +making sure the network traffic always were encrypted. + +Here is a short recipe for enabling this on your machine, by +installing <tt>apt-transport-tor</tt> and replacing http and https +urls with tor+http and https, and using the hidden service instead of +the official Debian mirror site. I recommend installing +<tt>etckeeper</tt> before you start to have a history of the changes +done in /etc/. + +<blockquote><pre> +apt install apt-transport-tor +sed -i 's% http://ftp.debian.org/%tor+http://vwakviie2ienjx6t.onion/%' /etc/apt/sources.list +sed -i 's% http% tor+http%' /etc/apt/sources.list +</pre></blockquote> + +If you have more sources listed in /etc/apt/sources.list.d/, run +the sed commands for these too. The sed command is assuming your are +using the ftp.debian.org Debian mirror. Adjust the command (or just +edit the file manually) to match your mirror. + +This work in Debian Jessie and later. Note that tools like +<tt>apt-file</tt> only recently started using the apt transport +system, and do not work with these tor+http URLs. For +<tt>apt-file</tt> you need the version currently in experimental, +which need a recent apt version currently only in unstable. So if you +need a working <tt>apt-file</tt>, this is not for you. + +Another advantage from this change is that your machine will start +using Tor regularly and at fairly random intervals (every time you +update the package lists or upgrade or install a new package), thus +masking other Tor traffic done from the same machine. Using Tor will +become normal for the machine in question. + +On <a href="https://wiki.debian.org/FreedomBox">Freedombox</a>, APT +is set up by default to use <tt>apt-transport-tor</tt> when Tor is +enabled. It would be great if it was the default on any Debian +system. + + + OpenALPR, find car license plates in video streams - nice free software http://people.skolelinux.org/pere/blog/OpenALPR__find_car_license_plates_in_video_streams___nice_free_software.html diff --git a/blog/tags/english/index.html b/blog/tags/english/index.html index fb1671373d..61ec6547c5 100644 --- a/blog/tags/english/index.html +++ b/blog/tags/english/index.html @@ -20,6 +20,84 @@

Entries tagged "english".

+ Always download Debian packages using Tor - the simple recipe +

+ 15th January 2016 +

+ +

+apt install apt-transport-tor
+sed -i 's% http://ftp.debian.org/%tor+http://vwakviie2ienjx6t.onion/%' /etc/apt/sources.list
+sed -i 's% http% tor+http%' /etc/apt/sources.list
+

+ +

On Freedombox, APT +is set up by default to use apt-transport-tor when Tor is +enabled. It would be great if it was the default on any Debian +system.

+ +

+ + + Tags: debian, english, sikkerhet. + + +

OpenALPR, find car license plates in video streams - nice free software @@ -24340,7 +24418,7 @@ be the only one fitting our needs. :/

2016

January (1)
January (2)

@@ -24579,7 +24657,7 @@ be the only one fitting our needs. :/

@@ -24591,7 +24669,7 @@ be the only one fitting our needs. :/

@@ -24653,7 +24731,7 @@ be the only one fitting our needs. :/

diff --git a/blog/tags/fiksgatami/index.html b/blog/tags/fiksgatami/index.html index 94914fd635..1d7defdb70 100644 --- a/blog/tags/fiksgatami/index.html +++ b/blog/tags/fiksgatami/index.html @@ -1340,7 +1340,7 @@ med dem. Dette blir bra.

2016

January (1)
January (2)

@@ -1579,7 +1579,7 @@ med dem. Dette blir bra.

@@ -1591,7 +1591,7 @@ med dem. Dette blir bra.

@@ -1653,7 +1653,7 @@ med dem. Dette blir bra.

diff --git a/blog/tags/fildeling/index.html b/blog/tags/fildeling/index.html index 378dbf2210..3c01b76a18 100644 --- a/blog/tags/fildeling/index.html +++ b/blog/tags/fildeling/index.html @@ -633,7 +633,7 @@ og fildeling av slike filer er fullt ut lovlig.

2016

January (1)
January (2)

@@ -872,7 +872,7 @@ og fildeling av slike filer er fullt ut lovlig.

@@ -884,7 +884,7 @@ og fildeling av slike filer er fullt ut lovlig.

@@ -946,7 +946,7 @@ og fildeling av slike filer er fullt ut lovlig.

diff --git a/blog/tags/freeculture/index.html b/blog/tags/freeculture/index.html index b97431f024..69e9d36d9c 100644 --- a/blog/tags/freeculture/index.html +++ b/blog/tags/freeculture/index.html @@ -1783,7 +1783,7 @@ slik at du kan oppdatere direkte.

2016

January (1)
January (2)

@@ -2022,7 +2022,7 @@ slik at du kan oppdatere direkte.

@@ -2034,7 +2034,7 @@ slik at du kan oppdatere direkte.

@@ -2096,7 +2096,7 @@ slik at du kan oppdatere direkte.

diff --git a/blog/tags/freedombox/index.html b/blog/tags/freedombox/index.html index 162ee01338..f1f53c45df 100644 --- a/blog/tags/freedombox/index.html +++ b/blog/tags/freedombox/index.html @@ -934,7 +934,7 @@ default password is 'secret'.

2016

January (1)
January (2)

@@ -1173,7 +1173,7 @@ default password is 'secret'.

@@ -1185,7 +1185,7 @@ default password is 'secret'.

@@ -1247,7 +1247,7 @@ default password is 'secret'.

diff --git a/blog/tags/frikanalen/index.html b/blog/tags/frikanalen/index.html index b7ff9617ba..36b29dcfa9 100644 --- a/blog/tags/frikanalen/index.html +++ b/blog/tags/frikanalen/index.html @@ -1319,7 +1319,7 @@ NUUG lykkes med Ã¥ fÃ¥ ut sine opptak med like stor suksess.

2016

January (1)
January (2)

@@ -1558,7 +1558,7 @@ NUUG lykkes med Ã¥ fÃ¥ ut sine opptak med like stor suksess.

@@ -1570,7 +1570,7 @@ NUUG lykkes med Ã¥ fÃ¥ ut sine opptak med like stor suksess.

@@ -1632,7 +1632,7 @@ NUUG lykkes med Ã¥ fÃ¥ ut sine opptak med like stor suksess.

diff --git a/blog/tags/h264/index.html b/blog/tags/h264/index.html index 9ca8212c2c..edc05735ff 100644 --- a/blog/tags/h264/index.html +++ b/blog/tags/h264/index.html @@ -2506,7 +2506,7 @@ sure hope it was using the announced Ogg Theora support. :)

2016

January (1)
January (2)

@@ -2745,7 +2745,7 @@ sure hope it was using the announced Ogg Theora support. :)

@@ -2757,7 +2757,7 @@ sure hope it was using the announced Ogg Theora support. :)

@@ -2819,7 +2819,7 @@ sure hope it was using the announced Ogg Theora support. :)

diff --git a/blog/tags/intervju/index.html b/blog/tags/intervju/index.html index fe893c9da6..283a1dfe7c 100644 --- a/blog/tags/intervju/index.html +++ b/blog/tags/intervju/index.html @@ -5128,7 +5128,7 @@ veldig bra utvalg av gratis spill som er av hÃ¸y kvalitet. Veldig lett

2016

January (1)
January (2)

@@ -5367,7 +5367,7 @@ veldig bra utvalg av gratis spill som er av hÃ¸y kvalitet. Veldig lett

@@ -5379,7 +5379,7 @@ veldig bra utvalg av gratis spill som er av hÃ¸y kvalitet. Veldig lett

@@ -5441,7 +5441,7 @@ veldig bra utvalg av gratis spill som er av hÃ¸y kvalitet. Veldig lett

diff --git a/blog/tags/isenkram/index.html b/blog/tags/isenkram/index.html index d48bb14c47..f2bc491375 100644 --- a/blog/tags/isenkram/index.html +++ b/blog/tags/isenkram/index.html @@ -1166,7 +1166,7 @@ please send me an email. :)

2016

January (1)
January (2)

@@ -1405,7 +1405,7 @@ please send me an email. :)

@@ -1417,7 +1417,7 @@ please send me an email. :)

@@ -1479,7 +1479,7 @@ please send me an email. :)

diff --git a/blog/tags/kart/index.html b/blog/tags/kart/index.html index 93ab45af46..61fb983373 100644 --- a/blog/tags/kart/index.html +++ b/blog/tags/kart/index.html @@ -1410,7 +1410,7 @@ det viser at behovet for fribruks-sjÃ¸kart er til stedet.

2016

January (1)
January (2)

@@ -1649,7 +1649,7 @@ det viser at behovet for fribruks-sjÃ¸kart er til stedet.

@@ -1661,7 +1661,7 @@ det viser at behovet for fribruks-sjÃ¸kart er til stedet.

@@ -1723,7 +1723,7 @@ det viser at behovet for fribruks-sjÃ¸kart er til stedet.

diff --git a/blog/tags/ldap/index.html b/blog/tags/ldap/index.html index 5a88f034e2..3d29ff6e7d 100644 --- a/blog/tags/ldap/index.html +++ b/blog/tags/ldap/index.html @@ -1050,7 +1050,7 @@ new IETF work group?

2016

January (1)
January (2)

@@ -1289,7 +1289,7 @@ new IETF work group?

@@ -1301,7 +1301,7 @@ new IETF work group?

@@ -1363,7 +1363,7 @@ new IETF work group?

diff --git a/blog/tags/lenker/index.html b/blog/tags/lenker/index.html index 885382f78f..3184fd98dd 100644 --- a/blog/tags/lenker/index.html +++ b/blog/tags/lenker/index.html @@ -645,7 +645,7 @@ Word 2007 hÃ¥ndterer ODF dÃ¥rlig

2016

January (1)
January (2)

@@ -884,7 +884,7 @@ Word 2007 hÃ¥ndterer ODF dÃ¥rlig

@@ -896,7 +896,7 @@ Word 2007 hÃ¥ndterer ODF dÃ¥rlig

@@ -958,7 +958,7 @@ Word 2007 hÃ¥ndterer ODF dÃ¥rlig

diff --git a/blog/tags/lsdvd/index.html b/blog/tags/lsdvd/index.html index 0447800372..b0ea54e5be 100644 --- a/blog/tags/lsdvd/index.html +++ b/blog/tags/lsdvd/index.html @@ -131,7 +131,7 @@ list. :)

2016

January (1)
January (2)

@@ -370,7 +370,7 @@ list. :)

@@ -382,7 +382,7 @@ list. :)

@@ -444,7 +444,7 @@ list. :)

diff --git a/blog/tags/ltsp/index.html b/blog/tags/ltsp/index.html index bc84909819..dc26fbb66f 100644 --- a/blog/tags/ltsp/index.html +++ b/blog/tags/ltsp/index.html @@ -65,7 +65,7 @@ of these cards.

2016

January (1)
January (2)

@@ -304,7 +304,7 @@ of these cards.

@@ -316,7 +316,7 @@ of these cards.

@@ -378,7 +378,7 @@ of these cards.

diff --git a/blog/tags/mesh network/index.html b/blog/tags/mesh network/index.html index 1ac995f321..28aadaa085 100644 --- a/blog/tags/mesh network/index.html +++ b/blog/tags/mesh network/index.html @@ -715,7 +715,7 @@ mesh system.

2016

January (1)
January (2)

@@ -954,7 +954,7 @@ mesh system.

@@ -966,7 +966,7 @@ mesh system.

@@ -1028,7 +1028,7 @@ mesh system.

diff --git a/blog/tags/multimedia/index.html b/blog/tags/multimedia/index.html index bee6ab6391..64cf3ab540 100644 --- a/blog/tags/multimedia/index.html +++ b/blog/tags/multimedia/index.html @@ -3185,7 +3185,7 @@ be the only one fitting our needs. :/

2016

January (1)
January (2)

@@ -3424,7 +3424,7 @@ be the only one fitting our needs. :/

@@ -3436,7 +3436,7 @@ be the only one fitting our needs. :/

@@ -3498,7 +3498,7 @@ be the only one fitting our needs. :/

diff --git a/blog/tags/nice free software/index.html b/blog/tags/nice free software/index.html index 41975271da..e005b43f4b 100644 --- a/blog/tags/nice free software/index.html +++ b/blog/tags/nice free software/index.html @@ -812,7 +812,7 @@ section.

2016

January (1)
January (2)

@@ -1051,7 +1051,7 @@ section.

@@ -1063,7 +1063,7 @@ section.

@@ -1125,7 +1125,7 @@ section.

diff --git a/blog/tags/norsk/index.html b/blog/tags/norsk/index.html index 0bdc2520e0..8d4d152edd 100644 --- a/blog/tags/norsk/index.html +++ b/blog/tags/norsk/index.html @@ -23746,7 +23746,7 @@ forsÃ¸k.

2016

January (1)
January (2)

@@ -23985,7 +23985,7 @@ forsÃ¸k.

@@ -23997,7 +23997,7 @@ forsÃ¸k.

@@ -24059,7 +24059,7 @@ forsÃ¸k.

diff --git a/blog/tags/nuug/index.html b/blog/tags/nuug/index.html index e350f64804..5418d4f287 100644 --- a/blog/tags/nuug/index.html +++ b/blog/tags/nuug/index.html @@ -12172,7 +12172,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

2016

January (1)
January (2)

@@ -12411,7 +12411,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

@@ -12423,7 +12423,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

@@ -12485,7 +12485,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

diff --git a/blog/tags/offentlig innsyn/index.html b/blog/tags/offentlig innsyn/index.html index 9e97d55524..88d77037a2 100644 --- a/blog/tags/offentlig innsyn/index.html +++ b/blog/tags/offentlig innsyn/index.html @@ -2747,7 +2747,7 @@ til Ã¥ levere hver uke. Har ikke undersÃ¸kt noen av de andre.

2016

January (1)
January (2)

@@ -2986,7 +2986,7 @@ til Ã¥ levere hver uke. Har ikke undersÃ¸kt noen av de andre.

@@ -2998,7 +2998,7 @@ til Ã¥ levere hver uke. Har ikke undersÃ¸kt noen av de andre.

@@ -3060,7 +3060,7 @@ til Ã¥ levere hver uke. Har ikke undersÃ¸kt noen av de andre.

diff --git a/blog/tags/open311/index.html b/blog/tags/open311/index.html index 88acade910..7f0f7fc7fd 100644 --- a/blog/tags/open311/index.html +++ b/blog/tags/open311/index.html @@ -160,7 +160,7 @@ work like the free software project communities I am used to.

2016

January (1)
January (2)

@@ -399,7 +399,7 @@ work like the free software project communities I am used to.

@@ -411,7 +411,7 @@ work like the free software project communities I am used to.

@@ -473,7 +473,7 @@ work like the free software project communities I am used to.

diff --git a/blog/tags/opphavsrett/index.html b/blog/tags/opphavsrett/index.html index 353a0fdd46..b5a59ac8e0 100644 --- a/blog/tags/opphavsrett/index.html +++ b/blog/tags/opphavsrett/index.html @@ -6881,7 +6881,7 @@ database.

2016

January (1)
January (2)

@@ -7120,7 +7120,7 @@ database.

@@ -7132,7 +7132,7 @@ database.

@@ -7194,7 +7194,7 @@ database.

diff --git a/blog/tags/personvern/index.html b/blog/tags/personvern/index.html index b5271b5ff3..3c02810b10 100644 --- a/blog/tags/personvern/index.html +++ b/blog/tags/personvern/index.html @@ -8470,7 +8470,7 @@ kontanter for noen dager siden.

2016

January (1)
January (2)

@@ -8709,7 +8709,7 @@ kontanter for noen dager siden.

@@ -8721,7 +8721,7 @@ kontanter for noen dager siden.

@@ -8783,7 +8783,7 @@ kontanter for noen dager siden.

diff --git a/blog/tags/raid/index.html b/blog/tags/raid/index.html index be3f76bfa5..4eb33eca4f 100644 --- a/blog/tags/raid/index.html +++ b/blog/tags/raid/index.html @@ -101,7 +101,7 @@ disk(s) is failing when the RAID is running short on disks.

2016

January (1)
January (2)

@@ -340,7 +340,7 @@ disk(s) is failing when the RAID is running short on disks.

@@ -352,7 +352,7 @@ disk(s) is failing when the RAID is running short on disks.

@@ -414,7 +414,7 @@ disk(s) is failing when the RAID is running short on disks.

diff --git a/blog/tags/reactos/index.html b/blog/tags/reactos/index.html index 7c03a3e0ad..4207c712d7 100644 --- a/blog/tags/reactos/index.html +++ b/blog/tags/reactos/index.html @@ -100,7 +100,7 @@ image.

2016

January (1)
January (2)

@@ -339,7 +339,7 @@ image.

@@ -351,7 +351,7 @@ image.

@@ -413,7 +413,7 @@ image.

diff --git a/blog/tags/reprap/index.html b/blog/tags/reprap/index.html index f1f31e1426..dd85c045b5 100644 --- a/blog/tags/reprap/index.html +++ b/blog/tags/reprap/index.html @@ -527,7 +527,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

2016

January (1)
January (2)

@@ -766,7 +766,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

@@ -778,7 +778,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

@@ -840,7 +840,7 @@ hÃ¥per det ikke gÃ¥r tapt pÃ¥ samme vis.

diff --git a/blog/tags/rfid/index.html b/blog/tags/rfid/index.html index e8cd67e2cf..910f21a52d 100644 --- a/blog/tags/rfid/index.html +++ b/blog/tags/rfid/index.html @@ -431,7 +431,7 @@ mer om de nye biometriske passene.

2016

January (1)
January (2)

@@ -670,7 +670,7 @@ mer om de nye biometriske passene.

@@ -682,7 +682,7 @@ mer om de nye biometriske passene.

@@ -744,7 +744,7 @@ mer om de nye biometriske passene.

diff --git a/blog/tags/robot/index.html b/blog/tags/robot/index.html index a6f8f59b61..5794ad9baf 100644 --- a/blog/tags/robot/index.html +++ b/blog/tags/robot/index.html @@ -465,7 +465,7 @@ firmwaren. :)

2016

January (1)
January (2)

@@ -704,7 +704,7 @@ firmwaren. :)

@@ -716,7 +716,7 @@ firmwaren. :)

@@ -778,7 +778,7 @@ firmwaren. :)

diff --git a/blog/tags/rss/index.html b/blog/tags/rss/index.html index cf177f8efa..39499ec6eb 100644 --- a/blog/tags/rss/index.html +++ b/blog/tags/rss/index.html @@ -54,7 +54,7 @@ forsÃ¸k.

2016

January (1)
January (2)

@@ -293,7 +293,7 @@ forsÃ¸k.

@@ -305,7 +305,7 @@ forsÃ¸k.

@@ -367,7 +367,7 @@ forsÃ¸k.

diff --git a/blog/tags/ruter/index.html b/blog/tags/ruter/index.html index ea7c067d9b..86b26f97a0 100644 --- a/blog/tags/ruter/index.html +++ b/blog/tags/ruter/index.html @@ -208,7 +208,7 @@ OsloomrÃ¥det.

2016

January (1)
January (2)

@@ -447,7 +447,7 @@ OsloomrÃ¥det.

@@ -459,7 +459,7 @@ OsloomrÃ¥det.

@@ -521,7 +521,7 @@ OsloomrÃ¥det.

diff --git a/blog/tags/scraperwiki/index.html b/blog/tags/scraperwiki/index.html index 451a6cab86..5032587b16 100644 --- a/blog/tags/scraperwiki/index.html +++ b/blog/tags/scraperwiki/index.html @@ -143,7 +143,7 @@ av Ã¥ dele informasjon med andre uten bruksbegresninger.

2016

January (1)
January (2)

@@ -382,7 +382,7 @@ av Ã¥ dele informasjon med andre uten bruksbegresninger.

@@ -394,7 +394,7 @@ av Ã¥ dele informasjon med andre uten bruksbegresninger.

@@ -456,7 +456,7 @@ av Ã¥ dele informasjon med andre uten bruksbegresninger.

diff --git a/blog/tags/sikkerhet/index.html b/blog/tags/sikkerhet/index.html index cee6446cda..9fdd2e9b8f 100644 --- a/blog/tags/sikkerhet/index.html +++ b/blog/tags/sikkerhet/index.html @@ -20,6 +20,84 @@

Entries tagged "sikkerhet".

+ Always download Debian packages using Tor - the simple recipe +

+ 15th January 2016 +

+ +

+apt install apt-transport-tor
+sed -i 's% http://ftp.debian.org/%tor+http://vwakviie2ienjx6t.onion/%' /etc/apt/sources.list
+sed -i 's% http% tor+http%' /etc/apt/sources.list
+

+ +

On Freedombox, APT +is set up by default to use apt-transport-tor when Tor is +enabled. It would be great if it was the default on any Debian +system.

+ +

+ + + Tags: debian, english, sikkerhet. + + +

PGP key transition statement for key EE4E02F9 @@ -3295,7 +3373,7 @@ betydelige.

2016

January (1)
January (2)

@@ -3534,7 +3612,7 @@ betydelige.

@@ -3546,7 +3624,7 @@ betydelige.

@@ -3608,7 +3686,7 @@ betydelige.

diff --git a/blog/tags/sikkerhet/sikkerhet.rss b/blog/tags/sikkerhet/sikkerhet.rss index 32736d628e..e3f6f85bc7 100644 --- a/blog/tags/sikkerhet/sikkerhet.rss +++ b/blog/tags/sikkerhet/sikkerhet.rss @@ -6,6 +6,72 @@ http://people.skolelinux.org/pere/blog/ + + Always download Debian packages using Tor - the simple recipe + http://people.skolelinux.org/pere/blog/Always_download_Debian_packages_using_Tor___the_simple_recipe.html + http://people.skolelinux.org/pere/blog/Always_download_Debian_packages_using_Tor___the_simple_recipe.html + Fri, 15 Jan 2016 00:30:00 +0100 + During his DebConf15 keynote, Jacob Applebaum +<a href="https://summit.debconf.org/debconf15/meeting/331/what-is-to-be-done/">observed +that those listening on the Internet lines would have good reason to +believe a computer have a given security hole</a> if it download a +security fix from a Debian mirror. This is a good reason to always +use encrypted connections to the Debian mirror, to make sure those +listening do not know which IP address to attack. In August, Richard +Hartmann observed that encryption was not enough, when it was possible +to interfere download size to security patches or the fact that +download took place shortly after a security fix was released, and +<a href="http://richardhartmann.de/blog/posts/2015/08/24-Tor-enabled_Debian_mirror/">proposed +to always use Tor to download packages from the Debian mirror</a>. He +was not the first to propose this, as the <tt>apt-transport-tor</tt> +package by Tim Retout already existed to make it easy to convince apt +to use <a href="https://www.torproject.org/">Tor</a>, but I was not +aware of that package when I read the blog post from Richard. + +Richard discussed the idea with Peter Palfrader, one of the Debian +sysadmins, and he set up a Tor hidden service on one of the central +Debian mirrors using the address vwakviie2ienjx6t.onion, thus making +it possible to download packages directly between two tor nodes, +making sure the network traffic always were encrypted. + +Here is a short recipe for enabling this on your machine, by +installing <tt>apt-transport-tor</tt> and replacing http and https +urls with tor+http and https, and using the hidden service instead of +the official Debian mirror site. I recommend installing +<tt>etckeeper</tt> before you start to have a history of the changes +done in /etc/. + +<blockquote><pre> +apt install apt-transport-tor +sed -i 's% http://ftp.debian.org/%tor+http://vwakviie2ienjx6t.onion/%' /etc/apt/sources.list +sed -i 's% http% tor+http%' /etc/apt/sources.list +</pre></blockquote> + +If you have more sources listed in /etc/apt/sources.list.d/, run +the sed commands for these too. The sed command is assuming your are +using the ftp.debian.org Debian mirror. Adjust the command (or just +edit the file manually) to match your mirror. + +This work in Debian Jessie and later. Note that tools like +<tt>apt-file</tt> only recently started using the apt transport +system, and do not work with these tor+http URLs. For +<tt>apt-file</tt> you need the version currently in experimental, +which need a recent apt version currently only in unstable. So if you +need a working <tt>apt-file</tt>, this is not for you. + +Another advantage from this change is that your machine will start +using Tor regularly and at fairly random intervals (every time you +update the package lists or upgrade or install a new package), thus +masking other Tor traffic done from the same machine. Using Tor will +become normal for the machine in question. + +On <a href="https://wiki.debian.org/FreedomBox">Freedombox</a>, APT +is set up by default to use <tt>apt-transport-tor</tt> when Tor is +enabled. It would be great if it was the default on any Debian +system. + + + PGP key transition statement for key EE4E02F9 http://people.skolelinux.org/pere/blog/PGP_key_transition_statement_for_key_EE4E02F9.html diff --git a/blog/tags/sitesummary/index.html b/blog/tags/sitesummary/index.html index 867d20c3af..30d0a583e6 100644 --- a/blog/tags/sitesummary/index.html +++ b/blog/tags/sitesummary/index.html @@ -259,7 +259,7 @@ everything is taken care of.

2016

January (1)
January (2)

@@ -498,7 +498,7 @@ everything is taken care of.

@@ -510,7 +510,7 @@ everything is taken care of.

@@ -572,7 +572,7 @@ everything is taken care of.

diff --git a/blog/tags/skepsis/index.html b/blog/tags/skepsis/index.html index 3b152ec8b0..fc3f72524b 100644 --- a/blog/tags/skepsis/index.html +++ b/blog/tags/skepsis/index.html @@ -392,7 +392,7 @@ skyskrapere. Takke meg til en tur til mÃ¥nen.

2016

January (1)
January (2)

@@ -631,7 +631,7 @@ skyskrapere. Takke meg til en tur til mÃ¥nen.

@@ -643,7 +643,7 @@ skyskrapere. Takke meg til en tur til mÃ¥nen.

@@ -705,7 +705,7 @@ skyskrapere. Takke meg til en tur til mÃ¥nen.

diff --git a/blog/tags/standard/index.html b/blog/tags/standard/index.html index 258bdeea8a..b9827ca51e 100644 --- a/blog/tags/standard/index.html +++ b/blog/tags/standard/index.html @@ -4452,7 +4452,7 @@ Kjenner kun til ufullstendige lÃ¸sninger for slikt.

2016

January (1)
January (2)

@@ -4691,7 +4691,7 @@ Kjenner kun til ufullstendige lÃ¸sninger for slikt.

@@ -4703,7 +4703,7 @@ Kjenner kun til ufullstendige lÃ¸sninger for slikt.

@@ -4765,7 +4765,7 @@ Kjenner kun til ufullstendige lÃ¸sninger for slikt.

diff --git a/blog/tags/stavekontroll/index.html b/blog/tags/stavekontroll/index.html index 0435a43630..85d3590f26 100644 --- a/blog/tags/stavekontroll/index.html +++ b/blog/tags/stavekontroll/index.html @@ -238,7 +238,7 @@ stavekontrollen.

2016

January (1)
January (2)

@@ -477,7 +477,7 @@ stavekontrollen.

@@ -489,7 +489,7 @@ stavekontrollen.

@@ -551,7 +551,7 @@ stavekontrollen.

diff --git a/blog/tags/stortinget/index.html b/blog/tags/stortinget/index.html index d4c4ad08fa..90954dbb01 100644 --- a/blog/tags/stortinget/index.html +++ b/blog/tags/stortinget/index.html @@ -910,7 +910,7 @@ at vi i NUUG har fÃ¥tt operativ en norsk utgave av

2016

January (1)
January (2)

@@ -1149,7 +1149,7 @@ at vi i NUUG har fÃ¥tt operativ en norsk utgave av

@@ -1161,7 +1161,7 @@ at vi i NUUG har fÃ¥tt operativ en norsk utgave av

@@ -1223,7 +1223,7 @@ at vi i NUUG har fÃ¥tt operativ en norsk utgave av

diff --git a/blog/tags/surveillance/index.html b/blog/tags/surveillance/index.html index a9f545cac5..dbb2aaa893 100644 --- a/blog/tags/surveillance/index.html +++ b/blog/tags/surveillance/index.html @@ -2810,7 +2810,7 @@ automatisk over i spesialkartet.

2016

January (1)
January (2)

@@ -3049,7 +3049,7 @@ automatisk over i spesialkartet.

@@ -3061,7 +3061,7 @@ automatisk over i spesialkartet.

@@ -3123,7 +3123,7 @@ automatisk over i spesialkartet.

diff --git a/blog/tags/sysadmin/index.html b/blog/tags/sysadmin/index.html index fff07321e6..ceb1341856 100644 --- a/blog/tags/sysadmin/index.html +++ b/blog/tags/sysadmin/index.html @@ -212,7 +212,7 @@ and DHCP updates I wanted to do.

2016

January (1)
January (2)

@@ -451,7 +451,7 @@ and DHCP updates I wanted to do.

@@ -463,7 +463,7 @@ and DHCP updates I wanted to do.

@@ -525,7 +525,7 @@ and DHCP updates I wanted to do.

diff --git a/blog/tags/usenix/index.html b/blog/tags/usenix/index.html index 449e7e62d5..e29c6df156 100644 --- a/blog/tags/usenix/index.html +++ b/blog/tags/usenix/index.html @@ -229,7 +229,7 @@ for other sites to consider too?

2016

January (1)
January (2)

@@ -468,7 +468,7 @@ for other sites to consider too?

@@ -480,7 +480,7 @@ for other sites to consider too?

@@ -542,7 +542,7 @@ for other sites to consider too?

diff --git a/blog/tags/valg/index.html b/blog/tags/valg/index.html index 7f055b35c9..2df4df7fbc 100644 --- a/blog/tags/valg/index.html +++ b/blog/tags/valg/index.html @@ -941,7 +941,7 @@ inneholdt i Iran hvis de ikke hadde hemmelige valg?

2016

January (1)
January (2)

@@ -1180,7 +1180,7 @@ inneholdt i Iran hvis de ikke hadde hemmelige valg?

@@ -1192,7 +1192,7 @@ inneholdt i Iran hvis de ikke hadde hemmelige valg?

@@ -1254,7 +1254,7 @@ inneholdt i Iran hvis de ikke hadde hemmelige valg?

diff --git a/blog/tags/video/index.html b/blog/tags/video/index.html index 1f0d3d416a..a97a1d07a4 100644 --- a/blog/tags/video/index.html +++ b/blog/tags/video/index.html @@ -4704,7 +4704,7 @@ larger stick as well.

2016

January (1)
January (2)

@@ -4943,7 +4943,7 @@ larger stick as well.

@@ -4955,7 +4955,7 @@ larger stick as well.

@@ -5017,7 +5017,7 @@ larger stick as well.

diff --git a/blog/tags/vitenskap/index.html b/blog/tags/vitenskap/index.html index 75b8a44c63..c28b014ef3 100644 --- a/blog/tags/vitenskap/index.html +++ b/blog/tags/vitenskap/index.html @@ -395,7 +395,7 @@ skyskrapere. Takke meg til en tur til mÃ¥nen.

2016

January (1)
January (2)

@@ -634,7 +634,7 @@ skyskrapere. Takke meg til en tur til mÃ¥nen.

@@ -646,7 +646,7 @@ skyskrapere. Takke meg til en tur til mÃ¥nen.

@@ -708,7 +708,7 @@ skyskrapere. Takke meg til en tur til mÃ¥nen.

diff --git a/blog/tags/web/index.html b/blog/tags/web/index.html index 2c6597a8e2..5f615071d5 100644 --- a/blog/tags/web/index.html +++ b/blog/tags/web/index.html @@ -3478,7 +3478,7 @@ be the only one fitting our needs. :/

2016