noerps

I am currently evaluating that.

Yay for a trust automaton, another level of complexity that won't solve anything.

Tor does not provide security, it can provide obfuscation that may lead to anonymity or pseudonymity, not more.

I concur with your statement that SSL isn't really secure end-to-end communication when 3rd party certificates are involved.

Since nearly every Tor-exit has working reverse-lookup or by using https://check.torproject.org/ it is easy to deny access to Tor-users while authenticating.

It makes imho no sense to authenticate using Tor.

There is no level on anonymity, either you are, or you are not.

Addendum for achievement: Connect to Tor from a public accessible network/wifi that is free from surveillance using a pristine installation and never use that network-device again.

Addendum 2: If you use the network device twice, you may achieve only pseudonymity.

If you use a VPN to connect to Tor, you can hide the fact (from your local isp) that you use tor.

If you use Tor to connect to your VPN-provider, you can hide your location from your VPN-provider.

Since your VPN-provider may have payment information from your creditcard it makes no sense to use a VPN and Tor together, its just a cascade.

I use rsync via ssh for that scenario and I backup the stuff that isn't provided by the VPS, that is usually a list of installed packages, a dump or snapshot of the database and the relevant deployed files.

Try lsof for files accessed by process.

The TheCommandline.net podcast is approximately 30 minutes and the Econtalk.org is about 60 minutes and covers more topics like surveillance and terrorism in the end.

Bruce is very consistent in using his metaphors and very enjoyable in both podcasts, if you can't guess it, this one makes a good teaser.

Your VPN will become your new endpoint, it is a tor-vpn cascade.

From a crypto/security approach there is no difference between a self-signed certificate and from an "offical" CA.

In terms of trust, your mileage may vary.

Try an additional weight or graph based on your elections.

That doesn't matter, since the changes of your endpoints ip are available from your ISP.

Bitcoin transactions are chained, that may compromise you.

But you could use an anon currency-exchange or currency-bridge like paysafecard.com to obtain some value and obtain bitcoin with that value and never use that bitcoin key again to avoid that.

To answer a complex question: SSL/TLS isn't the problem, the certificates are.

It could circumvent VPN censorship/supression or DPI since VPN is not a secure end to end communication.

That way you would obfuscate your endpoint against your vpn endpoint/provider.

It would add no further benefit to location obfuscation with Tor, since your VPN-provider will always snitch on you when opposed with lethal force.

They are donating bandwidth, which is always scarce.

A system of prison-labour combined with house arrest or curfews - if you look at it from a government perspective it is possible to imprison everybody.

I suggest you spent some time reading about oppressive governments before you state you can't do it.

The concept of privacy is inherent for dubio pro reo. If you take away or reduce privacy everybody is guilty by association - qed.

Being ironic on twitter is part of the problem.

It is so easy to blame software, is it?

1. If you are not able to manage your keys, which includes a simple unencrypted key-backup, you are doomed, even with a pretty interface.

2. If you insist on other people to take away the responsibility from you, no service, hard- or software will provide security or privacy for you.

3. You don't need a cloud, when decentralized or local services crater you much better and faster.

4. Sharing data isn't really a problem, it's the lack of transparency of the data collecting entity that creates the problem.

The conclusion is, to protect your security/privacy and to successfully utilize any crypto-toolchain you have to accept that responsibility isn't comfy, and delegation will lead to compromise.

Did you really believe that any government, or parts thereof, in the world would not tap the vast resources that packet-switched networks, centralized services would offer them?

Zacqary knows nothing about security, secure procedures or even cryprography.

If you delegate your private, unsecured communications to an entity for a comfortable user experience, you did not want either security and privacy.

Sorry, to tell you so.