Here's the relevant part of the or-talk mailing list: http://archives.seul.org/or/talk/Sep-2007/threads.html#00045 (See threads 'Odd tor spam', 'Careful, you.re being watched', and 'Odd tor spam - Storm Worm'.)
There are solutions to this sort of thing. The Tor developers cryptographically sign Tor, and of course you can download the source, read it, and compile yourself.
Also note that if you want to use Tor to hide from the United States National Security Agency, you're screwed. Tor is excellent, but not that excellent.
On 10/09/2007, David Gerard dgerard@gmail.com wrote:
http://www.theinquirer.net/?article=42230
- d.
On 9/10/07, David Gerard dgerard@gmail.com wrote:
This is *not* a trojaned version of tor. This is a version of the storm worm called tor.exe
http://archives.seul.org/or/talk/Sep-2007/msg00051.html http://archives.seul.org/or/talk/Sep-2007/msg00052.html http://archives.seul.org/or/talk/Sep-2007/msg00047.html
It's of no importance to us but the article isn't accurate. The trojan claimed to be tor but isn't at all...
On 9/10/07, David Gerard dgerard@gmail.com wrote:
http://www.theinquirer.net/?article=42230
- d.
WikiEN-l mailing list WikiEN-l@lists.wikimedia.org To unsubscribe from this mailing list, visit: http://lists.wikimedia.org/mailman/listinfo/wikien-l
On 9/10/07, Gregory Maxwell gmaxwell@gmail.com wrote:
It's of no importance to us but the article isn't accurate. The trojan claimed to be tor but isn't at all...
Yeah, that's pretty much the definition of a trojan.
So, someone sent around an email which said "download Tor", and when they downloaded what they thought was Tor they actually downloaded a trojan.
And this has what to do with the English Wikipedia?
On 10/09/2007, Anthony wikimail@inbox.org wrote:
On 9/10/07, Gregory Maxwell gmaxwell@gmail.com wrote:
It's of no importance to us but the article isn't accurate. The trojan claimed to be tor but isn't at all...
Yeah, that's pretty much the definition of a trojan.
So, someone sent around an email which said "download Tor", and when they downloaded what they thought was Tor they actually downloaded a trojan.
And this has what to do with the English Wikipedia?
Storm is basing it's attacks on social engineering. De.wikipedia was once used as part of such an attack. Not imposible that en may be as well.
On 9/10/07, David Gerard dgerard@gmail.com wrote:
David, the darkly amusing thing about this post is that some people will read it as "ban Tor users as suspected trojans"[1]. Maybe that thought occurred to you already. :p
[1] See WP:RFA/CW, WP:RFAR/CW, etc. etc.
—C.W.