General

JAP, a tool for surfing the web anonymously, is IMHO doomed. I tried it out right now, and the "fetch anon server list from the internet" offered me 4 different mix cascades: Dresden-Dresden, Dresden-ULD, New York-Berlin-Dresden and Regensburg-HU/IWI. The problem: Dresden-Dresden is the only mix cascade that is actually used: although the other mix cascades have several hundred users, Dresden-Dresden is the most common cascade. At the time of writing, over 80 % of all users used the Dresden-Dresden cascade. The problem with the Dresden-Dresden is insecure, and according to Ruediger Weis, the JAP Dresden-Dresden cascade is "cryptographic absurdity". Dresden-Dresen is a problem, since it undermines the basic concept of mix systems, while still being available as a choice for normal users (and even the first in the list!). The other mixes have thus hardly any users, which leads to less security for those who actually need it, and no security for the people using the Dresden-Dresden cascade (Dresden has already been compromised by the German Federal Police before). So, my ad-hoc conclusion from my observations is that JAP - at least in the current state with the D-D cascade still running and hardly any users on the other cascades - is doomed.