[TWN team] Recent changes to the wiki pages
Lunar
lunar at torproject.org
Sun Nov 3 18:20:09 UTC 2013
===========================================================================
=== https://trac.torproject.org/projects/tor/wiki/TorWeeklyNews/2013/18 ===
===========================================================================
version 23
Author: lunar
Date: 2013-11-03T17:48:16+00:00
another misc
--- version 22
+++ version 23
@@ -117,6 +117,13 @@
[XXX] https://lists.torproject.org/pipermail/tor-dev/2013-October/005700.html
[XXX] https://research.torproject.org/techreports/libutp-2013-10-30.pdf
+SiNA Rabbani has been asking [XXX] for comments on two documents he wrote about
+how use cases and design of a “point-and-click” hidden service blogging tool,
+as part of the Cute Otter project [XXX].
+
+ [XXX] https://lists.torproject.org/pipermail/tor-dev/2013-October/005703.html
+ [XXX] https://trac.torproject.org/projects/tor/attachment/wiki/org/sponsors/Otter/Cute
+
Vulnerabilities
---------------
@@ -151,5 +158,4 @@
Possible items:
- * use case and design for point-click-publishing HS https://lists.torproject.org/pipermail/tor-dev/2013-October/005703.html
* bananaphone PT https://lists.torproject.org/pipermail/tor-dev/2013-October/005694.html https://github.com/david415/obfsproxy/tree/david-bananaphone-nacl-hammertime https://github.com/leif/bananaphone
version 22
Author: lunar
Date: 2013-11-03T17:46:07+00:00
one more misc news
--- version 21
+++ version 22
@@ -109,6 +109,14 @@
[XXX] https://lists.torproject.org/pipermail/tor-dev/2013-November/005713.html
+Karsten Loesing announced [XXX] the availability of a new tech report he wrote with
+Steven J. Murdoch, and Rob Jansen: “Evaluation of a libutp-based Tor Datagram
+Implementation” [XXX]. Be sure to have a look if you are interested in one of the
+“promising approach to overcome Tor’s performance-related problems”.
+
+ [XXX] https://lists.torproject.org/pipermail/tor-dev/2013-October/005700.html
+ [XXX] https://research.torproject.org/techreports/libutp-2013-10-30.pdf
+
Vulnerabilities
---------------
@@ -143,6 +151,5 @@
Possible items:
- * Tech report: Evaluation of a libutp-based Tor Datagram Implementation https://lists.torproject.org/pipermail/tor-dev/2013-October/005700.html
* use case and design for point-click-publishing HS https://lists.torproject.org/pipermail/tor-dev/2013-October/005703.html
* bananaphone PT https://lists.torproject.org/pipermail/tor-dev/2013-October/005694.html https://github.com/david415/obfsproxy/tree/david-bananaphone-nacl-hammertime https://github.com/leif/bananaphone
version 21
Author: lunar
Date: 2013-11-03T17:40:35+00:00
write some misc items
--- version 20
+++ version 21
@@ -86,15 +86,28 @@
Miscellaneous news
------------------
-Item 1 with cited source [XXX].
+starlight reported [XXX] on running a Tor relays with the daemon
+compiled with the AddressSanitizer [XXX] memory error detector available
+since GCC 4.8
-Item 2 with cited source [XXX].
+ [XXX] https://lists.torproject.org/pipermail/tor-relays/2013-October/003187.html
+ [XXX] https://code.google.com/p/address-sanitizer/
-Item 3 with cited source [XXX].
+antispam06 reported [XXX] that TorBirdy was not working properly with
+Thunderbird 24 and will not force connections to use Tor. Sukhbir Singh
+confirmed [XXX] that users should stick with Thunderbird 17 until an
+updated version of TorBirdy is released.
- [XXX]
- [XXX]
- [XXX]
+ [XXX] https://lists.torproject.org/pipermail/tor-talk/2013-October/030913.html
+ [XXX] https://lists.torproject.org/pipermail/tor-talk/2013-November/030916.html
+
+Isis Lovecruft has sent two proposals [XXX] for improvements to
+BridgeDB. One is finished and addresses the switch to a “Distributed
+Database System and RDBMS”. The second is still in draft stage and
+“specifies a system for social distribution of the centrally-stored
+bridges within BridgeDB”.
+
+ [XXX] https://lists.torproject.org/pipermail/tor-dev/2013-November/005713.html
Vulnerabilities
---------------
@@ -132,7 +145,4 @@
* Tech report: Evaluation of a libutp-based Tor Datagram Implementation https://lists.torproject.org/pipermail/tor-dev/2013-October/005700.html
* use case and design for point-click-publishing HS https://lists.torproject.org/pipermail/tor-dev/2013-October/005703.html
- * running Tor relay live with AddressSanitizer https://lists.torproject.org/pipermail/tor-relays/2013-October/003187.html
- * Thunderbird and TorBirdy not using SOCKS5? https://lists.torproject.org/pipermail/tor-talk/2013-October/030913.html
* bananaphone PT https://lists.torproject.org/pipermail/tor-dev/2013-October/005694.html https://github.com/david415/obfsproxy/tree/david-bananaphone-nacl-hammertime https://github.com/leif/bananaphone
- * BridgeDB proposals https://lists.torproject.org/pipermail/tor-dev/2013-November/005713.html
version 20
Author: lunar
Date: 2013-11-03T17:30:57+00:00
write about new TBB
--- version 19
+++ version 20
@@ -24,7 +24,7 @@
anymore to disallow configuration changes and IP address retrieval, and
the persistence settings now requires privileged access. On top of these
specific changes, the release include security fixes [XXX] from the
-Firefox 10.0.10esr release and for a few other Debian packages.
+Firefox 17.0.10esr release and for a few other Debian packages.
More visible improvements include the ability to persist printer
settings, support for running from more SD card reader types, and a
@@ -36,6 +36,30 @@
[XXX] https://tails.boum.org/news/version_0.21/
[XXX] https://tails.boum.org/security/Numerous_security_holes_in_0.20.1/
[XXX] https://git-tails.immerda.ch/tails/plain/debian/changelog
+
+New Tor Browser Bundles based on Firefox 17.0.10esr
+---------------------------------------------------
+
+Erinn Clark released new versions of the Tor Browser Bundle [XXX] on November
+1st. The previously “beta” bundles have moved to the “release candidate” stage and
+are almost identical to the stable ones, except for the version of the tor
+daemon.
+
+The new bundles include all security fixes from Firefox 17.0.10esr [XXX], and
+updated versions of libpng, NoScript and HTTPS Everywhere. It also contains
+a handful of improvements and fixes to the Tor Browser patches.
+
+Users of older version of the Tor Browser bundles should already have been
+reminded to upgrade by the notification system. Don't forget about it!
+
+This should be the last bundles based on the 17 branch of Firefox as it is
+going to be superceded by the 24 branch as the new long-term supported version
+in 6 weeks. Major progress has already been made by Mike Perry and Perl
+Crescent to update the Tor Browser changes and review the new code base [XXX].
+
+ [XXX] https://blog.torproject.org/blog/new-tor-browser-bundles-firefox-17010esr
+ [XXX] https://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html#firefox17.0.10
+ [XXX] https://trac.torproject.org/projects/tor/query?keywords=~ff24-esr
Monthly status reports for October 2013
---------------------------------------
@@ -106,7 +130,6 @@
Possible items:
- * New bundles https://blog.torproject.org/blog/new-tor-browser-bundles-firefox-17010esr
* Tech report: Evaluation of a libutp-based Tor Datagram Implementation https://lists.torproject.org/pipermail/tor-dev/2013-October/005700.html
* use case and design for point-click-publishing HS https://lists.torproject.org/pipermail/tor-dev/2013-October/005703.html
* running Tor relay live with AddressSanitizer https://lists.torproject.org/pipermail/tor-relays/2013-October/003187.html
version 19
Author: lunar
Date: 2013-11-03T17:15:19+00:00
inline the report links
--- version 18
+++ version 19
@@ -37,17 +37,27 @@
[XXX] https://tails.boum.org/security/Numerous_security_holes_in_0.20.1/
[XXX] https://git-tails.immerda.ch/tails/plain/debian/changelog
-Monthly status reports for XXX month 2013
------------------------------------------
+Monthly status reports for October 2013
+---------------------------------------
The wave of regular monthly reports from Tor project members for the
-month of XXX has begun. XXX released his report first [XXX], followed
-by reports from name 2 [XXX], name 3 [XXX], and name 4 [XXX].
+month of October has begun early this time to reach the tor-reports
+mailing-list: Damian Johnson [XXX], Linus Nordberg [XXX], Karsten Loesing
+[XXX], Philipp Winter [XXX], Ximin Luo [XXX], Lunar [XXX], Kelley Misata [XXX],
+Matt Pagan [XXX], Sherief Alaa [XXX], Nick Mathewson [XXX], and Pearl
+Crescent [XXX].
- [XXX]
- [XXX]
- [XXX]
- [XXX]
+ [XXX] https://lists.torproject.org/pipermail/tor-reports/2013-October/000367.html
+ [XXX] https://lists.torproject.org/pipermail/tor-reports/2013-October/000369.html
+ [XXX] https://lists.torproject.org/pipermail/tor-reports/2013-October/000370.html
+ [XXX] https://lists.torproject.org/pipermail/tor-reports/2013-November/000371.html
+ [XXX] https://lists.torproject.org/pipermail/tor-reports/2013-November/000372.html
+ [XXX] https://lists.torproject.org/pipermail/tor-reports/2013-November/000373.html
+ [XXX] https://lists.torproject.org/pipermail/tor-reports/2013-November/000374.html
+ [XXX] https://lists.torproject.org/pipermail/tor-reports/2013-November/000375.html
+ [XXX] https://lists.torproject.org/pipermail/tor-reports/2013-November/000376.html
+ [XXX] https://lists.torproject.org/pipermail/tor-reports/2013-November/000377.html
+ [XXX] https://lists.torproject.org/pipermail/tor-reports/2013-November/000378.html
Miscellaneous news
------------------
@@ -96,18 +106,6 @@
Possible items:
- * Reports:
- Damian Johnson https://lists.torproject.org/pipermail/tor-reports/2013-October/000367.html
- Linus Nordberg https://lists.torproject.org/pipermail/tor-reports/2013-October/000369.html
- Karsten Loesing https://lists.torproject.org/pipermail/tor-reports/2013-October/000370.html
- Philipp Winter https://lists.torproject.org/pipermail/tor-reports/2013-November/000371.html
- Ximin Luo https://lists.torproject.org/pipermail/tor-reports/2013-November/000372.html
- Lunar https://lists.torproject.org/pipermail/tor-reports/2013-November/000373.html
- Kelley Misata https://lists.torproject.org/pipermail/tor-reports/2013-November/000374.html
- Matt Pagan https://lists.torproject.org/pipermail/tor-reports/2013-November/000375.html
- Sherief Alaa https://lists.torproject.org/pipermail/tor-reports/2013-November/000376.html
- Nick Mathewson https://lists.torproject.org/pipermail/tor-reports/2013-November/000377.html
- Pearl Crescent https://lists.torproject.org/pipermail/tor-reports/2013-November/000378.html
* New bundles https://blog.torproject.org/blog/new-tor-browser-bundles-firefox-17010esr
* Tech report: Evaluation of a libutp-based Tor Datagram Implementation https://lists.torproject.org/pipermail/tor-dev/2013-October/005700.html
* use case and design for point-click-publishing HS https://lists.torproject.org/pipermail/tor-dev/2013-October/005703.html
version 18
Author: lunar
Date: 2013-11-03T17:11:42+00:00
write about Tails 0.21
--- version 17
+++ version 18
@@ -12,14 +12,30 @@
Welcome to the nineteenth issue of Tor Weekly News, the weekly
newsletter that covers what is happening in the XXX Tor community.
-New Release of XXX
-------------------
+Tails 0.21 is out
+-----------------
-XXX: cite specific release date, numbers, and developers responsible
+The Tails developers anounced the 34th release [XXX] of the live system
+based on Debian and Tor that preserves the privacy and anonymity of its
+users.
-XXX: details about release
+The new version fixes two holes that gave too much power to the POSIX
+user running the desktop: Tor control port cannot be directly accessed
+anymore to disallow configuration changes and IP address retrieval, and
+the persistence settings now requires privileged access. On top of these
+specific changes, the release include security fixes [XXX] from the
+Firefox 10.0.10esr release and for a few other Debian packages.
- [XXX]
+More visible improvements include the ability to persist printer
+settings, support for running from more SD card reader types, and a
+panel launcher for the password manager. For the curious, more details
+can be found in the full changelog [XXX].
+
+As with every releases: be sure to upgrade!
+
+ [XXX] https://tails.boum.org/news/version_0.21/
+ [XXX] https://tails.boum.org/security/Numerous_security_holes_in_0.20.1/
+ [XXX] https://git-tails.immerda.ch/tails/plain/debian/changelog
Monthly status reports for XXX month 2013
-----------------------------------------
@@ -92,11 +108,10 @@
Sherief Alaa https://lists.torproject.org/pipermail/tor-reports/2013-November/000376.html
Nick Mathewson https://lists.torproject.org/pipermail/tor-reports/2013-November/000377.html
Pearl Crescent https://lists.torproject.org/pipermail/tor-reports/2013-November/000378.html
- * Tails 0.21 is out https://tails.boum.org/news/version_0.21/
* New bundles https://blog.torproject.org/blog/new-tor-browser-bundles-firefox-17010esr
* Tech report: Evaluation of a libutp-based Tor Datagram Implementation https://lists.torproject.org/pipermail/tor-dev/2013-October/005700.html
* use case and design for point-click-publishing HS https://lists.torproject.org/pipermail/tor-dev/2013-October/005703.html
* running Tor relay live with AddressSanitizer https://lists.torproject.org/pipermail/tor-relays/2013-October/003187.html
* Thunderbird and TorBirdy not using SOCKS5? https://lists.torproject.org/pipermail/tor-talk/2013-October/030913.html
* bananaphone PT https://lists.torproject.org/pipermail/tor-dev/2013-October/005694.html https://github.com/david415/obfsproxy/tree/david-bananaphone-nacl-hammertime https://github.com/leif/bananaphone
- * BridgeDB proposals https://lists.torproject.org/pipermail/tor-dev/2013-November/005713.html+ * BridgeDB proposals https://lists.torproject.org/pipermail/tor-dev/2013-November/005713.html
version 17
Author: lunar
Date: 2013-11-03T16:56:24+00:00
add item
--- version 16
+++ version 17
@@ -93,6 +93,7 @@
Nick Mathewson https://lists.torproject.org/pipermail/tor-reports/2013-November/000377.html
Pearl Crescent https://lists.torproject.org/pipermail/tor-reports/2013-November/000378.html
* Tails 0.21 is out https://tails.boum.org/news/version_0.21/
+ * New bundles https://blog.torproject.org/blog/new-tor-browser-bundles-firefox-17010esr
* Tech report: Evaluation of a libutp-based Tor Datagram Implementation https://lists.torproject.org/pipermail/tor-dev/2013-October/005700.html
* use case and design for point-click-publishing HS https://lists.torproject.org/pipermail/tor-dev/2013-October/005703.html
* running Tor relay live with AddressSanitizer https://lists.torproject.org/pipermail/tor-relays/2013-October/003187.html
--
Your friendly TWN monitoring script
In case of malfunction, please reach out for lunar at torproject.org
or for the worst cases, tell weasel at torproject.org to kill me.
More information about the news-team
mailing list