Hello tbb-devs. Here are a few divergent thoughts on presenting the Tor
Browser manual in a sensible manner for Tor Browser users. Please
provide feedback regarding whether any of these seem reasonable/feasible.
&&&&&&
0) Include a pdf file in an easy to locate place in the Tor Browser
directory.
Con: As discussed a couble IRC meetings ago, the major obstacle here is
that most Mac users do not know how to turn their Tor Browser app into a
directory, and so they would …
[View More]never see it. Not so good.
1) Replace the help desk email label in tor-launcher with a button,
which, when clicked, tells the user's system to open a local pdf file
with the system's default pdf viewer.
A con to this approach is that I don't know if it is even possible at
all; that is, I'm not sure if JS is capable of detecting what the
default application for a filetype is or, if it's not, I'm not sure it's
capable of just "opening a file" that needs to be opened with a
specific, local application.
2) The same as 1) but ship evince with Tor Browser and onClick, open a
pdf file with something like an `evince tb-manual.pdf` command.
A con to this approach would be that this might not work at all for
various non-Gnome GNU/Linux users. Also the Tor Browser is that much bigger.
3) Replace the help desk email label in tor-launcher with a button,
which, when clicked, opens a XUL window (like window.open) that contains
nothing but an iFrame which loads the the local index.html file (from
which the user can then navigate to all the other html pages because of
the manual's design)
con: ??.
This seems like a pretty possible thing to do right now. Is it? I could
not actually get my implementation of this idea even close to working,
but I also introduced a lot of new moving parts at once, and I'm still
getting the hang of debugging. This seems like it would be the most
user-friendly workflow of these various approaches.
4) Make the Tor Browser manual prominently available for download on the
Tor Browser download page as a pdf.
cons:
Now users have two things to verify to make sure they didn't just
download malware. Who's really going to do that for a pdf file, anyway?
I think most users are quite used to a download being one thing, and not
two (or three). I'm not sure it's reasonable to expect that all users
will download a separate manual. This is not a great workflow. Users
could just open the pdf file in the browser they used to download Tor
Browser, though.
5) Direct users to https://tb-manual.torproject.org/, which weasel just
set up. This could either be done from the download page or a non-wired
link in tor-launcher.
cons: I think fewer users would actually see the manual this way, and
this distribution method would probably be less effective at reducing
load on the help desk for similar reasons to 4). We've had the the Short
User Manual on our web infrastructure for some time and most users do
not know it exists. Although maybe that was an advertising problem?
******
I'm not a huge fan of 4) or 5), as they don't actually solve the problem
of distributing a manual with Tor Browser. I've included them for
completeness, nonetheless.
Also there are probably ways of getting the tor browser manual in the
hands of users that I'm not thinking of. Any other ideas? Do you like
any of the above ideas?
The relevant ticket here is
https://trac.torproject.org/projects/tor/ticket/11698
--
Matt Pagan
PGP: 0xE9284418E360583C
[View Less]
Hello,
While discussing during the IRC meeting last friday about mbox integration
in the tests suite to monitor connections made by the tor browser, we
noticed that it opens 2 connections to the dns server, and 2 to the
default tor socks port even when it is set to an other port with the
TOR_SOCKS_PORT environment variable:
https://people.torproject.org/~boklm/tmp/tests/r/4mrXwR46_6/tor-browser-lin…
So I have been looking at why it is doing this.
I have been looking at the browser source …
[View More]code to understand why it does
a dns request to resolve the hostname of the machine, and found this:
https://gitweb.torproject.org/tor-browser.git/blob/90a58a42063dcd56e2943565…
Before starting the browser it wants to create a lock file in the
profile directory, which is a symlink pointing to the IP of the machine,
so this is probably the reason why it's doing a dns request.
Adding the hostname in /etc/hosts fixed the problem. Or for
distributions that use libnss_myhostname (such as Fedora 20), editing
/etc/nsswitch.conf to move 'myhostname' first on the hosts line.
For the connections on port 9150, here is how to reproduce it:
$ tar xvf tor-browser-linux64-3.6.1_en-US.tar.xz
$ cd tor-browser_en-US
$ sed -i s/9150/9550/ Data/Tor/torrc-defaults
$ export TOR_SOCKS_PORT=9550
$ ./start-tor-browser
Running 'tcpdump -i lo port 9150' in an other shell at the same time
shows some connections on this port. Looking with wireshark shows that
it is a connection to check.torproject.org.
It only happens with a new profile on the first run (when
Data/Browser/profile.default/prefs.js has not been created yet).
If I create a file Data/Browser/profile.default/prefs.js to define
extensions.torbutton.socks_port, there is no connection to port 9150:
[View Less]
