- tbb-dev - lists.torproject.org

Tor unable to parse Bridge setting if using domain
by Hikari 28 Aug '19

28 Aug '19

Hello everybody! Sorry if I'm asking on the wrong list. I'm using Tor Expert in Win10 to bypass my office's firewall. It has multiple level of blocks: domains, IPs and ports. Most bridges I get from BridgesDB are blocked, but over time I've found a few that work there. I had setup a Tor bridge on my home server. When I test it using 4G it works. It happens that my ISP's dynamic IPs are blocked too. I managed to find a domain I can use and isn't blocked, so when I go to my server's web server using its IP I get blocked, but when I go using my domain I'm able to browse it. Now I'm strugging to get Tor client at office to connect to my Tor bridge at home. If I use|Bridge 51.113.0.17:80|(a obfuscated IP, not the current one) it fails as happens with most bridges on BridgeDB. But when I use|Bridge hikari.mydomain.com:80|(which works if accessed from a browser on port 8080) I get|Error parsing Bridge address 'hikari.mydomain.com:80'. Failed to parse/validate config: Bridge line did not parse.| Any idea why it's not parsing domains on bridge setting?

2 2

esr68 Tor Browser build downloads?
by Rusty Bird 22 Aug '19

22 Aug '19

Hi, Are there any download links for unofficial (or semi-official) Tor Browser builds based on Firefox ESR 68? Some sort of pre-alpha nightly build server output maybe. Or just whatever you have lying around. :) Rusty

4 6

Debugging/Seeing the trace of an execution of WebGL code
by Rishabh Raj 26 Jun '19

26 Jun '19

Hello everyone, I am working on making some changes to the WebGL part of Tor Browser's source code. But each WebGL API goes through multiple files and functions in the browser's source code. So, before I can start changing them, I would need to know how exactly the transfer of data takes place. To be more clear, I start with a program which draws a rectangle (vertices have different colors, so interpolation takes place). Take for example the function `bufferData()`, which sends the data to the GPU. Once the shader code or vertices/indices data is sent to the GPU, I am helpless, isn't it? I need to be able to hook before this and analyze the various function calls in different source code files and the data parameters that are circulating through (of course it is not just one API, but a whole bunch of JavaScript API's that have to be executed before something is drawn). So, how do I figure this out? Initially, I had tried using a bunch of fprintf's, but I always get lost after, say `fBufferData()` [I noticed that many `API()` end up with `fAPI()` in the source code]. In addition, I couldn't figure out when the ANGLE part comes into the picture since I tried putting fprintf's in there as well, but nothing got printed. Basically I am trying to find the right place to hook, just after all calculations on the data are done and before the control is sent to the GPU. So, do I have to attach a debugger, say gdb, to a running instance of tor-browser (incidentally, there are three processes that commence when tor browser is run). Basically, I need some help figuring out how to put all of this together. I would really appreciate if you could provide me with some suggestions. Warm Regards, Rishabh

2 2

proposal for #10760 (Integrate TorButton to TorBrowser core ...)
by Alex Catarineu 13 Jun '19

13 Jun '19

A draft proposal for #10760 (Integrate TorButton to TorBrowser core to prevent users from disabling it) is attached. This should already address some review comments in https://trac.torproject.org/projects/tor/ticket/10760#comment:36. Feedback appreciated! -- Alex Catarineu Tor Browser Developer acat at torproject dot org gpg 3F5B D76C 2C9B D09B F4A8 0AB0 75DC D26C 3A21 2E9A

2 3

TargetPrincipalDoesNotMatch message from postMessage in JS Console even though target / recipient origins match.
by Dan Bryant 12 Jun '19

12 Jun '19

Is this an intentional veto of the windows.postMessage API? Understandable if it is, but I failed to see where it was implemented or how to override it (to re-enable postMessage). This error shows up when trying to use the TREZOR cryptocurrency wallet on https://www.MyCrypto.com (a popular ethereum wallet). The problem arises when www.mycrypto.com tries to authorize through connect.trezor.io. The authorization is performed through window.postMessage communication channel. The text of the error in the JS Console is obviously the TargetPrincipalDoesNotMatch message (ref1, line 249). There is only one spot that this message is presented in the postMessage workflow (ref2, line 128). This is only called in a failed equality check, which, according to the message text, shouldn't have failed (ref3). Since all origins mentioned match "https://connect.trezor.io" I'm curious as to why the equality check (ref3, line 96) would have failed. Anyway, I'll be happy to open this as a ticket, I just didn't know if this was a known exclusion that is somehow setup upstream of this call. ## JS Console Message --- Failed to execute ‘postMessage’ on ‘DOMWindow’: The target origin provided (‘https://connect.trezor.io’) does not match the recipient window’s origin (‘https://connect.trezor.io’). --- ## Reference git: https://gitweb.torproject.org/tor-browser.git branch: tor-browser-60.7.0esr-8.5-1 ref1: /dom/locales/en-US/chrome/dom/dom.properties : 249 ref2: /dom/base/PostMessageEvent.cpp?h=tor-browser-60.7.0esr-8.5-1 : 128 ref3: /dom/base/PostMessageEvent.cpp?h=tor-browser-60.7.0esr-8.5-1 : 96

2 1

Building Tor Browser (Firefox)
by Rishabh Raj 29 May '19

29 May '19

Hello, I had previously sent a similar mail on tbb-community-team. But Georg advised me to send it on tbb-dev. So here I am. I am actually working on modifying some parts of Tor Browser for my project and for that I will need to build Tor Browser's source code. I was following this website <https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Hacking> (Georg has updated it now) and after cloning tor-browser-build repo, I did a |make nightly-linux-x86_64|, which took almost half a day to complete on my Ubuntu 18.04 system. But, since I would be making some changes to the browser (mostly Firefox code), I need to alter code and build again and again. In the above website, there is an option for '*Building Just Firefox*' and I am trying that. Coming to the updated wiki, I think there might still be some issues there. Allow me to make myself clearer: (1) Installation of packages. Some of them may be deprecated. For example I get this after running the command : ||| Reading package lists... Done Building dependency tree Reading state information... Done Package hardening-wrapper is not available, but is referred to by another package. This may mean that the package is missing, has been obsoleted, or is only available from another source E: Package 'hardening-wrapper' has no installation candidate E: Unable to locate package libgstreamer-plugins-base0.10-dev E: Couldn't find any package by glob 'libgstreamer-plugins-base0.10-dev' E: Couldn't find any package by regex 'libgstreamer-plugins-base0.10-dev' ||| (2) Assuming this is not the issue, I proceeded and made the new file |.mozconfig| and copied the given two lines into it, cloned and moved the tor-launcher as well and ran the |./mach configure --with-tor-...| command, which gives: ||| 0:04.24 checking whether the target C compiler can be used... yes 0:04.24 Traceback (most recent call last): 0:04.24 File "/home/hackyou/Desktop/tor-browser/configure.py", line 127, in <module> 0:04.24 sys.exit(main(sys.argv)) 0:04.24 File "/home/hackyou/Desktop/tor-browser/configure.py", line 29, in main 0:04.25 sandbox.run(os.path.join(os.path.dirname(__file__), 'moz.configure')) 0:04.25 File "/home/hackyou/Desktop/tor-browser/python/mozbuild/mozbuild/configure/__init__.py", line 424, in run 0:04.25 raise InvalidOptionError('Unknown option: %s' % without_value) 0:04.25 mozbuild.configure.options.InvalidOptionError: Unknown option: --with-tor-browser-version 0:04.28 *** Fix above errors and then restart with\ 0:04.28 "/usr/bin/make -f client.mk build" 0:04.29 client.mk:145: recipe for target 'configure' failed 0:04.29 make: *** [configure] Error 1 ||| I think the option "--with-tor-browser-version" is unknown as given in the error message. I removed that option and tried again and I get this error. ||| 0:02.61 checking rustc version... 1.34.2 0:02.63 checking cargo version... 1.34.0 0:02.68 Traceback (most recent call last): 0:02.68 File "/home/hackyou/Desktop/tor-browser/configure.py", line 127, in <module> 0:02.68 sys.exit(main(sys.argv)) 0:02.68 File "/home/hackyou/Desktop/tor-browser/configure.py", line 29, in main 0:02.68 sandbox.run(os.path.join(os.path.dirname(__file__), 'moz.configure')) 0:02.68 File "/home/hackyou/Desktop/tor-browser/python/mozbuild/mozbuild/configure/__init__.py", line 428, in run 0:02.68 func(*args) 0:02.68 File "/home/hackyou/Desktop/tor-browser/python/mozbuild/mozbuild/configure/__init__.py", line 474, in _value_for 0:02.68 return self._value_for_depends(obj, need_help_dependency) 0:02.68 File "/home/hackyou/Desktop/tor-browser/python/mozbuild/mozbuild/util.py", line 944, in method_call 0:02.68 cache[args] = self.func(instance, *args) 0:02.68 File "/home/hackyou/Desktop/tor-browser/python/mozbuild/mozbuild/configure/__init__.py", line 483, in _value_for_depends 0:02.68 return obj.result(need_help_dependency) 0:02.68 File "/home/hackyou/Desktop/tor-browser/python/mozbuild/mozbuild/util.py", line 944, in method_call 0:02.68 cache[args] = self.func(instance, *args) 0:02.68 File "/home/hackyou/Desktop/tor-browser/python/mozbuild/mozbuild/configure/__init__.py", line 123, in result 0:02.68 return self._func(*resolved_args) 0:02.68 File "/home/hackyou/Desktop/tor-browser/python/mozbuild/mozbuild/configure/__init__.py", line 1003, in wrapped 0:02.68 return new_func(*args, **kwargs) 0:02.68 File "/home/hackyou/Desktop/tor-browser/build/moz.configure/rust.configure", line 122, in rust_supported_targets 0:02.68 t = split_triplet(t, allow_unknown=True) 0:02.68 File "/home/hackyou/Desktop/tor-browser/python/mozbuild/mozbuild/configure/__init__.py", line 1003, in wrapped 0:02.68 return new_func(*args, **kwargs) 0:02.68 File "/home/hackyou/Desktop/tor-browser/build/moz.configure/init.configure", line 580, in split_triplet 0:02.68 cpu, manufacturer, os = triplet.split('-', 2) 0:02.68 ValueError: need more than 2 values to unpack 0:02.72 *** Fix above errors and then restart with\ 0:02.72 "/usr/bin/make -f client.mk build" 0:02.72 client.mk:145: recipe for target 'configure' failed 0:02.72 make: *** [configure] Error 1 ||| Georg had suggested that it should run without patching <https://hg.mozilla.org/integration/autoland/rev/36f4ba2fb6f5> the |init.configure| file, where the error has occurred. But it is not happening for me. I hope I can get some help here as I have been stuck for quite a while now. Kindly help me out. Warm Regards, Rishabh Raj

2 4

Next weekly Tor Browser meeting on 5/28 1730 UTC in #tor-meeting2
by Georg Koppen 26 May '19

26 May '19

Hello! Just as a reminder of what we decided on our last weekly Tor Browser meeting: there is no meeting on the next Monday, 5/27, due to a public holiday in the US (Memorial Day). We therefore moved our next weekly meeting to 5/28 1730 UTC in #tor-meeting2. So, place and time stay the same, it's just a Tuesday this time to update each other on what we are working on. See you there, Georg

1 0

EFFs privacy badger, tracking protection
by Chris Hemsing 21 May '19

21 May '19

Take standard firefox, install eff.org's privacy badge and check the tracking with: https://panopticlick.eff.org/ The result is: Protection from tracking is fine with the exception of fingerprinting. They recommend using the tor browser to defend against browser fingerprinting!! Next you take tor browser and have tracking checked with https://panopticlick.eff.org/. Of course, now the result is: the are gaps in the protection against tracking but protection against fingerprinting is fine. This means, ou should install "privacy badge". But next tor browser prevents the installation of "privacy badge"! Bang! Thus, either a) don't use tor browser and have tracking protection with the exception of fingerprinting, or b) use tor browser and have many gaps in tracking protection. As installing privacy badge used to work in the past, I fear the impossibility of installing privacy badge is a feature rather than a bug. So you end up with being tracked with or without out using the tor browser!! My proposal would be to integrate "privacy badger" just as it is the case with "HTTPS Everywhere". Chris

2 2

proposal for #28044 (Integrate Tor Launcher into tor-browser)
by Mark Smith 19 May '19

19 May '19

A draft proposal for #28044 (Integrate Tor Launcher into tor-browser) is attached. Your feedback is welcome and appreciated! -- Mark Smith Pearl Crescent http://pearlcrescent.com/

4 8

User Safety Proposals
by Tom Ritter 24 Apr '19

24 Apr '19

I have updated the attached proposals from our last conversation and I'd like to request they be committed to the tbb-dev proposal repository. -tom

2 3