September 2011 - tor-commits - lists.torproject.org

r25140: {} add today's presentation (projects/presentations)
by Andrew Lewman 29 Sep '11

29 Sep '11

Author: phobos Date: 2011-09-29 16:14:46 +0000 (Thu, 29 Sep 2011) New Revision: 25140 Added: projects/presentations/2011-09-29-FCADV-data-security.pdf projects/presentations/2011-09-29-FCADV-data-security.tex Log: add today's presentation Added: projects/presentations/2011-09-29-FCADV-data-security.pdf =================================================================== (Binary files differ) Property changes on: projects/presentations/2011-09-29-FCADV-data-security.pdf ___________________________________________________________________ Added: svn:mime-type + application/octet-stream Added: projects/presentations/2011-09-29-FCADV-data-security.tex =================================================================== --- projects/presentations/2011-09-29-FCADV-data-security.tex (rev 0) +++ projects/presentations/2011-09-29-FCADV-data-security.tex 2011-09-29 16:14:46 UTC (rev 25140) @@ -0,0 +1,130 @@ +\documentclass{beamer} +\mode<presentation> +\usetheme{Boadilla} +\title{FCADV Data Security} +\author{Andrew Lewman \\ andrew(a)torproject.org} +\date{September 29, 2011} +\begin{document} + +\begin{frame} +\maketitle +\begin{center} +\includegraphics[height=3cm]{./images/2009-tor-logo} +\end{center} +\end{frame} + +\begin{frame} +\frametitle{What are we talking about?} +\begin{itemize} +\item Quick overview of data security and privacy +\item Securing data independent of location +\item Shelters, survivors, and Internets +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{} +\begin{quotation} +\noindent \includegraphics[width=1cm]{./images/opquo}\quad +Knowledge is power... Knowledge is happiness. +\end{quotation} +\bigskip +\textbf{Thomas Jefferson, 1817} +\end{frame} + +\begin{frame} +\frametitle{The Tor Project, Inc.} +501(c)(3) non-profit organization dedicated to the research and development of technologies for online anonymity and privacy +\begin{center} +\includegraphics[height=5cm]{./images/2009-oval_sticker_new} +\end{center} +\end{frame} + +\begin{frame} +\frametitle{Crashing into data security and privacy} +\begin{itemize} +\item Encryption +\pause \item Access controls +\pause \item Backups +\pause \item Masking +\pause \item Erasure +\pause \item ISO/IEC 27002 Standard +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Crashing into data security} +Follow the data itself. Ignore the technology used to touch it. +\end{frame} + +\begin{frame} +\frametitle{The life of a case file} +\begin{itemize} +\item Data is collected. +\item Data entered into ALICE. +\item Then what? +\pause \item who gets access to it? +\pause \item how is it transmitted to the next stop? +\pause \item where is it living? +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Forget Alice, think about the data} +\begin{itemize} +\item zip code, sex, date of birth are all that's needed to deanonymize someone +\item ALICE computers should be separate from any other networks, such as survivor networks in a shelter, or reachable from outside the shelter. +\item firewalls are just locks on a door, they stop honest people from going further. +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Securing data} +\begin{itemize} +\item disaster recovery, or where do I send a safe full of valuables? +\pause \item encryption? It should solve all my problems, right? +\pause \item how did you encrypt the case file? all as one big file, or individually? +\pause \item subpoena can force decryption +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Internet access in the shelter} +\begin{itemize} +\item survivors will find a way to connect to the 'net +\item may circumvent your controls to their own detriment +\item IP address gives them away +\item shared computer, cookies (browser, flash, dom, html5) +\item wifi access means everyone can get on it +\item private browsing mode is hardly private +\item use read-only operating systems, livecd/liveusb so no one can save + anything locally. Tor makes one of these, btw. +\item virtual machines +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{OMG nevar goin' on dar Internets again!} +\begin{itemize} +\item Risk assessment +\pause \item minimization of harm +\pause \item containment +\pause \item work with your vendors +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Questions?} +\begin{center} +\includegraphics[scale=1.0]{images/question-mark} +\end{center} +\end{frame} + +\begin{frame} +\frametitle{Copyrights} +\begin{itemize} +\item question mark, http://how-to-do-it.net/ +\end{itemize} +\end{frame} + +\end{document} \ No newline at end of file Property changes on: projects/presentations/2011-09-29-FCADV-data-security.tex ___________________________________________________________________ Added: svn:mime-type + text/x-tex

1 0

[arm/packaging] Dropping cagraph from arm exports
by atagar＠torproject.org 29 Sep '11

29 Sep '11

commit 6bf70593d32977b78789f509107509be717d889b Author: Damian Johnson <atagar(a)torproject.org> Date: Thu Sep 29 08:54:08 2011 -0700 Dropping cagraph from arm exports Removing cagraph from the package exports. This can be fetched dynamically if the user wants to try the gui prototype, the only gotcha being a likely permission issue during the fetch (I should clarify that message...). --- export.sh | 10 +++++----- 1 files changed, 5 insertions(+), 5 deletions(-) diff --git a/export.sh b/export.sh index ffa886a..ef33bd7 100755 --- a/export.sh +++ b/export.sh @@ -26,11 +26,11 @@ echo "5460adb1394c368ba492cc33d6681618b3d3062b3f5f70b2a87520fc291701c3 <- expect tar -C $exportDst/src -xzf torctl.tar.gz rm torctl.tar.gz -wget --quiet http://www.atagar.com/arm/resources/deps/11-06-10/cagraph.tar.gz -sha256sum cagraph.tar.gz -echo "1439acd40ce016f4329deb216d86f36a749e4b8bf73a313a757396af6f95310d <- expected" -tar -C $exportDst/src -xzf cagraph.tar.gz -rm cagraph.tar.gz +#wget --quiet http://www.atagar.com/arm/resources/deps/11-06-10/cagraph.tar.gz +#sha256sum cagraph.tar.gz +#echo "1439acd40ce016f4329deb216d86f36a749e4b8bf73a313a757396af6f95310d <- expected" +#tar -C $exportDst/src -xzf cagraph.tar.gz +#rm cagraph.tar.gz # the following installed torctl from its master repo rather than our # dependency mirror

1 0

[arm/master] Release notes for 1.4.4.1 hotfix release
by atagar＠torproject.org 29 Sep '11

29 Sep '11

commit 156d01c94ad993f39bb570a520ff936754991192 Author: Damian Johnson <atagar(a)torproject.org> Date: Thu Sep 29 08:44:37 2011 -0700 Release notes for 1.4.4.1 hotfix release --- ChangeLog | 4 ++++ 1 files changed, 4 insertions(+), 0 deletions(-) diff --git a/ChangeLog b/ChangeLog index 5ab7654..287ab57 100644 --- a/ChangeLog +++ b/ChangeLog @@ -37,6 +37,10 @@ Besides the normal bug fixes and minor features, this release introduces the con * fix: listener wasn't registering GUARD events * fix: dropping nonexistent ORCONN attributes * fix: clarifying the missing torrc message + * fix (9/29/11): dropping gtk/cagraph requirements (caught by monochromec, vinc3nt, and Bill White) + * fix (9/29/11): crash from esc in interpretor panel prompt (caught by Sebastian, https://trac.torproject.org/projects/tor/ticket/4098) + * fix (9/29/11): deduplicating 'Circuit build timeout' and 'looks like we don't need to wait so long' messages (patch by StrangeCharm, https://trac.torproject.org/projects/tor/ticket/4096) + * fix (9/29/11): forcing redraw on ctrl+L reguardless of need (caught by np, https://trac.torproject.org/projects/tor/ticket/2830) 7/16/11 - version 1.4.3 (6cf4836) This completes the codebase refactoring project that's been a year in the works and provides numerous performance and usability improvements. Most notably this includes a setup wizard for new relays, menuing interface, gui prototype, substantial performance improvements, and support for Mac OSX.

1 0

[arm/release] fix: replacing changelog 'ticket' entries w/ links
by atagar＠torproject.org 29 Sep '11

29 Sep '11

commit 28194cc5af6fddb431221b72a1278373d6acdc32 Author: Damian Johnson <atagar(a)torproject.org> Date: Mon Sep 26 07:10:52 2011 -0700 fix: replacing changelog 'ticket' entries w/ links Forgot to fill in the trac urls for the tickets when making the changelog for this last release. --- ChangeLog | 8 ++++---- src/version.py | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/ChangeLog b/ChangeLog index 472dd5d..5ab7654 100644 --- a/ChangeLog +++ b/ChangeLog @@ -11,12 +11,12 @@ Besides the normal bug fixes and minor features, this release introduces the con o /find option which searches the backlog for the given regex o /events option which displays any events that we've listened for o /write option which dumps the interpretor backlog to a file - * added: control socket support (feature request by dererk, ticket) - * added: optional system wide torrc integration (thanks to ioerror, ticket) + * added: control socket support (feature request by dererk, https://trac.torproject.org/projects/tor/ticket/3638) + * added: optional system wide torrc integration (thanks to ioerror, https://trac.torproject.org/projects/tor/ticket/3629) * added: dialog for guards, bridges, and exits with exit port usage and client locales (feature request by waltman and ioerror) * added: configuration editor for the gui interface (implemented by krkhan) * added: notice that warns the user against running tor or arm as root - * change: doing a manual redraw when the user presses ctrl+L (ticket) + * change: doing a manual redraw when the user presses ctrl+L (https://trac.torproject.org/projects/tor/ticket/2830) * change: moving download location to archive.torproject.org so downloads will have ssl (suggested by arma) * change: rewrite of the descriptor popup, cleaning up the code and minor performance improvements * fix: preventing arm from starting if there's a running tor instance that we can't connect to @@ -25,7 +25,7 @@ Besides the normal bug fixes and minor features, this release introduces the con * fix: skipping log parsing if misformatted (caught by Sjon) * fix: incorrect armrc path in man page (caught by dererk) * fix: toning down the warning when all connection resolvers fail (suggested by Sebastian) - * fix: quitting wizard when the user presses 'q' instead of just esc (suggested by monochromec, ticket) + * fix: quitting wizard when the user presses 'q' instead of just esc (suggested by monochromec, https://trac.torproject.org/projects/tor/ticket/3995) * fix: quitting could cause unclean curses shutdown * fix: relay address fetching would ignore default values at shutdown, causing a stacktrace * fix: concurrency bug could crash arm if a CIRC event occurs while caching attached relays diff --git a/src/version.py b/src/version.py index 8e7f493..0745fb9 100644 --- a/src/version.py +++ b/src/version.py @@ -2,6 +2,6 @@ Provides arm's version and release date. """ -VERSION = '1.4.5.0_dev' +VERSION = '1.4.5_dev' LAST_MODIFIED = "September 25, 2011"

1 0

[arm/release] Added log duplicate masks for longer-than-expected circuit build times and re-estimates of slow circuits.
by atagar＠torproject.org 29 Sep '11

29 Sep '11

commit 079201c6a0dec175823956d5490661ac742fb32b Author: Tom Lowenthal <me(a)tomlowenthal.com> Date: Sun Sep 25 20:30:58 2011 -0700 Added log duplicate masks for longer-than-expected circuit build times and re-estimates of slow circuits. --- src/settings.cfg | 9 +++++++++ 1 files changed, 9 insertions(+), 0 deletions(-) diff --git a/src/settings.cfg b/src/settings.cfg index 0e8f9dd..28c3008 100644 --- a/src/settings.cfg +++ b/src/settings.cfg @@ -272,6 +272,12 @@ config.summary.TestingEstimatedDescriptorPropagationTime Delay before clients at # 16 (79.193.61.171:443). # [INFO] rep_hist_downrate_old_runs(): Discounting all old stability info by a # factor of 0.950000 +# [NOTICE] Circuit build timeout of 96803ms is beyond the maximum build time we +# have ever observed. Capping it to 96107ms. +# The above NOTICE changes to an INFO message in maint-0.2.2 +# [NOTICE] Based on 1000 circuit times, it looks like we don't need to wait so +# long for circuits to finish. We will now assume a circuit is too slow +# to use after waiting 65 seconds. # [NOTICE] We stalled too much while trying to write 150 bytes to address # [scrubbed]. If this happens a lot, either something is wrong with # your network connection, or something is wrong with theirs. (fd 238, @@ -312,6 +318,9 @@ msg.DEBUG *pending in tls object). at_most msg.DEBUG connection_read_to_buf(): TLS connection closed on read. Closing. msg.INFO run_connection_housekeeping(): Expiring msg.INFO rep_hist_downrate_old_runs(): Discounting all old stability info by a factor of +msg.INFO *build time we have ever observed. Capping it to +msg.NOTICE *build time we have ever observed. Capping it to +msg.NOTICE *We will now assume a circuit is too slow to use after waiting msg.NOTICE We stalled too much while trying to write msg.NOTICE I learned some more directory information, but not enough to build a circuit msg.NOTICE Attempt by

1 0

[arm/release] fix: crash from esc in interpretor panel prompt
by atagar＠torproject.org 29 Sep '11

29 Sep '11

commit ed4bee53a3dd4258ced3168819656bff7d8f211f Author: Damian Johnson <atagar(a)torproject.org> Date: Wed Sep 28 07:31:43 2011 -0700 fix: crash from esc in interpretor panel prompt When the user presses 'esc' in the interpretor panel prompt the getstr result is None. I didn't account for this, causing a stacktrace. Caught by Sebastian. https://trac.torproject.org/projects/tor/ticket/4098 --- src/cli/interpretorPanel.py | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) diff --git a/src/cli/interpretorPanel.py b/src/cli/interpretorPanel.py index 37b9e58..246636c 100644 --- a/src/cli/interpretorPanel.py +++ b/src/cli/interpretorPanel.py @@ -70,6 +70,7 @@ class InterpretorPanel(panel.Panel): inputLine = min(self.maxY - 1, displayLength) inputFormat = getFormat(torInterpretor.INPUT_FORMAT) input = self.getstr(inputLine, xOffset, "", inputFormat, validator = validator) + if input == None: input = "" input, isDone = input.strip(), False if not input:

1 0

[arm/release] fix: forcing redraw on ctrl+L reguardless of need
by atagar＠torproject.org 29 Sep '11

29 Sep '11

commit ad8741d5f43b0ba441d094bc1dea9aa9a4354254 Author: Damian Johnson <atagar(a)torproject.org> Date: Wed Sep 28 10:12:27 2011 -0700 fix: forcing redraw on ctrl+L reguardless of need The ctrl+L keybinding is suppose to perform a redraw but this was only making a 'request' rather than forcing it, so unchanged portions of the interface weren't actually redrawn. Caught by np. https://trac.torproject.org/projects/tor/ticket/2830 --- src/cli/controller.py | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/src/cli/controller.py b/src/cli/controller.py index 4e6dc82..762f955 100644 --- a/src/cli/controller.py +++ b/src/cli/controller.py @@ -778,7 +778,7 @@ def drawTorMonitor(stdscr, startTime): cli.wizard.showWizard() elif key == ord('l') - 96: # force redraw when ctrl+l is pressed - control.redraw() + control.redraw(True) else: for panelImpl in displayPanels: isKeystrokeConsumed = panelImpl.handleKey(key)

1 0

[arm/release] Dropping gtk/cagraph requirements
by atagar＠torproject.org 29 Sep '11

29 Sep '11

commit 6829582006173469595a7690e3e2c71a61ce208c Author: Damian Johnson <atagar(a)torproject.org> Date: Thu Sep 29 08:20:40 2011 -0700 Dropping gtk/cagraph requirements The arm gui is still a prototype and shouldn't introduce requrements for end users, or even be packaged yet. This properly does dependency checks when the user *requsts* the gui (fetching cagraph if unavailable) so this should make everyone happy. :) --- install | 2 +- setup.py | 5 ++++- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/install b/install index 605f724..fead85c 100755 --- a/install +++ b/install @@ -1,5 +1,5 @@ #!/bin/sh -python src/prereq.py --both +python src/prereq.py if [ $? = 0 ]; then python setup.py -q install diff --git a/setup.py b/setup.py index 4513dee..bc97d00 100644 --- a/setup.py +++ b/setup.py @@ -6,6 +6,8 @@ import tempfile from src.version import VERSION from distutils.core import setup +INCLUDE_CAGRAPH = False + def getResources(dst, sourceDir): """ Provides a list of tuples of the form... @@ -93,8 +95,9 @@ if "install" in sys.argv: # When installing we include a bundled copy of TorCtl. However, when creating # a deb we have a dependency on the python-torctl package instead: # http://packages.debian.org/unstable/main/python-torctl -installPackages = ['arm', 'arm.cli', 'arm.cli.graphing', 'arm.cli.connections', 'arm.cli.menu', 'arm.gui', 'arm.gui.connections', 'arm.gui.graphing', 'arm.util', 'arm.cagraph', 'arm.cagraph.axis', 'arm.cagraph.series'] +installPackages = ['arm', 'arm.cli', 'arm.cli.graphing', 'arm.cli.connections', 'arm.cli.menu', 'arm.gui', 'arm.gui.connections', 'arm.gui.graphing', 'arm.util'] if not isDebInstall: installPackages.append('arm.TorCtl') +if INCLUDE_CAGRAPH: installPackages += ['arm.cagraph', 'arm.cagraph.axis', 'arm.cagraph.series'] setup(name='arm', version=VERSION,

1 0

[arm/release] Switching deb build from adding to removing pkgs
by atagar＠torproject.org 29 Sep '11

29 Sep '11

commit 054b1f29b1e651bf8141287c98da7e428b8129c7 Author: Damian Johnson <atagar(a)torproject.org> Date: Thu Sep 29 08:27:53 2011 -0700 Switching deb build from adding to removing pkgs It makes more sense for the deb flag to remove packages from the base install rather than the omission adding. The rpm builds will be doing something similar so making the tweak now so we can add the rpm flag to the torctl removal check. --- setup.py | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) diff --git a/setup.py b/setup.py index bc97d00..1f5d463 100644 --- a/setup.py +++ b/setup.py @@ -95,8 +95,8 @@ if "install" in sys.argv: # When installing we include a bundled copy of TorCtl. However, when creating # a deb we have a dependency on the python-torctl package instead: # http://packages.debian.org/unstable/main/python-torctl -installPackages = ['arm', 'arm.cli', 'arm.cli.graphing', 'arm.cli.connections', 'arm.cli.menu', 'arm.gui', 'arm.gui.connections', 'arm.gui.graphing', 'arm.util'] -if not isDebInstall: installPackages.append('arm.TorCtl') +installPackages = ['arm', 'arm.cli', 'arm.cli.graphing', 'arm.cli.connections', 'arm.cli.menu', 'arm.gui', 'arm.gui.connections', 'arm.gui.graphing', 'arm.util', 'arm.TorCtl'] +if isDebInstall: installPackages.remove('arm.TorCtl') if INCLUDE_CAGRAPH: installPackages += ['arm.cagraph', 'arm.cagraph.axis', 'arm.cagraph.series'] setup(name='arm',

1 0

[arm/release] Release notes for 1.4.4.1 hotfix release
by atagar＠torproject.org 29 Sep '11

29 Sep '11

commit 156d01c94ad993f39bb570a520ff936754991192 Author: Damian Johnson <atagar(a)torproject.org> Date: Thu Sep 29 08:44:37 2011 -0700 Release notes for 1.4.4.1 hotfix release --- ChangeLog | 4 ++++ 1 files changed, 4 insertions(+), 0 deletions(-) diff --git a/ChangeLog b/ChangeLog index 5ab7654..287ab57 100644 --- a/ChangeLog +++ b/ChangeLog @@ -37,6 +37,10 @@ Besides the normal bug fixes and minor features, this release introduces the con * fix: listener wasn't registering GUARD events * fix: dropping nonexistent ORCONN attributes * fix: clarifying the missing torrc message + * fix (9/29/11): dropping gtk/cagraph requirements (caught by monochromec, vinc3nt, and Bill White) + * fix (9/29/11): crash from esc in interpretor panel prompt (caught by Sebastian, https://trac.torproject.org/projects/tor/ticket/4098) + * fix (9/29/11): deduplicating 'Circuit build timeout' and 'looks like we don't need to wait so long' messages (patch by StrangeCharm, https://trac.torproject.org/projects/tor/ticket/4096) + * fix (9/29/11): forcing redraw on ctrl+L reguardless of need (caught by np, https://trac.torproject.org/projects/tor/ticket/2830) 7/16/11 - version 1.4.3 (6cf4836) This completes the codebase refactoring project that's been a year in the works and provides numerous performance and usability improvements. Most notably this includes a setup wizard for new relays, menuing interface, gui prototype, substantial performance improvements, and support for Mac OSX.

1 0