December 2013 - tor-commits - lists.torproject.org

[tor/master] Merge remote-tracking branch 'linus/bug10324'
by nickm＠torproject.org 20 Dec '13

20 Dec '13

commit b98c5884fc28c4c2b4871d00bd6eeb78fadab3f3 Merge: 85284c3 129f26e Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Dec 20 11:40:21 2013 -0500 Merge remote-tracking branch 'linus/bug10324' changes/bug10324 | 2 ++ src/tools/tor-gencert.c | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-)

1 0

[tor-browser/tor-browser-24.2.0esr-1] fixup! Tor Browser's official .mozconfigs.
by mikeperry＠torproject.org 20 Dec '13

20 Dec '13

commit a451d459fa5e1449c21d129a9706b792d0b6b3ec Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Fri Dec 20 02:58:25 2013 -0600 fixup! Tor Browser's official .mozconfigs. Accessibility support now builds under MinGW! Sadly, WebGL still does not. --- .mozconfig-mingw | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.mozconfig-mingw b/.mozconfig-mingw index 1f88406..2cfcf09 100644 --- a/.mozconfig-mingw +++ b/.mozconfig-mingw @@ -22,8 +22,8 @@ ac_add_options --disable-maintenance-service ac_add_options --disable-webrtc ac_add_options --disable-tests -# XXX: So close.. Undefined ref to _IID_IAccessible during linking -ac_add_options --disable-accessibility +# Accessibility now builds under MinGw. WebGL still doesn't :/. +#ac_add_options --disable-accessibility ac_add_options --disable-webgl #ac_add_options --disable-ctypes

1 0

r26501: {website} Other Vidalia and Tor Browser related tweaks (not the last, (website/trunk/docs/en)
by Matt Pagan 20 Dec '13

20 Dec '13

Author: mttp Date: 2013-12-20 07:00:17 +0000 (Fri, 20 Dec 2013) New Revision: 26501 Modified: website/trunk/docs/en/faq.wml Log: Other Vidalia and Tor Browser related tweaks (not the last, I'm sure). Modified: website/trunk/docs/en/faq.wml =================================================================== --- website/trunk/docs/en/faq.wml 2013-12-20 06:34:06 UTC (rev 26500) +++ website/trunk/docs/en/faq.wml 2013-12-20 07:00:17 UTC (rev 26501) @@ -1513,26 +1513,14 @@ </p> <p> If you installed Tor Browser Bundle, look for -<code>Data/Tor/torrc</code> inside your Tor Browser Bundle directory. If -you installed core Tor, you'll find your torrc file elsewwhere on your system: -</li> -<li>On Windows, Tor will put your torrc file in either <code>\Documents -and Settings\Application Data\tor\torrc</code> or <code>\Documents and -Settings\<i>username</i>\Application Data\tor\torrc</code>. -</li> -<li>On OS X, open your favorite text editor -and load <code>/Library/Tor/torrc</code>. -</li> -<li>On Unix, if you installed a pre-built package, look for -<code>/etc/tor/torrc</code> or <code>/etc/torrc</code> or consult your -package's documentation. If you installed from source, look in -<code>/usr/local/etc/tor/torrc</code>. -</li> -</ul> +<code>Data/Tor/torrc</code> inside your Tor Browser Bundle directory. +</p> +<p> +Core tor puts the torrc file in <code>/usr/local/etc/tor/torrc</code> if you compiled tor from source, and <code>/etc/tor/torrc</code> or <code>/etc/torrc</code> if you installed a pre-built package.</p> <p> -Once you've changed your torrc, you will need to restart Tor for the -changes to take effect. (For advanced users on OS X and Unix, note that +Once you've changed your torrc, you will need to restart tor for the +changes to take effect. (For advanced users, note that you actually only need to send Tor a HUP signal, not actually restart it.) </p> @@ -3170,8 +3158,8 @@ code. The full design of the Tor Browser can be read <a href="https://www.torproject.org/projects/torbrowser/design/">here</a>. In designing a safe, secure solution for browsing the web with Tor, - we've discovered that configuring <a href="#TBBOtherBrowser">any - browser</a> to use Tor by hand is unsafe. + we've discovered that configuring <a href="#TBBOtherBrowser">other + browsers</a> to use Tor is unsafe. </p> <p>

1 0

r26500: {website} Removed references to Vidalia from the torrc entry. (website/trunk/docs/en)
by Matt Pagan 20 Dec '13

20 Dec '13

Author: mttp Date: 2013-12-20 06:34:06 +0000 (Fri, 20 Dec 2013) New Revision: 26500 Modified: website/trunk/docs/en/faq.wml Log: Removed references to Vidalia from the torrc entry. Modified: website/trunk/docs/en/faq.wml =================================================================== --- website/trunk/docs/en/faq.wml 2013-12-20 05:31:32 UTC (rev 26499) +++ website/trunk/docs/en/faq.wml 2013-12-20 06:34:06 UTC (rev 26500) @@ -1509,57 +1509,28 @@ <p> Tor installs a text file called torrc that contains configuration instructions for how your Tor program should behave. The default -configuration should work fine for most Tor users. Users of Vidalia can -make common changes through the Vidalia interface — only advanced -users should need to modify their torrc file directly. +configuration should work fine for most Tor users. </p> <p> -Tor Browser Bundle users should edit your torrc through Vidalia. Open -the -Vidalia Control Panel. Choose Settings. Choose Advanced. Click the -button -labelled "Edit current torrc". Remember to make sure the checkbox for -"Save Settings." is checked. Hit the Ok button and you are done. -</p> -<p> -Otherwise, you will need to edit the file manually. -The location of your torrc file depends on the way you installed Tor: -</p> -<ul> -<li>If you installed Tor Browser Bundle, look for -<code>Data/Tor/torrc</code> inside your Tor Browser Bundle directory. +If you installed Tor Browser Bundle, look for +<code>Data/Tor/torrc</code> inside your Tor Browser Bundle directory. If +you installed core Tor, you'll find your torrc file elsewwhere on your system: </li> -<li>On Windows, if you installed a Tor bundle with Vidalia, you can -find your torrc file in the Start menu under Programs -> Vidalia -Bundle -> Tor, or you can find it by hand in <code>\Documents and -Settings\<i>username</i>\Application Data\Vidalia\torrc</code>. If you -installed Tor without Vidalia, you can find your torrc in the Start -menu under Programs -> Tor, or manually in either <code>\Documents +<li>On Windows, Tor will put your torrc file in either <code>\Documents and Settings\Application Data\tor\torrc</code> or <code>\Documents and Settings\<i>username</i>\Application Data\tor\torrc</code>. </li> -<li>On OS X, if you use Vidalia, edit -<code>~/.vidalia/torrc</code>. Otherwise, open your favorite text editor +<li>On OS X, open your favorite text editor and load <code>/Library/Tor/torrc</code>. </li> <li>On Unix, if you installed a pre-built package, look for <code>/etc/tor/torrc</code> or <code>/etc/torrc</code> or consult your -package's documentation. +package's documentation. If you installed from source, look in +<code>/usr/local/etc/tor/torrc</code>. </li> -<li>Finally, if you installed from source, you may not have a torrc -installed yet: look in <code>/usr/local/etc/</code> and note that you -may need to manually copy <code>torrc.sample</code> to -<code>torrc</code>. -</li> </ul> <p> -If you use Vidalia, be sure to exit both Tor and Vidalia before you edit -your torrc file manually. Otherwise Vidalia might overwrite your -changes. -</p> - -<p> Once you've changed your torrc, you will need to restart Tor for the changes to take effect. (For advanced users on OS X and Unix, note that you actually only need to send Tor a HUP signal, not actually restart @@ -3199,8 +3170,8 @@ code. The full design of the Tor Browser can be read <a href="https://www.torproject.org/projects/torbrowser/design/">here</a>. In designing a safe, secure solution for browsing the web with Tor, - we've discovered that configuring any other browser for use with Tor <a - href="#TBBOtherBrowser">is not safe</a>. + we've discovered that configuring <a href="#TBBOtherBrowser">any + browser</a> to use Tor by hand is unsafe. </p> <p>

1 0

r26499: {website} announce tbb 3.5, and also point to the transition faq (website/trunk/en)
by Roger Dingledine 20 Dec '13

20 Dec '13

Author: arma Date: 2013-12-20 05:31:32 +0000 (Fri, 20 Dec 2013) New Revision: 26499 Modified: website/trunk/en/index.wml Log: announce tbb 3.5, and also point to the transition faq Modified: website/trunk/en/index.wml =================================================================== --- website/trunk/en/index.wml 2013-12-20 00:42:12 UTC (rev 26498) +++ website/trunk/en/index.wml 2013-12-20 05:31:32 UTC (rev 26499) @@ -158,14 +158,14 @@ <table> <tr> <td> - <div class="calendar"><span class="month">Dec</span><br><span class="day">17</span></div> - <p>The Tor Project is now accepting Bitcoin Donations. Read the <a href="https://blog.torproject.org/blog/announcement-tor-project-now-accepting-bit…">announcement</a>.</p> + <div class="calendar"><span class="month">Dec</span><br><span class="day">18</span></div> + <p>Tor Browser Bundle 3.5 Released. Read the <a href="https://blog.torproject.org/blog/tor-browser-bundle-35-released">release notice</a> and the <a href="https://trac.torproject.org/projects/tor/wiki/doc/TorBrowserBundle3FAQ">transition FAQ</a>.</p> </td> </tr> <tr> <td> - <div class="calendar"><span class="month">Dec</span><br><span class="day">12</span></div> - <p>Tor Browser Bundle 3.5rc1 Released. Read the <a href="https://blog.torproject.org/blog/tor-browser-bundle-35rc1-released">release notice</a>.</p> + <div class="calendar"><span class="month">Dec</span><br><span class="day">17</span></div> + <p>The Tor Project is now accepting Bitcoin Donations. Read the <a href="https://blog.torproject.org/blog/announcement-tor-project-now-accepting-bit…">announcement</a>.</p> </td> </tr> <tr>

1 0

r26498: {website} Added three FAQ entries; fixed a typo. (website/trunk/docs/en)
by Matt Pagan 20 Dec '13

20 Dec '13

Author: mttp Date: 2013-12-20 00:42:12 +0000 (Fri, 20 Dec 2013) New Revision: 26498 Modified: website/trunk/docs/en/faq.wml Log: Added three FAQ entries; fixed a typo. Modified: website/trunk/docs/en/faq.wml =================================================================== --- website/trunk/docs/en/faq.wml 2013-12-19 18:41:09 UTC (rev 26497) +++ website/trunk/docs/en/faq.wml 2013-12-20 00:42:12 UTC (rev 26498) @@ -90,6 +90,11 @@ been compromised.</a></li> <li><a href="#NeedToUseAProxy">My internet connection requires an HTTP or SOCKS Proxy</a></li> + <li><a href="#CantSetProxy">What should I do if I can't set a proxy + with my application?</a></li> + <li><a href="#WarningsAboutSOCKSandDNSInformationLeaks">I keep seeing + these warnings about SOCKS and DNS information leaks. Should I + worry?</a></li> </ul> <p>Advanced Tor usage:</p> @@ -180,6 +185,8 @@ provide?</a></li> <li><a href="#CanExitNodesEavesdrop">Can exit nodes eavesdrop on communications? Isn't that bad? </a></li> + <li><a href="#AmITotallyAnonymous">So I'm totally anonymous if I use + Tor?</a></li> <li><a href="#ExitEnclaving">What is Exit Enclaving?</a></li> <li><a href="#KeyManagement">Tell me about all the keys Tor uses.</a></li> @@ -1402,8 +1409,8 @@ <hr> <a id="NeedToUseAProxy"></a> -<h3><a class="anchor" href="#NeedToUseAProxy">My internet connection requires an HTTP - or SOCKS Proxy</a></h3> +<h3><a class="anchor" href="#NeedToUseAProxy">My internet connection +requires an HTTP or SOCKS Proxy</a></h3> <p> You can set Proxy IP address, port, and authentication information in @@ -1417,9 +1424,9 @@ Socks4Proxy and Socks5Proxy. </p> <p> -Also check out HTTPProxyAuthenticator and HTTPSProxyAuthenticator if your -proxy requires auth. We only support basic auth currently, but if you need -NTLM authentication, you find <a +Also read up on the HTTPProxyAuthenticator and HTTPSProxyAuthenticator +options if your proxy requires auth. We only support basic auth currently, +but if you need NTLM authentication, you may find <a href="http://archives.seul.org/or/talk/Jun-2005/msg00223.html">this post in the archives</a> useful. </p> @@ -1431,6 +1438,70 @@ <hr> +<a id="CantSetProxy"></a> +<h3><a class="anchor" href="#CantSetProxy">What should I do if I can't +set a proxy with my application?</a></h3> + +<p> +On Unix, we recommend you give <a +href="https://github.com/dgoulet/torsocks/">torsocks</a> a try. +Alternative proxifying tools like <a +href="http://www.dest-unreach.org/socat/">socat</a> and <a +href="http://proxychains.sourceforge.net/">proxychains</a> are also +available.</p> +<p> +The Windows way to force applications through Tor is less clear. <a +href="http://freecap.ru/eng/">Some</a> <a +href="http://www.freehaven.net/~aphex/torcap/">tools</a> have been <a +href="http://www.crowdstrike.com/community-tools/index.html#tool-79">proposed +</a>, but we'd also like to see further testing done here. +</p> + +<hr> + +<a id="WarningsAboutSOCKSandDNSInformationLeaks"></a> +<h3><a class="anchor" href="#WarningsAboutSOCKSandDNSInformationLeaks">I +keep seeing these warnings about SOCKS and DNS information leaks. +Should I worry?</a></h3> +<p> +The warning is: +</p> +<p> +Your application (using socks5 on port %d) is giving Tor only an IP address. Applications that do DNS resolves themselves may leak information. Consider using Socks4A (e.g. via Polipo or socat) instead. +</p> +<p> +If you are running Tor to get anonymity, and you are worried about an attacker who is even slightly clever, then yes, you should worry. Here's why. +</p> +<p> +<b>The Problem.</b> When your applications connect to servers on the Internet, they need to resolve hostnames that you can read (like www.torproject.org) into IP addresses that the Internet can use (like 209.237.230.66). To do this, your application sends a request to a DNS server, telling it the hostname it wants to resolve. The DNS server replies by telling your application the IP address. +</p> +<p> +Clearly, this is a bad idea if you plan to connect to the remote host anonymously: when your application sends the request to the DNS server, the DNS server (and anybody else who might be watching) can see what hostname you are asking for. Even if your application then uses Tor to connect to the IP anonymously, it will be pretty obvious that the user making the anonymous connection is probably the same person who made the DNS request. +</p> +<p> +<b>Where SOCKS comes in.</b> Your application uses the SOCKS protocol to connect to your local Tor client. There are 3 versions of SOCKS you are likely to run into: SOCKS 4 (which only uses IP addresses), SOCKS 5 (which usually uses IP addresses in practice), and SOCKS 4a (which uses hostnames). +</p> +<p> +When your application uses SOCKS 4 or SOCKS 5 to give Tor an IP address, Tor guesses that it 'probably' got the IP address non-anonymously from a DNS server. That's why it gives you a warning message: you probably aren't as anonymous as you think. +</p> +<p> +<b>So what can I do?</b> We describe a few solutions below. +</p> +<ul> +<li>If your application speaks SOCKS 4a, use it. </li> +<li>If you only need one or two hosts, or you are good at programming, you may be able to get a socks-based port-forwarder like socat to work for you; see <a href="https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO">the Torify HOWTO</a> for examples. </li> +<li>Tor ships with a program called tor-resolve that can use the Tor network to look up hostnames remotely; if you resolve hostnames to IPs with tor-resolve, then pass the IPs to your applications, you'll be fine. (Tor will still give the warning, but now you know what it means.) </li> + +</ul> +<p> + If you think that you applied one of the solutions properly but still experience DNS leaks please verify there is no third-party application using DNS independently of Tor. Please see <a href="#AmITotallyAnonymous">the FAQ entry on whether you're really absolutely anonymous using Tor</a> for some examples. +</p> + +<hr> + <a id="torrc"></a> <h3><a class="anchor" href="#torrc">I'm supposed to "edit my torrc". What does that mean?</a></h3> @@ -3085,8 +3156,71 @@ <hr> + <a id="AmITotallyAnonymous"></a> + <h3><a class="anchor" href="#AmITotallyAnonymous">So I'm totally anonymous + if I use Tor?</a></h3> + + <p> + <b>No.</b> + </p> + <p> + First, Tor protects the network communications. It separates where you + are from where you are going on the Internet. What content and data you + transmit over Tor is controlled by you. If you login to Google or + Facebook via Tor, the local ISP or network provider doesn't know you + are visiting Google or Facebook. Google and Facebook don't know where + you are in the world. However, since you have logged into their sites, + they know who you are. If you don't want to share information, you are + in control. + </p> + + <p> + Second, active content, such as Java, Javascript, Adobe Flash, Adobe + Shockwave, QuickTime, RealAudio, ActiveX controls, and VBScript, are + binary applications. These binary applications run as your user account + with your permissions in your operating system. This means these + applications can access anything that your user account can access. Some + of these technologies, such as Java and Adobe Flash for instance, run in + what is known as a virtual machine. This virtual machine may have the + ability to ignore your configured proxy settings, and therefore bypass + Tor and share information directly to other sites on the Internet. The + virtual machine may be able to store data, such as cookies, completely + separate from your browser or operating system data stores. Therefore, + these technologies must be disabled in your browser to use Tor safely. + </p> + <p> + That's where the <a + href="https://torproject.org/projects/torbrowser.html.en">Tor Browser + Bundle</a> comes in. We produce a web browser that is preconfigured to + help you control the risks to your privacy and anonymity while browsing + the Internet. Not only are the above technologies disabled to prevent + identity leaks, the Tor Browser also includes browser extensions like + NoScript and Torbutton, as well as patches to the Firefox source + code. The full design of the Tor Browser can be read <a + href="https://www.torproject.org/projects/torbrowser/design/">here</a>. + In designing a safe, secure solution for browsing the web with Tor, + we've discovered that configuring any other browser for use with Tor <a + href="#TBBOtherBrowser">is not safe</a>. + </p> + + <p> + Alternatively, you may find a Live CD or USB operating system more to + your liking. The Tails team has created an <a + href="https://tails.boum.org/">entire bootable operating system</a> + configured for anonymity and privacy on the Internet. + </p> + + <p> + Tor is a work in progress. There is still <a + href="https://www.torproject.org/getinvolved/volunteer">plenty of work + left to do</a> for a strong, secure, and complete solution. + </p> + + <hr> + <a id="ExitEnclaving"></a> - <h3><a class="anchor" href="#ExitEnclaving">What is Exit Enclaving?</a></h3> + <h3><a class="anchor" href="#ExitEnclaving">What is Exit Enclaving?</a> + </h3> <p> When a machine that runs a Tor relay also runs a public service, such as

1 0

[torbrowser/maint-2.4] Fix windows for rc-1.
by mikeperry＠torproject.org 19 Dec '13

19 Dec '13

commit 14671f6b48cd62862317b32985374101ca0e599e Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Thu Dec 19 16:11:48 2013 -0600 Fix windows for rc-1. --- build-scripts/recommended-versions | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build-scripts/recommended-versions b/build-scripts/recommended-versions index cae6d82..7606bdc 100644 --- a/build-scripts/recommended-versions +++ b/build-scripts/recommended-versions @@ -1,7 +1,7 @@ [ "3.5-rc-1-Linux", "3.5-rc-1-MacOS", -"3.5-Windows", +"3.5-rc-1-Windows", "3.5-Linux", "3.5-MacOS", "3.5-Windows"

1 0

[torbrowser/master] Merge branch 'maint-2.4'
by mikeperry＠torproject.org 19 Dec '13

19 Dec '13

commit 5b90a0312d69e956e73f51550511ba5c7183369e Merge: 7c89a53 14671f6 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Thu Dec 19 16:11:58 2013 -0600 Merge branch 'maint-2.4' build-scripts/recommended-versions | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

[torbrowser/master] Fix windows for rc-1.
by mikeperry＠torproject.org 19 Dec '13

19 Dec '13

commit 14671f6b48cd62862317b32985374101ca0e599e Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Thu Dec 19 16:11:48 2013 -0600 Fix windows for rc-1. --- build-scripts/recommended-versions | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build-scripts/recommended-versions b/build-scripts/recommended-versions index cae6d82..7606bdc 100644 --- a/build-scripts/recommended-versions +++ b/build-scripts/recommended-versions @@ -1,7 +1,7 @@ [ "3.5-rc-1-Linux", "3.5-rc-1-MacOS", -"3.5-Windows", +"3.5-rc-1-Windows", "3.5-Linux", "3.5-MacOS", "3.5-Windows"

1 0

[torbrowser/master] Merge branch 'maint-2.4'
by mikeperry＠torproject.org 19 Dec '13

19 Dec '13

commit 7c89a53442f580eba39d5b523bd7ddaa2d29562d Merge: b5d81d0 2f61ccf Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Thu Dec 19 14:57:08 2013 -0600 Merge branch 'maint-2.4' build-scripts/recommended-versions | 11 ----------- 1 file changed, 11 deletions(-)

1 0