March 2013 - tor-commits - lists.torproject.org

r26134: {website} removed torbutton pages, moved 2 questions to general FAQ (# (in website/trunk: docs/en torbutton/en)
by Moritz Bartl 26 Mar '13

26 Mar '13

Author: moritz Date: 2013-03-26 04:38:32 +0000 (Tue, 26 Mar 2013) New Revision: 26134 Modified: website/trunk/docs/en/faq.wml website/trunk/torbutton/en/index.wml website/trunk/torbutton/en/sidenav.wmi website/trunk/torbutton/en/torbutton-faq.wml website/trunk/torbutton/en/torbutton-options.wml Log: removed torbutton pages, moved 2 questions to general FAQ (#6567) Modified: website/trunk/docs/en/faq.wml =================================================================== --- website/trunk/docs/en/faq.wml 2013-03-25 22:48:25 UTC (rev 26133) +++ website/trunk/docs/en/faq.wml 2013-03-26 04:38:32 UTC (rev 26134) @@ -62,7 +62,7 @@ <li><a href="#TBBPolipo">I need an HTTP proxy. Where did Polipo go?</a></li> <li><a href="#TBBOtherExtensions">Can I install other Firefox - extensions?</a></li> + extensions? Which extensions should I avoid using?</a></li> <li><a href="#TBBJavaScriptEnabled">Why is NoScript configured to allow JavaScript by default in the Tor Browser Bundle? Isn't that unsafe?</a></li> @@ -942,11 +942,44 @@ and other Flash-based sites?</a></h3> -<a -href="https://www.torproject.org/torbutton/torbutton-faq.html. -en#noflash">Answer</a> +YouTube and similar sites require third party browser plugins such as Flash. +Plugins operate independently from Firefox and can perform +activity on your computer that ruins your anonymity. This includes +but is not limited to: <a href="http://decloak.net">completely disregarding +proxy settings</a>, querying your <a +href="http://forums.sun.com/thread.jspa?threadID=5162138&messageID=9618376">local +IP address</a>, and <a +href="http://epic.org/privacy/cookies/flash.html">storing their own +cookies</a>. It is possible to use a LiveCD solution such as +or <a href="https://tails.boum.org/">The Amnesic Incognito Live System</a> that creates a +secure, transparent proxy to protect you from proxy bypass, however issues +with local IP address discovery and Flash cookies still remain. + + +<a href="https://www.youtube.com/html5">YouTube offers experimental HTML5 video +support</a> for many of their videos. You can use their Advanced Search to +find HTML5 videos. + +If you are not concerned about being tracked by these sites (and sites that +try to unmask you by pretending to be them), and are unconcerned about your +local censors potentially noticing you visit them, you can enable plugins by +going into the Torbutton Preferences -> Security Settings +tab and unchecking "Disable browser plugins (such as Flash)" box. If you do this +without The Amnesic Incognito Live System or appropriate firewall +rules, we strongly suggest you at least use <a +href="https://addons.mozilla.org/en-US/firefox/addon/722">NoScript</a> to <a +href="http://noscript.net/features#contentblocking">block plugins</a>. You do +not need to use the NoScript per-domain permissions if you check the Apply +these restrictions to trusted sites too option under the NoScript Plugins +preference tab. In fact, with this setting you can even have NoScript allow +Javascript globally, but still block all plugins until you click on their +placeholders in a page. We also recommend <a +href="https://addons.mozilla.org/en-US/firefox/addon/6623">Better Privacy</a> +in this case to help you clear your Flash cookies. + + <hr> <a id="TBBSocksPort"></a> @@ -1010,6 +1043,23 @@ its name). + +Generally, extensions that require registration, and/or provide +additional information about websites you are visiting, should be +suspect. + + + +Extensions you might like include + <a href="https://addons.mozilla.org/firefox/addon/953">RefControl</a> (referer spoofing), + <a href="https://addons.mozilla.org/firefox/addon/1474">SafeCache</a>, + <a href="https://addons.mozilla.org/en-US/firefox/addon/6623">Better Privacy</a>, + <a href="https://addons.mozilla.org/firefox/addon/1865">AdBlock Plus</a> (EasyPrivacy+EasyList), + <a href="https://addons.mozilla.org/firefox/addon/82">Cookie Culler</a>, + <a href="https://addons.mozilla.org/en-US/firefox/addon/9727/">Request Policy</a> and + <a href="https://addons.mozilla.org/en-US/firefox/addon/certificate-patrol/">Certificate Patrol</a>. + + <hr> <a id="TBBJavaScriptEnabled"></a> Modified: website/trunk/torbutton/en/index.wml =================================================================== --- website/trunk/torbutton/en/index.wml 2013-03-25 22:48:25 UTC (rev 26133) +++ website/trunk/torbutton/en/index.wml 2013-03-26 04:38:32 UTC (rev 26134) @@ -99,37 +99,10 @@ have enough developer resources to keep up with the accelerated Firefox release schedule, the toggle model of Torbutton is <a href="https://blog.torproject.org/blog/toggle-or-not-toggle-end-torbutton">no - longer recommended</a>. Users should be using Tor Browser Bundle, + longer supported</a>. Users should be using Tor Browser Bundle, not installing Torbutton themselves. - - Current stable version:<version-torbutton> - Current alpha version:<version-torbutton-alpha> - - Maintainer: Mike Perry - - Expert Install (Stable): Click to <a - href="https://www.torproject.org/dist/torbutton/torbutton-current.xpi" - hash="<version-hash-torbutton>" onclick="return - install(event);">install from this website</a>. Verify the <a href="https://www.torproject.org/dist/torbutton/torbutton-current.xpi.asc">signature</a>. - - - Past Releases: <a href="https://archive.torproject.org/tor-package-archive/torbutton/">Tor Archive</a> Developer Documentation: <a href="en/design/index.html.en">Torbutton Design Document</a> and <a href="en/design/MozillaBrownBag.pdf">Slides (Not actively updated)</a> Source: You can <a @@ -137,8 +110,8 @@ repository</a> or simply unzip the xpi. Bug Reports: <a href="https://trac.torproject.org/projects/tor/report/14">Torproject Bug Tracker</a> - Documents: [ <a href="<page torbutton/torbutton-faq>">FAQ</a> | - <a href="<page torbutton/torbutton-options>">Torbutton options</a> | + Documents: + [ <a href="https://gitweb.torproject.org/torbutton.git/blob/HEAD:/src/CHANGELOG">changelog</a> | <a href="https://gitweb.torproject.org/torbutton.git/blob/HEAD:/src/LICENSE">license</a> | <a href="https://gitweb.torproject.org/torbutton.git/blob/HEAD:/src/CREDITS">credits</a> ] Modified: website/trunk/torbutton/en/sidenav.wmi =================================================================== --- website/trunk/torbutton/en/sidenav.wmi 2013-03-25 22:48:25 UTC (rev 26133) +++ website/trunk/torbutton/en/sidenav.wmi 2013-03-26 04:38:32 UTC (rev 26134) @@ -1,36 +1,110 @@ -#!/usr/bin/wml - ## translation metadata # Revision: $Revision$ # Translation-Priority: 2-medium -# this structure defines the side nav bar for the /torbutton pages +# this structure defines the side nav bar for the /docs pages # and is the input for include/side.wmi # fields: # -# name - the $WML_SRC_BASENAME of the file. It should uniquely identify the -# page because at build-time it is used to determine what view of the -# navigation menu to generate -# # url - the path to the wml page, as used the the <page> tag. This tag ensures # that links will point to the current language if supported, and alternately # the english version # # txt - the link text to be displayed. Different translations will # need to supply alternate txt - + <: my $sidenav; $sidenav = [ - {'url' => 'torbutton/index', - 'txt' => 'Torbutton', - 'subelements' => [ - {'url' => 'torbutton/torbutton-options', - 'txt' => 'Torbutton Options', - }, - {'url' => 'torbutton/torbutton-faq', - 'txt' => 'Torbutton FAQ', - }] - }] + {'url' => 'docs/documentation', + 'txt' => 'Documentation Overview', + }, + { + 'url' => 'docs/installguide', + 'txt' => 'Installation Guides', + 'subelements' => [ + {'url' => 'docs/tor-doc-windows', + 'txt' => 'Installing on Windows', + }, + {'url' => 'docs/tor-doc-unix', + 'txt' => 'Installing on Linux/BSD/Unix', + }, + {'url' => 'docs/debian', + 'txt' => 'Installing Tor on Debian/Ubuntu', + }, + {'url' => 'docs/debian-vidalia', + 'txt' => 'Installing Vidalia on Debian/Ubuntu', + }, + {'url' => 'docs/tor-doc-osx', + 'txt' => 'Installing Tor on Mac OS X', + }, + {'url' => 'docs/android', + 'txt' => 'Installing Tor on Android', + }, + {'url' => 'docs/N900', + 'txt' => 'Installing Tor on Maemo/N900', + }, + {'url' => 'docs/verifying-signatures', + 'txt' => 'Verify our GPG signatures', + }], + }, + {'url' => 'docs/manual', + 'txt' => 'Manuals', + 'subelements' => [ + { + 'url' => 'docs/short-user-manual', + 'txt' => 'Short User Manual', + }, + {'url' => 'docs/tor-relay-debian', + 'txt' => 'Configuring a Relay manually', + }, + {'url' => 'docs/tor-doc-relay', + 'txt' => 'Configuring a Relay graphically', + }, + {'url' => 'docs/tor-hidden-service', + 'txt' => 'Configuring a Hidden Service', + }, + {'url' => 'docs/bridges', + 'txt' => 'Configuring a Bridge Relay', + }, + {'url' => 'docs/running-a-mirror', + 'txt' => 'Configuring a Mirror', + }, + {'url' => 'docs/tor-manual', + 'txt' => 'Tor -stable Manual', + }, + {'url' => 'docs/tor-manual-dev', + 'txt' => 'Tor -alpha Manual', + }, + {'url' => 'docs/proxychain', + 'txt' => 'Configuring Tor to use a Proxy Server', + }, + {'url' => '<doxygen>', + 'txt' => 'Doxygen output from Tor codebase', + }] + }, + { + 'url' => '<wiki>', + 'txt' => 'Tor Wiki', + }, + {'url' => 'docs/faq', + 'txt' => 'General FAQ', + }, + {'url' => 'torbutton/torbutton-faq', + 'txt' => 'Torbutton FAQ', + }, + {'url' => 'docs/faq-abuse', + 'txt' => 'Abuse FAQ', + }, + {'url' => 'docs/trademark-faq', + 'txt' => 'Trademark FAQ', + }, + {'url' => 'eff/tor-legal-faq', + 'txt' => 'Tor Legal FAQ', + }, + {'url' => 'eff/tor-dmca-response', + 'txt' => 'Tor DMCA Response', + }, + ]; :> Modified: website/trunk/torbutton/en/torbutton-faq.wml =================================================================== --- website/trunk/torbutton/en/torbutton-faq.wml 2013-03-25 22:48:25 UTC (rev 26133) +++ website/trunk/torbutton/en/torbutton-faq.wml 2013-03-26 04:38:32 UTC (rev 26134) @@ -11,273 +11,28 @@ </div> <div id="maincol">  - - <h2>Torbutton FAQ</h2> + + <h2>Torbutton</h2> <hr> - - <h3>Questions</h3> - - <ul> - <li><a href="<page torbutton/torbutton-faq>#noflash">I can't view videos on YouTube and other flash-based sites. Why?</a></li> - <li><a href="<page torbutton/torbutton-faq>#oldtorbutton">Torbutton sure seems to do a lot of things, some of which I find annoying. Can't I just use the old version?</a></li> - <li><a href="<page torbutton/torbutton-faq>#noautocomplete">When I use Tor, Firefox is no longer filling in logins/search boxes for me. Why?</a></li> - <li><a href="<page torbutton/torbutton-faq>#thunderbird">What about Thunderbird support? I see a page, but it is the wrong version?</a></li> - <li><a href="<page torbutton/torbutton-faq>#extensionconflicts">Which Firefox extensions should I avoid using?</a></li> - <li><a href="<page torbutton/torbutton-faq>#recommendedextensions">Which Firefox extensions do you recommend?</a></li> - <li><a href="<page torbutton/torbutton-faq>#securityissues">Are there any other issues I should be concerned about?</a></li> - </ul> - - - <a id="noflash"></a> - <a class="anchor" href="#noflash">I can't view videos on YouTube and - other Flash-based sites. Why?</a> - + - YouTube and similar sites require third party browser plugins such as Flash. - Plugins operate independently from Firefox and can perform - activity on your computer that ruins your anonymity. This includes - but is not limited to: <a href="http://decloak.net">completely disregarding - proxy settings</a>, querying your <a - href="http://forums.sun.com/thread.jspa?threadID=5162138&messageID=9618376">local - IP address</a>, and <a - href="http://epic.org/privacy/cookies/flash.html">storing their own - cookies</a>. It is possible to use a LiveCD solution such as - or <a href="https://tails.boum.org/">The Amnesic Incognito Live System</a> that creates a - secure, transparent proxy to protect you from proxy bypass, however issues - with local IP address discovery and Flash cookies still remain. - - - If you are not concerned about being tracked by these sites (and sites that - try to unmask you by pretending to be them), and are unconcerned about your - local censors potentially noticing you visit them, you can enable plugins by - going into the Torbutton Preferences->Security Settings - tab and unchecking "Disable browser plugins (such as Flash)" box. If you do this - without The Amnesic Incognito Live System or appropriate firewall - rules, we strongly suggest you at least use <a - href="https://addons.mozilla.org/en-US/firefox/addon/722">NoScript</a> to <a - href="http://noscript.net/features#contentblocking">block plugins</a>. You do - not need to use the NoScript per-domain permissions if you check the Apply - these restrictions to trusted sites too option under the NoScript Plugins - preference tab. In fact, with this setting you can even have NoScript allow - Javascript globally, but still block all plugins until you click on their - placeholders in a page. We also recommend <a - href="https://addons.mozilla.org/en-US/firefox/addon/6623">Better Privacy</a> - in this case to help you clear your Flash cookies. + Torbutton is the component in <a href="<page projects/torbrowser>">Tor + Browser Bundle</a> that takes care of application-level + security and privacy concerns in Firefox. To keep you safe, + Torbutton disables many types of active content. - - <a id="oldtorbutton"></a> - <a class="anchor" href="#oldtorbutton">Torbutton sure seems to do a lot of things, some of which I find - annoying. Can't I just use the old version?</a> - + - - No. Use of the old version, or any other vanilla proxy changer - (including FoxyProxy -- see below) without Torbutton is actively discouraged. - Seriously. Using a vanilla proxy switcher by itself is so insecure that you are - not only just wasting your time, you are also actually endangering yourself. - Simply do not use Tor and you will have the same (and in some cases, - better) security. For more information on the types of attacks you are exposed - to with a "homegrown" solution, please see <a - href="design/index.html.en#adversary">The Torbutton - Adversary Model</a>, in particular the <a - href="design/index.html.en#attacks">Adversary - Capabilities - Attacks</a> subsection. If there are any specific Torbutton - behaviors that you do not like, please file a bug on <a - href="https://trac.torproject.org/projects/tor/report/14">the - bug tracker.</a> Most of Torbutton's security features can also be disabled via - its preferences, if you think you have your own protection for those specific - cases. - + Now that the <a href="<page projects/torbrowser>">Tor Browser + Bundle</a> includes a patched version of Firefox, and because we don't + have enough developer resources to keep up with the accelerated + Firefox release schedule, the toggle model of Torbutton is <a + href="https://blog.torproject.org/blog/toggle-or-not-toggle-end-torbutton">no + longer supported</a>. Users should be using Tor Browser Bundle, + not installing Torbutton themselves. - - <a id="noautocomplete"></a> - <a class="anchor" href="#noautocomplete">When I use Tor, Firefox is no longer filling in logins/search boxes - for me. Why?</a> - - - Currently, this is tied to the "Block history writes during Tor" - setting. If you have enabled that setting, all formfill functionality (both - saving and reading) is disabled. If this bothers you, you can uncheck that - option, but both history and forms will be saved. To prevent history - disclosure attacks via Non-Tor usage, it is recommended you disable Non-Tor - history reads if you allow history writing during Tor. - - - <a id="thunderbird"></a> - <a class="anchor" href="#thunderbird">What about Thunderbird support? I see a page, but it is the wrong - version?</a> - - - The Tor plugin for Thunderbird is called <a href="https://trac.torproject.org/projects/tor/wiki/torbirdy"> - TorBirdy</a>. - - - <a id="extensionconflicts"></a> - <a class="anchor" href="#extensionconflicts">Which Firefox extensions should I avoid using?</a> - - - This is a tough one. There are thousands of Firefox extensions: making a - complete list of ones that are bad for anonymity is near impossible. However, - here are a few examples that should get you started as to what sorts of - behavior are dangerous. - - - <ol> - <li>StumbleUpon, et al - - These extensions will send all sorts of information about the websites you - visit to the stumbleupon servers, and correlate this information with a - unique identifier. This is obviously terrible for your anonymity. - More generally, any sort of extension that requires registration, or even - extensions that provide information about websites you visit should be - suspect. - </li> - <li>FoxyProxy - - While FoxyProxy is a nice idea in theory, in practice it is impossible to - configure securely for Tor usage without Torbutton. Like all vanilla third - party proxy plugins, the main risks are <a - href="http://www.decloak.net/">plugin leakage</a> - and <a href="http://ha.ckers.org/weird/CSS-history.cgi">history - disclosure</a>, followed closely by cookie theft by exit nodes and tracking by - adservers (see the <a href="design/index.html.en#adversary">Torbutton Adversary - Model</a> for more information). However, with Torbutton installed in tandem - and always enabled, it is possible to configure FoxyProxy securely (though it - is tricky). Since FoxyProxy's 'Patterns' mode only applies to specific urls, - and not to an entire tab, setting FoxyProxy to only send specific sites - through Tor will still allow adservers (whose hosts don't match your filters) to learn your real IP. Worse, when - sites use offsite logging services such as Google Analytics, you will - still end up in their logs with your real IP. Malicious exit nodes can also - cooperate with sites to inject images into pages that bypass your filters. - Setting FoxyProxy to only send certain URLs via Non-Tor is much more secure in - this regard, but be very careful with the filters you allow. For example, - something as simple as allowing *google* to go via Non-Tor will still cause you to end up - in all the logs of all websites that use Google Analytics! See - <a href="http://foxyproxy.mozdev.org/faq.html#privacy-01">this question</a> on - the FoxyProxy FAQ for more information. - </li> - </ol> - - <a id="recommendedextensions"></a> - <a class="anchor" href="#recommendedextensions">Which Firefox extensions do you recommend?</a> - <ol> - <li><a href="https://addons.mozilla.org/firefox/addon/953">RefControl</a> - - Mentioned above, this extension allows more fine-grained referrer spoofing - than Torbutton currently provides. It should break less sites than Torbutton's - referrer spoofing option.</li> - - <li><a href="https://addons.mozilla.org/firefox/addon/1474">SafeCache</a> - - If you use Tor excessively, and rarely disable it, you probably want to - install this extension to minimize the ability of sites to store long term - identifiers in your cache. This extension applies same origin policy to the - cache, so that elements are retrieved from the cache only if they are fetched - from a document in the same origin domain as the cached element. - </li> - - <li><a href="https://addons.mozilla.org/en-US/firefox/addon/6623">Better - Privacy</a> - - - Better Privacy is an excellent extension that protects you from cookies used - by Flash applications, which often persist forever and are not clearable via - normal Firefox "Private Data" clearing. Flash and all other plugins are - disabled by Torbutton by default, but if you are interested in privacy, you - may want this extension to allow you to inspect and automatically clear your - Flash cookies for your Non-Tor usage. - - - </li> - <li><a href="https://addons.mozilla.org/firefox/addon/1865">AdBlock Plus</a> - - - AdBlock Plus is an excellent addon for removing annoying, privacy-invading, - and <a - href="http://www.wired.com/techbiz/media/news/2007/11/doubleclick">malware-distributing</a> - advertisements from the web. It provides - <a href="http://adblockplus.org/en/subscriptions">subscriptions</a> that are - continually updated to catch the latest efforts of ad networks to circumvent - these filters. I recommend the EasyPrivacy+EasyList combination filter - subscription in the Miscellaneous section of the subscriptions page. - - - </li> - <li><a href="https://addons.mozilla.org/firefox/addon/82">Cookie Culler</a> - - - Cookie Culler is a handy extension to give quick access to the cookie manager - in Firefox. It also provides the ability to protect certain cookies from - deletion, but unfortunately, this behavior does not integrate well with Torbutton. - - - </li> - - <li><a href="https://addons.mozilla.org/en-US/firefox/addon/722">NoScript</a> - - Torbutton currently mitigates all known anonymity issues with Javascript. - However, if you are concerned about Javascript exploits against your browser - or against websites you are logged in to, you may want to use NoScript. It - provides the ability to allow Javascript only for particular websites - and also provides mechanisms to force HTTPS urls for sites with - <a href="http://fscked.org/category/tags/insecurecookies">insecure - cookies</a>. - - It can be difficult to configure such that the most sites will work - properly though. In particular, you want to make sure you do not remove - the Javascript whitelist for - addons.mozilla.org, as extensions are downloaded via http and verified by - javascript from the https page. - - </li> - <li><a href="https://addons.mozilla.org/en-US/firefox/addon/9727/">Request - Policy</a> - - - Request Policy is similar to NoScript in that it requires that you configure - which sites are allowed to load content from other domains. It can be very - difficult for novice users to configure properly, but it does provide a good - deal of protection against ads, injected content, and cross-site request - forgery attacks. - - - </li> - - </ol> - - <a id="securityissues"></a> - <a class="anchor" href="#securityissues">Are there any other issues I should be concerned about?</a> - - - There are a few known security issues with Torbutton (all of which are due to - <a href="design/index.html.en#FirefoxBugs">unfixed - Firefox security bugs</a>). The most important for anonymity is that it is - possible to unmask the javascript hooks that wrap the Date object to conceal - your timezone in Firefox 2, and the timezone masking code does not work at all - on Firefox 3. We are working with the Firefox team to fix one of <a - href="https://bugzilla.mozilla.org/show_bug.cgi?id=392274">Bug 399274</a> or - <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=419598">Bug 419598</a> - to address this. In the meantime, it is possible to set the TZ - environment variable to UTC to cause the browser to use UTC as your - timezone. Under Linux, you can add an export TZ=UTC to the - /usr/bin/firefox script, or edit your system bashrc to do the same. Under - Windows, you can set either a <a - href="http://support.microsoft.com/kb/310519">User or System Environment - Variable</a> for TZ via My Computer's properties. In MacOS, the situation is - <a - href="http://developer.apple.com/documentation/MacOSX/Conceptual/BPRuntimeConfig/…">a - lot more complicated</a>, unfortunately. - - - - In addition, RSS readers such as Firefox Livemarks can perform - periodic fetches. Due to <a - href="https://bugzilla.mozilla.org/show_bug.cgi?id=436250">Firefox Bug - 436250</a>, there is no way to disable Livemark fetches during Tor. This can - be a problem if you have a lot of custom Livemark urls that can give away - information about your identity. - - </div> + + </div>  <div id = "sidecol"> #include "side.wmi" Modified: website/trunk/torbutton/en/torbutton-options.wml =================================================================== --- website/trunk/torbutton/en/torbutton-options.wml 2013-03-25 22:48:25 UTC (rev 26133) +++ website/trunk/torbutton/en/torbutton-options.wml 2013-03-26 04:38:32 UTC (rev 26134) @@ -11,257 +11,27 @@ </div> <div id="maincol">  - - <h2>Torbutton Options</h2> + + <h2>Torbutton</h2> <hr> - - Torbutton 1.2.0 adds several new security features to protect your - anonymity from all the major threats we know about. The defaults should be - fine (and safest!) for most people, but in case you are the tweaker type, - or if you prefer to try to outsource some options to more flexible extensions, - here is the complete list. (In an ideal world, these descriptions should all be - tooltips in the extension itself, but Firefox bugs <a - href="https://bugzilla.mozilla.org/show_bug.cgi?id=45375">45375</a> and <a - href="https://bugzilla.mozilla.org/show_bug.cgi?id=218223">218223</a> currently - prevent this.) - - <ul> - <li>Disable plugins on Tor Usage (crucial) - - This option is key to Tor security. Plugins perform their own networking - independent of the browser, and many plugins only partially obey even their own - proxy settings. - </li> - <li>Isolate Dynamic Content to Tor State (crucial) - - Another crucial option, this setting causes the plugin to disable Javascript - on tabs that are loaded during a Tor state different than the current one, - to prevent delayed fetches of injected URLs that contain unique identifiers, - and to prevent meta-refresh tags from revealing your IP when you turn off - Tor. It also prevents all fetches from tabs loaded with an opposite Tor - state. This serves to block non-Javascript dynamic content such as CSS - popups from revealing your IP address if you disable Tor. - </li> - <li>Hook Dangerous Javascript (crucial) - - This setting enables the Javascript hooking code. Javascript is injected into - pages to hook the Date object to mask your timezone, and to hook the navigator - object to mask OS and user agent properties not handled by the standard - Firefox user agent override settings. - </li> - <li>Resize window dimensions to multiples of 50px on toggle (recommended) - - To cut down on the amount of state available to fingerprint users uniquely, - this pref causes windows to be resized to a multiple of 50 pixels on each - side when Tor is enabled and pages are loaded. - </li> - <li>Disable Updates During Tor (recommended) - - Under Firefox 2, many extension authors did not update their extensions from - SSL-enabled websites. It is possible for malicious Tor nodes to hijack these extensions and replace them with malicious ones, or add malicious code to - existing extensions. Since Firefox 3 now enforces encrypted and/or - authenticated updates, this setting is no longer as important as it once - was (though updates do leak information about which extensions you have, it is - fairly infrequent). - </li> - <li>Disable Search Suggestions during Tor (optional) - - This optional setting governs if you get Google search suggestions during Tor - usage. Since no cookie is transmitted during search suggestions, this is a - relatively benign behavior. - </li> - <li>Block Livemarks updates during Tor usage (recommended) - - This setting causes Torbutton to disable your <a - href="http://www.mozilla.com/firefox/livebookmarks.html">Live bookmark</a> - updates. Since most people use Live bookmarks for RSS feeds from their blog, - their friends' blogs, the wikipedia page they edit, and other such things, - these updates probably should not happen over Tor. This feature takes effect - in Firefox 3.5 and above only. - - </li> - <li>Block Tor/Non-Tor access to network from file:// urls (recommended) - - These settings prevent local html documents from transmitting local files to - arbitrary websites <a href="http://www.gnucitizen.org/blog/content-disposition-hacking/">under Firefox 2</a>. Since exit nodes can insert headers that - force the browser to save arbitrary pages locally (and also inject script into - arbitrary html files you save to disk via Tor), it is probably a good idea to - leave this setting on. - </li> - <li>Close all Non-Tor/Tor windows and tabs on toggle (optional) - - These two settings allow you to obtain a greater degree of assurance that - after you toggle out of Tor, the pages are really gone and can't perform any - extra network activity. Currently, there is no known way that pages can still - perform activity after toggle, but these options exist as a backup measure - just in case a flaw is discovered. They can also serve as a handy 'Boss - Button' feature for clearing all Tor browsing off your screen in a hurry. - </li> - <li>Isolate access to history navigation to Tor state (crucial) - - This setting prevents both Javascript and accidental user clicks from causing - the session history to load pages that were fetched in a different Tor state - than the current one. Since this can be used to correlate Tor and Non-Tor - activity and thus determine your IP address, it is marked as a crucial - setting. - </li> - <li>Block History Reads during Tor (crucial) - - Based on code contributed by <a href="http://www.collinjackson.com/">Collin - Jackson</a>, when enabled and Tor is enabled, this setting prevents the - rendering engine from knowing if certain links were visited. This mechanism - defeats all document-based history disclosure attacks, including CSS-only - attacks. - </li> - <li>Block History Reads during Non-Tor (recommended) - - This setting accomplishes the same but for your Non-Tor activity. - </li> - <li>Block History Writes during Tor (recommended) - - This setting prevents the rendering engine from recording visited URLs, and - also disables download manager history. Note that if you allow writing of Tor history, - it is recommended that you disable non-Tor history reads, since malicious - websites you visit without Tor can query your history for .onion sites and - other history recorded during Tor usage (such as Google queries). - </li> - <li>Block History Writes during Non-Tor (optional) - - This setting also disables recording any history information during Non-Tor - usage. - </li> - <li>Clear History During Tor Toggle (optional) - - This is an alternate setting to use instead of (or in addition to) blocking - history reads or writes. - </li> - <li>Block Password+Form saving during Tor/Non-Tor - - These options govern if the browser writes your passwords and search - submissions to disk for the given state. - </li> - <li>Block Tor disk cache and clear all cache on Tor Toggle - - Since the browser cache can be leveraged to store unique identifiers, cache - must not persist across Tor sessions. This option keeps the memory cache active - during Tor usage for performance, but blocks disk access for caching. - </li> - <li>Block disk and memory cache during Tor - - This setting entirely blocks the cache during Tor, but preserves it for - Non-Tor usage. - </li> - <li>Clear Cookies on Tor Toggle - - Fully clears all cookies on Tor toggle. - </li> - <li>Store Non-Tor cookies in a protected jar - - This option stores your persistent Non-Tor cookies in a special cookie jar - file, in case you wish to preserve some cookies. Based on code contributed - by <a href="http://www.collinjackson.com/">Collin Jackson</a>. It is - compatible with third party extensions that you use to manage your Non-Tor - cookies. Your Tor cookies will be cleared on toggle, of course. - </li> - <li>Store both Non-Tor and Tor cookies in a protected jar (dangerous) - - This option stores your persistent Tor and Non-Tor cookies - separate cookie jar files. Note that it is a bad idea to keep Tor - cookies around for any length of time, as they can be retrieved by exit - nodes that inject spoofed forms into plaintext pages you fetch. - </li> - <li>Manage My Own Cookies (dangerous) - - This setting allows you to manage your own cookies with an alternate - extension, such as <a href="https://addons.mozilla.org/firefox/addon/82">CookieCuller</a>. Note that this is particularly dangerous, - since malicious exit nodes can spoof document elements that appear to be from - sites you have preserved cookies for (and can then do things like fetch your - entire gmail inbox, even if you were not using gmail or visiting any google - pages at the time!). - </li> - <li>Do not write Tor/Non-Tor cookies to disk - - These settings prevent Firefox from writing any cookies to disk during the - corresponding Tor state. If cookie jars are enabled, those jars will - exist in memory only, and will be cleared when Firefox exits. - </li> - <li>Disable DOM Storage during Tor usage (crucial) - - Firefox has recently added the ability to store additional state and - identifiers in persistent tables, called <a - href="http://developer.mozilla.org/docs/DOM:Storage">DOM Storage</a>. - Obviously this can compromise your anonymity if stored content can be - fetched across Tor-state. - </li> - <li>Clear HTTP auth sessions (recommended) - - HTTP authentication credentials can be probed by exit nodes and used to both confirm that you visit a certain site that uses HTTP auth, and also impersonate you on this site. - </li> - <li>Clear cookies on Tor/Non-Tor shutdown - - These settings install a shutdown handler to clear cookies on Tor - and/or Non-Tor browser shutdown. It is independent of your Clear Private Data - settings, and does in fact clear the corresponding cookie jars. - </li> - <li>Prevent session store from saving Tor-loaded tabs (recommended) - - This option augments the session store to prevent it from writing out - Tor-loaded tabs to disk. Unfortunately, this also disables your ability to - undo closed tabs. The reason why this setting is recommended is because - after a session crash, your browser will be in an undefined Tor state, and - can potentially load a bunch of Tor tabs without Tor. The following option - is another alternative to protect against this. - </li> - <li>On normal startup, set state to: Tor, Non-Tor, Shutdown State - - This setting allows you to choose which Tor state you want the browser to - start in normally: Tor, Non-Tor, or whatever state the browser shut down in. - </li> - <li>On crash recovery or session restored startup, restore via: Tor, Non-Tor - - When Firefox crashes, the Tor state upon restart usually is completely - random, and depending on your choice for the above option, may load - a bunch of tabs in the wrong state. This setting allows you to choose - which state the crashed session should always be restored in to. - </li> - <li>Prevent session store from saving Non-Tor/Tor-loaded tabs - - These two settings allow you to control what the Firefox Session Store - writes to disk. Since the session store state is used to automatically - load websites after a crash or upgrade, it is advisable not to allow - Tor tabs to be written to disk, or they may get loaded in Non-Tor - after a crash (or the reverse, depending upon the crash recovery setting, - of course). - </li> - <li>Set user agent during Tor usage (crucial) - - User agent masking is done with the idea of making all Tor users appear - uniform. A recent Firefox 2.0.0.4 Windows build was chosen to mimic for this - string and supporting navigator.* properties, and this version will remain the - same for all TorButton versions until such time as specific incompatibility - issues are demonstrated. Uniformity of this value is obviously very important - to anonymity. Note that for this option to have full effectiveness, the user - must also allow Hook Dangerous Javascript ensure that the navigator.* - properties are reset correctly. The browser does not set some of them via the - exposed user agent override preferences. - </li> - <li>Spoof US English Browser - - This option causes Firefox to send http headers as if it were an English - browser. Useful for internationalized users. - </li> - <li>Don't send referrer during Tor Usage - - This option disables the referrer header, preventing sites from determining - where you came from to visit them. This can break some sites, however. <a - href="http://www.digg.com">Digg</a> in particular seemed to be broken by this. - A more streamlined, less intrusive version of this option should be available - eventually. In the meantime, <a - href="https://addons.mozilla.org/firefox/addon/953">RefControl</a> can - provide this functionality via a default option of Forge. - </li> - </ul> - </div> + + + Torbutton is the component in <a href="<page projects/torbrowser>">Tor + Browser Bundle</a> that takes care of application-level + security and privacy concerns in Firefox. To keep you safe, + Torbutton disables many types of active content. + + + + Now that the <a href="<page projects/torbrowser>">Tor Browser + Bundle</a> includes a patched version of Firefox, and because we don't + have enough developer resources to keep up with the accelerated + Firefox release schedule, the toggle model of Torbutton is <a + href="https://blog.torproject.org/blog/toggle-or-not-toggle-end-torbutton">no + longer supported</a>. Users should be using Tor Browser Bundle, + not installing Torbutton themselves. + + </div>  <div id = "sidecol"> #include "side.wmi"

1 0

r26133: {website} fix i/li tag (website/trunk/about/en)
by Moritz Bartl 25 Mar '13

25 Mar '13

Author: moritz Date: 2013-03-25 22:48:25 +0000 (Mon, 25 Mar 2013) New Revision: 26133 Modified: website/trunk/about/en/contact.wml Log: fix i/li tag Modified: website/trunk/about/en/contact.wml =================================================================== --- website/trunk/about/en/contact.wml 2013-03-24 21:56:14 UTC (rev 26132) +++ website/trunk/about/en/contact.wml 2013-03-25 22:48:25 UTC (rev 26133) @@ -38,7 +38,7 @@ <ul> <li>tor-talk(a)lists.torproject.org is for all discussion about theory, design, development, and use of Onion Routing.</li> - <li>tor-dev(a)lists.torproject.org</li> is for all discussion + <li>tor-dev(a)lists.torproject.org is for all discussion regarding Tor research and development.</li> <li>tor-translation(a)lists.torproject.org can put new <a href="<page getinvolved/translation>">translations</a> into place,

1 0

[translation/liveusb-creator] Update translations for liveusb-creator
by translation＠torproject.org 25 Mar '13

25 Mar '13

commit b0595ade508690a87258284ce218d8c91b852525 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Mar 25 19:46:10 2013 +0000 Update translations for liveusb-creator --- ar/ar.po | 4 ++-- fi/fi.po | 54 +++++++++++++++++++++++++++--------------------------- 2 files changed, 29 insertions(+), 29 deletions(-) diff --git a/ar/ar.po b/ar/ar.po index a99b3a0..117f045 100644 --- a/ar/ar.po +++ b/ar/ar.po @@ -15,7 +15,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: https://trac.torproject.org/projects/tor\n" "POT-Creation-Date: 2013-02-14 16:07+0100\n" -"PO-Revision-Date: 2013-03-25 19:06+0000\n" +"PO-Revision-Date: 2013-03-25 19:25+0000\n" "Last-Translator: Sherief <sheriefalaa.w(a)gmail.com>\n" "Language-Team: LANGUAGE <LL(a)li.org>\n" "MIME-Version: 1.0\n" @@ -55,7 +55,7 @@ msgid "" "p, li { white-space: pre-wrap; }\n" "</style></head><body style=\" font-family:'Sans Serif'; font-size:9pt; font-weight:400; font-style:normal;\">\n" "Copy the running Tails onto a USB stick. All data on the target drive will be lost.</body></html>" -msgstr "" +msgstr "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0//EN\" \"http://www.w3.org/TR/REC-html40/strict.dtd\">\n<html><head><meta name=\"qrichtext\" content=\"1\" /><style type=\"text/css\">\n p, li { white-space: pre-wrap; }\n</style></head><body style=\" font-family:'Sans Serif'; font-size:9pt; font-weight:400; font-style:normal;\">\n انسخ تيلز الذي يعمل حاليا إلي محور يو اس بي. كل البيانات علي محور اليو اي بي سيتم حذفها.</body></html>" #: ../liveusb/launcher_ui.py:153 msgid "" diff --git a/fi/fi.po b/fi/fi.po index e7b8a4b..ab7ca3f 100644 --- a/fi/fi.po +++ b/fi/fi.po @@ -10,7 +10,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: https://trac.torproject.org/projects/tor\n" "POT-Creation-Date: 2013-02-14 16:07+0100\n" -"PO-Revision-Date: 2013-03-24 20:51+0000\n" +"PO-Revision-Date: 2013-03-25 19:31+0000\n" "Last-Translator: mikkoharhanen <gitti(a)mikkoharhanen.fi>\n" "Language-Team: LANGUAGE <LL(a)li.org>\n" "MIME-Version: 1.0\n" @@ -41,7 +41,7 @@ msgid "" "p, li { white-space: pre-wrap; }\n" "</style></head><body style=\" font-family:'Sans Serif'; font-size:9pt; font-weight:400; font-style:normal;\">\n" "Need help? Read the <a href=\"file:///usr/share/doc/tails/website/doc/first_steps/usb_installation.en.html\">documentation</a>.</body></html>" -msgstr "" +msgstr "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0//EN\" \"http://www.w3.org/TR/REC-html40/strict.dtd\">\n<html><head><meta name=\"qrichtext\" content=\"1\" /><style type=\"text/css\">\np, li { white-space: pre-wrap; }\n</style></head><body style=\" font-family:'Sans Serif'; font-size:9pt; font-weight:400; font-style:normal;\">\nTarvitsetko apua? Lue <a href=\"file:///usr/share/doc/tails/website/doc/first_steps/usb_installation.en.html\">ohjeistus</a>.</body></html>" #: ../liveusb/launcher_ui.py:151 msgid "" @@ -89,7 +89,7 @@ msgstr "" #: ../liveusb/creator.py:1120 ../liveusb/creator.py:1383 #, python-format msgid "Calculating the SHA1 of %s" -msgstr "" +msgstr "Lasketaan %s:n SHA1-tiivistettä." #: ../liveusb/creator.py:1331 msgid "Cannot find" @@ -154,7 +154,7 @@ msgstr "Ladataan %s..." #: ../liveusb/creator.py:1116 msgid "Drive is a loopback, skipping MBR reset" -msgstr "" +msgstr "Levy on loopback-laite: ohitetaan MBR:n palautus" #: ../liveusb/creator.py:1196 msgid "Error probing device" @@ -179,15 +179,15 @@ msgstr "Puretaan livelevykuva USB-laitteelle..." #: ../liveusb/creator.py:1061 #, python-format msgid "Formatting %(device)s as FAT32" -msgstr "" +msgstr "Alustetaan %(device)s FAT32:lla." #: ../liveusb/creator.py:139 msgid "ISO MD5 checksum passed" -msgstr "" +msgstr "ISO MD5 -tarkistussumma hyväksyttiin" #: ../liveusb/creator.py:137 msgid "ISO MD5 checksum verification failed" -msgstr "" +msgstr "ISO MD5 -tarkistussumma ei varmistunut" #: ../liveusb/dialog.py:156 msgid "" @@ -280,12 +280,12 @@ msgstr "Poistetaan %(file)s" #: ../liveusb/creator.py:498 msgid "Removing existing Live OS" -msgstr "" +msgstr "Poistetaan nykyinen Live-käyttöjärjestelmä" #: ../liveusb/creator.py:1110 #, python-format msgid "Resetting Master Boot Record of %s" -msgstr "" +msgstr "Palautetaan %s:n oletusarvot" #: ../liveusb/gui.py:743 msgid "Select Live ISO" @@ -293,23 +293,23 @@ msgstr "Valitse live-ISO" #: ../liveusb/creator.py:181 msgid "Setting up OLPC boot file..." -msgstr "" +msgstr "Luodaan OLPC-käynnistystiedostoa..." #: ../liveusb/creator.py:738 #, python-format msgid "" "Some partitions of USB device %(device)s are mounted. They will be unmounted" " before starting the installation process." -msgstr "" +msgstr "USB-laitteen %(device)s jotkut osiot on liitetty. Osiot irrotetaan ennen kuin asennus alkaa." #: ../liveusb/creator.py:130 msgid "" "Source type does not support verification of ISO MD5 checksum, skipping" -msgstr "" +msgstr "Lähteen tyyppi ei tue ISO MD5 -tarkistussumman varmistusta: vaihe ohitetaan." #: ../liveusb/creator.py:1144 msgid "Synchronizing data on disk..." -msgstr "" +msgstr "Synkronoidaan levyn tiedot..." #: ../liveusb/dialog.py:159 msgid "Target Device" @@ -332,7 +332,7 @@ msgstr "Valittu tiedosto ei ole luettavissa. Korjaa käyttöoikeudet tai valitse msgid "" "There was a problem executing the following command: `%(command)s`.\n" "A more detailed error log has been written to '%(filename)s'." -msgstr "" +msgstr "Komennon `%(command)s` suorittamisessa oli ongelma.⏎ Tarkempi virheloki on kirjoitettu tiedostoon '%(filename)s'." #: ../liveusb/dialog.py:151 msgid "" @@ -409,17 +409,17 @@ msgstr "" #: ../liveusb/creator.py:523 #, python-format msgid "Unable to remove directory from previous LiveOS: %(message)s" -msgstr "" +msgstr "Edellisen Live-käyttöjärjestelmän hakemistoa ei voi poistaa: %(message)s" #: ../liveusb/creator.py:511 #, python-format msgid "Unable to remove file from previous LiveOS: %(message)s" -msgstr "" +msgstr "Edellisen Live-käyttöjärjestelmän tiedostoa ei voi poistaa: %(message)s" #: ../liveusb/creator.py:1113 msgid "" "Unable to reset MBR. You may not have the `syslinux` package installed." -msgstr "" +msgstr "MBR:ää ei voitu palauttaa. Pakettia syslinux ei ehkä ole asennettu." #: ../liveusb/gui.py:752 msgid "" @@ -430,11 +430,11 @@ msgstr "Valittua tiedostoa ei voitu käyttää. Tämä saattaa onnistua paremmin #: ../liveusb/creator.py:719 #, python-format msgid "Unable to write on %(device)s, skipping." -msgstr "" +msgstr "Laitteelle %(device)s ei voi kirjoittaa: vaihe ohitetaan." #: ../liveusb/creator.py:411 msgid "Unknown ISO, skipping checksum verification" -msgstr "" +msgstr "Tunnistamaton ISO, ohitetaan tarkistussumman varmistus." #: ../liveusb/creator.py:808 #, python-format @@ -443,7 +443,7 @@ msgstr "" #: ../liveusb/creator.py:787 ../liveusb/creator.py:887 msgid "Unknown filesystem. Your device may need to be reformatted." -msgstr "" +msgstr "Tuntematon tiedostojärjestelmä. Laitteesi on ehkä alustettava uudelleen." #: ../liveusb/gui.py:80 #, python-format @@ -453,7 +453,7 @@ msgstr "Tuntematon julkaisu: %s" #: ../liveusb/creator.py:835 #, python-format msgid "Unmounting %(device)s" -msgstr "" +msgstr "Irrotetaan %(device)s" #: ../liveusb/creator.py:792 ../liveusb/creator.py:890 #, python-format @@ -484,15 +484,15 @@ msgstr "Käytä olemassaolevaa Live ISOa" #: ../liveusb/creator.py:132 msgid "Verifying ISO MD5 checksum" -msgstr "" +msgstr "Varmistetaan ISO MD5 -tarkistussumma" #: ../liveusb/creator.py:385 msgid "Verifying SHA1 checksum of LiveCD image..." -msgstr "" +msgstr "Tarkistetaan LiveCD-levykuvan SHA1-summaa..." #: ../liveusb/creator.py:389 msgid "Verifying SHA256 checksum of LiveCD image..." -msgstr "" +msgstr "Tarkistetaan LiveCD-levykuvan SHA256-summaa..." #: ../liveusb/creator.py:884 ../liveusb/creator.py:1204 msgid "Verifying filesystem..." @@ -512,7 +512,7 @@ msgid "" "Warning: The Master Boot Record on your device does not match your system's " "syslinux MBR. If you have trouble booting this stick, try running the " "liveusb-creator with the --reset-mbr option." -msgstr "" +msgstr "Varoitus: Laitteesi Master Boot Record ei vastaa järjestelmäsi Syslinux MBR:ää. Jos sinulla on ongelmia käynnistää tietokone uudelleen tikulta, voit ajaa ohjelman liveusb-creator valitsimella --reset-mbr." #: ../liveusb/gui.py:389 msgid "" @@ -524,13 +524,13 @@ msgstr "" #: ../liveusb/creator.py:151 #, python-format msgid "Wrote to device at %(speed)d MB/sec" -msgstr "" +msgstr "Laitteelle kirjoitettiin nopeudella %(speed)d Mt/s" #: ../liveusb/creator.py:636 msgid "" "You are using an old version of syslinux-extlinux that does not support the " "ext4 filesystem" -msgstr "" +msgstr "Käytät syslinux-extlinuxin vanhaa versiota, joka ei tue ext4-tiedostojärjestelmää" #: ../liveusb/gui.py:737 msgid "You can try again to resume your download"

1 0

[translation/liveusb-creator] Update translations for liveusb-creator
by translation＠torproject.org 25 Mar '13

25 Mar '13

commit 13f67cb63ceaa6e5f3c71a76632ac122628de0a2 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Mar 25 19:16:09 2013 +0000 Update translations for liveusb-creator --- ar/ar.po | 6 +++--- 1 files changed, 3 insertions(+), 3 deletions(-) diff --git a/ar/ar.po b/ar/ar.po index 4731b07..a99b3a0 100644 --- a/ar/ar.po +++ b/ar/ar.po @@ -15,7 +15,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: https://trac.torproject.org/projects/tor\n" "POT-Creation-Date: 2013-02-14 16:07+0100\n" -"PO-Revision-Date: 2013-03-23 21:08+0000\n" +"PO-Revision-Date: 2013-03-25 19:06+0000\n" "Last-Translator: Sherief <sheriefalaa.w(a)gmail.com>\n" "Language-Team: LANGUAGE <LL(a)li.org>\n" "MIME-Version: 1.0\n" @@ -46,7 +46,7 @@ msgid "" "p, li { white-space: pre-wrap; }\n" "</style></head><body style=\" font-family:'Sans Serif'; font-size:9pt; font-weight:400; font-style:normal;\">\n" "Need help? Read the <a href=\"file:///usr/share/doc/tails/website/doc/first_steps/usb_installation.en.html\">documentation</a>.</body></html>" -msgstr "" +msgstr "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0//EN\" \"http://www.w3.org/TR/REC-html40/strict.dtd\">\n <html><head><meta name=\"qrichtext\" content=\"1\" /><style type=\"text/css\">\n p, li { white-space: pre-wrap; }\n </style></head><body style=\" font-family:'Sans Serif'; font-size:9pt; font-weight:400; font-style:normal;\">\n هل تحتاج إلي المساعدة؟ اقرأ <a href=\"file:///usr/share/doc/tails/website/doc/first_steps/usb_installation.en.html\">كتيب كيفية الأستخدام</a>.</body></html>" #: ../liveusb/launcher_ui.py:151 msgid "" @@ -225,7 +225,7 @@ msgstr "فشل إنشاء قرص USB ذاتي التشغيل" msgid "" "Make sure to extract the entire liveusb-creator zip file before running this" " program." -msgstr "Make sure to extract the entire liveusb-creator zip file before running this program." +msgstr "تأكد من فك ضغط ملف \"liveusb-creator\" قبل العمل بالبرنامج." #: ../liveusb/creator.py:1208 msgid ""

1 0

[stem/master] Only running RUN_OPEN by default or if requested
by atagar＠torproject.org 25 Mar '13

25 Mar '13

commit 89974d0f67f09f44c0fb8b3f2344a78b27280dc4 Author: Damian Johnson <atagar(a)torproject.org> Date: Mon Mar 25 08:10:36 2013 -0700 Only running RUN_OPEN by default or if requested We were configured to always run the RUN_OPEN target, even if something else had been requested. This bug lasted quite a while because we usually either run the default or RUN_ALL (which includes RUN_OPEN). --- test/settings.cfg | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/test/settings.cfg b/test/settings.cfg index 8e96214..78820ed 100644 --- a/test/settings.cfg +++ b/test/settings.cfg @@ -51,7 +51,7 @@ integ.target.online false integ.target.relative_data_dir false integ.target.chroot false integ.target.run.none false -integ.target.run.open true +integ.target.run.open false integ.target.run.password false integ.target.run.cookie false integ.target.run.muiltipe false

1 0

[stem/master] Integ tests failed to create a control socket
by atagar＠torproject.org 25 Mar '13

25 Mar '13

commit 83b99dbe6579af04f18553740b175d6de44fa27d Author: Damian Johnson <atagar(a)torproject.org> Date: Mon Mar 25 08:12:30 2013 -0700 Integ tests failed to create a control socket The RUN_SOCKET test was failing while trying to make the control socket because it tried to change the permissions of /tmp to 700 (which, of course, normal users can't). Tor rejects to start if the control socket is in a globally readable directory, so making a temporary directory we can set the permissions on. --- test/runner.py | 9 ++++----- 1 files changed, 4 insertions(+), 5 deletions(-) diff --git a/test/runner.py b/test/runner.py index 7fa9c41..fb4a4cd 100644 --- a/test/runner.py +++ b/test/runner.py @@ -89,7 +89,7 @@ INTEG_RUNNER = None # control authentication options and attributes CONTROL_PASSWORD = "pw" CONTROL_PORT = 1111 -CONTROL_SOCKET_PATH = tempfile.mkstemp()[1] +CONTROL_SOCKET_PATH = os.path.join(tempfile.mkdtemp(), 'socket') Torrc = stem.util.enum.Enum( ("PORT", "ControlPort %i" % CONTROL_PORT), @@ -627,10 +627,9 @@ class Runner(object): test.output.print_line("failed (%s)" % exc, *ERROR_ATTR) raise exc - # Makes a directory for the control socket if needed. As of, at least, Tor - # 0.2.3.10 it checks during startup that the directory a control socket - # resides in is only accessible by the tor user (and refuses to finish - # starting if it isn't). + # Tor checks during startup that the directory a control socket resides in + # is only accessible by the tor user (and refuses to finish starting if it + # isn't). if Torrc.SOCKET in self._custom_opts: try:

1 0

[stem/master] Safecookie authentication broken when using python 3
by atagar＠torproject.org 25 Mar '13

25 Mar '13

commit c75ab2812b90a730e135b5970ff35d431fa2c4a4 Author: Damian Johnson <atagar(a)torproject.org> Date: Mon Mar 25 08:33:57 2013 -0700 Safecookie authentication broken when using python 3 The os.urandom() provides bytes so there's no need to convert that, but we needed to be more careful about using the converted hex in the formatted string. It too was bytes, causing an extra embedded b''... >>> "hello %s" % b"damian" "hello b'damian'" Tor in turn rejected the nonce as being invalid. I don't get why python3 does it. With python2 bytes and unicode could both be used in a reasonable fashion for formatted strings - these extra characters are almost always undesirable. Oh well... --- stem/connection.py | 6 +++--- 1 files changed, 3 insertions(+), 3 deletions(-) diff --git a/stem/connection.py b/stem/connection.py index d1aa3e5..1f5a53d 100644 --- a/stem/connection.py +++ b/stem/connection.py @@ -119,8 +119,8 @@ from stem.util import log AuthMethod = stem.util.enum.Enum("NONE", "PASSWORD", "COOKIE", "SAFECOOKIE", "UNKNOWN") -CLIENT_HASH_CONSTANT = "Tor safe cookie authentication controller-to-server hash" -SERVER_HASH_CONSTANT = "Tor safe cookie authentication server-to-controller hash" +CLIENT_HASH_CONSTANT = b"Tor safe cookie authentication controller-to-server hash" +SERVER_HASH_CONSTANT = b"Tor safe cookie authentication server-to-controller hash" def connect_port(address = "127.0.0.1", port = 9051, password = None, chroot_path = None, controller = stem.control.Controller): @@ -690,7 +690,7 @@ def authenticate_safecookie(controller, cookie_path, suppress_ctl_errors = True) client_nonce = os.urandom(32) try: - client_nonce_hex = binascii.b2a_hex(stem.util.str_tools._to_bytes(client_nonce)) + client_nonce_hex = stem.util.str_tools._to_unicode(binascii.b2a_hex(client_nonce)) authchallenge_response = _msg(controller, "AUTHCHALLENGE SAFECOOKIE %s" % client_nonce_hex) if not authchallenge_response.is_ok():

1 0

[translation/orbot] Update translations for orbot
by translation＠torproject.org 25 Mar '13

25 Mar '13

commit 1e39686f8e64a97f72b3aa783b08485a9099cbfe Author: Translation commit bot <translation(a)torproject.org> Date: Mon Mar 25 15:45:14 2013 +0000 Update translations for orbot --- values-sn/strings.xml | 28 ++++++++++++++++++++++++++++ 1 files changed, 28 insertions(+), 0 deletions(-) diff --git a/values-sn/strings.xml b/values-sn/strings.xml new file mode 100644 index 0000000..1de14de --- /dev/null +++ b/values-sn/strings.xml @@ -0,0 +1,28 @@ +<?xml version='1.0' encoding='UTF-8'?> +<resources> + <string name="app_name">Orbot</string> + <string name="default_web_url">http://check.torproject.org</string> + <string name="secure_default_web_url">https://check.torproject.org</string> + <string name="tor_check_api_url">https://check.torproject.org/?TorButton=true</string> + <string name="menu_settings">Zvamada</string> + <string name="menu_about">Maererano</string> + <string name="button_about">Maererano</string> + <string name="menu_exit">Buda</string> + <string name="wizard_btn_tell_me_more">Maererano Orbot</string> +  + <string name="wizard_proxy_help_info">Proxy Zvamada</string> +  +  +  +  +  +  +  +  +  + <string name="default_bridges"></string> +</resources>

1 0

[stem/master] Controller provided unicode microdescriptors with python 3
by atagar＠torproject.org 25 Mar '13

25 Mar '13

commit 5e6b5407f087b6b31d28ed5047e44b07f082d197 Author: Damian Johnson <atagar(a)torproject.org> Date: Sun Mar 24 21:05:14 2013 -0700 Controller provided unicode microdescriptors with python 3 When using python 3 the get_info() method provides unicode content. We were passing this content to descriptor constructors, causing its raw_content to be unicode rather than bytes. This in turn caused a stacktrace when calling methods like hashlib.sha256(). This doesn't effect python 2.x, where str is bytes anyway. --- stem/control.py | 6 +++--- 1 files changed, 3 insertions(+), 3 deletions(-) diff --git a/stem/control.py b/stem/control.py index 82cff41..5b9a8ac 100644 --- a/stem/control.py +++ b/stem/control.py @@ -989,7 +989,7 @@ class Controller(BaseController): raise ValueError("'%s' isn't a valid fingerprint or nickname" % relay) desc_content = self.get_info(query) - return stem.descriptor.microdescriptor.Microdescriptor(desc_content) + return stem.descriptor.microdescriptor.Microdescriptor(str_tools._to_bytes(desc_content)) except Exception, exc: if default == UNDEFINED: raise exc @@ -1079,7 +1079,7 @@ class Controller(BaseController): raise ValueError("'%s' isn't a valid fingerprint or nickname" % relay) desc_content = self.get_info(query) - return stem.descriptor.server_descriptor.RelayDescriptor(desc_content) + return stem.descriptor.server_descriptor.RelayDescriptor(str_tools._to_bytes(desc_content)) except Exception, exc: if default == UNDEFINED: raise exc @@ -1153,7 +1153,7 @@ class Controller(BaseController): raise ValueError("'%s' isn't a valid fingerprint or nickname" % relay) desc_content = self.get_info(query) - return stem.descriptor.router_status_entry.RouterStatusEntryV2(desc_content) + return stem.descriptor.router_status_entry.RouterStatusEntryV2(str_tools._to_bytes(desc_content)) except Exception, exc: if default == UNDEFINED: raise exc

1 0

[stem/master] Allowing stem.descriptor.parse_file() to handle paths
by atagar＠torproject.org 25 Mar '13

25 Mar '13

commit fa0fbd195d0531980a6e250ee2e32c99a0708259 Author: Damian Johnson <atagar(a)torproject.org> Date: Sun Mar 24 20:52:07 2013 -0700 Allowing stem.descriptor.parse_file() to handle paths Several times now I've passed a string path to parse_file() rather than a file object and been confused for a sec by the stacktrace. On reflection there's no reason *not* to accept paths - that's commonly what we want it for after all and eliminating the extra open() lets our callers have much nicer code. --- stem/descriptor/__init__.py | 11 ++++++++++- stem/descriptor/microdescriptor.py | 14 ++++++-------- 2 files changed, 16 insertions(+), 9 deletions(-) diff --git a/stem/descriptor/__init__.py b/stem/descriptor/__init__.py index 501ac5d..ef438a7 100644 --- a/stem/descriptor/__init__.py +++ b/stem/descriptor/__init__.py @@ -125,7 +125,7 @@ def parse_file(descriptor_file, descriptor_type = None, validate = True, documen my_descriptor_file = open(descriptor_path, 'rb') - :param file descriptor_file: opened file with the descriptor contents + :param str,file descriptor_file: path or opened file with the descriptor contents :param str descriptor_type: `descriptor type <https://metrics.torproject.org/formats.html#descriptortypes>`_, this is guessed if not provided :param bool validate: checks the validity of the descriptor's content if **True**, skips these checks otherwise @@ -139,6 +139,15 @@ def parse_file(descriptor_file, descriptor_type = None, validate = True, documen * **IOError** if unable to read from the descriptor_file """ + # if we got a path then open that file for parsing + + if isinstance(descriptor_file, (bytes, unicode)): + with open(descriptor_file) as desc_file: + for desc in parse_file(desc_file, descriptor_type, validate, document_handler): + yield desc + + return + import stem.descriptor.server_descriptor import stem.descriptor.extrainfo_descriptor import stem.descriptor.networkstatus diff --git a/stem/descriptor/microdescriptor.py b/stem/descriptor/microdescriptor.py index 4fc2c31..ac1eb2e 100644 --- a/stem/descriptor/microdescriptor.py +++ b/stem/descriptor/microdescriptor.py @@ -41,10 +41,9 @@ the exit relays. print "Exit Relays:" - with open(os.path.join(data_dir, 'cached-microdesc-consensus')) as desc_file: - for desc in parse_file(desc_file): - if desc.digest in exit_digests: - print " %s (%s)" % (desc.nickname, desc.fingerprint) + for desc in parse_file(os.path.join(data_dir, 'cached-microdesc-consensus')): + if desc.digest in exit_digests: + print " %s (%s)" % (desc.nickname, desc.fingerprint) Doing the same is trivial with server descriptors... @@ -54,10 +53,9 @@ Doing the same is trivial with server descriptors... print "Exit Relays:" - with open("/home/atagar/.tor/cached-descriptors") as desc_file: - for desc in parse_file(desc_file): - if desc.exit_policy.is_exiting_allowed(): - print " %s (%s)" % (desc.nickname, desc.fingerprint) + for desc in parse_file("/home/atagar/.tor/cached-descriptors"): + if desc.exit_policy.is_exiting_allowed(): + print " %s (%s)" % (desc.nickname, desc.fingerprint) **Module Overview:**

1 0