October 2014 - tor-commits - lists.torproject.org

[tor-browser/tor-browser-31.2.0esr-4.x-1] Merge remote-tracking branch 'brade/bug13091-02' into tor-browser-31.2.0esr-4.x-1
by mikeperry＠torproject.org 25 Oct '14

25 Oct '14

commit 5d1ed040472bfcfe66445fe44ae41e37e94c2eb1 Merge: 3dd8fa4 26735f8 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Sat Oct 25 01:01:10 2014 -0700 Merge remote-tracking branch 'brade/bug13091-02' into tor-browser-31.2.0esr-4.x-1 config/version.mk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

[translation/torbutton-torbuttondtd] Update translations for torbutton-torbuttondtd
by translation＠torproject.org 25 Oct '14

25 Oct '14

commit 87093c79eb85877e373b3f866cb05defdce268df Author: Translation commit bot <translation(a)torproject.org> Date: Sat Oct 25 07:15:52 2014 +0000 Update translations for torbutton-torbuttondtd --- sl_SI/torbutton.dtd | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/sl_SI/torbutton.dtd b/sl_SI/torbutton.dtd index 265b8f4..e0209a3 100644 --- a/sl_SI/torbutton.dtd +++ b/sl_SI/torbutton.dtd @@ -50,9 +50,9 @@ <!ENTITY torbutton.prefs.block_nthread "Blokiraj zgodovino branja med Ne-Tor (opcija)"> <!ENTITY torbutton.prefs.block_nthwrite "Blokiraj zgodovino zapisovanja med Ne-Tor (opcija)"> <!ENTITY torbutton.prefs.clear_history "Očisti zgodovino Tor preklopov (opcija)"> -<!ENTITY torbutton.prefs.clear_cache "Block Tor disk cache and clear all cache on Tor toggle"> -<!ENTITY torbutton.prefs.block_cache "Block disk and memory cache access during Tor"> -<!ENTITY torbutton.prefs.cookie_jars "Store Non-Tor cookies in a protected jar"> +<!ENTITY torbutton.prefs.clear_cache "Blokiraj Tor disk predpomnilnik in očisti vse predpomnilnike Tor preklopov"> +<!ENTITY torbutton.prefs.block_cache "Blokiraj dostope diskovnih in spominskhi predpomnilnikov med Tor"> +<!ENTITY torbutton.prefs.cookie_jars "Shrani Ne-Tor piškotke v zaščitenih jar"> <!ENTITY torbutton.prefs.cookie_protection "Use the Cookie Protections Dialog to choose"> <!ENTITY torbutton.prefs.mmm_cookies "I will manually manage my cookies (dangerous)"> <!ENTITY torbutton.prefs.clear_cookies "Clear cookies on Tor toggle">

1 0

[translation/torbutton-torbuttondtd] Update translations for torbutton-torbuttondtd
by translation＠torproject.org 25 Oct '14

25 Oct '14

commit d92651377f0e547aeaabcbc60d78a3e14b6e3464 Author: Translation commit bot <translation(a)torproject.org> Date: Sat Oct 25 06:45:52 2014 +0000 Update translations for torbutton-torbuttondtd --- sl_SI/torbutton.dtd | 30 +++++++++++++++--------------- 1 file changed, 15 insertions(+), 15 deletions(-) diff --git a/sl_SI/torbutton.dtd b/sl_SI/torbutton.dtd index 6089257..265b8f4 100644 --- a/sl_SI/torbutton.dtd +++ b/sl_SI/torbutton.dtd @@ -26,30 +26,30 @@ <!ENTITY torbutton.context_menu.new_identity_key "I"> <!ENTITY torbutton.context_menu.toggle "Preklopite Tor stanje"> <!ENTITY torbutton.context_menu.toggle.key "T"> -<!ENTITY torbutton.context_menu.preferences "Preferences..."> +<!ENTITY torbutton.context_menu.preferences "Prednostne nastavitve..."> <!ENTITY torbutton.context_menu.preferences.key "P"> -<!ENTITY torbutton.context_menu.about "About Torbutton..."> +<!ENTITY torbutton.context_menu.about "Vizitka Torbutton"> <!ENTITY torbutton.context_menu.about.key "A"> -<!ENTITY torbutton.context_menu.networksettings "Open Network Settings…"> +<!ENTITY torbutton.context_menu.networksettings "Odpri omrežne nastavitve"> <!ENTITY torbutton.context_menu.networksettings.key "S"> -<!ENTITY torbutton.context_menu.downloadUpdate "Download Tor Browser Bundle Update..."> +<!ENTITY torbutton.context_menu.downloadUpdate "Prenos posodobitve zavitka Tor Brskalnik"> <!ENTITY torbutton.context_menu.downloadUpdate.key "U"> -<!ENTITY torbutton.context_menu.cookieProtections "Cookie Protections"> +<!ENTITY torbutton.context_menu.cookieProtections "Piškotki zaščite"> <!ENTITY torbutton.context_menu.cookieProtections.key "C"> -<!ENTITY torbutton.context_menu.copyTor "Copy Tor URL"> +<!ENTITY torbutton.context_menu.copyTor "Kopiraj v URL"> <!ENTITY torbutton.context_menu.copyTor.key "p"> -<!ENTITY torbutton.context_menu.openTorTab "Open Tor URL in new Tab"> +<!ENTITY torbutton.context_menu.openTorTab "Odpri Tor URL v novem tabulatorju"> <!ENTITY torbutton.context_menu.openTorTab.key "r"> -<!ENTITY torbutton.context_menu.openTorWindow "Open Tor URL in new Window"> +<!ENTITY torbutton.context_menu.openTorWindow "Odpri Tor URL v novem oknu"> <!ENTITY torbutton.context_menu.openTorWindow.key "d"> <!ENTITY torbutton.button.label "Torbutton"> -<!ENTITY torbutton.button.tooltip "Click to initialize Torbutton"> -<!ENTITY torbutton.prefs.sec_settings "Security Settings"> -<!ENTITY torbutton.prefs.block_thread "Block history reads during Tor (crucial)"> -<!ENTITY torbutton.prefs.block_thwrite "Block history writes during Tor (recommended)"> -<!ENTITY torbutton.prefs.block_nthread "Block history reads during Non-Tor (optional)"> -<!ENTITY torbutton.prefs.block_nthwrite "Block history writes during Non-Tor (optional)"> -<!ENTITY torbutton.prefs.clear_history "Clear history on Tor toggle (optional)"> +<!ENTITY torbutton.button.tooltip "Klik za začetek Torbutton"> +<!ENTITY torbutton.prefs.sec_settings "Varnostne nastavitve"> +<!ENTITY torbutton.prefs.block_thread "Blokiraj zgodovino branja med Tor (ključno)"> +<!ENTITY torbutton.prefs.block_thwrite "Blokiraj zgodovino zapisovanja med Tor (priporočljivo)"> +<!ENTITY torbutton.prefs.block_nthread "Blokiraj zgodovino branja med Ne-Tor (opcija)"> +<!ENTITY torbutton.prefs.block_nthwrite "Blokiraj zgodovino zapisovanja med Ne-Tor (opcija)"> +<!ENTITY torbutton.prefs.clear_history "Očisti zgodovino Tor preklopov (opcija)"> <!ENTITY torbutton.prefs.clear_cache "Block Tor disk cache and clear all cache on Tor toggle"> <!ENTITY torbutton.prefs.block_cache "Block disk and memory cache access during Tor"> <!ENTITY torbutton.prefs.cookie_jars "Store Non-Tor cookies in a protected jar">

1 0

[translation/whisperback] Update translations for whisperback
by translation＠torproject.org 25 Oct '14

25 Oct '14

commit 7eccedb8517b6db50162c37bfef32cd6a2debb90 Author: Translation commit bot <translation(a)torproject.org> Date: Sat Oct 25 06:45:12 2014 +0000 Update translations for whisperback --- sl_SI/sl_SI.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sl_SI/sl_SI.po b/sl_SI/sl_SI.po index 8bdd125..cd42dc2 100644 --- a/sl_SI/sl_SI.po +++ b/sl_SI/sl_SI.po @@ -9,7 +9,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-03-17 17:40+0100\n" -"PO-Revision-Date: 2014-10-25 06:10+0000\n" +"PO-Revision-Date: 2014-10-25 06:20+0000\n" "Last-Translator: Dušan <dusan.k(a)zoho.com>\n" "Language-Team: Slovenian (Slovenia) (http://www.transifex.com/projects/p/torproject/language/sl_SI/)\n" "MIME-Version: 1.0\n"

1 0

[tor-browser-bundle/master] Use pre-gitified version of the TOR_TAG for the "expert bundle".
by mikeperry＠torproject.org 25 Oct '14

25 Oct '14

commit da82bae559cc2203a43bf58bd1afd6beabc790c2 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Fri Oct 24 23:41:57 2014 -0700 Use pre-gitified version of the TOR_TAG for the "expert bundle". --- gitian/mkbundle-windows.sh | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/gitian/mkbundle-windows.sh b/gitian/mkbundle-windows.sh index c686983..673344a 100755 --- a/gitian/mkbundle-windows.sh +++ b/gitian/mkbundle-windows.sh @@ -74,6 +74,7 @@ die_msg() { LIBEVENT_TAG_ORIG=$LIBEVENT_TAG ZLIB_TAG_ORIG=$ZLIB_TAG +TOR_TAG_ORIG=$TOR_TAG if [ "z$VERIFY_TAGS" = "z1" ]; then @@ -223,7 +224,7 @@ then mkdir -p $WRAPPER_DIR/$TORBROWSER_VERSION/ cp -a build/out/*.exe $WRAPPER_DIR/$TORBROWSER_VERSION/ || exit 1 cp -a build/out/*.mar $WRAPPER_DIR/$TORBROWSER_VERSION/ || exit 1 - cp -a inputs/tor-win32-gbuilt.zip $WRAPPER_DIR/$TORBROWSER_VERSION/tor-win32-${TOR_TAG}.zip || exit 1 + cp -a inputs/tor-win32-gbuilt.zip $WRAPPER_DIR/$TORBROWSER_VERSION/tor-win32-${TOR_TAG_ORIG}.zip || exit 1 touch inputs/bundle-windows.gbuilt else echo

1 0

[translation/torbutton-torbuttondtd] Update translations for torbutton-torbuttondtd
by translation＠torproject.org 25 Oct '14

25 Oct '14

commit 33bbc2fe1659c0440806f4508306e7f446e83304 Author: Translation commit bot <translation(a)torproject.org> Date: Sat Oct 25 06:15:54 2014 +0000 Update translations for torbutton-torbuttondtd --- sl_SI/torbutton.dtd | 40 ++++++++++++++++++++-------------------- 1 file changed, 20 insertions(+), 20 deletions(-) diff --git a/sl_SI/torbutton.dtd b/sl_SI/torbutton.dtd index dbb7f2f..6089257 100644 --- a/sl_SI/torbutton.dtd +++ b/sl_SI/torbutton.dtd @@ -1,30 +1,30 @@ -<!ENTITY torbutton.prefs.title "Torbutton Preferences"> -<!ENTITY torbutton.prefs.tor_settings "Proxy Settings"> -<!ENTITY torbutton.prefs.recommended_settings "Use the recommended proxy settings for my version of Firefox"> -<!ENTITY torbutton.prefs.use_privoxy "Use Privoxy"> -<!ENTITY torbutton.prefs.use_polipo "Use Polipo"> +<!ENTITY torbutton.prefs.title "Torbutton Izbire"> +<!ENTITY torbutton.prefs.tor_settings "Proxy nastavitve"> +<!ENTITY torbutton.prefs.recommended_settings "Uporabite priporočene nastavitve strežnika proxy za mojo različico Firefox"> +<!ENTITY torbutton.prefs.use_privoxy "Uporabite Privoxy"> +<!ENTITY torbutton.prefs.use_polipo "Uporabite Polipo"> <!ENTITY torbutton.prefs.custom_settings "Uporabite običajne proxy nastavitve"> <!ENTITY torbutton.prefs.proxy.host.http "HTTP Proxy:"> <!ENTITY torbutton.prefs.proxy.host.https "SSL Proxy:"> <!ENTITY torbutton.prefs.proxy.host.ftp "FTP Proxy:"> <!ENTITY torbutton.prefs.proxy.host.gopher "Gopher Proxy:"> <!ENTITY torbutton.prefs.proxy.host.socks "SOCKS Host:"> -<!ENTITY torbutton.prefs.proxy.port "Port:"> -<!ENTITY torbutton.about.title "About Torbutton"> -<!ENTITY torbutton.about.version "Version:"> -<!ENTITY torbutton.about.summary "Protects the privacy of your Tor browsing."> -<!ENTITY torbutton.about.code "Code Contributors:"> -<!ENTITY torbutton.about.maintainer "Maintainer:"> -<!ENTITY torbutton.about.security_review "Security Review:"> -<!ENTITY torbutton.about.donate "If you like using Tor, you might consider"> -<!ENTITY torbutton.about.make_donation "making a donation."> -<!ENTITY torbutton.pref_connection.notice "Disable Torbutton to change these settings."> -<!ENTITY torbutton.pref_connection.more_info "More information"> -<!ENTITY torbutton.pref_connection_more_info.title "Help"> -<!ENTITY torbutton.pref_connection_more_info.text "Torbutton is currently enabled. If you would like to change your non-Tor proxy settings, please disable Torbutton and return here. If you would like to change your Tor settings, please use the Torbutton preference window."> -<!ENTITY torbutton.context_menu.new_identity "New Identity"> +<!ENTITY torbutton.prefs.proxy.port "Vhod:"> +<!ENTITY torbutton.about.title "Vizitka Torbutton"> +<!ENTITY torbutton.about.version "Verzija:"> +<!ENTITY torbutton.about.summary "Ščiti zasebnost vašega Tor brskanja ."> +<!ENTITY torbutton.about.code "Koda Sodelujočih:"> +<!ENTITY torbutton.about.maintainer "Vzdrževalec:"> +<!ENTITY torbutton.about.security_review "Varnostni pregled:"> +<!ENTITY torbutton.about.donate "Če vam je všeč uporaba Tor, razmislite"> +<!ENTITY torbutton.about.make_donation "o donaciji."> +<!ENTITY torbutton.pref_connection.notice "Onemogočite Torbutton za spremembo teh nastavitev."> +<!ENTITY torbutton.pref_connection.more_info "Več info"> +<!ENTITY torbutton.pref_connection_more_info.title "Pomoč"> +<!ENTITY torbutton.pref_connection_more_info.text "Torbutton je privzeto omogočen. Če želite spremeniti vaše ne-Tor proxy nastavitve, prosim onemogočite Torbutton in se vrnite sem. Če želite spremeniti Tor nastavitve, prosim uporabite Torbutton izborno okno."> +<!ENTITY torbutton.context_menu.new_identity "Nova Identiteta"> <!ENTITY torbutton.context_menu.new_identity_key "I"> -<!ENTITY torbutton.context_menu.toggle "Toggle Tor status"> +<!ENTITY torbutton.context_menu.toggle "Preklopite Tor stanje"> <!ENTITY torbutton.context_menu.toggle.key "T"> <!ENTITY torbutton.context_menu.preferences "Preferences..."> <!ENTITY torbutton.context_menu.preferences.key "P">

1 0

[translation/tor-launcher-network-settings] Update translations for tor-launcher-network-settings
by translation＠torproject.org 25 Oct '14

25 Oct '14

commit feb9b02ff506249f14e461c84e1bd39d3df10bac Author: Translation commit bot <translation(a)torproject.org> Date: Sat Oct 25 06:15:39 2014 +0000 Update translations for tor-launcher-network-settings --- sl_SI/network-settings.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sl_SI/network-settings.dtd b/sl_SI/network-settings.dtd index 628b157..911ba82 100644 --- a/sl_SI/network-settings.dtd +++ b/sl_SI/network-settings.dtd @@ -34,7 +34,7 @@ <!ENTITY torsettings.useProxy.type "Proxy Type:"> <!ENTITY torsettings.useProxy.address "Address:"> <!ENTITY torsettings.useProxy.address.placeholder "IP address or hostname"> -<!ENTITY torsettings.useProxy.port "Port:"> +<!ENTITY torsettings.useProxy.port "Vhod:"> <!ENTITY torsettings.useProxy.username "Username:"> <!ENTITY torsettings.useProxy.password "Geslo:"> <!ENTITY torsettings.useProxy.type.socks4 "SOCKS 4">

1 0

[translation/whisperback] Update translations for whisperback
by translation＠torproject.org 25 Oct '14

25 Oct '14

commit d1fb549a4145e4e582f16c4ede550c70d2615bff Author: Translation commit bot <translation(a)torproject.org> Date: Sat Oct 25 06:15:12 2014 +0000 Update translations for whisperback --- sl_SI/sl_SI.po | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/sl_SI/sl_SI.po b/sl_SI/sl_SI.po index 92451c4..8bdd125 100644 --- a/sl_SI/sl_SI.po +++ b/sl_SI/sl_SI.po @@ -9,7 +9,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-03-17 17:40+0100\n" -"PO-Revision-Date: 2014-10-14 08:41+0000\n" +"PO-Revision-Date: 2014-10-25 06:10+0000\n" "Last-Translator: Dušan <dusan.k(a)zoho.com>\n" "Language-Team: Slovenian (Slovenia) (http://www.transifex.com/projects/p/torproject/language/sl_SI/)\n" "MIME-Version: 1.0\n" @@ -193,7 +193,7 @@ msgstr "" #: ../data/whisperback.ui.h:29 msgid "Help" -msgstr "" +msgstr "Pomoč" #: ../data/whisperback.ui.h:30 msgid "Send"

1 0

[tor-browser-spec/master] First pass design doc updates for TBB 4.0.
by mikeperry＠torproject.org 25 Oct '14

25 Oct '14

commit d4933b5286ffb4db3a1ae21fd8417343e7caace7 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Fri Oct 24 19:27:22 2014 -0700 First pass design doc updates for TBB 4.0. --- design-doc/design.xml | 128 ++++++++++++++++++++++++++++--------------------- 1 file changed, 73 insertions(+), 55 deletions(-) diff --git a/design-doc/design.xml b/design-doc/design.xml index dde142f..8f12ae4 100644 --- a/design-doc/design.xml +++ b/design-doc/design.xml @@ -23,7 +23,7 @@ <address><email>sjmurdoch#torproject org</email></address> </affiliation> </author> - <pubdate>March 15, 2013</pubdate> + <pubdate>October 20th, 2014</pubdate> </articleinfo>  of the Tor Browser. It is current as of Tor Browser -3.6.2. +4.0. </para> <para> @@ -57,31 +57,50 @@ adversary currently addressed by the major browsers. The Tor Browser is based on <ulink url="https://www.mozilla.org/en-US/firefox/organizations/">Mozilla's Extended -Support Release (ESR) Firefox branch</ulink>. We have a <link -linkend="firefox-patches">series of patches</link> against this browser to -enhance privacy and security. Browser behavior is additionally augmented -through the <ulink +Support Release (ESR) Firefox branch</ulink>. We have a <ulink +url="https://gitweb.torproject.org/tor-browser.git">series of patches</ulink> +against this browser to enhance privacy and security. Browser behavior is +additionally augmented through the <ulink url="https://gitweb.torproject.org/torbutton.git/tree/master">Torbutton -extension</ulink>, though we are in the process of moving this -functionality into direct Firefox patches. We also <ulink -url="https://gitweb.torproject.org/torbrowser.git/blob/HEAD:/build-scripts/confi…">change +extension</ulink>, though we are in the process of moving this functionality +into direct Firefox patches. We also <ulink +url="https://gitweb.torproject.org/tor-browser.git/blob/refs/heads/tor-browser-3…">change a number of Firefox preferences</ulink> from their defaults. </para> <para> +Tor process management and configuration is accomplished through the <ulink +url="https://gitweb.torproject.org/tor-launcher.git">Tor Launcher</ulink> +addon, which provides the initial Tor configuration splash screen and +bootstrap progress bar. Tor Launcher is also compatible with Thunderbird, +InstantBird, and XULRunner. + + </para> + <para> To help protect against potential Tor Exit Node eavesdroppers, we include <ulink url="https://www.eff.org/https-everywhere">HTTPS-Everywhere</ulink>. To provide users with optional defense-in-depth against Javascript and other potential exploit vectors, we also include <ulink -url="http://noscript.net/">NoScript</ulink>. To protect against -PDF-based Tor proxy bypass and to improve usability, we include the <ulink -url="https://addons.mozilla.org/en-us/firefox/addon/pdfjs/">PDF.JS</ulink> -extension. We also modify <ulink -url="https://gitweb.torproject.org/torbrowser.git/blob/HEAD:/build-scripts/confi…">several +url="http://noscript.net/">NoScript</ulink>. We also modify <ulink +url="https://gitweb.torproject.org/builders/tor-browser-bundle.git/blob/refs/hea…">several extension preferences</ulink> from their defaults. </para> + <para> + +To provide censorship circumvention in areas where the public Tor network is +blocked either by IP, or by protocol fingerprint, we include several <ulink +url="https://trac.torproject.org/projects/tor/wiki/doc/AChildsGardenOfPluggableT…">Pluggable +Transports</ulink> in the distribution. As of this writing, we include <ulink +url="https://gitweb.torproject.org/pluggable-transports/obfsproxy.git/blob/HEAD:…">Obfsproxy</ulink>, +<ulink +url="https://trac.torproject.org/projects/tor/wiki/doc/meek">meek</ulink>, +<ulink url="https://fteproxy.org/">FTE</ulink>, and <ulink +url="https://crypto.stanford.edu/flashproxy/">FlashProxy</ulink>. + + </para> + </sect2> </sect1> @@ -102,7 +121,6 @@ extension preferences</ulink> from their defaults. - No filters --> - <sect1 id="DesignRequirements"> <title>Design Requirements and Philosophy</title> <para> @@ -870,34 +888,43 @@ Proxy obedience is assured through the following: <orderedlist> <listitem>Firefox proxy settings, patches, and build flags <para> + Our <ulink -url="https://gitweb.torproject.org/torbrowser.git/blob/HEAD:/build-scripts/confi…">Firefox -preferences file</ulink> sets the Firefox proxy settings to use Tor directly as a -SOCKS proxy. It sets <command>network.proxy.socks_remote_dns</command>, +url="https://gitweb.torproject.org/tor-browser.git/blob/refs/heads/tor-browser-3…">Firefox +preferences file</ulink> sets the Firefox proxy settings to use Tor directly +as a SOCKS proxy. It sets <command>network.proxy.socks_remote_dns</command>, <command>network.proxy.socks_version</command>, <command>network.proxy.socks_port</command>, and <command>network.dns.disablePrefetch</command>. + </para> <para> -We also patch Firefox in order to <ulink -url="https://gitweb.torproject.org/torbrowser.git/blob/maint-2.4:/src/current-pa…">prevent -a DNS leak due to a WebSocket rate-limiting check</ulink>. As stated in the -patch, we believe the direct DNS resolution performed by this check is in -violation of the W3C standard, but <ulink -url="https://bugzilla.mozilla.org/show_bug.cgi?id=751465">this DNS proxy leak -remains present in stock Firefox releases</ulink>. +To prevent proxy bypass by WebRTC calls, we disable WebRTC at compile time +with the <command>--disable-webrtc</command> configure switch, as well +as set the pref <command>media.peerconnection.enabled</command> to false. </para> <para> -During the transition to Firefox 17-ESR, a code audit was undertaken to verify -that there were no system calls or XPCOM activity in the source tree that did -not use the browser proxy settings. The only violation we found was that -WebRTC was capable of creating UDP sockets and was compiled in by default. We -subsequently disabled it using the Firefox build option -<command>--disable-webrtc</command>. +We also patch Firefox in order to provide several defense-in-depth mechanisms +for proxy safety. Notably, we <ulink +url="https://gitweb.torproject.org/tor-browser.git/commitdiff/8527bec0ad59fb3d88…">patch +the DNS service</ulink> to prevent any browser or addon DNS resolution, and we +also <ulink +url="https://gitweb.torproject.org/tor-browser.git/commitdiff/04c046e11f6622f44c…">patch +OCSP and PKIX code</ulink> to prevent any use of the non-proxied command-line +tool utility functions from being functional while linked in to the browser. +In both cases, we could find no direct paths to these routines in the browser, +but it seemed better safe than sorry. + + </para> + <para> +During every Extended Support Release transition, we perform <ulink +url="https://gitweb.torproject.org/tor-browser-spec.git/tree/HEAD:/audits">in-depth +code audits</ulink> to verify that there were no system calls or XPCOM +activity in the source tree that did not use the browser proxy settings. </para> <para> @@ -938,12 +965,14 @@ If the user does enable plugins in this way, plugin-handled objects are still restricted from automatic load through Firefox's click-to-play preference <command>plugins.click_to_play</command>. </para> + <para> + In addition, to reduce any unproxied activity by arbitrary plugins at load time, and to reduce the fingerprintability of the installed plugin list, we also patch the Firefox source code to <ulink -url="https://gitweb.torproject.org/torbrowser.git/blob/maint-2.4:/src/current-pa…">prevent the load of any plugins except -for Flash and Gnash</ulink>. +url="https://gitweb.torproject.org/tor-browser.git/commitdiff/2ecf6c33618ecee554…"> +prevent the load of any plugins except for Flash and Gnash</ulink>. </para> </listitem> @@ -965,10 +994,9 @@ Additionally, modern desktops now pre-emptively fetch any URLs in Drag and Drop events as soon as the drag is initiated. This download happens independent of the browser's Tor settings, and can be triggered by something as simple as holding the mouse button down for slightly too long while -clicking on an image link. We had to patch Firefox to <ulink -url="https://gitweb.torproject.org/torbrowser.git/blob/maint-2.4:/src/current-pa…">emit -an observer event during dragging</ulink> to allow us to filter the drag -events from Torbutton before the OS downloads the URLs the events contained. +clicking on an image link. We filter drag and drop events events <ulink +url="https://gitweb.torproject.org/torbutton.git/blob_plain/HEAD:/src/components…">from +Torbutton</ulink> before the OS downloads the URLs the events contained. </para> </listitem> @@ -996,7 +1024,7 @@ custom Firefox profile, and by setting the $HOME environment variable to the root of the bundle's directory. The browser also does not load any system-wide extensions (through the use of <command>extensions.enabledScopes</command> and -<command>extensions.autoDisableScopes</command>. Furthermore, plugins are +<command>extensions.autoDisableScopes</command>). Furthermore, plugins are disabled, which prevents Flash cookies from leaking from a pre-existing Flash directory. @@ -1024,21 +1052,16 @@ Private Browsing preference Private Browsing Mode is enabled. We need to <ulink -url="https://gitweb.torproject.org/torbrowser.git/blob/maint-2.4:/src/current-pa…">prevent +url="https://gitweb.torproject.org/tor-browser.git/commit/4ebc3cda4b704c0149fb9e…">prevent the permissions manager from recording HTTPS STS state</ulink>, <ulink -url="https://gitweb.torproject.org/torbrowser.git/blob/maint-2.4:/src/current-pa…">prevent +url="https://gitweb.torproject.org/tor-browser.git/commit/8904bfc10cd537bd35be5d…">prevent intermediate SSL certificates from being recorded</ulink>, +and <ulink -url="https://gitweb.torproject.org/torbrowser.git/blob/maint-2.4:/src/current-pa…">prevent -download history from being recorded</ulink>, and -<ulink -url="https://gitweb.torproject.org/torbrowser.git/blob/maint-2.4:/src/current-pa…">prevent +url="https://gitweb.torproject.org/tor-browser.git/commit/d5da6f8b7de089335e49e2…">prevent the content preferences service from recording site zoom</ulink>. -For more details on these patches, <link linkend="firefox-patches">see the -Firefox Patches section</link>. - </blockquote> <blockquote> @@ -1060,12 +1083,6 @@ auditing work to ensure that yet. </blockquote> <blockquote> -Torbutton also <ulink -url="https://gitweb.torproject.org/torbutton.git/blob/HEAD:/src/components/tbSes…">contains -code</ulink> to prevent the Firefox session store from writing to disk. - </blockquote> - <blockquote> - For more details on disk leak bugs and enhancements, see the <ulink url="https://trac.torproject.org/projects/tor/query?keywords=~tbb-disk-leak&…">tbb-disk-leak tag in our bugtracker</ulink> </blockquote> @@ -1958,6 +1975,8 @@ date. </orderedlist> </sect2> + + <para><command>Design Goal:</command> As an additional design goal, we would like to later alter this patch to allow this @@ -2275,7 +2293,7 @@ with dual Flash+HTML5 video players, such as YouTube. </orderedlist> </sect2> - +--> </sect1> <!--

1 0

[tor-browser-bundle/master] Name the Windows Expert Bundle a bit better.
by mikeperry＠torproject.org 25 Oct '14

25 Oct '14

commit f6ac32b9c84136fd621432e3c8edd3235203c9fb Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Fri Oct 24 17:24:56 2014 -0700 Name the Windows Expert Bundle a bit better. --- gitian/mkbundle-windows.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gitian/mkbundle-windows.sh b/gitian/mkbundle-windows.sh index 5f5f928..c686983 100755 --- a/gitian/mkbundle-windows.sh +++ b/gitian/mkbundle-windows.sh @@ -223,7 +223,7 @@ then mkdir -p $WRAPPER_DIR/$TORBROWSER_VERSION/ cp -a build/out/*.exe $WRAPPER_DIR/$TORBROWSER_VERSION/ || exit 1 cp -a build/out/*.mar $WRAPPER_DIR/$TORBROWSER_VERSION/ || exit 1 - cp -a inputs/tor-win32-gbuilt.zip $WRAPPER_DIR/$TORBROWSER_VERSION/ || exit 1 + cp -a inputs/tor-win32-gbuilt.zip $WRAPPER_DIR/$TORBROWSER_VERSION/tor-win32-${TOR_TAG}.zip || exit 1 touch inputs/bundle-windows.gbuilt else echo

1 0