February 2014 - tor-commits - lists.torproject.org

[translation/mat-gui] Update translations for mat-gui
by translation＠torproject.org 03 Feb '14

03 Feb '14

commit da1427faaffc612be7c8bcbda1e4a1e02e367d07 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Feb 3 20:15:35 2014 +0000 Update translations for mat-gui --- lv.po | 23 ++++++++++++----------- 1 file changed, 12 insertions(+), 11 deletions(-) diff --git a/lv.po b/lv.po index d75039f..8216503 100644 --- a/lv.po +++ b/lv.po @@ -3,14 +3,15 @@ # This file is distributed under the same license as the PACKAGE package. # # Translators: -# Ojars Balcers <ojars.balcers(a)gmail.com>, 2013 +# Translators: +# Ojars Balcers <ojars.balcers(a)gmail.com>, 2013-2014 msgid "" msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-01-19 14:48+0000\n" -"PO-Revision-Date: 2014-01-21 09:26+0000\n" -"Last-Translator: runasand <runa.sandvik(a)gmail.com>\n" +"PO-Revision-Date: 2014-02-03 20:10+0000\n" +"Last-Translator: Ojars Balcers <ojars.balcers(a)gmail.com>\n" "Language-Team: Latvian (http://www.transifex.com/projects/p/torproject/language/lv/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" @@ -89,15 +90,15 @@ msgstr "Netiek atbalstīts" #: mat-gui:324 msgid "Harmless fileformat" -msgstr "" +msgstr "Nekaitīgs datu formāts" #: mat-gui:326 msgid "Fileformat not supported" -msgstr "" +msgstr "Neatbalstīts datu formāts" #: mat-gui:329 msgid "These files can not be processed:" -msgstr "" +msgstr "Šīs datnes nevar apstrādāt:" #: mat-gui:334 mat-gui:363 data/mat.ui:292 msgid "Filename" @@ -105,24 +106,24 @@ msgstr "Datnes vārds" #: mat-gui:336 msgid "Reason" -msgstr "" +msgstr "Iemesls" #: mat-gui:348 msgid "Non-supported files in archive" -msgstr "" +msgstr "Arhīvā atrodošās neatbalstītās datnes" #: mat-gui:349 data/mat.ui:227 msgid "Scour" -msgstr "" +msgstr "Scour" #: mat-gui:362 msgid "Include" -msgstr "" +msgstr "Iekļaut" #: mat-gui:378 #, python-format msgid "MAT is not able to clean the following files, found in the %s archive" -msgstr "" +msgstr "MAT nespēj iztīrīt šīs datnes, kas atrastas arhīvā %syhhh" #: mat-gui:394 #, python-format

1 0

[translation/liveusb-creator_completed] Update translations for liveusb-creator_completed
by translation＠torproject.org 03 Feb '14

03 Feb '14

commit 51dc62e2cc04ae1ea79e542ee7abcf5e554bbcd8 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Feb 3 20:15:25 2014 +0000 Update translations for liveusb-creator_completed --- lv/lv.po | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/lv/lv.po b/lv/lv.po index 1487b56..aa447b5 100644 --- a/lv/lv.po +++ b/lv/lv.po @@ -10,8 +10,8 @@ msgid "" msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2013-12-21 11:30+0100\n" -"PO-Revision-Date: 2014-01-10 19:30+0000\n" +"POT-Creation-Date: 2014-01-29 14:16+0100\n" +"PO-Revision-Date: 2014-02-03 19:50+0000\n" "Last-Translator: Ojars Balcers <ojars.balcers(a)gmail.com>\n" "Language-Team: Latvian (http://www.transifex.com/projects/p/torproject/language/lv/)\n" "MIME-Version: 1.0\n" @@ -22,8 +22,8 @@ msgstr "" #: ../liveusb/dialog.py:159 ../liveusb/launcher_ui.py:158 #, python-format -msgid "%(distribution)s installer" -msgstr "%(distribution)s instalētājs" +msgid "%(distribution)s Installer" +msgstr "%(distribution)s Installer" #: ../liveusb/gui.py:808 #, python-format

1 0

[translation/liveusb-creator] Update translations for liveusb-creator
by translation＠torproject.org 03 Feb '14

03 Feb '14

commit c91a2f5d9bd3b0cfce9cd38ab0b650a22ace628b Author: Translation commit bot <translation(a)torproject.org> Date: Mon Feb 3 20:15:23 2014 +0000 Update translations for liveusb-creator --- lv/lv.po | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/lv/lv.po b/lv/lv.po index a83b199..aa447b5 100644 --- a/lv/lv.po +++ b/lv/lv.po @@ -10,9 +10,9 @@ msgid "" msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2014-01-10 11:27+0100\n" -"PO-Revision-Date: 2014-01-11 09:25+0000\n" -"Last-Translator: runasand <runa.sandvik(a)gmail.com>\n" +"POT-Creation-Date: 2014-01-29 14:16+0100\n" +"PO-Revision-Date: 2014-02-03 19:50+0000\n" +"Last-Translator: Ojars Balcers <ojars.balcers(a)gmail.com>\n" "Language-Team: Latvian (http://www.transifex.com/projects/p/torproject/language/lv/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" @@ -23,7 +23,7 @@ msgstr "" #: ../liveusb/dialog.py:159 ../liveusb/launcher_ui.py:158 #, python-format msgid "%(distribution)s Installer" -msgstr "" +msgstr "%(distribution)s Installer" #: ../liveusb/gui.py:808 #, python-format

1 0

[translation/https_everywhere_completed] Update translations for https_everywhere_completed
by translation＠torproject.org 03 Feb '14

03 Feb '14

commit 82ed2e1bd0b946a4c76d93d61082fadc10e06b0f Author: Translation commit bot <translation(a)torproject.org> Date: Mon Feb 3 20:15:20 2014 +0000 Update translations for https_everywhere_completed --- lv/https-everywhere.dtd | 1 + 1 file changed, 1 insertion(+) diff --git a/lv/https-everywhere.dtd b/lv/https-everywhere.dtd index b4e4dbb..deac699 100644 --- a/lv/https-everywhere.dtd +++ b/lv/https-everywhere.dtd @@ -14,6 +14,7 @@ <!ENTITY https-everywhere.menu.observatory "SSL Observatory preferences"> <!ENTITY https-everywhere.menu.globalEnable "Iespējot HTTPS Everywhere"> <!ENTITY https-everywhere.menu.globalDisable "Atspējot HTTPS Everywhere"> +<!ENTITY https-everywhere.menu.showCounter "Rādījumu skaitītājs"> <!ENTITY https-everywhere.prefs.title "HTTPS Everywhere preferences"> <!ENTITY https-everywhere.prefs.enable_all "Iespējot visus">

1 0

[translation/https_everywhere] Update translations for https_everywhere
by translation＠torproject.org 03 Feb '14

03 Feb '14

commit ae5eca16ce94baf0907c4e4c22112083dba9251b Author: Translation commit bot <translation(a)torproject.org> Date: Mon Feb 3 20:15:14 2014 +0000 Update translations for https_everywhere --- lv/https-everywhere.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lv/https-everywhere.dtd b/lv/https-everywhere.dtd index 2b819bf..deac699 100644 --- a/lv/https-everywhere.dtd +++ b/lv/https-everywhere.dtd @@ -14,7 +14,7 @@ <!ENTITY https-everywhere.menu.observatory "SSL Observatory preferences"> <!ENTITY https-everywhere.menu.globalEnable "Iespējot HTTPS Everywhere"> <!ENTITY https-everywhere.menu.globalDisable "Atspējot HTTPS Everywhere"> -<!ENTITY https-everywhere.menu.showCounter "Show Counter"> +<!ENTITY https-everywhere.menu.showCounter "Rādījumu skaitītājs"> <!ENTITY https-everywhere.prefs.title "HTTPS Everywhere preferences"> <!ENTITY https-everywhere.prefs.enable_all "Iespējot visus">

1 0

[tor/master] TransProxyType replaces TransTPROXY option
by nickm＠torproject.org 03 Feb '14

03 Feb '14

commit 5991f9a15646d53b838562fd1424b6a8fd9ef614 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Feb 3 13:56:19 2014 -0500 TransProxyType replaces TransTPROXY option I'm making this change now since ipfw will want its own option too, and proliferating options here isn't sensible. (See #10582 and #10267) --- changes/10582_tproxy | 2 +- doc/tor.1.txt | 16 ++++++++++------ src/or/config.c | 25 ++++++++++++++++++------- src/or/connection.c | 3 ++- src/or/or.h | 6 ++++-- 5 files changed, 35 insertions(+), 17 deletions(-) diff --git a/changes/10582_tproxy b/changes/10582_tproxy index 3609d56..8eed6a2 100644 --- a/changes/10582_tproxy +++ b/changes/10582_tproxy @@ -1,7 +1,7 @@ o Minor features: - Add support for the TPROXY transparent proxying facility on Linux. - See documentation for the new TransTRPOXY option for more details. + See documentation for the new TransProxyType option for more details. Implementation by "thomo". Closes ticket 10582. diff --git a/doc/tor.1.txt b/doc/tor.1.txt index 69452a0..ee1e086 100644 --- a/doc/tor.1.txt +++ b/doc/tor.1.txt @@ -1183,18 +1183,22 @@ The following options are useful only for clients (that is, if compatibility, TransListenAddress is only allowed when TransPort is just a port number.) -[[TransTPROXY]] **TransTPROXY** **0**|**1**:: - TransTPROXY may only be enabled when there is transparent proxy listener - enabled and only for Linux. +[[TransProxyType]] **TransProxyTYpe** **default**|**TPROXY**:: + TransProxyType may only be enabled when there is transparent proxy listener + enabled. + - Set this 1 if you wish to be able to use the TPROXY linux module to + Set this to TPROXY if you wish to be able to use the TPROXY Linux module to transparently proxy connections that are configured using the TransPort option. This setting lets the listener on the TransPort accept connections for all addresses, even when the TransListenAddress is configured for an internal address. Detailed information on how to configure the TPROXY - feature can be found in the Linux kernel source tree in the file + feature can be found in the Linux kernel source tree in the file Documentation/networking/tproxy.txt. - (Default: 0) + + + Set this to "default", or leave it unconfigured, to use regular IPTables + on Linux, or to use pf on the *BSD operating systems. + + + (Default: "default".) [[NATDPort]] **NATDPort** \['address':]__port__|**auto** [_isolation flags_]:: Open this port to listen for connections from old versions of ipfw (as diff --git a/src/or/config.c b/src/or/config.c index b76243b..e7847d5 100644 --- a/src/or/config.c +++ b/src/or/config.c @@ -408,7 +408,7 @@ static config_var_t option_vars_[] = { OBSOLETE("TrafficShaping"), V(TransListenAddress, LINELIST, NULL), VPORT(TransPort, LINELIST, NULL), - V(TransTPROXY, BOOL, "0"), + V(TransProxyType, STRING, "default"), V(TunnelDirConns, BOOL, "1"), V(UpdateBridgesFromAuthority, BOOL, "0"), V(UseBridges, BOOL, "0"), @@ -2517,19 +2517,30 @@ options_validate(or_options_t *old_options, or_options_t *options, "undefined, and there aren't any hidden services configured. " "Tor will still run, but probably won't do anything."); + options->TransProxyType_parsed = TPT_DEFAULT; #ifdef USE_TRANSPARENT - if (options->TransTPROXY) { + if (options->TransProxyType) { + if (!strcasecmp(options->TransProxyType, "default")) { + options->TransProxyType_parsed = TPT_DEFAULT; + } else if (!strcasecmp(options->TransProxyType, "tproxy")) { #ifndef __linux__ - REJECT("TransTPROXY is a Linux-specific feature.") + REJECT("TPROXY is a Linux-specific feature."); +#else + options->TransProxyType_parsed = TPT_TPROXY; #endif - if (!options->TransPort_set) { - REJECT("Cannot use TransTPROXY without any valid TransPort or " + } else { + REJECT("Unrecognized value for TransProxyType"); + } + + if (strcasecmp(options->TransProxyType, "default") && + !options->TransPort_set) { + REJECT("Cannot use TransProxyType without any valid TransPort or " "TransListenAddress."); } } #else - if (options->TransPort_set || options->TransTPROXY) - REJECT("TransPort, TransListenAddress, and TransTPROXY are disabled " + if (options->TransPort_set) + REJECT("TransPort and TransListenAddress are disabled " "in this build."); #endif diff --git a/src/or/connection.c b/src/or/connection.c index 6dbba66..942bfc5 100644 --- a/src/or/connection.c +++ b/src/or/connection.c @@ -1036,7 +1036,8 @@ connection_listener_new(const struct sockaddr *listensockaddr, make_socket_reuseable(s); #if defined USE_TRANSPARENT && defined(IP_TRANSPARENT) - if (options->TransTPROXY && type == CONN_TYPE_AP_TRANS_LISTENER) { + if (options->TransProxyType_parsed == TPT_TPROXY && + type == CONN_TYPE_AP_TRANS_LISTENER) { int one = 1; if (setsockopt(s, SOL_IP, IP_TRANSPARENT, &one, sizeof(one)) < 0) { const char *extra = ""; diff --git a/src/or/or.h b/src/or/or.h index 40fc567..b63b1ff 100644 --- a/src/or/or.h +++ b/src/or/or.h @@ -3498,8 +3498,10 @@ typedef struct { config_line_t *SocksPort_lines; /** Ports to listen on for transparent pf/netfilter connections. */ config_line_t *TransPort_lines; - int TransTPROXY; /** < Boolean: are we going to listen for all destinations - * on the TransPort_lines are required for TPROXY? */ + const char *TransProxyType; /**< What kind of transparent proxy + * implementation are we using? */ + /** Parsed value of TransProxyType. */ + enum { TPT_DEFAULT, TPT_TPROXY } TransProxyType_parsed; config_line_t *NATDPort_lines; /**< Ports to listen on for transparent natd * connections. */ config_line_t *ControlPort_lines; /**< Ports to listen on for control

1 0

[tor-launcher/master] Bug #10682: Workaround to really disable updates for Tor Launcher.
by mikeperry＠torproject.org 03 Feb '14

03 Feb '14

commit 7994ee0d77d609d8f692675147a7fcf32c0301b8 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Mon Feb 3 10:50:12 2014 -0800 Bug #10682: Workaround to really disable updates for Tor Launcher. Without an update URL specified, Firefox will still ping addons.mozilla.org for an update. If someone manages to register a fake Tor Launcher at our UUID, it could get pushed out to users. --- src/install.rdf | 1 + 1 file changed, 1 insertion(+) diff --git a/src/install.rdf b/src/install.rdf index f2da944..3dd7640 100644 --- a/src/install.rdf +++ b/src/install.rdf @@ -9,6 +9,7 @@ <em:id>tor-launcher(a)torproject.org</em:id> <em:version>0.2.4.3</em:version> <em:homepageURL>https://www.torproject.org/projects/torbrowser.html</em:homepageURL> + <em:updateURL>https://127.0.0.1/</em:updateURL>

1 0

[torbutton/master] Bug #10682: Workaround to really disable updates for Torbutton.
by mikeperry＠torproject.org 03 Feb '14

03 Feb '14

commit 19f7e22728e9ec5adcc8852a85a234efd2cbbf1e Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Mon Feb 3 10:42:17 2014 -0800 Bug #10682: Workaround to really disable updates for Torbutton. Without an update URL specified, Firefox will still ping addons.mozilla.org for an update. If someone manages to register a fake Torbutton at our UID, it could get pushed out to users. --- src/install.rdf | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/src/install.rdf b/src/install.rdf index ad891ed..2a37879 100644 --- a/src/install.rdf +++ b/src/install.rdf @@ -10,9 +10,7 @@ <em:homepageURL>https://www.torproject.org/projects/torbrowser.html.en</em:homepageURL> <em:optionsURL>chrome://torbutton/content/preferences.xul</em:optionsURL> <em:iconURL>chrome://torbutton/skin/tor.png</em:iconURL> -  + <em:updateURL>https://127.0.0.1/</em:updateURL>   <em:targetApplication>

1 0

[tor-browser/tor-browser-24.2.0esr-1] fixup! Tor Browser's Firefox preference overrides.
by mikeperry＠torproject.org 03 Feb '14

03 Feb '14

commit 78b899e9e7b28cbe9cc5cc1976223b070acf4c22 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Mon Feb 3 10:31:08 2014 -0800 fixup! Tor Browser's Firefox preference overrides. Bug #10419: Websites should not be allowed to probe local ports, for fingerprinting and local service vulnerability risks. --- browser/app/profile/000-tor-browser.js | 1 + 1 file changed, 1 insertion(+) diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js index 16928b3..93725ee 100644 --- a/browser/app/profile/000-tor-browser.js +++ b/browser/app/profile/000-tor-browser.js @@ -85,6 +85,7 @@ pref("network.http.spdy.enabled.v3", false); // Seems redundant, but just in cas pref("network.proxy.socks", "127.0.0.1"); pref("network.proxy.socks_port", 9150); pref("network.proxy.socks_remote_dns", true); +pref("network.proxy.no_proxies_on", ""); // For fingerprinting and local service vulns (#10419) pref("network.proxy.type", 1); pref("network.security.ports.banned", "9050,9051,9150,9151"); pref("network.dns.disablePrefetch", true);

1 0

[torbutton/master] Bug #10419: Don't allow connections to localhost.
by mikeperry＠torproject.org 03 Feb '14

03 Feb '14

commit 3d84b2ada3389899d324223007f7a29ef6b90a17 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Mon Feb 3 10:35:19 2014 -0800 Bug #10419: Don't allow connections to localhost. Also sync up the banned ports list with TBB. These settings shouldn't get applied in TBB normally. This is just defensive, in case someone somehow manages to toggle Tor state still. --- src/defaults/preferences/preferences.js | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/defaults/preferences/preferences.js b/src/defaults/preferences/preferences.js index c5e896f..bc63bb1 100644 --- a/src/defaults/preferences/preferences.js +++ b/src/defaults/preferences/preferences.js @@ -27,7 +27,7 @@ pref("extensions.torbutton.locked_mode",true); pref("extensions.torbutton.test_url","https://check.torproject.org/?TorButton=true"); pref("extensions.torbutton.test_url_interactive", "https://check.torproject.org/?lang=__LANG__"); pref("extensions.torbutton.test_failed",false); -pref("extensions.torbutton.no_proxies_on","127.0.0.1"); +pref("extensions.torbutton.no_proxies_on",""); pref("extensions.torbutton.versioncheck_url","https://check.torproject.org/RecommendedTBBVersions"); pref("extensions.torbutton.versioncheck_enabled",true); @@ -59,7 +59,7 @@ pref("extensions.torbutton.saved.socks_host",""); pref("extensions.torbutton.saved.socks_version",0); pref("extensions.torbutton.saved.socks_port",0); pref("extensions.torbutton.saved.socks_remote_dns",false); -pref("extensions.torbutton.saved.no_proxies_on","localhost, 127.0.0.1"); +pref("extensions.torbutton.saved.no_proxies_on",""); pref("extensions.torbutton.saved.tor_protocol",false); @@ -150,7 +150,7 @@ pref("extensions.torbutton.close_newnym",true); pref("extensions.torbutton.block_js_history",true); pref("extensions.torbutton.resize_on_toggle",true); pref("extensions.torbutton.resize_new_windows",true); -pref("extensions.torbutton.banned_ports","8118,8123,9050,9051"); +pref("extensions.torbutton.banned_ports","9050,9051,9150,9151"); pref("extensions.torbutton.block_tor_file_net",true); pref("extensions.torbutton.block_nontor_file_net",false); pref("extensions.torbutton.jar_certs",false);

1 0