March 2014 - tor-commits - lists.torproject.org

r26654: {website} Removed IPv6 FAQ entry, which is confusing visitors (#10990) (website/trunk/docs/en)
by Matt Pagan 17 Mar '14

17 Mar '14

Author: mttp Date: 2014-03-17 17:12:08 +0000 (Mon, 17 Mar 2014) New Revision: 26654 Modified: website/trunk/docs/en/faq.wml Log: Removed IPv6 FAQ entry, which is confusing visitors (#10990) Modified: website/trunk/docs/en/faq.wml =================================================================== --- website/trunk/docs/en/faq.wml 2014-03-17 09:29:47 UTC (rev 26653) +++ website/trunk/docs/en/faq.wml 2014-03-17 17:12:08 UTC (rev 26654) @@ -296,7 +296,6 @@ </a></li> <li><a href="#Steganography">You should use steganography to hide Tor traffic.</a></li> - <li><a href="#IPv6">Tor should support IPv6.</a></li> </ul> Abuse: @@ -4789,39 +4788,6 @@ <hr> - <a id="IPv6"></a> - <h3><a class="anchor" href="#IPv6">Tor should support IPv6.</a></h3> - - - That's a great idea! There are two aspects for IPv6 support that Tor needs. - First, Tor needs to support exit to hosts that only have IPv6 addresses. - Second, Tor needs to support Tor relays that only have IPv6 addresses. - - - The first is far easier: the protocol changes are relatively simple and - isolated. It would be like another kind of exit policy. - - - The second is a little harder: right now, we assume that (mostly) every - Tor relay can connect to every other. This has problems of its own, and - adding IPv6-address-only relays adds problems too: it means that only - relays with IPv6 abilities can connect to IPv6-address-only relays. This - makes it possible for the attacker to make some inferences about client - paths that it would not be able to make otherwise. - - - There is an <a - href="https://gitweb.torproject.org/tor.git/blob/HEAD:/doc/spec/proposals/117-ipv…"> - IPv6 exit proposal</a> to address the first step for anonymous access to - IPv6 resources on the Internet. - - - Full IPv6 support is definitely on our "someday" list; it will come along - faster if somebody who wants it does some of the work. - - - <hr> - <a id="Abuse"></a> <h2><a class="anchor">Abuse:</a></h2>

1 0

[stem/master] Don't use @lru_cache for exit policy rules
by atagar＠torproject.org 17 Mar '14

17 Mar '14

commit 863ddacb961ffe255f02eeea115515bd7f3ffd41 Author: Damian Johnson <atagar(a)torproject.org> Date: Mon Mar 17 09:19:32 2014 -0700 Don't use @lru_cache for exit policy rules Lession learned today: @lru_cache is handy for efficiency but don't rely on the cache to function. Our ExitPolicy class expected its _get_rules() method to be called exactly once due to having cached results. However, pickling then unpicking an ExitPolicy class caused our @lru_cache to be cleared, resulting in a TypeError. Replacing this method's @lru_cache with a standard one, and adding a test for pickleability. Thanks to Nicholas Hopper for the catch! --- stem/exit_policy.py | 88 ++++++++++++++++++++------------------- test/unit/exit_policy/policy.py | 16 +++++++ 2 files changed, 62 insertions(+), 42 deletions(-) diff --git a/stem/exit_policy.py b/stem/exit_policy.py index 169eb13..78db793 100644 --- a/stem/exit_policy.py +++ b/stem/exit_policy.py @@ -167,6 +167,8 @@ class ExitPolicy(object): else: self._input_rules = rules + self._rules = None + # Result when no rules apply. According to the spec policies default to 'is # allowed', but our microdescriptor policy subclass might want to change # this. @@ -295,54 +297,56 @@ class ExitPolicy(object): return (label_prefix + ", ".join(display_ranges)).strip() - @lru_cache() def _get_rules(self): - rules = [] - is_all_accept, is_all_reject = True, True - - if isinstance(self._input_rules, bytes): - decompressed_rules = zlib.decompress(self._input_rules).split(b',') - else: - decompressed_rules = self._input_rules - - for rule in decompressed_rules: - if isinstance(rule, bytes): - rule = stem.util.str_tools._to_unicode(rule) - - if isinstance(rule, unicode): - rule = ExitPolicyRule(rule.strip()) + if self._rules is None: + rules = [] + is_all_accept, is_all_reject = True, True - if rule.is_accept: - is_all_reject = False + if isinstance(self._input_rules, bytes): + decompressed_rules = zlib.decompress(self._input_rules).split(b',') else: - is_all_accept = False + decompressed_rules = self._input_rules - rules.append(rule) + for rule in decompressed_rules: + if isinstance(rule, bytes): + rule = stem.util.str_tools._to_unicode(rule) - if rule.is_address_wildcard() and rule.is_port_wildcard(): - break # this is a catch-all, no reason to include more + if isinstance(rule, unicode): + rule = ExitPolicyRule(rule.strip()) - # If we only have one kind of entry *and* end with a wildcard then - # we might as well use the simpler version. For instance... - # - # reject *:80, reject *:443, reject *:* - # - # ... could also be represented as simply... - # - # reject *:* - # - # This mostly comes up with reject-all policies because the - # 'reject private:*' appends an extra seven rules that have no - # effect. - - if rules and (rules[-1].is_address_wildcard() and rules[-1].is_port_wildcard()): - if is_all_accept: - rules = [ExitPolicyRule("accept *:*")] - elif is_all_reject: - rules = [ExitPolicyRule("reject *:*")] - - self._input_rules = None - return rules + if rule.is_accept: + is_all_reject = False + else: + is_all_accept = False + + rules.append(rule) + + if rule.is_address_wildcard() and rule.is_port_wildcard(): + break # this is a catch-all, no reason to include more + + # If we only have one kind of entry *and* end with a wildcard then + # we might as well use the simpler version. For instance... + # + # reject *:80, reject *:443, reject *:* + # + # ... could also be represented as simply... + # + # reject *:* + # + # This mostly comes up with reject-all policies because the + # 'reject private:*' appends an extra seven rules that have no + # effect. + + if rules and (rules[-1].is_address_wildcard() and rules[-1].is_port_wildcard()): + if is_all_accept: + rules = [ExitPolicyRule("accept *:*")] + elif is_all_reject: + rules = [ExitPolicyRule("reject *:*")] + + self._rules = rules + self._input_rules = None + + return self._rules def __iter__(self): for rule in self._get_rules(): diff --git a/test/unit/exit_policy/policy.py b/test/unit/exit_policy/policy.py index 161bae0..041f81e 100644 --- a/test/unit/exit_policy/policy.py +++ b/test/unit/exit_policy/policy.py @@ -2,6 +2,7 @@ Unit tests for the stem.exit_policy.ExitPolicy class. """ +import pickle import unittest from stem.exit_policy import get_config_policy, \ @@ -216,3 +217,18 @@ class TestExitPolicy(unittest.TestCase): for test_input in test_inputs: self.assertRaises(ValueError, get_config_policy, test_input) + + def test_pickleability(self): + """ + Checks that we can unpickle ExitPolicy instances. + """ + + policy = ExitPolicy("accept *:80", "accept *:443", "reject *:*") + self.assertTrue(policy.can_exit_to('74.125.28.106', 80)) + + encoded_policy = pickle.dumps(policy) + restored_policy = pickle.loads(encoded_policy) + + self.assertEqual(policy, restored_policy) + self.assertTrue(restored_policy.is_exiting_allowed()) + self.assertTrue(restored_policy.can_exit_to('74.125.28.106', 80))

1 0

[tor-browser-bundle/master] Added changelog entry for 3.5.3.
by gk＠torproject.org 17 Mar '14

17 Mar '14

commit 8573820727cee94f516d2b2c9d4718b69a56c952 Author: Georg Koppen <gk(a)torproject.org> Date: Mon Mar 17 13:37:16 2014 +0000 Added changelog entry for 3.5.3. --- Bundle-Data/Docs/ChangeLog.txt | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index ae2cb4b..8e8fdde 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,21 @@ +Tor Browser Bundle 3.5.3 -- Mar 19 2014 + * All Platforms + * Update Firefox to 24.4.0esr + * Update Torbutton to 1.6.7.0: + * Bug 9901: Fix browser freeze due to content type sniffing + * Bug 10611: Add Swedish (sv) to extra locales to update + * Update NoScript to 2.6.8.17 + * Update Tor to 0.2.4.21 + * Bug 10237: Disable the media cache to prevent disk leaks for videos + * Bug 10703: Force the default charset to avoid locale fingerprinting + * Bug 10104: Update gitian to fix LXC build issues (for non-KVM/VT builders) + * Mac: + * Bug 4271: Use DMG instead of ZIP for Mac packages + * Linux: + * Bug 9533: Fix keyboard input on Ubuntu 13.10 + * Bug 9896: Provide debug symbols for Tor Browser binary + * Bug 10472: Pass arguments to the browser from Linux startup script + Tor Browser Bundle 3.6-beta-1 -- Mar 17 2014 * All Platforms * Update Firefox to 24.4.0esr

1 0

r26653: {website} fix some links, say that scramblesuit and fte are in testing (website/trunk/docs/en)
by Roger Dingledine 17 Mar '14

17 Mar '14

Author: arma Date: 2014-03-17 09:29:47 +0000 (Mon, 17 Mar 2014) New Revision: 26653 Modified: website/trunk/docs/en/pluggable-transports.wml Log: fix some links, say that scramblesuit and fte are in testing Modified: website/trunk/docs/en/pluggable-transports.wml =================================================================== --- website/trunk/docs/en/pluggable-transports.wml 2014-03-17 09:27:18 UTC (rev 26652) +++ website/trunk/docs/en/pluggable-transports.wml 2014-03-17 09:29:47 UTC (rev 26653) @@ -36,7 +36,7 @@ <ul> - <li><a href="../projects/obfsproxy.html.en">Obfsproxy</a> is a Python framework for implementing new + <li><a href="<page projects/obfsproxy>">Obfsproxy</a> is a Python framework for implementing new pluggable transports. It uses Twisted for its networking needs, and <a href="https://gitweb.torproject.org/pluggable-transports/pyptlib.git/blob/HEAD:/R…">pyptlib</a> for some pluggable transport-related features. It supports the @@ -45,16 +45,16 @@ <a href="https://gitweb.torproject.org/pluggable-transports/obfsproxy.git/blob/HEAD:…">obfs3</a> pluggable transports. Maintained by asn. - Status: <a href="../projects/obfsproxy.html.en#download">Deployed</a> + Status: <a href="<page projects/obfsproxy>#download">Deployed</a> </li> <li>Flashproxy turns ordinary web browsers into bridges using websockets, and has a little python stub to hook Tor clients to the websocket connection. See its - <a href="http://crypto.stanford.edu/flashproxy/">web page</a>, + <a href="https://crypto.stanford.edu/flashproxy/">web page</a>, <a href="https://gitweb.torproject.org/flashproxy.git">git repository</a>, and - <a href="http://crypto.stanford.edu/flashproxy/flashproxy.pdf">design paper</a>. + <a href="https://crypto.stanford.edu/flashproxy/flashproxy.pdf">design paper</a>. Maintained by David Fifield. # <iframe src="//crypto.stanford.edu/flashproxy/embed.html" width="80" height="15" frameborder="0" scrolling="no"></iframe> @@ -67,7 +67,7 @@ inter-arrival times, etc.). It's part of the Obfsproxy framework. See its <a href="http://www.cs.kau.se/philwint/scramblesuit/">official page</a>. Maintained by Philipp Winter. - Status: Undeployed + Status: In testing </li> <li>StegoTorus is an Obfsproxy fork that extends it to a) @@ -99,7 +99,7 @@ to arbitrary formats using their language descriptions. See the <a href="https://kpdyer.com/publications/ccs2013-fte.pdf">research paper</a> and <a href="https://fteproxy.org/">web page</a>. - Status: Undeployed + Status: In testing </li> </ul>

1 0

r26652: {website} FTE has a published research paper and its own website now (website/trunk/docs/en)
by Roger Dingledine 17 Mar '14

17 Mar '14

Author: arma Date: 2014-03-17 09:27:18 +0000 (Mon, 17 Mar 2014) New Revision: 26652 Modified: website/trunk/docs/en/pluggable-transports.wml Log: FTE has a published research paper and its own website now Modified: website/trunk/docs/en/pluggable-transports.wml =================================================================== --- website/trunk/docs/en/pluggable-transports.wml 2014-03-14 18:25:03 UTC (rev 26651) +++ website/trunk/docs/en/pluggable-transports.wml 2014-03-17 09:27:18 UTC (rev 26652) @@ -97,8 +97,8 @@ <li>Format-Transforming Encryption (FTE) transforms Tor traffic to arbitrary formats using their language descriptions. See - the <a href="https://eprint.iacr.org/2012/494">research - paper</a> and <a href="https://kpdyer.com/fte/">web page</a>. + the <a href="https://kpdyer.com/publications/ccs2013-fte.pdf">research + paper</a> and <a href="https://fteproxy.org/">web page</a>. Status: Undeployed </li>

1 0

[tor-browser-bundle/master] Make it harder to mess up the Firefox langpack+version update.
by mikeperry＠torproject.org 17 Mar '14

17 Mar '14

commit 1929fd5db0802782066d52512d4c2a0fef144ed6 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Mon Mar 17 01:12:01 2014 -0700 Make it harder to mess up the Firefox langpack+version update. --- gitian/versions | 6 ++++-- gitian/versions.alpha | 6 ++++-- gitian/versions.beta | 6 ++++-- gitian/versions.nightly | 6 ++++-- 4 files changed, 16 insertions(+), 8 deletions(-) diff --git a/gitian/versions b/gitian/versions index 8358f94..f007100 100755 --- a/gitian/versions +++ b/gitian/versions @@ -3,7 +3,9 @@ BUNDLE_LOCALES="ar de es-ES fa fr it ko nl pl pt-PT ru vi zh-CN" VERIFY_TAGS=1 -TORBROWSER_TAG=tor-browser-24.4.0esr-1-build1 +FIREFOX_VERSION=24.4.0esr + +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-1-build1 TOR_TAG=tor-0.2.4.21 TORLAUNCHER_TAG=0.2.4.4 TORBUTTON_TAG=1.6.7.0 @@ -22,7 +24,7 @@ GITIAN_TAG=tor-browser-builder-3.x-5 OPENSSL_VER=1.0.1f GMP_VER=5.1.3 -FIREFOX_LANG_VER=24.4.0esr +FIREFOX_LANG_VER=$FIREFOX_VERSION BINUTILS_VER=2.22 GCC_VER=4.6.3 PYTHON_VER=2.7.5 diff --git a/gitian/versions.alpha b/gitian/versions.alpha index 48e4464..5adee9a 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -4,7 +4,9 @@ BUILD_PT_BUNDLES=1 VERIFY_TAGS=1 -TORBROWSER_TAG=tor-browser-24.4.0esr-1-build1 +FIREFOX_VERSION=24.4.0esr + +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-1-build1 TOR_TAG=tor-0.2.5.2-alpha TORLAUNCHER_TAG=0.2.5.1a TORBUTTON_TAG=1.6.7.0 @@ -23,7 +25,7 @@ GITIAN_TAG=tor-browser-builder-3.x-5 OPENSSL_VER=1.0.1f GMP_VER=5.1.3 -FIREFOX_LANG_VER=24.4.0esr +FIREFOX_LANG_VER=$FIREFOX_VERSION BINUTILS_VER=2.22 GCC_VER=4.6.3 PYTHON_VER=2.7.5 diff --git a/gitian/versions.beta b/gitian/versions.beta index 846ddfb..c4ad3fa 100755 --- a/gitian/versions.beta +++ b/gitian/versions.beta @@ -4,7 +4,9 @@ BUILD_PT_BUNDLES=1 VERIFY_TAGS=1 -TORBROWSER_TAG=tor-browser-24.4.0esr-1-build1 +FIREFOX_VERSION=24.4.0esr + +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-1-build1 TOR_TAG=tor-0.2.4.21 TORLAUNCHER_TAG=0.2.5.1a TORBUTTON_TAG=1.6.7.0 @@ -23,7 +25,7 @@ GITIAN_TAG=tor-browser-builder-3.x-5 OPENSSL_VER=1.0.1f GMP_VER=5.1.3 -FIREFOX_LANG_VER=24.4.0esr +FIREFOX_LANG_VER=$FIREFOX_VERSION BINUTILS_VER=2.22 GCC_VER=4.6.3 PYTHON_VER=2.7.5 diff --git a/gitian/versions.nightly b/gitian/versions.nightly index 8ecbebb..57157c0 100755 --- a/gitian/versions.nightly +++ b/gitian/versions.nightly @@ -4,7 +4,9 @@ BUILD_PT_BUNDLES=1 VERIFY_TAGS=0 -TORBROWSER_TAG=tor-browser-24.4.0esr-1 +FIREFOX_VERSION=24.4.0esr + +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-1 TOR_TAG=master TORLAUNCHER_TAG=master TORBUTTON_TAG=master @@ -23,7 +25,7 @@ GITIAN_TAG=tor-browser-builder-3.x-5 OPENSSL_VER=1.0.1f GMP_VER=5.1.3 -FIREFOX_LANG_VER=24.4.0esr +FIREFOX_LANG_VER=$FIREFOX_VERSION BINUTILS_VER=2.22 GCC_VER=4.6.3 PYTHON_VER=2.7.5

1 0

[tor-browser-bundle/master] Bump FIREFOX_LANG_VER to 24.4.0esr.
by gk＠torproject.org 17 Mar '14

17 Mar '14

commit 0f97e3208443a38537775916672fd519e84d90cd Author: Georg Koppen <gk(a)torproject.org> Date: Mon Mar 17 09:01:43 2014 +0000 Bump FIREFOX_LANG_VER to 24.4.0esr. --- gitian/versions | 2 +- gitian/versions.alpha | 2 +- gitian/versions.beta | 2 +- gitian/versions.nightly | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/gitian/versions b/gitian/versions index 3097b65..8358f94 100755 --- a/gitian/versions +++ b/gitian/versions @@ -22,7 +22,7 @@ GITIAN_TAG=tor-browser-builder-3.x-5 OPENSSL_VER=1.0.1f GMP_VER=5.1.3 -FIREFOX_LANG_VER=24.3.0esr +FIREFOX_LANG_VER=24.4.0esr BINUTILS_VER=2.22 GCC_VER=4.6.3 PYTHON_VER=2.7.5 diff --git a/gitian/versions.alpha b/gitian/versions.alpha index b7f4c93..48e4464 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -23,7 +23,7 @@ GITIAN_TAG=tor-browser-builder-3.x-5 OPENSSL_VER=1.0.1f GMP_VER=5.1.3 -FIREFOX_LANG_VER=24.3.0esr +FIREFOX_LANG_VER=24.4.0esr BINUTILS_VER=2.22 GCC_VER=4.6.3 PYTHON_VER=2.7.5 diff --git a/gitian/versions.beta b/gitian/versions.beta index e654784..846ddfb 100755 --- a/gitian/versions.beta +++ b/gitian/versions.beta @@ -23,7 +23,7 @@ GITIAN_TAG=tor-browser-builder-3.x-5 OPENSSL_VER=1.0.1f GMP_VER=5.1.3 -FIREFOX_LANG_VER=24.3.0esr +FIREFOX_LANG_VER=24.4.0esr BINUTILS_VER=2.22 GCC_VER=4.6.3 PYTHON_VER=2.7.5 diff --git a/gitian/versions.nightly b/gitian/versions.nightly index 7569a10..8ecbebb 100755 --- a/gitian/versions.nightly +++ b/gitian/versions.nightly @@ -23,7 +23,7 @@ GITIAN_TAG=tor-browser-builder-3.x-5 OPENSSL_VER=1.0.1f GMP_VER=5.1.3 -FIREFOX_LANG_VER=24.3.0esr +FIREFOX_LANG_VER=24.4.0esr BINUTILS_VER=2.22 GCC_VER=4.6.3 PYTHON_VER=2.7.5

1 0

[translation/tails-greeter] Update translations for tails-greeter
by translation＠torproject.org 17 Mar '14

17 Mar '14

commit 7b4f9175cd7e1b5d8b78a3e2cb1a7472fc24bb25 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Mar 17 07:45:23 2014 +0000 Update translations for tails-greeter --- cs/cs.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cs/cs.po b/cs/cs.po index b9c4979..28c25ee 100644 --- a/cs/cs.po +++ b/cs/cs.po @@ -11,7 +11,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2014-03-06 17:16+0100\n" -"PO-Revision-Date: 2014-03-17 07:12+0000\n" +"PO-Revision-Date: 2014-03-17 07:20+0000\n" "Last-Translator: Pivoj\n" "Language-Team: Czech (http://www.transifex.com/projects/p/torproject/language/cs/)\n" "MIME-Version: 1.0\n"

1 0

[translation/tor-launcher-progress_completed] Update translations for tor-launcher-progress_completed
by translation＠torproject.org 17 Mar '14

17 Mar '14

commit d05705fa4452598147abe2176e57c7a8d63dde00 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Mar 17 07:15:51 2014 +0000 Update translations for tor-launcher-progress_completed --- cs/progress.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cs/progress.dtd b/cs/progress.dtd index f2ccb32..c953214 100644 --- a/cs/progress.dtd +++ b/cs/progress.dtd @@ -1,4 +1,4 @@ <!ENTITY torprogress.dialog.title "Tor Stav"> <!ENTITY torprogress.openSettings "Otevřít nastavení"> <!ENTITY torprogress.heading "Připojuji se k síti Tor"> -<!ENTITY torprogress.pleaseWait "Tor prohlížeč se otevře po připojení do Tor sítě."> +<!ENTITY torprogress.pleaseWait "Prosím vyčkejte než bude sestaveno připojení k síti Tor.">

1 0

[translation/tor-launcher-progress] Update translations for tor-launcher-progress
by translation＠torproject.org 17 Mar '14

17 Mar '14

commit b3316a0d57760e21b64937423c0078873a63d7ff Author: Translation commit bot <translation(a)torproject.org> Date: Mon Mar 17 07:15:49 2014 +0000 Update translations for tor-launcher-progress --- cs/progress.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cs/progress.dtd b/cs/progress.dtd index 22e10d1..c953214 100644 --- a/cs/progress.dtd +++ b/cs/progress.dtd @@ -1,4 +1,4 @@ <!ENTITY torprogress.dialog.title "Tor Stav"> <!ENTITY torprogress.openSettings "Otevřít nastavení"> <!ENTITY torprogress.heading "Připojuji se k síti Tor"> -<!ENTITY torprogress.pleaseWait "Please wait while we establish a connection to the Tor network."> +<!ENTITY torprogress.pleaseWait "Prosím vyčkejte než bude sestaveno připojení k síti Tor.">

1 0