tor-commits August 2014

tor-commits@lists.torproject.org

21 participants
1599 discussions

[obfs4/master] Add support for enabling IAT obfuscation and biased WDist.
by yawning＠torproject.org 18 Aug '14

18 Aug '14

commit 22c9dc3f489dd0984e431ede95f963bc1f57222c Author: Yawning Angel <yawning(a)torproject.org> Date: Mon Aug 18 11:53:22 2014 +0000 Add support for enabling IAT obfuscation and biased WDist. Golang's command line parser is slightly cumbersome to use with subcommands, so the arguments are "obfs4-iatObufscation" and "obfs-distBias" instead of obfsproxy style subcommands. --- transports/obfs4/obfs4.go | 26 +++++++++++++++++--------- 1 file changed, 17 insertions(+), 9 deletions(-) diff --git a/transports/obfs4/obfs4.go b/transports/obfs4/obfs4.go index 7af7224..fbfea27 100644 --- a/transports/obfs4/obfs4.go +++ b/transports/obfs4/obfs4.go @@ -32,6 +32,7 @@ package obfs4 import ( "bytes" "crypto/sha256" + "flag" "fmt" "math/rand" "net" @@ -55,25 +56,27 @@ const ( privateKeyArg = "private-key" seedArg = "drbg-seed" + iatCmdArg = "obfs4-iatObfuscation" + biasCmdArg = "obfs4-distBias" + seedLength = 32 headerLength = framing.FrameOverhead + packetOverhead clientHandshakeTimeout = time.Duration(60) * time.Second serverHandshakeTimeout = time.Duration(30) * time.Second replayTTL = time.Duration(3) * time.Hour - // Use a ScrambleSuit style biased probability table. - biasedDist = false - - // Use IAT obfuscation. - iatObfuscation = false - - // Maximum IAT delay (100 usec increments). - maxIATDelay = 100 - + maxIATDelay = 100 maxCloseDelayBytes = maxHandshakeLength maxCloseDelay = 60 ) +// iatObfuscation controls if Inter-Arrival Time obfuscation will be enabled. +var iatObfuscation bool + +// biasedDist controls if the probability table will be ScrambleSuit style or +// uniformly distributed. +var biasedDist bool + type obfs4ClientArgs struct { nodeID *ntor.NodeID publicKey *ntor.PublicKey @@ -573,6 +576,11 @@ func (conn *obfs4Conn) padBurst(burst *bytes.Buffer) (err error) { return } +func init() { + flag.BoolVar(&iatObfuscation, iatCmdArg, false, "Enable obfs4 IAT obfuscation (expensive)") + flag.BoolVar(&biasedDist, biasCmdArg, false, "Enable obfs4 using ScrambleSuit style table generation") +} + var _ base.ClientFactory = (*obfs4ClientFactory)(nil) var _ base.ServerFactory = (*obfs4ServerFactory)(nil) var _ base.Transport = (*Transport)(nil)

1 0

r26923: {website} remove dead turkish mirror (website/trunk/include)
by Andrew Lewman 18 Aug '14

18 Aug '14

Author: phobos Date: 2014-08-18 11:48:56 +0000 (Mon, 18 Aug 2014) New Revision: 26923 Modified: website/trunk/include/tor-mirrors.csv Log: remove dead turkish mirror Modified: website/trunk/include/tor-mirrors.csv =================================================================== --- website/trunk/include/tor-mirrors.csv 2014-08-18 11:45:28 UTC (rev 26922) +++ website/trunk/include/tor-mirrors.csv 2014-08-18 11:48:56 UTC (rev 26923) @@ -89,7 +89,6 @@ admin AT netgull DOT com, NetGull, US, United States, North America, TRUE, TRUE, No, , , , , http://www.netgull.com/torproject/, , , , nick at calyx dot com, The Calyx Institute, US, United States, North America, TRUE, FALSE, No, http://tor.calyxinstitute.org, https://tor.calyxinstitute.org, , , http://tor.calyxinstitute.org/dist/, https://tor.calyxinstitute.org/dist/, , http://tmdrhl4e4anhsjc5.onion, Thu Jun 5 20:11:09 2014 tor-mirror AT rdns DOT cc, d0wn.biz, FR, France, Europe, TRUE, FALSE, No, http://tor.static.lu, https://tor.static.lu, , , http://tor.static.lu/dist/, https://tor.static.lu/dist/, , , Sun Aug 3 22:21:33 2014 -calebcenter(a)live.com, alebcay.tk, US, United States, US, TRUE, FALSE, NO, http://tor.alebcay.tk, , rsync://alebcay.tk/tor, ftp://ftp.alebcay.tk, http://tor.alebcay.tk/dist, , , , Sun Jul 20 23:16:25 2014 kevinmg(a)pressfreedomfoundation.org, Freedom of the Press Foundation, US, United States, US, True, False, No, http://tor.pressfreedomfoundation.org, https://tor.pressfreedomfoundation.org, , , http://tor.pressfreedomfoundation.org/dist/, https://tor.pressfreedomfoundation.org/dist/, , , Sun Aug 3 22:21:33 2014 tor(a)moparisthebest.com, moparisthebest.com, DE, Germany, Europe, TRUE, TRUE, No, http://www.moparisthebest.com/tor/, https://www.moparisthebest.com/tor/, , , http://www.moparisthebest.com/tor/dist/, https://www.moparisthebest.com/tor/dist/, , , Sun Aug 3 22:21:33 2014 tor(a)fodt.it // FoDT.it Webteam, FoDT.it, AT, Austria, Europe, TRUE, FALSE, No, http://tor.fodt.it, https://tor.fodt.it, , ftp://ftp.fodt.it/pub/mirrors/torproject.org/, http://tor.fodt.it/dist/, https://tor.fodt.it/dist/, , , Sun Aug 3 22:21:33 2014 @@ -105,4 +104,5 @@ torsupport AT tb-itf DOT de, TB-ITF, , DE, Germany, Europe, TRUE, TRUE, No, http://tormirror.tb-itf-tor.de, https://tormirror.tb-itf-tor.de, , , , http://tormirror.tb-itf-tor.de/dist/, https://tormirror.tb-itf-tor.de/dist/, Tor Fan, Ramos Research, US, United States, US, TRUE, TRUE, No, http://tor.ramosresearch.com/, , , , http://tor.ramosresearch.com/dist/, , , , Sun Aug 3 22:21:33 2014 admin at koreswatanabe dottnet, Tor Supporter, RO, Romania, RO, TRUE, TRUE, No, http://tor-relay.koreswatanabe.net, , , , http://tor-relay.koreswatanabe.net/dist/, , , , -Tor Fan, Tor Supporter,DE,Germany,Europe,TRUE,FALSE,No,http://tor.euve33747.vserver.de/,,,,http://tor.euve33747.vserver.de/dist,,,, \ No newline at end of file +Tor Fan, Tor Supporter,DE,Germany,Europe,TRUE,FALSE,No,http://tor.euve33747.vserver.de/,,,,http://tor.euve33747.vserver.de/dist,,,, +calebcenter(a)live.com, calebxu.tk, US, United States, US, TRUE, FALSE, NO,http://tor.calebxu.tk, , rsync://calebxu.tk/tor, ftp://ftp.calebxu.tk,http://tor.calebxu.tk/dist, , , \ No newline at end of file

1 0

[translation/tor-launcher-properties_completed] Update translations for tor-launcher-properties_completed
by translation＠torproject.org 18 Aug '14

18 Aug '14

commit c3bc5e58f7dbd6f6ec5b6683b8b4c90de088a670 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Aug 18 11:45:34 2014 +0000 Update translations for tor-launcher-properties_completed --- fr/torlauncher.properties | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/fr/torlauncher.properties b/fr/torlauncher.properties index 874e6af..aea75c6 100644 --- a/fr/torlauncher.properties +++ b/fr/torlauncher.properties @@ -3,8 +3,8 @@ torlauncher.error_title=Lanceur Tor -torlauncher.tor_exited=Le programme Tor s'est terminé de manière inatendue. -torlauncher.tor_connection_lost=Votre connexion à Tor a été perdue. +torlauncher.tor_exited=Tor s'est terminé de manière inattendue. Cela pourrait être dû à un bug dans Tor lui-même, à un autre logiciel sur votre système, ou à un défaut matériel. Jusqu'à ce que vous redémarriez Tor, le navigateur Tor sera incapable d'atteindre un site Web. Si le problème persiste, veuillez envoyer une copie de votre historique Tor à l'équipe d'assistance. +torlauncher.tor_exited2=Redémarrer Tor ne fermera pas les onglets de votre navigateur torlauncher.tor_controlconn_failed=Impossible de se connecter au port de contrôle de Tor. torlauncher.tor_failed_to_start=Tor n'a pas pu démarrer. torlauncher.tor_control_failed=Échec lors de la prise de contrôle de Tor. @@ -30,7 +30,7 @@ torlauncher.error_bridge_bad_default_type=Aucun des bridges fournis n'a le type torlauncher.recommended_bridge=(recommandé) torlauncher.connect=Se connecter -torlauncher.reconnect=Reconnecter +torlauncher.restart_tor=Relancer Tor torlauncher.quit=Quitter torlauncher.quit_win=Sortir torlauncher.done=Terminé

1 0

[translation/tor-launcher-properties] Update translations for tor-launcher-properties
by translation＠torproject.org 18 Aug '14

18 Aug '14

commit 74e9ca1bd3122ef3266380cbcc73082f98ed0172 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Aug 18 11:45:31 2014 +0000 Update translations for tor-launcher-properties --- fr/torlauncher.properties | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/fr/torlauncher.properties b/fr/torlauncher.properties index e4501c1..aea75c6 100644 --- a/fr/torlauncher.properties +++ b/fr/torlauncher.properties @@ -3,8 +3,8 @@ torlauncher.error_title=Lanceur Tor -torlauncher.tor_exited=Tor unexpectedly exited. This might be due to a bug in Tor itself, another program on your system, or faulty hardware. Until you restart Tor, the Tor Browser will not able to reach any websites. If the problem persists, please send a copy of your Tor Log to the support team. -torlauncher.tor_exited2=Restarting Tor will not close your browser tabs. +torlauncher.tor_exited=Tor s'est terminé de manière inattendue. Cela pourrait être dû à un bug dans Tor lui-même, à un autre logiciel sur votre système, ou à un défaut matériel. Jusqu'à ce que vous redémarriez Tor, le navigateur Tor sera incapable d'atteindre un site Web. Si le problème persiste, veuillez envoyer une copie de votre historique Tor à l'équipe d'assistance. +torlauncher.tor_exited2=Redémarrer Tor ne fermera pas les onglets de votre navigateur torlauncher.tor_controlconn_failed=Impossible de se connecter au port de contrôle de Tor. torlauncher.tor_failed_to_start=Tor n'a pas pu démarrer. torlauncher.tor_control_failed=Échec lors de la prise de contrôle de Tor.

1 0

r26922: {website} remove a mirror (website/trunk/include)
by Andrew Lewman 18 Aug '14

18 Aug '14

Author: phobos Date: 2014-08-18 11:45:28 +0000 (Mon, 18 Aug 2014) New Revision: 26922 Modified: website/trunk/include/tor-mirrors.csv Log: remove a mirror Modified: website/trunk/include/tor-mirrors.csv =================================================================== --- website/trunk/include/tor-mirrors.csv 2014-08-18 11:44:39 UTC (rev 26921) +++ website/trunk/include/tor-mirrors.csv 2014-08-18 11:45:28 UTC (rev 26922) @@ -30,7 +30,6 @@ Tor Fan, Tor Supporter, UK, United Kingdom, UK, TRUE, FALSE, No, http://tor.mage.me.uk/, , , , http://tor.mage.me.uk/dist/, , , , webmaster AT askapache DOT com, AskApache, US, California, US, TRUE, FALSE, No, http://tor.askapache.com/, , , , http://tor.askapache.com/dist/, , , , Sun Aug 3 22:21:33 2014 nsane2307 eml cc, tor-mirror.de, DE, Germany, Europe, TRUE, FALSE, No, http://tor-mirror.de/, https://tor-mirror.de/, , , http://tor-mirror.de/dist/, https://tor-mirror.de/dist/, , , -Tor Fan, hessmo, US, United States, US, TRUE, FALSE, No, http://mirror.hessmo.com/tor/, , , , http://mirror.hessmo.com/tor/dist/, , , , Sun Aug 3 22:21:33 2014 Tor Fan, Tor Supporter, DE, Germany, DE, TRUE, FALSE, No, http://tor.dev-random.de/, https://tor.dev-random.de/, , , http://tor.dev-random.de/dist/, https://tor.dev-random.de/dist/, , , Sun Mar 2 06:08:00 2014 Tor Fan, India Tor Fans, IN, India, IN, TRUE, FALSE, No, http://www.torproject.org.in/, , , , http://www.torproject.org.in/dist/, , , , Sun Aug 3 22:21:33 2014 mirror-admin(a)linsrv.net, linsrv, FR, France, Europe, TRUE, FALSE, No, http://mirrors.linsrv.net/torproject/, , mirrors.linsrv.net::pub/torproject, ftp://ftp.linsrv.net/pub/torproject/, http://mirrors.linsrv.net/torproject/dist/, , mirrors.linsrv.net::pub/torproject/dist, , Sat Apr 26 16:04:13 2014

1 0

r26921: {website} add new mirror (website/trunk/include)
by Andrew Lewman 18 Aug '14

18 Aug '14

Author: phobos Date: 2014-08-18 11:44:39 +0000 (Mon, 18 Aug 2014) New Revision: 26921 Modified: website/trunk/include/tor-mirrors.csv Log: add new mirror Modified: website/trunk/include/tor-mirrors.csv =================================================================== --- website/trunk/include/tor-mirrors.csv 2014-08-17 18:39:36 UTC (rev 26920) +++ website/trunk/include/tor-mirrors.csv 2014-08-18 11:44:39 UTC (rev 26921) @@ -106,3 +106,4 @@ torsupport AT tb-itf DOT de, TB-ITF, , DE, Germany, Europe, TRUE, TRUE, No, http://tormirror.tb-itf-tor.de, https://tormirror.tb-itf-tor.de, , , , http://tormirror.tb-itf-tor.de/dist/, https://tormirror.tb-itf-tor.de/dist/, Tor Fan, Ramos Research, US, United States, US, TRUE, TRUE, No, http://tor.ramosresearch.com/, , , , http://tor.ramosresearch.com/dist/, , , , Sun Aug 3 22:21:33 2014 admin at koreswatanabe dottnet, Tor Supporter, RO, Romania, RO, TRUE, TRUE, No, http://tor-relay.koreswatanabe.net, , , , http://tor-relay.koreswatanabe.net/dist/, , , , +Tor Fan, Tor Supporter,DE,Germany,Europe,TRUE,FALSE,No,http://tor.euve33747.vserver.de/,,,,http://tor.euve33747.vserver.de/dist,,,, \ No newline at end of file

1 0

[ooni-probe/master] Fixed dns_spoof test
by art＠torproject.org 18 Aug '14

18 Aug '14

commit eca91753ab98118190626f1dbb6b583b54ec18d5 Author: kudrom <kudrom(a)riseup.net> Date: Sun Aug 17 22:04:24 2014 +0200 Fixed dns_spoof test --- ooni/nettests/manipulation/dns_spoof.py | 48 +++++++++++++------------------ 1 file changed, 20 insertions(+), 28 deletions(-) diff --git a/ooni/nettests/manipulation/dns_spoof.py b/ooni/nettests/manipulation/dns_spoof.py index aa464d4..a73ad6e 100644 --- a/ooni/nettests/manipulation/dns_spoof.py +++ b/ooni/nettests/manipulation/dns_spoof.py @@ -37,53 +37,45 @@ class DNSSpoof(scapyt.ScapyTest): requiresTor = False def setUp(self): - self.resolverAddr, self.resolverPort = self.localOptions[ - 'resolver'].split(':') + self.resolverAddr, self.resolverPort = self.localOptions['resolver'].split(':') self.resolverPort = int(self.resolverPort) - self.controlResolverAddr, self.controlResolverPort = self.localOptions[ - 'backend'].split(':') + self.controlResolverAddr, self.controlResolverPort = self.localOptions['backend'].split(':') self.controlResolverPort = int(self.controlResolverPort) self.hostname = self.localOptions['hostname'] - def postProcessor(self, report): + def postProcessor(self, measurements): """ This is not tested, but the concept is that if the two responses match up then spoofing is occuring. """ try: - test_answer = report['test_a_lookup']['answered_packets'][0][1] - control_answer = report['test_control_a_lookup'][ - 'answered_packets'][0][1] + test_answer = self.report['answered_packets'][0][UDP] + control_answer = self.report['answered_packets'][1][UDP] except IndexError: self.report['spoofing'] = 'no_answer' - return - - if test_answer[UDP] == control_answer[UDP]: - self.report['spoofing'] = True else: - self.report['spoofing'] = False - return + if test_answer == control_answer: + self.report['spoofing'] = False + else: + self.report['spoofing'] = True + return self.report @defer.inlineCallbacks def test_a_lookup(self): - question = IP(dst=self.resolverAddr)/UDP() - question /= DNS(rd=1, qd=DNSQR(qtype="A", - qclass="IN", - qname=self.hostname)) - log.msg( - "Performing query to %s with %s:%s" % - (self.hostname, self.resolverAddr, self.resolverPort)) + question = IP(dst=self.resolverAddr) / \ + UDP() / \ + DNS(rd=1, qd=DNSQR(qtype="A", qclass="IN", qname=self.hostname)) + log.msg("Performing query to %s with %s:%s" % + (self.hostname, self.resolverAddr, self.resolverPort)) yield self.sr1(question) @defer.inlineCallbacks def test_control_a_lookup(self): - question = IP(dst=self.controlResolverAddr)/UDP() / \ - DNS(rd=1, qd=DNSQR(qtype="A", qclass="IN", qname=self.hostname)) - log.msg( - "Performing query to %s with %s:%s" % - (self.hostname, - self.controlResolverAddr, - self.controlResolverPort)) + question = IP(dst=self.controlResolverAddr) / \ + UDP() / \ + DNS(rd=1, qd=DNSQR(qtype="A", qclass="IN", qname=self.hostname)) + log.msg("Performing query to %s with %s:%s" % + (self.hostname, self.controlResolverAddr, self.controlResolverPort)) yield self.sr1(question)

1 0

[ooni-probe/master] Update changelog
by art＠torproject.org 18 Aug '14

18 Aug '14

commit 71f2b3fcfb3fdccb6ead3467b5bcc63db4113a33 Author: Arturo Filastò <art(a)fuffa.org> Date: Mon Aug 18 12:53:42 2014 +0200 Update changelog --- ChangeLog.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/ChangeLog.md b/ChangeLog.md index 40368bc..a349dff 100644 --- a/ChangeLog.md +++ b/ChangeLog.md @@ -32,6 +32,9 @@ Here is a more detailed list of what has been done: Minor bug fixes: +* Fix dns_spoof test (by kudrom) + https://trac.torproject.org/projects/tor/ticket/12486 + * ooni might not look at requiresTor: https://trac.torproject.org/projects/tor/ticket/11858

1 0

[ooni-probe/master] Fix unittest for tor silly listener
by art＠torproject.org 18 Aug '14

18 Aug '14

commit 54d017322c9abdf1acacd2da91be655a724d79e1 Author: Arturo Filastò <art(a)fuffa.org> Date: Mon Aug 18 13:02:37 2014 +0200 Fix unittest for tor silly listener --- ooni/tests/test_settings.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/ooni/tests/test_settings.py b/ooni/tests/test_settings.py index e022a64..9687965 100644 --- a/ooni/tests/test_settings.py +++ b/ooni/tests/test_settings.py @@ -47,6 +47,10 @@ class TestSettings(ConfigTestCase): class SillyFactory(Factory): protocol = SillyProtocol + def buildProtocol(self, address): + p = self.protocol(self) + return p + self.silly_listener = reactor.listenTCP(self.conf.tor.socks_port, SillyFactory()) def test_vanilla_configuration(self):

1 0

[translation/tor-launcher-network-settings] Update translations for tor-launcher-network-settings
by translation＠torproject.org 18 Aug '14

18 Aug '14

commit 1e9825e1acc0d020a22a1df4ab5482aedf87a841 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Aug 18 07:45:33 2014 +0000 Update translations for tor-launcher-network-settings --- lo/network-settings.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lo/network-settings.dtd b/lo/network-settings.dtd index ec42517..327cd14 100644 --- a/lo/network-settings.dtd +++ b/lo/network-settings.dtd @@ -23,7 +23,7 @@ <!ENTITY torSettings.firewallHelp "ຖ້າທ່ານຍັງບໍ່ແນ່ໃຈວ່າຈະຕອບຄໍາຖາມນີ້ແນວໃດ, ໃຫ້ເລືອກ No. ຖ້າທ່ານພົບບັນຫາໃນການເຊື່ອມຕໍ່ເຂົ້າເຄືອຂ່າຍ Tor, ໃຫ້ປ່ຽນ ການຕັ້ງຄ່ານີ້."> <!ENTITY torSettings.enterFirewall "ໃຫ້ ໝາຍຈຸຂັ້ນ ລາຍການ ປະຕູເຊື່ອມຕໍ່ ທີ່ ຟາຍວັອນລ໌ ອະນຸຍາດໃຫ້."> <!ENTITY torSettings.bridgeQuestion "ຜູ້ໃຫ້ບໍລິການ ອິນເຕີເນັດ (ISP) ກັນໄວ້ບໍ່ ຫຼືບໍ່ ກໍແມ່ນ ມີການກວດສອບ ກ່ອນທີ່ຈະເຊື່ອມຕໍ່ເຂົ້າກັບເຄືອຂ່າຍ Tor?"> -<!ENTITY torSettings.bridgeHelp "If you are not sure how to answer this question, choose No.  If you choose Yes, you will be asked to configure Tor Bridges, which are unlisted relays that make it more difficult to block connections to the Tor Network."> +<!ENTITY torSettings.bridgeHelp "ຖ້າທ່ານຍັງບໍ່ແນ່ໃຈວ່າຈະຕອບຄໍາຖາມນີ້ແນວໃດ, ໃຫ້ເລືອກ No.  ຖ້າທ່ານເລືກ Yes, ທ່ານ ຈະ ຖືກບອກ ໃຫ້ກຳນົດຄ່າ Tor Bridge ທີ່ບໍ່ໄດ້ຢູ່ໃນລາຍການ ຊຶ່ງຈະເຮັດໃຫ້ຫຍຸ້ງຍາກຕື່ມ ໃນການກັ້ນ ການເຊື່ອມຕໍ່ເຂົ້າເຄືອຂ່າຍ Tor."> <!ENTITY torSettings.bridgeSettingsPrompt "You may use the provided set of bridges or you may obtain and enter a custom set of bridges.">

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

tor-commits August 2014