May 2015 - tor-commits - lists.torproject.org

[tor-browser-spec/master] Describe user behavior as a fingerprinting source.
by mikeperry＠torproject.org 05 May '15

05 May '15

commit d8b78e0729a1e5d16244812fbc86b9fa9f29f5b0 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Mon May 4 20:14:38 2015 -0700 Describe user behavior as a fingerprinting source. Also generalize TCP Port to TCP Port and Local Network. --- design-doc/design.xml | 38 ++++++++++++++++++++++++++++---------- 1 file changed, 28 insertions(+), 10 deletions(-) diff --git a/design-doc/design.xml b/design-doc/design.xml index 3d4f18e..fbec073 100644 --- a/design-doc/design.xml +++ b/design-doc/design.xml @@ -1464,8 +1464,10 @@ severe, and how to study the efficacy of defenses properly. <title>Sources of Fingerprinting Issues</title> <para> -All fingerprinting issues arise from one of four primary sources. In order -from most severe to least severe, these sources are: +All fingerprinting issues arise from one of four primary sources in the +browser. Additionally, user behavior itself provides one more source of +potential fingerprinting. Listed in order from most severe to least severe in +terms of the amount of information they reveal, these sources are: </para> <orderedlist> @@ -1487,13 +1489,15 @@ do so only on a per-site basis via site permissions, to avoid linkability. <listitem><command>Device and Hardware Characteristics</command> <para> -Device and hardware characteristics can be determined in three ways: they can be -reported explicitly by the browser, they can be inferred through API behavior, -or they can be extracted through statistical measurements of system -performance. We are most concerned with the cases where this information is -either directly reported or can be determined via a single use of an API or -feature, and prefer to place such APIs either behind site permissions, or -disable them entirely. +Device and hardware characteristics can be determined in three ways: they can +be reported explicitly by the browser, they can be inferred through browser +functionality, or they can be extracted through statistical measurements of +system performance. We are most concerned with the cases where this +information is either directly reported or can be determined via a single use +of an API or feature, and prefer to place such APIs either behind site +permissions, alter their functionality to prevent exposing the most variable +aspects of these characteristics, or disable them entirely. + </para> <para> @@ -1522,6 +1526,20 @@ specific version of a system can be inferred. </para> </listitem> + <listitem><command>User Behavior</command> + <para> + +While somewhat outside the scope of browser fingerprinting, for completeness +it is important to mention that users themselves theoretically might be +fingerprinted through their behavior while interacting with a website. This +behavior includes as keystrokes, mouse movements, click speed, and writing +style. Basic vectors such as keystroke and mouse usage fingerprinting can be +mitigated by altering Javascript's notion of time. More advanced issues like +writing style fingerprinting are the domain of <ulink +url="https://github.com/psal/anonymouth">other tools</ulink>. + + </para> + </listitem> <listitem><command>Browser Vendor and Version Differences</command> <para> @@ -1633,7 +1651,7 @@ image data, pure white image data is returned to the Javascript APIs. <para> </para> </listitem> - <listitem>Open TCP Port Fingerprinting + <listitem>Open TCP Port and Local Network Fingerprinting <para> In Firefox, by using either WebSockets or XHR, it is possible for remote

1 0

[tor-browser-spec/master] Clarify the identifier unlinkability section.
by mikeperry＠torproject.org 05 May '15

05 May '15

commit 3d07e2d54d2944bd182145908399bc01c7bbe791 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Mon May 4 21:14:02 2015 -0700 Clarify the identifier unlinkability section. --- design-doc/design.xml | 32 ++++++++++++++++++++++---------- 1 file changed, 22 insertions(+), 10 deletions(-) diff --git a/design-doc/design.xml b/design-doc/design.xml index fbec073..88f6426 100644 --- a/design-doc/design.xml +++ b/design-doc/design.xml @@ -1112,16 +1112,14 @@ $HOME environment variable to be the TBB extraction directory. <title>Cross-Origin Identifier Unlinkability</title> <para> -The Tor Browser MUST prevent a user's activity on one site from being linked -to their activity on another site. When this goal cannot yet be met with an -existing web technology, that technology or functionality is disabled. Our -<link linkend="privacy">design goal</link> is to ultimately eliminate the need to disable arbitrary -technologies, and instead simply alter them in ways that allows them to -function in a backwards-compatible way while avoiding linkability. Users -should be able to use federated login of various kinds to explicitly inform -sites who they are, but that information should not transparently allow a -third party to record their activity from site to site without their prior -consent. +The Cross-Origin Identifier Unlinkability design requirement is satisfied +through first party isolation of all browser identifier sources. First party +isolation means that all identifier sources and browser state are scoped +(isolated) using the the URL bar domain. This scoping is performed in +combination with any additional third party scope. When first party isolation +is used with explicit identifier storage that already has a constrained third +party scope (such as cookies, DOM storage, and cache), this approach is +referred to as "double-keying". </para> <para> @@ -1152,6 +1150,19 @@ form history, login values, and so on within a context menu for each site. </caption> </figure> + + <sect3> + <title>Identifier Unlinkability Defenses in the Tor Browser</title> + <para> + +Unfortunately, many aspects of browser state can serve as identifier storage, +and no other browser vendor or standards body has invested the effort to +enumerate or otherwise deal with these vectors for third party tracking. As +such, we have had to enumerate and isolate these identifier sources on a +piecemeal basis. Here is the list that we have discovered and dealt with to +date: + + </para> <orderedlist> <listitem>Cookies <para><command>Design Goal:</command> @@ -1430,6 +1441,7 @@ Identity</command> invocations. For more details on identifier linkability bugs and enhancements, see the <ulink url="https://trac.torproject.org/projects/tor/query?keywords=~tbb-linkability&am…">tbb-linkability tag in our bugtracker</ulink> </para> + </sect3> </sect2> <sect2 id="fingerprinting-linkability"> <title>Cross-Origin Fingerprinting Unlinkability</title>

1 0

[webwml/master] ugh -- what have i done. maybe this will fix it.
by arma＠torproject.org 05 May '15

05 May '15

commit d44d2685480f72baef100e68ba0b08765a167860 Author: Roger Dingledine <arma(a)torproject.org> Date: Mon May 4 23:10:57 2015 -0400 ugh -- what have i done. maybe this will fix it. --- press/en/info.wmi | 4 ---- 1 file changed, 4 deletions(-) diff --git a/press/en/info.wmi b/press/en/info.wmi index 52968ff..9c9e307 100644 --- a/press/en/info.wmi +++ b/press/en/info.wmi @@ -7,12 +7,8 @@ <h2 class="media">Press Contact</h2> <p> <b>Tor Press Team</b><br> -<<<<<<< HEAD - execdir(a)torproject.org<br> -======= press(a)torproject.org<br> +1-617-902-0208 ->>>>>>> 5628d54898b63540d5df3179261a9cdd591fd970 </p> </div>

1 0

[webwml/master] stop listing a phone number on our press page
by arma＠torproject.org 05 May '15

05 May '15

commit fea31a279b48deb698915ae3db29f2d6e4a25dba Author: Roger Dingledine <arma(a)torproject.org> Date: Tue Apr 14 15:49:51 2015 -0400 stop listing a phone number on our press page --- press/en/info.wmi | 1 - 1 file changed, 1 deletion(-) diff --git a/press/en/info.wmi b/press/en/info.wmi index 976436b..5429016 100644 --- a/press/en/info.wmi +++ b/press/en/info.wmi @@ -8,7 +8,6 @@ <p> <b>Tor Press Team</b><br> execdir(a)torproject.org<br> - +1-781-948-1982<br> </p> </div>

1 0

[webwml/master] Merge branch 'master' of ssh://git-rw.torproject.org/project/web/webwml
by arma＠torproject.org 05 May '15

05 May '15

commit fd56b785c6300a0b675bcd30424c6a3c67472b9f Merge: fea31a2 5628d54 Author: Roger Dingledine <arma(a)torproject.org> Date: Mon May 4 22:35:33 2015 -0400 Merge branch 'master' of ssh://git-rw.torproject.org/project/web/webwml Conflicts: press/en/info.wmi Makefile | 4 +- about/en/board.wml | 120 +++--- about/en/contact.wml | 20 +- about/en/corepeople.wml | 28 +- about/en/gsoc.wml | 6 +- about/en/overview.wml | 51 +-- about/en/sponsors.wml | 7 +- about/en/torusers.wml | 76 ++-- about/en/volunteers.wml | 18 +- css/layout.css | 15 +- docs/en/bridges.wml | 10 +- docs/en/debian.wml | 240 +++++++++++- docs/en/faq.wml | 22 +- docs/en/hidden-services.wml | 40 +- docs/en/pluggable-transports.wml | 2 +- docs/en/running-a-mirror.wml | 4 +- docs/en/signing-keys.wml | 11 +- docs/en/tor-doc-osx.wml | 131 +++---- docs/en/tor-doc-relay.wml | 6 +- docs/en/tor-doc-unix.wml | 22 +- docs/en/tor-doc-windows.wml | 51 +-- docs/en/tor-hidden-service.wml | 18 +- docs/en/verifying-signatures.wml | 132 ++++--- docs/torbutton/en/design/design.xml | 4 +- docs/torbutton/en/design/index.html.en | 4 +- donate/en/donate.wml | 12 +- download/en/download-easy.wml | 30 +- download/en/download.wml | 10 +- getinvolved/en/relays.wml | 34 +- getinvolved/en/tshirt.wml | 4 +- getinvolved/en/volunteer.wml | 208 ++++------ images/tbb-macosx-step-1.png | Bin 0 -> 21334 bytes images/tbb-macosx-step-2.png | Bin 0 -> 20451 bytes images/tbb-macosx-step-3.png | Bin 0 -> 13846 bytes include/dlhead.wmi | 4 +- include/mirrors-table.wmi | 302 +++++++-------- include/tor-mirrors.csv | 150 ++++---- include/versions.wmi | 30 +- press/en/info.wmi | 5 + press/en/press.wml | 60 +++ projects/en/gettor.wml | 93 +---- projects/en/obfsproxy.wml | 2 +- projects/en/torbrowser.wml | 78 ++-- projects/torbrowser/RecommendedTBBVersions | 20 +- projects/torbrowser/design/index.html.en | 562 +++++++++++++++++----------- 45 files changed, 1419 insertions(+), 1227 deletions(-) diff --cc press/en/info.wmi index 5429016,9c9e307..52968ff --- a/press/en/info.wmi +++ b/press/en/info.wmi @@@ -7,7 -7,8 +7,12 @@@ <h2 class="media">Press Contact</h2> <p> <b>Tor Press Team</b><br> ++<<<<<<< HEAD + execdir(a)torproject.org<br> ++======= + press(a)torproject.org<br> + +1-617-902-0208 ++>>>>>>> 5628d54898b63540d5df3179261a9cdd591fd970 </p> </div>

1 0

[webwml/master] download page listed 0.2.5.12 as the latest stable
by arma＠torproject.org 05 May '15

05 May '15

commit 99b7b20fb00b57f5534dfc229f53337b921d4cf2 Author: Roger Dingledine <arma(a)torproject.org> Date: Mon May 4 22:37:08 2015 -0400 download page listed 0.2.5.12 as the latest stable --- include/versions.wmi | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/include/versions.wmi b/include/versions.wmi index 2c116c7..c83c573 100644 --- a/include/versions.wmi +++ b/include/versions.wmi @@ -1,4 +1,4 @@ -<define-tag version-stable whitespace=delete>0.2.5.12</define-tag> +<define-tag version-stable whitespace=delete>0.2.6.7</define-tag> <define-tag version-alpha whitespace=delete>0.2.6.7</define-tag> <define-tag version-win32-stable whitespace=delete>0.2.6.7</define-tag>

1 0

[translation/gettor_completed] Update translations for gettor_completed
by translation＠torproject.org 05 May '15

05 May '15

commit 16f2db34301224f686592c086f09648647dee0f0 Author: Translation commit bot <translation(a)torproject.org> Date: Mon May 4 23:15:09 2015 +0000 Update translations for gettor_completed --- ko/gettor.po | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/ko/gettor.po b/ko/gettor.po index 1b7bb8d..a7e0d72 100644 --- a/ko/gettor.po +++ b/ko/gettor.po @@ -14,7 +14,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2013-01-19 13:40+0100\n" -"PO-Revision-Date: 2015-05-04 22:41+0000\n" +"PO-Revision-Date: 2015-05-04 23:01+0000\n" "Last-Translator: 류종헌\n" "Language-Team: Korean (http://www.transifex.com/projects/p/torproject/language/ko/)\n" "MIME-Version: 1.0\n" @@ -293,7 +293,7 @@ msgstr "패키지가 곧 도착할 것입니다. 모든 패키지를 압축을 msgid "" "It was successfully understood. Your request is currently being processed.\n" "Your package (%s) should arrive within the next ten minutes." -msgstr "성공적으로 이해되었습니다. 귀하의 요청은 현재 진행중이며, 패키지(%s)는 다음 10분 내로 도착해야 합니다." +msgstr "정상적으로 접수되었습니다.\n귀하의 요청은 현재 진행중에 있으며, 요청하신 패키지(%s)는 다음 10분 내로 도착할 것입니다." #: lib/gettor/i18n.py:191 msgid "" @@ -363,7 +363,7 @@ msgid "" "macos-i386:\n" "The Tor Browser Bundle package for OS X, Intel CPU architecture. In \n" "general, newer Mac hardware will require you to use this package." -msgstr "macos-i386:\nIntel 아키렉처를 사용하고 있는 OS X를 위한 Tor Browser Bundle입니다. 일반적으로, 최근의 Mac 하드웨어는 이 패키지가 필요합니다." +msgstr "macos-i386:\nIntel 아키렉처를 사용하고 있는 OS X를 위한 Tor Browser Bundle입니다. 2000년 이후로 출시된 대부분의 Mac은 이 패키지가 필요합니다." #: lib/gettor/i18n.py:231 msgid "" @@ -404,28 +404,28 @@ msgid "" "obfs-macos-i386:\n" "The Tor Obfsproxy Browser Bundle package for OS X, 32bit Intel CPU \n" "architecture." -msgstr "obfs-macos-i386:\n32비트 인텔 CPU 아키렉쳐를 사용하는OSX를 위한 Tor Obfsproxy Browser Bundle 패키지" +msgstr "obfs-macos-i386:\n32비트 인텔 CPU 아키텍쳐를 사용하는OSX를 위한 Tor Obfsproxy Browser Bundle 패키지" #: lib/gettor/i18n.py:254 msgid "" "obfs-macos-x86_64:\n" "The Tor Obfsproxy Browser Bundle package for OS X, 64bit Intel CPU \n" "architecture." -msgstr "obfs-macos-x86_64:\n64비트 인텔 CPU 아키렉쳐를 사용하는OSX를 위한 Tor Obfsproxy Browser Bundle 패키지" +msgstr "obfs-macos-x86_64:\n64비트 인텔 CPU 아키텍쳐를 사용하는OSX를 위한 Tor Obfsproxy Browser Bundle 패키지" #: lib/gettor/i18n.py:258 msgid "" "obfs-linux-i386:\n" "The Tor Obfsproxy Browser Bundle package for Linux, 32bit Intel CPU \n" "architecture." -msgstr "obfs-linux-i386:\n\n32비트 인텔 CPU 아키렉셔를 사용하는 리눅스를 위한 Tor Obfsproxy Browser bundle \n패키지" +msgstr "obfs-linux-i386:\n\n32비트 인텔 CPU 아키텍쳐를 사용하는 리눅스를 위한 Tor Obfsproxy Browser bundle \n패키지" #: lib/gettor/i18n.py:262 msgid "" "obfs-linux-x86_64:\n" "The Tor Obfsproxy Browser Bundle package for Linux, 64bit Intel CPU \n" "architecture." -msgstr "obfs-linux-x86_64:\n64비트 인텔 CPU 아키렉셔를 사용하는 리눅스를 위한 Tor Obfsproxy Browser Bundle\n 패키지" +msgstr "obfs-linux-x86_64:\n64비트 인텔 CPU 아키텍쳐를 사용하는 리눅스를 위한 Tor Obfsproxy Browser Bundle\n 패키지" #: lib/gettor/i18n.py:266 msgid "" @@ -445,7 +445,7 @@ msgstr "Tor는 무엇입니까?" #: lib/gettor/i18n.py:274 msgid "The name \"Tor\" can refer to several different components." -msgstr "\"토르\"는 여러 가지 서로 다른 구성 요소를 참조할 수 있습니다." +msgstr "\"Tor(토르)\"는 여러 가지 서로 다른 구성 요소를 참조할 수 있습니다." #: lib/gettor/i18n.py:276 msgid "" @@ -481,7 +481,7 @@ msgid "" "operating system is Microsoft Windows, you should request \"windows\". Here\n" "is a short explanation of all packages to request and what operating \n" "systems there are suitable for:" -msgstr "이것은 사용하는 운영 체제에 따라 다릅니다. 운영 체제가 Microsoft\nWindows인 경우 예를 들어, \"창\"을 요청해야 합니다. \n적합한 운영 체제와 모든 패키지에 대한 간단한 설명 요청하십시오:" +msgstr "이것은 사용하는 운영 체제에 따라 다릅니다. 운영 체제가 Microsoft\nWindows인 경우 예를 들어, \"windows\"를 요청해야 합니다. \n아래의 내용은 요청할 수 있는 운영 체제 및 간단한 설명 입니다:" #: lib/gettor/i18n.py:299 msgid "How do I extract the file(s) you sent me?"

1 0

[translation/gettor] Update translations for gettor
by translation＠torproject.org 05 May '15

05 May '15

commit 253bd93e1cb8181217f0602cca0679c3f86c6b6f Author: Translation commit bot <translation(a)torproject.org> Date: Mon May 4 23:15:05 2015 +0000 Update translations for gettor --- ko/gettor.po | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/ko/gettor.po b/ko/gettor.po index 1b7bb8d..a7e0d72 100644 --- a/ko/gettor.po +++ b/ko/gettor.po @@ -14,7 +14,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2013-01-19 13:40+0100\n" -"PO-Revision-Date: 2015-05-04 22:41+0000\n" +"PO-Revision-Date: 2015-05-04 23:01+0000\n" "Last-Translator: 류종헌\n" "Language-Team: Korean (http://www.transifex.com/projects/p/torproject/language/ko/)\n" "MIME-Version: 1.0\n" @@ -293,7 +293,7 @@ msgstr "패키지가 곧 도착할 것입니다. 모든 패키지를 압축을 msgid "" "It was successfully understood. Your request is currently being processed.\n" "Your package (%s) should arrive within the next ten minutes." -msgstr "성공적으로 이해되었습니다. 귀하의 요청은 현재 진행중이며, 패키지(%s)는 다음 10분 내로 도착해야 합니다." +msgstr "정상적으로 접수되었습니다.\n귀하의 요청은 현재 진행중에 있으며, 요청하신 패키지(%s)는 다음 10분 내로 도착할 것입니다." #: lib/gettor/i18n.py:191 msgid "" @@ -363,7 +363,7 @@ msgid "" "macos-i386:\n" "The Tor Browser Bundle package for OS X, Intel CPU architecture. In \n" "general, newer Mac hardware will require you to use this package." -msgstr "macos-i386:\nIntel 아키렉처를 사용하고 있는 OS X를 위한 Tor Browser Bundle입니다. 일반적으로, 최근의 Mac 하드웨어는 이 패키지가 필요합니다." +msgstr "macos-i386:\nIntel 아키렉처를 사용하고 있는 OS X를 위한 Tor Browser Bundle입니다. 2000년 이후로 출시된 대부분의 Mac은 이 패키지가 필요합니다." #: lib/gettor/i18n.py:231 msgid "" @@ -404,28 +404,28 @@ msgid "" "obfs-macos-i386:\n" "The Tor Obfsproxy Browser Bundle package for OS X, 32bit Intel CPU \n" "architecture." -msgstr "obfs-macos-i386:\n32비트 인텔 CPU 아키렉쳐를 사용하는OSX를 위한 Tor Obfsproxy Browser Bundle 패키지" +msgstr "obfs-macos-i386:\n32비트 인텔 CPU 아키텍쳐를 사용하는OSX를 위한 Tor Obfsproxy Browser Bundle 패키지" #: lib/gettor/i18n.py:254 msgid "" "obfs-macos-x86_64:\n" "The Tor Obfsproxy Browser Bundle package for OS X, 64bit Intel CPU \n" "architecture." -msgstr "obfs-macos-x86_64:\n64비트 인텔 CPU 아키렉쳐를 사용하는OSX를 위한 Tor Obfsproxy Browser Bundle 패키지" +msgstr "obfs-macos-x86_64:\n64비트 인텔 CPU 아키텍쳐를 사용하는OSX를 위한 Tor Obfsproxy Browser Bundle 패키지" #: lib/gettor/i18n.py:258 msgid "" "obfs-linux-i386:\n" "The Tor Obfsproxy Browser Bundle package for Linux, 32bit Intel CPU \n" "architecture." -msgstr "obfs-linux-i386:\n\n32비트 인텔 CPU 아키렉셔를 사용하는 리눅스를 위한 Tor Obfsproxy Browser bundle \n패키지" +msgstr "obfs-linux-i386:\n\n32비트 인텔 CPU 아키텍쳐를 사용하는 리눅스를 위한 Tor Obfsproxy Browser bundle \n패키지" #: lib/gettor/i18n.py:262 msgid "" "obfs-linux-x86_64:\n" "The Tor Obfsproxy Browser Bundle package for Linux, 64bit Intel CPU \n" "architecture." -msgstr "obfs-linux-x86_64:\n64비트 인텔 CPU 아키렉셔를 사용하는 리눅스를 위한 Tor Obfsproxy Browser Bundle\n 패키지" +msgstr "obfs-linux-x86_64:\n64비트 인텔 CPU 아키텍쳐를 사용하는 리눅스를 위한 Tor Obfsproxy Browser Bundle\n 패키지" #: lib/gettor/i18n.py:266 msgid "" @@ -445,7 +445,7 @@ msgstr "Tor는 무엇입니까?" #: lib/gettor/i18n.py:274 msgid "The name \"Tor\" can refer to several different components." -msgstr "\"토르\"는 여러 가지 서로 다른 구성 요소를 참조할 수 있습니다." +msgstr "\"Tor(토르)\"는 여러 가지 서로 다른 구성 요소를 참조할 수 있습니다." #: lib/gettor/i18n.py:276 msgid "" @@ -481,7 +481,7 @@ msgid "" "operating system is Microsoft Windows, you should request \"windows\". Here\n" "is a short explanation of all packages to request and what operating \n" "systems there are suitable for:" -msgstr "이것은 사용하는 운영 체제에 따라 다릅니다. 운영 체제가 Microsoft\nWindows인 경우 예를 들어, \"창\"을 요청해야 합니다. \n적합한 운영 체제와 모든 패키지에 대한 간단한 설명 요청하십시오:" +msgstr "이것은 사용하는 운영 체제에 따라 다릅니다. 운영 체제가 Microsoft\nWindows인 경우 예를 들어, \"windows\"를 요청해야 합니다. \n아래의 내용은 요청할 수 있는 운영 체제 및 간단한 설명 입니다:" #: lib/gettor/i18n.py:299 msgid "How do I extract the file(s) you sent me?"

1 0

[tor-browser-spec/master] Minor fixes and clarifications
by mikeperry＠torproject.org 05 May '15

05 May '15

commit 56581bbb7af9d5d0a180e9ca36cd85855536b769 Author: Georg Koppen <gk(a)torproject.org> Date: Mon May 4 15:35:39 2015 +0000 Minor fixes and clarifications --- design-doc/design.xml | 62 +++++++++++++++++++++++-------------------------- 1 file changed, 29 insertions(+), 33 deletions(-) diff --git a/design-doc/design.xml b/design-doc/design.xml index c0cb1b1..f7ef5dc 100644 --- a/design-doc/design.xml +++ b/design-doc/design.xml @@ -1623,11 +1623,10 @@ fingerprinting vectors. If WebGL is normalized through software rendering, system colors were standardized, and the browser shipped a fixed collection of fonts (see later points in this list), it might not be necessary to create a canvas permission. However, until then, to reduce the threat from this vector, -we have patched Firefox to <ulink -url="https://gitweb.torproject.org/tor-browser.git/commit/?h=tor-browser-31.6.0e…">prompt -before returning valid image data</ulink> to the Canvas APIs. If the user -hasn't previously allowed the site in the URL bar to access Canvas image data, -pure white image data is returned to the Javascript APIs. +we have patched Firefox to <ulink url="https://gitweb.torproject.org/tor-browser.git/commit/?h=tor-browser-31.6.0e…">prompt before returning valid image data</ulink> to the Canvas APIs, +and for <ulink url="https://gitweb.torproject.org/tor-browser.git/commit/?h=tor-browser-31.6.0e…">access to isPointInPath and related functions</ulink>. +If the user hasn't previously allowed the site in the URL bar to access Canvas +image data, pure white image data is returned to the Javascript APIs. </para> <para> @@ -1774,27 +1773,25 @@ zoom/viewport-based mechanisms</ulink> that might allow us to always report the same desktop resolution regardless of the actual size of the content window, and simply scale to make up the difference. Until then, the user should also be informed that maximizing their windows can lead to fingerprintability under -this scheme. +this scheme. </para> <para><command>Implementation Status:</command> We automatically resize new browser windows to a 200x100 pixel multiple using -a window observer to <ulink -url="https://gitweb.torproject.org/torbutton.git/tree/src/chrome/content/torbutt…">resize -new windows based on desktop resolution</ulink>. To minimize the effect of the -long tail of large monitor sizes, we also cap the the window size at 1000 -pixels in each direction. Additionally, we patch -Firefox to use the client content window size <ulink +a window observer <ulink +url="https://gitweb.torproject.org/torbutton.git/tree/src/chrome/content/torbutt…">based +on desktop resolution</ulink>. To minimize the effect of the long tail of large +monitor sizes, we also cap the window size at 1000 pixels in each direction. +Additionally, we patch Firefox to use the client content window size <ulink url="https://gitweb.torproject.org/tor-browser.git/commit/?h=tor-browser-31.6.0e…">for window.screen</ulink>, and to <ulink url="https://gitweb.torproject.org/tor-browser.git/commit/?h=tor-browser-31.6.0e…">report a window.devicePixelRatio of 1.0</ulink>. Similarly, we <ulink url="https://gitweb.torproject.org/tor-browser.git/commit/?h=tor-browser-31.6.0e…">patch -DOM events to return content window relative points</ulink>. We also +DOM events to return content window relative points</ulink>. -We also force -popups to open in new tabs (via +We also force popups to open in new tabs (via <command>browser.link.open_newwindow.restriction</command>), to avoid full-screen popups inferring information about the browser resolution. In addition, we prevent auto-maximizing on browser start, and inform users that @@ -1972,7 +1969,7 @@ large number of people. </para> <para><command>Implementation Status:</command> -Currently, the our mitigation against performance fingerprinting is to +Currently, our mitigation against performance fingerprinting is to disable <ulink url="http://www.w3.org/TR/navigation-timing/">Navigation Timing</ulink> through the Firefox preference <command>dom.enable_performance</command>, and to disable the <ulink @@ -2035,7 +2032,7 @@ Connection API</ulink>, and the <ulink url="https://wiki.mozilla.org/Sensor_API">Sensor API</ulink>. We disable these APIs through the Firefox preferences <command>dom.battery.enabled</command>, <command>dom.network.enabled</command>, and -<command>device.sensors.enabled</command>. +<command>device.sensors.enabled</command>. </para> </listitem> @@ -2204,10 +2201,11 @@ video click-to-play via NoScript (<command>noscript.forbidMedia</command>). This security level inherits the preferences from the Medium-Low level, and additionally disables the baseline JIT -(<command>javascript.options.baselinejit.content</command>), disables graphite -font rendering (<command>gfx.font_rendering.graphite.enabled</command>), and -only allows Javascript to run if it is loaded over HTTPS and the URL bar is -HTTPS (by setting <command>noscript.global</command> to false and +(<command>javascript.options.baselinejit.content</command>), disables Graphite +(<command>gfx.font_rendering.graphite.enabled</command>) and SVG OpenType font +rendering (<command>gfx.font_rendering.opentype_svg.enabled</command>) and only +allows Javascript to run if it is loaded over HTTPS and the URL bar is HTTPS +(by setting <command>noscript.global</command> to false and <command>noscript.globalHttpsWhitelist</command> to true). </para> @@ -2279,7 +2277,7 @@ pipelining may simply return error codes for successive requests, effectively forcing the browser into non-pipelined behavior. Firefox also has code to back off and reduce or eliminate the pipeline if this happens. These shortcomings and fallback behaviors are the primary reason that Google -developed SPDY as opposed simply extending HTTP to improve pipelining. It +developed SPDY as opposed to simply extending HTTP to improve pipelining. It turns out that we could actually deploy exit-side proxies that allow us to <ulink url="https://gitweb.torproject.org/torspec.git/tree/proposals/ideas/xxx-using-sp…">use @@ -2475,7 +2473,7 @@ patch</ulink>. The standard way of controlling timestamps in Gitian is to use libfaketime, which hooks time-related library calls to provide a fixed timestamp. However, due to our use of wine to run py2exe for python-based pluggable transports, -pyc timestamps had to be address with an additional <ulink +pyc timestamps had to be addressed with an additional <ulink url="https://gitweb.torproject.org/builders/tor-browser-bundle.git/tree/gitian/b…">helper script</ulink>. The timezone leaks were addressed by setting the <command>TZ</command> environment variable to UTC in our descriptors. @@ -2523,22 +2521,20 @@ directly patching the aspects of the Firefox build process that included this information into the build. It also turns out that some libraries (in particular: libgmp) attempt to detect the current CPU to determine which optimizations to compile in. This CPU type is uniform on our KVM instances, -but differs under LXC. We are also investigating currently <ulink -url="https://trac.torproject.org/projects/tor/ticket/12239">unknown sources of -unitialized memory</ulink> that only appear in LXC mode, as well as +but differs under LXC. We are also investigating currently <ulink url="https://trac.torproject.org/projects/tor/ticket/12240">oddities related to time-based dependency tracking</ulink> that only appear in LXC containers. </para> </listitem> - </orderedlist> + </orderedlist> </sect2> <sect2> <title>Package Signatures and Verification</title> <para> -The build process produces a single sha256sums.txt file that contains a sorted +The build process generates a single sha256sums.txt file that contains a sorted list of the SHA-256 hashes of every package produced for that build version. Each official builder uploads this file and a GPG signature of it to a directory on a Tor Project's web server. The build scripts have an optional matching @@ -2583,7 +2579,7 @@ Verification</ulink> page. Due to the fact that bit-identical packages can be produced by anyone, the security of this build system extends beyond the security of the official build machines. In fact, it is still possible for build integrity to be -achieved even if all official build machines are compromised. +achieved even if all official build machines are compromised. </para> <para> @@ -2605,7 +2601,7 @@ verifier. <para> We make use of the Firefox updater in order to provide automatic updates to -users. We make use of certificate pinning to ensure that update checks +users. We make use of certificate pinning to ensure that update checks cannot be tampered with, and we sign the individual MAR update files with an offline signing key. @@ -2613,11 +2609,11 @@ signing key. <para> The Firefox updater also has code to ensure that it can reliably access the -update server to prevent availability attacks, and complains to the user of 48 +update server to prevent availability attacks, and complains to the user after 48 hours go by without a successful response from the server. Additionally, we use Tor's SOCKS username and password isolation to ensure that every new -request to the updater traverses a separate circuit, to avoid holdback attacks -by exit nodes. +request to the updater (provided the former got issued more than 10 minutes ago) +traverses a separate circuit, to avoid holdback attacks by exit nodes. </para> </sect2>

1 0

[translation/gettor_completed] Update translations for gettor_completed
by translation＠torproject.org 05 May '15

05 May '15

commit 176791fa0ea6b008dc837051f20c1dd85508b901 Author: Translation commit bot <translation(a)torproject.org> Date: Mon May 4 22:45:11 2015 +0000 Update translations for gettor_completed --- ko/gettor.po | 41 +++++++++++++++++++++-------------------- 1 file changed, 21 insertions(+), 20 deletions(-) diff --git a/ko/gettor.po b/ko/gettor.po index 4072bd5..1b7bb8d 100644 --- a/ko/gettor.po +++ b/ko/gettor.po @@ -7,14 +7,15 @@ # cwt96 <cwt967(a)naver.com>, 2012 # Jacob Appelbaum <jacob(a)appelbaum.net>, 2009 # Dr.what <javrick6(a)naver.com>, 2014 +# 류종헌, 2015 # pCsOrI <pcsori(a)gmail.com>, 2012 msgid "" msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2013-01-19 13:40+0100\n" -"PO-Revision-Date: 2014-10-15 17:11+0000\n" -"Last-Translator: Dr.what <javrick6(a)naver.com>\n" +"PO-Revision-Date: 2015-05-04 22:41+0000\n" +"Last-Translator: 류종헌\n" "Language-Team: Korean (http://www.transifex.com/projects/p/torproject/language/ko/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" @@ -24,7 +25,7 @@ msgstr "" #: lib/gettor/i18n.py:27 msgid "Hello, This is the \"GetTor\" robot." -msgstr "안녕하세요, 이것은 \"Gettor\" 로봇입니다." +msgstr "안녕하세요, \"GetTor\" 로봇에서 답변드립니다." #: lib/gettor/i18n.py:29 msgid "Thank you for your request." @@ -35,14 +36,14 @@ msgid "" "Unfortunately, we won't answer you at this address. You should make\n" "an account with GMAIL.COM, YAHOO.COM or YAHOO.CN and send the mail from\n" "one of those." -msgstr "불행하게도, 우리는 이 주소로 답변을 보내지 않을 것입니다. GMAIL.COM, YAHOO.COM, YAHOO.CN 의 메일 주소를 만드시고 그 메일로 다시 메일을 보내 주십시오." +msgstr "불행하게도, 우리는 이 주소로 답변을 보내지 않을 것입니다. GMAIL.COM, YAHOO.COM, YAHOO.CN 에서 메일 주소를 만드시고 그 메일로 다시 메일을 보내 주십시오." #: lib/gettor/i18n.py:35 msgid "" "We only process requests from email services that support \"DKIM\",\n" "which is an email feature that lets us verify that the address in the\n" "\"From\" line is actually the one who sent the mail." -msgstr "우리는 \"DKIM\"를 지원하는 이메일 서비스에서 프로세스만 요청합니다.\n이것은 \"보낸 사람\"의 주소가 실제로 메일을 보낸 사람인지 확인하실 수 있는 메일 기능입니다." +msgstr "저희는 \"From\" 라인에 있는 주소가 실제로 그 메일을 보낸 사람의 것인지를 확인할 수 있는 이메일 기능인 \"DKIM\"을 지원하는 이메일 서버스로부터 온 요청만 처리합니다." #: lib/gettor/i18n.py:39 msgid "" @@ -73,13 +74,13 @@ msgid "" " obfs-linux-i386\n" " obfs-linux-x86_64\n" " source" -msgstr "원하는 Tor 패키지를 이름을 보낸다면, Tor 패키지를 보내 드립니다.\n아래와 같은 패키지 이름 중 하나를 선택해 주십시오.\n\n windows\n macos-i386\n macos-ppc\n linux-i386\n linux-x86_64\n obfs-windows\n obfs-macos-i386\n obfs-macos-x86_64\n obfs-linux-i386\n obfs-linux-x86_64\n source" +msgstr "원하시는 Tor 패키지를 이름을 기재하여 보내주시면, Tor 패키지를 보내 드립니다.\n아래와 같은 패키지 이름 중 하나를 선택해 주십시오.\n\n windows\n macos-i386\n macos-ppc\n linux-i386\n linux-x86_64\n obfs-windows\n obfs-macos-i386\n obfs-macos-x86_64\n obfs-linux-i386\n obfs-linux-x86_64\n source" #: lib/gettor/i18n.py:61 msgid "" "Please reply to this mail, and tell me a single package name anywhere \n" "in the body of your email." -msgstr "이 메일에 답변해 주십시오. 그리도 하나의 패키지 이름을 메일 본문 중 어디든지 써서 보내 주십시오." +msgstr "위의 패키지 중 하나를 메일 본문 중 어디든지 써서 이 메일에 보내 주십시오." #: lib/gettor/i18n.py:64 msgid "" @@ -104,7 +105,7 @@ msgstr "이 예는 페르시아어 버전을 보내 줄 것입니다. 지원하 #: lib/gettor/i18n.py:76 msgid " List of supported locales:" -msgstr "지원하는 언어 목록" +msgstr "지원하는 언어 목록:" #: lib/gettor/i18n.py:78 msgid "Here is a list of all available languages:" @@ -127,20 +128,20 @@ msgstr " gettor+ar(a)torproject.org: 아랍어\n gettor+de(a)torproject.or #: lib/gettor/i18n.py:92 msgid "If you select no language, you will receive the English version." -msgstr "언어를 선택하지 않으면, 영어 버전을 보내드립니다." +msgstr "언어를 선택하지 않으면, 영어 버전을 보내드릴 것입니다." #: lib/gettor/i18n.py:94 msgid "" "SMALLER SIZED PACKAGES\n" "======================" -msgstr "작은 크기 패키지\n===========" +msgstr "저용량 패키지\n===========" #: lib/gettor/i18n.py:97 msgid "" "If your bandwith is low or your provider doesn't allow you to\n" "receive large attachments in your email, GetTor can send you several\n" "small packages instead of one big one." -msgstr "귀하의 대역폭이 낮거나 귀하의 ISP가 이메일에서 큰 첨부파일을 허용하지 않을경우, GetTor는 큰 파일 대신 작은 여러 개의 압축 파일을 보낼 수 있습니다." +msgstr "귀하의 이메일 서비스의 대역폭이 낮거나 귀하의 큰 첨부파일을 지원하지 않을 경우, GetTor는 큰 파일 하나 대신 분할된 압축 파일 여러 개로 보내 드립니다." #: lib/gettor/i18n.py:101 msgid "" @@ -149,19 +150,19 @@ msgid "" " \n" " windows\n" " split" -msgstr "간단히 'split' 을 다음 줄에 써 주십시오. 예시는 다음과 같습니다:\n \n windows\n split" +msgstr "다음과 같이 'split' 을 한 줄에 써 주시기만 하면 됩니다.:\n \n windows\n split" #: lib/gettor/i18n.py:107 msgid "" "Sending this text in an email to GetTor will cause it to send you \n" "the Tor Browser Bundle in a number of 1,4MB attachments." -msgstr "이 텍스트를 이메일로 GetTor에 보내시면 Tor browser bundle을 1.4 MB 첨부 파일로 분할하여 보내드립니다." +msgstr "이 텍스트를 이메일로 GetTor에 보내시면 윈도우 버전의 Tor browser bundle을 1.4 MB 첨부 파일 여러개로 분할하여 보내드립니다." #: lib/gettor/i18n.py:110 msgid "" "After having received all parts, you need to re-assemble them to \n" "one package again. This is done as follows:" -msgstr "모든 부분을 받은 뒤에, 패키지를 다시 합칠 필요가 있습니다. 따라하십시오." +msgstr "모든 부분을 받은 뒤에, 패키지를 다시 합칠 필요가 있습니다. 다음과 같이 하시면 됩니다:" #: lib/gettor/i18n.py:113 msgid "1.) Save all received attachments into one folder on your disk." @@ -172,20 +173,20 @@ msgid "" "2.) Unzip all files ending in \".z\". If you saved all attachments to\n" "a fresh folder before, simply unzip all files in that folder. If you don't\n" "know how to unzip the .z files, please see the UNPACKING THE FILES section." -msgstr "2.) \".z\"로 끝나는 모든 파일을 압축푸십시오. 만약 모든 첨부파일이 한 폴더에 있으시다면, 간단히 그 폴더에 압축을 푸시면 됩니다. 만약 .z 파일을 어떻게 푸는지 모르신다면, 아래 \"파일 압축풀기\" 단락을 보십시오." +msgstr "2.) \".z\"로 끝나는 모든 파일의 압축을 푸십시오. 만약 모든 첨부파일이 한 폴더에 있다면, 간단히 그 폴더에 압축을 푸시면 됩니다. 만약 .z 파일을 어떻게 푸는지 모르신다면, 아래 \"파일 압축풀기\" 단락을 보십시오." #: lib/gettor/i18n.py:119 msgid "" "3.) Verify all files as described in the mail you received with \n" "each package. (gpg --verify)" -msgstr "3.) 각각의 패키지와 받은 메일 속의 설명으로 모든 파일을 검증하십시오. (gpg --verify)" +msgstr "3.) 각각의 패키지와 받은 메일 속의 설명으로 모든 파일이 제대로 받아 졌는지 검증하십시오. (gpg --verify)" #: lib/gettor/i18n.py:122 msgid "" "4.) Now unpack the multi-volume archive into one file by double-\n" "clicking the file ending in \"..split.part01.exe\". This should start the \n" "process automatically." -msgstr "4.) 지금 멀티볼륨 아카이브를 \".split.part01.exe\"로 끝나는\n파일을 더블클릭해서 압축을 푸십시오.이것은 자동으로\n과정을 시작할 것입니다." +msgstr "4.) 이제 \".split.part01.exe\"로 끝나는 분할된 압축 파일을\n더블클릭해서 압축을 푸십시오. 더블클릭 하시면 바로 압축이 해제됩니다." #: lib/gettor/i18n.py:126 msgid "" @@ -233,13 +234,13 @@ msgid "" "a graphical user interface for GnuPG on this website:\n" "\n" " http://www.gnupg.org/related_software/frontends.html" -msgstr "만약 커멘드라인 툴이 익숙하지 않다면, 아래의 사이트에서 GnuPG를 위한 그래픽 유져 인터페이스를 시도해 보십시오.\n\n http://www.gnupg.org/related_software/frontends.html" +msgstr "만약 커멘드라인 툴이 익숙하지 않다면, 아래의 사이트에서 GnuPG의 GUI(그래픽 유져 인터페이스) 버전으로 시도해 보십시오.\n\n http://www.gnupg.org/related_software/frontends.html" #: lib/gettor/i18n.py:157 msgid "" "BLOCKED ACCESS / CENSORSHIP\n" "===========================" -msgstr "막혀진 접근 / 검열\n===========================" +msgstr "접속 차단 / 검열\n===========================" #: lib/gettor/i18n.py:160 msgid "" @@ -249,7 +250,7 @@ msgid "" "is no complete public list of them, even if your ISP is filtering\n" "connections to all the known Tor relays, they probably won't be able\n" "to block all the bridges." -msgstr "만약 귀하의 인터넷 연결이 Tor 네트워크 연결을 막는다면, bridge 중계가 필요할 지도 모릅니다. Bridge 중계(또는 bridge로 짧게)는 메인 디렉토리에 있지 않는 Tor 중계서버입니다. 중계서버에 대한 완벽한 목록이 없기 때문에, 심지어 ISP가 잘 알려진 Tor 중계서버에 대한 연결을 막더라고, 그들은 아마 모든 birdge를 막을 수는 없을 것이빈다." +msgstr "만약 귀하의 인터넷 연결이 Tor 네트워크 연결을 차단한다면, bridge 중계가 필요할 지도 모릅니다. Bridge 중계(약칭 bridge)는 메인 디렉토리에 있지 않는 Tor 중계서버입니다. 중계서버에 대한 완벽한 목록이 없기 때문에, 심지어 ISP가 잘 알려진 Tor 중계서버에 대한 연결을 막더라도, 그들은 아마 모든 birdge를 막을 수는 없을 것입니다." #: lib/gettor/i18n.py:167 msgid ""

1 0