June 2015 - tor-commits - lists.torproject.org

[bridgedb/develop] Add two more tests for Bridge.getBridgeLine() for blocked PTs.
by isis＠torproject.org 25 Jun '15

25 Jun '15

commit 534969dff39cd0307838bda213f0b183f6c5b24f Author: Isis Lovecruft <isis(a)torproject.org> Date: Sat Apr 18 05:12:12 2015 +0000 Add two more tests for Bridge.getBridgeLine() for blocked PTs. --- lib/bridgedb/test/test_bridges.py | 41 +++++++++++++++++++++++++++++++++++++ 1 file changed, 41 insertions(+) diff --git a/lib/bridgedb/test/test_bridges.py b/lib/bridgedb/test/test_bridges.py index d7dd810..499a8c2 100644 --- a/lib/bridgedb/test/test_bridges.py +++ b/lib/bridgedb/test/test_bridges.py @@ -1484,6 +1484,47 @@ class BridgeTests(unittest.TestCase): self.assertIsNone(line) + def test_Bridge_getBridgeLine_blocked_pt_and_request_without_block_pt(self): + """Calling getBridgeLine() with a valid request for obfs3 bridges not + blocked in Iran, when the obfs3 line is blocked in Iran, shouldn't + return a bridge line. + """ + self.bridge.updateFromNetworkStatus(self.networkstatus) + self.bridge.updateFromServerDescriptor(self.serverdescriptor) + self.bridge.updateFromExtraInfoDescriptor(self.extrainfo) + + self.bridge.setBlockedIn('ir', methodname="obfs3") + + request = BridgeRequestBase() + request.isValid(True) + request.withoutBlockInCountry('IR') + request.withPluggableTransportType('obfs3') + line = self.bridge.getBridgeLine(request) + + self.assertIsNone(line) + + def test_Bridge_getBridgeLine_blocked_obfs3_and_request_without_block_obfs4(self): + """Calling getBridgeLine() with a valid request for obfs4 bridges not + blocked in Iran, when the obfs3 line is blocked in Iran, should return + a bridge line. + """ + self.bridge.updateFromNetworkStatus(self.networkstatus) + self.bridge.updateFromServerDescriptor(self.serverdescriptor) + self.bridge.updateFromExtraInfoDescriptor(self.extrainfo) + + self.bridge.setBlockedIn('ir', methodname="obfs3") + + request = BridgeRequestBase() + request.isValid(True) + request.withoutBlockInCountry('IR') + request.withPluggableTransportType('obfs4') + line = self.bridge.getBridgeLine(request) + + self.assertIsNotNone(line) + self.assertIn('obfs4', line) + self.assertIn('179.178.155.140:36493', line) + self.assertIn('2C3225C4805331025E211F4B6E5BF45C333FDD2C', line) + def test_Bridge_getBridgeLine_IPv6(self): """Calling getBridgeLine() with a valid request for IPv6 bridges should return a bridge line.

1 0

[bridgedb/develop] Move Dist.getNumBridgesPerAnswer() → Distributor.bridgesPerResponse().
by isis＠torproject.org 25 Jun '15

25 Jun '15

commit a51f553e281091bc365d4161da2fb8d1b33923d9 Author: Isis Lovecruft <isis(a)torproject.org> Date: Sat Apr 18 22:41:27 2015 +0000 Move Dist.getNumBridgesPerAnswer() → Distributor.bridgesPerResponse(). It was meant to be a method; it operates on the length of the primary hashring of a Distributor. Having it outside of the class that it interacts with is just wacky. * CHANGE getNumBridgesPerAnswer into a method for the Distributor class. * CHANGE the unittests for the function to take this into account. --- lib/bridgedb/Dist.py | 43 +++++++++++++++++------------- lib/bridgedb/test/test_Dist.py | 56 ++++++++++++++++++---------------------- 2 files changed, 50 insertions(+), 49 deletions(-) diff --git a/lib/bridgedb/Dist.py b/lib/bridgedb/Dist.py index e66c1e6..93c08c1 100644 --- a/lib/bridgedb/Dist.py +++ b/lib/bridgedb/Dist.py @@ -48,26 +48,13 @@ class EmailRequestedKey(Exception): """Raised when an incoming email requested a copy of our GnuPG keys.""" -def getNumBridgesPerAnswer(ring, max_bridges_per_answer=3): - if len(ring) < 20: - n_bridges_per_answer = 1 - if 20 <= len(ring) < 100: - n_bridges_per_answer = min(2, max_bridges_per_answer) - if len(ring) >= 100: - n_bridges_per_answer = max_bridges_per_answer - - logging.debug("Returning %d bridges from ring of len: %d" % - (n_bridges_per_answer, len(ring))) - - return n_bridges_per_answer - - class Distributor(object): """Distributes bridges to clients.""" def __init__(self): super(Distributor, self).__init__() self.name = None + self.hashring = None def setDistributorName(self, name): """Set a **name** for identifying this distributor. @@ -89,6 +76,21 @@ class Distributor(object): self.name = name self.hashring.distributorName = name + def bridgesPerResponse(self, hashring=None, maximum=3): + if hashring is None: + hashring = self.hashring + + if len(hashring) < 20: + n = 1 + if 20 <= len(hashring) < 100: + n = min(2, maximum) + if len(hashring) >= 100: + n = maximum + + logging.debug("Returning %d bridges from ring of len: %d" % + (n, len(hashring))) + return n + class HTTPSDistributor(Distributor): """A Distributor that hands out bridges based on the IP address of an @@ -157,6 +159,9 @@ class HTTPSDistributor(Distributor): self.setDistributorName('HTTPS') + def bridgesPerResponse(self, hashring=None, maximum=3): + return super(HTTPSDistributor, self).bridgesPerResponse(hashring, maximum) + @classmethod def getSubnet(cls, ip, usingProxy=False, proxySubnets=4): """Map all clients whose **ip**s are within the same subnet to the same @@ -386,7 +391,7 @@ class HTTPSDistributor(Distributor): populate_from=self.hashring.bridges) # Determine the appropriate number of bridges to give to the client: - returnNum = getNumBridgesPerAnswer(ring, max_bridges_per_answer=N) + returnNum = self.bridgesPerResponse(ring, maximum=N) answer = ring.getBridges(position, returnNum) return answer @@ -440,6 +445,9 @@ class EmailBasedDistributor(Distributor): self.setDistributorName('Email') + def bridgesPerResponse(self, hashring=None, maximum=3): + return super(EmailBasedDistributor, self).bridgesPerResponse(hashring, maximum) + def insert(self, bridge): """Assign a bridge to this distributor.""" self.hashring.insert(bridge) @@ -515,9 +523,8 @@ class EmailBasedDistributor(Distributor): filterBridgesByRules(ruleset), populate_from=self.hashring.bridges) - numBridgesToReturn = getNumBridgesPerAnswer(ring, - max_bridges_per_answer=N) - result = ring.getBridges(pos, numBridgesToReturn) + returnNum = self.bridgesPerResponse(ring, maximum=N) + result = ring.getBridges(pos, returnNum) db.setEmailTime(bridgeRequest.client, now) db.commit() diff --git a/lib/bridgedb/test/test_Dist.py b/lib/bridgedb/test/test_Dist.py index a3c8308..f47449c 100644 --- a/lib/bridgedb/test/test_Dist.py +++ b/lib/bridgedb/test/test_Dist.py @@ -63,37 +63,6 @@ def _generateFakeBridges(n=500): BRIDGES = _generateFakeBridges() -class GetNumBridgesPerAnswerTests(unittest.TestCase): - """Unittests for :func:`bridgedb.Dist.getNumBridgesPerAnswer`.""" - - def setUp(self): - self.key = 'aQpeOFIj8q20s98awfoiq23rpOIjFaqpEWFoij1X' - self.ring = BridgeRing(self.key) - self.bridges = _generateFakeBridges() - - def test_Dist_getNumBridgesPerAnswer_120(self): - [self.ring.insert(bridge) for bridge in self.bridges[:120]] - self.assertEqual(Dist.getNumBridgesPerAnswer(self.ring), 3) - - def test_Dist_getNumBridgesPerAnswer_100(self): - [self.ring.insert(bridge) for bridge in self.bridges[:100]] - self.assertEqual(Dist.getNumBridgesPerAnswer(self.ring), 3) - - def test_Dist_getNumBridgesPerAnswer_50(self): - [self.ring.insert(bridge) for bridge in self.bridges[:60]] - self.assertEqual(Dist.getNumBridgesPerAnswer(self.ring), 2) - - def test_Dist_getNumBridgesPerAnswer_15(self): - [self.ring.insert(bridge) for bridge in self.bridges[:15]] - self.assertEqual(Dist.getNumBridgesPerAnswer(self.ring), 1) - - def test_Dist_getNumBridgesPerAnswer_100_max_5(self): - [self.ring.insert(bridge) for bridge in self.bridges[:100]] - self.assertEqual( - Dist.getNumBridgesPerAnswer(self.ring, max_bridges_per_answer=5), - 5) - - class HTTPSDistributorTests(unittest.TestCase): """Tests for :class:`HTTPSDistributor`.""" @@ -134,6 +103,31 @@ class HTTPSDistributorTests(unittest.TestCase): self.assertEqual(dist.proxySubring, 4) self.assertEqual(dist.totalSubrings, 4) + def test_HTTPSDistributor_bridgesPerResponse_120(self): + dist = Dist.HTTPSDistributor(3, self.key) + [dist.insert(bridge) for bridge in self.bridges[:120]] + self.assertEqual(dist.bridgesPerResponse(), 3) + + def test_HTTPSDistributor_bridgesPerResponse_100(self): + dist = Dist.HTTPSDistributor(3, self.key) + [dist.hashring.insert(bridge) for bridge in self.bridges[:100]] + self.assertEqual(dist.bridgesPerResponse(), 3) + + def test_HTTPSDistributor_bridgesPerResponse_50(self): + dist = Dist.HTTPSDistributor(3, self.key) + [dist.insert(bridge) for bridge in self.bridges[:60]] + self.assertEqual(dist.bridgesPerResponse(), 2) + + def test_HTTPSDistributor_bridgesPerResponse_15(self): + dist = Dist.HTTPSDistributor(3, self.key) + [dist.insert(bridge) for bridge in self.bridges[:15]] + self.assertEqual(dist.bridgesPerResponse(), 1) + + def test_HTTPSDistributor_bridgesPerResponse_100_max_5(self): + dist = Dist.HTTPSDistributor(3, self.key) + [dist.insert(bridge) for bridge in self.bridges[:100]] + self.assertEqual(dist.bridgesPerResponse(maximum=5), 5) + def test_HTTPSDistributor_getSubnet_usingProxy(self): """HTTPSDistributor.getSubnet(usingProxy=True) should return a proxy group number.

1 0

[bridgedb/develop] Remove Bridges.BridgeHolder class.
by isis＠torproject.org 25 Jun '15

25 Jun '15

commit 346d321fa4f78626c49cd4ff6d82a346267f6c0c Author: Isis Lovecruft <isis(a)torproject.org> Date: Sun Apr 19 03:25:11 2015 +0000 Remove Bridges.BridgeHolder class. It wasn't a real metaclass, base class, or interface; its methods were never used; it didn't provide any decent documentation; not everything which inherited from it used its methods; nothing called super() for it, or otherwise called methods on it. Totally useless. * REMOVE bridgedb.Bridges.BridgeHolder class. * CHANGE everything which previously inherited from BridgeHolder to simply inherit from object instead. --- lib/bridgedb/Bridges.py | 63 ++++++++++++++++------------------------ lib/bridgedb/Main.py | 4 +-- lib/bridgedb/persistent.py | 3 +- lib/bridgedb/test/test_Main.py | 6 ++-- 4 files changed, 32 insertions(+), 44 deletions(-) diff --git a/lib/bridgedb/Bridges.py b/lib/bridgedb/Bridges.py index 5742794..1a06dd8 100644 --- a/lib/bridgedb/Bridges.py +++ b/lib/bridgedb/Bridges.py @@ -39,18 +39,6 @@ DIGEST_LEN = 20 PORTSPEC_LEN = 16 -class BridgeHolder(object): - """Abstract base class for all classes that hold bridges.""" - def insert(self, bridge): - raise NotImplementedError - - def clear(self): - pass - - def dumpAssignments(self, f, description=""): - pass - - class BridgeRingParameters(object): """Store validated settings on minimum number of Bridges with certain attributes which should be included in any generated subring of a @@ -99,7 +87,8 @@ class BridgeRingParameters(object): self.needPorts = needPorts[:] self.needFlags = [(flag.lower(), count) for flag, count in needFlags[:]] -class BridgeRing(BridgeHolder): + +class BridgeRing(object): """Arranges bridges into a hashring based on an hmac function.""" def __init__(self, key, answerParameters=None): @@ -333,15 +322,13 @@ class BridgeRing(BridgeHolder): f.write("%s %s\n" % (b.fingerprint, " ".join(desc).strip())) -class FixedBridgeSplitter(BridgeHolder): - """A bridgeholder that splits bridges up based on an hmac and assigns - them to several sub-bridgeholders with equal probability. +class FixedBridgeSplitter(object): + """Splits bridges up based on an HMAC and assigns them to one of several + subhashrings with equal probability. """ def __init__(self, key, rings): self.hmac = getHMACFunc(key, hex=True) self.rings = rings[:] - for r in self.rings: - assert(isinstance(r, BridgeHolder)) def insert(self, bridge): # Grab the first 4 bytes @@ -366,7 +353,7 @@ class FixedBridgeSplitter(BridgeHolder): """Write all bridges assigned to this hashring to ``filename``. :param string description: If given, include a description next to the - index number of the ring from :attr:`FilteredBridgeHolder.rings` + index number of the ring from :attr:`FilteredBridgeSplitter.rings` the following bridges were assigned to. For example, if the description is ``"IPv6 obfs2 bridges"`` the line would read: ``"IPv6 obfs2 bridges ring=3"``. @@ -374,7 +361,8 @@ class FixedBridgeSplitter(BridgeHolder): for index, ring in zip(xrange(len(self.rings)), self.rings): ring.dumpAssignments(filename, "%s ring=%s" % (description, index)) -class UnallocatedHolder(BridgeHolder): + +class UnallocatedHolder(object): """A pseudo-bridgeholder that ignores its bridges and leaves them unassigned. """ @@ -407,10 +395,11 @@ class UnallocatedHolder(BridgeHolder): continue f.write("%s %s\n" % (bridge.hex_key, " ".join(desc).strip())) -class BridgeSplitter(BridgeHolder): - """A BridgeHolder that splits incoming bridges up based on an hmac, - and assigns them to sub-bridgeholders with different probabilities. - Bridge-to-bridgeholder associations are recorded in a store. + +class BridgeSplitter(object): + """Splits incoming bridges up based on an HMAC, and assigns them to + sub-bridgeholders with different probabilities. Bridge ←→ BridgeSplitter + associations are recorded in a store. """ def __init__(self, key): self.hmac = getHMACFunc(key, hex=True) @@ -428,12 +417,13 @@ class BridgeSplitter(BridgeHolder): return n def addRing(self, ring, ringname, p=1): - """Add a new bridgeholder. - ring -- the bridgeholder to add. - ringname -- a string representing the bridgeholder. This is used - to record which bridges have been assigned where in the store. - p -- the relative proportion of bridges to assign to this - bridgeholder. + """Add a new subring. + + :param ring: The subring to add. + :param str ringname: This is used to record which bridges have been + assigned where in the store. + :param int p: The relative proportion of bridges to assign to this + bridgeholder. """ self.ringsByName[ringname] = ring self.pValues.append(self.totalP) @@ -493,8 +483,8 @@ class BridgeSplitter(BridgeHolder): ring.dumpAssignments(f, "%s %s" % (description, name)) -class FilteredBridgeSplitter(BridgeHolder): - """A configurable BridgeHolder that filters bridges into subrings. +class FilteredBridgeSplitter(object): + """Places bridges into subrings based upon sets of filters. The set of subrings and conditions used to assign :class:`Bridge`s should be passed to :meth:`~FilteredBridgeSplitter.addRing`. @@ -513,7 +503,9 @@ class FilteredBridgeSplitter(BridgeHolder): - ``ringname`` is a unique string identifying the subring. - ``filterFn`` is a callable which filters Bridges in some manner, i.e. by whether they are IPv4 or IPv6, etc. - - ``subring`` is a :class:`BridgeHolder`. + - ``subring`` is any of the horribly-implemented, + I-guess-it-passes-for-some-sort-of-hashring classes in this + module. :ivar hmac: DOCDOC :ivar bridges: DOCDOC :type distributorName: str @@ -591,7 +583,6 @@ class FilteredBridgeSplitter(BridgeHolder): def addRing(self, subring, ringname, filterFn, populate_from=None): """Add a subring to this hashring. - :type subring: :class:`BridgeHolder` :param subring: The subring to add. :param str ringname: A unique name for identifying the new subring. :param filterFn: A function whose input is a :class:`Bridge`, and @@ -617,10 +608,6 @@ class FilteredBridgeSplitter(BridgeHolder): # I suppose since it contains memory addresses, it *is* technically # likely to be a unique string, but it is messy. - if not isinstance(subring, BridgeHolder): - logging.fatal("%s hashring can't add invalid subring: %r" - % (self.distributorName, subring)) - return False if ringname in self.filterRings.keys(): logging.fatal("%s hashring already has a subring named '%s'!" % (self.distributorName, ringname)) diff --git a/lib/bridgedb/Main.py b/lib/bridgedb/Main.py index 0bb319d..f382cc5 100644 --- a/lib/bridgedb/Main.py +++ b/lib/bridgedb/Main.py @@ -47,7 +47,7 @@ def load(state, hashring, clear=False): store them into our ``state.hashring`` instance. The ``state`` will be saved again at the end of this function. - :type hashring: :class:`BridgeSplitter <bridgedb.Bridges.BridgeHolder>` + :type hashring: :class:`~bridgedb.Bridges.BridgeSplitter` :param hashring: A class which provides a mechanism for HMACing Bridges in order to assign them to hashrings. :param boolean clear: If True, clear all previous bridges from the @@ -323,7 +323,7 @@ def run(options, reactor=reactor): :ivar cfg: The current configuration, including any in-memory settings (i.e. settings whose values were not obtained from the config file, but were set via a function somewhere) - :type hashring: A :class:`bridgedb.Bridges.BridgeHolder` + :type hashring: A :class:`~bridgedb.Bridges.BridgeSplitter` :ivar hashring: A class which takes an HMAC key and splits bridges into their hashring assignments. :type proxyList: :class:`~bridgedb.proxy.ProxySet` diff --git a/lib/bridgedb/persistent.py b/lib/bridgedb/persistent.py index 1b2507c..c996daa 100644 --- a/lib/bridgedb/persistent.py +++ b/lib/bridgedb/persistent.py @@ -88,7 +88,8 @@ class State(jelly.Jellyable): modules which are known to be unjelliable/unpicklable so far are: - bridgedb.Dist - - bridgedb.Bridges.BridgeHolder and all other ``splitter`` classes + - bridgedb.Bridges, and all "splitter" and "ring" classes contained + within :property statefile: The filename to retrieve a pickled, jellied :class:`~bridgedb.persistent.State` instance from. (default: diff --git a/lib/bridgedb/test/test_Main.py b/lib/bridgedb/test/test_Main.py index 26012f7..e53256f 100644 --- a/lib/bridgedb/test/test_Main.py +++ b/lib/bridgedb/test/test_Main.py @@ -58,7 +58,7 @@ def mockUpdateBridgeHistory(bridges, timestamps): (fingerprint, timestamp)) -class MockBridgeHolder(object): +class MockHashring(object): def __init__(self): self._bridges = {} def __len__(self): @@ -170,8 +170,8 @@ class MainTests(unittest.TestCase): self.state = Main.persistent.State(**self.config.__dict__) self.key = base64.b64decode('TvPS1y36BFguBmSOvhChgtXB2Lt+BOw0mGfz9SZe12Y=') - # Create a BridgeSplitter - self.hashring = MockBridgeHolder() + # Create a pseudo hashring + self.hashring = MockHashring() # Functions which some tests mock, which we'll need to re-replace # later in tearDown():

1 0

[bridgedb/develop] Remove the __len__() method from all Distributors.
by isis＠torproject.org 25 Jun '15

25 Jun '15

commit e6357735d612074fe32f2273c52d9254427caa37 Author: Isis Lovecruft <isis(a)torproject.org> Date: Sun Apr 19 03:51:43 2015 +0000 Remove the __len__() method from all Distributors. --- lib/bridgedb/Dist.py | 6 ------ lib/bridgedb/Main.py | 4 ++-- 2 files changed, 2 insertions(+), 8 deletions(-) diff --git a/lib/bridgedb/Dist.py b/lib/bridgedb/Dist.py index fe81c04..e149d17 100644 --- a/lib/bridgedb/Dist.py +++ b/lib/bridgedb/Dist.py @@ -346,9 +346,6 @@ class HTTPSDistributor(Distributor): return answer - def __len__(self): - return len(self.hashring) - def dumpAssignments(self, f, description=""): self.hashring.dumpAssignments(f, description) @@ -475,9 +472,6 @@ class EmailBasedDistributor(Distributor): return result - def __len__(self): - return len(self.hashring) - def cleanDatabase(self): with bridgedb.Storage.getDB() as db: try: diff --git a/lib/bridgedb/Main.py b/lib/bridgedb/Main.py index f382cc5..ba74b66 100644 --- a/lib/bridgedb/Main.py +++ b/lib/bridgedb/Main.py @@ -215,7 +215,7 @@ def createBridgeRings(cfg, proxyList, key): crypto.getHMAC(key, "HTTPS-IP-Dist-Key"), proxyList, answerParameters=ringParams) - hashring.addRing(ipDistributor, "https", cfg.HTTPS_SHARE) + hashring.addRing(ipDistributor.hashring, "https", cfg.HTTPS_SHARE) # As appropriate, create an email-based distributor. if cfg.EMAIL_DIST and cfg.EMAIL_SHARE: @@ -226,7 +226,7 @@ def createBridgeRings(cfg, proxyList, key): cfg.EMAIL_DOMAIN_RULES.copy(), answerParameters=ringParams, whitelist=cfg.EMAIL_WHITELIST.copy()) - hashring.addRing(emailDistributor, "email", cfg.EMAIL_SHARE) + hashring.addRing(emailDistributor.hashring, "email", cfg.EMAIL_SHARE) # As appropriate, tell the hashring to leave some bridges unallocated. if cfg.RESERVED_SHARE:

1 0

[bridgedb/develop] Remove dumpAssignments() for all Distributors.
by isis＠torproject.org 25 Jun '15

25 Jun '15

commit 69becd92ceb3b55777acddbe4734f7aa912cb425 Author: Isis Lovecruft <isis(a)torproject.org> Date: Sun Apr 19 04:49:24 2015 +0000 Remove dumpAssignments() for all Distributors. These methods were never used. Hashrings dump the bridges assigned to them. --- lib/bridgedb/Dist.py | 6 ------ 1 file changed, 6 deletions(-) diff --git a/lib/bridgedb/Dist.py b/lib/bridgedb/Dist.py index e149d17..fe6b8da 100644 --- a/lib/bridgedb/Dist.py +++ b/lib/bridgedb/Dist.py @@ -346,9 +346,6 @@ class HTTPSDistributor(Distributor): return answer - def dumpAssignments(self, f, description=""): - self.hashring.dumpAssignments(f, description) - class EmailBasedDistributor(Distributor): """Object that hands out bridges based on the email address of an incoming @@ -483,9 +480,6 @@ class EmailBasedDistributor(Distributor): else: db.commit() - def dumpAssignments(self, f, description=""): - self.hashring.dumpAssignments(f, description) - def prepopulateRings(self): # populate all rings (for dumping assignments and testing) for filterFn in [filterBridgesByIP4, filterBridgesByIP6]:

1 0

[tor-browser/tor-browser-38.1.0esr-5.x-1] fixup! TB4: Tor Browser's Firefox preference overrides.
by mikeperry＠torproject.org 25 Jun '15

25 Jun '15

commit e2b23e56513bb5b02d020852fde54c3ee6c0b726 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Wed Jun 24 22:02:42 2015 -0700 fixup! TB4: Tor Browser's Firefox preference overrides. Temporarily disable HTTP/2 pending audit. --- browser/app/profile/000-tor-browser.js | 3 +++ 1 file changed, 3 insertions(+) diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js index da69e6e..596d925 100644 --- a/browser/app/profile/000-tor-browser.js +++ b/browser/app/profile/000-tor-browser.js @@ -104,8 +104,11 @@ pref("security.enable_tls_session_tickets", false); pref("network.http.spdy.enabled", false); // Stores state and may have keepalive issues (both fixable) pref("network.http.spdy.enabled.v2", false); // Seems redundant, but just in case pref("network.http.spdy.enabled.v3", false); // Seems redundant, but just in case +pref("network.http.spdy.enabled.v3-1", false); // Seems redundant, but just in case pref("privacy.thirdparty.isolate", 2); // Always enforce third party isolation pref("dom.workers.sharedWorkers.enabled", false); // See https://bugs.torproject.org/15562 +pref("network.http.spdy.enabled.http2", false); // Temporarily disabled pending implementation review +pref("network.http.spdy.enabled.http2draft", false); // Temporarily disabled pending implementation review // Proxy and proxy security pref("network.proxy.socks", "127.0.0.1");

1 0

[torbutton/master] Bug #16403: Add tor source param to disconnect search
by mikeperry＠torproject.org 25 Jun '15

25 Jun '15

commit 2cbce0ee6eb3518b28b933564f984b80793fd2dc Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Wed Jun 24 21:54:45 2015 -0700 Bug #16403: Add tor source param to disconnect search --- src/chrome/locale/en/aboutTor.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/chrome/locale/en/aboutTor.dtd b/src/chrome/locale/en/aboutTor.dtd index 771f8ae..b923233 100644 --- a/src/chrome/locale/en/aboutTor.dtd +++ b/src/chrome/locale/en/aboutTor.dtd @@ -25,7 +25,7 @@ <!ENTITY aboutTor.searchSPPost.link "https://startpage.com/rth/search"> <!ENTITY aboutTor.searchDDGPost.link "https://duckduckgo.com/html/"> -<!ENTITY aboutTor.searchDCPost.link "https://search.disconnect.me/searchTerms/search?ses=Google&location_opt…"> +<!ENTITY aboutTor.searchDCPost.link "https://search.disconnect.me/searchTerms/search?ses=Google&location_opt…"> <!ENTITY aboutTor.torInfo1.label "Additional Info:"> <!ENTITY aboutTor.torInfo2.label "Country & IP Address:">

1 0

[tor-browser/tor-browser-31.7.0esr-4.5-2] fixup! Omnibox: Add DDG, Startpage, Disconnect, Youtube, Twitter; remove Amazon, eBay, bing
by mikeperry＠torproject.org 25 Jun '15

25 Jun '15

commit 0204f7cdcc2262681675cbd474d0a1d04fc5aa2b Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Wed Jun 24 21:39:54 2015 -0700 fixup! Omnibox: Add DDG, Startpage, Disconnect, Youtube, Twitter; remove Amazon, eBay, bing Add tor search parameter to disconnect. --- browser/locales/en-US/searchplugins/disconnect.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/browser/locales/en-US/searchplugins/disconnect.xml b/browser/locales/en-US/searchplugins/disconnect.xml index 5b80262..cf755c2 100644 --- a/browser/locales/en-US/searchplugins/disconnect.xml +++ b/browser/locales/en-US/searchplugins/disconnect.xml @@ -3,7 +3,7 @@ <ShortName>Search</ShortName> <LongName>Disconnect Private Search</LongName> <Description>Private searches using disconnect.me</Description> - <Url type="text/html" method="POST" template="https://search.disconnect.me/searchTerms/search?ses=Google&location_opt…"> + <Url type="text/html" method="POST" template="https://search.disconnect.me/searchTerms/search?ses=Google&location_opt…"> <Param name="query" value="{searchTerms}"/> </Url> <Image height="16" width="16" type="image/icon">data:image/x-icon;base64, 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</Image>

1 0

[tor-browser/tor-browser-38.1.0esr-5.x-1] fixup! Omnibox: Add DDG, Startpage, Disconnect, Youtube, Twitter; remove Amazon, eBay, bing
by mikeperry＠torproject.org 25 Jun '15

25 Jun '15

commit 18b11197016751c3aec75c99feb7dfb798573719 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Wed Jun 24 21:39:54 2015 -0700 fixup! Omnibox: Add DDG, Startpage, Disconnect, Youtube, Twitter; remove Amazon, eBay, bing Add tor search parameter to disconnect. --- browser/locales/en-US/searchplugins/disconnect.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/browser/locales/en-US/searchplugins/disconnect.xml b/browser/locales/en-US/searchplugins/disconnect.xml index 5b80262..cf755c2 100644 --- a/browser/locales/en-US/searchplugins/disconnect.xml +++ b/browser/locales/en-US/searchplugins/disconnect.xml @@ -3,7 +3,7 @@ <ShortName>Search</ShortName> <LongName>Disconnect Private Search</LongName> <Description>Private searches using disconnect.me</Description> - <Url type="text/html" method="POST" template="https://search.disconnect.me/searchTerms/search?ses=Google&location_opt…"> + <Url type="text/html" method="POST" template="https://search.disconnect.me/searchTerms/search?ses=Google&location_opt…"> <Param name="query" value="{searchTerms}"/> </Url> <Image height="16" width="16" type="image/icon">data:image/x-icon;base64, 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</Image>

1 0

[tor-browser/tor-browser-38.1.0esr-5.x-1] fixup! TB4: Tor Browser's Firefox preference overrides.
by mikeperry＠torproject.org 25 Jun '15

25 Jun '15

commit 9a44958183f42b496f9e6d82bc53f4ed84f62933 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Wed Jun 24 20:48:10 2015 -0700 fixup! TB4: Tor Browser's Firefox preference overrides. Bug #16254: Disable GeoIP-based search results. --- browser/app/profile/000-tor-browser.js | 3 +++ 1 file changed, 3 insertions(+) diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js index b16737d..da69e6e 100644 --- a/browser/app/profile/000-tor-browser.js +++ b/browser/app/profile/000-tor-browser.js @@ -59,6 +59,9 @@ pref("services.sync.engine.addons", false); pref("services.sync.engine.tabs", false); pref("extensions.getAddons.cache.enabled", false); // https://blog.mozilla.org/addons/how-to-opt-out-of-add-on-metadata-updates/ pref("browser.newtabpage.enhanced", false); // Bug 16316 - Avoid potential confusion over tiles for now. +pref("browser.search.countryCode", "US"); // The next three prefs disable GeoIP search lookups (#16254) +pref("browser.search.region", "US"); +pref("browser.search.geoip.url", ""); // Fingerprinting pref("webgl.min_capability_mode", true);

1 0