July 2015 - tor-commits - lists.torproject.org

[webwml/master] remove some decloak.net links (site is offline)
by sebastian＠torproject.org 05 Jul '15

05 Jul '15

commit 4a9383538bde6935c90fb4d36d98147f84650d04 Author: Sebastian Hahn <sebastian(a)torproject.org> Date: Mon Jul 6 03:40:25 2015 +0200 remove some decloak.net links (site is offline) --- docs/torbutton/en/design/design.xml | 12 ++++++------ docs/torbutton/en/design/index.html.en | 8 ++++---- projects/torbrowser/design/index.html.en | 4 ++-- 3 files changed, 12 insertions(+), 12 deletions(-) diff --git a/docs/torbutton/en/design/design.xml b/docs/torbutton/en/design/design.xml index d50f267..1231841 100644 --- a/docs/torbutton/en/design/design.xml +++ b/docs/torbutton/en/design/design.xml @@ -172,9 +172,9 @@ investigated is also capable of performing network activity independent of browser proxy settings - and often independent of its own proxy settings. Sites that have plugin content don't even have to be malicious to obtain a user's -Non-Tor IP (it usually leaks by itself), though <ulink -url="http://decloak.net">plenty of active -exploits</ulink> are possible as well. In addition, plugins can be used to store unique identifiers that are more +Non-Tor IP (it usually leaks by itself), though +plenty of active +exploits are possible as well. In addition, plugins can be used to store unique identifiers that are more difficult to clear than standard cookies. <ulink url="http://epic.org/privacy/cookies/flash.html">Flash-based cookies</ulink> fall into this category, but there are likely numerous other @@ -1181,8 +1181,8 @@ url="https://gitweb.torproject.org/torbutton.git/blob_plain/HEAD:/src/chrome/con url="http://java.sun.com/j2se/1.5.0/docs/api/java/net/class-use/NetworkInterface…">can query</ulink> the <ulink url="http://www.rgagnon.com/javadetails/java-0095.html">local IP address</ulink> and report it back to the -remote site. They can also <ulink -url="http://decloak.net">bypass proxy settings</ulink> and directly connect to a +remote site. They can also +>bypass proxy settings and directly connect to a remote site without Tor. Every browser plugin we have tested with Firefox has some form of network capability, and every one ignores proxy settings or worse - only partially obeys them. This includes but is not limited to: @@ -2696,7 +2696,7 @@ testing, and also in the hope that some brave soul will one day decide to combine them into a comprehensive automated test suite. <orderedlist> - <listitem><ulink url="http://decloak.net/">Decloak.net</ulink> + <listitem>Decloak.net (defunct) <para> Decloak.net is the canonical source of plugin and external-application based diff --git a/docs/torbutton/en/design/index.html.en b/docs/torbutton/en/design/index.html.en index 82ecd64..8053d49 100644 --- a/docs/torbutton/en/design/index.html.en +++ b/docs/torbutton/en/design/index.html.en @@ -95,8 +95,8 @@ investigated is also capable of performing network activity independent of browser proxy settings - and often independent of its own proxy settings. Sites that have plugin content don't even have to be malicious to obtain a user's -Non-Tor IP (it usually leaks by itself), though <a class="ulink" href="http://decloak.net" target="_top">plenty of active -exploits</a> are possible as well. In addition, plugins can be used to store unique identifiers that are more +Non-Tor IP (it usually leaks by itself), though plenty of active +exploits are possible as well. In addition, plugins can be used to store unique identifiers that are more difficult to clear than standard cookies. <a class="ulink" href="http://epic.org/privacy/cookies/flash.html" target="_top">Flash-based cookies</a> fall into this category, but there are likely numerous other @@ -636,7 +636,7 @@ callback <code class="function">torbutton_prefs_test_settings()</code> in <a cla </p></div></div><div class="sect2" title="5.2. Dynamic Content Settings"><div class="titlepage"><div><div><h3 class="title"><a id="id2686645"></a>5.2. Dynamic Content Settings</h3></div></div></div><div class="sect3" title="Disable plugins on Tor Usage (crucial)"><div class="titlepage"><div><div><h4 class="title"><a id="plugins"></a>Disable plugins on Tor Usage (crucial)</h4></div></div></div><p>Option: <span class="command"><strong>extensions.torbutton.no_tor_plugins</strong></span></p><p>Java and plugins <a class="ulink" href="http://java.sun.com/j2se/1.5.0/docs/api/java/net/class-use/NetworkInterface…" target="_top">can query</a> the <a class="ulink" href="http://www.rgagnon.com/javadetails/java-0095.html" target="_top">local IP address</a> and report it back to the -remote site. They can also <a class="ulink" href="http://decloak.net" target="_top">bypass proxy settings</a> and directly connect to a +remote site. They can also bypass proxy settings and directly connect to a remote site without Tor. Every browser plugin we have tested with Firefox has some form of network capability, and every one ignores proxy settings or worse - only partially obeys them. This includes but is not limited to: @@ -1309,7 +1309,7 @@ individually. They are provided here for reference and future regression testing, and also in the hope that some brave soul will one day decide to combine them into a comprehensive automated test suite. - </p><div class="orderedlist"><ol class="orderedlist" type="1"><li class="listitem"><a class="ulink" href="http://decloak.net/" target="_top">Decloak.net</a><p> + </p><div class="orderedlist"><ol class="orderedlist" type="1"><li class="listitem">Decloak.net (defunct)<p> Decloak.net is the canonical source of plugin and external-application based proxy-bypass exploits. It is a fully automated test suite maintained by <a class="ulink" href="http://digitaloffense.net/" target="_top">HD Moore</a> as a service for people to diff --git a/projects/torbrowser/design/index.html.en b/projects/torbrowser/design/index.html.en index 9ba583d..fe90ad9 100644 --- a/projects/torbrowser/design/index.html.en +++ b/projects/torbrowser/design/index.html.en @@ -595,7 +595,7 @@ connections are not attempted, through the proxy or otherwise (Tor does not yet support IPv6). We have also verified that external protocol helpers, such as SMB URLs and other custom protocol handlers are all blocked. - </p></li><li class="listitem"><span class="command"><strong>Disabling plugins</strong></span><p>Plugins have the ability to make arbitrary OS system calls and <a class="ulink" href="http://decloak.net/" target="_top">bypass proxy settings</a>. This includes + </p></li><li class="listitem"><span class="command"><strong>Disabling plugins</strong></span><p>Plugins have the ability to make arbitrary OS system calls and bypass proxy settings. This includes the ability to make UDP sockets and send arbitrary data independent of the browser proxy settings. </p><p> @@ -2088,4 +2088,4 @@ not directly provide the link sharing capabilities that Web-Send does, it is a better solution to the privacy issues associated with federated login than Web-Send is. - </p></li></ol></div></div></div></div></body></html> \ No newline at end of file + </p></li></ol></div></div></div></div></body></html>

1 0

[webwml/master] Reword Flash part of the FAQ
by sebastian＠torproject.org 05 Jul '15

05 Jul '15

commit 0d4ab41933265f8f4d36d6f61e8f6bdbebaf6fa0 Author: Sebastian Hahn <sebastian(a)torproject.org> Date: Mon Jul 6 03:37:28 2015 +0200 Reword Flash part of the FAQ --- docs/en/faq.wml | 18 ++++-------------- 1 file changed, 4 insertions(+), 14 deletions(-) diff --git a/docs/en/faq.wml b/docs/en/faq.wml index 381e050..2fe5d7d 100644 --- a/docs/en/faq.wml +++ b/docs/en/faq.wml @@ -1119,15 +1119,14 @@ bundle that includes Tor?</a></h3> <a id="TBBFlash"></a> <h3><a class="anchor" href="#TBBFlash">Why can't I view videos on -YouTube -and other Flash-based sites?</a></h3> +some Flash-based sites?</a></h3> <p> -YouTube and similar sites require third party browser plugins such as Flash. +Some sites require third party browser plugins such as Flash. Plugins operate independently from Firefox and can perform activity on your computer that ruins your anonymity. This includes -but is not limited to: <a href="http://decloak.net">completely disregarding -proxy settings</a>, querying your <a +but is not limited to: completely disregarding +proxy settings, querying your <a href="http://forums.sun.com/thread.jspa?threadID=5162138&messageID=9618376"> local IP address</a>, and <a href="http://epic.org/privacy/cookies/flash.html">storing their own @@ -1137,15 +1136,6 @@ that creates a secure, transparent proxy to protect you from proxy bypass, however issues with local IP address discovery and Flash cookies still remain. </p> -<p> -<a href="https://www.youtube.com/html5">YouTube offers experimental HTML5 video -support</a> for many of their videos. Often you can get the HTML5 version of -videos that don't want to play by grabbing the YouTube URL from the "Embed" -code under a video's "Share" option. The link switches out a URL that looks</p> -<pre>https://www.youtube.com/watch?v=CJNxbpbHA-I</pre> -<p>to something that looks like</p> -<pre>https://www.youtube.com/embed/CJNxbpbHA-I</pre> - <hr> <a id="Ubuntu"></a>

1 0

[webwml/master] Attempt to fix stable release notes link
by sebastian＠torproject.org 05 Jul '15

05 Jul '15

commit 912f73ff508aa304d52551a976dd0aaa7a124501 Author: Sebastian Hahn <sebastian(a)torproject.org> Date: Mon Jul 6 03:18:47 2015 +0200 Attempt to fix stable release notes link --- include/links.wmi | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/include/links.wmi b/include/links.wmi index 3879652..b7787db 100644 --- a/include/links.wmi +++ b/include/links.wmi @@ -1,7 +1,7 @@ #!wml <define-tag gitblob whitespace=delete>https://gitweb.torproject.org/tor.git/plain/</define-tag> -<define-tag cgitstable whitespace=delete>?id=tor-0.2.5.10</define-tag> +<define-tag cgitstable whitespace=delete>?id=tor-<version-stable></define-tag> <define-tag gittree whitespace=delete>https://gitweb.torproject.org/tor.git?a=tree;hb=HEAD;f=</define-tag> <define-tag gitrepo whitespace=delete>https://gitweb.torproject.org/tor.git?a=tree;hb=HEAD</define-tag> <define-tag svnwebsite whitespace=delete>https://svn.torproject.org/svn/website/trunk/</define-tag>

1 0

[webwml/master] clean out unused version string
by sebastian＠torproject.org 05 Jul '15

05 Jul '15

commit 3eae850868a44566f7235ac49c8cf545761911d4 Author: Sebastian Hahn <sebastian(a)torproject.org> Date: Mon Jul 6 03:16:13 2015 +0200 clean out unused version string --- include/versions.wmi | 2 -- 1 file changed, 2 deletions(-) diff --git a/include/versions.wmi b/include/versions.wmi index fa02a62..05adabc 100644 --- a/include/versions.wmi +++ b/include/versions.wmi @@ -2,7 +2,6 @@ <define-tag version-alpha whitespace=delete>0.2.7.1-alpha</define-tag> <define-tag version-win32-stable whitespace=delete>0.2.6.9</define-tag> -<define-tag version-win32-alpha whitespace=delete>0.2.5.10</define-tag> <define-tag version-win32-bundle-stable whitespace=delete>0.2.4.23</define-tag> <define-tag version-win32-bundle-alpha whitespace=delete>0.2.4.23</define-tag> @@ -55,7 +54,6 @@ <define-tag package-androidbundle-alpha whitespace=delete>dist/android/<version-androidbundle-tor>-orbot-<version-androidbundle-orbot>.apk</define-tag> <define-tag package-win32-stable whitespace=delete>../dist/torbrowser/<version-torbrowserbundledir>/tor-win32-<version-win32-stable>.zip</define-tag> -<define-tag package-win32-alpha whitespace=delete>../dist/torbrowser/<version-torbrowserbundlebetadir>/tor-win32-tor-<version-win32-alpha>.zip</define-tag> <define-tag file-source-stable whitespace=delete>tor-<version-stable>.tar.gz</define-tag> <define-tag package-source-stable whitespace=delete>../dist/<file-source-stable></define-tag>

1 0

[webwml/staging] try to fix the formatting on the exec admin post
by sebastian＠torproject.org 05 Jul '15

05 Jul '15

commit f611624e104566b3d32ef3af26cad3252cab5fd6 Author: Roger Dingledine <arma(a)torproject.org> Date: Mon May 18 17:22:30 2015 -0400 try to fix the formatting on the exec admin post --- about/en/jobs-execadmin.wml | 1 + 1 file changed, 1 insertion(+) diff --git a/about/en/jobs-execadmin.wml b/about/en/jobs-execadmin.wml index 071ea59..abf7e4d 100644 --- a/about/en/jobs-execadmin.wml +++ b/about/en/jobs-execadmin.wml @@ -87,6 +87,7 @@ This position will be based in Tor's offices in Cambridge, MA. Initially, we ant <h4>About the company:</h4> +<p> The Tor Project is a US 501(c)(3) non-profit dedicated to research, development, and education about online anonymity and privacy. The Tor network's 6000 volunteer relays carry 48 Gbps for several

1 0

[webwml/staging] bump 0.2.6 version
by sebastian＠torproject.org 05 Jul '15

05 Jul '15

commit dd26723aed5e18cd1280a9d04076facadae64cb2 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu May 21 10:53:23 2015 -0400 bump 0.2.6 version --- Makefile | 2 +- include/versions.wmi | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Makefile b/Makefile index 72c8a54..e3851cd 100644 --- a/Makefile +++ b/Makefile @@ -14,7 +14,7 @@ # branch to your personal webwml repository, open a trac ticket in the # website component, and set it to needs_review. -export STABLETAG=tor-0.2.6.7 +export STABLETAG=tor-0.2.6.8 export DEVTAG=tor-0.2.7.1-alpha WMLBASE=. diff --git a/include/versions.wmi b/include/versions.wmi index 1497f04..784c982 100644 --- a/include/versions.wmi +++ b/include/versions.wmi @@ -1,4 +1,4 @@ -<define-tag version-stable whitespace=delete>0.2.6.7</define-tag> +<define-tag version-stable whitespace=delete>0.2.6.8</define-tag> <define-tag version-alpha whitespace=delete>0.2.7.1-alpha</define-tag> <define-tag version-win32-stable whitespace=delete>0.2.6.7</define-tag>

1 0

[webwml/staging] mention the open position in the sidenav
by sebastian＠torproject.org 05 Jul '15

05 Jul '15

commit fb79365a23e22cd5050a910d0e12453975fcde51 Author: Roger Dingledine <arma(a)torproject.org> Date: Mon May 18 17:21:00 2015 -0400 mention the open position in the sidenav --- about/en/sidenav.wmi | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/about/en/sidenav.wmi b/about/en/sidenav.wmi index 5816b57..a5a1d24 100644 --- a/about/en/sidenav.wmi +++ b/about/en/sidenav.wmi @@ -43,10 +43,10 @@ {'url' => 'about/jobs', 'txt' => 'Jobs', -# 'subelements' => [ -# {'url' => 'about/jobs-projectmanager', -# 'txt' => 'Project manager', -# }] + 'subelements' => [ + {'url' => 'about/jobs-execadmin', + 'txt' => 'Exec administrator', + }] }, {'url' => 'about/sponsors',

1 0

[webwml/staging] Update RPM page with Fedora 22 info
by sebastian＠torproject.org 05 Jul '15

05 Jul '15

commit 372e2c78d3a81e4da12f5de63bc2889a2d6ad5f1 Author: Ondrej Mikle <ondrej.mikle(a)gmail.com> Date: Wed May 27 21:34:32 2015 +0200 Update RPM page with Fedora 22 info --- docs/en/rpms.wml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/en/rpms.wml b/docs/en/rpms.wml index 3ee18c2..e4a6823 100644 --- a/docs/en/rpms.wml +++ b/docs/en/rpms.wml @@ -27,10 +27,10 @@ torproject.repo. Edit this file with the following information: </p> - <h3>Fedora 20/21 and EL6/7 packages</h3> + <h3>Fedora 21/22 and EL6/7 packages</h3> - <p>For Fedora 20, Fedora 21, RHEL 6, RHEL 7 (and clones), use following - repo file - substitute DISTRIBUTION with one of the following: fc/20, fc/21, + <p>For Fedora 21, Fedora 22, RHEL 6, RHEL 7 (and clones), use following + repo file - substitute DISTRIBUTION with one of the following: fc/21, fc/22, el/6, el/7 according to your distribution. </p>

1 0

[webwml/staging] I just tagged and uploaded 0.2.6.9
by sebastian＠torproject.org 05 Jul '15

05 Jul '15

commit c74c12822572fde9b17b122f7a34be44a32bb42f Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Jun 11 12:57:05 2015 -0400 I just tagged and uploaded 0.2.6.9 --- Makefile | 2 +- include/versions.wmi | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Makefile b/Makefile index e3851cd..68aae9e 100644 --- a/Makefile +++ b/Makefile @@ -14,7 +14,7 @@ # branch to your personal webwml repository, open a trac ticket in the # website component, and set it to needs_review. -export STABLETAG=tor-0.2.6.8 +export STABLETAG=tor-0.2.6.9 export DEVTAG=tor-0.2.7.1-alpha WMLBASE=. diff --git a/include/versions.wmi b/include/versions.wmi index 784c982..5250e01 100644 --- a/include/versions.wmi +++ b/include/versions.wmi @@ -1,4 +1,4 @@ -<define-tag version-stable whitespace=delete>0.2.6.8</define-tag> +<define-tag version-stable whitespace=delete>0.2.6.9</define-tag> <define-tag version-alpha whitespace=delete>0.2.7.1-alpha</define-tag> <define-tag version-win32-stable whitespace=delete>0.2.6.7</define-tag>

1 0

[webwml/staging] We ship 0.2.6.9 with the new Tor Browser
by sebastian＠torproject.org 05 Jul '15

05 Jul '15

commit 330be1d1fd7eccf731f2bf57bae927c933e11b96 Author: Georg Koppen <gk(a)torproject.org> Date: Tue Jun 16 10:09:33 2015 +0000 We ship 0.2.6.9 with the new Tor Browser --- include/versions.wmi | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/include/versions.wmi b/include/versions.wmi index b7daef9..b0348b4 100644 --- a/include/versions.wmi +++ b/include/versions.wmi @@ -1,7 +1,7 @@ <define-tag version-stable whitespace=delete>0.2.6.9</define-tag> <define-tag version-alpha whitespace=delete>0.2.7.1-alpha</define-tag> -<define-tag version-win32-stable whitespace=delete>0.2.6.7</define-tag> +<define-tag version-win32-stable whitespace=delete>0.2.6.9</define-tag> <define-tag version-win32-alpha whitespace=delete>0.2.5.10</define-tag> <define-tag version-win32-bundle-stable whitespace=delete>0.2.4.23</define-tag>

1 0