September 2015 - tor-commits - lists.torproject.org

[translation/tor-launcher-network-settings_completed] Update translations for tor-launcher-network-settings_completed
by translation＠torproject.org 02 Sep '15

02 Sep '15

commit e27f508e11810320cc95e91e86c3e6a53d9270a8 Author: Translation commit bot <translation(a)torproject.org> Date: Wed Sep 2 21:15:50 2015 +0000 Update translations for tor-launcher-network-settings_completed --- de/network-settings.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/de/network-settings.dtd b/de/network-settings.dtd index 22a4ef5..f5b3313 100644 --- a/de/network-settings.dtd +++ b/de/network-settings.dtd @@ -18,7 +18,7 @@ <!ENTITY torSettings.proxyPageTitle "Lokale Proxy-Konfiguration"> <!ENTITY torSettings.proxyQuestion "Benötigt dieser Rechner einen lokalen Proxy um auf das Internet zuzugreifen?">  -<!ENTITY torSettings.proxyHelp "Wenn Sie unsicher sind, schauen Sie in den Interneteinstellungen in einem andern Browser nach, um zu erkennen ob ein lokaler Proxy konfiguriert ist."> +<!ENTITY torSettings.proxyHelp "Wenn Sie unsicher sind, schauen Sie in den Interneteinstellungen in einem andern Browser nach, um zu sehen ob ein lokaler Proxy konfiguriert ist."> <!ENTITY torSettings.enterProxy "Proxy-Einstellungen eingeben."> <!ENTITY torSettings.bridgePageTitle "Torbrücken-Konfiguration"> <!ENTITY torSettings.bridgeQuestion "Blockiert oder zensiert Ihr Internetdienstanbieter (ISP) Verbindungen zum Tor-Netzwerk?">

1 0

[translation/tor-launcher-network-settings] Update translations for tor-launcher-network-settings
by translation＠torproject.org 02 Sep '15

02 Sep '15

commit f42d47c581daaa744cc87c90a7ed1a5e3f5566a2 Author: Translation commit bot <translation(a)torproject.org> Date: Wed Sep 2 21:15:46 2015 +0000 Update translations for tor-launcher-network-settings --- de/network-settings.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/de/network-settings.dtd b/de/network-settings.dtd index 22a4ef5..f5b3313 100644 --- a/de/network-settings.dtd +++ b/de/network-settings.dtd @@ -18,7 +18,7 @@ <!ENTITY torSettings.proxyPageTitle "Lokale Proxy-Konfiguration"> <!ENTITY torSettings.proxyQuestion "Benötigt dieser Rechner einen lokalen Proxy um auf das Internet zuzugreifen?">  -<!ENTITY torSettings.proxyHelp "Wenn Sie unsicher sind, schauen Sie in den Interneteinstellungen in einem andern Browser nach, um zu erkennen ob ein lokaler Proxy konfiguriert ist."> +<!ENTITY torSettings.proxyHelp "Wenn Sie unsicher sind, schauen Sie in den Interneteinstellungen in einem andern Browser nach, um zu sehen ob ein lokaler Proxy konfiguriert ist."> <!ENTITY torSettings.enterProxy "Proxy-Einstellungen eingeben."> <!ENTITY torSettings.bridgePageTitle "Torbrücken-Konfiguration"> <!ENTITY torSettings.bridgeQuestion "Blockiert oder zensiert Ihr Internetdienstanbieter (ISP) Verbindungen zum Tor-Netzwerk?">

1 0

[translation/torbirdy_completed] Update translations for torbirdy_completed
by translation＠torproject.org 02 Sep '15

02 Sep '15

commit ef4fa7ccaba763dc4b34aef8b215f03e8b91d68b Author: Translation commit bot <translation(a)torproject.org> Date: Wed Sep 2 21:15:36 2015 +0000 Update translations for torbirdy_completed --- de/torbirdy.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/de/torbirdy.dtd b/de/torbirdy.dtd index f9ebfea..2b71c0a 100644 --- a/de/torbirdy.dtd +++ b/de/torbirdy.dtd @@ -1,7 +1,7 @@ <!ENTITY torbirdy.accountprefs.title "Kontokonfiguration"> <!ENTITY torbirdy.accountprefs.startup.label "Beim Start auf neue Nachrichten prüfen"> <!ENTITY torbirdy.accountprefs.startup.key "C"> -<!ENTITY torbirdy.accountprefs.minutes.label "Auf neue Nachrichten alle"> +<!ENTITY torbirdy.accountprefs.minutes.label "Auf neue Nachrichten überprüfen"> <!ENTITY torbirdy.accountprefs.minutes.key "Y"> <!ENTITY torbirdy.accountprefs.minutes.trail.label "Minuten"> <!ENTITY torbirdy.accountprefs.cancel.button "Abbrechen">

1 0

[translation/torbirdy] Update translations for torbirdy
by translation＠torproject.org 02 Sep '15

02 Sep '15

commit fdf07c9e387c7072bace881fdb4a6eed7a83c01b Author: Translation commit bot <translation(a)torproject.org> Date: Wed Sep 2 21:15:31 2015 +0000 Update translations for torbirdy --- de/torbirdy.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/de/torbirdy.dtd b/de/torbirdy.dtd index f9ebfea..2b71c0a 100644 --- a/de/torbirdy.dtd +++ b/de/torbirdy.dtd @@ -1,7 +1,7 @@ <!ENTITY torbirdy.accountprefs.title "Kontokonfiguration"> <!ENTITY torbirdy.accountprefs.startup.label "Beim Start auf neue Nachrichten prüfen"> <!ENTITY torbirdy.accountprefs.startup.key "C"> -<!ENTITY torbirdy.accountprefs.minutes.label "Auf neue Nachrichten alle"> +<!ENTITY torbirdy.accountprefs.minutes.label "Auf neue Nachrichten überprüfen"> <!ENTITY torbirdy.accountprefs.minutes.key "Y"> <!ENTITY torbirdy.accountprefs.minutes.trail.label "Minuten"> <!ENTITY torbirdy.accountprefs.cancel.button "Abbrechen">

1 0

[translation/bridgedb_completed] Update translations for bridgedb_completed
by translation＠torproject.org 02 Sep '15

02 Sep '15

commit 4bfcfd32113644d314b6b4df975072fa2d5c3b83 Author: Translation commit bot <translation(a)torproject.org> Date: Wed Sep 2 21:15:07 2015 +0000 Update translations for bridgedb_completed --- de/LC_MESSAGES/bridgedb.po | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/de/LC_MESSAGES/bridgedb.po b/de/LC_MESSAGES/bridgedb.po index 040463d..05db542 100644 --- a/de/LC_MESSAGES/bridgedb.po +++ b/de/LC_MESSAGES/bridgedb.po @@ -16,13 +16,14 @@ # Tobias Bannert <tobannert(a)gmail.com>, 2013 # Tobias Bannert <tobannert(a)gmail.com>, 2014 # Toralf Förster <toralf.foerster(a)gmx.de>, 2015 +# try once <lh-account-a(a)use.startmail.com>, 2015 msgid "" msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: 'https://trac.torproject.org/projects/tor/newticket?component=BridgeDB&keywo…'POT-Creation-Date: 2015-03-19 22:13+0000\n" -"PO-Revision-Date: 2015-06-16 18:33+0000\n" -"Last-Translator: Toralf Förster <toralf.foerster(a)gmx.de>\n" -"Language-Team: German (http://www.transifex.com/projects/p/torproject/language/de/)\n" +"PO-Revision-Date: 2015-09-02 21:07+0000\n" +"Last-Translator: try once <lh-account-a(a)use.startmail.com>\n" +"Language-Team: German (http://www.transifex.com/otf/torproject/language/de/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" @@ -63,7 +64,7 @@ msgstr "Sie haben den Grenzwert überschritten. Bitte verlangsamen! Der kleinste #: lib/bridgedb/strings.py:25 msgid "" "COMMANDs: (combine COMMANDs to specify multiple options simultaneously)" -msgstr "Befehle: (Befehle kombinieren, um mehrere Optionen gleichzeitig anzugeben)" +msgstr "BEFEHLE: (Kombinieren Sie BEFEHLE um mehrere Möglichkeiten gleichzeitig anzugeben)" #. TRANSLATORS: Please DO NOT translate the word "BridgeDB". #: lib/bridgedb/strings.py:28 @@ -110,7 +111,7 @@ msgid "" "difficult for anyone watching your internet traffic to determine that you are\n" "using Tor.\n" "\n" -msgstr "Die Brückendatenbank kann Brücken-Server mit verschiedenen %stypen der Pluggable Transports%s bereitstellen. Diese können helfen, Ihre Verbindungen zum Tor-Netzwerk zu verschleiern. Damit wird es für Dritte schwieriger festzustellen, dass sie Tor benutzen.\n\n" +msgstr "BridgeDB kann Brücken-Server mit verschiedenen %stypen der Pluggable Transports%s\nbereitstellen. Diese können helfen, Ihre Verbindungen zum Tor Network zu verschleiern. Damit wird es für Dritte schwieriger\nfestzustellen, dass Sie\nTor benutzen.\n\n" #. TRANSLATORS: Please DO NOT translate "Pluggable Transports". #: lib/bridgedb/strings.py:54

1 0

[translation/bridgedb] Update translations for bridgedb
by translation＠torproject.org 02 Sep '15

02 Sep '15

commit d53323099ab7282f7a6eeaee61cc94e5fd7d77d8 Author: Translation commit bot <translation(a)torproject.org> Date: Wed Sep 2 21:15:02 2015 +0000 Update translations for bridgedb --- de/LC_MESSAGES/bridgedb.po | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/de/LC_MESSAGES/bridgedb.po b/de/LC_MESSAGES/bridgedb.po index 040463d..05db542 100644 --- a/de/LC_MESSAGES/bridgedb.po +++ b/de/LC_MESSAGES/bridgedb.po @@ -16,13 +16,14 @@ # Tobias Bannert <tobannert(a)gmail.com>, 2013 # Tobias Bannert <tobannert(a)gmail.com>, 2014 # Toralf Förster <toralf.foerster(a)gmx.de>, 2015 +# try once <lh-account-a(a)use.startmail.com>, 2015 msgid "" msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: 'https://trac.torproject.org/projects/tor/newticket?component=BridgeDB&keywo…'POT-Creation-Date: 2015-03-19 22:13+0000\n" -"PO-Revision-Date: 2015-06-16 18:33+0000\n" -"Last-Translator: Toralf Förster <toralf.foerster(a)gmx.de>\n" -"Language-Team: German (http://www.transifex.com/projects/p/torproject/language/de/)\n" +"PO-Revision-Date: 2015-09-02 21:07+0000\n" +"Last-Translator: try once <lh-account-a(a)use.startmail.com>\n" +"Language-Team: German (http://www.transifex.com/otf/torproject/language/de/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" @@ -63,7 +64,7 @@ msgstr "Sie haben den Grenzwert überschritten. Bitte verlangsamen! Der kleinste #: lib/bridgedb/strings.py:25 msgid "" "COMMANDs: (combine COMMANDs to specify multiple options simultaneously)" -msgstr "Befehle: (Befehle kombinieren, um mehrere Optionen gleichzeitig anzugeben)" +msgstr "BEFEHLE: (Kombinieren Sie BEFEHLE um mehrere Möglichkeiten gleichzeitig anzugeben)" #. TRANSLATORS: Please DO NOT translate the word "BridgeDB". #: lib/bridgedb/strings.py:28 @@ -110,7 +111,7 @@ msgid "" "difficult for anyone watching your internet traffic to determine that you are\n" "using Tor.\n" "\n" -msgstr "Die Brückendatenbank kann Brücken-Server mit verschiedenen %stypen der Pluggable Transports%s bereitstellen. Diese können helfen, Ihre Verbindungen zum Tor-Netzwerk zu verschleiern. Damit wird es für Dritte schwieriger festzustellen, dass sie Tor benutzen.\n\n" +msgstr "BridgeDB kann Brücken-Server mit verschiedenen %stypen der Pluggable Transports%s\nbereitstellen. Diese können helfen, Ihre Verbindungen zum Tor Network zu verschleiern. Damit wird es für Dritte schwieriger\nfestzustellen, dass Sie\nTor benutzen.\n\n" #. TRANSLATORS: Please DO NOT translate "Pluggable Transports". #: lib/bridgedb/strings.py:54

1 0

[tor/master] Merge remote-tracking branch 'dgoulet/bug15963_026_01'
by nickm＠torproject.org 02 Sep '15

02 Sep '15

commit eb71777bb28b353da68c0ea25a36d0ac763de550 Merge: bc64a6b d6bfedb Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Sep 2 16:00:07 2015 -0400 Merge remote-tracking branch 'dgoulet/bug15963_026_01' changes/bug15963 | 4 ++++ src/or/dirserv.c | 4 ++-- 2 files changed, 6 insertions(+), 2 deletions(-)

1 0

[tor/master] Don't vote HSDir if we aren't voting Fast
by nickm＠torproject.org 02 Sep '15

02 Sep '15

commit d6bfedb8e56ae3d2fc249852de477a61eb6a1278 Author: David Goulet <dgoulet(a)ev0ke.net> Date: Wed Sep 2 16:52:55 2015 +0200 Don't vote HSDir if we aren't voting Fast Fixes #15963 Signed-off-by: David Goulet <dgoulet(a)ev0ke.net> --- changes/bug15963 | 4 ++++ src/or/dirserv.c | 4 ++-- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/changes/bug15963 b/changes/bug15963 new file mode 100644 index 0000000..8c903d2 --- /dev/null +++ b/changes/bug15963 @@ -0,0 +1,4 @@ + o Hidden service directory enhancement + - Relays need to have the Fast flag to ge the HSDir flag. As this is + being written, we'll go from 2745 HSDirs down to 2342, a ~14% drop. + Fixes #15983. diff --git a/src/or/dirserv.c b/src/or/dirserv.c index 65bfafb..6ac834f 100644 --- a/src/or/dirserv.c +++ b/src/or/dirserv.c @@ -1279,7 +1279,7 @@ dirserv_thinks_router_is_unreliable(time_t now, /** Return true iff router should be assigned the "HSDir" flag. * Right now this means it advertises support for it, it has a high uptime, - * it has a DirPort open, it has the Stable flag and it's currently + * it has a DirPort open, it has the Stable and Fast flag and it's currently * considered Running. * * This function needs to be called after router-\>is_running has @@ -1307,7 +1307,7 @@ dirserv_thinks_router_is_hs_dir(const routerinfo_t *router, uptime = real_uptime(router, now); return (router->wants_to_be_hs_dir && router->dir_port && - node->is_stable && + node->is_stable && node->is_fast && uptime >= get_options()->MinUptimeHidServDirectoryV2 && router_is_active(router, node, now)); }

1 0

[tor/master] Fix crashes in tests
by nickm＠torproject.org 02 Sep '15

02 Sep '15

commit bc64a6b2b9c1e0851ce4fc4fe410ac565f3c0137 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Sep 2 11:02:00 2015 -0400 Fix crashes in tests --- src/or/config.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/or/config.c b/src/or/config.c index 02b3477..262eeeb 100644 --- a/src/or/config.c +++ b/src/or/config.c @@ -3173,7 +3173,8 @@ options_validate(or_options_t *old_options, or_options_t *options, "http://freehaven.net/anonbib/#hs-attack06 for details."); } - if (routerset_is_list(options->EntryNodes) && + if (options->EntryNodes && + routerset_is_list(options->EntryNodes) && (routerset_len(options->EntryNodes) == 1) && (options->RendConfigLines != NULL)) { tor_asprintf(msg,

1 0

[tor/master] Prohibit the use of one entry node with an HS
by nickm＠torproject.org 02 Sep '15

02 Sep '15

commit 07b3028db74af246ca98c2d3a86d5efde9aa33c2 Author: David Goulet <dgoulet(a)ev0ke.net> Date: Wed Sep 2 14:53:39 2015 +0200 Prohibit the use of one entry node with an HS In a nutshell, since a circuit can not exit at its entry point, it's very easy for an attacker to find the hidden service guard if only one EntryNodes is specified since for that guard, the HS will refuse to build a rendezvous circuit to it. For now, the best solution is to stop tor to allow a single EntryNodes for an hidden service. Fixes #14917 Signed-off-by: David Goulet <dgoulet(a)ev0ke.net> --- changes/bug14917 | 5 +++++ src/or/config.c | 14 ++++++++++++++ src/or/routerset.c | 11 +++++++++++ src/or/routerset.h | 1 + 4 files changed, 31 insertions(+) diff --git a/changes/bug14917 b/changes/bug14917 new file mode 100644 index 0000000..92a985c --- /dev/null +++ b/changes/bug14917 @@ -0,0 +1,5 @@ + o Major bugfix + - For an hidden service, it is now prohibited to use one single + EntryNodes to avoid a very easy guard discovery attack. For more + details, see the ticket description here: + https://trac.torproject.org/projects/tor/ticket/14917. Fixes #14917. diff --git a/src/or/config.c b/src/or/config.c index cb0abab..02b3477 100644 --- a/src/or/config.c +++ b/src/or/config.c @@ -3173,6 +3173,20 @@ options_validate(or_options_t *old_options, or_options_t *options, "http://freehaven.net/anonbib/#hs-attack06 for details."); } + if (routerset_is_list(options->EntryNodes) && + (routerset_len(options->EntryNodes) == 1) && + (options->RendConfigLines != NULL)) { + tor_asprintf(msg, + "You have one single EntryNodes and at least one hidden service " + "configured. This is bad because it's very easy to locate your " + "entry guard which can then lead to the deanonymization of your " + "hidden service -- for more details, see " + "https://trac.torproject.org/projects/tor/ticket/14917. " + "For this reason, the use of one EntryNodes with an hidden " + "service is prohibited until a better solution is found."); + return -1; + } + if (!options->LearnCircuitBuildTimeout && options->CircuitBuildTimeout && options->CircuitBuildTimeout < RECOMMENDED_MIN_CIRCUIT_BUILD_TIMEOUT) { log_warn(LD_CONFIG, diff --git a/src/or/routerset.c b/src/or/routerset.c index 99de11e..9fe5dff 100644 --- a/src/or/routerset.c +++ b/src/or/routerset.c @@ -162,6 +162,17 @@ routerset_is_empty(const routerset_t *set) return !set || smartlist_len(set->list) == 0; } +/** Return the number of entries in set. This does NOT return a + * negative value. */ +int +routerset_len(const routerset_t *set) +{ + if (!set) { + return 0; + } + return smartlist_len(set->list); +} + /** Helper. Return true iff set contains a router based on the other * provided fields. Return higher values for more specific subentries: a * single router is more specific than an address range of routers, which is diff --git a/src/or/routerset.h b/src/or/routerset.h index 8d41de8..aca7c6e 100644 --- a/src/or/routerset.h +++ b/src/or/routerset.h @@ -38,6 +38,7 @@ void routerset_subtract_nodes(smartlist_t *out, char *routerset_to_string(const routerset_t *routerset); int routerset_equal(const routerset_t *old, const routerset_t *new); void routerset_free(routerset_t *routerset); +int routerset_len(const routerset_t *set); #ifdef ROUTERSET_PRIVATE STATIC char * routerset_get_countryname(const char *c);

1 0