December 2016 - tor-commits - lists.torproject.org

[sandboxed-tor-browser/master] Filter socketcall() by argument.
by yawning＠torproject.org 08 Dec '16

08 Dec '16

commit 1db6b5aeec0983b264469be96690d916e236e314 Author: Yawning Angel <yawning(a)schwanenlied.me> Date: Wed Dec 7 07:05:09 2016 +0000 Filter socketcall() by argument. This still isn't great, particularly firefox that appears to need all the socket calls, but at least this denies calls that neither container needs. --- src/cmd/gen-seccomp/main.go | 2 - src/cmd/gen-seccomp/seccomp.go | 28 ++++++++-- src/cmd/gen-seccomp/seccomp_firefox.go | 57 +++++++++++++++----- src/cmd/gen-seccomp/seccomp_tor.go | 96 +++++++++++++++++++--------------- 4 files changed, 119 insertions(+), 64 deletions(-) diff --git a/src/cmd/gen-seccomp/main.go b/src/cmd/gen-seccomp/main.go index 3ad1be5..5dcbbf2 100644 --- a/src/cmd/gen-seccomp/main.go +++ b/src/cmd/gen-seccomp/main.go @@ -32,8 +32,6 @@ func main() { log.Fatalf("failed to get absolute path: %v", err) } - log.Printf("outDir: %v", outDir) - // Tor Browser (amd64) f, err := os.Create(filepath.Join(outDir, "tor-amd64.bpf")) if err != nil { diff --git a/src/cmd/gen-seccomp/seccomp.go b/src/cmd/gen-seccomp/seccomp.go index 9ec17e8..ece1e7e 100644 --- a/src/cmd/gen-seccomp/seccomp.go +++ b/src/cmd/gen-seccomp/seccomp.go @@ -66,6 +66,28 @@ const ( fionread = 0x541b tcgets = 0x5401 tiocgpgrp = 0x540f + + // socketcall() call numbers (linux/net.h) + sysSocket = 1 // sys_socket() + sysBind = 2 // sys_bind() + sysConnect = 3 // sys_connect() + sysListen = 4 // sys_listen() + sysAccept = 5 // sys_accept() + sysGetsockname = 6 // sys_getsockname() + sysGetpeername = 7 // sys_getpeername() + sysSocketpair = 8 // sys_socketpair() + sysSend = 9 // sys_send() + sysRecv = 10 // sys_recv() + sysSendto = 11 // sys_sendto() + sysRecvfrom = 12 // sys_recvfrom() + sysShutdown = 13 // sys_shutdown() + sysSetsockopt = 14 // sys_setsockopt() + sysGetsockopt = 15 // sys_getsockopt() + sysSendmsg = 16 // sys_sendmsg() + sysRecvmsg = 17 // sys_recvmsg() + sysAccept4 = 18 // sys_accept4() + sysRecvmmsg = 19 // sys_recvmmsg + sysSendmmsg = 20 // sys_sendmmsg ) func newWhitelist(is386 bool) (*seccomp.ScmpFilter, error) { @@ -95,11 +117,7 @@ func allowSyscalls(f *seccomp.ScmpFilter, calls []string, is386 bool) error { for _, scallName := range calls { scall, err := seccomp.GetSyscallFromName(scallName) if err != nil { - if is386 && scallName == "newselect" { - scall = seccomp.ScmpSyscall(142) - } else { - return fmt.Errorf("seccomp: unknown system call: %v", scallName) - } + return fmt.Errorf("seccomp: unknown system call: %v", scallName) } if err = f.AddRule(scall, seccomp.ActAllow); err != nil { return err diff --git a/src/cmd/gen-seccomp/seccomp_firefox.go b/src/cmd/gen-seccomp/seccomp_firefox.go index 22e4bb5..9b25a66 100644 --- a/src/cmd/gen-seccomp/seccomp_firefox.go +++ b/src/cmd/gen-seccomp/seccomp_firefox.go @@ -19,6 +19,8 @@ package main import ( "os" "syscall" + + seccomp "github.com/seccomp/libseccomp-golang" ) func compileTorBrowserSeccompProfile(fd *os.File, is386 bool) error { @@ -30,6 +32,7 @@ func compileTorBrowserSeccompProfile(fd *os.File, is386 bool) error { } defer f.Release() + // TODO; Filter the arguments on more of these calls. allowedNoArgs := []string{ "clock_gettime", "clock_getres", @@ -207,11 +210,7 @@ func compileTorBrowserSeccompProfile(fd *os.File, is386 bool) error { "recv", "send", - "newselect", - - "socket", // Filtered on amd64. - - "socketcall", // Fuck Debian stable.... :( + "_newselect", } allowedNoArgs = append(allowedNoArgs, allowedNoArgs386...) } @@ -219,6 +218,19 @@ func compileTorBrowserSeccompProfile(fd *os.File, is386 bool) error { return err } + // Like with how I do the tor rules, handle socketcall() before everything + // else. + if is386 { + if err = ffFilterSocketcall(f); err != nil { + return err + } + + // Unrelated to sockets, only i386 needs this, and it can be filtered. + if err = allowCmpEq(f, "time", 0, 0); err != nil { + return err + } + } + // Because we patch PulseAudio's mutex creation, we can omit all PI futex // calls. if err = allowCmpEq(f, "futex", 1, futexWait, futexWaitPrivate, futexWakePrivate, futexCmpRequeuePrivate, futexWakeOpPrivate, futexWaitBitsetPrivate|futexClockRealtime, futexWake, futexWaitBitsetPrivate); err != nil { @@ -234,16 +246,33 @@ func compileTorBrowserSeccompProfile(fd *os.File, is386 bool) error { if err = allowCmpEq(f, "prctl", 0, syscall.PR_SET_NAME, syscall.PR_GET_NAME, syscall.PR_GET_TIMERSLACK, syscall.PR_SET_SECCOMP); err != nil { return err } - - if is386 { - if err = allowCmpEq(f, "time", 0, 0); err != nil { - return err - } - } else { - if err = allowCmpEq(f, "socket", 0, syscall.AF_UNIX); err != nil { - return err - } + if err = allowCmpEq(f, "socket", 0, syscall.AF_UNIX); err != nil { + return err } return f.ExportBPF(fd) } + +func ffFilterSocketcall(f *seccomp.ScmpFilter) error { + // This is kind of pointless because it allows basically all the things. + allowedCalls := []uint64{ + sysSocket, + sysBind, + sysConnect, + sysListen, + sysGetsockname, + sysGetpeername, + sysSocketpair, + sysSend, + sysRecv, + sysSendto, + sysRecvfrom, + sysShutdown, + sysSetsockopt, + sysGetsockopt, + sysSendmsg, + sysRecvmsg, + sysAccept4, + } + return allowCmpEq(f, "socketcall", 0, allowedCalls...) +} diff --git a/src/cmd/gen-seccomp/seccomp_tor.go b/src/cmd/gen-seccomp/seccomp_tor.go index 0a1b8cc..d6ec2ca 100644 --- a/src/cmd/gen-seccomp/seccomp_tor.go +++ b/src/cmd/gen-seccomp/seccomp_tor.go @@ -118,14 +118,18 @@ func compileTorSeccompProfile(fd *os.File, useBridges bool, is386 bool) error { "ugetrlimit", "set_thread_area", - - "socketcall", // I *SHOULDN"T* need this, but Debian stable freaks out. } allowedNoArgs = append(allowedNoArgs, allowedNoArgs386...) } if err = allowSyscalls(f, allowedNoArgs, is386); err != nil { return err } + if is386 { + // Handle socketcall() before filtering other things. + if err = torFilterSocketcall(f, useBridges); err != nil { + return err + } + } if err = allowCmpEq(f, "time", 0, 0); err != nil { return err @@ -157,22 +161,22 @@ func compileTorSeccompProfile(fd *os.File, useBridges bool, is386 bool) error { if err = allowCmpEq(f, "mremap", 3, mremapMaymove); err != nil { return err } - if err = torFilterAccept4(f, is386); err != nil { + if err = torFilterAccept4(f); err != nil { return err } if err = torFilterPoll(f); err != nil { return err } - if err = torFilterSocket(f, is386); err != nil { + if err = torFilterSocket(f); err != nil { return err } - if err = torFilterSetsockopt(f, is386); err != nil { + if err = torFilterSetsockopt(f); err != nil { return err } - if err = torFilterGetsockopt(f, is386); err != nil { + if err = torFilterGetsockopt(f); err != nil { return err } - if err = torFilterSocketpair(f, is386); err != nil { + if err = torFilterSocketpair(f); err != nil { return err } if err = torFilterMmap(f, is386); err != nil { @@ -196,7 +200,7 @@ func compileTorSeccompProfile(fd *os.File, useBridges bool, is386 bool) error { "getppid", } if is386 { - obfsCalls = append(obfsCalls, "newselect") + obfsCalls = append(obfsCalls, "_newselect") } if err = allowSyscalls(f, obfsCalls, is386); err != nil { return err @@ -212,7 +216,7 @@ func compileTorSeccompProfile(fd *os.File, useBridges bool, is386 bool) error { if err = allowCmpEq(f, "futex", 1, futexWake, futexWait); err != nil { return err } - if err = obfsFilterSetsockopt(f, is386); err != nil { + if err = obfsFilterSetsockopt(f); err != nil { return err } if err = obfsFilterMmap(f, is386); err != nil { @@ -223,6 +227,40 @@ func compileTorSeccompProfile(fd *os.File, useBridges bool, is386 bool) error { return f.ExportBPF(fd) } +func torFilterSocketcall(f *seccomp.ScmpFilter, useBridges bool) error { + // This interface needs to die in a fire, because it's leaving + // gaping attack surface. It kind of will assuming that things + // move on to 4.3 or later. + // + // Emperically on Fedora 25 getsockopt and setsockopt still are + // multiplexed, though that may just be my rules or libseccomp2. + // + // Re-test after Debian stable moves to a modern kernel. + + allowedCalls := []uint64{ + sysSocket, + sysBind, + sysConnect, + sysListen, + sysGetsockname, + sysSocketpair, + sysSend, + sysRecv, + sysSendto, + sysRecvfrom, + sysSetsockopt, + sysGetsockopt, + sysSendmsg, + sysRecvmsg, + sysAccept4, + } + if useBridges { + allowedCalls = append(allowedCalls, sysGetpeername) + } + + return allowCmpEq(f, "socketcall", 0, allowedCalls...) +} + func torFilterPrctl(f *seccomp.ScmpFilter) error { scall, err := seccomp.GetSyscallFromName("prctl") if err != nil { @@ -248,17 +286,11 @@ func torFilterPrctl(f *seccomp.ScmpFilter) error { return f.AddRuleConditional(scall, seccomp.ActAllow, []seccomp.ScmpCondition{isPrSetDeathsig}) } -func torFilterAccept4(f *seccomp.ScmpFilter, is386 bool) error { +func torFilterAccept4(f *seccomp.ScmpFilter) error { scall, err := seccomp.GetSyscallFromName("accept4") if err != nil { return err } - if is386 { - // XXX: The tor common/sandbox.c file, explcitly allows socketcall() - // by arg for this call, and only this call, when libseccomp should - // do the right thing. - return f.AddRule(scall, seccomp.ActAllow) - } cond, err := seccomp.MakeCondition(3, seccomp.CompareMaskedEqual, 0, syscall.SOCK_CLOEXEC|syscall.SOCK_NONBLOCK) if err != nil { @@ -285,27 +317,16 @@ func torFilterPoll(f *seccomp.ScmpFilter) error { return f.AddRuleConditional(scall, seccomp.ActAllow, []seccomp.ScmpCondition{isPollIn, timeoutIsTen}) } -func torFilterSocket(f *seccomp.ScmpFilter, is386 bool) error { - scall, err := seccomp.GetSyscallFromName("socket") - if err != nil { - return err - } - if is386 { - return f.AddRule(scall, seccomp.ActAllow) - } - +func torFilterSocket(f *seccomp.ScmpFilter) error { // XXX: Tighten this some more. return allowCmpEq(f, "socket", 0, syscall.AF_UNIX, syscall.AF_INET, syscall.AF_INET6 /*, syscall.AF_NETLINK */) } -func torFilterSetsockopt(f *seccomp.ScmpFilter, is386 bool) error { +func torFilterSetsockopt(f *seccomp.ScmpFilter) error { scall, err := seccomp.GetSyscallFromName("setsockopt") if err != nil { return err } - if is386 { - return f.AddRule(scall, seccomp.ActAllow) - } isSolSocket, err := seccomp.MakeCondition(1, seccomp.CompareEqual, syscall.SOL_SOCKET) if err != nil { @@ -331,14 +352,11 @@ func torFilterSetsockopt(f *seccomp.ScmpFilter, is386 bool) error { return nil } -func torFilterGetsockopt(f *seccomp.ScmpFilter, is386 bool) error { +func torFilterGetsockopt(f *seccomp.ScmpFilter) error { scall, err := seccomp.GetSyscallFromName("getsockopt") if err != nil { return err } - if is386 { - return f.AddRule(scall, seccomp.ActAllow) - } isSolSocket, err := seccomp.MakeCondition(1, seccomp.CompareEqual, syscall.SOL_SOCKET) if err != nil { @@ -351,14 +369,11 @@ func torFilterGetsockopt(f *seccomp.ScmpFilter, is386 bool) error { return f.AddRuleConditional(scall, seccomp.ActAllow, []seccomp.ScmpCondition{isSolSocket, optIsError}) } -func torFilterSocketpair(f *seccomp.ScmpFilter, is386 bool) error { +func torFilterSocketpair(f *seccomp.ScmpFilter) error { scall, err := seccomp.GetSyscallFromName("socketpair") if err != nil { return err } - if is386 { - return f.AddRule(scall, seccomp.ActAllow) - } isPfLocal, err := seccomp.MakeCondition(0, seccomp.CompareEqual, syscall.AF_LOCAL) if err != nil { @@ -530,12 +545,7 @@ func torFilterFcntl(f *seccomp.ScmpFilter, is386 bool) error { return nil } -func obfsFilterSetsockopt(f *seccomp.ScmpFilter, is386 bool) error { - // 386 already blindly allows all setsockopt() calls. - if is386 { - return nil - } - +func obfsFilterSetsockopt(f *seccomp.ScmpFilter) error { scall, err := seccomp.GetSyscallFromName("setsockopt") if err != nil { return err

1 0

[user-manual/master] Preparing for translations
by colin＠torproject.org 08 Dec '16

08 Dec '16

commit ac0359bc63d15659ad6303b239ef244a6a2820d7 Author: Colin Childs <colin(a)torproject.org> Date: Wed Dec 7 18:51:26 2016 -0600 Preparing for translations --- tor-browser-manual.pot | 977 +++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 977 insertions(+) diff --git a/tor-browser-manual.pot b/tor-browser-manual.pot new file mode 100644 index 0000000..afb4d28 --- /dev/null +++ b/tor-browser-manual.pot @@ -0,0 +1,977 @@ +msgid "" +msgstr "" +"Project-Id-Version: PACKAGE VERSION\n" +"POT-Creation-Date: 2016-12-06 16:36-0600\n" +"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" +"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n" +"Language-Team: LANGUAGE <LL(a)li.org>\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Put one translator per line, in the form NAME <EMAIL>, YEAR1, YEAR2 +msgctxt "_" +msgid "translator-credits" +msgstr "" + +#: about-tor-browser.page:7 +msgid "Learn what Tor Browser can do to protect your privacy and anonymity" +msgstr "" + +#: about-tor-browser.page:10 +msgid "About Tor Browser" +msgstr "" + +#: about-tor-browser.page:12 +msgid "Tor Browser uses the Tor network to protect your privacy and anonymity. Using the Tor network has two main properties:" +msgstr "" + +#: about-tor-browser.page:18 +msgid "Your internet service provider, and anyone watching your connection locally, will not be able to track your internet activity, including the names and addresses of the websites you visit." +msgstr "" + +#: about-tor-browser.page:25 +msgid "The operators of the websites and services that you use, and anyone watching them, will see a connection coming from the Tor network instead of your real Internet (IP) address, and will not know who you are unless you explicitly identify yourself." +msgstr "" + +#: about-tor-browser.page:34 +msgid "In addition, Tor Browser is designed to prevent websites from “fingerprinting” or identifying you based on your browser configuration." +msgstr "" + +#: about-tor-browser.page:39 +msgid "By default, Tor Browser does not keep any browsing history. Cookies are only valid for a single session (until Tor Browser is exited or a <link xref=\"managing-identities#new-identity\">New Identity</link> is requested)." +msgstr "" + +#: about-tor-browser.page:50 +msgid "How Tor works" +msgstr "" + +#: about-tor-browser.page:52 +msgid "Tor is a network of virtual tunnels that allows you to improve your privacy and security on the Internet. Tor works by sending your traffic through three random servers (also known as <em>relays</em>) in the Tor network. The last relay in the circuit (the “exit relay”) then sends the traffic out onto the public Internet." +msgstr "" + +#. This is a reference to an external file such as an image or video. When +#. the file changes, the md5 hash will change to let you know you need to +#. update your localized copy. The msgstr is not used at all. Set it to +#. whatever you like once you have updated your copy of the file. +#: about-tor-browser.page:59 +msgctxt "_" +msgid "external ref='media/how-tor-works.png' md5='6fe4151a88b7a518466f0582e40ccc8c'" +msgstr "" + +#: about-tor-browser.page:60 +msgid "The image above illustrates a user browsing to different websites over Tor. The green middle computers represent relays in the Tor network, while the three keys represent the layers of encryption between the user and each relay." +msgstr "" + +#: bridges.page:6 +msgid "Learn what bridges are and how to get them" +msgstr "" + +#: bridges.page:10 +msgid "Bridges" +msgstr "" + +#: bridges.page:12 +msgid "Most <link xref=\"transports\">Pluggable Transports</link>, such as obfs3 and obfs4, rely on the use of “bridge” relays. Like ordinary Tor relays, bridges are run by volunteers; unlike ordinary relays, however, they are not listed publicly, so an adversary cannot identify them easily. Using bridges in combination with pluggable transports helps to disguise the fact that you are using Tor." +msgstr "" + +#: bridges.page:21 +msgid "Other pluggable transports, like meek, use different anti-censorship techniques that do not rely on bridges. You do not need to obtain bridge addresses in order to use these transports." +msgstr "" + +#: bridges.page:28 +msgid "Getting bridge addresses" +msgstr "" + +#: bridges.page:29 +msgid "Because bridge addresses are not public, you will need to request them yourself. You have two options:" +msgstr "" + +#: bridges.page:36 +msgid "Visit <link href=\"https://bridges.torproject.org/\">https://bridges.torproject.org/</link> and follow the instructions, or" +msgstr "" + +#: bridges.page:42 +msgid "Email bridges(a)torproject.org from a Gmail, Yahoo, or Riseup email address, or" +msgstr "" + +#: bridges.page:51 +msgid "Entering bridge addresses" +msgstr "" + +#: bridges.page:52 +msgid "Once you have obtained some bridge addresses, you will need to enter them into Tor Launcher." +msgstr "" + +#: bridges.page:57 +msgid "Choose “yes” when asked if your Internet Service Provider blocks connections to the Tor network. Select “Use custom bridges” and enter each bridge address on a separate line." +msgstr "" + +#. This is a reference to an external file such as an image or video. When +#. the file changes, the md5 hash will change to let you know you need to +#. update your localized copy. The msgstr is not used at all. Set it to +#. whatever you like once you have updated your copy of the file. +#: bridges.page:63 +msgctxt "_" +msgid "external ref='media/tor-launcher-custom-bridges_en-US.png' md5='93365c2aa3fb4d627497e83f28a39b7e'" +msgstr "" + +#: bridges.page:65 +msgid "Click “Connect”. Using bridges may slow down the connection compared to using ordinary Tor relays. If the connection fails, the bridges you received may be down. Please use one of the above methods to obtain more bridge addresses, and try again." +msgstr "" + +#: circumvention.page:6 +msgid "What to do if the Tor network is blocked" +msgstr "" + +#: circumvention.page:10 +msgid "Circumvention" +msgstr "" + +#: circumvention.page:12 +msgid "Direct access to the Tor network may sometimes be blocked by your Internet Service Provider or by a government. Tor Browser includes some circumvention tools for getting around these blocks. These tools are called “pluggable transports”. See the <link xref=\"transports\">Pluggable Transports</link> page for more information on the types of transport that are currently available." +msgstr "" + +#: circumvention.page:22 +msgid "Using pluggable transports" +msgstr "" + +#. This is a reference to an external file such as an image or video. When +#. the file changes, the md5 hash will change to let you know you need to +#. update your localized copy. The msgstr is not used at all. Set it to +#. whatever you like once you have updated your copy of the file. +#: circumvention.page:26 +#: first-time.page:35 +msgctxt "_" +msgid "external ref='media/circumvention/configure.png' md5='519d888303eadfe4cb03f178aedd90f5'" +msgstr "" + +#: circumvention.page:28 +msgid "To use pluggable transports, click \"Configure\" in the Tor Launcher window that appears when you first run Tor Browser." +msgstr "" + +#: circumvention.page:33 +msgid "You can also configure pluggable transports while Tor Browser is running, by clicking on the green onion near your address bar and selecting “Tor Network Settings”." +msgstr "" + +#: circumvention.page:41 +msgid "Select “yes” when asked if your Internet Service Provider blocks connections to the Tor network." +msgstr "" + +#. This is a reference to an external file such as an image or video. When +#. the file changes, the md5 hash will change to let you know you need to +#. update your localized copy. The msgstr is not used at all. Set it to +#. whatever you like once you have updated your copy of the file. +#: circumvention.page:49 +msgctxt "_" +msgid "external ref='media/circumvention/bridges.png' md5='910cdd5e45860b81a1ad4739c589a195'" +msgstr "" + +#: circumvention.page:51 +msgid "Select “Connect with provided bridges”. Tor Browser currently has six pluggable transport options to choose from." +msgstr "" + +#: circumvention.page:60 +msgid "Which transport should I use?" +msgstr "" + +#: circumvention.page:61 +msgid "Each of the transports listed in Tor Launcher’s menu works in a different way (for more details, see the <link xref=\"transports\">Pluggable Transports</link> page), and their effectiveness depends on your individual circumstances." +msgstr "" + +#: circumvention.page:67 +msgid "If you are trying to circumvent a blocked connection for the first time, you should try the different transports: obfs3, obfs4, ScrambleSuit, fte, meek-azure, meek-amazon." +msgstr "" + +#: circumvention.page:72 +msgid "If you try all of these options, and none of them gets you online, you will need to enter bridge addresses manually. Read the <link xref=\"bridges\">Bridges</link> section to learn what bridges are and how to obtain them." +msgstr "" + +#: downloading.page:7 +msgid "How to download Tor Browser" +msgstr "" + +#: downloading.page:10 +msgid "Downloading" +msgstr "" + +#: downloading.page:12 +msgid "The safest and simplest way to download Tor Browser is from the official Tor Project website at https://www.torproject.org. Your connection to the site will be secured using <link xref=\"secure-connections\">HTTPS</link>, which makes it much harder for somebody to tamper with." +msgstr "" + +#: downloading.page:19 +msgid "However, there may be times when you cannot access the Tor Project website: for example, it could be blocked on your network. If this happens, you can use one of the alternative download methods listed below." +msgstr "" + +#: downloading.page:27 +msgid "GetTor" +msgstr "" + +#: downloading.page:28 +msgid "GetTor is a service that automatically responds to messages with links to the latest version of Tor Browser, hosted at a variety of locations, such as Dropbox, Google Drive and Github.." +msgstr "" + +#: downloading.page:34 +msgid "To use GetTor via email:" +msgstr "" + +#: downloading.page:39 +msgid "Send an email to gettor(a)torproject.org, and in the body of the message simply write “windows”, “osx”, or “linux”, (without quotation marks) depending on your operating system." +msgstr "" + +#: downloading.page:46 +msgid "GetTor will respond with an email containing links from which you can download the Tor Browser package, the cryptographic signature (needed for verifying the download), the fingerprint of the key used to make the signature, and the package’s checksum. You may be offered a choice of “32-bit” or “64-bit” software: this depends on the model of the computer you are using." +msgstr "" + +#: downloading.page:57 +msgid "To use GetTor via Twitter:" +msgstr "" + +#: downloading.page:62 +msgid "To get links for downloading Tor Browser in English for OS X, send a Direct Message to @get_tor with the words \"osx en\" in it (you don't need to follow the account)." +msgstr "" + +#: downloading.page:70 +msgid "To use GetTor via Jabber/XMPP (Tor Messenger, Jitsi, CoyIM):" +msgstr "" + +#: downloading.page:75 +msgid "To get links for downloading Tor Browser in Chinese for Linux, send a message to gettor(a)torproject.org with the words \"linux zh\" in it." +msgstr "" + +#: downloading.page:84 +msgid "Satori" +msgstr "" + +#: downloading.page:85 +msgid "Satori is an add-on for the Chrome or Chromium browsers that allows you to download several security and privacy programs from different sources." +msgstr "" + +#: downloading.page:90 +msgid "To download Tor Browser using Satori:" +msgstr "" + +#: downloading.page:95 +msgid "Install Satori from the Chrome App Store." +msgstr "" + +#: downloading.page:100 +msgid "Select Satori from your browser’s Apps menu." +msgstr "" + +#: downloading.page:105 +msgid "When Satori opens, click on your preferred language. A menu will open listing the available downloads for that language. Find the entry for Tor Browser under the name of your operating system. Select either “A” or “B” after the name of the program — each one represents a different source from which to get the software. Your download will then begin." +msgstr "" + +#: downloading.page:115 +msgid "Wait for your download to finish, then find the “Generate Hash” section in Satori’s menu and click “Select Files”." +msgstr "" + +#: downloading.page:121 +msgid "Select the downloaded Tor Browser file. Satori will display the checksum of the file, which you should compare with the software’s original checksum: you can find this by clicking the word “checksum” after the link you clicked on to start the download. If the checksums match, your download was successful, and you can <link xref=\"first-time\">begin using Tor Browser</link>. If they do not match, you may need to try downloading again, or from a different source." +msgstr "" + +#: first-time.page:7 +msgid "Learn how to use Tor Browser for the first time" +msgstr "" + +#: first-time.page:10 +msgid "Running Tor Browser for the first time" +msgstr "" + +#: first-time.page:12 +msgid "When you run Tor Browser for the first time, you will see the Tor Network Settings window. This offers you the option to connect directly to the Tor network, or to configure Tor Browser for your connection." +msgstr "" + +#: first-time.page:19 +msgid "Connect" +msgstr "" + +#. This is a reference to an external file such as an image or video. When +#. the file changes, the md5 hash will change to let you know you need to +#. update your localized copy. The msgstr is not used at all. Set it to +#. whatever you like once you have updated your copy of the file. +#: first-time.page:21 +#: troubleshooting.page:18 +msgctxt "_" +msgid "external ref='media/first-time/connect.png' md5='9d07068f751a3bfd274365a4ba8d90ca'" +msgstr "" + +#: first-time.page:23 +msgid "In most cases, choosing \"Connect\" will allow you to connect to the Tor network without any further configuration. Once clicked, a status bar will appear, showing Tor’s connection progress. If you are on a relatively fast connection, but this bar seems to get stuck at a certain point, see the <link xref=\"troubleshooting\">Troubleshooting</link> page for help solving the problem." +msgstr "" + +#: first-time.page:33 +msgid "Configure" +msgstr "" + +#: first-time.page:37 +msgid "If you know that your connection is censored, or uses a proxy, you should select this option. Tor Browser will take you through a series of configuration options." +msgstr "" + +#: first-time.page:44 +msgid "The first screen asks if access to the Tor network is blocked or censored on your connection. If you do not believe this is the case, select “No”. If you know your connection is censored, or you have tried and failed to connect to the Tor network and no other solutions have worked, select “Yes”. You will then be taken to the <link xref=\"circumvention\">Circumvention</link> screen to configure a pluggable transport." +msgstr "" + +#: first-time.page:55 +msgid "The next screen asks if your connection uses a proxy. In most cases, this is not necessary. You will usually know if you need to answer “Yes”, as the same settings will be used for other browsers on your system. If possible, ask your network administrator for guidance. If your connection does not use a proxy, click “Continue”." +msgstr "" + +#. This is a reference to an external file such as an image or video. When +#. the file changes, the md5 hash will change to let you know you need to +#. update your localized copy. The msgstr is not used at all. Set it to +#. whatever you like once you have updated your copy of the file. +#: first-time.page:63 +msgctxt "_" +msgid "external ref='media/first-time/proxy_question.png' md5='30853b3e86cfd386bbc32e5b8b45a378'" +msgstr "" + +#. This is a reference to an external file such as an image or video. When +#. the file changes, the md5 hash will change to let you know you need to +#. update your localized copy. The msgstr is not used at all. Set it to +#. whatever you like once you have updated your copy of the file. +#: first-time.page:66 +msgctxt "_" +msgid "external ref='media/first-time/proxy.png' md5='13f21a351cd0aa1cf11aada690f3dc90'" +msgstr "" + +#: index.page:6 +msgid "Tor Browser User Manual" +msgstr "" + +#: known-issues.page:6 +msgid "A list of known issues." +msgstr "" + +#: known-issues.page:10 +msgid "Known Issues" +msgstr "" + +#: known-issues.page:14 +msgid "Tor needs your system clock (and your time zone) set to the correct time." +msgstr "" + +#: known-issues.page:19 +msgid "The following firewall software have been known to interfere with Tor and may need to be temporarily disabled:" +msgstr "" + +#: known-issues.page:23 +msgid "Webroot SecureAnywhere" +msgstr "" + +#: known-issues.page:26 +msgid "Kaspersky Internet Security 2012" +msgstr "" + +#: known-issues.page:29 +msgid "Sophos Antivirus for Mac" +msgstr "" + +#: known-issues.page:32 +msgid "Microsoft Security Essentials" +msgstr "" + +#: known-issues.page:37 +msgid "Videos that require Adobe Flash are unavailable. Flash is disabled for security reasons." +msgstr "" + +#: known-issues.page:43 +msgid "Tor can not use a bridge if a proxy is set." +msgstr "" + +#: known-issues.page:48 +msgid "The Tor Browser package is dated January 1, 2000 00:00:00 UTC. This is to ensure that each software build is exactly reproducible." +msgstr "" + +#: known-issues.page:54 +msgid "To run Tor Browser on Ubuntu, users need to execute a shell script. Open \"Files\" (Unity's explorer), open Preferences → Behavior Tab → Set \"Run executable text files when they are opened\" to \"Ask every time\", then click OK." +msgstr "" + +#: known-issues.page:62 +msgid "Tor Browser can also be started from the command line by running the following command from inside the Tor Browser directory:" +msgstr "" + +#: known-issues.page:66 +#, no-wrap +msgid "" +"\n" +" ./start-tor-browser.desktop\n" +" " +msgstr "" + +#: managing-identities.page:6 +msgid "Learn how to control personally-identifying information in Tor Browser" +msgstr "" + +#: managing-identities.page:10 +msgid "Managing identities" +msgstr "" + +#: managing-identities.page:12 +msgid "When you connect to a website, it is not only the operators of that website who can record information about your visit. Most websites now use numerous third-party services, including social networking “Like” buttons, analytics trackers, and advertising beacons, all of which can link your activity across different sites." +msgstr "" + +#: managing-identities.page:20 +msgid "Using the Tor network stops observers from being able to discover your exact location and IP address, but even without this information they might be able to link different areas of your activity together. For this reason, Tor Browser includes some additional features that help you control what information can be tied to your identity." +msgstr "" + +#: managing-identities.page:29 +msgid "The URL bar" +msgstr "" + +#: managing-identities.page:30 +msgid "Tor Browser centers your web experience around your relationship with the website in the URL bar. Even if you connect to two different sites that use the same third-party tracking service, Tor Browser will force the content to be served over two different Tor circuits, so the tracker will not know that both connections originate from your browser." +msgstr "" + +#: managing-identities.page:38 +msgid "On the other hand, all connections to a single website address will be made over the same Tor circuit, meaning you can browse different pages of a single website in separate tabs or windows, without any loss of functionality." +msgstr "" + +#. This is a reference to an external file such as an image or video. When +#. the file changes, the md5 hash will change to let you know you need to +#. update your localized copy. The msgstr is not used at all. Set it to +#. whatever you like once you have updated your copy of the file. +#: managing-identities.page:46 +msgctxt "_" +msgid "external ref='media/managing-identities/circuit_full.png' md5='bd46d22de952fee42643be46d3f95928'" +msgstr "" + +#: managing-identities.page:48 +msgid "You can see a diagram of the circuit that Tor Browser is using for the current tab in the onion menu." +msgstr "" + +#: managing-identities.page:55 +msgid "Logging in over Tor" +msgstr "" + +#: managing-identities.page:56 +msgid "Although Tor Browser is designed to enable total user anonymity on the web, there may be situations in which it makes sense to use Tor with websites that require usernames, passwords, or other identifying information." +msgstr "" + +#: managing-identities.page:62 +msgid "If you log into a website using a regular browser, you also reveal your IP address and geographical location in the process. The same is often true when you send an email. Logging into your social networking or email accounts using Tor Browser allows you to choose exactly which information you reveal to the websites you browse. Logging in using Tor Browser is also useful if the website you are trying to reach is censored on your network." +msgstr "" + +#: managing-identities.page:72 +msgid "When you log in to a website over Tor, there are several points you should bear in mind:" +msgstr "" + +#: managing-identities.page:79 +msgid "See the <link xref=\"secure-connections\">Secure Connections</link> page for important information on how to secure your connection when logging in." +msgstr "" + +#: managing-identities.page:87 +msgid "Tor Browser often makes your connection appear as though it is coming from an entirely different part of the world. Some websites, such as banks or email providers, might interpret this as a sign that your account has been hacked or compromised, and lock you out. The only way to resolve this is by following the site’s recommended procedure for account recovery, or contacting the operators and explaining the situation." +msgstr "" + +#: managing-identities.page:101 +msgid "Changing identities and circuits" +msgstr "" + +#. This is a reference to an external file such as an image or video. When +#. the file changes, the md5 hash will change to let you know you need to +#. update your localized copy. The msgstr is not used at all. Set it to +#. whatever you like once you have updated your copy of the file. +#: managing-identities.page:103 +msgctxt "_" +msgid "external ref='media/managing-identities/new_identity.png' md5='15b01e35fa83185d94b57bf0ccf09d76'" +msgstr "" + +#: managing-identities.page:105 +msgid "Tor Browser features “New Identity” and “New Tor Circuit for this Site” options, located in the Torbutton menu." +msgstr "" + +#: managing-identities.page:111 +msgid "New Identity" +msgstr "" + +#: managing-identities.page:112 +msgid "This option is useful if you want to prevent your subsequent browser activity from being linkable to what you were doing before. Selecting it will close all your open tabs and windows, clear all private information such as cookies and browsing history, and use new Tor circuits for all connections. Tor Browser will warn you that all activity and downloads will be stopped, so take this into account before clicking “New Identity”." +msgstr "" + +#: managing-identities.page:123 +msgid "New Tor Circuit for this Site" +msgstr "" + +#: managing-identities.page:124 +msgid "This option is useful if the <link xref=\"about-tor-browser#how-tor-works\">exit relay</link> you are using is unable to connect to the website you require, or is not loading it properly. Selecting it will cause the currently-active tab or window to be reloaded over a new Tor circuit. Other open tabs and windows from the same website will use the new circuit as well once they are reloaded. This option does not clear any private information or unlink your activity, nor does it affect your current connections to other websites." +msgstr "" + +#: onionsites.page:6 +msgid "Services that are only accessible using Tor" +msgstr "" + +#: onionsites.page:10 +msgid "Onion Services" +msgstr "" + +#: onionsites.page:11 +msgid "Onion services (formerly known as “hidden services”) are services (like websites) that are only accessible through the Tor network." +msgstr "" + +#: onionsites.page:16 +msgid "Onion services offer several advantages over ordinary services on the non-private web:" +msgstr "" + +#: onionsites.page:23 +msgid "An onion services’s location and IP address are hidden, making it difficult for adversaries to censor it or identify its operators." +msgstr "" + +#: onionsites.page:29 +msgid "All traffic between Tor users and onion services is end-to-end encrypted, so you do not need to worry about <link xref=\"secure-connections\">connecting over HTTPS</link>." +msgstr "" + +#: onionsites.page:36 +msgid "The address of an onion service is automatically generated, so the operators do not need to purchase a domain name; the .onion URL also helps Tor ensure that it is connecting to the right location and that the connection is not being tampered with." +msgstr "" + +#: onionsites.page:46 +msgid "How to access an onion service" +msgstr "" + +#. This is a reference to an external file such as an image or video. When +#. the file changes, the md5 hash will change to let you know you need to +#. update your localized copy. The msgstr is not used at all. Set it to +#. whatever you like once you have updated your copy of the file. +#: onionsites.page:48 +msgctxt "_" +msgid "external ref='media/onionsites/onion_url.png' md5='f97f7fe10f07c3959c4430934974bbaa'" +msgstr "" + +#: onionsites.page:50 +msgid "Just like any other website, you will need to know the address of an onion service in order to connect to it. An onion address is a string of sixteen mostly random letters and numbers, followed by “.onion”." +msgstr "" + +#: onionsites.page:58 +#: troubleshooting.page:10 +msgid "Troubleshooting" +msgstr "" + +#: onionsites.page:59 +msgid "If you cannot reach the onion service you require, make sure that you have entered the 16-character onion address correctly: even a small mistake will stop Tor Browser from being able to reach the site." +msgstr "" + +#: onionsites.page:64 +msgid "If you are still unable to connect to the onion service, please try again later. There may be a temporary connection issue, or the site operators may have allowed it to go offline without warning." +msgstr "" + +#: onionsites.page:69 +msgid "You can also ensure that you're able to access other onion services by connecting to <link href=\"http://3g2upl4pq6kufc4m.onion/\">DuckDuckGo's Onion Service</link>" +msgstr "" + +#: plugins.page:6 +msgid "How Tor Browser handles add-ons, plugins and JavaScript" +msgstr "" + +#: plugins.page:10 +msgid "Plugins, add-ons and JavaScript" +msgstr "" + +#: plugins.page:13 +msgid "Flash Player" +msgstr "" + +#: plugins.page:14 +msgid "Video websites, such as Vimeo make use of the Flash Player plugin to display video content. Unfortunately, this software operates independently of Tor Browser and cannot easily be made to obey Tor Browser’s proxy settings. It can therefore reveal your real location and IP address to the website operators, or to an outside observer. For this reason, Flash is disabled by default in Tor Browser, and enabling it is not recommended." +msgstr "" + +#: plugins.page:23 +msgid "Some video websites (such as YouTube) offer alternative video delivery methods that do not use Flash. These methods may be compatible with Tor Browser." +msgstr "" + +#: plugins.page:31 +msgid "JavaScript" +msgstr "" + +#: plugins.page:32 +msgid "JavaScript is a programming language that websites use to offer interactive elements such as video, animation, audio, and status timelines. Unfortunately, JavaScript can also enable attacks on the security of the browser, which might lead to deanonymization." +msgstr "" + +#: plugins.page:39 +msgid "Tor Browser includes an add-on called NoScript, accessed through the “S” icon at the top-left of the window, which allows you to control the JavaScript that runs on individual web pages, or to block it entirely." +msgstr "" + +#. This is a reference to an external file such as an image or video. When +#. the file changes, the md5 hash will change to let you know you need to +#. update your localized copy. The msgstr is not used at all. Set it to +#. whatever you like once you have updated your copy of the file. +#: plugins.page:45 +msgctxt "_" +msgid "external ref='media/plugins/noscript_menu.png' md5='df9e684b76a3c2e2bdcb879a19c20471'" +msgstr "" + +#: plugins.page:47 +msgid "Users who require a high degree of security in their web browsing should set Tor Browser’s <link xref=\"security-slider\">Security Slider</link> to “Medium-High” (which disables JavaScript for non-HTTPS websites) or “High” (which does so for all websites). However, disabling JavaScript will prevent many websites from displaying correctly, so Tor Browser’s default setting is to allow all websites to run scripts." +msgstr "" + +#: plugins.page:58 +msgid "Browser Add-ons" +msgstr "" + +#: plugins.page:59 +msgid "Tor Browser is based on Firefox, and any browser add-ons or themes that are compatible with Firefox can also be installed in Tor Browser." +msgstr "" + +#: plugins.page:64 +msgid "However, the only add-ons that have been tested for use with Tor Browser are those included by default. Installing any other browser add-ons may break functionality in Tor Browser or cause more serious problems that affect your privacy and security. It is strongly discouraged to install additional add-ons, and the Tor Project will not offer support for these configurations." +msgstr "" + +#: secure-connections.page:8 +msgid "Learn how to protect your data using Tor Browser and HTTPS" +msgstr "" + +#: secure-connections.page:12 +msgid "Secure Connections" +msgstr "" + +#: secure-connections.page:14 +msgid "If personal information such as a login password travels unencrypted over the Internet, it can very easily be intercepted by an eavesdropper. If you are logging into any website, you should make sure that the site offers HTTPS encryption, which protects against this kind of eavesdropping. You can verify this in the URL bar: if your connection is encrypted, the address will begin with “https://”, rather than “http://”." +msgstr "" + +#. This is a reference to an external file such as an image or video. When +#. the file changes, the md5 hash will change to let you know you need to +#. update your localized copy. The msgstr is not used at all. Set it to +#. whatever you like once you have updated your copy of the file. +#: secure-connections.page:24 +msgctxt "_" +msgid "external ref='media/secure-connections/https.png' md5='364bcbde7a649b0cea9ae178007c1a50'" +msgstr "" + +#: secure-connections.page:26 +msgid "The following visualization shows what information is visible to eavesdroppers with and without Tor Browser and HTTPS encryption:" +msgstr "" + +#: secure-connections.page:35 +msgid "Click the “Tor” button to see what data is visible to observers when you're using Tor. The button will turn green to indicate that Tor is on." +msgstr "" + +#: secure-connections.page:42 +msgid "Click the “HTTPS” button to see what data is visible to observers when you're using HTTPS. The button will turn green to indicate that HTTPS is on." +msgstr "" + +#: secure-connections.page:49 +msgid "When both buttons are green, you see the data that is visible to observers when you are using both tools." +msgstr "" + +#: secure-connections.page:55 +msgid "When both buttons are grey, you see the data that is visible to observers when you don't use either tool." +msgstr "" + +#: secure-connections.page:62 +msgid "Potentially visible data" +msgstr "" + +#: secure-connections.page:70 +msgid "The site being visited." +msgstr "" + +#: secure-connections.page:81 +msgid "Username and password used for authentication." +msgstr "" + +#: secure-connections.page:92 +msgid "Data being transmitted." +msgstr "" + +#: secure-connections.page:103 +msgid "Network location of the computer used to visit the website (the public IP address)." +msgstr "" + +#: secure-connections.page:115 +msgid "Whether or not Tor is being used." +msgstr "" + +#: security-slider.page:6 +msgid "Configuring Tor Browser for security and usability" +msgstr "" + +#: security-slider.page:10 +msgid "Security Slider" +msgstr "" + +#: security-slider.page:11 +msgid "Tor Browser includes a “Security Slider” that lets you increase your security by disabling certain web features that can be used to attack your security and anonymity. Increasing Tor Browser’s security level will stop some web pages from functioning properly, so you should weigh your security needs against the degree of usability you require." +msgstr "" + +#: security-slider.page:21 +msgid "Accessing the Security Slider" +msgstr "" + +#. This is a reference to an external file such as an image or video. When +#. the file changes, the md5 hash will change to let you know you need to +#. update your localized copy. The msgstr is not used at all. Set it to +#. whatever you like once you have updated your copy of the file. +#: security-slider.page:23 +msgctxt "_" +msgid "external ref='media/security-slider/slider.png' md5='3c469cd3ed9f60ebb6bbbc63daa90082'" +msgstr "" + +#: security-slider.page:25 +msgid "The Security Slider is located in Torbutton’s “Privacy and Security Settings” menu." +msgstr "" + +#: security-slider.page:32 +msgid "Security Levels" +msgstr "" + +#. This is a reference to an external file such as an image or video. When +#. the file changes, the md5 hash will change to let you know you need to +#. update your localized copy. The msgstr is not used at all. Set it to +#. whatever you like once you have updated your copy of the file. +#: security-slider.page:34 +msgctxt "_" +msgid "external ref='media/security-slider/slider_window.png' md5='c733bdccd1731ed1a772777b25bae7a1'" +msgstr "" + +#: security-slider.page:36 +msgid "Increasing the level of the Security Slider will disable or partially disable certain browser features to protect against possible attacks." +msgstr "" + +#: security-slider.page:42 +msgid "High" +msgstr "" + +#: security-slider.page:43 +msgid "At this level, HTML5 video and audio media become click-to-play via NoScript; all JavaScript performance optimizations are disabled; some mathematical equations may not display properly; some font rendering features are disabled; some types of image are disabled; Javascript is disabled by default on all sites; most video and audio formats are disabled; and some fonts and icons may not display correctly." +msgstr "" + +#: security-slider.page:53 +msgid "Medium-High" +msgstr "" + +#: security-slider.page:54 +msgid "At this level, HTML5 video and audio media become click-to-play via NoScript; all JavaScript performance optimizations are disabled; some mathematical equations may not display properly; some font rendering features are disabled; some types of image are disabled; and JavaScript is disabled by default on all non-<link xref=\"secure-connections\">HTTPS</link> sites." +msgstr "" + +#: security-slider.page:64 +msgid "Medium-Low" +msgstr "" + +#: security-slider.page:65 +msgid "At this level, HTML5 video and audio media become click-to-play via NoScript; some <link xref=\"plugins\">JavaScript</link> performance optimizations are disabled, causing some websites to run more slowly; and some mathematical equations may not display properly." +msgstr "" + +#: security-slider.page:73 +msgid "Low" +msgstr "" + +#: security-slider.page:74 +msgid "At this level, all browser features are enabled. This is the most usable option." +msgstr "" + +#: transports.page:6 +#: transports.page:20 +msgid "Types of pluggable transport" +msgstr "" + +#: transports.page:10 +msgid "Pluggable Transports" +msgstr "" + +#: transports.page:12 +msgid "Pluggable transports are tools that Tor can use to disguise the traffic it sends out. This can be useful in situations where an Internet Service Provider or other authority is actively blocking connections to the Tor network." +msgstr "" + +#: transports.page:21 +msgid "Currently there are six pluggable transports available, but more are being developed." +msgstr "" + +#: transports.page:28 +msgid "obfs3" +msgstr "" + +#: transports.page:33 +msgid "obfs3 makes Tor traffic look random, so that it does not look like Tor or any other protocol. obfs3 bridges will work in most places." +msgstr "" + +#: transports.page:42 +msgid "obfs4" +msgstr "" + +#: transports.page:47 +msgid "obfs4 makes Tor traffic look random like obfs3, and also prevents censors from finding bridges by Internet scanning. obfs4 bridges are less likely to be blocked than obfs3 bridges." +msgstr "" + +#: transports.page:56 +msgid "Scramblesuit" +msgstr "" + +#: transports.page:61 +msgid "ScrambleSuit is similar to obfs4 but has a different set of bridges." +msgstr "" + +#: transports.page:69 +msgid "FTE" +msgstr "" + +#: transports.page:74 +msgid "FTE (format-transforming encryption) disguises Tor traffic as ordinary web (HTTP) traffic." +msgstr "" + +#: transports.page:82 +msgid "meek" +msgstr "" + +#: transports.page:87 +msgid "These transports all make it look like you are browsing a major web site instead of using Tor. meek-amazon makes it look like you are using Amazon Web Services; meek-azure makes it look like you are using a Microsoft web site; and meek-google makes it look like you are using Google search." +msgstr "" + +#: troubleshooting.page:6 +msgid "What to do if Tor Browser doesn’t work" +msgstr "" + +#: troubleshooting.page:12 +msgid "You should be able to start browsing the web using Tor Browser shortly after running the program, and clicking the “Connect” button if you are using it for the first time." +msgstr "" + +#: troubleshooting.page:21 +msgid "Quick fixes" +msgstr "" + +#: troubleshooting.page:22 +msgid "If Tor Browser doesn’t connect, there may be a simple solution. Try each of the following:" +msgstr "" + +#: troubleshooting.page:29 +msgid "Your computer’s system clock must be set correctly, or Tor will not be able to connect." +msgstr "" + +#: troubleshooting.page:35 +msgid "Make sure another Tor Browser is not already running. If you’re not sure if Tor Browser is running, restart your computer." +msgstr "" + +#: troubleshooting.page:41 +msgid "Make sure that any antivirus program you have installed is not preventing Tor from running. You may need to consult the documentation for your antivirus software if you do not know how to do this." +msgstr "" + +#: troubleshooting.page:49 +msgid "Temporarily disable your firewall." +msgstr "" + +#: troubleshooting.page:54 +msgid "Delete Tor Browser and install it again. If updating, do not just overwrite your previous Tor Browser files; ensure they are fully deleted beforehand." +msgstr "" + +#: troubleshooting.page:64 +msgid "Is your connection censored?" +msgstr "" + +#: troubleshooting.page:65 +msgid "If you still can’t connect, your Internet Service Provider might be censoring connections to the Tor network. Read the <link xref=\"circumvention\">Circumvention</link> section for possible solutions." +msgstr "" + +#: troubleshooting.page:74 +msgid "Known issues" +msgstr "" + +#: troubleshooting.page:75 +msgid "Tor Browser is under constant development, and some issues are known about but not yet fixed. Please check the <link xref=\"known-issues\">Known Issues</link> page to see if the problem you are experiencing is already listed there." +msgstr "" + +#: uninstalling.page:6 +msgid "How to remove Tor Browser from your system" +msgstr "" + +#: uninstalling.page:10 +msgid "Uninstalling" +msgstr "" + +#: uninstalling.page:12 +msgid "Tor Browser does not affect any of the existing software or settings on your computer. Uninstalling Tor Browser will not affect your system’s software or settings." +msgstr "" + +#: uninstalling.page:18 +msgid "Removing Tor Browser from your system is simple:" +msgstr "" + +#: uninstalling.page:24 +msgid "Locate your Tor Browser folder. The default location on Windows is the Desktop; on Mac OS X it is the Applications folder. On Linux, there is no default location, however the folder will be named \"tor-browser_en-US\" if you are running the English Tor Browser." +msgstr "" + +#: uninstalling.page:32 +msgid "Delete the Tor Browser folder." +msgstr "" + +#: uninstalling.page:35 +msgid "Empty your Trash" +msgstr "" + +#: uninstalling.page:39 +msgid "Note that your operating system’s standard “Uninstall” utility is not used." +msgstr "" + +#: updating.page:6 +msgid "How to update Tor Browser" +msgstr "" + +#: updating.page:10 +msgid "Updating" +msgstr "" + +#: updating.page:12 +msgid "Tor Browser must be kept updated at all times. If you continue to use an outdated version of the software, you may be vulnerable to serious security flaws that compromise your privacy and anonymity." +msgstr "" + +#: updating.page:18 +msgid "Tor Browser will prompt you to update the software once a new version has been released: the Torbutton icon will display a yellow triangle, and you may see a written update indicator when Tor Browser opens. You can update either automatically or manually." +msgstr "" + +#: updating.page:26 +msgid "Updating Tor Browser automatically" +msgstr "" + +#. This is a reference to an external file such as an image or video. When +#. the file changes, the md5 hash will change to let you know you need to +#. update your localized copy. The msgstr is not used at all. Set it to +#. whatever you like once you have updated your copy of the file. +#: updating.page:30 +msgctxt "_" +msgid "external ref='media/updating/update1.png' md5='9ff01eb653d92124746fc31efde2bf07'" +msgstr "" + +#: updating.page:32 +msgid "When you are prompted to update Tor Browser, click on the Torbutton icon, then select “Check for Tor Browser Update”." +msgstr "" + +#. This is a reference to an external file such as an image or video. When +#. the file changes, the md5 hash will change to let you know you need to +#. update your localized copy. The msgstr is not used at all. Set it to +#. whatever you like once you have updated your copy of the file. +#: updating.page:39 +msgctxt "_" +msgid "external ref='media/updating/update3.png' md5='4bd08622b0cacf20b13f75c432176ed3'" +msgstr "" + +#: updating.page:41 +msgid "When Tor Browser has finished checking for updates, click on the “Update” button." +msgstr "" + +#. This is a reference to an external file such as an image or video. When +#. the file changes, the md5 hash will change to let you know you need to +#. update your localized copy. The msgstr is not used at all. Set it to +#. whatever you like once you have updated your copy of the file. +#: updating.page:48 +msgctxt "_" +msgid "external ref='media/updating/update4.png' md5='1d795e7b695738531db9d4b2b0fb5313'" +msgstr "" + +#: updating.page:50 +msgid "Wait for the update to download and install, then restart Tor Browser. You will now be running the latest version." +msgstr "" + +#: updating.page:58 +msgid "Updating Tor Browser manually" +msgstr "" + +#: updating.page:61 +msgid "When you are prompted to update Tor Browser, finish the browsing session and close the program." +msgstr "" + +#: updating.page:67 +msgid "Remove Tor Browser from your system by deleting the folder that contains it (see the <link xref=\"uninstalling\">Uninstalling</link> section for more information)." +msgstr "" + +#: updating.page:74 +msgid "Visit <link href=\"https://www.torproject.org/projects/torbrowser.html.en\"> https://www.torproject.org/projects/torbrowser.html.en</link> and download a copy of the latest Tor Browser release, then install it as before." +msgstr "" +

1 0

[tor/release-0.2.9] Merge branch 'maint-0.2.9' into release-0.2.9
by nickm＠torproject.org 08 Dec '16

08 Dec '16

commit 9ead4e926fb44f6e9e5c6a6cf599f624c1f7a802 Merge: fe0bfbf f602172 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Dec 7 18:28:39 2016 -0500 Merge branch 'maint-0.2.9' into release-0.2.9

1 0

[tor/release-0.2.9] Merge branch 'maint-0.2.8' into maint-0.2.9
by nickm＠torproject.org 08 Dec '16

08 Dec '16

commit f602172dbaa9b0db49d6de993c9e13a48d12079f Merge: e7ade23 10baf2c Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Dec 7 18:28:09 2016 -0500 Merge branch 'maint-0.2.8' into maint-0.2.9 (ours merge, to avoid taking 20865 fix)

1 0

[tor/release-0.2.9] Backport the other sierra fix in 20865.
by nickm＠torproject.org 08 Dec '16

08 Dec '16

commit 10baf2c6845f93ade7d412ad27efb625e513160e Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Dec 7 18:19:18 2016 -0500 Backport the other sierra fix in 20865. They added clock_gettime(), but with tv_nsec as a long, whereas tv_usec is a __darwin_suseconds_t (a.k.a. 'int'). Now, why would they do that? Are they preparing for a world where there are more than 2 billion nanoseconds per second? Are they planning for having int be less than 32 bits again? Or are they just not paying attention to the Darwin API? Also, they forgot to mark clock_gettime() as Sierra-only, so even if we fixed the issue here, we'd still be stick with portability breakage like we were for 0.2.9. So, just disable clock_gettime() on apple. --- src/common/compat_pthreads.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/common/compat_pthreads.c b/src/common/compat_pthreads.c index 1b24cc3..962b5fc 100644 --- a/src/common/compat_pthreads.c +++ b/src/common/compat_pthreads.c @@ -21,6 +21,11 @@ #include "torlog.h" #include "util.h" +#ifdef __APPLE__ +#undef CLOCK_MONOTONIC +#undef HAVE_CLOCK_GETTIME +#endif + /** Wraps a void (*)(void*) function and its argument so we can * invoke them in a way pthreads would expect. */

1 0

[tor/master] Backport the other sierra fix in 20865.
by nickm＠torproject.org 08 Dec '16

08 Dec '16

commit 10baf2c6845f93ade7d412ad27efb625e513160e Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Dec 7 18:19:18 2016 -0500 Backport the other sierra fix in 20865. They added clock_gettime(), but with tv_nsec as a long, whereas tv_usec is a __darwin_suseconds_t (a.k.a. 'int'). Now, why would they do that? Are they preparing for a world where there are more than 2 billion nanoseconds per second? Are they planning for having int be less than 32 bits again? Or are they just not paying attention to the Darwin API? Also, they forgot to mark clock_gettime() as Sierra-only, so even if we fixed the issue here, we'd still be stick with portability breakage like we were for 0.2.9. So, just disable clock_gettime() on apple. --- src/common/compat_pthreads.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/common/compat_pthreads.c b/src/common/compat_pthreads.c index 1b24cc3..962b5fc 100644 --- a/src/common/compat_pthreads.c +++ b/src/common/compat_pthreads.c @@ -21,6 +21,11 @@ #include "torlog.h" #include "util.h" +#ifdef __APPLE__ +#undef CLOCK_MONOTONIC +#undef HAVE_CLOCK_GETTIME +#endif + /** Wraps a void (*)(void*) function and its argument so we can * invoke them in a way pthreads would expect. */

1 0

[tor/master] Merge branch 'maint-0.2.9'
by nickm＠torproject.org 08 Dec '16

08 Dec '16

commit 7fea2c3188d81cd19ad2d1bd3d79099b88c9cd9d Merge: b658893 f602172 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Dec 7 18:28:48 2016 -0500 Merge branch 'maint-0.2.9'

1 0

[tor/master] Merge branch 'maint-0.2.8' into maint-0.2.9
by nickm＠torproject.org 08 Dec '16

08 Dec '16

commit f602172dbaa9b0db49d6de993c9e13a48d12079f Merge: e7ade23 10baf2c Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Dec 7 18:28:09 2016 -0500 Merge branch 'maint-0.2.8' into maint-0.2.9 (ours merge, to avoid taking 20865 fix)

1 0

[tor/maint-0.2.9] Merge branch 'maint-0.2.8' into maint-0.2.9
by nickm＠torproject.org 08 Dec '16

08 Dec '16

commit f602172dbaa9b0db49d6de993c9e13a48d12079f Merge: e7ade23 10baf2c Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Dec 7 18:28:09 2016 -0500 Merge branch 'maint-0.2.8' into maint-0.2.9 (ours merge, to avoid taking 20865 fix)

1 0

[tor/maint-0.2.9] Backport the other sierra fix in 20865.
by nickm＠torproject.org 08 Dec '16

08 Dec '16

commit 10baf2c6845f93ade7d412ad27efb625e513160e Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Dec 7 18:19:18 2016 -0500 Backport the other sierra fix in 20865. They added clock_gettime(), but with tv_nsec as a long, whereas tv_usec is a __darwin_suseconds_t (a.k.a. 'int'). Now, why would they do that? Are they preparing for a world where there are more than 2 billion nanoseconds per second? Are they planning for having int be less than 32 bits again? Or are they just not paying attention to the Darwin API? Also, they forgot to mark clock_gettime() as Sierra-only, so even if we fixed the issue here, we'd still be stick with portability breakage like we were for 0.2.9. So, just disable clock_gettime() on apple. --- src/common/compat_pthreads.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/common/compat_pthreads.c b/src/common/compat_pthreads.c index 1b24cc3..962b5fc 100644 --- a/src/common/compat_pthreads.c +++ b/src/common/compat_pthreads.c @@ -21,6 +21,11 @@ #include "torlog.h" #include "util.h" +#ifdef __APPLE__ +#undef CLOCK_MONOTONIC +#undef HAVE_CLOCK_GETTIME +#endif + /** Wraps a void (*)(void*) function and its argument so we can * invoke them in a way pthreads would expect. */

1 0