February 2016 - tor-commits - lists.torproject.org

[doctor/master] Support tracking multiple address or fingerprint entries
by atagar＠torproject.org 24 Feb '16

24 Feb '16

commit a1fdff709edd7af3ae3009b480687bbc67de7dc1 Author: Damian Johnson <atagar(a)torproject.org> Date: Wed Feb 24 09:33:40 2016 -0800 Support tracking multiple address or fingerprint entries dgoulet made the good point that we sometimes want to track multiple address ranges or fingerprints for a single bad actor. Supporting multiple 'name.address' and 'name.fingerprint' per entries. --- track_relays.py | 30 +++++++++++++++--------------- 1 file changed, 15 insertions(+), 15 deletions(-) diff --git a/track_relays.py b/track_relays.py index bc46216..deee467 100755 --- a/track_relays.py +++ b/track_relays.py @@ -32,8 +32,8 @@ class TrackedRelay(object): :var str identifier: brief identifier given to the entry :var str description: description of why we're tracking it :var datetime expires: when this entry expires - :var str address: address of the relay we're tracking - :var str fingerprint: fingerprint of the relay we're tracking + :var list addresses: address of the relay we're tracking + :var list fingerprints: fingerprint of the relay we're tracking """ def __init__(self, identifier, config): @@ -50,20 +50,20 @@ class TrackedRelay(object): except ValueError: raise ValueError("'%s.expires' is malformed. We expect it to be in the form 'Year-Month-Day'" % identifier) - self.address = config.get('%s.address' % identifier, None) - self.fingerprint = config.get('%s.fingerprint' % identifier, None) + self.addresses = config.get('%s.address' % identifier, []) + self.fingerprints = config.get('%s.fingerprint' % identifier, []) - if not self.address and not self.fingerprint: + if not self.addresses and not self.fingerprints: raise ValueError("We need either a '%s.address' or '%s.fingerprint' to track" % (identifier, identifier)) def __str__(self): attr = [] - if self.address: - attr.append('address: %s' % self.address) + for address in self.addresses: + attr.append('address: %s' % address) - if self.fingerprint: - attr.append('fingerprint: %s' % self.fingerprint) + for fingerprint in self.fingerprints: + attr.append('fingerprint: %s' % fingerprint) return '%s (%s)' % (self.identifier, ', '.join(attr)) @@ -110,17 +110,17 @@ def main(): tracked_fingerprints = {} for relay in get_tracked_relays(): - if relay.address: - if '/' in relay.address: + for address in relay.addresses: + if '/' in address: # It's a total hack, but taking advantage of exit policies where we # already support address ranges. - tracked_address_ranges[stem.exit_policy.ExitPolicyRule('accept %s:*' % relay.address)] = relay + tracked_address_ranges[stem.exit_policy.ExitPolicyRule('accept %s:*' % address)] = relay else: - tracked_addresses[relay.address] = relay + tracked_addresses[address] = relay - if relay.fingerprint: - tracked_fingerprints[relay.fingerprint] = relay + for fingerprint in relay.fingerprints: + tracked_fingerprints[fingerprint] = relay downloader = stem.descriptor.remote.DescriptorDownloader() found_relays = {} # mapping of TrackedRelay => RouterStatusEntry

1 0

[doctor/master] Don't alarm for BadExit being out of sync with new relays
by atagar＠torproject.org 24 Feb '16

24 Feb '16

commit 9ebead8ccc16955ffa8fd0c24c53adc9b6570185 Author: Damian Johnson <atagar(a)torproject.org> Date: Wed Feb 24 09:23:45 2016 -0800 Don't alarm for BadExit being out of sync with new relays Each consensus has a lot of churn and it's normal for relays to be out of sync initially. Only send BadExit sync notifications once a relay's been around for a while. --- consensus_health_checker.py | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/consensus_health_checker.py b/consensus_health_checker.py index b0efb5c..be06cf9 100755 --- a/consensus_health_checker.py +++ b/consensus_health_checker.py @@ -673,6 +673,15 @@ def bad_exits_in_sync(latest_consensus, consensuses, votes): else: not_in_consensus.append(authority) + # If this relay's missing from a consensus and has been active for less + # than an hour then don't bother. It gets negligable traffic and is likely + # part of normal network churn. + + desc = votes[with_flag[0]].routers[fingerprint] + + if not_in_consensus and (datetime.datetime.now() - desc.published).total_seconds() > 3600: + continue + attr = ['with flag: %s' % ', '.join(with_flag)] if without_flag:

1 0

[webwml/master] Add Tor Messenger to volunteer page and update link for TorBirdy
by atagar＠torproject.org 24 Feb '16

24 Feb '16

commit 6e6fe7d2a54c999d9d859f367d711a3cd1c2b514 Author: Sukhbir Singh <sukhbir(a)torproject.org> Date: Wed Feb 24 11:24:39 2016 -0500 Add Tor Messenger to volunteer page and update link for TorBirdy --- getinvolved/en/volunteer.wml | 19 ++++++++++++++++++- 1 file changed, 18 insertions(+), 1 deletion(-) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index 4c7d4df..47b661f 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -197,6 +197,14 @@ meetings around the world.</li> </tr> <tr> + <td><a href="#project-tormessenger">Tor Messenger</a></td> + <td>Bundle</td> + <td>JavaScript, XUL, Scripting</td> + <td>Heavy</td> + <td>arlolra, boklm, sukhe</td> + </tr> + + <tr> <td><a href="#project-torbirdy">TorBirdy</a></td> <td>Browser Add-on</td> <td>JavaScript</td> @@ -505,9 +513,18 @@ meetings around the world.</li> otherwise feature complete. + <a id="project-tormessenger"></a> + <h3><a href="https://trac.torproject.org/projects/tor/wiki/doc/TorMessenger">Tor Messenger</a> (<a + href="https://gitweb.torproject.org/tor-messenger-build.git">code</a>, <a + href="https://trac.torproject.org/projects/tor/query?status=!closed&component=Tor…">bug tracker</a>)</h3> + + + Tor Messenger is a cross-platform chat program that aims to be secure by default and sends all of its traffic over Tor. + + <a id="project-torbirdy"></a> <h3>TorBirdy (<a - href="https://github.com/ioerror/torbirdy">code</a>, <a + href="https://gitweb.torproject.org/torbirdy.git">code</a>, <a href="https://trac.torproject.org/projects/tor/wiki/torbirdy/dev">bug tracker</a>)</h3>

1 0

[webwml/master] Update TorBirdy description on the volunteer page
by atagar＠torproject.org 24 Feb '16

24 Feb '16

commit e1434db26bd3a5930c6fb4095ef95486a61ecc7c Author: Sukhbir Singh <sukhbir(a)torproject.org> Date: Tue Feb 23 15:52:51 2016 -0500 Update TorBirdy description on the volunteer page --- getinvolved/en/volunteer.wml | 32 ++++++++++++-------------------- 1 file changed, 12 insertions(+), 20 deletions(-) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index c1a36c9..4c7d4df 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -1027,40 +1027,32 @@ meetings around the world.</li> TorBirdy is an extension that configures Thunderbird to make connections over the Tor anonymity network. TorBirdy has been under development for quite a while but there are two known leaks that prevent it from being used by a wider -audience. As part of this project, you will be working on plugging the known -leaks and implementing a HTTP proxy. +audience. As part of this project, you will be working on implementing a HTTP +proxy. -Part 1: There are two patches pending with Mozilla that will plug the two known -leaks in Thunderbird where the local time is disclosed through the date and the -message-ID header. As part of your project, you will work on getting these -patches finished/reimplemented and getting them merged with Mozilla. Please -look at tickets <a -href="https://trac.torproject.org/projects/tor/ticket/6314">#6314</a> and <a -href="https://trac.torproject.org/projects/tor/ticket/6315">#6315</a> for more -information. - -Part 2: TorBirdy needs a HTTP proxy or a HTTP -> SOCKS5 shim. Please look at +HTTP Proxy TorBirdy needs a HTTP proxy or a HTTP -> SOCKS5 shim. Please look at ticket <a href="https://trac.torproject.org/projects/tor/ticket/6958">#6958</a> -for more information. Note: this has to be done using JavaScript and not using +for more information. Note: this has to be done using JavaScript and without using an external proxy. If time permits and you are awesome enough to finish the above two tasks, you -will be working on the remaining TorBirdy tickets. +will be working on the <a href="https://trac.torproject.org/projects/tor/query?status=!closed&component=Tor…"> +remaining TorBirdy tickets</a>. -Applicants should be familiar with C++ and JavaScript. As part of your -application for this project, please submit code samples for previous C++ and -JavaScript projects that you have developed or point us to projects you have -been involved with (links to a public Git/GitHub repository preferred). Prior -extension development is a big plus and will be given preference during -application ranking. +Applicants should be familiar with JavaScript (and preferably C++ as well). As +part of your application for this project, please submit code samples for +previous JavaScript projects that you have developed, or point us to projects +you have been involved with (links to a public Git/GitHub repository +preferred). Prior extension development is a big plus and will be given +preference during application ranking.

1 0

[webwml/master] List GSoC idea under the project
by atagar＠torproject.org 24 Feb '16

24 Feb '16

commit 2a4999e7a887bed84e91cd84919744eae69cf47c Author: Damian Johnson <atagar(a)torproject.org> Date: Wed Feb 24 08:31:18 2016 -0800 List GSoC idea under the project Oops, I've been striving to include task ideas under the project they're related to. --- getinvolved/en/volunteer.wml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index cd4908f..c1a36c9 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -693,6 +693,11 @@ meetings around the world.</li> Onions</a> research paper. + + Project Ideas: + <a href="#exitmap_improvements">Exitmap Improvements</a> + + <a id="project-doctor"></a> <h3>DocTor (<a href="https://gitweb.torproject.org/doctor.git">code</a>, <a

1 0

[tor-messenger-build/master] Update ChangeLog for OTR over Twitter DMs support
by sukhbir＠torproject.org 24 Feb '16

24 Feb '16

commit c1697ca2af51833ac40b859d286a77dcdb6ddc4f Author: Sukhbir Singh <sukhbir(a)torproject.org> Date: Wed Feb 24 10:56:30 2016 -0500 Update ChangeLog for OTR over Twitter DMs support --- ChangeLog | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index d50f962..990b68d 100644 --- a/ChangeLog +++ b/ChangeLog @@ -5,7 +5,7 @@ Tor Messenger 0.1.0b5 -- * Bug 18235: Disable Facebook as they no longer support XMPP * Bug 17494: Better error reporting for failed outgoing messages * Bug 17749: Show version information in the "About" window - * Bug 13312: OTR over Twitter DMs + * Bug 13312: Add support for OTR over Twitter DMs * Mac * Bug 17896: Add Edit menu to the conversation window on OS X * Windows

1 0

[orbot/master] remove meek-client and use obfs4 meek_lite mode instead
by n8fr8＠torproject.org 24 Feb '16

24 Feb '16

commit 66a5b7ad261d2e79f05f80d908d9862fc821bd1a Author: Nathan Freitas <nathan(a)freitas.net> Date: Tue Feb 23 23:20:21 2016 -0500 remove meek-client and use obfs4 meek_lite mode instead --- external/Makefile | 4 ---- 1 file changed, 4 deletions(-) diff --git a/external/Makefile b/external/Makefile index e25cd0d..92e4c0c 100644 --- a/external/Makefile +++ b/external/Makefile @@ -285,7 +285,6 @@ pluto-build-stamp: pluto/bin/android_arm/obfs4proxy pluto: pluto-build-stamp test -d bin || mkdir bin cp pluto/bin/android_arm/obfs4proxy bin - cp pluto/bin/android_arm/meek-client bin pluto-clean: # -rm -rf pluto/bin @@ -304,8 +303,6 @@ assets: tor polipo iptables pluto -zip ../assets/$(APP_ABI)/tor.mp3 bin/tor -$(STRIP) bin/xtables -zip ../assets/$(APP_ABI)/xtables.mp3 bin/xtables - -$(STRIP) bin/meek-client - -zip ../assets/$(APP_ABI)/meek-client.mp3 bin/meek-client -$(STRIP) bin/obfs4proxy -zip ../assets/$(APP_ABI)/obfs4proxy.mp3 bin/obfs4proxy -$(STRIP) ../libs/$(APP_ABI)/pdnsd @@ -316,7 +313,6 @@ assets-clean: -rm ../assets/$(APP_ABI)/polipo.mp3 -rm ../assets/$(APP_ABI)/tor.mp3 -rm ../assets/$(APP_ABI)/xtables.mp3 - -rm ../assets/$(APP_ABI)/meek-client.mp3 -rm ../assets/$(APP_ABI)/obfs4proxy.mp3 -rm ../assets/$(APP_ABI)/pdnsd.mp3

1 0

[orbot/master] update to 15.1.2
by n8fr8＠torproject.org 24 Feb '16

24 Feb '16

commit 204733a245d6c06fa73301134e2f107c0c4564b8 Author: Nathan Freitas <nathan(a)freitas.net> Date: Tue Feb 23 23:23:32 2016 -0500 update to 15.1.2 --- AndroidManifest.xml | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/AndroidManifest.xml b/AndroidManifest.xml index 4b3cd03..ccf0692 100644 --- a/AndroidManifest.xml +++ b/AndroidManifest.xml @@ -1,11 +1,10 @@ <?xml version="1.0" encoding="utf-8"?> <manifest xmlns:android="http://schemas.android.com/apk/res/android" package="org.torproject.android" - android:versionName="15.1.1" - android:versionCode="15110000" + android:versionName="15.1.2" + android:versionCode="15120000" android:installLocation="auto" > - <uses-sdk android:minSdkVersion="16" android:targetSdkVersion="23"/> <permission android:name="org.torproject.android.MANAGE_TOR" android:label="@string/permission_manage_tor_label"

1 0

[orbot/master] switch back to Android-16 as target
by n8fr8＠torproject.org 24 Feb '16

24 Feb '16

commit 3eb70b8b9a39c997099f6a560b872cf96122981f Author: Nathan Freitas <nathan(a)freitas.net> Date: Tue Feb 23 23:19:52 2016 -0500 switch back to Android-16 as target --- jni/Application.mk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/jni/Application.mk b/jni/Application.mk index 32e48c2..554a462 100644 --- a/jni/Application.mk +++ b/jni/Application.mk @@ -1,4 +1,4 @@ APP_ABI := armeabi x86 -APP_PLATFORM := android-10 +APP_PLATFORM := android-16 APP_STL := stlport_static NDK_TOOLCHAIN_VERSION := 4.8

1 0

[orbot/master] update changelog for 15.1.2
by n8fr8＠torproject.org 24 Feb '16

24 Feb '16

commit beb3bc8a4a6178bca653039f7dcb6583c1205c53 Author: Nathan Freitas <nathan(a)freitas.net> Date: Wed Feb 24 10:01:28 2016 -0500 update changelog for 15.1.2 --- CHANGELOG | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/CHANGELOG b/CHANGELOG index e1241ca..144b6c1 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,5 +1,20 @@ NOTE: Specific #s below correspond to Trac tickets logged and maintained at https://trac.torproject.org/projects/tor/ +/** 15.1.2 / 24-February-2016 / 204733a245d6c06fa73301134e2f107c0c4564b8 **/ + +5785593 move to using meek_lite mode from obfs4client and update/improve proxying code +66a5b7a remove meek-client and use obfs4 meek_lite mode instead +f9f33a1 set this to Android 16 SDK for PIE executable We'll use a different build for non-PIE < Android-16 +e9d28a4 handle NPE better for dev.gp.info #6686 in some cases the connection becomes null while you are interacting with it +9a8e4dd update to orbot ant build version +80e8c47 peg to last ant compat release +5eb628b bridges dedicated to GeorgeTorwell +c8584f6 update superuser commands library +3cc2439 update license to include badvpn +9c82aa8 fix escaping of apostro +eba95b2 update strings and descs from transifex (somehow french got left out before!) +8047ec6 update the log + /** 15.1.0-RC-7 / 27-January-2016 / 91225ab053d0ffec4a414be461ee41e6465446bd **/ * fd45fa3 enable TransProxy and DNSPort by default without root - some users run their own iptables transproxy scripts with AFWall and n

1 0