January 2017 - tor-commits - lists.torproject.org

[tor-browser-build/master] Bump NoScript version to 2.9.5.3
by boklm＠torproject.org 30 Jan '17

30 Jan '17

commit bb035e0a65cf13f9bb6b4048f1086c8effcfd8eb Author: Nicolas Vigier <boklm(a)torproject.org> Date: Mon Jan 30 10:52:11 2017 +0100 Bump NoScript version to 2.9.5.3 --- projects/tor-browser/config | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/projects/tor-browser/config b/projects/tor-browser/config index d220913..9ec262b 100644 --- a/projects/tor-browser/config +++ b/projects/tor-browser/config @@ -43,9 +43,9 @@ input_files: - project: fonts name: fonts - filename: Bundle-Data - - URL: https://addons.cdn.mozilla.net/user-media/addons/722/noscript_security_suit… + - URL: https://addons.cdn.mozilla.net/user-media/addons/722/noscript_security_suit… name: noscript - sha256sum: ed71ca922790e81bc5e8c6a87bb81f394a38676ac37d1fba518a6a428d128dd5 + sha256sum: ce9779a3a5a2574b958f8e4d079a99d43a8f84193bef52c587c704ed81c2fbbd - filename: RelativeLink enable: '[% c("var/linux") %]' - project: libdmg-hfsplus

1 0

[tor-browser-build/master] Bug 20989: Browser sandbox profile is too restrictive on OSX 10.12.2
by boklm＠torproject.org 30 Jan '17

30 Jan '17

commit b53e849e92ca9defab6eede768ad85aad6e8e702 Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Tue Jan 17 10:27:25 2017 -0500 Bug 20989: Browser sandbox profile is too restrictive on OSX 10.12.2 Allow full read access to all files under /usr/lib. Allow full read access to /Library/Preferences/com.apple.ViewBridge.plist. Allow writes to TorBrowser-Data/Browser/profiles.ini (otherwise, a new browser profile is created each time the browser is opened). --- projects/tor-browser/Bundle-Data/mac-sandbox/tb.sb | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/projects/tor-browser/Bundle-Data/mac-sandbox/tb.sb b/projects/tor-browser/Bundle-Data/mac-sandbox/tb.sb index eda7a1f..385e914 100644 --- a/projects/tor-browser/Bundle-Data/mac-sandbox/tb.sb +++ b/projects/tor-browser/Bundle-Data/mac-sandbox/tb.sb @@ -28,6 +28,7 @@ (allow file-read* (path "/Library/Preferences/com.apple.HIToolbox.plist") + (path "/Library/Preferences/com.apple.ViewBridge.plist") (path "/Library/Preferences/.GlobalPreferences.plist") (path "/dev/random") (path "/dev/urandom") @@ -41,6 +42,7 @@ (subpath "/Library/Fonts") (subpath "/System") (subpath "/private/var/folders") + (subpath "/usr/lib") (subpath "/usr/share") (home-subpath "/Downloads") (home-subpath "/Library/Input Methods") @@ -66,7 +68,6 @@ (path "/private/var/db/.AppleSetupDone") (path "/tmp") (path "/var") - (subpath "/usr/lib") (torbrowser-data-dir-path "/Tor/control.socket") (torbrowser-data-dir-path "/Tor/socks.socket") (path-regex "/private/tmp/Tor[-0-9]*/control.socket") @@ -86,11 +87,6 @@ (path "/Library/Preferences/.GlobalPreferences.plist") ) -; Disallow writes to the profiles ini file. -(deny file-write* - (torbrowser-data-dir-subpath "/Browser/profiles.ini") -) - (allow iokit-open) (allow ipc-posix-shm

1 0

[translation/tor-browser-manual] Update translations for tor-browser-manual
by translation＠torproject.org 30 Jan '17

30 Jan '17

commit 1049de7a44d2fef4017b8a984c35cd2e5429f286 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Jan 30 09:49:59 2017 +0000 Update translations for tor-browser-manual --- nl/nl.po | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/nl/nl.po b/nl/nl.po index 063603a..df9adce 100644 --- a/nl/nl.po +++ b/nl/nl.po @@ -5,13 +5,13 @@ # runasand <inactive+runasand(a)transifex.com>, 2016 # Stijn <stijn.vansieleghem(a)gmail.com>, 2016 # André Koot <meneer(a)tken.net>, 2016 -# Wim Draelants <wikkesjr(a)gmail.com>, 2017 +# Wim <wikkesjr(a)gmail.com>, 2017 msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "POT-Creation-Date: 2016-12-06 16:36-0600\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" -"Last-Translator: Wim Draelants <wikkesjr(a)gmail.com>, 2017\n" +"Last-Translator: Wim <wikkesjr(a)gmail.com>, 2017\n" "Language-Team: Dutch (https://www.transifex.com/otf/teams/1519/nl/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n"

1 0

[tor-browser-build/master] binutils: build with hardening flags on Linux
by boklm＠torproject.org 30 Jan '17

30 Jan '17

commit 406904e68c064f29785d06f79d083170b85dee23 Author: Nicolas Vigier <boklm(a)torproject.org> Date: Mon Jan 30 10:37:51 2017 +0100 binutils: build with hardening flags on Linux --- projects/binutils/build | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/projects/binutils/build b/projects/binutils/build index 11e25d6..3ff4bdb 100644 --- a/projects/binutils/build +++ b/projects/binutils/build @@ -1,6 +1,21 @@ #!/bin/sh set -e +rootdir=$(pwd) distdir=/var/tmp/dist/binutils +[% IF c("var/linux") %] + # Config options for hardening-wrapper + export DEB_BUILD_HARDENING=1 + export DEB_BUILD_HARDENING_STACKPROTECTOR=1 + export DEB_BUILD_HARDENING_FORTIFY=1 + export DEB_BUILD_HARDENING_FORMAT=1 + export DEB_BUILD_HARDENING_PIE=1 + + # The libstdc++ shipped by default is non-PIC which breaks the binutils build + # if we build with DEB_BUILD_HARDENING_PIE=1. We need to install a PIC one AND + # make sure it gets used before the non-PIC one would. + ln -s /usr/lib/gcc/x86_64-linux-gnu/4.7/libstdc++_pic.a libstdc++.a + export LDFLAGS="-L$rootdir -lstdc++" +[% END %] tar xf [% project %]-[% c("version") %].tar.bz2 cd [% project %]-[% c("version") %] [% IF c('var/windows') -%]

1 0

[webwml/master] Drop txtorcon project ideas
by atagar＠torproject.org 30 Jan '17

30 Jan '17

commit 22b42db3d4eb6e5d3c7ea5bbaf8a279daec8c691 Author: Damian Johnson <atagar(a)torproject.org> Date: Sun Jan 29 23:21:50 2017 -0800 Drop txtorcon project ideas Meejah reports that the ideas are still relevant but that he doesn't have time to mentor this summer. --- getinvolved/en/volunteer.wml | 60 -------------------------------------------- 1 file changed, 60 deletions(-) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index 567cd0c..5f99a8f 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -578,12 +578,6 @@ meetings around the world.</li> Used by OONI and APAF. - - Project Ideas: - <a href="#txtorcon_use_txaio">Convert txtorcon to use txaio</a> - <a href="#txtorcon_use_pytest">Convert txtorcon to py.test</a> - - <a id="project-metrics"></a> <h3><a href="https://metrics.torproject.org/">Metrics</a> (<a href="https://gitweb.torproject.org/metrics-web.git">web</a>)</h3> @@ -842,60 +836,6 @@ the codebase that you want to work on. </li> - <a id="txtorcon_use_txaio"></a> - <li> - Convert txtorcon to use txaio - - Language: Python, asyncio, Twisted - - Likely Mentors: meejah - - - txtorcon is currently supports only Twisted users. Re-working txtorcon - to use the txaio library would allow users to choose between Twisted and - asyncio for the client code. - - - - This would involve fairly extensive refactoring to txtorcon, as it - currently makes heavy use of @inlineCallbacks which doesn't work with - txaio. A prospective student should be very familiar with event-based - programming in general, and be familiar with one of Twisted or asyncio. - See also: https://github.com/meejah/txtorcon/issues/135 - - </li> - - <a id="txtorcon_use_pytest"></a> - <li> - Convert txtorcon to py.test - - Language: Python, Twisted - - Likely Mentors: meejah - - - Currently txtorcon uses the built-in "unittest" module, as well as - Twisted's Deferred-respecting extensions on top. However, meejah has - found py.test's "fixture" approach to be much more powerful in other - situations. - - - - This project would be to port at least part of txtorcon's test-suite to - use py.test style tests and fixtures and evaluate: are the tests easier - to read? are there fewer lines of code? If so, the rest of the suite - should be ported and txtorcon switched over to use py.test exclusively. - - - - As some of txtorcon's tests aren't very well-written, this would take a - prospective student who is very strong in unit-testing knowledge. As - txtorcon is event-based, familiarity with that style of programming - (preferrably with Twisted) is ideal. - See also: https://github.com/meejah/txtorcon/issues/136 - - </li> - <a id="stegotorus"></a> <li> Make Stegotorus deployment ready

1 0

[webwml/master] Drop Will as a prospective mentor
by atagar＠torproject.org 29 Jan '17

29 Jan '17

commit 19609a7a1133372099d915032ab4e35b5795cce1 Author: Damian Johnson <atagar(a)torproject.org> Date: Sun Jan 29 13:46:44 2017 -0800 Drop Will as a prospective mentor Will's no longer around so dropping him from 'Feedback Extension for Tor Browser'. --- getinvolved/en/volunteer.wml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index 00f1d73..567cd0c 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -1113,7 +1113,7 @@ the codebase that you want to work on. <li> Feedback Extension for Tor Browser - Likely Mentors: Nima (mrphs), Will (willscott), Sukhbir (sukhe) + Likely Mentors: Nima (mrphs), Sukhbir (sukhe) Design and implement an extension for Tor Browser that can be used to gather

1 0

[webwml/master] Drop 'Expand Nyx' project idea
by atagar＠torproject.org 29 Jan '17

29 Jan '17

commit f460ab8d9f3208d56bb3e668446bd6f31f91f889 Author: Damian Johnson <atagar(a)torproject.org> Date: Sun Jan 29 13:01:16 2017 -0800 Drop 'Expand Nyx' project idea Though not successful we had a student for this last year and what we list here is no longer relevant. --- getinvolved/en/volunteer.wml | 52 -------------------------------------------- 1 file changed, 52 deletions(-) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index a645967..2f19662 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -452,11 +452,6 @@ meetings around the world.</li> a bit more. - - Project Ideas: - <a href="#expand_nyx">Expand Nyx</a> - - <a id="project-orbot"></a> <h3><a href="https://guardianproject.info/apps/orbot/">Orbot</a> (<a href="https://gitweb.torproject.org/orbot.git">code</a>, <a @@ -852,53 +847,6 @@ the codebase that you want to work on. </li> - <a id="expand_nyx"></a> - <li> - Expand Nyx - - Language: Python - - Likely Mentors: Damian (atagar) - - -Nyx (previously known as <a href="https://www.atagar.com/arm/">arm</a>) is an -ncurses monitor that provides Tor relay operators... - - - <ul> - <li><a href="https://www.atagar.com/arm/images/screenshot_page1_full.png">bandwidth graphs and event log</a></li> - <li><a href="https://www.atagar.com/arm/images/screenshot_page2_full.png">connections</a></li> - <li><a href="https://www.atagar.com/arm/images/screenshot_page3_full.png">user's torrc</a></li> - <li><a href="https://www.atagar.com/arm/images/screenshot_configPanel_full.png">config editor</a></li> - </ul> - - -Nyx is presently under development in preparation for its next release. If you -like python, terminals, and collaborating on an active codebase this just might -be the project for you! - - - -Proposals should involve a grab-bag of moderately small improvements you'd like -to make. You're encouraged to brainstorm ideas of their own but here's a few to -get ya started... - - - <ul> - <li>Bring back the <a href="https://www.atagar.com/arm/images/screenshot_interpretor_full.png">interpreter panel</a>. This panel was dropped when refactoring Nyx, but it would be a neat component to bring back. You can <a href="https://gitweb.torproject.org/nyx.git/tree/src/cli/interpretorPanel.py?h=re…">find old code for it in the history</a> and Stem (the library backing Nyx) has a much improved <a href="https://stem.torproject.org/tutorials/down_the_rabbit_hole.html">variant of this we can leverage</a>. This task would involve writing the curses code around Stem's interpreter functions.</li> - <li>Windows support. Like most curses applications Nyx doesn't run natively on Windows. We've had dozens of users request this and <a href="https://trac.torproject.org/projects/tor/wiki/doc/arm#Windows">it should be possible</a>. This would involve supporting PDCurses and expanding Stem to be able to query the cpu/memory usage of the tor process.</li> - <li>Unit testing! Nyx has <a href="https://gitweb.torproject.org/nyx.git/tree/test">started adding tests</a> but it's still very minimal. Achieving any substantial code coverage will require us to figure out how to unit test curses components.</li> - <li>Onionoo provides additional relay information that could enrich our connection panel such as geoip and rdns. Trick is that at present we can only query it on a per-relay basis which would leak our connections (no-go for security). However, if we could get information about all relays in bulk it would sidestep this. For some old thoughts on this see <a href="https://trac.torproject.org/projects/tor/wiki/doc/arm#CircuitDetails">here</a>.</li> - <li>Relay setup wizard. Our last release had this (screenshots: <a href="https://www.atagar.com/transfer/tmp/arm_wizard1.png">1</a>, <a href="https://www.atagar.com/transfer/tmp/arm_wizard2.png">2</a>, <a href="https://www.atagar.com/transfer/tmp/arm_wizard3.png">3</a>). This has been removed because including it directly in Nyx confused users, but we might want to resurrect it as a separate setup-tor-relay command.</li> - <li><a href="https://trac.torproject.org/projects/tor/ticket/18499">Improved dialog</a> for selecting events to log.</li> - <li>... and more! Again, don't hesitate to propose ideas of your own.</li> - </ul> - - - As part of your application for this project please get your hands wet with the codebase by contributing patches for <a href="https://gitweb.torproject.org/nyx.git">Nyx</a> and <a href="https://stem.torproject.org/faq.html#how-do-i-get-started">Stem</a>! - - </li> - <a id="descriptor_parsing_in_go"></a> <li> Stem Descriptor Parsing in Go

1 0

[webwml/master] Drop 'Stem Descriptor Parsing in Go' project idea
by atagar＠torproject.org 29 Jan '17

29 Jan '17

commit 62d28935743d3195e4e0f8f49a62e22bec1b3f9b Author: Damian Johnson <atagar(a)torproject.org> Date: Sun Jan 29 13:04:44 2017 -0800 Drop 'Stem Descriptor Parsing in Go' project idea We had an applicant look into this last year. I don't recall all the details but I recall us backing off on it as a bad idea. --- getinvolved/en/volunteer.wml | 42 ------------------------------------------ 1 file changed, 42 deletions(-) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index 2f19662..84fadf9 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -567,11 +567,6 @@ meetings around the world.</li> Tor. - - Project Ideas: - <a href="#descriptor_parsing_in_go">Stem Descriptor Parsing in Go</a> - - <a id="project-txtorcon"></a> <h3><a href="https://txtorcon.readthedocs.io/en/latest/">Txtorcon</a> (<a href="https://github.com/meejah/txtorcon">code</a>, <a @@ -847,43 +842,6 @@ the codebase that you want to work on. </li> - <a id="descriptor_parsing_in_go"></a> - <li> - Stem Descriptor Parsing in Go - - Language: Go, Python - - Likely Mentors: Damian (atagar), Philipp (phw) - - - Tor consists of two parts: the application and a distributed network of a - few thousand volunteer relays. Information about these relays is public, - and made up of documents called <a href="https://stem.torproject.org/tutorials/mirror_mirror_on_the_wall.html#what-i…">descriptors</a>. We have - <a href="https://stem.torproject.org/tutorials/mirror_mirror_on_the_wall.html#are-th…">three libraries capable of reading these documents</a>... - - - <ul> - <li><a href="https://stem.torproject.org/">Stem</a> (Python)</li> - <li><a href="https://gitweb.torproject.org/metrics-lib.git/">Metrics-lib</a> (Java)</li> - <li><a href="https://gitweb.torproject.org/user/phw/zoossh.git/">Zoossh</a> (Go)</li> - </ul> - - - Stem is the most feature rich but slowest, and conversely Zoossh is fastest - but limited. But what if Stem used CFFI bindings to do the heavy lifting in - Go? Could we unify these libraries, getting the feature set of Stem with - the performance of Zoossh? - - - - Applicants should be familiar with both Python and Go. As part of your - application for this project please write a demo CFFI binding for Stem as a - proof of concept. Bonus points if you <a - href="https://stem.torproject.org/faq.html#how-do-i-get-started">get your - hands wet by contributing patches</a>! - - </li> - <a id="txtorcon_use_txaio"></a> <li> Convert txtorcon to use txaio

1 0

[webwml/master] Drop 'Tails server' project idea
by atagar＠torproject.org 29 Jan '17

29 Jan '17

commit e18e846f7838bcf3988aa5179ee9f93a679eaea3 Author: Damian Johnson <atagar(a)torproject.org> Date: Sun Jan 29 13:09:34 2017 -0800 Drop 'Tails server' project idea Last year we had a student that did this (segfault). --- getinvolved/en/volunteer.wml | 81 -------------------------------------------- 1 file changed, 81 deletions(-) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index 6f1f3ea..5671320 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -1163,87 +1163,6 @@ implementation. </li> - <a id="tailsServer"></a> - <li> - Tails server: Self-hosted services behind Tails-powered Tor hidden services - - Likely Mentors: anonym, George (asn) - Let's talk about group collaboration, communication and data sharing - infrastructure, such as chat servers, wikis, or file repositories. - Hosting such data and infrastructure in the cloud generally - implies to trust the service providers not to disclose content, usage or - users location information to third-parties. Hence, there are many threat - models in which cloud hosting is not suitable. - Tor partly answers the users location part; this is great, but - content is left unprotected. - There are two main ways to protect such content: either to encrypt it - client-side (security by design), or to avoid putting it into - untrusted hands in the first place. - Cloud solutions that offer security by design are rare and generally - not mature yet. The Tails server project is about exploring the - other side of the alternative: avoiding to put private data into - untrusted hands in the first place. - This is made possible thanks to Tor hidden services, that allow users - to offer location-hidden services, and make self-hosting possible in - many threat models. Self-hosting has its own lot of problems, however, - particularly in contexts where the physical security of the hosting - place is not assured. Combining Tor hidden services with Tails' - amnesia property and limited support for persistent encrypted data - allows to protect content, to a great degree, even in such contexts. - In short, setting up a new Tails server would be done by: - - <ol style="list-style-type: decimal"> - <li>Alice plugs a USB stick into a running desktop Tails system.</li> - <li>Alice uses a GUI to easily configure the needed services.</li> - <li>Alice unplugs the USB stick, that now contains encrypted services - configuration and data storage space.</li> - <li>Alice plugs that USB stick (and possibly a Tails Live CD) into the - old laptop that was dedicated to run Tails server.</li> - <li>Once booted, Alice enters the encryption passphrase either - directly using the keyboard or through a web interface listening on the - local network.</li> - <li>Then, Bob can use the configured services once he gets a hold on - the hidden service address. (The petname system for Tor hidden - services project would be very complementary to this one, by the - way.)</li> - </ol> - - Tails server should content itself with hardware that is a bit old - (such as a PIII-450 laptop with 256MB of RAM) and/or half broken (e.g. - non-functional hard-disk, screen or keyboard). - The challenges behind this project are: - - <ul> - <li>Design and write the services configuration GUI [keywords: edit - configuration files, upgrade between major Debian versions, - debconf].</li> - <li>How to create the hidden service key? [keywords: Vidalia, control - protocol].</li> - <li>Adapt the Tails boot process to allow switching to "server - mode" when appropriate.</li> - <li>Add support, to the Tails persistence setup process, for asking an - encryption passphrase without X, and possibly with a broken keyboard - and/or screen [keywords: local network, SSL/TLS?, certificate?].</li> - </ul> - - This project can easily grow quite large, so the first task would - probably be to clarify what it would need to get an initial (minimal - but working) implementation ready to be shipped to users. - This project does not require to be an expert in one specific field, - but it requires to be experienced and at ease with a large scope of - software development tools, processes, and operating system knowledge. - Undertaking this project requires in-depth knowledge of Debian-like - systems (self-test: do the "dpkg conffile" and "debconf preseeding" - words sound new to your ear?); the Debian Live persistence system - being written in shell, being at ease with robust shell scripting is - a must; to end with, at least two pieces of software need to be - written from scratch (a GUI and a webapp): the preferred languages for - these tasks would be Python and Perl. Using Behaviour Driven - Development methods to convey expectations and acceptance criteria - would be most welcome. - For more information see https://tails.boum.org/todo/server_edition/ - </li> - <a id="feedbackExtension"></a> <li> Feedback Extension for Tor Browser

1 0

[webwml/master] Drop projects done in GSoC 2016
by atagar＠torproject.org 29 Jan '17

29 Jan '17

commit 950c4cedc7d840573f07f92c56c84d352115ed67 Merge: 45863aa 6a4c652 Author: Damian Johnson <atagar(a)torproject.org> Date: Sun Jan 29 13:21:22 2017 -0800 Drop projects done in GSoC 2016 getinvolved/en/volunteer.wml | 366 ------------------------------------------- 1 file changed, 366 deletions(-)

1 0