February 2017 - tor-commits - lists.torproject.org

[tor/release-0.2.8] Merge branch 'maint-0.2.8' into release-0.2.8
by nickm＠torproject.org 15 Feb '17

15 Feb '17

commit 383fdeca124d416eb4256feab4e0b8d02380c248 Merge: d309d28 1ebdae6 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Feb 15 07:50:58 2017 -0500 Merge branch 'maint-0.2.8' into release-0.2.8 changes/bug20384 | 10 ++++++++++ changes/trove-2017-001.2 | 8 ++++++++ src/or/routerparse.c | 49 +++++++++++++++++++++++++++++------------------- 3 files changed, 48 insertions(+), 19 deletions(-)

1 0

[webwml/master] Fix indenting in page
by hiro＠torproject.org 15 Feb '17

15 Feb '17

commit c80a9d811d0c82c3c72e0e9e2bb333cdca214e98 Author: hiromipaw <hiro(a)torproject.org> Date: Wed Feb 15 13:19:54 2017 +0100 Fix indenting in page --- about/en/jobs.wml | 85 +++++++++++++++++++++++++++---------------------------- 1 file changed, 42 insertions(+), 43 deletions(-) diff --git a/about/en/jobs.wml b/about/en/jobs.wml index e61435e..a1500db 100644 --- a/about/en/jobs.wml +++ b/about/en/jobs.wml @@ -10,56 +10,55 @@ <a href="<page about/jobs>">Jobs</a> </div> <div id="maincol"> -<h1>The Tor Project is always looking for more great people to join our team!</h1> + <h1>The Tor Project is always looking for more great people to join our team!</h1> -At the moment, we don't have any official open positions. Please check back -soon, though! In the meantime, you may want to glance at our -<a href="<page getinvolved/volunteer>">volunteers</a> page. -# -#Specifically, we're looking for the following people currently: -#<ul> -#<li><a href="<page about/jobs-comm-director>">Communications Director</a></li> -#<li><a href="<page about/jobs-ooni-ux-designer>">UX Designer - OONI</a></li> -#<li><a href="<page about/jobs-coredev>">Core Developer</a></li> -#<li><a href="<page about/jobs-editor>">Writer/Editor</a></li> -#<li><a href="<page about/jobs-admin-assistant>">Administrative Assistant</a></li> -#</ul> -# + At the moment, we don't have any official open positions. Please check back + soon, though! In the meantime, you may want to glance at our + <a href="<page getinvolved/volunteer>">volunteers</a> page. + # + #Specifically, we're looking for the following people currently: + #<ul> + #<li><a href="<page about/jobs-comm-director>">Communications Director</a></li> + #<li><a href="<page about/jobs-ooni-ux-designer>">UX Designer - OONI</a></li> + #<li><a href="<page about/jobs-coredev>">Core Developer</a></li> + #<li><a href="<page about/jobs-editor>">Writer/Editor</a></li> + #<li><a href="<page about/jobs-admin-assistant>">Administrative Assistant</a></li> + #</ul> + # -In the past, we looked for the following people: + In the past, we looked for the following people: -<ul> -<li>Core developer</li> -<li>Support assistants and translators</li> -<li>Browser hacker</li> -<li>Pluggable transport developer</li> -<li>Lead Automation Engineer</li> -<li>Firefox/Thunderbird Extension Developer</li> -<li>Director of Communications</li> -<li>Executive Director</li> -<li>Executive Administrator</li> -</ul> - - -About the company: - The Tor Project is a US 501(c)(3) non-profit dedicated to research, - development, and education about online anonymity and privacy. The Tor - network's 6000 volunteer relays carry 48 Gbps for several - million daily users, including ordinary citizens who want protection - from identity theft and prying corporations, corporations who want - to look at a competitor's website in private, people around the world - whose Internet connections are censored, and even governments and law - enforcement. Tor has a staff of 30 paid developers, researchers, and - advocates, plus many dozen volunteers who help out on a daily basis. Tor - is funded in part by government research and development grants, and - in part by individual and corporate donations. - + <ul> + <li>Core developer</li> + <li>Support assistants and translators</li> + <li>Browser hacker</li> + <li>Pluggable transport developer</li> + <li>Lead Automation Engineer</li> + <li>Firefox/Thunderbird Extension Developer</li> + <li>Director of Communications</li> + <li>Executive Director</li> + <li>Executive Administrator</li> + </ul> + + About the company: + The Tor Project is a US 501(c)(3) non-profit dedicated to research, + development, and education about online anonymity and privacy. The Tor + network's 6000 volunteer relays carry 48 Gbps for several + million daily users, including ordinary citizens who want protection + from identity theft and prying corporations, corporations who want + to look at a competitor's website in private, people around the world + whose Internet connections are censored, and even governments and law + enforcement. Tor has a staff of 30 paid developers, researchers, and + advocates, plus many dozen volunteers who help out on a daily basis. Tor + is funded in part by government research and development grants, and + in part by individual and corporate donations. + </div>  <div id = "sidecol"> -#include "side.wmi" -#include "info.wmi" + #include "side.wmi" + #include "info.wmi" </div>  </div>

1 0

[webwml/master] Remove comm dir position from jobs
by hiro＠torproject.org 15 Feb '17

15 Feb '17

commit 902aa14e150a44eaf2ac1e16cb5d465805967ec4 Author: hiromipaw <hiro(a)torproject.org> Date: Wed Feb 15 13:19:06 2017 +0100 Remove comm dir position from jobs --- about/en/jobs.wml | 17 ++++++++--------- 1 file changed, 8 insertions(+), 9 deletions(-) diff --git a/about/en/jobs.wml b/about/en/jobs.wml index bf7e38e..e61435e 100644 --- a/about/en/jobs.wml +++ b/about/en/jobs.wml @@ -12,20 +12,19 @@ <div id="maincol"> <h1>The Tor Project is always looking for more great people to join our team!</h1> -#At the moment, we don't have any official open positions. Please check back -#soon, though! In the meantime, you may want to glance at our -#<a href="<page getinvolved/volunteer>">volunteers</a> page. +At the moment, we don't have any official open positions. Please check back +soon, though! In the meantime, you may want to glance at our +<a href="<page getinvolved/volunteer>">volunteers</a> page. # -Specifically, we're looking for the following people currently: - -<ul> -<li><a href="<page about/jobs-comm-director>">Communications Director</a></li> +#Specifically, we're looking for the following people currently: +#<ul> +#<li><a href="<page about/jobs-comm-director>">Communications Director</a></li> #<li><a href="<page about/jobs-ooni-ux-designer>">UX Designer - OONI</a></li> #<li><a href="<page about/jobs-coredev>">Core Developer</a></li> #<li><a href="<page about/jobs-editor>">Writer/Editor</a></li> #<li><a href="<page about/jobs-admin-assistant>">Administrative Assistant</a></li> -</ul> - +#</ul> +# In the past, we looked for the following people:

1 0

[webwml/staging] Drop 'Expand Nyx' project idea
by hiro＠torproject.org 15 Feb '17

15 Feb '17

commit f460ab8d9f3208d56bb3e668446bd6f31f91f889 Author: Damian Johnson <atagar(a)torproject.org> Date: Sun Jan 29 13:01:16 2017 -0800 Drop 'Expand Nyx' project idea Though not successful we had a student for this last year and what we list here is no longer relevant. --- getinvolved/en/volunteer.wml | 52 -------------------------------------------- 1 file changed, 52 deletions(-) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index a645967..2f19662 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -452,11 +452,6 @@ meetings around the world.</li> a bit more. - - Project Ideas: - <a href="#expand_nyx">Expand Nyx</a> - - <a id="project-orbot"></a> <h3><a href="https://guardianproject.info/apps/orbot/">Orbot</a> (<a href="https://gitweb.torproject.org/orbot.git">code</a>, <a @@ -852,53 +847,6 @@ the codebase that you want to work on. </li> - <a id="expand_nyx"></a> - <li> - Expand Nyx - - Language: Python - - Likely Mentors: Damian (atagar) - - -Nyx (previously known as <a href="https://www.atagar.com/arm/">arm</a>) is an -ncurses monitor that provides Tor relay operators... - - - <ul> - <li><a href="https://www.atagar.com/arm/images/screenshot_page1_full.png">bandwidth graphs and event log</a></li> - <li><a href="https://www.atagar.com/arm/images/screenshot_page2_full.png">connections</a></li> - <li><a href="https://www.atagar.com/arm/images/screenshot_page3_full.png">user's torrc</a></li> - <li><a href="https://www.atagar.com/arm/images/screenshot_configPanel_full.png">config editor</a></li> - </ul> - - -Nyx is presently under development in preparation for its next release. If you -like python, terminals, and collaborating on an active codebase this just might -be the project for you! - - - -Proposals should involve a grab-bag of moderately small improvements you'd like -to make. You're encouraged to brainstorm ideas of their own but here's a few to -get ya started... - - - <ul> - <li>Bring back the <a href="https://www.atagar.com/arm/images/screenshot_interpretor_full.png">interpreter panel</a>. This panel was dropped when refactoring Nyx, but it would be a neat component to bring back. You can <a href="https://gitweb.torproject.org/nyx.git/tree/src/cli/interpretorPanel.py?h=re…">find old code for it in the history</a> and Stem (the library backing Nyx) has a much improved <a href="https://stem.torproject.org/tutorials/down_the_rabbit_hole.html">variant of this we can leverage</a>. This task would involve writing the curses code around Stem's interpreter functions.</li> - <li>Windows support. Like most curses applications Nyx doesn't run natively on Windows. We've had dozens of users request this and <a href="https://trac.torproject.org/projects/tor/wiki/doc/arm#Windows">it should be possible</a>. This would involve supporting PDCurses and expanding Stem to be able to query the cpu/memory usage of the tor process.</li> - <li>Unit testing! Nyx has <a href="https://gitweb.torproject.org/nyx.git/tree/test">started adding tests</a> but it's still very minimal. Achieving any substantial code coverage will require us to figure out how to unit test curses components.</li> - <li>Onionoo provides additional relay information that could enrich our connection panel such as geoip and rdns. Trick is that at present we can only query it on a per-relay basis which would leak our connections (no-go for security). However, if we could get information about all relays in bulk it would sidestep this. For some old thoughts on this see <a href="https://trac.torproject.org/projects/tor/wiki/doc/arm#CircuitDetails">here</a>.</li> - <li>Relay setup wizard. Our last release had this (screenshots: <a href="https://www.atagar.com/transfer/tmp/arm_wizard1.png">1</a>, <a href="https://www.atagar.com/transfer/tmp/arm_wizard2.png">2</a>, <a href="https://www.atagar.com/transfer/tmp/arm_wizard3.png">3</a>). This has been removed because including it directly in Nyx confused users, but we might want to resurrect it as a separate setup-tor-relay command.</li> - <li><a href="https://trac.torproject.org/projects/tor/ticket/18499">Improved dialog</a> for selecting events to log.</li> - <li>... and more! Again, don't hesitate to propose ideas of your own.</li> - </ul> - - - As part of your application for this project please get your hands wet with the codebase by contributing patches for <a href="https://gitweb.torproject.org/nyx.git">Nyx</a> and <a href="https://stem.torproject.org/faq.html#how-do-i-get-started">Stem</a>! - - </li> - <a id="descriptor_parsing_in_go"></a> <li> Stem Descriptor Parsing in Go

1 0

[webwml/staging] Deprecate old Tor Browser versions
by hiro＠torproject.org 15 Feb '17

15 Feb '17

commit 7ae390e79bdea44d5d8a7678176dc0b5f52d6b8d Author: Georg Koppen <gk(a)torproject.org> Date: Thu Jan 26 10:36:29 2017 +0000 Deprecate old Tor Browser versions --- projects/torbrowser/RecommendedTBBVersions | 10 ---------- 1 file changed, 10 deletions(-) diff --git a/projects/torbrowser/RecommendedTBBVersions b/projects/torbrowser/RecommendedTBBVersions index 3d75ad9..f4f423f 100644 --- a/projects/torbrowser/RecommendedTBBVersions +++ b/projects/torbrowser/RecommendedTBBVersions @@ -1,18 +1,8 @@ [ -"6.0.8", -"6.0.8-Linux", -"6.0.8-MacOS", -"6.0.8-Windows", "6.5", "6.5-Linux", "6.5-MacOS", "6.5-Windows", -"6.5a6", -"6.5a6-Linux", -"6.5a6-MacOS", -"6.5a6-Windows", -"6.5a6-hardened", -"6.5a6-hardened-Linux", "7.0a1", "7.0a1-Linux", "7.0a1-MacOS",

1 0

[webwml/staging] Drop 'Implement and Integrate CONIKS for Tor Messenger' project idea
by hiro＠torproject.org 15 Feb '17

15 Feb '17

commit 5b6d2c232ac9648466f7a62a00aae8222f0cf27e Author: Damian Johnson <atagar(a)torproject.org> Date: Sun Jan 29 13:06:09 2017 -0800 Drop 'Implement and Integrate CONIKS for Tor Messenger' project idea We had a student (Huy Vu) that did this last year. --- getinvolved/en/volunteer.wml | 71 -------------------------------------------- 1 file changed, 71 deletions(-) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index 84fadf9..035dcbe 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -896,77 +896,6 @@ the codebase that you want to work on. </li> - <a id="coniks_in_messenger"></a> - <li> - Implement and Integrate CONIKS for Tor Messenger - - Language: C, JavaScript - - Likely Mentors: Marcela (masomel), Arlo (arlolra) - - -CONIKS is an end-user key management and verification system for end-to-end -secure communication services, which improves upon existing key management -systems by providing both strong security and better usability using a model -called key transparency. CONIKS does this by requiring providers to manage -tamper-evident, publicly-auditable key directories, which contain mappings from -usernames to public keys, on behalf of their users. This design makes it easier -for users (both "default" users and power users) to establish trust since they -don't have to worry about or even see keys, but users also don't have to -trust the provider to be well-behaved because the CONIKS client can run as -part of the secure messaging app and automatically check that the service -provider doesn’t map spurious keys to their users' usernames, and it can -verify that observed name-to-key mappings are consistent with what other -clients in the system are seeing. Unlike existing key transparency solutions, -CONIKS also provides strong privacy guarantees by employing cryptographic -primitives for robust data obfuscation. - - - -The CONIKS system design, protocols, and proof-of-concept are described in -great detail in the <a -href="https://www.usenix.org/system/files/conference/usenixsecurity15/sec15-paper…">CONIKS -research paper</a>, and basic reference implementations of a CONIKS key server -and a CONIKS client are avialable on <a -href="https://github.com/coniks-sys/coniks-ref-implementation">Github</a>. - - - -This project has two main components: (1) designing and implementing a CONIKS -key server tailored to Tor Messenger users, and (2) building a CONIKS client -which integrates with the Tor Messenger client. One challenge the applicant -will face is ensuring that the key server design is efficient and scalable for -large volumes of users, concurrent traffic and guarantees this scalability even -as Tor Messenger's user base grows. On the client side, the main challenges -will be to focus on space efficiency as well as minimizing computational -overhead when implementing the CONIKS consistency checks, and determining how -to best communicate CONIKS consistency check results to users in the UI. Since -Tor Messenger does not hand out online identities per se, as most online -communication services do (like, say, Twitter, in which each user has a unique -handle), the CONIKS key server for Tor Messenger will have to map usernames -from third-party communication services to the encryption keys used in Tor -Messenger. One additional important challenge that the applicant will have to -help address is ensuring that each such third-party username remains unique in -the Tor Messenger space and that such external, third-party identities are -indeed controlled by the expected user of that third-party communication -service. - - - -Some design and implementation questions have been discussed in <a -href="https://trac.torproject.org/projects/tor/ticket/17961">Ticket #17961</a>. - - - -The applicant should have some familiarity with well-known crypto primitives -and algorithms, as well as have a basic understanding of the key transparency -model. Client side integration will require some basic use of JavaScript. -Consider submitting a patch for <a -href="https://github.com/arlolra/ctypes-otr/issues">one of the open key -verification issues</a> as part of the application process. - - </li> - <a id="panopticlick"></a> <li> Panopticlick

1 0

[webwml/staging] Drop 'Stem Descriptor Parsing in Go' project idea
by hiro＠torproject.org 15 Feb '17

15 Feb '17

commit 62d28935743d3195e4e0f8f49a62e22bec1b3f9b Author: Damian Johnson <atagar(a)torproject.org> Date: Sun Jan 29 13:04:44 2017 -0800 Drop 'Stem Descriptor Parsing in Go' project idea We had an applicant look into this last year. I don't recall all the details but I recall us backing off on it as a bad idea. --- getinvolved/en/volunteer.wml | 42 ------------------------------------------ 1 file changed, 42 deletions(-) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index 2f19662..84fadf9 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -567,11 +567,6 @@ meetings around the world.</li> Tor. - - Project Ideas: - <a href="#descriptor_parsing_in_go">Stem Descriptor Parsing in Go</a> - - <a id="project-txtorcon"></a> <h3><a href="https://txtorcon.readthedocs.io/en/latest/">Txtorcon</a> (<a href="https://github.com/meejah/txtorcon">code</a>, <a @@ -847,43 +842,6 @@ the codebase that you want to work on. </li> - <a id="descriptor_parsing_in_go"></a> - <li> - Stem Descriptor Parsing in Go - - Language: Go, Python - - Likely Mentors: Damian (atagar), Philipp (phw) - - - Tor consists of two parts: the application and a distributed network of a - few thousand volunteer relays. Information about these relays is public, - and made up of documents called <a href="https://stem.torproject.org/tutorials/mirror_mirror_on_the_wall.html#what-i…">descriptors</a>. We have - <a href="https://stem.torproject.org/tutorials/mirror_mirror_on_the_wall.html#are-th…">three libraries capable of reading these documents</a>... - - - <ul> - <li><a href="https://stem.torproject.org/">Stem</a> (Python)</li> - <li><a href="https://gitweb.torproject.org/metrics-lib.git/">Metrics-lib</a> (Java)</li> - <li><a href="https://gitweb.torproject.org/user/phw/zoossh.git/">Zoossh</a> (Go)</li> - </ul> - - - Stem is the most feature rich but slowest, and conversely Zoossh is fastest - but limited. But what if Stem used CFFI bindings to do the heavy lifting in - Go? Could we unify these libraries, getting the feature set of Stem with - the performance of Zoossh? - - - - Applicants should be familiar with both Python and Go. As part of your - application for this project please write a demo CFFI binding for Stem as a - proof of concept. Bonus points if you <a - href="https://stem.torproject.org/faq.html#how-do-i-get-started">get your - hands wet by contributing patches</a>! - - </li> - <a id="txtorcon_use_txaio"></a> <li> Convert txtorcon to use txaio

1 0

[webwml/staging] Merge branch 'master' of ssh://git-rw.torproject.org/project/web/webwml
by hiro＠torproject.org 15 Feb '17

15 Feb '17

commit 45863aab95581b938ef7d55fa1e8cc41892a33a6 Merge: b718b34 7ae390e Author: hiromipaw <hiro(a)torproject.org> Date: Thu Jan 26 15:32:42 2017 +0100 Merge branch 'master' of ssh://git-rw.torproject.org/project/web/webwml projects/torbrowser/RecommendedTBBVersions | 10 ---------- 1 file changed, 10 deletions(-)

1 0

[webwml/staging] Drop 'Ahmia - Hidden Service Search' project idea
by hiro＠torproject.org 15 Feb '17

15 Feb '17

commit 3269a17517db2c99828908e49a18fdf17710de71 Author: Damian Johnson <atagar(a)torproject.org> Date: Sun Jan 29 13:08:21 2017 -0800 Drop 'Ahmia - Hidden Service Search' project idea We had a student that did this last year (Ismael Riahi). --- getinvolved/en/volunteer.wml | 66 -------------------------------------------- 1 file changed, 66 deletions(-) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index 035dcbe..6f1f3ea 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -1123,72 +1123,6 @@ implementation. </ul> </li> - <a id="ahmiaSearch"></a> - <li> - Ahmia - Hidden Service Search - - Language: Python, Django - - Likely Mentors: Juha Nurmi (numes), George (asn) - - - Ahmia is open-source search engine software for Tor hidden service deep - dark web sites. You can test the running search engine at ahmia.fi. For - more information see our <a - href="https://blog.torproject.org/category/tags/ahmiafi">blog post about - Ahmia's GSoC2014 development</a>. - - - - Ahmia is a working search engine that indexes, searches, and catalogs - content published on Tor Hidden Services. Furthermore, it is an environment - to share meaningful insights, statistics, insights, and news about the Tor - network itself. In this context, there is a lot of work to do. - - - - The Ahmia web service is written using the Django web framework. As a - result, the server-side language is Python. On the client-side, most of the - pages are plain HTML. There are some pages that require JavaScript, but the - search itself works without client-side JavaScript. - - - - There are several possible directions for this project, including... - - - <ol> - <li>Improving the search results (very important) - <ul> - <li>Tweaking search algorithms</li> - <li>Adjust Elasticsearch</li> - <li>Enrich the data that is used to rank the search results</li> - </ul> - </li> - <li>Improving UX and UI (very important) - <ul> - <li>Showing relevant knowledge</li> - <li>Design the navigation and information architecture</li> - <li>HTML5, CSS and Django development</li> - </ul> - </li> - <li>Review code and infrastructure - <ul> - <li>Review code and fix bugs</li> - <li>Writing Django test cases</li> - <li>Linux configurations, automatizations</li> - </ul> - </li> - <li>Gather statistics over time and publish them - <ul> - <li>Gather different kind of stats about Hidden Services</li> - <li>Publish these stats using HTTP REST API</li> - <li>Using this API show meaningful tables, charts and visualizations</li> - </ul> - </li> - </ol> - </li> - <a id="ipHijacking"></a> <li> IP hijacking detection for the Tor Network

1 0

[webwml/staging] Drop 'Tails server' project idea
by hiro＠torproject.org 15 Feb '17

15 Feb '17

commit e18e846f7838bcf3988aa5179ee9f93a679eaea3 Author: Damian Johnson <atagar(a)torproject.org> Date: Sun Jan 29 13:09:34 2017 -0800 Drop 'Tails server' project idea Last year we had a student that did this (segfault). --- getinvolved/en/volunteer.wml | 81 -------------------------------------------- 1 file changed, 81 deletions(-) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index 6f1f3ea..5671320 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -1163,87 +1163,6 @@ implementation. </li> - <a id="tailsServer"></a> - <li> - Tails server: Self-hosted services behind Tails-powered Tor hidden services - - Likely Mentors: anonym, George (asn) - Let's talk about group collaboration, communication and data sharing - infrastructure, such as chat servers, wikis, or file repositories. - Hosting such data and infrastructure in the cloud generally - implies to trust the service providers not to disclose content, usage or - users location information to third-parties. Hence, there are many threat - models in which cloud hosting is not suitable. - Tor partly answers the users location part; this is great, but - content is left unprotected. - There are two main ways to protect such content: either to encrypt it - client-side (security by design), or to avoid putting it into - untrusted hands in the first place. - Cloud solutions that offer security by design are rare and generally - not mature yet. The Tails server project is about exploring the - other side of the alternative: avoiding to put private data into - untrusted hands in the first place. - This is made possible thanks to Tor hidden services, that allow users - to offer location-hidden services, and make self-hosting possible in - many threat models. Self-hosting has its own lot of problems, however, - particularly in contexts where the physical security of the hosting - place is not assured. Combining Tor hidden services with Tails' - amnesia property and limited support for persistent encrypted data - allows to protect content, to a great degree, even in such contexts. - In short, setting up a new Tails server would be done by: - - <ol style="list-style-type: decimal"> - <li>Alice plugs a USB stick into a running desktop Tails system.</li> - <li>Alice uses a GUI to easily configure the needed services.</li> - <li>Alice unplugs the USB stick, that now contains encrypted services - configuration and data storage space.</li> - <li>Alice plugs that USB stick (and possibly a Tails Live CD) into the - old laptop that was dedicated to run Tails server.</li> - <li>Once booted, Alice enters the encryption passphrase either - directly using the keyboard or through a web interface listening on the - local network.</li> - <li>Then, Bob can use the configured services once he gets a hold on - the hidden service address. (The petname system for Tor hidden - services project would be very complementary to this one, by the - way.)</li> - </ol> - - Tails server should content itself with hardware that is a bit old - (such as a PIII-450 laptop with 256MB of RAM) and/or half broken (e.g. - non-functional hard-disk, screen or keyboard). - The challenges behind this project are: - - <ul> - <li>Design and write the services configuration GUI [keywords: edit - configuration files, upgrade between major Debian versions, - debconf].</li> - <li>How to create the hidden service key? [keywords: Vidalia, control - protocol].</li> - <li>Adapt the Tails boot process to allow switching to "server - mode" when appropriate.</li> - <li>Add support, to the Tails persistence setup process, for asking an - encryption passphrase without X, and possibly with a broken keyboard - and/or screen [keywords: local network, SSL/TLS?, certificate?].</li> - </ul> - - This project can easily grow quite large, so the first task would - probably be to clarify what it would need to get an initial (minimal - but working) implementation ready to be shipped to users. - This project does not require to be an expert in one specific field, - but it requires to be experienced and at ease with a large scope of - software development tools, processes, and operating system knowledge. - Undertaking this project requires in-depth knowledge of Debian-like - systems (self-test: do the "dpkg conffile" and "debconf preseeding" - words sound new to your ear?); the Debian Live persistence system - being written in shell, being at ease with robust shell scripting is - a must; to end with, at least two pieces of software need to be - written from scratch (a GUI and a webapp): the preferred languages for - these tasks would be Python and Perl. Using Behaviour Driven - Development methods to convey expectations and acceptance criteria - would be most welcome. - For more information see https://tails.boum.org/todo/server_edition/ - </li> - <a id="feedbackExtension"></a> <li> Feedback Extension for Tor Browser

1 0