June 2017 - tor-commits - lists.torproject.org

[webwml/staging] Add browser developer job ad
by hiro＠torproject.org 16 Jun '17

16 Jun '17

commit ebc946937ac39e2b0233a64bd0e67468a956e5ee Author: hiromipaw <hiro(a)torproject.org> Date: Fri Jun 16 13:17:17 2017 +0200 Add browser developer job ad --- about/en/jobs-browserdeveloper.wml | 129 +++++++++++++++++++++++++++++++++++++ about/en/jobs.wml | 8 +-- 2 files changed, 133 insertions(+), 4 deletions(-) diff --git a/about/en/jobs-browserdeveloper.wml b/about/en/jobs-browserdeveloper.wml new file mode 100644 index 0000000..f7ad21f --- /dev/null +++ b/about/en/jobs-browserdeveloper.wml @@ -0,0 +1,129 @@ +## translation metadata +# Revision: $Revision: 25666 $ +# Translation-Priority: 3-low + +#include "head.wmi" TITLE="Tor Project: Jobs (browser developer)" CHARSET="UTF-8" +<div id="content" class="clearfix"> + <div id="breadcrumbs"> + <a href="<page index>">Home » </a> + <a href="<page about/overview>">About » </a> + <a href="<page about/jobs>">Jobs</a> + </div> + <div id="maincol"> +<h1>The Tor Project is looking for a Browser Developer!</h1> +<h2>(Posted 16 Jun 2017)</h2> + +<p> +June 15, 2017 +</p> +<p> +The Tor Project is looking for Browser Developer (C++ and Javascript)! +</p> +<p> +As a browser developer, your job would be to work closely with other members of the Tor Browser development team on C++ patches to our Firefox-based browser, writing new APIs, altering functionality for privacy and security, and making improvements to our collection of Firefox add-ons (JavaScript code). Being a Tor Browser developer includes triaging, diagnosing, and fixing bugs; looking for and resolving web privacy issues; responding on short notice to urgent security issues; and working collaboratively with coworkers and volunteers to implement new features and web behavior changes. We also need help making our code more maintainable, testable, and mergeable by upstream. The person in this position will also review other people's code, designs, and academic research papers to make suggestions for improvement. +</p> +<p> +This is a full-time position. +</p> + +<h2>Required Qualifications:</h2> +<ul> + <li> + Experience in C++ (and ideally, JavaScript). Five years of C++ experience is probably necessary for the level of expertise we want, though some of these years can be replaced with other Object Oriented Programming and/or C experience. If you meet this level of experience with C++/OOP, JavaScript can be learned on the job. + </li> + <li> + Possess a solid understanding of issues surrounding secure C++ programming and reference counted memory (at least to the level of avoiding issues). + </li> + <li> + Be comfortable diving into new, unfamiliar codebases, looking for ways to alter and augment their functionality in specific, goal-oriented ways. + </li> + <li> + Be familiar with web technologies and how the web works, especially the same-origin model and web tracking. + </li> + <li> + Willingness and ability to justify and document technical decisions for a public, world-wide technical audience. + </li> + <li> + Be comfortable working remotely with a geographically distributed team. + </li> + <li> + Experience interacting with users and other developers online, including experience being confronted with differing ideas and opinions (not always in a nice manner), while maintaining a high level of professionalism. + </li> + <li> + Comfort with transparency: as a non-profit organization who develops open source software, almost everything we do is public, including your name (or at least your business name) and possibly salary information. + </li> +</ul> + +<h2>Preferred qualifications:</h2> +<ul> + </li> + <li> + Familiarity and/or experience with writing add-ons and/or patches for Mozilla Firefox or other web browsers. + </li> + <li> + Familiarity with compiling software for the Android platform. + </li> + <li> + Familiarity with Firefox's internal architecture, including its use of multiple processes and sandboxing. + </li> + <li> + Be intensely creative yet also ruthlessly pragmatic in your thinking. + </li> + <li> + Possess knowledge/familiarity of probability, statistics, and information theory. + </li> + <li> + Know enough about networking to be able to visualize what HTTP 1.1 looks like on the wire while encapsulated within Tor's network protocol. + </li> + <li> + Experience working with distributed (remote) teams across different time-zones with people of differing skill levels over multiple mediums, including email, instant messaging, and IRC. + </li> + <li> + Open-source experience: contributed significant chunks of code to multiple open-source projects in the past. + </li> + <li> + Familiarity with distributed version control systems, including Git. + </li> + <li> + Genuinely be excited about Tor and its values! + </li> +</ul> +<p> +For a more detailed understanding of the full breadth and depth of the work you'd be doing, have a look at The Design and Implementation of the Tor Browser, especially The Design Requirements section at <a href="https://www.torproject.org/projects/torbrowser/design/#DesignRequirements">https://www.torproject.org/projects/torbrowser/design/#DesignRequirements</a>. +</p> +<p> +Other notes: +</p> +<p> +Academic degrees are great, but not required if you have the right experience! +</p> +<p> +The team coordinates via IRC, email, and bug trackers. This position may be performed remotely, but we would be happy to provide a desk at our office in Seattle, Washington. We also have informal shared workspace arrangements in NYC and San Francisco. +</p> +<p> +The Tor Project, Inc., is a 501(c)(3) non-profit organization that provides the technical infrastructure for privacy protection over the Internet. With paid staff and contractors of around 30 technologists and operational support people, plus many volunteers all over the world who contribute to our work, the Tor Project is funded in part by government grants and contracts, as well as by individual, foundation, and corporate donations. We only write free and open source software, and we don't believe in software patents. +</p> +<p> +The Tor Project has a competitive benefits package, including a generous PTO policy; 14 paid holidays per year (including the week between Christmas and New Year's, when the office is closed); health, vision, dental, disability, and life insurance paid in full for employee; flexible work schedule; and occasional travel opportunities. The Tor Project, Inc., is an equal opportunity, affirmative action employer. +</p> +<p> +The Tor Project, Inc., is an equal opportunity, affirmative action employer. +</p> +<p> +To apply: +</p> +<p> +Please email a PDF of your resume/CV, and a cover letter explaining how your qualifications and experience meet the requirements of this job description, including why you want to work on Tor. Email should be sent to hr at torproject.org with "Browser Developer" in the subject line. +Link to at least one of your code samples (ideally, more than one and all of which we will presume you are authorized to disclose). No phone calls, please! +</p> + + </div> +  + <div id = "sidecol"> +#include "side.wmi" +#include "info.wmi" + </div> +  +</div> + +#include <foot.wmi> diff --git a/about/en/jobs.wml b/about/en/jobs.wml index 3c96e31..37b1527 100644 --- a/about/en/jobs.wml +++ b/about/en/jobs.wml @@ -16,10 +16,10 @@ soon, though! In the meantime, you may want to glance at our <a href="<page getinvolved/volunteer>">volunteers</a> page.</p> - #<p>Specifically, we're looking for the following people currently:</p> - #<ul> - # <li><a href="<page about/jobs-comm-director>">Director of Communications</a></li> - #</ul> + <p>Specifically, we're looking for the following people currently:</p> + <ul> + <li><a href="<page about/jobs-browserdeveloper>">Browser Developer</a></li> + </ul> <p>In the past, we looked for the following people:</p>

1 0

[webwml/staging] Fix typo in browser dev job ad
by hiro＠torproject.org 16 Jun '17

16 Jun '17

commit e4c772580311c410552440ff9288bfb50d2f9dc5 Author: hiromipaw <hiro(a)torproject.org> Date: Fri Jun 16 20:38:09 2017 +0200 Fix typo in browser dev job ad --- about/en/jobs-browserdeveloper.wml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/about/en/jobs-browserdeveloper.wml b/about/en/jobs-browserdeveloper.wml index f7ad21f..ca901b0 100644 --- a/about/en/jobs-browserdeveloper.wml +++ b/about/en/jobs-browserdeveloper.wml @@ -17,7 +17,7 @@ June 15, 2017 </p> <p> -The Tor Project is looking for Browser Developer (C++ and Javascript)! +The Tor Project is looking for a Browser Developer (C++ and Javascript)! </p> <p> As a browser developer, your job would be to work closely with other members of the Tor Browser development team on C++ patches to our Firefox-based browser, writing new APIs, altering functionality for privacy and security, and making improvements to our collection of Firefox add-ons (JavaScript code). Being a Tor Browser developer includes triaging, diagnosing, and fixing bugs; looking for and resolving web privacy issues; responding on short notice to urgent security issues; and working collaboratively with coworkers and volunteers to implement new features and web behavior changes. We also need help making our code more maintainable, testable, and mergeable by upstream. The person in this position will also review other people's code, designs, and academic research papers to make suggestions for improvement.

1 0

[webwml/staging] Remove deprecated Tor Browser versions
by hiro＠torproject.org 16 Jun '17

16 Jun '17

commit 25ec05498b063ee535a7004bc5f9429288c6c026 Author: Georg Koppen <gk(a)torproject.org> Date: Fri Jun 16 11:25:11 2017 +0000 Remove deprecated Tor Browser versions --- projects/torbrowser/RecommendedTBBVersions | 12 ------------ 1 file changed, 12 deletions(-) diff --git a/projects/torbrowser/RecommendedTBBVersions b/projects/torbrowser/RecommendedTBBVersions index 1a9b9ce..0a9e3a6 100644 --- a/projects/torbrowser/RecommendedTBBVersions +++ b/projects/torbrowser/RecommendedTBBVersions @@ -1,20 +1,8 @@ [ -"6.5.2", -"6.5.2-Linux", -"6.5.2-MacOS", -"6.5.2-Windows", -"7.0", -"7.0-Linux", -"7.0-MacOS", -"7.0-Windows", "7.0.1", "7.0.1-Linux", "7.0.1-MacOS", "7.0.1-Windows", -"7.0a4", -"7.0a4-Linux", -"7.0a4-MacOS", -"7.0a4-Windows", "7.5a1", "7.5a1-Linux", "7.5a1-MacOS",

1 0

[webwml/staging] Merge branch 'master' of ssh://git-rw.torproject.org/project/web/webwml into staging
by hiro＠torproject.org 16 Jun '17

16 Jun '17

commit 477c6d8cd697922446ca9ed7fc2c2894e930c608 Merge: e4c7725 25ec054 Author: hiromipaw <hiro(a)torproject.org> Date: Fri Jun 16 20:38:20 2017 +0200 Merge branch 'master' of ssh://git-rw.torproject.org/project/web/webwml into staging projects/torbrowser/RecommendedTBBVersions | 12 ------------ 1 file changed, 12 deletions(-)

1 0

[tor/master] Document key-pinning-journal
by nickm＠torproject.org 16 Jun '17

16 Jun '17

commit a73d0fe9a87df762474ee928ff9e6282e5e38430 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Jun 16 14:26:21 2017 -0400 Document key-pinning-journal Closes 22347 --- changes/bug22347 | 2 ++ doc/tor.1.txt | 7 +++++++ 2 files changed, 9 insertions(+) diff --git a/changes/bug22347 b/changes/bug22347 new file mode 100644 index 0000000..f294ba0 --- /dev/null +++ b/changes/bug22347 @@ -0,0 +1,2 @@ + o Documentation: + - Add a manpage description for the key-pinning-journal file. diff --git a/doc/tor.1.txt b/doc/tor.1.txt index 5e0a71c..7544c03 100644 --- a/doc/tor.1.txt +++ b/doc/tor.1.txt @@ -2741,6 +2741,13 @@ __DataDirectory__**/lock**:: directory. If access to this file is locked, data directory is already in use by Tor. +__DataDirectory__**/key-pinning-journal**:: + Used by authorities. A line-based file that records mappings between + RSA1024 identity keys and Ed25519 identity keys. Authorities enforce + these mappings, so that once a relay has picked an Ed25519 key, stealing + or factoring the RSA1024 key will no longer let an attacker impersonate + the relay. + __DataDirectory__**/keys/***:: Only used by servers. Holds identity keys and onion keys.

1 0

[torspec/master] Fix a bogus part of dir-spec wrt specification of "package" line.
by nickm＠torproject.org 16 Jun '17

16 Jun '17

commit 5b7a7d6264f24c029377ac2d9efc58ea48be86a0 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Jun 16 14:14:53 2017 -0400 Fix a bogus part of dir-spec wrt specification of "package" line. --- dir-spec.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/dir-spec.txt b/dir-spec.txt index 61d218e..fb35a24 100644 --- a/dir-spec.txt +++ b/dir-spec.txt @@ -1675,7 +1675,8 @@ DIGESTS = DIGEST | DIGESTS SP DIGEST DIGEST = DIGESTTYPE "=" DIGESTVAL NONSPACE = one or more non-space printing characters - DIGESTVAL = DIGESTTYPE = one or more non-=, non-" " characters. + DIGESTVAL = DIGESTTYPE = one or more non-space printing characters + other than "=". Indicates that a package called "package" of version VERSION may be found at URL, and its digest as computed with DIGESTTYPE is equal to

1 0

[torspec/master] Fix a miscopy in the description of the "a" line; closes #12970
by nickm＠torproject.org 16 Jun '17

16 Jun '17

commit 7209e26ca9c5db390c82bf3e5227410c5db66a09 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Jun 16 14:06:47 2017 -0400 Fix a miscopy in the description of the "a" line; closes #12970 --- dir-spec.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dir-spec.txt b/dir-spec.txt index f96bfba..61d218e 100644 --- a/dir-spec.txt +++ b/dir-spec.txt @@ -2094,7 +2094,7 @@ Present only if the OR has at least one IPv6 address. - Address and portlist are as for "or-address" as specified in + Address and port are as for "or-address" as specified in section 2.1.1. (Only included when the vote or consensus is generated with

1 0

[metrics-lib/master] Bump version to 1.8.2-dev.
by karsten＠torproject.org 16 Jun '17

16 Jun '17

commit 59dc55fbe1b3c8afa7174e8b6b5f868d92e5c921 Author: Karsten Loesing <karsten.loesing(a)gmx.net> Date: Fri Jun 16 17:03:41 2017 +0200 Bump version to 1.8.2-dev. --- build.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.xml b/build.xml index d755932..d5aaa8f 100644 --- a/build.xml +++ b/build.xml @@ -6,7 +6,7 @@ <project default="usage" name="descriptor" basedir="."> - <property name="release.version" value="1.8.2" /> + <property name="release.version" value="1.8.2-dev" /> <property name="javadoc-title" value="DescripTor API Documentation"/> <property name="javadoc-excludes" value="**/impl/** **/index/**" /> <property name="implementation-title" value="DescripTor" />

1 0

[metrics-lib/release] Prepare for 1.8.2 release.
by karsten＠torproject.org 16 Jun '17

16 Jun '17

commit be96d96b830355b9f122072f0b02855282ae64a3 Author: Karsten Loesing <karsten.loesing(a)gmx.net> Date: Fri Jun 16 16:54:50 2017 +0200 Prepare for 1.8.2 release. --- build.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.xml b/build.xml index 1ed53ec..d755932 100644 --- a/build.xml +++ b/build.xml @@ -6,7 +6,7 @@ <project default="usage" name="descriptor" basedir="."> - <property name="release.version" value="1.8.1-dev" /> + <property name="release.version" value="1.8.2" /> <property name="javadoc-title" value="DescripTor API Documentation"/> <property name="javadoc-excludes" value="**/impl/** **/index/**" /> <property name="implementation-title" value="DescripTor" />

1 0

[metrics-lib/release] Fix a regression in parsing descriptors.
by karsten＠torproject.org 16 Jun '17

16 Jun '17

commit 0917016f6b2ac6e383fa6862a3a530b4dcf777bc Author: Karsten Loesing <karsten.loesing(a)gmx.net> Date: Fri Jun 16 14:43:20 2017 +0200 Fix a regression in parsing descriptors. --- CHANGELOG.md | 7 ++++++- .../org/torproject/descriptor/impl/DescriptorParserImpl.java | 12 +++++++++--- 2 files changed, 15 insertions(+), 4 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 44420bf..409d0e8 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,4 +1,9 @@ -# Changes in version 1.9.0 - 2017-06-?? +# Changes in version 1.8.2 - 2017-06-16 + + * Medium changes + - Fix a regression where any DescriptorParseException thrown while + parsing a descriptor is encapsulated and rethrown as + RuntimeException. # Changes in version 1.8.1 - 2017-06-08 diff --git a/src/main/java/org/torproject/descriptor/impl/DescriptorParserImpl.java b/src/main/java/org/torproject/descriptor/impl/DescriptorParserImpl.java index 6317597..ad0d512 100644 --- a/src/main/java/org/torproject/descriptor/impl/DescriptorParserImpl.java +++ b/src/main/java/org/torproject/descriptor/impl/DescriptorParserImpl.java @@ -195,9 +195,15 @@ public class DescriptorParserImpl implements DescriptorParser { try { return constructor.newInstance(rawDescriptorBytes, offsetAndLength, failUnrecognizedDescriptorLines); - } catch (InstantiationException | IllegalAccessException - | InvocationTargetException e) { - throw new RuntimeException(); + } catch (InvocationTargetException e) { + if (null != e.getCause() + && e.getCause() instanceof DescriptorParseException) { + throw (DescriptorParseException) e.getCause(); + } else { + throw new RuntimeException(e); + } + } catch (InstantiationException | IllegalAccessException e) { + throw new RuntimeException(e); } }

1 0