July 2017 - tor-commits - lists.torproject.org

[tor/release-0.3.0] Use the correct TROVE id for #22753.
by nickm＠torproject.org 07 Jul '17

07 Jul '17

commit 58e39a5596636f4f58470bb83abd237042cbece9 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Jul 7 10:49:43 2017 -0400 Use the correct TROVE id for #22753. --- ChangeLog | 2 +- ReleaseNotes | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index 8b128a7..656c684 100644 --- a/ChangeLog +++ b/ChangeLog @@ -12,7 +12,7 @@ Changes in version 0.3.0.9 - 2017-06-29 - When choosing which guard to use for a circuit, avoid the exit's family along with the exit itself. Previously, the new guard selection logic avoided the exit, but did not consider its family. - Fixes bug 22753; bugfix on 0.3.0.1-alpha. Tracked as TROVE-2016- + Fixes bug 22753; bugfix on 0.3.0.1-alpha. Tracked as TROVE-2017- 006 and CVE-2017-0377. o Major bugfixes (entry guards, backport from 0.3.1.1-alpha): diff --git a/ReleaseNotes b/ReleaseNotes index ea0b031..3455ce5 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -16,7 +16,7 @@ Changes in version 0.3.0.9 - 2017-06-29 - When choosing which guard to use for a circuit, avoid the exit's family along with the exit itself. Previously, the new guard selection logic avoided the exit, but did not consider its family. - Fixes bug 22753; bugfix on 0.3.0.1-alpha. Tracked as TROVE-2016- + Fixes bug 22753; bugfix on 0.3.0.1-alpha. Tracked as TROVE-2017- 006 and CVE-2017-0377. o Major bugfixes (entry guards, backport from 0.3.1.1-alpha):

1 0

[tor/release-0.3.1] Use the correct TROVE id for #22753.
by nickm＠torproject.org 07 Jul '17

07 Jul '17

commit 251316c5d8ea143b24696e816d60ac14162cc834 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Jul 7 10:49:46 2017 -0400 Use the correct TROVE id for #22753. --- ChangeLog | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index fe5fc14..b69b694 100644 --- a/ChangeLog +++ b/ChangeLog @@ -19,7 +19,7 @@ Changes in version 0.3.1.4-alpha - 2017-06-29 - When choosing which guard to use for a circuit, avoid the exit's family along with the exit itself. Previously, the new guard selection logic avoided the exit, but did not consider its family. - Fixes bug 22753; bugfix on 0.3.0.1-alpha. Tracked as TROVE-2016- + Fixes bug 22753; bugfix on 0.3.0.1-alpha. Tracked as TROVE-2017- 006 and CVE-2017-0377. o Major bugfixes (compression, zstd):

1 0

[tor-browser-bundle/master] Fold in stable changelogs
by gk＠torproject.org 07 Jul '17

07 Jul '17

commit f47d812d86c40f349ce113eee5783522a1d9cc13 Author: Georg Koppen <gk(a)torproject.org> Date: Fri Jul 7 12:22:04 2017 +0000 Fold in stable changelogs --- Bundle-Data/Docs/ChangeLog.txt | 150 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 150 insertions(+) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 45210dd..2e52d7c 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -5,6 +5,11 @@ Tor Browser 7.5a2 -- July 6 2017 * Linux * Update sandboxed-tor-browser to 0.0.9 +Tor Browser 7.0.2 -- July 3 2017 + * All Platforms + * Update Tor to 0.3.0.9, fixing bug #22753 + * Update HTTPS-Everywhere to 5.2.19 + Tor Browser 7.5a1 -- June 14 2017 * All Platforms * Update Firefox to 52.2.0esr @@ -58,6 +63,151 @@ Tor Browser 7.5a1 -- June 14 2017 * Android * Bug 19078: Disable RtspMediaResource stuff in Orfox +Tor Browser 7.0.1 -- June 13 2017 + * All Platforms + * Update Firefox to 52.2.0esr + * Update Tor to 0.3.0.8 + * Update Torbutton to 1.9.7.4 + * Bug 22542: Security Settings window too small on macOS 10.12 + * Update HTTPS-Everywhere to 5.2.18 + * Bug 22362: NoScript's XSS filter freezes the browser + * OS X + * Bug 22558: Don't update OS X 10.7.x and 10.8.x users to Tor Browser 7.0 + +Tor Browser 7.0 -- June 7 2017 + * All Platforms + * Update Firefox to 52.1.2esr + * Update Tor to 0.3.0.7 + * Update Torbutton to 1.9.7.3 + * Bug 22104: Adjust our content policy whitelist for ff52-esr + * Bug 22457: Allow resources loaded by view-source:// + * Bug 21627: Ignore HTTP 304 responses when checking redirects + * Bug 22459: Adapt our use of the nsIContentPolicy to e10s mode + * Bug 21865: Update our JIT preferences in the security slider + * Bug 21747: Make 'New Tor Circuit for this Site' work in ESR52 + * Bug 21745: Fix handling of catch-all circuit + * Bug 21547: Fix circuit display under e10s + * Bug 21268: e10s compatibility for New Identity + * Bug 21267: Remove window resize implementation for now + * Bug 21201: Make Torbutton multiprocess compatible + * Translations update + * Update Tor Launcher to 0.2.12.2 + * Bug 22283: Linux 7.0a4 broken after update due to unix: lines in torrc + * Bug 20761: Don't ignore additional SocksPorts + * Bug 21920: Don't show locale selection dialog + * Bug 21546: Mark Tor Launcher as multiprocess compatible + * Bug 21264: Add a README file + * Translations update + * Update HTTPS-Everywhere to 5.2.17 + * Update NoScript to 5.0.5 + * Update Go to 1.8.3 (bug 22398) + * Bug 21962: Fix crash on about:addons page + * Bug 21766: Fix crash when the external application helper dialog is invoked + * Bug 21886: Download is stalled in non-e10s mode + * Bug 21778: Canvas prompt is not shown in Tor Browser based on ESR52 + * Bug 21569: Add first-party domain to Permissions key + * Bug 22165: Don't allow collection of local IP addresses + * Bug 13017: Work around audio fingerprinting by disabling the Web Audio API + * Bug 10286: Disable Touch API and add fingerprinting resistance as fallback + * Bug 13612: Disable Social API + * Bug 10283: Disable SpeechSynthesis API + * Bug 22333: Disable WebGL2 API for now + * Bug 21861: Disable additional mDNS code to avoid proxy bypasses + * Bug 21684: Don't expose navigator.AddonManager to content + * Bug 21431: Clean-up system extensions shipped in Firefox 52 + * Bug 22320: Use preference name 'referer.hideOnionSource' everywhere + * Bug 16285: Don't ship ClearKey EME system and update EME preferences + * Bug 21675: Spoof window.navigator.hardwareConcurrency + * Bug 21792: Suppress MediaError.message + * Bug 16337: Round times exposed by Animation API to nearest 100ms + * Bug 21972: about:support is partially broken + * Bug 21726: Keep Graphite support disabled + * Bug 21323: Enable Mixed Content Blocking + * Bug 21685: Disable remote new tab pages + * Bug 21790: Disable captive portal detection + * Bug 21686: Disable Microsoft Family Safety support + * Bug 22073: Make sure Mozilla's experiments are disabled + * Bug 21683: Disable newly added Safebrowsing capabilities + * Bug 22071: Disable Kinto-based blocklist update mechanism + * Bug 22415: Fix format error in our pipeline patch + * Bug 22072: Hide TLS error reporting checkbox + * Bug 20761: Don't ignore additional SocksPorts + * Bug 21862: Rip out potentially unsafe Rust code + * Bug 16485: Improve about:cache page + * Bug 22462: Backport of patch for bug 1329521 to fix assertion failure + * Bug 21340: Identify and backport new patches from Firefox + * Bug 22153: Fix broken feeds on higher security levels + * Bug 22025: Fix broken certificate error pages on higher security levels + * Bug 21887: Fix broken error pages on higher security levels + * Bug 22458: Fix broken `about:cache` page on higher security levels + * Bug 21876: Enable e10s by default on all supported platforms + * Bug 21876: Always use esr policies for e10s + * Bug 20905: Fix resizing issues after moving to a direct Firefox patch + * Bug 21875: Modal dialogs are maximized in ESR52 nightly builds + * Bug 21885: SVG is not disabled in Tor Browser based on ESR52 + * Bug 17334: Hide Referer when leaving a .onion domain (improved patch) + * Bug 18531: Uncaught exception when opening ip-check.info + * Bug 18574: Uncaught exception when clicking items in Library + * Bug 22327: Isolate Page Info media previews to first party domain + * Bug 22452: Isolate tab list menuitem favicons to first party domain + * Bug 15555: View-source requests are not isolated by first party domain + * Bug 3246: Double-key cookies + * Bug 8842: Fix XML parsing error + * Bug 5293: Neuter fingerprinting with Battery API + * Bug 16886: 16886: "Add-on compatibility check dialog" contains Firefox logo + * Bug 19645: TBB zooms text when resizing browser window + * Bug 19192: Untrust Blue Coat CA + * Bug 19955: Avoid confusing warning that favicon load request got cancelled + * Bug 20005: Backport fixes for memory leaks investigation + * Bug 20755: ltn.com.tw is broken in Tor Browser + * Bug 21896: Commenting on website is broken due to CAPTCHA not being displayed + * Bug 20680: Rebase Tor Browser patches to 52 ESR + * Bug 22429: Add IPv6 address for Lisbeth:443 obfs4 bridge + * Bug 22468: Add default obfs4 bridges frosty and dragon + * Windows + * Bug 22419: Prevent access to file:// + * Bug 12426: Make use of HeapEnableTerminationOnCorruption + * Bug 19316: Make sure our Windows updates can deal with the SSE2 requirement + * Bug 21868: Fix build bustage with FIREFOX_52_0_2esr_RELEASE for Windows + * OS X + * Bug 21940: Don't allow privilege escalation during update + * Bug 22044: Fix broken default search engine on macOS + * Bug 21879: Use our default bookmarks on OSX + * Bug 21779: Non-admin users can't access Tor Browser on macOS + * Bug 21723: Fix inconsistent generation of MOZ_MACBUNDLE_ID + * Bug 21724: Make Firefox and Tor Browser distinct macOS apps + * Bug 21931: Backport OSX SetupMacCommandLine updater fixes + * Bug 15910: Don't download GMPs via the local fallback + * Linux + * Bug 16285: Remove ClearKey related library stripping + * Bug 22041: Fix update error during update to 7.0a3 + * Bug 22238: Fix use of hardened wrapper for Firefox build + * Bug 21907: Fix runtime error on CentOS 6 + * Bug 15910: Don't download GMPs via the local fallback + * Android + * Bug 19078: Disable RtspMediaResource stuff in Orfox + * Build system + * Windows + * Bug 21837: Fix reproducibility of accessibility code for Windows + * Bug 21240: Create patches to fix mingw-w64 compilation of Firefox ESR 52 + * Bug 21904: Bump mingw-w64 commit to help with sandbox compilation + * Bug 18831: Use own Yasm for Firefox cross-compilation + * OS X + * Bug 21328: Updating to clang 3.8.0 + * Bug 21754: Remove old GCC toolchain and macOS SDK + * Bug 19783: Remove unused macOS helper scripts + * Bug 10369: Don't use old GCC toolchain anymore for utils + * Bug 21753: Replace our old GCC toolchain in PT descriptor + * Bug 18530: ESR52 based Tor Browser only runs on macOS 10.9+ + * Bug 22328: Remove clang PIE wrappers + * Linux + * Bug 21930: NSS libraries are missing from mar-tools archive + * Bug 21239: Adapt Linux Firefox descriptor to ESR52 (use GTK2) + * Bug 21960: Linux bundles based on ESR 52 are not reproducible anymore + * Bug 21629: Fix broken ASan builds when switching to ESR 52 + * Bug 22444: Use hardening-wrapper when building GCC + * Bug 22361: Fix hardening of libraries built in linux/gitian-utils.yml + Tor Browser 7.0a4 -- May 15 2017 * All Platforms * Update Firefox to 52.1.1esr

1 0

[translation/tor-browser-manual] Update translations for tor-browser-manual
by translation＠torproject.org 07 Jul '17

07 Jul '17

commit 408b9938b6671e2f0597588f3371e596cd57a3c0 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Jul 7 09:51:31 2017 +0000 Update translations for tor-browser-manual --- fa/fa.po | 2 ++ 1 file changed, 2 insertions(+) diff --git a/fa/fa.po b/fa/fa.po index b0748c1..1733c99 100644 --- a/fa/fa.po +++ b/fa/fa.po @@ -295,6 +295,8 @@ msgid "" "Select “Connect with provided bridges”. Tor Browser currently has six " "pluggable transport options to choose from." msgstr "" +"گزینه \"اتصال با پل ها ی ارائه شده\" را انتخاب کنید. مرورگر Tor در حال حاضر دارای شش گزینه حمل و نقل قابل حمل\n" +"برای انتخاب از آن می باشد." #: circumvention.page:60 msgid "Which transport should I use?"

1 0

[webwml/master] Add new Tor Browser version (7.5a2)
by gk＠torproject.org 07 Jul '17

07 Jul '17

commit 71794f151b356616894c04ea4e236c30e916bf31 Author: Georg Koppen <gk(a)torproject.org> Date: Fri Jul 7 09:49:32 2017 +0000 Add new Tor Browser version (7.5a2) --- include/versions.wmi | 20 ++++++++++---------- projects/torbrowser/RecommendedTBBVersions | 6 +++++- 2 files changed, 15 insertions(+), 11 deletions(-) diff --git a/include/versions.wmi b/include/versions.wmi index 83a1a2e..00ad224 100644 --- a/include/versions.wmi +++ b/include/versions.wmi @@ -5,29 +5,29 @@ <define-tag version-torbrowserdevelopbranch whitespace=delete>maint-7.0</define-tag> <define-tag version-torbrowserbundledir whitespace=delete>7.0.2</define-tag> -<define-tag version-torbrowserbundlebetadir whitespace=delete>7.5a1</define-tag> +<define-tag version-torbrowserbundlebetadir whitespace=delete>7.5a2</define-tag> <define-tag version-torbrowserbundle whitespace=delete>7.0.2</define-tag> <define-tag releasedate-torbrowserbundle whitespace=delete>2017-07-04</define-tag> -<define-tag version-torbrowserbundlebeta whitespace=delete>7.5a1</define-tag> -<define-tag releasedate-torbrowserbundlebeta whitespace=delete>2017-06-14</define-tag> +<define-tag version-torbrowserbundlebeta whitespace=delete>7.5a2</define-tag> +<define-tag releasedate-torbrowserbundlebeta whitespace=delete>2017-07-06</define-tag> <define-tag version-torbrowserbundlelinux32 whitespace=delete>7.0.2</define-tag> <define-tag releasedate-torbrowserbundlelinux32 whitespace=delete>2017-07-04</define-tag> <define-tag version-torbrowserbundlelinux64 whitespace=delete>7.0.2</define-tag> <define-tag releasedate-torbrowserbundlelinux64 whitespace=delete>2017-07-04</define-tag> -<define-tag version-torbrowserbundlelinux32beta whitespace=delete>7.5a1</define-tag> -<define-tag releasedate-torbrowserbundlelinux32beta whitespace=delete>2017-06-14</define-tag> -<define-tag version-torbrowserbundlelinux64beta whitespace=delete>7.5a1</define-tag> -<define-tag releasedate-torbrowserbundlelinux64beta whitespace=delete>2017-06-14</define-tag> +<define-tag version-torbrowserbundlelinux32beta whitespace=delete>7.5a2</define-tag> +<define-tag releasedate-torbrowserbundlelinux32beta whitespace=delete>2017-07-06</define-tag> +<define-tag version-torbrowserbundlelinux64beta whitespace=delete>7.5a2</define-tag> +<define-tag releasedate-torbrowserbundlelinux64beta whitespace=delete>2017-07-06</define-tag> <define-tag version-torbrowserbundleosx32 whitespace=delete>7.0.2</define-tag> <define-tag releasedate-torbrowserbundleosx32 whitespace=delete>2017-07-04</define-tag> <define-tag version-torbrowserbundleosx64 whitespace=delete>7.0.2</define-tag> <define-tag releasedate-torbrowserbundleosx64 whitespace=delete>2017-07-04</define-tag> -<define-tag version-torbrowserbundleosx64beta whitespace=delete>7.5a1</define-tag> -<define-tag releasedate-torbrowserbundleosx64beta whitespace=delete>2017-06-14</define-tag> -<define-tag version-torbrowsersandboxlinux whitespace=delete>0.0.7</define-tag> +<define-tag version-torbrowserbundleosx64beta whitespace=delete>7.5a2</define-tag> +<define-tag releasedate-torbrowserbundleosx64beta whitespace=delete>2017-07-06</define-tag> +<define-tag version-torbrowsersandboxlinux whitespace=delete>0.0.9</define-tag> <define-tag package-win32-stable whitespace=delete>../dist/torbrowser/<version-torbrowserbundledir>/tor-win32-<version-win32-stable>.zip</define-tag> diff --git a/projects/torbrowser/RecommendedTBBVersions b/projects/torbrowser/RecommendedTBBVersions index ca1b2b0..ea267f9 100644 --- a/projects/torbrowser/RecommendedTBBVersions +++ b/projects/torbrowser/RecommendedTBBVersions @@ -6,5 +6,9 @@ "7.5a1", "7.5a1-Linux", "7.5a1-MacOS", -"7.5a1-Windows" +"7.5a1-Windows", +"7.5a2", +"7.5a2-Linux", +"7.5a2-MacOS", +"7.5a2-Windows" ]

1 0

[translation/tor-browser-manual] Update translations for tor-browser-manual
by translation＠torproject.org 07 Jul '17

07 Jul '17

commit 6dabba079b0c01e8bfd295953d67a883cca88770 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Jul 7 08:18:28 2017 +0000 Update translations for tor-browser-manual --- fa/fa.po | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/fa/fa.po b/fa/fa.po index f704fda..b0748c1 100644 --- a/fa/fa.po +++ b/fa/fa.po @@ -162,6 +162,8 @@ msgid "" "href=\"https://bridges.torproject.org/\">https://bridges.torproject.org/</link>" " and follow the instructions, or" msgstr "" +"از https://bridges.torproject.org/ بازدید کنید و دستور العمل ها را دنبال " +"کنید, یا" #: bridges.page:42 msgid "" @@ -187,6 +189,10 @@ msgid "" " to the Tor network. Select “Use custom bridges” and enter each bridge " "address on a separate line." msgstr "" +"هنگامی که از شما پرسیده می شود که آیا ارائه دهنده خدمات اینترنتی شما اتصالات" +" به شبکه Tor را مسدود می کند گزینه \"بله\" را انتخاب کنید. گزینه \"استفاده " +"از پل ها سفارشی\" را انتخاب کنید و و آدرس هر پل را در یک خط جداگانه وارد " +"کنید." #. This is a reference to an external file such as an image or video. When #. the file changes, the md5 hash will change to let you know you need to @@ -208,6 +214,10 @@ msgid "" " may be down. Please use one of the above methods to obtain more bridge " "addresses, and try again." msgstr "" +"بر روی اتصال کلیک کنید. استفاده از پل ها ممکن است ارتباط را نسبت به استفاده " +"از رله های معمولی Tor کاهش دهند. اگر ارتباط موفقیت آمیز نبود, پل ها یی که " +"دریافت کرده اید ممکن است خراب شده باشند. لطفا از یکی از روش های فوق استفاده " +"کنید تا آدرس پل بیشتری دریافت کنید و دوباره امتحان کنید." #: circumvention.page:6 msgid "What to do if the Tor network is blocked" @@ -229,7 +239,7 @@ msgstr "" #: circumvention.page:22 msgid "Using pluggable transports" -msgstr "" +msgstr "با استفاده از حمل و نقل قابل حمل" #. This is a reference to an external file such as an image or video. When #. the file changes, the md5 hash will change to let you know you need to @@ -249,6 +259,8 @@ msgid "" "To use pluggable transports, click \"Configure\" in the Tor Launcher window " "that appears when you first run Tor Browser." msgstr "" +"برای استفاده از حمل و نقل قابل حمل، بر روی \"تنظیمات\" در پنجره پرتاب کننده " +"Tor که در هنگام اولین بار مرورگر Tor را اجرا می کنید ظاهر می شود کلیک کنید." #: circumvention.page:33 msgid ""

1 0

[translation/https_everywhere_completed] Update translations for https_everywhere_completed
by translation＠torproject.org 06 Jul '17

06 Jul '17

commit 7887e568828b585b71b80547ea89d271dd4bd38a Author: Translation commit bot <translation(a)torproject.org> Date: Thu Jul 6 22:45:35 2017 +0000 Update translations for https_everywhere_completed --- zh_CN/https-everywhere.dtd | 57 ++++++++++++++++++++++++ zh_CN/https-everywhere.properties | 8 ++++ zh_CN/ssl-observatory.dtd | 94 +++++++++++++++++++++++++++++++++++++++ 3 files changed, 159 insertions(+) diff --git a/zh_CN/https-everywhere.dtd b/zh_CN/https-everywhere.dtd new file mode 100644 index 0000000..30e61f0 --- /dev/null +++ b/zh_CN/https-everywhere.dtd @@ -0,0 +1,57 @@ +<!ENTITY https-everywhere.about.title "关于 HTTPS Everywhere"> +<!ENTITY https-everywhere.about.ext_name "HTTPS Everywhere"> +<!ENTITY https-everywhere.about.ext_description "加密网络浏览，自动使用 HTTPS 连接访问站点，更加安全。"> +<!ENTITY https-everywhere.about.version "版本"> +<!ENTITY https-everywhere.about.created_by "创建者"> +<!ENTITY https-everywhere.about.and "，及"> +<!ENTITY https-everywhere.about.librarians "规则管理员"> +<!ENTITY https-everywhere.about.add_new_rule "添加新规则"> +<!ENTITY https-everywhere.about.thanks "致谢"> +<!ENTITY https-everywhere.about.many_contributors "许许多多的贡献者，包括"> +<!ENTITY https-everywhere.about.noscript "另外，HTTPS Everywhere 的部分源代码基于 NoScript，作者是 Giorgio Maone 等人。我们非常感谢他们出色的成果！"> +<!ENTITY https-everywhere.about.contribute "如果喜欢 HTTPS Everywhere，您可以考虑"> +<!ENTITY https-everywhere.about.donate_tor "捐助 Tor"> +<!ENTITY https-everywhere.about.tor_lang_code "zh_CN"> +<!ENTITY https-everywhere.about.or "或"> +<!ENTITY https-everywhere.about.donate_eff "捐助电子前线基金会 (EFF)"> + +<!ENTITY https-everywhere.menu.donate_eff_imperative "捐助电子前线基金会 (EFF)"> +<!ENTITY https-everywhere.menu.about "关于 HTTPS Everywhere"> +<!ENTITY https-everywhere.menu.observatory "SSL Observatory 首选项"> +<!ENTITY https-everywhere.menu.globalEnable "启用 HTTPS Everywhere"> +<!ENTITY https-everywhere.menu.globalDisable "禁用 HTTPS Everywhere"> +<!ENTITY https-everywhere.menu.blockUnencryptedRequests "拦截所有未加密请求"> +<!ENTITY https-everywhere.menu.showCounter "显示计数器"> +<!ENTITY https-everywhere.menu.viewAllRules "查看所有规则"> + +<!ENTITY https-everywhere.prefs.title "HTTPS Everywhere 首选项"> +<!ENTITY https-everywhere.prefs.enable_all "全部启用"> +<!ENTITY https-everywhere.prefs.disable_all "全部禁用"> +<!ENTITY https-everywhere.prefs.reset_defaults "重置为默认值"> +<!ENTITY https-everywhere.prefs.search "搜索"> +<!ENTITY https-everywhere.prefs.site "站点"> +<!ENTITY https-everywhere.prefs.notes "注释"> +<!ENTITY https-everywhere.prefs.list_caption "应用哪些 HTTPS 重定向规则？"> +<!ENTITY https-everywhere.prefs.enabled "已启用"> +<!ENTITY https-everywhere.prefs.ruleset_howto "您可以学习如何编写您自己的规则（以增加对其他网站的支持）"> +<!ENTITY https-everywhere.prefs.here_link "这里"> +<!ENTITY https-everywhere.prefs.toggle "切换"> +<!ENTITY https-everywhere.prefs.reset_default "重置为默认值"> +<!ENTITY https-everywhere.prefs.view_xml_source "查看 XML 格式的源代码"> + +<!ENTITY https-everywhere.chrome.stable_rules "稳定规则"> +<!ENTITY https-everywhere.chrome.stable_rules_description "强制对这些网站加密连接："> +<!ENTITY https-everywhere.chrome.experimental_rules "实验性规则"> +<!ENTITY https-everywhere.chrome.experimental_rules_description "可能引发警告或异常。默认被禁用。"> +<!ENTITY https-everywhere.chrome.add_rule "为此站点添加规则"> +<!ENTITY https-everywhere.chrome.add_new_rule "为此站点添加新规则"> +<!ENTITY https-everywhere.chrome.always_https_for_host "对此主机始终使用 https"> +<!ENTITY https-everywhere.chrome.host "主机:"> +<!ENTITY https-everywhere.chrome.show_advanced "显示高级选项"> +<!ENTITY https-everywhere.chrome.hide_advanced "隐藏高级选项"> +<!ENTITY https-everywhere.chrome.rule_name "规则名称"> +<!ENTITY https-everywhere.chrome.regex "正则表达式匹配"> +<!ENTITY https-everywhere.chrome.redirect_to "重定向到"> +<!ENTITY https-everywhere.chrome.status_cancel_button "取消"> + + diff --git a/zh_CN/https-everywhere.properties b/zh_CN/https-everywhere.properties new file mode 100644 index 0000000..f44cea3 --- /dev/null +++ b/zh_CN/https-everywhere.properties @@ -0,0 +1,8 @@ +https-everywhere.menu.globalEnable = 启用 HTTPS Everywhere +https-everywhere.menu.globalDisable = 禁用 HTTPS Everywhere +https-everywhere.menu.enableDisable = 启用/禁用规则 +https-everywhere.menu.noRules = （本页面无规则） +https-everywhere.menu.unknownRules = （此页面规则未知） +https-everywhere.toolbar.hint = HTTPS Everywhere 当前已激活。根据每个网站，可点击地址栏中图标启用或禁用该功能。 +https-everywhere.migration.notification0 = 为了部署重要修订，该更新将 HTTPS Everywhere 规则偏好重置为默认值。 +https-everywhere.menu.ruleset-tests = 运行HTTPS Everywhere规则集测试 diff --git a/zh_CN/ssl-observatory.dtd b/zh_CN/ssl-observatory.dtd new file mode 100644 index 0000000..9ef4eb3 --- /dev/null +++ b/zh_CN/ssl-observatory.dtd @@ -0,0 +1,94 @@ + +<!ENTITY ssl-observatory.popup.details "详情与隐私信息"> +<!ENTITY ssl-observatory.popup.later "以后再说"> +<!ENTITY ssl-observatory.popup.no "否"> + +<!ENTITY ssl-observatory.popup.text "通过将接收到的证书 +提交至 Observatory，HTTPS Everywhere 能够检测针对浏览器的攻击。 +是否启用该功能？"> + + + +<!ENTITY ssl-observatory.popup.title +"是否允许 HTTPS Everywhere 使用 SSL Observatory？"> + +<!ENTITY ssl-observatory.popup.yes "是"> + + + +<!ENTITY ssl-observatory.prefs.adv_priv_opts1 +"启用这个功能是安全的，除非你所用的是高侵入性的企业网络："> + +<!ENTITY ssl-observatory.prefs.adv_priv_opts2 +"安全，除非所用的企业网络具有加密的内部网服务器名称："> + +<!ENTITY ssl-observatory.prefs.alt_roots +"提交并检查由非标准根 CA 所签名的证书"> + +<!ENTITY ssl-observatory.prefs.alt_roots_tooltip +"启用此选项是安全（而且有益的），除非所用的是高侵入性的公司网络，或者使用卡巴斯基防病毒软件通过本地 TLS 代理与私有根证书认证方检测互联网浏览行为。对于这样的网络，由于生成的数字证书是唯一的，启用该选项可能将公开通过该代理访问的 https:// 网域名称，因此默认关闭该功能。"> + +<!ENTITY ssl-observatory.prefs.anonymous "通过 Tor 网络进行数字证书的检查，以保护匿名性"> +<!ENTITY ssl-observatory.prefs.anonymous_unavailable +"通过 Tor 网络进行数字证书的检查，以保护匿名性（需要有 Tor）"> +<!ENTITY ssl-observatory.prefs.anonymous_tooltip +"此选项需要已经安装并运行 Tor"> + +<!ENTITY ssl-observatory.prefs.asn +"遇到新的数字证书时，通知 Observatory 当前使用的互联网服务提供商 (ISP)"> + +<!ENTITY ssl-observatory.prefs.asn_tooltip +"这将抓取网络的“自治系统号码”(Autonomous System number)。这将有助于找出对 HTTPS 发动攻击的源头，并判断在攻击相对常见的地区网络上，如伊朗和叙利亚，我们是否具有观测数据。"> + +<!ENTITY ssl-observatory.prefs.show_cert_warning +"当观测站检测到已吊销证书而该证书未被浏览器捕获时，显示警告。"> + +<!ENTITY ssl-observatory.prefs.show_cert_warning_tooltip +"对照证书吊销列表，对提交的证书进行检查。可惜我们无法保证标记每个已吊销证书。如果确实出现警告信息，那么很有可能存在问题。"> + +<!ENTITY ssl-observatory.prefs.done "完成"> + +<!ENTITY ssl-observatory.prefs.explanation +"HTTPS Everywhere 可以使用 EFF 的 SSL 观测站。这有两个功能：(1) 将 HTTPS 数字证书寄送到观测站，以协助我们侦测中间人式的攻击并改善网络的安全性；(2)针对不安全的连接以及对你的浏览器进行的攻击，向你发出警告。"> + + + +<!ENTITY ssl-observatory.prefs.explanation2 + +"例如，在访问 https://www.something.com 时，观测站收到的数字证书显示某人访问了 www.something.com，但不会显示是谁访问了该站点或者浏览了哪些页面。将鼠标移至该选项可了解更多详细信息："> + +<!ENTITY ssl-observatory.prefs.hide "隐藏高级选项"> + +<!ENTITY ssl-observatory.prefs.nonanon +"在没有 Tor 网络的情况下依然检查数字证书"> + +<!ENTITY ssl-observatory.prefs.nonanon_tooltip +"我们仍将尽力确保数据的匿名性，但该选项的安全性较低"> + +<!ENTITY ssl-observatory.prefs.priv_dns +"提交并检查非公开 DNS 名称的数字证书"> + +<!ENTITY ssl-observatory.prefs.priv_dns_tooltip +"除非勾选该选项，否则观测站将不会记录通过 DNS 系统无法解析域名的证书。"> + +<!ENTITY ssl-observatory.prefs.show "显示高级选项"> + +<!ENTITY ssl-observatory.prefs.title "SSL Observatory 首选项"> + +<!ENTITY ssl-observatory.prefs.use "是否使用观测站？"> +<!ENTITY ssl-observatory.warning.title "EFF 的 SSL 观测站发布的警告"> +<!ENTITY ssl-observatory.warning.showcert "显示数字证书链"> +<!ENTITY ssl-observatory.warning.okay "我已了解"> +<!ENTITY ssl-observatory.warning.text "EFF 的 SSL 观测站已对该 HTTPS 数字证书发出警告："> +<!ENTITY ssl-observatory.warning.defense "如果已登录网站，建议使用安全连接修改密码。（这些警告可以在 HTTPS Everywhere 首选项的“SSL Observatory”选项卡中禁用。）"> + +<!ENTITY ssl-observatory.prefs.self_signed +"提交并检查自签名证书"> +<!ENTITY ssl-observatory.prefs.self_signed_tooltip +"我们推荐该选项；在自签名的嵌入式设备中，加密问题尤为常见">

1 0

[translation/https_everywhere] Update translations for https_everywhere
by translation＠torproject.org 06 Jul '17

06 Jul '17

commit 702a5c87b9336620089a442d5f9fd6ad51db1d73 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Jul 6 22:45:25 2017 +0000 Update translations for https_everywhere --- zh_CN/https-everywhere.dtd | 57 ++++++++++++++++++++++++ zh_CN/https-everywhere.properties | 8 ++++ zh_CN/ssl-observatory.dtd | 94 +++++++++++++++++++++++++++++++++++++++ 3 files changed, 159 insertions(+) diff --git a/zh_CN/https-everywhere.dtd b/zh_CN/https-everywhere.dtd new file mode 100644 index 0000000..30e61f0 --- /dev/null +++ b/zh_CN/https-everywhere.dtd @@ -0,0 +1,57 @@ +<!ENTITY https-everywhere.about.title "关于 HTTPS Everywhere"> +<!ENTITY https-everywhere.about.ext_name "HTTPS Everywhere"> +<!ENTITY https-everywhere.about.ext_description "加密网络浏览，自动使用 HTTPS 连接访问站点，更加安全。"> +<!ENTITY https-everywhere.about.version "版本"> +<!ENTITY https-everywhere.about.created_by "创建者"> +<!ENTITY https-everywhere.about.and "，及"> +<!ENTITY https-everywhere.about.librarians "规则管理员"> +<!ENTITY https-everywhere.about.add_new_rule "添加新规则"> +<!ENTITY https-everywhere.about.thanks "致谢"> +<!ENTITY https-everywhere.about.many_contributors "许许多多的贡献者，包括"> +<!ENTITY https-everywhere.about.noscript "另外，HTTPS Everywhere 的部分源代码基于 NoScript，作者是 Giorgio Maone 等人。我们非常感谢他们出色的成果！"> +<!ENTITY https-everywhere.about.contribute "如果喜欢 HTTPS Everywhere，您可以考虑"> +<!ENTITY https-everywhere.about.donate_tor "捐助 Tor"> +<!ENTITY https-everywhere.about.tor_lang_code "zh_CN"> +<!ENTITY https-everywhere.about.or "或"> +<!ENTITY https-everywhere.about.donate_eff "捐助电子前线基金会 (EFF)"> + +<!ENTITY https-everywhere.menu.donate_eff_imperative "捐助电子前线基金会 (EFF)"> +<!ENTITY https-everywhere.menu.about "关于 HTTPS Everywhere"> +<!ENTITY https-everywhere.menu.observatory "SSL Observatory 首选项"> +<!ENTITY https-everywhere.menu.globalEnable "启用 HTTPS Everywhere"> +<!ENTITY https-everywhere.menu.globalDisable "禁用 HTTPS Everywhere"> +<!ENTITY https-everywhere.menu.blockUnencryptedRequests "拦截所有未加密请求"> +<!ENTITY https-everywhere.menu.showCounter "显示计数器"> +<!ENTITY https-everywhere.menu.viewAllRules "查看所有规则"> + +<!ENTITY https-everywhere.prefs.title "HTTPS Everywhere 首选项"> +<!ENTITY https-everywhere.prefs.enable_all "全部启用"> +<!ENTITY https-everywhere.prefs.disable_all "全部禁用"> +<!ENTITY https-everywhere.prefs.reset_defaults "重置为默认值"> +<!ENTITY https-everywhere.prefs.search "搜索"> +<!ENTITY https-everywhere.prefs.site "站点"> +<!ENTITY https-everywhere.prefs.notes "注释"> +<!ENTITY https-everywhere.prefs.list_caption "应用哪些 HTTPS 重定向规则？"> +<!ENTITY https-everywhere.prefs.enabled "已启用"> +<!ENTITY https-everywhere.prefs.ruleset_howto "您可以学习如何编写您自己的规则（以增加对其他网站的支持）"> +<!ENTITY https-everywhere.prefs.here_link "这里"> +<!ENTITY https-everywhere.prefs.toggle "切换"> +<!ENTITY https-everywhere.prefs.reset_default "重置为默认值"> +<!ENTITY https-everywhere.prefs.view_xml_source "查看 XML 格式的源代码"> + +<!ENTITY https-everywhere.chrome.stable_rules "稳定规则"> +<!ENTITY https-everywhere.chrome.stable_rules_description "强制对这些网站加密连接："> +<!ENTITY https-everywhere.chrome.experimental_rules "实验性规则"> +<!ENTITY https-everywhere.chrome.experimental_rules_description "可能引发警告或异常。默认被禁用。"> +<!ENTITY https-everywhere.chrome.add_rule "为此站点添加规则"> +<!ENTITY https-everywhere.chrome.add_new_rule "为此站点添加新规则"> +<!ENTITY https-everywhere.chrome.always_https_for_host "对此主机始终使用 https"> +<!ENTITY https-everywhere.chrome.host "主机:"> +<!ENTITY https-everywhere.chrome.show_advanced "显示高级选项"> +<!ENTITY https-everywhere.chrome.hide_advanced "隐藏高级选项"> +<!ENTITY https-everywhere.chrome.rule_name "规则名称"> +<!ENTITY https-everywhere.chrome.regex "正则表达式匹配"> +<!ENTITY https-everywhere.chrome.redirect_to "重定向到"> +<!ENTITY https-everywhere.chrome.status_cancel_button "取消"> + + diff --git a/zh_CN/https-everywhere.properties b/zh_CN/https-everywhere.properties new file mode 100644 index 0000000..f44cea3 --- /dev/null +++ b/zh_CN/https-everywhere.properties @@ -0,0 +1,8 @@ +https-everywhere.menu.globalEnable = 启用 HTTPS Everywhere +https-everywhere.menu.globalDisable = 禁用 HTTPS Everywhere +https-everywhere.menu.enableDisable = 启用/禁用规则 +https-everywhere.menu.noRules = （本页面无规则） +https-everywhere.menu.unknownRules = （此页面规则未知） +https-everywhere.toolbar.hint = HTTPS Everywhere 当前已激活。根据每个网站，可点击地址栏中图标启用或禁用该功能。 +https-everywhere.migration.notification0 = 为了部署重要修订，该更新将 HTTPS Everywhere 规则偏好重置为默认值。 +https-everywhere.menu.ruleset-tests = 运行HTTPS Everywhere规则集测试 diff --git a/zh_CN/ssl-observatory.dtd b/zh_CN/ssl-observatory.dtd new file mode 100644 index 0000000..9ef4eb3 --- /dev/null +++ b/zh_CN/ssl-observatory.dtd @@ -0,0 +1,94 @@ + +<!ENTITY ssl-observatory.popup.details "详情与隐私信息"> +<!ENTITY ssl-observatory.popup.later "以后再说"> +<!ENTITY ssl-observatory.popup.no "否"> + +<!ENTITY ssl-observatory.popup.text "通过将接收到的证书 +提交至 Observatory，HTTPS Everywhere 能够检测针对浏览器的攻击。 +是否启用该功能？"> + + + +<!ENTITY ssl-observatory.popup.title +"是否允许 HTTPS Everywhere 使用 SSL Observatory？"> + +<!ENTITY ssl-observatory.popup.yes "是"> + + + +<!ENTITY ssl-observatory.prefs.adv_priv_opts1 +"启用这个功能是安全的，除非你所用的是高侵入性的企业网络："> + +<!ENTITY ssl-observatory.prefs.adv_priv_opts2 +"安全，除非所用的企业网络具有加密的内部网服务器名称："> + +<!ENTITY ssl-observatory.prefs.alt_roots +"提交并检查由非标准根 CA 所签名的证书"> + +<!ENTITY ssl-observatory.prefs.alt_roots_tooltip +"启用此选项是安全（而且有益的），除非所用的是高侵入性的公司网络，或者使用卡巴斯基防病毒软件通过本地 TLS 代理与私有根证书认证方检测互联网浏览行为。对于这样的网络，由于生成的数字证书是唯一的，启用该选项可能将公开通过该代理访问的 https:// 网域名称，因此默认关闭该功能。"> + +<!ENTITY ssl-observatory.prefs.anonymous "通过 Tor 网络进行数字证书的检查，以保护匿名性"> +<!ENTITY ssl-observatory.prefs.anonymous_unavailable +"通过 Tor 网络进行数字证书的检查，以保护匿名性（需要有 Tor）"> +<!ENTITY ssl-observatory.prefs.anonymous_tooltip +"此选项需要已经安装并运行 Tor"> + +<!ENTITY ssl-observatory.prefs.asn +"遇到新的数字证书时，通知 Observatory 当前使用的互联网服务提供商 (ISP)"> + +<!ENTITY ssl-observatory.prefs.asn_tooltip +"这将抓取网络的“自治系统号码”(Autonomous System number)。这将有助于找出对 HTTPS 发动攻击的源头，并判断在攻击相对常见的地区网络上，如伊朗和叙利亚，我们是否具有观测数据。"> + +<!ENTITY ssl-observatory.prefs.show_cert_warning +"当观测站检测到已吊销证书而该证书未被浏览器捕获时，显示警告。"> + +<!ENTITY ssl-observatory.prefs.show_cert_warning_tooltip +"对照证书吊销列表，对提交的证书进行检查。可惜我们无法保证标记每个已吊销证书。如果确实出现警告信息，那么很有可能存在问题。"> + +<!ENTITY ssl-observatory.prefs.done "完成"> + +<!ENTITY ssl-observatory.prefs.explanation +"HTTPS Everywhere 可以使用 EFF 的 SSL 观测站。这有两个功能：(1) 将 HTTPS 数字证书寄送到观测站，以协助我们侦测中间人式的攻击并改善网络的安全性；(2)针对不安全的连接以及对你的浏览器进行的攻击，向你发出警告。"> + + + +<!ENTITY ssl-observatory.prefs.explanation2 + +"例如，在访问 https://www.something.com 时，观测站收到的数字证书显示某人访问了 www.something.com，但不会显示是谁访问了该站点或者浏览了哪些页面。将鼠标移至该选项可了解更多详细信息："> + +<!ENTITY ssl-observatory.prefs.hide "隐藏高级选项"> + +<!ENTITY ssl-observatory.prefs.nonanon +"在没有 Tor 网络的情况下依然检查数字证书"> + +<!ENTITY ssl-observatory.prefs.nonanon_tooltip +"我们仍将尽力确保数据的匿名性，但该选项的安全性较低"> + +<!ENTITY ssl-observatory.prefs.priv_dns +"提交并检查非公开 DNS 名称的数字证书"> + +<!ENTITY ssl-observatory.prefs.priv_dns_tooltip +"除非勾选该选项，否则观测站将不会记录通过 DNS 系统无法解析域名的证书。"> + +<!ENTITY ssl-observatory.prefs.show "显示高级选项"> + +<!ENTITY ssl-observatory.prefs.title "SSL Observatory 首选项"> + +<!ENTITY ssl-observatory.prefs.use "是否使用观测站？"> +<!ENTITY ssl-observatory.warning.title "EFF 的 SSL 观测站发布的警告"> +<!ENTITY ssl-observatory.warning.showcert "显示数字证书链"> +<!ENTITY ssl-observatory.warning.okay "我已了解"> +<!ENTITY ssl-observatory.warning.text "EFF 的 SSL 观测站已对该 HTTPS 数字证书发出警告："> +<!ENTITY ssl-observatory.warning.defense "如果已登录网站，建议使用安全连接修改密码。（这些警告可以在 HTTPS Everywhere 首选项的“SSL Observatory”选项卡中禁用。）"> + +<!ENTITY ssl-observatory.prefs.self_signed +"提交并检查自签名证书"> +<!ENTITY ssl-observatory.prefs.self_signed_tooltip +"我们推荐该选项；在自签名的嵌入式设备中，加密问题尤为常见">

1 0

[stem/master] Test that creating unanonymous hidden services is rejected by tor
by atagar＠torproject.org 06 Jul '17

06 Jul '17

commit 312ad0a02fcc00ce9af3a04f05e0f6b985bcc075 Author: Damian Johnson <atagar(a)torproject.org> Date: Thu Jul 6 09:08:20 2017 -0700 Test that creating unanonymous hidden services is rejected by tor Simple to test. This was asked for on... https://trac.torproject.org/projects/tor/ticket/20245 --- test/integ/control/controller.py | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/test/integ/control/controller.py b/test/integ/control/controller.py index 3b8bde5..06107e8 100644 --- a/test/integ/control/controller.py +++ b/test/integ/control/controller.py @@ -683,6 +683,19 @@ class TestController(unittest.TestCase): controller.remove_ephemeral_hidden_service(response.service_id) @test.require.controller + @test.require.version(Requirement.ADD_ONION) + def test_rejecting_unanonymous_hidden_services_creation(self): + """ + Attempt to create a non-anonymous hidden service despite not setting + HiddenServiceSingleHopMode and HiddenServiceNonAnonymousMode. + """ + + runner = test.runner.get_runner() + + with runner.get_tor_controller() as controller: + self.assertEqual('Tor is in anonymous hidden service mode', str(controller.msg('ADD_ONION NEW:BEST Flags=NonAnonymous Port=4567'))) + + @test.require.controller def test_set_conf(self): """ Exercises set_conf(), reset_conf(), and set_options() methods with valid @@ -1171,6 +1184,7 @@ class TestController(unittest.TestCase): self.assertEqual(desc_by_fingerprint, desc_by_nickname) @test.require.controller + @test.require.online def test_get_server_descriptors(self): """ Fetches a few descriptors via the get_server_descriptors() method. @@ -1194,6 +1208,7 @@ class TestController(unittest.TestCase): # while to do so). count += 1 + if count > 10: break

1 0

[stem/master] Test HiddenServiceNonAnonymousMode and HiddenServiceSingleHopMode must match
by atagar＠torproject.org 06 Jul '17

06 Jul '17

commit d6378fabc7caac3e1362684f98e9b0ad25c87072 Author: Damian Johnson <atagar(a)torproject.org> Date: Thu Jul 6 09:26:20 2017 -0700 Test HiddenServiceNonAnonymousMode and HiddenServiceSingleHopMode must match Another simple ask on https://trac.torproject.org/projects/tor/ticket/20245 --- test/integ/process.py | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) diff --git a/test/integ/process.py b/test/integ/process.py index 10f74a1..a7e2bc3 100644 --- a/test/integ/process.py +++ b/test/integ/process.py @@ -336,6 +336,33 @@ class TestProcess(unittest.TestCase): assert_in('[notice] Configuration file "/path/that/really/shouldnt/exist" not present, using reasonable defaults.', output, 'Missing torrc should be allowed with --ignore-missing-torrc') @asynchronous + def test_unanonymous_hidden_service_config_must_match(tor_cmd): + """ + Checking that startup fails if HiddenServiceNonAnonymousMode and + HiddenServiceSingleHopMode don't match. + """ + + try: + stem.process.launch_tor_with_config( + tor_cmd = tor_cmd, + config = {'HiddenServiceNonAnonymousMode': '1'}, + ) + + raise AssertionError("Tor shouldn't start with 'HiddenServiceNonAnonymousMode' set but not 'HiddenServiceSingleHopMode'") + except OSError as exc: + assert_equal('Process terminated: HiddenServiceNonAnonymousMode does not provide any server anonymity. It must be used with HiddenServiceSingleHopMode set to 1.', str(exc)) + + try: + stem.process.launch_tor_with_config( + tor_cmd = tor_cmd, + config = {'HiddenServiceSingleHopMode': '1'}, + ) + + raise AssertionError("Tor shouldn't start with 'HiddenServiceSingleHopMode' set but not 'HiddenServiceNonAnonymousMode'") + except OSError as exc: + assert_equal('Process terminated: HiddenServiceSingleHopMode does not provide any server anonymity. It must be used with HiddenServiceNonAnonymousMode set to 1.', str(exc)) + + @asynchronous def test_can_run_multithreaded(tor_cmd): """ Our launch_tor() function uses signal to support its timeout argument.

1 0