July 2017 - tor-commits - lists.torproject.org

[webwml/master] Rename browser dev page
by hiro＠torproject.org 27 Jul '17

27 Jul '17

commit 3308e7ed1fff923ec63b4514025a59314105d6c9 Author: hiromipaw <hiro(a)torproject.org> Date: Thu Jul 27 18:18:13 2017 +0200 Rename browser dev page --- .../en/{jobs-browserdeveloper-android.wml => jobs-developerandroid.wml} | 0 about/en/jobs.wml | 2 +- 2 files changed, 1 insertion(+), 1 deletion(-) diff --git a/about/en/jobs-browserdeveloper-android.wml b/about/en/jobs-developerandroid.wml similarity index 100% rename from about/en/jobs-browserdeveloper-android.wml rename to about/en/jobs-developerandroid.wml diff --git a/about/en/jobs.wml b/about/en/jobs.wml index 6a830c77..4f2194ee 100644 --- a/about/en/jobs.wml +++ b/about/en/jobs.wml @@ -19,7 +19,7 @@ <p>Specifically, we're looking for the following people currently:</p> <ul> <li><a href="<page about/jobs-browserdeveloper>">Browser Developer</a></li> - <li><a href="<page about/jobs-browserdeveloper-android>"></a>Browser Developers for Mobile (Android)</li> + <li><a href="<page about/jobs-developerandroid>"></a>Browser Developers for Mobile (Android)</li> </ul>

1 0

[webwml/master] Add android dev job posting
by hiro＠torproject.org 27 Jul '17

27 Jul '17

commit a61317ab9eb34a2d18bde135d39020c9b92190d4 Author: hiromipaw <hiro(a)torproject.org> Date: Thu Jul 27 17:59:15 2017 +0200 Add android dev job posting --- about/en/jobs-browserdeveloper-android.wml | 132 +++++++++++++++++++++++++++++ about/en/jobs.wml | 1 + 2 files changed, 133 insertions(+) diff --git a/about/en/jobs-browserdeveloper-android.wml b/about/en/jobs-browserdeveloper-android.wml new file mode 100644 index 00000000..de73b049 --- /dev/null +++ b/about/en/jobs-browserdeveloper-android.wml @@ -0,0 +1,132 @@ +## translation metadata +# Revision: $Revision: 25666 $ +# Translation-Priority: 3-low + +#include "head.wmi" TITLE="Tor Project: Jobs (browser developer android)" CHARSET="UTF-8" +<div id="content" class="clearfix"> + <div id="breadcrumbs"> + <a href="<page index>">Home » </a> + <a href="<page about/overview>">About » </a> + <a href="<page about/jobs>">Jobs</a> + </div> + <div id="maincol"> +<h1>The Tor Project is looking for two Browser Developers for Mobile (Android)!</h1> +<h2>(Posted 27 Jul 2017)</h2> + +<p> +July 27, 2017 +</p> +<p> +The Tor Project is looking for two Browser Developers for Mobile (Android)! +</p> +<p> +As a mobile browser developer, your job will be to work closely with other members of the Tor Browser development team on Java and C++ patches to our Firefox-based browser, writing new APIs, altering functionality for privacy and security, and making improvements to our collection of Firefox add-ons (JavaScript code). Being a Tor Browser developer includes triaging, diagnosing, and fixing bugs; looking for and resolving web privacy issues; responding on short notice to urgent security issues; and working collaboratively with coworkers and volunteers to implement new features and web behavior changes. We also need help making our code more maintainable, testable, and mergeable by upstream. The person in this position will also review other people's code, designs, and academic research papers to make suggestions for improvement. +</p> +<p> +This is a full-time position. +</p> + +<h2>Required Qualifications:</h2> +<ul> + <li> + Experience in C++ (and ideally, JavaScript). Five years of C++ experience is probably necessary for the level of expertise we want, though some of these years can be replaced with other Object Oriented Programming and/or C experience. If you meet this level of experience with C++/OOP, JavaScript can be learned on the job. + </li> + <li> + Multiple years worth of experience with Java programming, though similar equivalent OOP experience is also acceptable. + </li> + <li> + Possess a solid understanding of issues surrounding secure C++ programming and reference counted memory (at least to the level of avoiding issues). + </li> + <li> + Be comfortable diving into new, unfamiliar codebases, looking for ways to alter and augment their functionality in specific, goal-oriented ways. + </li> + <li> + Be familiar with web technologies and how the web works, especially the same-origin model and web tracking. + </li> + <li> + Willingness and ability to justify and document technical decisions for a public, world-wide technical audience. + </li> + <li> + Be comfortable working remotely with a geographically distributed team. + </li> + <li> + Experience interacting with users and other developers online, including experience being confronted with differing ideas and opinions (not always in a nice manner), while maintaining a high level of professionalism. + </li> + <li> + Comfort with transparency: as a non-profit organization who develops open source software, almost everything we do is public, including your name (or at least your business name) and possibly salary information. + </li> +</ul> + +<h2>Preferred qualifications:</h2> +<ul> + </li> + <li> + Familiarity and/or experience with writing add-ons and/or patches for Mozilla Firefox or other web browsers. + </li> + <li> + Familiarity with developing and distributing software for the Android platform. + </li> + <li> + Familiarity with Firefox's internal architecture, including its use of multiple processes and sandboxing. + </li> + <li> + Be intensely creative yet also ruthlessly pragmatic in your thinking. + </li> + <li> + Possess knowledge/familiarity of probability, statistics, and information theory. + </li> + <li> + Know enough about networking to be able to visualize what HTTP 1.1 looks like on the wire while encapsulated within Tor's network protocol. + </li> + <li> + Experience working with distributed (remote) teams across different time-zones with people of differing skill levels over multiple mediums, including email, instant messaging, and IRC. + </li> + <li> + Open-source experience: contributed significant chunks of code to multiple open-source projects in the past. + </li> + <li> + Familiarity with distributed version control systems, including Git. + </li> + <li> + Genuinely be excited about Tor and its values! + </li> +</ul> +<p> +For a more detailed understanding of the full breadth and depth of the work you'd be doing, have a look at The Design and Implementation of the Tor Browser, especially The Design Requirements section at <a href="https://www.torproject.org/projects/torbrowser/design/#DesignRequirements">https://www.torproject.org/projects/torbrowser/design/#DesignRequirements</a>. +</p> +<h2> +Other notes: +</h2> +<p> +Academic degrees are great, but not required if you have the right experience! +</p> +<p> +The team coordinates via IRC, email, and bug trackers. This position may be performed remotely, but we would be happy to provide a desk at our office in Seattle, Washington. We also have informal shared workspace arrangements in NYC and San Francisco. +</p> +<p> +The Tor Project, Inc., is a 501(c)(3) non-profit organization that provides the technical infrastructure for privacy protection over the Internet. With paid staff and contractors of around 30 technologists and operational support people, plus many volunteers all over the world who contribute to our work, the Tor Project is funded in part by government grants and contracts, as well as by individual, foundation, and corporate donations. We only write free and open source software, and we don't believe in software patents. +</p> +<p> +The Tor Project has a competitive benefits package, including a generous PTO policy; 14 paid holidays per year (including the week between Christmas and New Year's, when the office is closed); health, vision, dental, disability, and life insurance paid in full for employee; flexible work schedule; and occasional travel opportunities. +</p> +<p> +The Tor Project, Inc., is an equal opportunity, affirmative action employer. +</p> +<h2> +To apply: +</h2> +<p> +Please email a PDF of your resume/CV, and a cover letter explaining how your qualifications and experience meet the requirements of this job description, including why you want to work on Tor. Email should be sent to hr at torproject.org with "Browser Developer" in the subject line. +Link to at least one of your code samples (ideally, more than one and all of which we will presume you are authorized to disclose). No phone calls, please! +</p> + + </div> +  + <div id = "sidecol"> +#include "side.wmi" +#include "info.wmi" + </div> +  +</div> + +#include <foot.wmi> diff --git a/about/en/jobs.wml b/about/en/jobs.wml index d4556941..6a830c77 100644 --- a/about/en/jobs.wml +++ b/about/en/jobs.wml @@ -19,6 +19,7 @@ <p>Specifically, we're looking for the following people currently:</p> <ul> <li><a href="<page about/jobs-browserdeveloper>">Browser Developer</a></li> + <li><a href="<page about/jobs-browserdeveloper-android>"></a>Browser Developers for Mobile (Android)</li> </ul>

1 0

[tor/master] Merge branch 'bug22895_027'
by nickm＠torproject.org 27 Jul '17

27 Jul '17

commit c2844d5377dcfddbac45d22376548ccae61cbc7c Merge: b387dd364 89c0a00a9 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Jul 27 11:27:07 2017 -0400 Merge branch 'bug22895_027' changes/ticket22895 | 3 +++ src/ext/ed25519/donna/curve25519-donna-sse2.h | 7 ------- 2 files changed, 3 insertions(+), 7 deletions(-)

1 0

[tor/master] Remove unused variables in donna's SSE2 code
by nickm＠torproject.org 27 Jul '17

27 Jul '17

commit 89c0a00a9ac12082970d4e5752d4392fd03c95f3 Author: cypherpunks <cypherpunks(a)torproject.org> Date: Wed Jul 12 16:33:01 2017 +0000 Remove unused variables in donna's SSE2 code Fixes unused-const-variable warnings with GCC on 32-bit x86 systems. Closes #22895. --- changes/ticket22895 | 3 +++ src/ext/ed25519/donna/curve25519-donna-sse2.h | 7 ------- 2 files changed, 3 insertions(+), 7 deletions(-) diff --git a/changes/ticket22895 b/changes/ticket22895 new file mode 100644 index 000000000..a3f7b8601 --- /dev/null +++ b/changes/ticket22895 @@ -0,0 +1,3 @@ + o Minor bugfixes (compilation): + - Fix unused variable warnings in donna's Curve25519 SSE2 code. + Fixes bug 22895; bugfix on 0.2.7.2-alpha. diff --git a/src/ext/ed25519/donna/curve25519-donna-sse2.h b/src/ext/ed25519/donna/curve25519-donna-sse2.h index 1dbfd44d8..1123cb1e9 100644 --- a/src/ext/ed25519/donna/curve25519-donna-sse2.h +++ b/src/ext/ed25519/donna/curve25519-donna-sse2.h @@ -29,26 +29,19 @@ typedef packedelem32 packed32bignum25519[5]; typedef packedelem64 packed64bignum25519[10]; static const packedelem32 bot32bitmask = {{0xffffffff, 0x00000000, 0xffffffff, 0x00000000}}; -static const packedelem32 top32bitmask = {{0x00000000, 0xffffffff, 0x00000000, 0xffffffff}}; static const packedelem32 top64bitmask = {{0x00000000, 0x00000000, 0xffffffff, 0xffffffff}}; static const packedelem32 bot64bitmask = {{0xffffffff, 0xffffffff, 0x00000000, 0x00000000}}; /* reduction masks */ static const packedelem64 packedmask26 = {{0x03ffffff, 0x03ffffff}}; static const packedelem64 packedmask25 = {{0x01ffffff, 0x01ffffff}}; -static const packedelem32 packedmask2625 = {{0x3ffffff,0,0x1ffffff,0}}; static const packedelem32 packedmask26262626 = {{0x03ffffff, 0x03ffffff, 0x03ffffff, 0x03ffffff}}; static const packedelem32 packedmask25252525 = {{0x01ffffff, 0x01ffffff, 0x01ffffff, 0x01ffffff}}; /* multipliers */ static const packedelem64 packednineteen = {{19, 19}}; -static const packedelem64 packednineteenone = {{19, 1}}; static const packedelem64 packedthirtyeight = {{38, 38}}; static const packedelem64 packed3819 = {{19*2,19}}; -static const packedelem64 packed9638 = {{19*4,19*2}}; - -/* 121666,121665 */ -static const packedelem64 packed121666121665 = {{121666, 121665}}; /* 2*(2^255 - 19) = 0 mod p */ static const packedelem32 packed2p0 = {{0x7ffffda,0x3fffffe,0x7fffffe,0x3fffffe}};

1 0

[translation/torbutton-torbuttondtd] Update translations for torbutton-torbuttondtd
by translation＠torproject.org 27 Jul '17

27 Jul '17

commit f2ae5838ffa333a6081d015b9892d6b4fe3db336 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Jul 27 13:47:19 2017 +0000 Update translations for torbutton-torbuttondtd --- zh_CN/torbutton.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/zh_CN/torbutton.dtd b/zh_CN/torbutton.dtd index 6937986ab..b153d8fb2 100644 --- a/zh_CN/torbutton.dtd +++ b/zh_CN/torbutton.dtd @@ -30,7 +30,7 @@ <!ENTITY torbutton.prefs.restrict_thirdparty_tooltip "该选项用于防止滥用浏览器功能跟踪用户。修改的功能包括：blob 网址，广播通道，浏览器缓存，cookie，收藏夹图标，HTTP 验证头部，预连接，localStorage，mediaSource 网址，OCSP 请求，SharedWorker 和 TLS 会话票证。"> <!ENTITY torbutton.prefs.resist_fingerprinting "修改 Tor 浏览器中可区分你与其他 Tor 用户的细节信息"> <!ENTITY torbutton.prefs.resist_fingerprinting.accesskey "F"> -<!ENTITY torbutton.prefs.resist_fingerprinting_tooltip "Keep this box checked to hide things from websites that could be unique about you, including your computer performance, keyboard layout, locale, the location of installed plugins, the list of installed plugins, your network status, screen orientation, screen size, site-specific zoom levels, supported file types, system colors, and WebGL capabilities."> +<!ENTITY torbutton.prefs.resist_fingerprinting_tooltip "选中此框以避免网站获取识别您的指纹，包括您的计算机性能、键盘布局、语言区域、已安装插件位置、已安装插件列表、您的网络状态、屏幕方向、屏幕尺寸、特定网站缩放级别、支持的文件类型、系统颜色、WebGL 能力。"> <!ENTITY torbutton.prefs.sec_caption "安全等级"> <!ENTITY torbutton.prefs.sec_caption_tooltip "安全滑块可禁用某些浏览器功能，避免因这些功能导致的漏洞而受到攻击。"> <!ENTITY torbutton.prefs.sec_low "低（默认）">

1 0

[metrics-web/master] Use newly recognized OnionPerf keys.
by karsten＠torproject.org 27 Jul '17

27 Jul '17

commit f6d0bb9615d31c9e530451132f3d8d8b5572e2cd Author: Karsten Loesing <karsten.loesing(a)gmx.net> Date: Wed May 17 16:54:43 2017 +0200 Use newly recognized OnionPerf keys. Implements #22288. --- .../main/java/org/torproject/metrics/onionperf/Main.java | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/modules/onionperf/src/main/java/org/torproject/metrics/onionperf/Main.java b/modules/onionperf/src/main/java/org/torproject/metrics/onionperf/Main.java index 802e4ef..23cc424 100644 --- a/modules/onionperf/src/main/java/org/torproject/metrics/onionperf/Main.java +++ b/modules/onionperf/src/main/java/org/torproject/metrics/onionperf/Main.java @@ -166,16 +166,16 @@ public class Main { } else { psMeasurementsInsert.setInt(31, tr.getUsedBy()); } - String[] unrecognizedKeys = new String[] { "ENDPOINTLOCAL", - "ENDPOINTPROXY", "ENDPOINTREMOTE", "HOSTNAMELOCAL", - "HOSTNAMEREMOTE", "SOURCEADDRESS" }; - for (int i = 32, j = 0; j < unrecognizedKeys.length; i++, j++) { - if (null == tr.getUnrecognizedKeys() - || !tr.getUnrecognizedKeys().containsKey(unrecognizedKeys[j])) { + String[] onionPerfStrings = new String[] { + tr.getEndpointLocal(), tr.getEndpointProxy(), + tr.getEndpointRemote(), tr.getHostnameLocal(), + tr.getHostnameRemote(), tr.getSourceAddress() }; + for (int i = 32, j = 0; j < onionPerfStrings.length; i++, j++) { + if (null == onionPerfStrings[j]) { psMeasurementsInsert.setNull(i, Types.VARCHAR); } else { - psMeasurementsInsert.setString(i, truncateString( - tr.getUnrecognizedKeys().get(unrecognizedKeys[j]), 64)); + psMeasurementsInsert.setString(i, + truncateString(onionPerfStrings[j], 64)); } } psMeasurementsInsert.execute();

1 0

[tor/maint-0.3.0] Merge branch 'maint-0.2.9' into maint-0.3.0
by nickm＠torproject.org 27 Jul '17

27 Jul '17

commit ad35e595e5070b16ad034315b5082d734f71f181 Merge: 7021d33b9 24ddf5862 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Jul 27 08:23:36 2017 -0400 Merge branch 'maint-0.2.9' into maint-0.3.0 changes/bug20247 | 4 ++++ src/common/sandbox.c | 8 ++++++++ 2 files changed, 12 insertions(+)

1 0

[tor/maint-0.3.0] Allow setsockopt(IPV6_V6ONLY) in sandbox.
by nickm＠torproject.org 27 Jul '17

27 Jul '17

commit 16d2bce89310d68804bacabf5e87a90e8f7322af Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Jul 5 13:09:21 2017 -0400 Allow setsockopt(IPV6_V6ONLY) in sandbox. Fixes bug 20247. We started setting V6ONLY in 0.2.3.13-alpha and added the sandbox on 0.2.5.1-alpha. --- changes/bug20247 | 4 ++++ src/common/sandbox.c | 8 ++++++++ 2 files changed, 12 insertions(+) diff --git a/changes/bug20247 b/changes/bug20247 new file mode 100644 index 000000000..731cf0046 --- /dev/null +++ b/changes/bug20247 @@ -0,0 +1,4 @@ + o Minor bugfixes (linux seccomp2 sandbox): + - Avoid a sandbox failure when trying to re-bind to a socket and mark + it as IPv6-only. Fixes bug 20247; bugfix on 0.2.5.1-alpha. + diff --git a/src/common/sandbox.c b/src/common/sandbox.c index da96ad824..7f4511db2 100644 --- a/src/common/sandbox.c +++ b/src/common/sandbox.c @@ -728,6 +728,14 @@ sb_setsockopt(scmp_filter_ctx ctx, sandbox_cfg_t *filter) return rc; #endif +#ifdef IPV6_V6ONLY + rc = seccomp_rule_add_2(ctx, SCMP_ACT_ALLOW, SCMP_SYS(setsockopt), + SCMP_CMP(1, SCMP_CMP_EQ, IPPROTO_IPV6), + SCMP_CMP(2, SCMP_CMP_EQ, IPV6_V6ONLY)); + if (rc) + return rc; +#endif + return 0; }

1 0

[tor/maint-0.3.0] Merge remote-tracking branch 'public/bug20247_029' into maint-0.2.9
by nickm＠torproject.org 27 Jul '17

27 Jul '17

commit 24ddf5862e8582a903860a8fe4a1b4a63153f40f Merge: f17f7a4fd 16d2bce89 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Jul 27 08:23:34 2017 -0400 Merge remote-tracking branch 'public/bug20247_029' into maint-0.2.9 changes/bug20247 | 4 ++++ src/common/sandbox.c | 8 ++++++++ 2 files changed, 12 insertions(+)

1 0

[tor/maint-0.2.9] Merge remote-tracking branch 'public/bug20247_029' into maint-0.2.9
by nickm＠torproject.org 27 Jul '17

27 Jul '17

commit 24ddf5862e8582a903860a8fe4a1b4a63153f40f Merge: f17f7a4fd 16d2bce89 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Jul 27 08:23:34 2017 -0400 Merge remote-tracking branch 'public/bug20247_029' into maint-0.2.9 changes/bug20247 | 4 ++++ src/common/sandbox.c | 8 ++++++++ 2 files changed, 12 insertions(+)

1 0