July 2017 - tor-commits - lists.torproject.org

[translation/torbutton-aboutdialogdtd] Update translations for torbutton-aboutdialogdtd
by translation＠torproject.org 31 Jul '17

31 Jul '17

commit 2d8fcbb68dc8b0936afa044a7ec9dc30fe0fe8ac Author: Translation commit bot <translation(a)torproject.org> Date: Mon Jul 31 01:18:10 2017 +0000 Update translations for torbutton-aboutdialogdtd --- lo/aboutdialog.dtd | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/lo/aboutdialog.dtd b/lo/aboutdialog.dtd index 5099ad74b..cf784061c 100644 --- a/lo/aboutdialog.dtd +++ b/lo/aboutdialog.dtd @@ -1,19 +1,19 @@ -<!ENTITY project.start "&brandShortName; is developed by "> +<!ENTITY project.start "&brandShortName; ພັດທະນາ ໂດຍ ">  -<!ENTITY project.tpoLink "the &vendorShortName;"> -<!ENTITY project.end ", a nonprofit working to defend your privacy and freedom online."> +<!ENTITY project.tpoLink " &vendorShortName;"> +<!ENTITY project.end ", ການເຮັດວຽກທີ່ບໍ່ຫວັງຜົນປະໂຫຽດ ເປັນການປ້ອງກັນຄວາມເປັນສ່ວນຕົວ ແລະ ອິດສະຫຼະພາບ ທາງອອນລາຍ."> -<!ENTITY help.start "Want to help? "> +<!ENTITY help.start "ຕ້ອງການຄວາມຊ່ວຍເຫຼືອບໍ່?">  -<!ENTITY help.donateLink "Donate"> -<!ENTITY help.or " or "> +<!ENTITY help.donateLink "ບໍລິຈາກ"> +<!ENTITY help.or "ຫຼື">  -<!ENTITY help.getInvolvedLink "get involved"> +<!ENTITY help.getInvolvedLink "ທີ່ມີສ່ວນກ່ຽວຂ້ອງ"> <!ENTITY help.end "!">  -<!ENTITY bottomLinks.questions "Questions?"> +<!ENTITY bottomLinks.questions "ມີຄຳຖາມບໍ່?">  -<!ENTITY bottomLinks.grow "Help the Tor Network Grow!"> +<!ENTITY bottomLinks.grow "ຊ່ອຍໃຫ້ ເຄືອຂ່າຍ Tor ໃຫຍ່ຂຶ້ນ!">  -<!ENTITY bottomLinks.license "Licensing Information"> -<!ENTITY tor.TrademarkStatement "'Tor' and the 'Onion Logo' are registered trademarks of the Tor Project, Inc."> +<!ENTITY bottomLinks.license "ຂໍ້ມູນກ່ຽວກັບອະນຸຍາດ"> +<!ENTITY tor.TrademarkStatement "'Tor' ແລະ 'ເຄື່ອງໝາຍ Onion'ເປັນເຄື່ອງໝາຍການຄ້າ ທີ່ຈົດທະບຽນຂອງ ໂຄງການ Tor.">

1 0

[webwml/master] Fix small typo in press page
by hiro＠torproject.org 29 Jul '17

29 Jul '17

commit 0165d33168e46b2111bdcf7b27136e99e82a8e27 Author: hiromipaw <hiro(a)torproject.org> Date: Sat Jul 29 22:10:05 2017 +0200 Fix small typo in press page --- press/en/press.wml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/press/en/press.wml b/press/en/press.wml index 2fd58919..7d0ac691 100644 --- a/press/en/press.wml +++ b/press/en/press.wml @@ -65,7 +65,7 @@ some of the significant Tor-related stories that have popped up.</p> <tr style=""> <td>2017 Apr 25</td> <td>TechCrunch</td> -<tr><a href="https://techcrunch.com/2017/04/25/tor-project-funding-3-3-million-2015/">Funding for the Tor Project reached a record $3.3 million in 2015</a></td> +<td><a href="https://techcrunch.com/2017/04/25/tor-project-funding-3-3-million-2015/">Funding for the Tor Project reached a record $3.3 million in 2015</a></td> </tr> <tr style="background-color: #e5e5e5;">

1 0

[webwml/master] Update press release
by hiro＠torproject.org 29 Jul '17

29 Jul '17

commit 2b7d8f2314c67ad5711a3863ca77d56aaf8debde Author: hiromipaw <hiro(a)torproject.org> Date: Sat Jul 29 22:02:40 2017 +0200 Update press release --- press/en/press.wml | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) diff --git a/press/en/press.wml b/press/en/press.wml index 6b31e1ae..2fd58919 100644 --- a/press/en/press.wml +++ b/press/en/press.wml @@ -50,6 +50,36 @@ some of the significant Tor-related stories that have popped up.</p> </tr> </thead> +<tr style=""> +<td>2017 Jul 20</td> +<td>Venture Beat</td> +<td><a href="https://venturebeat.com/2017/07/20/the-tor-project-launches-its-first-publi…">Tor Project Opens Bug The Tor Project launches its first public bug bounty program through HackerOne</a></td> +</tr> + +<tr style="background-color: #e5e5e5;"> +<td>2017 May 19</td> +<td>BestVPN</td> +<td><a href="https://www.bestvpn.com/best-free-utilities/">Best Free Utilities for Your Computer</a></td> +</tr> + +<tr style=""> +<td>2017 Apr 25</td> +<td>TechCrunch</td> +<tr><a href="https://techcrunch.com/2017/04/25/tor-project-funding-3-3-million-2015/">Funding for the Tor Project reached a record $3.3 million in 2015</a></td> +</tr> + +<tr style="background-color: #e5e5e5;"> +<td>2017 Feb 9</td> +<td>Forbes</td> +<td><a href="https://www.forbes.com/sites/leemathews/2017/02/09/tor-projects-new-mobile-…">Tor Project's New Mobile App Alerts You To Internet Surveillance And Censorship</a></td> +</tr> + +<tr style=""> +<td>2017 Jan 17</td> +<td>Macworld</td> +<td><a href="http://www.macworld.com/article/3152823/security/anonymous-browsing-with-to…">Anonymous browsing with Tor reduces exposure</a></td> +</tr> + <tr style="background-color: #e5e5e5;"> <td>2016 Sep 19</td> <td>The Guardian</td>

1 0

[translation/tor-messenger-authproperties] Update translations for tor-messenger-authproperties
by translation＠torproject.org 29 Jul '17

29 Jul '17

commit 5307d02f89f3b62c47795d6762901d15cecead3d Author: Translation commit bot <translation(a)torproject.org> Date: Sat Jul 29 07:48:32 2017 +0000 Update translations for tor-messenger-authproperties --- ko/auth.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ko/auth.properties b/ko/auth.properties index 237b450c5..98e94448a 100644 --- a/ko/auth.properties +++ b/ko/auth.properties @@ -1,6 +1,6 @@ auth.title=%S의 신원 확인 auth.yourFingerprint=당신을 위한 지문, %S:\n%S -auth.theirFingerprint=Purported fingerprint for %S:\n%S +auth.theirFingerprint=%S 대한 알려진 지문:\n%S auth.help=Verifying a contact's identity helps ensure that the person you are talking to is who they claim to be. auth.helpTitle=검증 도움 auth.question=This is the question asked by your contact:\n\n%S\n\nEnter secret answer here (case sensitive):

1 0

[sandboxed-tor-browser/master] Bug 23058: Apply the SelfRando workaround to 7.5a3 as well.
by yawning＠torproject.org 28 Jul '17

28 Jul '17

commit 2262bf1843129feddb7a913b15ef6298be71f4c1 Author: Yawning Angel <yawning(a)schwanenlied.me> Date: Fri Jul 28 17:56:41 2017 +0000 Bug 23058: Apply the SelfRando workaround to 7.5a3 as well. The browser people apparently didn't update SelfRando, so the workaround for the syscall stupiditiy is still needed. --- ChangeLog | 1 + src/cmd/sandboxed-tor-browser/internal/sandbox/application.go | 5 ++++- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index bc20c39..832f019 100644 --- a/ChangeLog +++ b/ChangeLog @@ -3,6 +3,7 @@ Changes in version 0.0.12 - UNRELEASED: * Bug 22984: Force IDNs to be displayed as punycode to thwart homograph attacks. * Bug 22967: Force disable crashdump reporting. + * Bug 23058: Apply the SelfRando workaround to 7.5a3 as well. * Default disable `dom.securecontext.whitelist_onions`. Changes in version 0.0.11 - 2017-07-18: diff --git a/src/cmd/sandboxed-tor-browser/internal/sandbox/application.go b/src/cmd/sandboxed-tor-browser/internal/sandbox/application.go index 54d64aa..bb44e39 100644 --- a/src/cmd/sandboxed-tor-browser/internal/sandbox/application.go +++ b/src/cmd/sandboxed-tor-browser/internal/sandbox/application.go @@ -71,11 +71,14 @@ func RunTorBrowser(cfg *config.Config, manif *config.Manifest, tor *tor.Tor) (pr h.fakeDbus = true h.mountProc = false - if manif.Channel == "alpha" && !manif.BundleVersionAtLeast("7.5a3") { + if manif.Channel == "alpha" && !manif.BundleVersionAtLeast("7.5a4") { // SelfRando prior to c619441e1ceec3599bc81bf9bbaf4d17c68b54b7 has a // bug in how it handles system call return values, leading to a // infinite loop if `/proc/self/environ` doesn't exist. // + // Despite the fix for this being available upstream, the browser + // people didn't pull it in for the 7.5a3 release. + // // See: https://trac.torproject.org/projects/tor/ticket/22853 Debugf("sandbox: SelfRando /proc/self/environ workaround enabled") h.file("/proc/self/environ", []byte{})

1 0

[tor-browser-build/master] Update noscript
by boklm＠torproject.org 28 Jul '17

28 Jul '17

commit 867ebd59598ae3a77d84c21d008b2c6debec372b Author: Nicolas Vigier <boklm(a)torproject.org> Date: Fri Jul 28 19:04:43 2017 +0200 Update noscript This fixes bug 22067. tor-browser-bundle.git author: Georg Koppen <gk(a)torproject.org> tor-browser-bundle.git commit: 0437834017c1c7ff168da868d9dcb2f2519fd122 --- projects/tor-browser/config | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/projects/tor-browser/config b/projects/tor-browser/config index 8e8398a..fef279b 100644 --- a/projects/tor-browser/config +++ b/projects/tor-browser/config @@ -54,9 +54,9 @@ input_files: name: snowflake enable: '[% c("var/snowflake") %]' - filename: Bundle-Data - - URL: https://addons.cdn.mozilla.net/user-media/addons/722/noscript_security_suit… + - URL: https://addons.cdn.mozilla.net/user-media/addons/722/noscript_security_suit… name: noscript - sha256sum: bf1dee39f6e5936df2b03b794c1efc9236b440536a05fafcff667e33903e6aed + sha256sum: fe85a4c72b5a763462f3b264f54a0ef1c6f6879eb95d903f2dfee337f768a50b - filename: RelativeLink enable: '[% c("var/linux") %]' - project: libdmg-hfsplus

1 0

[tor-browser-bundle/maint-7.0] Updating NoScript
by gk＠torproject.org 28 Jul '17

28 Jul '17

commit 12565f000a09b27b7dbd9ea864c5004b6d8324a9 Author: Georg Koppen <gk(a)torproject.org> Date: Fri Jul 28 16:21:20 2017 +0000 Updating NoScript This fixes bug 22067. --- gitian/versions | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gitian/versions b/gitian/versions index 108d085..873aa7f 100755 --- a/gitian/versions +++ b/gitian/versions @@ -67,7 +67,7 @@ YASM_VER=1.2.0 ## File names for the source packages OPENSSL_PACKAGE=openssl-${OPENSSL_VER}.tar.gz GMP_PACKAGE=gmp-${GMP_VER}.tar.bz2 -NOSCRIPT_PACKAGE=noscript_security_suite-5.0.5-fx+sm.xpi +NOSCRIPT_PACKAGE=noscript_security_suite-5.0.7.1-fx+sm.xpi CCTOOLS_PACKAGE=cctools.tar.gz OSXSDK_PACKAGE=MacOSX10.7.sdk.tar.gz MSVCR100_PACKAGE=msvcr100.dll @@ -102,7 +102,7 @@ YASM_PACKAGE=yasm-${YASM_VER}.tar.gz OPENSSL_HASH=6b3977c61f2aedf0f96367dcfb5c6e578cf37e7b8d913b4ecb6643c3cb88d8c0 GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf -NOSCRIPT_HASH=bf1dee39f6e5936df2b03b794c1efc9236b440536a05fafcff667e33903e6aed +NOSCRIPT_HASH=fe85a4c72b5a763462f3b264f54a0ef1c6f6879eb95d903f2dfee337f768a50b CCTOOLS_HASH=e908fdebc2886ee5491ebfc7e7950af451b3c4e2439c2d7a923ed06ad05113e4 MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067 PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c

1 0

[tor-browser-bundle/master] Updating Noscript
by gk＠torproject.org 28 Jul '17

28 Jul '17

commit 0437834017c1c7ff168da868d9dcb2f2519fd122 Author: Georg Koppen <gk(a)torproject.org> Date: Fri Jul 28 16:19:01 2017 +0000 Updating Noscript This fixes bug 22067. --- gitian/versions.alpha | 4 ++-- gitian/versions.nightly | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/gitian/versions.alpha b/gitian/versions.alpha index ee7384c..a29572a 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -77,7 +77,7 @@ ELFUTILS_VER=0.166 ## File names for the source packages OPENSSL_PACKAGE=openssl-${OPENSSL_VER}.tar.gz GMP_PACKAGE=gmp-${GMP_VER}.tar.bz2 -NOSCRIPT_PACKAGE=noscript_security_suite-5.0.5-fx+sm.xpi +NOSCRIPT_PACKAGE=noscript_security_suite-5.0.7.1-fx+sm.xpi CCTOOLS_PACKAGE=cctools.tar.gz OSXSDK_PACKAGE=MacOSX10.7.sdk.tar.gz MSVCR100_PACKAGE=msvcr100.dll @@ -113,7 +113,7 @@ ELFUTILS_PACKAGE=elfutils-${ELFUTILS_VER}.tar.bz2 OPENSSL_HASH=6b3977c61f2aedf0f96367dcfb5c6e578cf37e7b8d913b4ecb6643c3cb88d8c0 GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf -NOSCRIPT_HASH=bf1dee39f6e5936df2b03b794c1efc9236b440536a05fafcff667e33903e6aed +NOSCRIPT_HASH=fe85a4c72b5a763462f3b264f54a0ef1c6f6879eb95d903f2dfee337f768a50b CCTOOLS_HASH=e908fdebc2886ee5491ebfc7e7950af451b3c4e2439c2d7a923ed06ad05113e4 MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067 PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c diff --git a/gitian/versions.nightly b/gitian/versions.nightly index 5fe2881..e050347 100755 --- a/gitian/versions.nightly +++ b/gitian/versions.nightly @@ -80,7 +80,7 @@ ELFUTILS_VER=0.166 ## File names for the source packages OPENSSL_PACKAGE=openssl-${OPENSSL_VER}.tar.gz GMP_PACKAGE=gmp-${GMP_VER}.tar.bz2 -NOSCRIPT_PACKAGE=noscript_security_suite-5.0.5-fx+sm.xpi +NOSCRIPT_PACKAGE=noscript_security_suite-5.0.7.1-fx+sm.xpi CCTOOLS_PACKAGE=cctools.tar.gz OSXSDK_PACKAGE=MacOSX10.7.sdk.tar.gz MSVCR100_PACKAGE=msvcr100.dll @@ -116,7 +116,7 @@ ELFUTILS_PACKAGE=elfutils-${ELFUTILS_VER}.tar.bz2 OPENSSL_HASH=ce07195b659e75f4e1db43552860070061f156a98bb37b672b101ba6e3ddf30c GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf -NOSCRIPT_HASH=bf1dee39f6e5936df2b03b794c1efc9236b440536a05fafcff667e33903e6aed +NOSCRIPT_HASH=fe85a4c72b5a763462f3b264f54a0ef1c6f6879eb95d903f2dfee337f768a50b CCTOOLS_HASH=e908fdebc2886ee5491ebfc7e7950af451b3c4e2439c2d7a923ed06ad05113e4 MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067 PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c

1 0

[stem/master] Disable sockstat integ test
by atagar＠torproject.org 28 Jul '17

28 Jul '17

commit d0d127ba5fb9b76cad3e7393c00bf3d4d2ae35be Author: Damian Johnson <atagar(a)torproject.org> Date: Fri Jul 28 08:56:36 2017 -0700 Disable sockstat integ test Test is failing on our Jenkins hosts and I'm pretty stumped about why. We'll drop sockstat in 2.0.0 unless fixed... https://trac.torproject.org/projects/tor/ticket/23057 --- stem/util/connection.py | 4 ++++ test/integ/util/connection.py | 3 --- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/stem/util/connection.py b/stem/util/connection.py index 91608538..464a9ca1 100644 --- a/stem/util/connection.py +++ b/stem/util/connection.py @@ -35,6 +35,10 @@ Connection and networking based utility functions. .. versionchanged:: 1.6.0 Added **BSD_FSTAT**. + .. deprecated:: 1.6.0 + The SOCKSTAT connection resolver is proving to be unreliable + (:trac:`23057`), and will be dropped in the 2.0.0 release unless fixed. + ==================== =========== Resolver Description ==================== =========== diff --git a/test/integ/util/connection.py b/test/integ/util/connection.py index bda9a414..19ba1996 100644 --- a/test/integ/util/connection.py +++ b/test/integ/util/connection.py @@ -51,9 +51,6 @@ class TestConnection(unittest.TestCase): def test_connections_by_lsof(self): self.check_resolver(Resolver.LSOF) - def test_connections_by_sockstat(self): - self.check_resolver(Resolver.SOCKSTAT) - def test_connections_by_bsd_sockstat(self): self.check_resolver(Resolver.BSD_SOCKSTAT)

1 0

[tor/master] Bug 23055: cast, then multiply when doing u32*u32->u64.
by nickm＠torproject.org 28 Jul '17

28 Jul '17

commit 769a94d9ce570b9418ab8705dc95c99f9b8c2251 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Jul 28 10:31:12 2017 -0400 Bug 23055: cast, then multiply when doing u32*u32->u64. No backport, since this bug won't trigger until people make certificates expiring after the Y2106 deadline. CID 1415728 --- changes/bug23055 | 4 ++++ src/or/torcert.c | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/changes/bug23055 b/changes/bug23055 new file mode 100644 index 000000000..eee1397c1 --- /dev/null +++ b/changes/bug23055 @@ -0,0 +1,4 @@ + o Minor bugfixes (certificate handling): + - Fix a time handling bug in Tor certificates set to expire after + the year 2106. Fixes bug 23055; bugfix on 0.3.0.1-alpha. + Found by Coverity as CID 1415728. diff --git a/src/or/torcert.c b/src/or/torcert.c index 658e620ca..69b157446 100644 --- a/src/or/torcert.c +++ b/src/or/torcert.c @@ -393,7 +393,7 @@ rsa_ed25519_crosscert_check(const uint8_t *crosscert, } const uint32_t expiration_date = rsa_ed_crosscert_get_expiration(cc); - const uint64_t expiration_time = expiration_date * 3600; + const uint64_t expiration_time = ((uint64_t)expiration_date) * 3600; if (reject_if_expired_before < 0 || expiration_time < (uint64_t)reject_if_expired_before) {

1 0