tor-commits March 2018

tor-commits@lists.torproject.org

15 participants
1430 discussions

[webwml/staging] Initial 'Python Tor Client' project idea
by arma＠torproject.org 29 Mar '18

29 Mar '18

commit a473e559a0630c89f18eb51f5afe2c4777c0a625 Author: Damian Johnson <atagar(a)torproject.org> Date: Fri Feb 23 12:13:44 2018 -0800 Initial 'Python Tor Client' project idea Posting the SoP project Tim and I have been brainstorming. This is just the first draft - I still need to run this by Tim and hopefully come up with more ideas on subtasks. --- getinvolved/en/volunteer.wml | 36 ++++++++++++++++++++++++++++++++++++ 1 file changed, 36 insertions(+) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index 0b70289b..ff05c1a1 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -519,6 +519,11 @@ meetings around the world.</li> Tor. + + Project Ideas: + <a href="#pythonTorClient">Python Tor Client</a> + + <a id="project-txtorcon"></a> <h3><a href="https://txtorcon.readthedocs.io/en/latest/">Txtorcon</a> (<a href="https://github.com/meejah/txtorcon">code</a>, <a @@ -730,6 +735,37 @@ meetings around the world.</li> <ol> #Keep old ids in case of incoming links. + <a id="pythonTorClient"></a><a id="pythonTorClient"></a> + <li> + Python Tor Client + + Language: Python + + Likely Mentors: Damian (atagar), Tim (teor) + + +<a href="https://stem.torproject.org/">Stem</a> is our Python implementation of Tor's varous protocols. Traditionally this included <a href="https://stem.torproject.org/tutorials/the_little_relay_that_could.html">stem.control</a> for Tor's <a href="https://gitweb.torproject.org/torspec.git/tree/control-spec.txt">ControlPort</a> and <a href="https://stem.torproject.org/tutorials/mirror_mirror_on_the_wall.html">stem.descriptor</a> to download from Tor's <a href="https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt">DirPort</a>. But recently we added a third to this family, <a href="https://lists.torproject.org/pipermail/tor-dev/2018-February/012905.html">stem.client</a>, that speaks Tor's <a href="https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt">ORPort protocol</a>: the relay protocol for usage of the Tor network itself. + + + +This opens interesting opportunities we've never had before such as... + + + <ul> + <li>Construct a full three-hop circuit that can make GET requests and DNS lookups. If done right this might allow simple usage of the Tor network without even having Tor installed!</li> + <li>Expand <a href="https://stem.torproject.org/tutorials/mirror_mirror_on_the_wall.html#where-…">descriptor downloading</a> to use Tor's ORPort as an optional alternative for the DirPort. Following this we could adjust Tor so <a href="https://trac.torproject.org/projects/tor/ticket/19129">Fallback Directories no longer require a DirPort</a>.</li> + <li>Add protocol level integration test of Tor's ORPort, for instance exercising edge cases in circuit construction and extension.</li> + </ul> + + +And more! Applicants are encouraged to get a decent understanding of <a href="https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt">Tor's ORPort protocol</a> and come up with ideas of their own for neat directions that we can take this. To be clear this is not a particularly easy beginner project as it involves expanding stem.client to support more of Tor's ORPort protocol and crypto. + + + +As part of applying for this project please get your hands wet with the codebase by contributing some patches for <a href="https://stem.torproject.org/faq.html#how-do-i-get-started">Stem</a>! + + </li> + <a id="improveOnionServices"></a><a id="improveHiddenServices"></a> <li> Help improve Tor onion services

1 0

[webwml/staging] Add redirect rule for relay guide
by arma＠torproject.org 29 Mar '18

29 Mar '18

commit feb0abda957f2d7560483a8c958abc17878cfd5a Author: hiromipaw <hiro(a)torproject.org> Date: Wed Feb 14 16:37:31 2018 +0100 Add redirect rule for relay guide --- .htaccess | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.htaccess b/.htaccess index 86a523e0..c1f0557c 100644 --- a/.htaccess +++ b/.htaccess @@ -36,6 +36,9 @@ RewriteRule ^projects/obfsproxy-debian-instructions(.*) /docs/pluggable-transpor RewriteRule ^projects/obfsproxy-instructions(.*) /docs/pluggable-transports [R=410,L] RewriteRule ^projects/obfsproxy(.*) /docs/pluggable-transports [R=301,L] +#Relays +RewriteRule ^relay-guide(.*) https://trac.torproject.org/projects/tor/wiki/TorRelayGuide [R=301,L] + # GetInvolved RewriteRule ^getinvolved/$ /getinvolved/volunteer [R=301,L] RewriteRule ^volunteer(.*) /getinvolved/volunteer$1 [R=301,L]

1 0

[webwml/staging] Another subtask idea for 'python tor client' project
by arma＠torproject.org 29 Mar '18

29 Mar '18

commit 0193699060b314ae5247e9a6de2cdd844cc4626f Author: Damian Johnson <atagar(a)torproject.org> Date: Wed Feb 28 12:25:25 2018 -0800 Another subtask idea for 'python tor client' project Neat idea from David so people can write a 'is my hidden service up?' check. --- getinvolved/en/volunteer.wml | 1 + 1 file changed, 1 insertion(+) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index 617e5ff5..ea7e8e87 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -757,6 +757,7 @@ This opens interesting opportunities we've never had before such as... <li>Download hidden service descriptors. Unlike relays, the descriptors for hidden services are only available over the ORPort. Once <a href="https://trac.torproject.org/projects/tor/ticket/17945">ticket 17945</a> is merged v3 HS descriptor downloads will require a multi-hop circuit. This requires an understanding of Tor's <a href="https://gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt">hidden service</a> specifications, particularly the HSDir hash ring.</li> <li>Authenticate our ORPort connection, checking that ORPorts we connect to have the right key fingerprint.</li> <li>Add protocol level integration test of Tor's ORPort, for instance exercising edge cases in circuit construction and extension.</li> + <li>Connect to a hidden service to check if it's up or not.</li> </ul>

1 0

[webwml/staging] Add a couple more python client subtasks
by arma＠torproject.org 29 Mar '18

29 Mar '18

commit aa5e22128f2b94e23c089e39c9a211ec63159e8d Author: Damian Johnson <atagar(a)torproject.org> Date: Fri Feb 23 14:13:08 2018 -0800 Add a couple more python client subtasks Couple more subtasks, courtesy of Tim. --- getinvolved/en/volunteer.wml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index ff05c1a1..617e5ff5 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -754,6 +754,8 @@ This opens interesting opportunities we've never had before such as... <ul> <li>Construct a full three-hop circuit that can make GET requests and DNS lookups. If done right this might allow simple usage of the Tor network without even having Tor installed!</li> <li>Expand <a href="https://stem.torproject.org/tutorials/mirror_mirror_on_the_wall.html#where-…">descriptor downloading</a> to use Tor's ORPort as an optional alternative for the DirPort. Following this we could adjust Tor so <a href="https://trac.torproject.org/projects/tor/ticket/19129">Fallback Directories no longer require a DirPort</a>.</li> + <li>Download hidden service descriptors. Unlike relays, the descriptors for hidden services are only available over the ORPort. Once <a href="https://trac.torproject.org/projects/tor/ticket/17945">ticket 17945</a> is merged v3 HS descriptor downloads will require a multi-hop circuit. This requires an understanding of Tor's <a href="https://gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt">hidden service</a> specifications, particularly the HSDir hash ring.</li> + <li>Authenticate our ORPort connection, checking that ORPorts we connect to have the right key fingerprint.</li> <li>Add protocol level integration test of Tor's ORPort, for instance exercising edge cases in circuit construction and extension.</li> </ul>

1 0

[webwml/staging] Change SoP/GSoC contact address
by arma＠torproject.org 29 Mar '18

29 Mar '18

commit fe67b45157c6da573416ef264d41ec89ded200d6 Author: Colin Childs <colin(a)torproject.org> Date: Thu Mar 1 01:31:52 2018 -0600 Change SoP/GSoC contact address --- getinvolved/en/volunteer.wml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index e160c415..04e6a39d 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -727,7 +727,7 @@ meetings around the world.</li> about/gsoc>">Google Summer of Code</a> or the Tor Summer of Privacy. We have labelled each idea with which of our <a href="<page about/corepeople>">core developers</a> would be good mentors. If one or more of these ideas looks promising to you, please - <a href="<page about/contact>">contact us</a> to discuss your plans rather + <a href="mailto:tor-sop@lists.torproject.org">contact us</a> to discuss your plans rather than sending blind applications. You may also want to propose your own project idea — which often results in the best applications.

1 0

[webwml/staging] Add project for SoP
by arma＠torproject.org 29 Mar '18

29 Mar '18

commit 485894482daeff455625c12cb6305cc60e2bcbf1 Author: Colin Childs <colin(a)torproject.org> Date: Thu Mar 1 15:45:10 2018 -0600 Add project for SoP --- getinvolved/en/volunteer.wml | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index 04e6a39d..94ce39a0 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -735,6 +735,34 @@ meetings around the world.</li> <ol> #Keep old ids in case of incoming links. + <a id="metadataremoval"></a> + <li> + Remove metadata from Tor Browser uploads + + Likely Mentors: Arthur D. Edelstein (arthuredelstein) + + Tor Browser is a privacy-preserving web browser used by millions of + users around the world. We are looking for a programmer fluent in JS + and C++ to implement new features to work closely with the Tor Browser + team. + + Image files, especially photos taken by smartphones, + often carry hidden privacy-violating metadata, typically specified by + the EXIF format. Such metadata can include the user's geolocation and + various unique identifiers. In order to protect the user's identity, + we would like the intern to modify the file-upload feature in Tor + Browser such that metadata in image files is automatically removed + before the image is uploaded to a server. Ideally, the summer intern would + implement this feature for both desktop and mobile Tor Browser. If + there is time, we can envision sanitizing other kinds of uploaded + files, including movies, audio, PDFs and Office documents. + + + + For more information <a href="https://trac.torproject.org/projects/tor/ticket/24965">see its ticket</a>. + + </li> + <a id="pythonTorClient"></a><a id="pythonTorClient"></a> <li> Python Tor Client

1 0

[webwml/staging] Fix up metadata project
by arma＠torproject.org 29 Mar '18

29 Mar '18

commit d709dd4ac806d51e93120453fca1f54b5ce0a3b8 Author: Colin Childs <colin(a)torproject.org> Date: Thu Mar 1 17:59:01 2018 -0600 Fix up metadata project --- getinvolved/en/volunteer.wml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index 94ce39a0..2ebc4e96 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -745,7 +745,8 @@ meetings around the world.</li> users around the world. We are looking for a programmer fluent in JS and C++ to implement new features to work closely with the Tor Browser team. - + + Image files, especially photos taken by smartphones, often carry hidden privacy-violating metadata, typically specified by the EXIF format. Such metadata can include the user's geolocation and @@ -756,10 +757,11 @@ meetings around the world.</li> implement this feature for both desktop and mobile Tor Browser. If there is time, we can envision sanitizing other kinds of uploaded files, including movies, audio, PDFs and Office documents. - For more information <a href="https://trac.torproject.org/projects/tor/ticket/24965">see its ticket</a>. + Please also see <a href="https://mat.boum.org">the Metadata Anonymisation Toolkit (MAT)</a> for a + similar project that could serve as inspiration. </li>

1 0

[webwml/staging] Bug 24673: Retire 'Browser Developers for Mobile (Android) posting
by arma＠torproject.org 29 Mar '18

29 Mar '18

commit 253932f5790a4af91ef994ae604d40772fa7b9c0 Author: Arthur Edelstein <arthuredelstein(a)gmail.com> Date: Tue Dec 19 18:40:30 2017 -0500 Bug 24673: Retire 'Browser Developers for Mobile (Android) posting --- about/en/jobs.wml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/about/en/jobs.wml b/about/en/jobs.wml index 38e225b9..514e7175 100644 --- a/about/en/jobs.wml +++ b/about/en/jobs.wml @@ -18,7 +18,6 @@ Specifically, we're looking for the following people currently: <ul> - <li><a href="<page about/jobs-developerandroid>">Browser Developers for Mobile (Android)</a></li> <li><a href="<page about/jobs-osdeveloperandroid>">Android OS Developer</a></li> </ul> @@ -35,6 +34,7 @@ <li>Director of Communications</li> <li>Executive Director</li> <li>Executive Administrator</li> + <li>Browser Developers for Mobile (Android)</li> </ul>

1 0

[webwml/staging] tor 0.3.2.8-rc is released
by arma＠torproject.org 29 Mar '18

29 Mar '18

commit be812bbffdbcd43746e370c0477cfaeac85edb97 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Dec 21 14:16:53 2017 -0500 tor 0.3.2.8-rc is released --- Makefile | 2 +- include/versions.wmi | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Makefile b/Makefile index 8372d43a..4a026e9e 100644 --- a/Makefile +++ b/Makefile @@ -15,7 +15,7 @@ # website component, and set it to needs_review. export STABLETAG=tor-0.3.1.9 -export DEVTAG=tor-0.3.2.7-rc +export DEVTAG=tor-0.3.2.8-rc WMLBASE=. SUBDIRS=docs eff projects press about download getinvolved donate docs/torbutton diff --git a/include/versions.wmi b/include/versions.wmi index cd45bf00..b7e019f5 100644 --- a/include/versions.wmi +++ b/include/versions.wmi @@ -1,5 +1,5 @@ <define-tag version-stable whitespace=delete>0.3.1.9</define-tag> -<define-tag version-alpha whitespace=delete>0.3.2.7-rc</define-tag> +<define-tag version-alpha whitespace=delete>0.3.2.8-rc</define-tag> <define-tag version-torbrowserdevelopbranch whitespace=delete>maint-7.0</define-tag>

1 0

[webwml/staging] Remove redirects add video from extra
by arma＠torproject.org 29 Mar '18

29 Mar '18

commit ddf31327ae780238f48c90fe25900fdeeb3e1fc3 Author: hiromipaw <hiro(a)torproject.org> Date: Thu Dec 21 16:55:22 2017 +0100 Remove redirects add video from extra --- .htaccess | 1 - en/averyonionthankyou.wml | 6 +++++- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/.htaccess b/.htaccess index 0dca3aa5..86a523e0 100644 --- a/.htaccess +++ b/.htaccess @@ -84,7 +84,6 @@ RewriteRule ^donate/donor-faq(.*) https://donate.torproject.org/donor-faq [R=302 RewriteRule ^donate/donor-privacy-policy(.*) https://donate.torproject.org/privacy-policy [R=302,L] RewriteRule ^donate/thankyou(.*) https://donate.torproject.org/thank-you [R=302,L] RewriteRule ^thankyou(.*) https://donate.torproject.org/thank-you [R=302,L] -RewriteRule ^averyonionthankyou(.*) https://www.youtube.com/embed/TXT0F7p7WbM [R=301,L] # The following redirect is necessary because we're using that URL on # some external resources (the donate infrastructure in particular) and diff --git a/en/averyonionthankyou.wml b/en/averyonionthankyou.wml index 62ddb5a3..7d5405ae 100644 --- a/en/averyonionthankyou.wml +++ b/en/averyonionthankyou.wml @@ -1,7 +1,11 @@ #include "head.wmi" TITLE="Tor Project | Privacy Online" CHARSET="UTF-8" DONATION_BANNER="true" <div id="home"> -<iframe width="560" height="315" src="embed/onionvideo" frameborder="0" gesture="media" allow="encrypted-media" allowfullscreen></iframe> + +<video width="560" height="315" controls> + <source src="https://extra.torproject.org/media/onionthankyou/onion.mp4" type="video/mp4"> + Your browser does not support the video tag. +</video> </div> #include <foot.wmi> \ No newline at end of file

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

tor-commits March 2018