May 2018 - tor-commits - lists.torproject.org

[tor-browser-build/maint-7.5] Bug 20892: use sha256sums-signed-build.txt in download_missing_versions
by gk＠torproject.org 07 May '18

07 May '18

commit da514cdf49e89fb5efbb969cfd74dd561d50f54e Author: Nicolas Vigier <boklm(a)torproject.org> Date: Fri Feb 2 16:10:34 2018 +0100 Bug 20892: use sha256sums-signed-build.txt in download_missing_versions This fixes the download of the osx64 mar files. Previously we were unsigning the downloaded mar files and checking them with sha256sums-unsigned-build.txt. The signed osx64 mar files include files that are code-signed, so unsigning the mar file is not enough to get a mar file matching sha256sums-unsigned-build.txt. --- tools/update-responses/update_responses | 22 ++++++++-------------- 1 file changed, 8 insertions(+), 14 deletions(-) diff --git a/tools/update-responses/update_responses b/tools/update-responses/update_responses index b68e46a..658f451 100755 --- a/tools/update-responses/update_responses +++ b/tools/update-responses/update_responses @@ -526,22 +526,22 @@ sub download_version { my $destdir = "$releases_dir/$version"; my $urldir = "$config->{download}{archive_url}/$version"; print "Downloading version $version\n"; - foreach my $file (qw(sha256sums-unsigned-build.txt sha256sums-unsigned-build.txt.asc)) { + foreach my $file (qw(sha256sums-signed-build.txt sha256sums-signed-build.txt.asc)) { if (getstore("$urldir/$file", "$tmpdir/$file") != 200) { exit_error "Error downloading $urldir/$file"; } } if (system('gpg', '--no-default-keyring', '--keyring', "$FindBin::Bin/$config->{download}{gpg_keyring}", '--verify', - "$tmpdir/sha256sums-unsigned-build.txt.asc", - "$tmpdir/sha256sums-unsigned-build.txt")) { + "$tmpdir/sha256sums-signed-build.txt.asc", + "$tmpdir/sha256sums-signed-build.txt")) { exit_error "Error checking gpg signature for version $version"; } mkdir $destdir; - move "$tmpdir/sha256sums-unsigned-build.txt.asc", "$destdir/sha256sums-unsigned-build.txt.asc"; - move "$tmpdir/sha256sums-unsigned-build.txt", "$destdir/sha256sums-unsigned-build.txt"; + move "$tmpdir/sha256sums-signed-build.txt.asc", "$destdir/sha256sums-signed-build.txt.asc"; + move "$tmpdir/sha256sums-signed-build.txt", "$destdir/sha256sums-signed-build.txt"; my %sums = map { chomp; reverse split ' ', $_ } - read_file "$destdir/sha256sums-unsigned-build.txt"; + read_file "$destdir/sha256sums-signed-build.txt"; my $martools = 'mar-tools-' . osname . '.zip'; exit_error "Error downloading $urldir/$martools\n" @@ -557,19 +557,13 @@ sub download_version { unless $sums{$martools} eq sha256_hex(read_file("$tmpdir/$martools")); move "$tmpdir/$martools", "$destdir/$martools"; move "$tmpdir/$martools.asc", "$destdir/$martools.asc"; - extract_martools($config, $version); foreach my $file (sort grep { $_ =~ m/\.mar$/ } keys %sums) { print "Downloading $file\n"; exit_error "Error downloading $urldir/$file\n" unless getstore("$urldir/$file", "$tmpdir/$file") == 200; - if ($sums{$file} ne sha256_hex(read_file("$tmpdir/$file"))) { - exit_error "Error unsigning $file" - if system('signmar', '-r', "$tmpdir/$file", "$tmpdir/$file.u"); - exit_error "Wrong checksum for $file" - unless $sums{$file} eq sha256_hex(read_file("$tmpdir/$file.u")); - move "$tmpdir/$file.u", "$tmpdir/$file"; - } + exit_error "Wrong checksum for $file" + unless $sums{$file} eq sha256_hex(read_file("$tmpdir/$file")); move "$tmpdir/$file", "$destdir/$file"; } }

1 0

[metrics-web/master] Update news.json to version 257 of doc/MetricsTimeline.
by karsten＠torproject.org 07 May '18

07 May '18

commit d41b8eb4165cfac4c9e2b415f58603152977ddb0 Author: Karsten Loesing <karsten.loesing(a)gmx.net> Date: Mon May 7 10:03:44 2018 +0200 Update news.json to version 257 of doc/MetricsTimeline. --- src/main/resources/web/json/news.json | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/src/main/resources/web/json/news.json b/src/main/resources/web/json/news.json index 32b0630..77d94aa 100644 --- a/src/main/resources/web/json/news.json +++ b/src/main/resources/web/json/news.json @@ -4569,6 +4569,25 @@ ] }, { + "start": "2018-03-28", + "ongoing": true, + "places": [ + "td" + ], + "shortDescription": "Chad blocks social messaging apps.", + "description": "Chad blocks social messaging apps.", + "links": [ + { + "label": "article", + "target": "https://qz.com/1247234/chad-has-blocked-social-messaging-apps-bbc-amid-poli…" + }, + { + "label": "graph", + "target": "https://metrics.torproject.org/userstats-relay-country.html?start=2018-02-0…" + } + ] + }, + { "start": "2018-04-02", "protocols": [ "snowflake"

1 0

[metrics-web/master] Reflect that webstats.tp.o is gone.
by karsten＠torproject.org 07 May '18

07 May '18

commit af48f3aeaf632089aeb50d0440cd1455e8aed0a3 Author: Karsten Loesing <karsten.loesing(a)gmx.net> Date: Mon May 7 10:10:50 2018 +0200 Reflect that webstats.tp.o is gone. --- src/main/resources/web/json/categories.json | 2 +- src/main/resources/web/jsps/sources.jsp | 1 - 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/src/main/resources/web/json/categories.json b/src/main/resources/web/json/categories.json index 06efe8f..b323c79 100644 --- a/src/main/resources/web/json/categories.json +++ b/src/main/resources/web/json/categories.json @@ -81,7 +81,7 @@ "icon": "fa-download", "header": "Applications", "summary": "How many Tor applications, like Tor Browser, have been downloaded or updated.", - "description": "The following application statistics are based on the analysis of web server requests. All data comes from <a href=\"https://webstats.torproject.org/\" target=\"_blank\"><code>webstats.torproject.org</code></a> which collects logs from <code>torproject.org</code> web servers and provides them as a stripped-down version of Apache's \"combined\" log format without IP addresses, log times, HTTP parameters, referers, and user agent strings.", + "description": "The following application statistics are based on the analysis of web server requests. All data comes from <a href=\"/web-server-logs.html\">Tor web server logs</a> which are provided in a stripped-down version of Apache's \"combined\" log format without IP addresses, log times, HTTP parameters, referers, and user agent strings.", "metrics": [ "webstats-tb", "webstats-tb-platform", diff --git a/src/main/resources/web/jsps/sources.jsp b/src/main/resources/web/jsps/sources.jsp index c956208..f8f9e07 100644 --- a/src/main/resources/web/jsps/sources.jsp +++ b/src/main/resources/web/jsps/sources.jsp @@ -37,7 +37,6 @@ <li><a href="https://github.com/robgjansen/onionperf" target="_blank">OnionPerf</a> measures the performance of onion services.</li> <li><a href="https://ooni.torproject.org/" target="_blank">OONI</a> detects censorship, surveillance, and traffic manipulation on the internet.</li> <li><a href="https://gitweb.torproject.org/user/phw/sybilhunter.git/" target="_blank">Sybilhunter</a> attempts to detect Sybil attacks on the Tor network.</li> - <li><a href="https://webstats.torproject.org/" target="_blank">Webstats</a> collects logs from <code>torproject.org</code> web servers and provides them as a stripped-down version of Apache's "combined" log format without IP addresses, log times, HTTP parameters, referers, and user agent strings.</li> </ul> </div>

1 0

[metrics-web/master] Fix torperf graph for single source.
by karsten＠torproject.org 07 May '18

07 May '18

commit de1799779b3eb1cf0f94ff3c2ff5fb5e9df6daab Author: Karsten Loesing <karsten.loesing(a)gmx.net> Date: Mon May 7 10:57:24 2018 +0200 Fix torperf graph for single source. --- src/main/R/rserver/graphs.R | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/main/R/rserver/graphs.R b/src/main/R/rserver/graphs.R index 332204b..b6eb221 100644 --- a/src/main/R/rserver/graphs.R +++ b/src/main/R/rserver/graphs.R @@ -589,7 +589,7 @@ plot_torperf <- function(start, end, source, server, filesize, path) { filesize_val <- ifelse(filesize == "50kb", 50 * 1024, ifelse(filesize == "1mb", 1024 * 1024, 5 * 1024 * 1024)) t <- read.csv(paste(stats_dir, "torperf-1.1.csv", sep = ""), - colClasses = c("date" = "Date")) + colClasses = c("date" = "Date", "source" = "character")) known_sources <- c("all", unique(t[t$source != "", "source"])) colours <- data.frame(source = known_sources, colour = brewer.pal(length(known_sources), "Paired"),

1 0

[translation/support-tbb] Update translations for support-tbb
by translation＠torproject.org 06 May '18

06 May '18

commit d9b55ec19effefbac9869d7c67d0b7a5cb9f7b70 Author: Translation commit bot <translation(a)torproject.org> Date: Sun May 6 02:51:10 2018 +0000 Update translations for support-tbb --- zh_CN.json | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/zh_CN.json b/zh_CN.json index 46db91b64..51f39d580 100644 --- a/zh_CN.json +++ b/zh_CN.json @@ -81,7 +81,7 @@ "id": "#tbb-13", "control": "tbb-13", "title": "使用tor浏览器能够保护我电脑上的其他应用吗？", - "description": " Only Tor Browser's traffic will be routed over the Tor network. Any other application on your system (including other browsers) will not have their connections routed over the Tor network, and will not be protected. They need to be configured separately to use Tor. If you need to be sure that all traffic will go through the Tor network, take a look at the <a href=\"https://tails.boum.org/\">Tails live operating system</a> which you can start on almost any computer from a USB stick or a DVD." + "description": " 只有 Tor Browser 的流量将通过 Tor 网络。您系统上的任何其他应用（包括其他浏览器）的连接不受保护，将不会通过 Tor 网络。他们需要通过单独配置以使用 Tor 。如果您要确保所有流量都将通过 Tor 网络，请尝试能通过USB棒或DVD在几乎所有电脑上启动的<a href=\"https://tails.boum.org/\">Tails 实时操作系统</a> 。" }, "tbb-14": { "id": "#tbb-14", @@ -98,14 +98,14 @@ "tbb-16": { "id": "#tbb-16", "control": "tbb-16", - "title": "Can I pick which country I'm exiting from?", + "title": "我可以选择我要出口的国家吗？", "description": "Modifying the way that Tor creates its circuits is strongly discouraged. You get the best security that Tor can provide when you leave the route selection to Tor; overriding the entry / exit nodes can compromise your anonymity. If the outcome you want is simply to be able to access resources that are only available in one country, you may want to consider using a VPN instead of using Tor. Please note that VPNs do not have the same privacy properties as Tor, but they will help solve some geolocation restriction issues." }, "tbb-17": { "id": "#tbb-17", "control": "tbb-17", "title": "同时运行Tor Browser和其他的浏览器安全吗?", - "description": "If you run Tor Browser and another browser at the same time, it won't affect Tor's performance or privacy properties. However, be aware that your other browser is not keeping your activity private, and you may forget and accidentally use that non-private browser to do something that you intended to do in Tor Browser." + "description": "如果您在运行Tor 浏览器时同时运行其他浏览器，不会影响 Tor 的性能或隐私属性。但请注意，其他浏览器不能让您的活动保持私密，您可能会错误地使用非私密浏览器来执行您在 Tor 浏览器中的操作。" }, "tbb-18": { "id": "#tbb-18", @@ -200,7 +200,7 @@ "tbb-33": { "id": "#tbb-33", "control": "tbb-33", - "title": "Does running Tor Browser make me a relay?", + "title": "运行 Tor 浏览器让我成为一个中继吗？ ", "description": "Running Tor Browser does not make you act as a relay in the network. This means that your computer will not be used to route traffic for others. If you'd like to become a relay, please see our <a href=\"https://trac.torproject.org/projects/tor/wiki/TorRelayGuide\">Tor Relay Guide</a>." }, "tbb-34": { @@ -230,19 +230,19 @@ "tbb-38": { "id": "#tbb-38", "control": "tbb-38", - "title": "Will my network admin be able to tell I'm using Tor Browser?", + "title": "网络管理员会了解到我正使用 Tor 浏览器吗？", "description": "When using Tor / Tor Browser, we do not make the guarantee that no one will be able to determine you are using Tor. Rather, the goal is that no one will know what you are doing with Tor. Using pluggable transports can make identifying Tor traffic more difficult, but not impossible." }, "tbb-39": { "id": "#tbb-39", "control": "tbb-39", - "title": "Will my network admin be able to tell I'm using Tor Browser?", + "title": "网络管理员会了解到我正使用 Tor 浏览器吗？", "description": "When using Tor / Tor Browser, we do not make the guarantee that no one will be able to determine you are using Tor. Rather, the goal is that no one will know what you are doing with Tor. Using pluggable transports can make identifying Tor traffic more difficult, but not impossible." }, "tbb-40": { "id": "#tbb-40", "control": "tbb-40", - "title": "Does Tor Browser use a different circuit for each website?", + "title": "Tor 浏览器是否为每个网站使用不同的线路？", "description": "In Tor Browser, every domain gets its own circuit. <a href=\"https://www.torproject.org/projects/torbrowser/design/#identifier-linkabili…">The Design and Implementation of Tor Browser</a> document has further details regarding this issue." }, "tbb-41": {

1 0

[translation/support-connecting] Update translations for support-connecting
by translation＠torproject.org 05 May '18

05 May '18

commit 134a809247ff470b2860176ef919c4ac94af877a Author: Translation commit bot <translation(a)torproject.org> Date: Sat May 5 22:50:09 2018 +0000 Update translations for support-connecting --- pt_BR.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pt_BR.json b/pt_BR.json index 3000c283b..b9cc3f9b8 100644 --- a/pt_BR.json +++ b/pt_BR.json @@ -2,7 +2,7 @@ "connecting-1": { "id": "#conectando-1", "control": "conectando-1", - "title": "O Navegador Tor não se conectará, mas não parece ser um problema com a censura.", + "title": "O Tor Browser não está funcionando, mas não parece ser algo relacionado à censura.", "description": "Um dos problemas mais comuns que causa erros de conexão no Navegador Tor é um relógio do sistema incorreto. Por favor, certifique-se de que o relógio do sistema e o fuso horário estejam definidos com precisão. Se isso não resolver o problema, consulte a página Solução de Problemas no manual do Navegador Tor</a>." }, "connecting-2": {

1 0

[translation/tor-and-https_completed] Update translations for tor-and-https_completed
by translation＠torproject.org 05 May '18

05 May '18

commit b7b8accc8b200ad39aae58e3c3007fd3f999d866 Author: Translation commit bot <translation(a)torproject.org> Date: Sat May 5 22:47:54 2018 +0000 Update translations for tor-and-https_completed --- pt_BR.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pt_BR.po b/pt_BR.po index b0823bdb8..d968b3abc 100644 --- a/pt_BR.po +++ b/pt_BR.po @@ -9,7 +9,7 @@ msgid "" msgstr "" "Project-Id-Version: The Tor Project\n" "POT-Creation-Date: 2014-07-17 14:23+0000\n" -"PO-Revision-Date: 2017-09-23 19:52+0000\n" +"PO-Revision-Date: 2018-05-05 22:24+0000\n" "Last-Translator: Communia <ameaneantie(a)riseup.net>\n" "Language-Team: Portuguese (Brazil) (http://www.transifex.com/otf/torproject/language/pt_BR/)\n" "MIME-Version: 1.0\n"

1 0

[translation/tor-and-https] Update translations for tor-and-https
by translation＠torproject.org 05 May '18

05 May '18

commit 5a12d63768c495f7e27a52c83c0d16eb57e44e7a Author: Translation commit bot <translation(a)torproject.org> Date: Sat May 5 22:47:48 2018 +0000 Update translations for tor-and-https --- pt_BR.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pt_BR.po b/pt_BR.po index b0823bdb8..d968b3abc 100644 --- a/pt_BR.po +++ b/pt_BR.po @@ -9,7 +9,7 @@ msgid "" msgstr "" "Project-Id-Version: The Tor Project\n" "POT-Creation-Date: 2014-07-17 14:23+0000\n" -"PO-Revision-Date: 2017-09-23 19:52+0000\n" +"PO-Revision-Date: 2018-05-05 22:24+0000\n" "Last-Translator: Communia <ameaneantie(a)riseup.net>\n" "Language-Team: Portuguese (Brazil) (http://www.transifex.com/otf/torproject/language/pt_BR/)\n" "MIME-Version: 1.0\n"

1 0

[translation/https_everywhere_completed] Update translations for https_everywhere_completed
by translation＠torproject.org 05 May '18

05 May '18

commit 4a5779878e9a208ac940f44b32a4ca843443ebb0 Author: Translation commit bot <translation(a)torproject.org> Date: Sat May 5 22:15:38 2018 +0000 Update translations for https_everywhere_completed --- pt_BR/ssl-observatory.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pt_BR/ssl-observatory.dtd b/pt_BR/ssl-observatory.dtd index aab7372cd..34003060d 100644 --- a/pt_BR/ssl-observatory.dtd +++ b/pt_BR/ssl-observatory.dtd @@ -33,7 +33,7 @@ to turn it on?">--> <!ENTITY ssl-observatory.prefs.anonymous "Utilize Tor para verificar os certificados de forma anônima"> <!ENTITY ssl-observatory.prefs.anonymous_unavailable -"Verificar certificados usando Tor para assegurar anonimato (requer Torbutton)"> +"Verificar certificados usando Tor para assegurar anonimato (requer Tor)"> <!ENTITY ssl-observatory.prefs.anonymous_tooltip "Esta opção requer que o Tor e o Torbutton estejam instalados">

1 0

[translation/https_everywhere] Update translations for https_everywhere
by translation＠torproject.org 05 May '18

05 May '18

commit 6842342472a1172f527fda8ad859dba6922be013 Author: Translation commit bot <translation(a)torproject.org> Date: Sat May 5 22:15:30 2018 +0000 Update translations for https_everywhere --- pt_BR/https-everywhere.dtd | 2 +- pt_BR/ssl-observatory.dtd | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pt_BR/https-everywhere.dtd b/pt_BR/https-everywhere.dtd index d83d7880e..5da666e56 100644 --- a/pt_BR/https-everywhere.dtd +++ b/pt_BR/https-everywhere.dtd @@ -28,7 +28,7 @@ <!ENTITY https-everywhere.chrome.stable_rules_description "Forçar conexões criptografadas para estes sites:"> <!ENTITY https-everywhere.chrome.experimental_rules "Regras experimentais"> <!ENTITY https-everywhere.chrome.experimental_rules_description "Pode causar avisos ou ruptura. Desabilitado por padrão."> -<!ENTITY https-everywhere.chrome.add_rule "Adicione uma regra para esse site"> +<!ENTITY https-everywhere.chrome.add_rule "Adicione uma exceção para esse site"> <!ENTITY https-everywhere.chrome.add_new_rule "Adicione uma nova regra para esse site"> <!ENTITY https-everywhere.chrome.always_https_for_host "Sempre usar https para este hospedeiro"> <!ENTITY https-everywhere.chrome.host "Hospedeiro:"> diff --git a/pt_BR/ssl-observatory.dtd b/pt_BR/ssl-observatory.dtd index aab7372cd..34003060d 100644 --- a/pt_BR/ssl-observatory.dtd +++ b/pt_BR/ssl-observatory.dtd @@ -33,7 +33,7 @@ to turn it on?">--> <!ENTITY ssl-observatory.prefs.anonymous "Utilize Tor para verificar os certificados de forma anônima"> <!ENTITY ssl-observatory.prefs.anonymous_unavailable -"Verificar certificados usando Tor para assegurar anonimato (requer Torbutton)"> +"Verificar certificados usando Tor para assegurar anonimato (requer Tor)"> <!ENTITY ssl-observatory.prefs.anonymous_tooltip "Esta opção requer que o Tor e o Torbutton estejam instalados">

1 0