August 2018 - tor-commits - lists.torproject.org

[webwml/staging] docs/debian: improve the guide (#27278)
by hiro＠torproject.org 27 Aug '18

27 Aug '18

commit 1e529dfdcbf832a1ccb9fee6b817022ec82be54b Author: traumschule <traumschuleriebau(a)riseup.net> Date: Fri Aug 24 01:58:07 2018 +0200 docs/debian: improve the guide (#27278) --- docs/en/debian.wml | 309 +++++++++++++++++++++++++++++------------------------ 1 file changed, 170 insertions(+), 139 deletions(-) diff --git a/docs/en/debian.wml b/docs/en/debian.wml index 30684a4a..16bb8159 100644 --- a/docs/en/debian.wml +++ b/docs/en/debian.wml @@ -15,34 +15,34 @@ </div> <div id="maincol"> <a id="debian"></a> -<h2><a class="anchor" href="#debian">Option one: Tor on Debian Stretch - stable, -Debian Buster - testing, or Debian Sid - unstable</a></h2> +<h2><a class="anchor" href="#debian">Option one: Tor on Debian Stretch - +stable, Debian Buster - testing, or Debian Sid - unstable</a></h2> <br /> <p> If you're using Debian, just run as root: -</blockquote><pre> apt install tor </pre></blockquote> +<blockquote><pre># apt install tor</pre></blockquote> </p> -<p>Debian provides the <a href="https://packages.debian.org/stretch/tor">LTS</a> +<p>Debian provides the +<a href="https://packages.debian.org/stretch/tor">LTS</a> version of Tor. Note that this might not always give you the latest stable Tor version, but you will receive important security fixes. To make sure that you're running the latest stable version of Tor, see option two below. </p> <p> -When Tor is installed and running move on to <a href="<page -docs/tor-doc-unix>#using">step two</a> of the "<a href="<page -docs/tor-doc-unix>">Tor on Linux/Unix</a>" instructions. +When Tor is installed and running move on to +<a href="<page docs/tor-doc-unix>#using">step two</a> of the +"<a href="<page docs/tor-doc-unix>">Tor on Linux/Unix</a>" instructions. </p> <hr /> <a id="ubuntu"></a> <a id="packages"></a> -<h2><a class="anchor" href="#ubuntu">Option two: Tor on Ubuntu or +<h2><a class="anchor" href="#ubuntu">Option two: Tor on Ubuntu or Debian</a></h2> -<br /> <p> <b>Do not use the packages in Ubuntu's universe.</b> In the past they have @@ -51,24 +51,50 @@ and security fixes. </p> <p> -<b>Raspbian is not Debian.</b> Tor might run fine on the Raspberry Pi 2 / 3 but not the first generation Pi. -These packages might be confusingly broken for Raspbian users, since Raspbian called their architecture armhf but -Debian already has an armhf. See <a +<b>Raspbian is not Debian.</b> Tor might run fine on the Raspberry Pi 2 / 3 +but not the first generation Pi. +These packages might be confusingly broken for Raspbian users, since Raspbian +called their architecture armhf but Debian already has an armhf. See <a href="http://tor.stackexchange.com/questions/242/how-to-run-tor-on-raspbian-on-th…">this post</a> for details. </p> <p> -You'll need to set up our package repository before you can fetch -Tor. First, you need to figure out the name of your distribution. A -quick command to run is <tt>lsb_release -c</tt> or <tt>cat /etc/debian_version</tt>. -If in doubt about your Debian version, check <a href="https://www.debian.org/releases/">the Debian website</a>. -For Ubuntu, ask <a href="https://en.wikipedia.org/wiki/List_of_Ubuntu_releases#Table_of_versions">Wikipedia</a>. +<b>Admin access</b>: +To install Tor you need root privileges. Below all commands that need to be run +as root user like apt and dpkg are prepended with '&num;', +while commands to be run as user with '$' resembling the standard +prompt in a terminal. To open a root terminal you have several options: +<code>sudo su</code>, or <code>sudo -i</code>, or <code>su -i</code>. +Note that sudo asks for your user password, while su expects +the root password of your system. +</p> + +<p> +<b>apt-transport-tor</b>: +To use source lines with <tt>https://</tt> in <i>/etc/apt/sources.list</i> the +<a href="https://packages.debian.org/stretch/apt-transport-https">apt-transport-https package</a> +is required. Install it with +<blockquote><pre> +&num; apt install apt-transport-https +</pre></blockquote> +to enable all package managers using the libapt-pkg library to access metadata +and packages available in sources accessible over https (Hypertext Transfer Protocol Secure). +</p> + +<p> +<b>sources.list</b>: +You'll need to set up our package repository before you can fetch Tor. First, +you need to figure out the name of your distribution. A quick command to run is +<tt>lsb_release -c</tt> or <tt>cat /etc/debian_version</tt>. +If in doubt about your Debian version, check +<a href="https://www.debian.org/releases/">the Debian website</a>. +For Ubuntu, ask +<a href="https://en.wikipedia.org/wiki/List_of_Ubuntu_releases#Table_of_versions">Wikipedia</a>. </p> <div id="selector" style="display: none;"> -<blockquote> -I run +<blockquote>I run <select id="distrib"> <option value="jessie">Debian oldstable (jessie)</option> <option value="stretch" selected="selected">Debian stable (stretch)</option> @@ -81,48 +107,38 @@ I run </select> and want <select id="package"></select> -version <select id="version"></select> </blockquote> - <div id="apt-source"> -<p>You need to add the following entries to <code>/etc/apt/sources.list</code> or a new file in -<code>/etc/apt/sources.list.d/</code>:</p> +<p> +You need to add the following entries to <code>/etc/apt/sources.list</code> +or a new file in <code>/etc/apt/sources.list.d/</code>: +</p> -<blockquote><pre id="sources">deb https://deb.torproject.org/torproject.org jessie main +<blockquote><pre id="sources"> +deb https://deb.torproject.org/torproject.org jessie main </pre></blockquote> </div> -<p>Note: To use source lines with https:// in <i>/etc/apt/sources.list</i> the <a -href="https://packages.debian.org/stretch/apt-transport-https">apt-transport-https -package</a> is required. Install it with -<blockquote><pre> -apt install apt-transport-https -</pre></blockquote> -to enable the usage of 'deb https://foo distro main' lines in the /etc/apt/sources.list so that all package managers using the libapt-pkg library can access metadata and packages available in sources accessible over https (Hypertext Transfer Protocol Secure).</p> - -<p>To use Apt with Tor later replace <tt>https://</tt> with <tt>tor://</tt> and run -<blockquote><pre> -apt install apt-transport-tor -</pre></blockquote> -</p> - <div id="sig"> -<p>Then add the gpg key used to sign the packages by running the following commands at your command prompt:</p> +<p>Then add the gpg key used to sign the packages by running the following +commands at your command prompt: <blockquote><pre> -gpg --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 -gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add - -</pre></blockquote> +&num; gpg --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 +&num; gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | apt-key add - +</pre></blockquote></p> </div> - <div id="apt-get"> -<p>You can install it with the following commands:</p> -<blockquote><pre>apt update -<span id="regular-install">apt install <span id="apt-package">tor</span> deb.torproject.org-keyring</span> -<span id="source-install">$ apt install build-essential fakeroot devscripts -$ apt build-dep tor deb.torproject.org-keyring</span></pre></blockquote> +<p>We provide a Debian package to help you keep our signing key current. It is +recommended you use it. Install it with the following commands:</p> +<blockquote><pre>&num; apt update +<span id="regular-install">&num; apt install <span id="apt-package">tor</span> deb.torproject.org-keyring</span> +<span id="source-install">&num; apt install build-essential fakeroot devscripts +&num; apt build-dep tor deb.torproject.org-keyring +</span> +</pre></blockquote> <div id="source-install2"> <p>Then you can build Tor in ~/debian-packages:</p> @@ -135,7 +151,7 @@ $ cd .. </pre></blockquote> <p>Now you can install the new package:</p> <blockquote><pre> -$ sudo dpkg -i tor_*.deb +&num; dpkg -i tor_*.deb </pre></blockquote> </div> </div> @@ -143,140 +159,155 @@ $ sudo dpkg -i tor_*.deb <noscript> <p> -Then add this line to your -<tt>/etc/apt/sources.list</tt> -file:<br /> -<pre style="margin: 1.5em 0 1.5em 2em"> +Then add this line to your <tt>/etc/apt/sources.list</tt> file:<br /> +<blockquote><pre> deb https://deb.torproject.org/torproject.org <DISTRIBUTION> main -</pre> +/pre></blockquote> where you put the codename of your distribution (i.e. stretch, buster, sid -or whatever it is) -in place of <DISTRIBUTION>. +or whatever it is) in place of <DISTRIBUTION>. </p> <p> -If you want to use the <a href="<page download/download-unix>#packagediff">development branch</a> of Tor instead (more features and more bugs), you need add a different set of lines to your <i>/etc/apt/sources.list</i> file:<br /> -<pre style="margin: 1.5em 0 1.5em 2em"> +If you want to use the +<a href="<page download/download-unix>#packagediff">development branch</a> +of Tor instead (more features and more bugs), you need add a different set of +lines to your <i>/etc/apt/sources.list</i> file:<br /> +<blockquote><pre> deb https://deb.torproject.org/torproject.org <DISTRIBUTION> main deb https://deb.torproject.org/torproject.org tor-experimental-0.3.4.x-<DISTRIBUTION> main -</pre> -</p> - -<p>Note: To use source lines with <tt>https://</tt> in <i>/etc/apt/sources.list</i> the <a -href="https://packages.debian.org/stretch/apt-transport-https">apt-transport-https -package</a> is required. Install it with -<blockquote><pre> -apt install apt-transport-https -</pre></blockquote> -to enable the usage of 'deb https://foo distro main' lines in the /etc/apt/sources.list so that all package managers using the libapt-pkg library can access metadata and packages available in sources accessible over https (Hypertext Transfer Protocol Secure).</p> - -<p>To use Apt with Tor later replace <tt>https://</tt> with <tt>tor://</tt> and run <blockquote><pre> -apt install apt-transport-tor </pre></blockquote> </p> <p> Then add the gpg key used to sign the packages by running the following commands at your command prompt: -<pre style="margin: 1.5em 0 1.5em 2em"> -gpg --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 -gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add - -</pre> +<blockquote><pre> +&num; gpg --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 +&num; gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | apt-key add - +</pre></blockquote> Now refresh your sources, running the following command (as root) at your command prompt: -<pre style="margin: 1.5em 0 1.5em 2em"> -apt update -</pre> +<blockquote><pre> +&num; apt update +</pre></blockquote> If there are no errors you're good to continue. </p> <p> -We provide a Debian package to help you keep our signing key current. It is -recommended you use it. Install it along with tor using -<pre style="margin: 1.5em 0 1.5em 2em"> -apt install tor deb.torproject.org-keyring -</pre> +We provide a Debian package to help you keep our signing key current. It is +recommended you use it. Install it together with tor: +<blockquote><pre> +&num; apt install tor deb.torproject.org-keyring +</pre></blockquote> </p> </noscript> - -<p> -Now Tor is installed and running. Move on to <a href="<page -docs/tor-doc-unix>#using">step two</a> of the "Tor on Linux/Unix" -instructions. -</p> - -<p style="font-size: small"> -The DNS name <code>deb.torproject.org</code> is actually a set of independent -servers in a DNS round robin configuration. If you for some reason cannot -access it you might try to use the name of one of its part instead. Try -<code>deb-master.torproject.org</code>, -<code>mirror.netcologne.de</code> or -<code>tor.mirror.youam.de</code>. -</p> - -<p><code>deb.torproject.org</code> is also served through now also served via onion service: -<a href="http://sdscoq7snqtznauu.onion">http://sdscoq7snqtznauu.onion/</a> To use the onion service with apt, replace the address in the previously added lines: -<pre style="margin: 1.5em 0 1.5em 2em">. -# For the stable version. -deb tor://sdscoq7snqtznauu.onion/torproject.org buster main - -# For the unstable version. -deb tor://sdscoq7snqtznauu.onion/torproject.org tor-nightly-master-<DISTRIBUTION> main -</pre> -<br /> -See <a href="https://onion.torproject.org/">https://onion.torproject.org</a> for all -torproject.org onion addresses.</p> - <noscript> <hr /> <a id="source"></a> <h2><a class="anchor" href="#source">Building from source</a></h2> -<br /> <p> If you want to build your own debs from source you must first add an appropriate <tt>deb-src</tt> line to <tt>sources.list</tt>. -<pre style="margin: 1.5em 0 1.5em 2em"> -# For the stable version. +</p> +<blockquote><pre> +&num; For the stable version. deb-src https://deb.torproject.org/torproject.org <DISTRIBUTION> main -# For the unstable version. +&num; For the unstable version. deb-src https://deb.torproject.org/torproject.org <DISTRIBUTION> main deb-src https://deb.torproject.org/torproject.org tor-experimental-0.3.4.x-<DISTRIBUTION> main -</pre> -Substitute the name of your distro (stretch, buster, sid, xenial, ...) in place of <DISTRIBUTION>. Now refresh your sources by running (as root): -<pre style="margin: 1.5em 0 1.5em 2em"> -apt update -</pre> +</pre></blockquote> +<p> +Substitute the name of your distro (stretch, buster, sid, xenial, ...) in +place of <DISTRIBUTION>. Now refresh your sources by running (as root): +</p> +<blockquote><pre> +&num; apt update +</pre></blockquote> +<p> You also need to install the necessary packages to build your own debs and the packages needed to build Tor: -<pre style="margin: 1.5em 0 1.5em 2em"> -apt install build-essential fakeroot devscripts -apt build-dep tor -</pre> +</p> +<blockquote><pre> +&num; apt install build-essential fakeroot devscripts +&num; apt build-dep tor +</pre></blockquote> +<p> Then you can build Tor in ~/debian-packages: -<pre style="margin: 1.5em 0 1.5em 2em"> -mkdir ~/debian-packages; cd ~/debian-packages -apt source tor -cd tor-* -debuild -rfakeroot -uc -us -cd .. -</pre> +</p> +<blockquote><pre> +$ mkdir ~/debian-packages; cd ~/debian-packages +$ apt source tor +$ cd tor-* +$ debuild -rfakeroot -uc -us +$ cd .. +</pre></blockquote> +<p> Now you can install the new package: -<pre style="margin: 1.5em 0 1.5em 2em"> -sudo dpkg -i tor_*.deb -</pre> </p> +<blockquote><pre> +&num; dpkg -i tor_*.deb +</pre></blockquote> + +</noscript> <p> -Now Tor is installed and running. Move on to <a href="<page -docs/tor-doc-unix>#using">step two</a> of the "Tor on Linux/Unix" -instructions. +Now Tor is installed and running. Move on to +<a href="<page docs/tor-doc-unix>#using">step two</a> of the +"Tor on Linux/Unix" instructions. +</p> + +<p style="font-size: small"> +The DNS name <code>deb.torproject.org</code> is actually a set of independent +servers in a DNS round robin configuration. If you for some reason cannot +access it you might try to use the name of one of its part instead. Try +<code>deb-master.torproject.org</code>, +<code>mirror.netcologne.de</code> or +<code>tor.mirror.youam.de</code>. +</p> + +<hr /> + +<a id="apt-over-tor"></a> +<h2><a class="anchor" href="#apt-over-tor">Use Apt over Tor</a></h2> + +<p> +<code>deb.torproject.org</code> is also served through via an onion service: +<a href="http://sdscoq7snqtznauu.onion">http://sdscoq7snqtznauu.onion/</a> +</p> + +<p> +To use Apt with Tor the according apt transport needs to be installed: +</p> +<blockquote><pre> +&num; apt install apt-transport-tor +</pre></blockquote> + +<p> +Then replace the address in the lines added before with, for example: +</p> +<blockquote><pre> +&num; For the stable version. +deb tor://sdscoq7snqtznauu.onion/torproject.org <DISTRIBUTION> main + +&num; For the unstable version. +deb tor://sdscoq7snqtznauu.onion/torproject.org tor-nightly-master-<DISTRIBUTION> main +</pre></blockquote> +<p> +Now refresh your sources and try if it's still possible to install tor: +</p> +<blockquote><pre> +&num; apt update +&num; apt install tor +</pre></blockquote> +<p> +See <a href="https://onion.torproject.org/">onion.torproject.org</a> +for all torproject.org onion addresses.</p> </p> -</noscript>  </div>

1 0

[webwml/staging] Fix merging conflicts
by hiro＠torproject.org 27 Aug '18

27 Aug '18

commit 2b193d6eaa11815906c3c71ba9d47e089af87063 Author: hiro <hiro(a)torproject.org> Date: Thu Aug 23 16:47:20 2018 +0200 Fix merging conflicts --- docs/en/tor-onion-service.wml | 28 +++------------------------- 1 file changed, 3 insertions(+), 25 deletions(-) diff --git a/docs/en/tor-onion-service.wml b/docs/en/tor-onion-service.wml index 2ff4c8d1..2bd13ad8 100644 --- a/docs/en/tor-onion-service.wml +++ b/docs/en/tor-onion-service.wml @@ -273,11 +273,7 @@ <h2><a class="anchor" href="#four">Step Four: Set up next-gen (v3) onions</a></h2> <br> -<<<<<<< HEAD <p>Since Tor 0.3.2 and -======= - <p>Since Tor 0.3.2 and ->>>>>>> 0e7b0b7 <a href="https://blog.torproject.org/tor-browser-75a5-released">Tor Browser 7.5.a5</a> 56-character long v3 onion addresses are supported and should be used instead. This newer version of onion services ("v3") features many @@ -295,36 +291,18 @@ <a href="https://trac.torproject.org/projects/tor/wiki/doc/HiddenServiceNames"> Why are v3 onions better?</a>. You can identify a next-generation onion address by its length: they are 56 characters long, as in -<<<<<<< HEAD <var>4acth47i6kxnvkewtm6q7ib2s3ufpo5sqbsnzjpbi7utijcltosqemad.onion</a>. -<<<<<<< HEAD - -======= -======= - <var>4acth47i6kxnvkewtm6q7ib2s3ufpo5sqbsnzjpbi7utijcltosqemad.onion</var>. ->>>>>>> 760bf9a - ->>>>>>> 0e7b0b7 + The specification for next gen onion services can be found <a href="https://gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt"> here</a>. </p> <h3>How to setup your own prop224 service</h3> - -<<<<<<< HEAD -<<<<<<< HEAD - <p>It's easy! Just use your <a href"#two">regular onion service</a> torrc -======= <p>It's easy! Just use your <a href"#two">regular onion service</a> torrc ->>>>>>> 0e7b0b7 and add <var>HiddenServiceVersion 3</var> in your onion service torrc block. -======= - <p>It's easy! Just use your <a href"#two">regular onion service</a> - <a href="<page docs/faq>#torrc">torrc</a> and add - <var>HiddenServiceVersion 3</var> in your onion service torrc block. ->>>>>>> 760bf9a - Here is an example torrc designed for testing: + +` Here is an example torrc designed for testing: </p> <pre> SocksPort auto

1 0

[webwml/staging] docs/debian: minor fix
by hiro＠torproject.org 27 Aug '18

27 Aug '18

commit b9852566146f2845fbfbd8aa9a2f24d076bff25d Author: traumschule <traumschuleriebau(a)riseup.net> Date: Fri Aug 24 02:38:51 2018 +0200 docs/debian: minor fix --- docs/en/debian.wml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/en/debian.wml b/docs/en/debian.wml index 16bb8159..4ff3c37c 100644 --- a/docs/en/debian.wml +++ b/docs/en/debian.wml @@ -162,7 +162,7 @@ $ cd .. Then add this line to your <tt>/etc/apt/sources.list</tt> file:<br /> <blockquote><pre> deb https://deb.torproject.org/torproject.org <DISTRIBUTION> main -/pre></blockquote> +</pre></blockquote> where you put the codename of your distribution (i.e. stretch, buster, sid or whatever it is) in place of <DISTRIBUTION>. </p>

1 0

[webwml/staging] 0.3.4.7-rc is now tagged.
by hiro＠torproject.org 27 Aug '18

27 Aug '18

commit cc2b06bf8f1632de0f4a4d045177cc8f33887728 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Aug 24 16:33:20 2018 -0400 0.3.4.7-rc is now tagged. --- Makefile | 2 +- include/versions.wmi | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Makefile b/Makefile index 9dbd67f5..775301dd 100644 --- a/Makefile +++ b/Makefile @@ -15,7 +15,7 @@ # website component, and set it to needs_review. export STABLETAG=tor-0.3.3.9 -export DEVTAG=tor-0.3.4.6-rc +export DEVTAG=tor-0.3.4.7-rc WMLBASE=. SUBDIRS=docs eff projects press about download getinvolved donate docs/torbutton diff --git a/include/versions.wmi b/include/versions.wmi index 2fa8dcfe..c85a1b8f 100644 --- a/include/versions.wmi +++ b/include/versions.wmi @@ -1,5 +1,5 @@ <define-tag version-stable whitespace=delete>0.3.3.9</define-tag> -<define-tag version-alpha whitespace=delete>0.3.4.6-rc</define-tag> +<define-tag version-alpha whitespace=delete>0.3.4.7-rc</define-tag> <define-tag version-torbrowserdevelopbranch whitespace=delete>maint-7.5</define-tag>

1 0

[webwml/staging] add id=source for tor
by hiro＠torproject.org 27 Aug '18

27 Aug '18

commit e3a793a8940664ae5cf6c7effb03798bc4463230 Author: traumschule <traumschuleriebau(a)riseup.net> Date: Thu Aug 16 03:36:45 2018 +0200 add id=source for tor --- download/en/download.wml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/download/en/download.wml b/download/en/download.wml index b6149b51..4af20eb4 100644 --- a/download/en/download.wml +++ b/download/en/download.wml @@ -166,7 +166,7 @@ custom configurations. All an apt-get or yum install away.</p> </div>   - <div class="accordionButton on"> + <div id="source" class="accordionButton on"> <span class="sourcecode24">Source Code</span></div> <div class="accordionContent"> <div class="fauxhead"></div>

1 0

[webwml/staging] turn download warnings into incude file
by hiro＠torproject.org 27 Aug '18

27 Aug '18

commit 5e85554887aabb7fdb25fd1ba456ecdf78d9dcd4 Author: traumschule <traumschuleriebau(a)riseup.net> Date: Thu Aug 16 19:03:00 2018 +0200 turn download warnings into incude file --- download/en/download-easy.wml | 106 +-------------------------------- download/en/download.wml | 127 +--------------------------------------- include/warning.wmi | 132 ++++++++++++++++++++++++++++++++++++++++++ 3 files changed, 134 insertions(+), 231 deletions(-) diff --git a/download/en/download-easy.wml b/download/en/download-easy.wml index 3fd71967..b5ed7f27 100644 --- a/download/en/download-easy.wml +++ b/download/en/download-easy.wml @@ -176,111 +176,7 @@ </div>  <div id="maincol-left">  -<div class="warning"> -<a name="warning"></a> -<a name="Warning"></a> -<h2><a class="anchor" href="#warning">Want Tor to really work?</a></h2> -<p>You need to change some of your habits, as some things won't work -exactly as you are used to.</p> - -<ol> - -<li><b>Use Tor Browser</b> -<p>Tor does not protect all of your computer's Internet traffic when you -run it. Tor only protects your applications that are properly configured -to send their Internet traffic through Tor. To avoid problems with -Tor configuration, we strongly recommend you use the <a href="<page -projects/torbrowser>">Tor Browser</a>. It is pre-configured to -protect your privacy and anonymity on the web as long as you're browsing -with Tor Browser itself. Almost any other web browser configuration -is likely to be unsafe to use with Tor.</p> -</li> -<li><b>Don't torrent over Tor</b> -<p> -Torrent file-sharing applications have been observed to ignore proxy -settings and make direct connections even when they are told to use Tor. -Even if your torrent application connects only through Tor, you will -often send out your real IP address in the tracker GET request, -because that's how torrents work. Not only do you <a -href="https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea"> -deanonymize your torrent traffic and your other simultaneous Tor web -traffic</a> this way, you also slow down the entire Tor network for everyone else. -</p> -</li> -<li><b>Don't enable or install browser plugins</b> -<p>Tor Browser will block browser plugins such as Flash, RealPlayer, -Quicktime, and others: they can be manipulated into revealing your IP -address. Similarly, we do not recommend installing additional addons or -plugins into Tor Browser, as these may bypass Tor or otherwise harm -your anonymity and privacy.</p> -</li> - -<li><b>Use HTTPS versions of websites</b> -<p>Tor will encrypt your traffic <a -href="<page about/overview>#thesolution">to -and within the Tor network</a>, but the encryption of your traffic to -the final destination website depends upon on that website. To help -ensure private encryption to websites, Tor Browser includes -<a href="https://www.eff.org/https-everywhere">HTTPS Everywhere</a> -to force the use of HTTPS encryption with major websites that -support it. However, you should still watch the browser URL bar to -ensure that websites you provide sensitive information to display a <a -href="https://support.mozilla.com/en-US/kb/Site%20Identity%20Button">blue -or green URL bar button</a>, include <b>https://</b> in the URL, and -display the proper expected name for the website. -Also see EFF's interactive page -explaining <a href="https://www.eff.org/pages/tor-and-https">how Tor -and HTTPS relate</a>. -</p> -</li> - -<li><b>Don't open documents downloaded through Tor while online</b> -<p>Tor Browser will warn you before automatically opening -documents that are handled by external applications. <b>DO NOT -IGNORE THIS WARNING</b>. You should be very careful when downloading -documents via Tor (especially DOC and PDF files, unless you use the PDF -viewer that's built into Tor Browser) as these documents -can contain Internet resources that will be downloaded outside of -Tor by the application that opens them. This will reveal your non-Tor -IP address. If you must work with DOC and/or PDF files, we strongly -recommend either using a disconnected computer, downloading the free <a -href="https://www.virtualbox.org/">VirtualBox</a> and using it with a <a -href="http://virtualboxes.org/">virtual machine image</a> with networking -disabled, or using <a href="https://tails.boum.org/">Tails</a>. -Under no circumstances is it safe to use <a -href="https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea">BitTorrent -and Tor</a> together, however.</p> -</li> - -<li><b>Use bridges and/or find company</b> -<p>Tor tries to prevent attackers from learning what destination websites -you connect to. However, by default, it does not prevent somebody -watching your Internet traffic from learning that you're using Tor. If -this matters to you, you can reduce this risk by configuring Tor to use a -<a href="<page docs/bridges>">Tor bridge relay</a> rather than connecting -directly to the public Tor network. Ultimately the best protection is -a social approach: the more Tor users there are near you and the more -<a href="<page about/torusers>">diverse</a> their interests, the less -dangerous it will be that you are one of them. Convince other people to -use Tor, too!</p> -</li> -</ol> -<br> -<p>Be smart and learn more. Understand what Tor does and does not offer. -This list of pitfalls isn't complete, and we need your help <a href="<page -getinvolved/volunteer>#Documentation">identifying and documenting all -the issues</a>.</p><br /> -<h2><a class="anchor" href="#mirror">Where else can I get Tor?</a></h2> -<p>In some countries the Tor Project website is blocked or censored and -it is not possible to download Tor directly. The Tor Project hosts a -Tor Browser <a -href="https://github.com/TheTorProject/gettorbrowser">mirror on Github</a>.</p><br /> -<p>Using the <a -href="https://www.torproject.org/projects/gettor">GetTor</a> service is -another way to download Tor Browser when the Project website and mirrors -are blocked.</p> - -</div> +#include <warning.wmi>  </div>  diff --git a/download/en/download.wml b/download/en/download.wml index 4af20eb4..563a7593 100644 --- a/download/en/download.wml +++ b/download/en/download.wml @@ -193,132 +193,7 @@ custom configurations. All an apt-get or yum install away.</p>  <br>  -<div class="warning"> -<a name="warning"></a> -<a name="Warning"></a> -<h2><a class="anchor" href="#warning">Want Tor to really work?</a></h2> - <p>You need to change some of your habits, as some things won't work exactly as -you are used to.</p> - -<ol> -<li><b>Use Tor Browser</b> - -<p> - -Tor does not protect all of your computer's Internet traffic when you -run it. Tor only protects your applications that are properly configured to -send their Internet traffic through Tor. To avoid problems with Tor -configuration, we strongly recommend you use the -<a href="<page projects/torbrowser>">Tor Browser</a>. It is pre-configured to protect -your privacy and anonymity on the web as long as you're browsing with Tor -Browser itself. Almost any other web browser configuration is likely to be -unsafe to use with Tor. - -</p> - -</li> - -<li><b>Don't torrent over Tor</b> -<p> -Torrent file-sharing applications have been observed to ignore proxy -settings and make direct connections even when they are told to use Tor. -Even if your torrent application connects only through Tor, you will -often send out your real IP address in the tracker GET request, -because that's how torrents work. Not only do you <a -href="https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea"> -deanonymize your torrent traffic and your other simultaneous Tor web -traffic</a> this way, you also slow down the entire Tor network for everyone else. -</p> -</li> - -<li><b>Don't enable or install browser plugins</b> - -<p> - -Tor Browser will block browser plugins such as Flash, RealPlayer, -Quicktime, and others: they can be manipulated into revealing your IP address. -Similarly, we do not recommend installing additional addons or plugins into -Tor Browser, as these may bypass Tor or otherwise harm your anonymity and -privacy. - -</p> - -</li> - -<li><b>Use HTTPS versions of websites</b> - -<p> - -Tor will encrypt your traffic -<a href="<page about/overview>#thesolution">to and -within the Tor network</a>, but the encryption of your traffic to the final -destination website depends upon on that website. To help ensure private -encryption to websites, Tor Browser includes <a -href="https://www.eff.org/https-everywhere">HTTPS Everywhere</a> to force the -use of HTTPS encryption with major websites that support it. However, you -should still watch the browser URL bar to ensure that websites you provide -sensitive information to display a -<a href="https://support.mozilla.com/en-US/kb/Site%20Identity%20Button">blue or -green URL bar button</a>, include <b>https://</b> in the URL, and display the -proper expected name for the website. Also see EFF's interactive page -explaining <a href="https://www.eff.org/pages/tor-and-https">how Tor -and HTTPS relate</a>. - -</p> - -</li> - -<li><b>Don't open documents downloaded through Tor while online</b> - -<p> - -Tor Browser will warn you before automatically opening documents that are -handled by external applications. <b>DO NOT IGNORE THIS WARNING</b>. You -should be very careful when downloading documents via Tor (especially DOC and -PDF files, unless you use the PDF viewer that's built into Tor Browser) as -these documents can contain Internet resources that will be downloaded outside -of Tor by the application that opens them. This will reveal your non-Tor IP -address. If you must work with DOC and/or PDF files, we strongly recommend -either using a disconnected computer, -downloading the free <a href="https://www.virtualbox.org/">VirtualBox</a> and -using it with a <a href="http://virtualboxes.org/">virtual machine image</a> -with networking disabled, or using <a href="https://tails.boum.org/">Tails</a>. -Under no circumstances is it safe to use -<a href="https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea">BitTorrent -and Tor</a> together, however. - -</p> - -</li> - -<li><b>Use bridges and/or find company</b> - -<p> - -Tor tries to prevent attackers from learning what destination websites you -connect to. However, by default, it does not prevent somebody watching your Internet -traffic from learning that you're using Tor. If this matters to you, you can -reduce this risk by configuring Tor to use a <a href="<page docs/bridges>">Tor -bridge relay</a> rather than connecting directly to the public Tor network. -Ultimately the best protection is a social approach: the more Tor -users there are near you and the more -<a href="<page about/torusers>">diverse</a> their interests, the less -dangerous it will be that you are one of them. Convince other people to use -Tor, too! - -</p> - -</li> - -</ol> -<br> -<p> -Be smart and learn more. Understand what Tor does and does not offer. -This list of pitfalls isn't complete, and we need your -help <a href="<page getinvolved/volunteer>#Documentation">identifying and documenting -all the issues</a>. -</p> -</div> +#include <warning.wmi>  </div>  diff --git a/include/warning.wmi b/include/warning.wmi new file mode 100644 index 00000000..4c17fdfd --- /dev/null +++ b/include/warning.wmi @@ -0,0 +1,132 @@ +#! /usr/bin/wml +<: use strict; :> +<: use warnings; :> + +# + +<div class="warning"> +<a name="warning"></a> +<a name="Warning"></a> +<h2><a class="anchor" href="#warning">Want Tor to really work?</a></h2> + <p>You need to change some of your habits, as some things won't work exactly as +you are used to.</p> + +<ol> +<li><b>Use Tor Browser</b> + +<p> + +Tor does not protect all of your computer's Internet traffic when you +run it. Tor only protects your applications that are properly configured to +send their Internet traffic through Tor. To avoid problems with Tor +configuration, we strongly recommend you use the +<a href="<page projects/torbrowser>">Tor Browser</a>. It is pre-configured to protect +your privacy and anonymity on the web as long as you're browsing with Tor +Browser itself. Almost any other web browser configuration is likely to be +unsafe to use with Tor. + +</p> + +</li> + +<li><b>Don't torrent over Tor</b> +<p> +Torrent file-sharing applications have been observed to ignore proxy +settings and make direct connections even when they are told to use Tor. +Even if your torrent application connects only through Tor, you will +often send out your real IP address in the tracker GET request, +because that's how torrents work. Not only do you <a +href="https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea"> +deanonymize your torrent traffic and your other simultaneous Tor web +traffic</a> this way, you also slow down the entire Tor network for everyone else. +</p> +</li> + +<li><b>Don't enable or install browser plugins</b> + +<p> + +Tor Browser will block browser plugins such as Flash, RealPlayer, +Quicktime, and others: they can be manipulated into revealing your IP address. +Similarly, we do not recommend installing additional addons or plugins into +Tor Browser, as these may bypass Tor or otherwise harm your anonymity and +privacy. + +</p> + +</li> + +<li><b>Use HTTPS versions of websites</b> + +<p> + +Tor will encrypt your traffic +<a href="<page about/overview>#thesolution">to and +within the Tor network</a>, but the encryption of your traffic to the final +destination website depends upon on that website. To help ensure private +encryption to websites, Tor Browser includes <a +href="https://www.eff.org/https-everywhere">HTTPS Everywhere</a> to force the +use of HTTPS encryption with major websites that support it. However, you +should still watch the browser URL bar to ensure that websites you provide +sensitive information to display a +<a href="https://support.mozilla.com/en-US/kb/Site%20Identity%20Button">blue or +green URL bar button</a>, include <b>https://</b> in the URL, and display the +proper expected name for the website. Also see EFF's interactive page +explaining <a href="https://www.eff.org/pages/tor-and-https">how Tor +and HTTPS relate</a>. + +</p> + +</li> + +<li><b>Don't open documents downloaded through Tor while online</b> + +<p> + +Tor Browser will warn you before automatically opening documents that are +handled by external applications. <b>DO NOT IGNORE THIS WARNING</b>. You +should be very careful when downloading documents via Tor (especially DOC and +PDF files, unless you use the PDF viewer that's built into Tor Browser) as +these documents can contain Internet resources that will be downloaded outside +of Tor by the application that opens them. This will reveal your non-Tor IP +address. If you must work with DOC and/or PDF files, we strongly recommend +either using a disconnected computer, +downloading the free <a href="https://www.virtualbox.org/">VirtualBox</a> and +using it with a <a href="http://virtualboxes.org/">virtual machine image</a> +with networking disabled, or using <a href="https://tails.boum.org/">Tails</a>. +Under no circumstances is it safe to use +<a href="https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea">BitTorrent +and Tor</a> together, however. + +</p> + +</li> + +<li><b>Use bridges and/or find company</b> + +<p> + +Tor tries to prevent attackers from learning what destination websites you +connect to. However, by default, it does not prevent somebody watching your Internet +traffic from learning that you're using Tor. If this matters to you, you can +reduce this risk by configuring Tor to use a <a href="<page docs/bridges>">Tor +bridge relay</a> rather than connecting directly to the public Tor network. +Ultimately the best protection is a social approach: the more Tor +users there are near you and the more +<a href="<page about/torusers>">diverse</a> their interests, the less +dangerous it will be that you are one of them. Convince other people to use +Tor, too! + +</p> + +</li> + +</ol> +<br> +<p> +Be smart and learn more. Understand what Tor does and does not offer. +This list of pitfalls isn't complete, and we need your +help <a href="<page getinvolved/volunteer>#Documentation">identifying and documenting +all the issues</a>. +</p> +</div>

1 0

[webwml/staging] warnings.wmi: recommend to use Pluggable Transports (#25098)
by hiro＠torproject.org 27 Aug '18

27 Aug '18

commit 4fa05cfe7d5d6d4e348de750429eb334f30e498f Author: traumschule <traumschuleriebau(a)riseup.net> Date: Thu Aug 16 19:09:27 2018 +0200 warnings.wmi: recommend to use Pluggable Transports (#25098) --- include/warning.wmi | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/include/warning.wmi b/include/warning.wmi index 4c17fdfd..0e0eb2ee 100644 --- a/include/warning.wmi +++ b/include/warning.wmi @@ -109,8 +109,8 @@ and Tor</a> together, however. Tor tries to prevent attackers from learning what destination websites you connect to. However, by default, it does not prevent somebody watching your Internet traffic from learning that you're using Tor. If this matters to you, you can -reduce this risk by configuring Tor to use a <a href="<page docs/bridges>">Tor -bridge relay</a> rather than connecting directly to the public Tor network. +reduce this risk by configuring Tor to use a <a href="<page docs/bridges>#PluggableTransports"> +Pluggable Transport</a> rather than connecting directly to the public Tor network. Ultimately the best protection is a social approach: the more Tor users there are near you and the more <a href="<page about/torusers>">diverse</a> their interests, the less

1 0

[webwml/staging] download: add TOC
by hiro＠torproject.org 27 Aug '18

27 Aug '18

commit 4169e78fbd391f6095d198a08ee290b2c7990812 Author: traumschule <traumschuleriebau(a)riseup.net> Date: Fri Aug 24 05:46:55 2018 +0200 download: add TOC --- download/en/download.wml | 19 ++++++++++++++----- 1 file changed, 14 insertions(+), 5 deletions(-) diff --git a/download/en/download.wml b/download/en/download.wml index 02b9c36b..3eb529ae 100644 --- a/download/en/download.wml +++ b/download/en/download.wml @@ -21,6 +21,15 @@ <div id="content" class="clearfix"> <div id="breadcrumbs"><a href="<page index>">Home » </a><a href="<page download/download>">Download</a></div> + + <div style="float:right; widht:100px; text-align: right;"> + <a href="#windows">Microsoft Windows</a><br /> + <a href="#osx">Apple OS X</a><br /> + <a href="#linux">Linux</a><br /> + <a href="#smartphone">Smartphones</a><br /> + <a href="#source">Source</a> + </div> + <div id="maincol-left">  <div class="warning-top"> @@ -33,7 +42,7 @@ you are used to. Please read the <a href="#warning">full list of warnings</a> fo   <div id="windows" style="border-top: 0px;" class="accordionButton on"> - <span class="windows24">Microsoft Windows</span> + <span class="windows24"><a name="windows">Microsoft Windows</a></span> </div> <div class="accordionContent"> <div class="fauxhead"></div> @@ -74,7 +83,7 @@ you are used to. Please read the <a href="#warning">full list of warnings</a> fo   <div id="apple" class="accordionButton on"> - <span class="mac24">Apple OS X</span></div> + <span class="mac24"><a name="osx">Apple OS X</a></span></div> <div class="accordionContent"> <div class="fauxhead"></div>  @@ -100,7 +109,7 @@ you are used to. Please read the <a href="#warning">full list of warnings</a> fo   <div id="linux" class="accordionButton on"> - <span class="linux24">Linux</span></div> + <span class="linux24"><a name="linux">Linux</a></span></div> <div class="accordionContent"> <div class="fauxhead"></div>  @@ -151,7 +160,7 @@ custom configurations. All an apt-get or yum install away.</p>   <div id="smartphone" class="accordionButton on"> - <span class="smartphone24">Tor for Smartphones</span></div> + <span class="smartphone24"><a name="smartphone">Tor for Smartphones</a></span></div> <div class="accordionContent"> <div class="fauxhead"></div>  @@ -167,7 +176,7 @@ custom configurations. All an apt-get or yum install away.</p>   <div id="source" class="accordionButton on"> - <span class="sourcecode24">Source Code</span></div> + <span class="sourcecode24"><a name="source">Source Code</a></span></div> <div class="accordionContent"> <div class="fauxhead"></div> <div class="package" style="padding-top: 13px; border-top: 0px; border-bottom: 1px solid #888888;">

1 0

[webwml/staging] download: add another unstable version (fixes #26298)
by hiro＠torproject.org 27 Aug '18

27 Aug '18

commit 99b6b0eba40aece4f15259dba6b22a928aaa9941 Author: traumschule <traumschuleriebau(a)riseup.net> Date: Fri Aug 24 04:47:46 2018 +0200 download: add another unstable version (fixes #26298) This stays commented until another unstable is uploaded. --- download/en/download.wml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/download/en/download.wml b/download/en/download.wml index 563a7593..02b9c36b 100644 --- a/download/en/download.wml +++ b/download/en/download.wml @@ -180,6 +180,12 @@ custom configurations. All an apt-get or yum install away.</p> <div class="sig"> (<a href="../dist/tor-<version-alpha>.tar.gz.asc">sig</a>) <a class="siginfo" href="<page docs/verifying-signatures>">What's This?</a> </div> +  </div> <h2>Source Tarball</h2>

1 0

[webwml/staging] downloads-unix: add slackbuilds (fixes #26307)
by hiro＠torproject.org 27 Aug '18

27 Aug '18

commit 9f1b8594148b0a8e8921938ba5c5cc8cb92ec3d2 Author: traumschule <traumschuleriebau(a)riseup.net> Date: Fri Aug 24 05:17:15 2018 +0200 downloads-unix: add slackbuilds (fixes #26307) --- download/en/download-unix.wml | 15 ++++++++++++--- images/distros/slackware.png | Bin 0 -> 19882 bytes 2 files changed, 12 insertions(+), 3 deletions(-) diff --git a/download/en/download-unix.wml b/download/en/download-unix.wml index 70d5ab79..e6717fd2 100644 --- a/download/en/download-unix.wml +++ b/download/en/download-unix.wml @@ -53,13 +53,22 @@ </tr> <tr class="beige"> +<td align="center"><img height="40" src="$(IMGROOT)/distros/slackware.png" alt="Slackware"></td> +<td>Slackware</td> +<td colspan="2"><a href="https://slackbuilds.org/repository/14.2/network/tor/">SlackBuilds.org</a></td> +<td> +<a href="<page docs/tor-doc-unix>">Linux/BSD/Unix</a><br> +</td> +</tr> + +<tr> <td align="center"><img src="$(IMGROOT)/distros/freebsd.png" alt="FreeBSD"></td> <td>FreeBSD</td> <td colspan="2"><kbd>pkg install tor</kbd></td> <td><a href="<page docs/tor-doc-unix>">Linux/BSD/Unix</a></td> </tr> -<tr> +<tr class="beige"> <td align="center"><img src="$(IMGROOT)/distros/openbsd.png" alt="OpenBSD"></td> <td>OpenBSD</td> <td colspan="2"><kbd>pkg_add tor</kbd></td> @@ -69,14 +78,14 @@ </td> </tr> -<tr class="beige"> +<tr> <td align="center"><img src="$(IMGROOT)/distros/netbsd.png" alt="NetBSD"></td> <td>NetBSD</td> <td colspan="2"><kbd>cd /usr/pkgsrc/net/tor && make install</kbd></td> <td><a href="<page docs/tor-doc-unix>">Linux/BSD/Unix</a></td> </tr> -<tr> +<tr class="beige"> <td align="center"><img src="$(IMGROOT)/distros/terminal.png" alt="Source code"></td> <td>Source tarballs</td> <td> diff --git a/images/distros/slackware.png b/images/distros/slackware.png new file mode 100644 index 00000000..5f56a64a Binary files /dev/null and b/images/distros/slackware.png differ

1 0