December 2019 - tor-commits - lists.torproject.org

[tor/master] Merge remote-tracking branch 'tor-github/pr/1584'
by teor＠torproject.org 19 Dec '19

19 Dec '19

commit 5c98a42f491145a0d706ba01bfc1947477f76534 Merge: b7304027f 9a556dee8 Author: teor <teor(a)torproject.org> Date: Thu Dec 19 19:33:29 2019 +1000 Merge remote-tracking branch 'tor-github/pr/1584' scripts/coccinelle/check_cocci_parse.sh | 47 ++++++++++++++++++++++++++++++--- 1 file changed, 44 insertions(+), 3 deletions(-)

1 0

[tor/master] cocci: Require spatch >= 1.0.4 to run checks
by teor＠torproject.org 19 Dec '19

19 Dec '19

commit 9a556dee81cc83faa563fc49ed94ff4924d7a4bd Author: teor <teor(a)torproject.org> Date: Tue Dec 3 14:53:33 2019 +1000 cocci: Require spatch >= 1.0.4 to run checks No changes file required: not in any released version of tor. Fixes bug 32663. --- scripts/coccinelle/check_cocci_parse.sh | 47 ++++++++++++++++++++++++++++++--- 1 file changed, 44 insertions(+), 3 deletions(-) diff --git a/scripts/coccinelle/check_cocci_parse.sh b/scripts/coccinelle/check_cocci_parse.sh index 220b40594..aebfac70f 100755 --- a/scripts/coccinelle/check_cocci_parse.sh +++ b/scripts/coccinelle/check_cocci_parse.sh @@ -21,8 +21,49 @@ exitcode=0 export TOR_COCCI_EXCEPTIONS_FILE="${TOR_COCCI_EXCEPTIONS_FILE:-$scripts_cocci/exceptions.txt}" -if ! command -v spatch; then - echo "Install coccinelle's spatch to check cocci C parsing!" +PURPOSE="cocci C parsing" + +echo "Checking spatch:" + +if ! command -v spatch ; then + echo "Install coccinelle's spatch to check $PURPOSE." + exit "$exitcode" +fi + +# Returns true if $1 is greater than or equal to $2 +version_ge() +{ + if test "$1" = "$2" ; then + # return true + return 0 + fi + LOWER_VERSION="$(printf '%s\n' "$1" "$2" | $SORT_V | head -n 1)" + # implicit return + test "$LOWER_VERSION" != "$1" +} + +# 'sort -V' is a gnu extension +SORT_V="sort -V" +# Use 'sort -n' if 'sort -V' doesn't work +if ! version_ge "1" "0" ; then + echo "Your 'sort -V' command appears broken. Falling back to 'sort -n'." + echo "Some spatch version checks may give the wrong result." + SORT_V="sort -n" +fi + +# Print the full spatch version, for diagnostics +spatch --version + +MIN_SPATCH_V="1.0.4" +# This pattern needs to handle version strings like: +# spatch version 1.0.0-rc19 +# spatch version 1.0.6 compiled with OCaml version 4.05.0 +SPATCH_V=$(spatch --version | head -1 | \ + sed 's/spatch version $[0-9][^ ]*$.*/\1/') + +if ! version_ge "$SPATCH_V" "$MIN_SPATCH_V" ; then + echo "Tor requires coccinelle spatch >= $MIN_SPATCH_V to check $PURPOSE." + echo "But you have $SPATCH_V. Please install a newer version." exit "$exitcode" fi @@ -44,7 +85,7 @@ else fi if test "$exitcode" != 0 ; then - echo "Please fix these cocci parsing errors in the above files" + echo "Please fix these $PURPOSE errors in the above files" echo "Set VERBOSE=1 for more details" echo "Try running test-operator-cleanup or 'make autostyle-operators'" echo "As a last resort, you can modify scripts/coccinelle/exceptions.txt"

1 0

[translation/communitytpo-contentspot] https://gitweb.torproject.org/translation.git/commit/?h=communitytpo-contentspot
by translation＠torproject.org 19 Dec '19

19 Dec '19

commit ea60ac52abd97215fb8575ddb748d85b9359ab93 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Dec 19 09:15:29 2019 +0000 https://gitweb.torproject.org/translation.git/commit/?h=communitytpo-conten… --- contents+ro.po | 27 +++++++++++++++++++++++++-- 1 file changed, 25 insertions(+), 2 deletions(-) diff --git a/contents+ro.po b/contents+ro.po index 8e96c91271..cdadf058a2 100644 --- a/contents+ro.po +++ b/contents+ro.po @@ -6447,11 +6447,14 @@ msgid "" "the service to defend against the attack from the Internet at large rather " "than specifically tailoring behavior for Tor." msgstr "" +"În general, considerăm că problemele de acest fel sunt rezolvate cel mai " +"bine prin îmbunătățirea serviciului de apărare împotriva atacului de pe " +"Internet, în loc să se adapteze în mod special comportamentul pentru Tor." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) msgid "## SSH Bruteforce Attempts" -msgstr "" +msgstr "## Încercări Bruteforce SSH" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6459,6 +6462,8 @@ msgid "" "If you are concerned about SSH scans, you might consider running your SSHD " "on a port other than the default of 22." msgstr "" +"Dacă vă preocupă scanările SSH, puteți lua în considerare rularea SSHD-ului " +"pe un alt port decât pe portul implicit 22." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6466,6 +6471,8 @@ msgid "" "Many worms, scanners, and botnets scan the entire Internet looking for SSH " "logins." msgstr "" +"Mulți viermi, scanere și botnete scanează întregul Internet în căutarea de " +"conectări SSH." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6473,6 +6480,8 @@ msgid "" "The fact that a few logins happened to come from Tor is likely a small blip " "on your overall login attempt rate." msgstr "" +"Faptul că au avut loc câteva autentificări provenite de la Tor este probabil" +" un mic efect asupra ratei generale de încercare de autentificare." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6480,6 +6489,8 @@ msgid "" "You might also consider a rate limiting solution: " "https://kvz.io/blog/2007/07/28/block-brute-force-attacks-with-iptables/" msgstr "" +"Ați putea lua în considerare și o soluție de limitare a ratelor: " +"https://kvz.io/blog/2007/07/28/block-brute-force-attacks-with-iptables/" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6488,6 +6499,10 @@ msgid "" " an automated DNSRBL for you to query to block login attempts coming from " "Tor nodes: https://www.torproject.org/projects/tordnsel.html.en" msgstr "" +"Dacă de fapt este o problemă gravă specifică Tor, proiectul Tor vă oferă un " +"DNSRBL automat pentru a vă solicita să blocați încercările de conectare care" +" provin de la nodurile Tor: " +"https://www.torproject.org/projects/tordnsel.html.en" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6496,11 +6511,16 @@ msgid "" " to your SSH port: https://check.torproject.org/cgi-" "bin/TorBulkExitList.py?ip=YOUR_IP&port=22" msgstr "" +"De asemenea, este posibil să descărcați o listă cu toate IP-urile de ieșire " +"Tor care se vor conecta la portul SSH: https://check.torproject.org/cgi-" +"bin/TorBulkExitList.py?ip=YOUR_IP&port=22" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) msgid "You can use this list to create iptables rules to block the network." msgstr "" +"Puteți utiliza această listă pentru a crea reguli iptables pentru a bloca " +"rețeaua." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6508,11 +6528,14 @@ msgid "" "However, we still recommend using the general approach, as the attack will " "likely simply reappear from an open proxy or other IP once Tor is blocked." msgstr "" +"Cu toate acestea, recomandăm totuși să utilizăm abordarea generală, deoarece" +" atacul va reapărea pur și simplu dintr-un proxy deschis sau alt IP, odată " +"ce Tor este blocat." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) msgid "## Hacked Gmail, Web Forum, or Misc Account Access" -msgstr "" +msgstr "## Gmail hacked, Forum Web sau Acces la conturi diverse" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body)

1 0

[meek/turbotunnel] Regen man pages.
by dcf＠torproject.org 19 Dec '19

19 Dec '19

commit df63758ebbca4b89cc35dfdc80f6ae77e76c5f6e Author: David Fifield <david(a)bamsoftware.com> Date: Thu Dec 19 00:12:30 2019 -0700 Regen man pages. --- doc/meek-client.1 | 28 +++++++++++++++++++++++-- doc/meek-server.1 | 61 ++++++++++++++++++++++++++++++++++++++++++++++++++----- 2 files changed, 82 insertions(+), 7 deletions(-) diff --git a/doc/meek-client.1 b/doc/meek-client.1 index 58fd755..96b202e 100644 --- a/doc/meek-client.1 +++ b/doc/meek-client.1 @@ -2,12 +2,12 @@ .\" Title: meek-client .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/> -.\" Date: 02/06/2019 +.\" Date: 12/19/2019 .\" Manual: \ \& .\" Source: \ \& .\" Language: English .\" -.TH "MEEK\-CLIENT" "1" "02/06/2019" "\ \&" "\ \&" +.TH "MEEK\-CLIENT" "1" "12/19/2019" "\ \&" "\ \&" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -55,6 +55,23 @@ Front domain name\&. If provided, this domain name will replace the domain name in the DNS request and TLS SNI field\&. The URL\(cqs true domain name will still appear in the Host header of HTTP requests\&. .RE .PP +\fBquic\-tls\-pubkey\fR=\fIPUBKEYHASH\fR +.RS 4 +Server public key hashes to accept for the inner QUIC TLS layer\&. These have nothing to do with the outer HTTPS layer, which verifies certificates in the usual PKI way\&. The format of +\fIPUBKEYHASH\fR +is a base64\-encoded SHA\-256 hash of the Subject Public Key Info, as in HPKP\&. This argument may be used more than once; all public key hashes provided are considered good to verify server certificates\&. To generate a public key hash from a certificate file, +.sp +.if n \{\ +.RS 4 +.\} +.nf +$ openssl x509 \-in quic\&.pem \-pubkey \-noout | openssl pkey \-pubin \-outform der | openssl dgst \-sha256 \-binary | openssl enc \-base64 +.fi +.if n \{\ +.RE +.\} +.RE +.PP \fButls\fR=\fICLIENTHELLOID\fR .RS 4 Use the @@ -284,6 +301,13 @@ options in a torrc file\&. Name of a file to write log messages to (default stderr)\&. .RE .PP +\fB\-\-quic\-tls\-pubkey\fR=\fIPUBKEYHASH\fR[,\fIPUBKEYHASH\fR]\&... +.RS 4 +Comma\-separated list of server public key hashes to accept for the inner QUIC TLS layer\&. The option may be given only once, but you can separate multiple hashes using commas\&. Prefer using the +\fBquic\-tls\-pubkey\fR +SOCKS arg over using this command line option\&. +.RE +.PP \fB\-\-url\fR=\fIURL\fR .RS 4 URL to correspond with\&. Prefer using the diff --git a/doc/meek-server.1 b/doc/meek-server.1 index 3b7a07e..3b1c233 100644 --- a/doc/meek-server.1 +++ b/doc/meek-server.1 @@ -2,12 +2,12 @@ .\" Title: meek-server .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/> -.\" Date: 01/17/2019 +.\" Date: 12/19/2019 .\" Manual: \ \& .\" Source: \ \& .\" Language: English .\" -.TH "MEEK\-SERVER" "1" "01/17/2019" "\ \&" "\ \&" +.TH "MEEK\-SERVER" "1" "12/19/2019" "\ \&" "\ \&" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -67,6 +67,40 @@ and allow use to use your own externally acquired certificate\&. .RE .sp +Besides the external HTTPS\-layer TLS, you will need to configure certificates for the internal QUIC TLS layer using the \fB\-\-quic\-tls\-cert\fR and \fB\-\-quic\-tls\-key\fR options\&. You cannot use an automatic Let\(cqs Encrypt certificate for this layer, but you also do not have to get it signed by a CA (you can use a self\-signed certificate), because the client will authenticate it by its public key\&. To generate a certificate and private key for the QUIC layer: +.sp +.if n \{\ +.RS 4 +.\} +.nf +$ openssl genpkey \-algorithm ED25519 > quic\&.key +$ openssl req \-new \-key quic\&.key \-x509 \-days 1000 \-nodes \-out quic\&.crt +Country Name (2 letter code) [AU]:\&. +State or Province Name (full name) [Some\-State]:\&. +Locality Name (eg, city) []:\&. +Organization Name (eg, company) [Internet Widgits Pty Ltd]:\&. +Organizational Unit Name (eg, section) []:\&. +Common Name (e\&.g\&. server FQDN or YOUR name) []:meek\-quic +Email Address []:\&. +$ cat quic\&.key quic\&.crt > quic\&.pem +.fi +.if n \{\ +.RE +.\} +.sp +You can pass quic\&.pem to both the \fB\-\-quic\-tls\-cert\fR and \fB\-\-quic\-tls\-key\fR options\&. To renew the certificate using the same key: +.sp +.if n \{\ +.RS 4 +.\} +.nf +$ openssl req \-new \-key quic\&.pem \-x509 \-days 1000 \-nodes \-out quic\&.pem\&.new +$ mv quic\&.pem\&.new quic\&.pem +.fi +.if n \{\ +.RE +.\} +.sp Configuration for meek\-server usually appears in a torrc file\&. Here is a sample configuration using automatic Let\(cqs Encrypt certificates: .sp .if n \{\ @@ -75,7 +109,7 @@ Configuration for meek\-server usually appears in a torrc file\&. Here is a samp .nf ExtORPort auto ServerTransportListenAddr 0\&.0\&.0\&.0:443 -ServerTransportPlugin meek exec \&./meek\-server \-\-acme\-hostnames meek\-server\&.example \-\-log meek\-server\&.log +ServerTransportPlugin meek exec \&./meek\-server \-\-acme\-hostnames meek\-server\&.example \-\-quic\-tls\-cert=quic\&.pem \-\-quic\-tls\-key=quic\&.pem \-\-log meek\-server\&.log .fi .if n \{\ .RE @@ -89,7 +123,7 @@ Here is a sample configuration using externally acquired certificates: .nf ExtORPort auto ServerTransportListenAddr meek 0\&.0\&.0\&.0:8443 -ServerTransportPlugin meek exec \&./meek\-server 8443 \-\-cert cert\&.pem \-\-key key\&.pem \-\-log meek\-server\&.log +ServerTransportPlugin meek exec \&./meek\-server 8443 \-\-cert cert\&.pem \-\-key key\&.pem \-\-quic\-tls\-cert=quic\&.pem \-\-quic\-tls\-key=quic\&.pem \-\-log meek\-server\&.log .fi .if n \{\ .RE @@ -101,7 +135,7 @@ To listen on ports 80 and 443 without needed to run as root, on Linux, you can u .RS 4 .\} .nf -setcap \*(Aqcap_net_bind_service=+ep\*(Aq /usr/local/bin/meek\-server +$ setcap \*(Aqcap_net_bind_service=+ep\*(Aq /usr/local/bin/meek\-server .fi .if n \{\ .RE @@ -149,6 +183,23 @@ option in torrc, rather than use the option\&. .RE .PP +\fB\-\-quic\-tls\-cert\fR=\fIFILENAME\fR +.RS 4 +Name of a PEM\-encoded TLS certificate for the inner QUIC TLS layer\&. The certificate will be reloaded at runtime if the file changes\&. The inner QUIC TLS layer is entirely independent of the outer HTTPS layer that is configured using +\fB\-\-cert\fR +and +\fB\-\-key\fR\&. +.RE +.PP +\fB\-\-quic\-tls\-key\fR=\fIFILENAME\fR +.RS 4 +Name of a PEM\-encoded TLS private key file for the inner QUIC TLS layer\&. It may be the same file as +\fB\-\-quic\-tls\-cert\fR\&. The private key will be reloaded at runtime if the file changes\&. The inner QUIC TLS layer is entirely independent of the outer HTTPS layer that is configured using +\fB\-\-cert\fR +and +\fB\-\-key\fR\&. +.RE +.PP \fB\-h\fR, \fB\-\-help\fR .RS 4 Display a help message and exit\&.

1 0

[research-web/staging] empty commit to trigger jenkins
by irl＠torproject.org 18 Dec '19

18 Dec '19

commit 86cab7445c9386119d2e4eb136eabfdebb43bf82 Author: Iain R. Learmonth <irl(a)fsfe.org> Date: Wed Dec 18 23:18:11 2019 +0000 empty commit to trigger jenkins

1 0

[research-web/master] empty commit to trigger jenkins
by irl＠torproject.org 18 Dec '19

18 Dec '19

commit 86cab7445c9386119d2e4eb136eabfdebb43bf82 Author: Iain R. Learmonth <irl(a)fsfe.org> Date: Wed Dec 18 23:18:11 2019 +0000 empty commit to trigger jenkins

1 0

[research-web/staging] reissue tech reports with missing nsf acks
by irl＠torproject.org 18 Dec '19

18 Dec '19

commit 7853de9f12625146df303520fb010642e6da6305 Author: Iain R. Learmonth <irl(a)fsfe.org> Date: Wed Dec 18 23:01:31 2019 +0000 reissue tech reports with missing nsf acks --- .../techreports/metrics-evaluation-2019-03-25.pdf | Bin 330531 -> 910400 bytes static/techreports/modern-collector-2018-12-19.pdf | Bin 340684 -> 354888 bytes 2 files changed, 0 insertions(+), 0 deletions(-) diff --git a/static/techreports/metrics-evaluation-2019-03-25.pdf b/static/techreports/metrics-evaluation-2019-03-25.pdf index b0a89e2..4cd30f1 100644 Binary files a/static/techreports/metrics-evaluation-2019-03-25.pdf and b/static/techreports/metrics-evaluation-2019-03-25.pdf differ diff --git a/static/techreports/modern-collector-2018-12-19.pdf b/static/techreports/modern-collector-2018-12-19.pdf index 3e4ff65..b425f77 100644 Binary files a/static/techreports/modern-collector-2018-12-19.pdf and b/static/techreports/modern-collector-2018-12-19.pdf differ

1 0

[research-web/master] reissue tech reports with missing nsf acks
by irl＠torproject.org 18 Dec '19

18 Dec '19

commit 7853de9f12625146df303520fb010642e6da6305 Author: Iain R. Learmonth <irl(a)fsfe.org> Date: Wed Dec 18 23:01:31 2019 +0000 reissue tech reports with missing nsf acks --- .../techreports/metrics-evaluation-2019-03-25.pdf | Bin 330531 -> 910400 bytes static/techreports/modern-collector-2018-12-19.pdf | Bin 340684 -> 354888 bytes 2 files changed, 0 insertions(+), 0 deletions(-) diff --git a/static/techreports/metrics-evaluation-2019-03-25.pdf b/static/techreports/metrics-evaluation-2019-03-25.pdf index b0a89e2..4cd30f1 100644 Binary files a/static/techreports/metrics-evaluation-2019-03-25.pdf and b/static/techreports/metrics-evaluation-2019-03-25.pdf differ diff --git a/static/techreports/modern-collector-2018-12-19.pdf b/static/techreports/modern-collector-2018-12-19.pdf index 3e4ff65..b425f77 100644 Binary files a/static/techreports/modern-collector-2018-12-19.pdf and b/static/techreports/modern-collector-2018-12-19.pdf differ

1 0

[tech-reports/master] Adding missing NSF acks
by irl＠torproject.org 18 Dec '19

18 Dec '19

commit e54872951fb1411d3327c2b5e0bbcb514ca18b13 Author: Iain R. Learmonth <irl(a)fsfe.org> Date: Wed Dec 18 22:54:53 2019 +0000 Adding missing NSF acks --- 2018/modern-collector/modern-collector.tex | 9 +++++---- 2019/metrics-evaluation/metrics-evaluation.tex | 8 ++++---- 2 files changed, 9 insertions(+), 8 deletions(-) diff --git a/2018/modern-collector/modern-collector.tex b/2018/modern-collector/modern-collector.tex index 74d67ca..f1ff6a9 100644 --- a/2018/modern-collector/modern-collector.tex +++ b/2018/modern-collector/modern-collector.tex @@ -114,10 +114,11 @@ CollecTor service. {\renewcommand{\thefootnote}{} \footnotetext{This work was supported by Open Technology Fund under contract -number 1002-2017-018. Support does not imply endorsement. With thanks to Nick -Mathewson and Tim Wilson-Brown for their help in clarifying certain points in -specifications and how they are implemented in \texttt{tor}, and thanks to -Damian Johnson for his assistance in experimentation using the \stem~library.}} +number 1002-2017-018, and by NSF grants CNS-1526306 and CNS-1619454. Support +does not imply endorsement. With thanks to Nick Mathewson and Tim Wilson-Brown +for their help in clarifying certain points in specifications and how they are +implemented in \texttt{tor}, and thanks to Damian Johnson for his assistance in +experimentation using the \stem~library.}} \end{abstract} \pagebreak \section{Introduction}\label{sec:intro}% diff --git a/2019/metrics-evaluation/metrics-evaluation.tex b/2019/metrics-evaluation/metrics-evaluation.tex index bb5b035..3054d31 100644 --- a/2019/metrics-evaluation/metrics-evaluation.tex +++ b/2019/metrics-evaluation/metrics-evaluation.tex @@ -57,10 +57,10 @@ Karsten Loesing\\The Tor Project\\ \href{mailto:karsten@torproject.org}{karsten@ their products. {\renewcommand{\thefootnote}{} \footnotetext{This work was supported by Open Technology Fund under contract -number 1002-2017-018. Support does not imply endorsement. With thanks to the -OONI team for their assistance in completing a comparison between our two data -pipelines, and thanks to Ana Custura for her contributions to the OnionPerf -section of this report. +number 1002-2017-018, and by NSF grants CNS-1526306 and CNS-1619454. Support +does not imply endorsement. With thanks to the OONI team for their assistance +in completing a comparison between our two data pipelines, and thanks to Ana +Custura for her contributions to the OnionPerf section of this report. }} \end{abstract}

1 0

[translation/tbmanual-contentspot_completed] https://gitweb.torproject.org/translation.git/commit/?h=tbmanual-contentspot_completed
by translation＠torproject.org 18 Dec '19

18 Dec '19

commit aca8e3e11b7e684bf7d0001d9f77d552b2d6a8fd Author: Translation commit bot <translation(a)torproject.org> Date: Wed Dec 18 22:23:36 2019 +0000 https://gitweb.torproject.org/translation.git/commit/?h=tbmanual-contentspo… --- contents+lt.po | 16 ++++++++++++++-- 1 file changed, 14 insertions(+), 2 deletions(-) diff --git a/contents+lt.po b/contents+lt.po index b4d2a6ea51..7939962c5e 100644 --- a/contents+lt.po +++ b/contents+lt.po @@ -34,7 +34,7 @@ msgstr "Dokumentacija" #: https//tb-manual.torproject.org/menu/ #: (content/menu/contents+en.lrtopic.body) msgid "Press" -msgstr "" +msgstr "Žiniasklaida" #: https//tb-manual.torproject.org/menu/ #: (content/menu/contents+en.lrtopic.body) @@ -1402,7 +1402,7 @@ msgstr "" #: https//tb-manual.torproject.org/onion-services/ #: (content/onion-services/contents+en.lrtopic.body) msgid "### HOW TO ACCESS AN ONION SERVICE" -msgstr "" +msgstr "### KAIP PASIEKTI ONION PASLAUGĄ" #: https//tb-manual.torproject.org/onion-services/ #: (content/onion-services/contents+en.lrtopic.body) @@ -1986,6 +1986,13 @@ msgid "" " displaying correctly, so Tor Browser’s default setting is to allow all " "websites to run scripts in \"Standard\" mode." msgstr "" +"Naudotojai, kuriems, naršant internete, reikia aukšto saugumo lygmens, " +"turėtų nusistatyti Tor Naršyklės [Saugumo sliaužiklį](/lt/security-slider) į" +" „Saugesnį“ (kuris išjungia „JavaScript“ ne HTTPS internetinėse svetainėse) " +"arba „Saugiausią“ (kuris tai atlieka visose internetinėse svetainėse). Vis " +"dėlto, išjungus „JavaScript“ daugelis internetinių svetainių nebus tinkamai " +"atvaizduojamos, todėl numatytasis Tor Naršyklės nustatymas yra leisti visoms" +" internetinėms svetainėms vykdyti scenarijus „Standartinėje“ veiksenoje." #: https//tb-manual.torproject.org/plugins/ #: (content/plugins/contents+en.lrtopic.body) @@ -2243,6 +2250,11 @@ msgid "" "executable text files when they are opened\" to \"Ask every time\", then " "click OK." msgstr "" +"* Norėdami paleisti Tor Naršyklę Ubuntu sistemose, naudotojai turi įvykdyti " +"apvalkalo scenarijų. Atverkite „Failus“ („Unity“ naršyklę), atverkite " +"„Nuostatas“ → Elgsenos skirtuką → Nustatykite „Vykdyti vykdomuosius " +"tekstinius failus, kai jie atveriami“ į „Klausti kiekvieną kartą“, tada " +"spustelėkite Gerai." #: https//tb-manual.torproject.org/known-issues/ #: (content/known-issues/contents+en.lrtopic.body)

1 0