January 2020 - tor-commits - lists.torproject.org

[community/develop] Adding http://
by hiro＠torproject.org 23 Jan '20

23 Jan '20

commit 6fd7a7224bd944c2f8e27afddab1b0c073aaae05 Author: Enjeck Cleopatra <32180937+PROTechThor(a)users.noreply.github.com> Date: Sun Dec 29 14:43:20 2019 +0100 Adding http:// --- content/onion-services/setup/contents.lr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/onion-services/setup/contents.lr b/content/onion-services/setup/contents.lr index a8aefdc..14f681f 100644 --- a/content/onion-services/setup/contents.lr +++ b/content/onion-services/setup/contents.lr @@ -61,7 +61,7 @@ Now save your `torrc` and restart Tor. If Tor starts up again, great. Otherwise, something is wrong. First look at your logfiles for hints. It will print some warnings or error messages. That should give you an idea what went wrong. -Typically, there are typos in the torrc or wrong directory permissions (See the [logging FAQ](www.torproject.org/docs/faq#Logs) entry if you don't know how to enable or find your log file.) +Typically, there are typos in the torrc or wrong directory permissions (See the [logging FAQ](https://www.torproject.org/docs/faq#Logs) entry if you don't know how to enable or find your log file.) When Tor starts, it will automatically create the `HiddenServiceDir` that you specified (if necessary). Make sure this is the case.

1 0

[community/develop] add redirects for languages still not published.
by hiro＠torproject.org 23 Jan '20

23 Jan '20

commit f1d585122351616a09acddc86d37d6a35d3328d0 Author: emma peel <emma.peel(a)riseup.net> Date: Mon Dec 16 11:22:31 2019 +0100 add redirects for languages still not published. will-fix: https://trac.torproject.org/projects/tor/ticket/32760 --- .htaccess | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/.htaccess b/.htaccess index 6e2c53a..ba7c37a 100644 --- a/.htaccess +++ b/.htaccess @@ -1,4 +1,22 @@ +RewriteEngine On + # forward requests in /en to the root folder RewriteRule ^(en-US|en)$ / [R=302,L] RewriteRule ^(en-US|en)/(.*) /$2 [R=302,L] +# forward requests in /en and /en-US to the root folder +RewriteRule ^(en|en-US)$ / [R=302,L] +RewriteRule ^(en|en-US)/(.*) /$2 [R=302,L] + +# Rewrites for languages that have a different mapping in the page than in TBB +RewriteRule ^(es-ES|es-MX|es-CO|es-AR)(.*) /es$2 [R=302,L] + +# we have only one translation for this locales +RewriteRule ^(bn-BD|bn-IN)(.*) /bn$2 [R=302,L] +RewriteRule ^ga-IE/(.*) /ga$1 [R=302,L] + +# Rewrites for languages that have a Tor Browser release +# but don't have a community page +# You can see them at https://dist.torproject.org/torbrowser/, pick the last alpha for the most languages +# this languages are the translation priority for the community portal! +RewriteRule ^(ar|ca|cs|da|de|el|es|fa|fr|ga|he|hu|id|is|ja|ka|ko|lt|mk|ms|nb-NO|nl|pl|pt-BR|pt-PT|ro|ru|sv-SE|th|tr|vi|zh-CN|zh-TW)/(.*) /$2 [R=302,L]

1 0

[community/develop] edited one sentence for clarity
by hiro＠torproject.org 23 Jan '20

23 Jan '20

commit 51c49f96aa618fef49f688953ea6297d57d4d9b5 Author: stephw <steph(a)torproject.org> Date: Fri Jan 10 18:24:37 2020 +0000 edited one sentence for clarity --- content/localization/becoming-tor-translator/contents.lr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/localization/becoming-tor-translator/contents.lr b/content/localization/becoming-tor-translator/contents.lr index 9b348a3..38ef805 100644 --- a/content/localization/becoming-tor-translator/contents.lr +++ b/content/localization/becoming-tor-translator/contents.lr @@ -20,7 +20,7 @@ Thank you for your interest in helping us with translations. # Localization mailing list <a name="tor-l10n" /> -To communicate with other translators, please join the [Tor localization mailing list](https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-l10n), where we organize translations, take decisions, report errors in source strings, etc. Please introduce yourself and ask any questions you may have after following up this instructions. +To communicate with other translators, please join the [Tor localization mailing list](https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-l10n), where we organize translations, report errors in source strings, make final copy decisions, and address issues that arise. Please introduce yourself and ask any questions you may have after following up this instructions. # Translation platform

1 0

[community/develop] Change contents files for a few projects
by hiro＠torproject.org 23 Jan '20

23 Jan '20

commit 3084f4c3384dc7d96ffd8f086f19d56b6cd6ff8e Author: hiro <hiro(a)torproject.org> Date: Thu Jan 23 17:42:16 2020 +0100 Change contents files for a few projects --- content/gsoc/onion-toolbox/contents.lr | 2 +- content/gsoc/privacy-friendly-web/contents.lr | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/content/gsoc/onion-toolbox/contents.lr b/content/gsoc/onion-toolbox/contents.lr index f9f0b8d..b9f50bc 100644 --- a/content/gsoc/onion-toolbox/contents.lr +++ b/content/gsoc/onion-toolbox/contents.lr @@ -14,7 +14,7 @@ color: primary --- key: 1 --- -languages: javascript +languages: Python, Docker, PythonQt5 --- mentors: hiro, asn --- diff --git a/content/gsoc/privacy-friendly-web/contents.lr b/content/gsoc/privacy-friendly-web/contents.lr index 6eab414..be886de 100644 --- a/content/gsoc/privacy-friendly-web/contents.lr +++ b/content/gsoc/privacy-friendly-web/contents.lr @@ -14,7 +14,7 @@ color: primary --- key: 1 --- -languages: javascript, CSS, html, Python +languages: javascript, CSS, HTML, Python --- mentors: hiro ---

1 0

[community/develop] Fix merge conflict for gsoc branch
by hiro＠torproject.org 23 Jan '20

23 Jan '20

commit 4d0b5c4d3c2e42af215d4782f781a534d5bc420d Merge: 80468d0 3084f4c Author: hiro <hiro(a)torproject.org> Date: Thu Jan 23 17:44:19 2020 +0100 Fix merge conflict for gsoc branch .htaccess | 18 +++++ .../gsoc/cloudflare-captcha-monitoring/contents.lr | 49 ++++++++++++ content/gsoc/contents.lr | 21 +++++ content/gsoc/onion-toolbox/contents.lr | 60 +++++++++++++++ content/gsoc/privacy-friendly-web/contents.lr | 45 +++++++++++ content/gsoc/tor-relay-ipv6-support/contents.lr | 58 ++++++++++++++ content/gsoc/tor-weather/contents.lr | 90 ++++++++++++++++++++++ content/localization/pick-a-project/contents.lr | 4 +- content/onion-services/setup/contents.lr | 2 +- .../community-resources/bad-relays/contents.lr | 26 ++++--- .../community-resources/contents.lr | 2 +- .../eff-tor-legal-faq/contents.lr | 66 ++++++++++++---- .../tor-dmca-response/contents.lr | 2 + .../community-resources/good-bad-isps/contents.lr | 2 + .../community-resources/swag/contents.lr | 6 +- .../tor-abuse-templates/contents.lr | 2 + .../tor-exit-guidelines/contents.lr | 8 +- .../tor-relay-universities/contents.lr | 4 +- content/relay-operations/contents.lr | 2 +- .../relays-requirements/contents.lr | 2 +- .../bridge/debian-ubuntu/contents.lr | 15 ++-- .../technical-setup/bridge/docker/contents.lr | 87 ++++++++++++++------- content/training/best-practices/contents.lr | 3 +- lego | 2 +- models/project.ini | 51 ++++++++++++ models/projects.ini | 33 ++++++++ templates/gsoc.html | 23 ++++++ templates/hero.html | 2 +- templates/macros/projects.html | 16 ++++ templates/project.html | 49 ++++++++++++ 30 files changed, 671 insertions(+), 79 deletions(-) diff --cc content/localization/pick-a-project/contents.lr index 765cd4e,c5b5860..9234b53 --- a/content/localization/pick-a-project/contents.lr +++ b/content/localization/pick-a-project/contents.lr @@@ -19,10 -19,9 +19,10 @@@ We want our tools to be available and l <img class="col-lg-6" src="../../static/images/localization/stats.png"> - Although we would value your contribution to any of the projects above, the most critical are Tor Browser, the Tor Browser User Manual, and our Support Portal: + Although we would value your contribution to any of the projects above, our most critical needs are Tor Browser, the Tor Browser User Manual, and our Support Portal: * Tor Browser is translated in many different Transifex resources, but you can see the [Tor Browser total strings translated per language](https://torpat.ch/locales) to see where help is needed. -* The Tor Browser User Manual is a very useful resource for new users that do not speak English, see [Tor Browser User Manual translation statistics](https://torpat.ch/manual-locales) or [translate](https://www.transifex.com/otf/tor-project-support-community-port… to help. -* The [Support Portal](https://support.torproject.org/) is also a valuable resource for all Tor users, see [Tor Support Portal translation statistics](https://torpat.ch/support-locales) or [translate](https://www.transifex.com/otf/tor-project-support-community-port… to help. -* The [Community Portal](https://community.torproject.org/) is this website, where you can find ways to contribute to Tor. Help us [translate](https://www.transifex.com/otf/tor-project-support-community-port… it. +* The Tor Browser User Manual is a very useful resource for new users that do not speak English, see [Tor Browser User Manual translation statistics](https://torpat.ch/manual-locales) or [translate](https://www.transifex.com/otf/tor-project-support-community-port…. +* The [Support Portal](https://support.torproject.org/) is also a valuable resource for all Tor users, see [Tor Support Portal translation statistics](https://torpat.ch/support-locales) or [translate](https://www.transifex.com/otf/tor-project-support-community-port… +* The [Community Portal](https://community.torproject.org/) is this website, where you can find ways to contribute to Tor. + [Translate](https://www.transifex.com/otf/tor-project-support-community-port… diff --cc lego index bbf8108,f0ea955..e9dd081 --- a/lego +++ b/lego @@@ -1,1 -1,1 +1,1 @@@ - Subproject commit bbf8108b622ef4c8b1d96b9790fc3e77aa1c030f -Subproject commit f0ea955c50f147813fd7735d226e7f4689e94523 ++Subproject commit e9dd081027132aa21f6abd74be708323ff3b9180

1 0

[community/develop] Merge remote-tracking branch 'PROTechThor/PROTechThor-log-faq-link'
by hiro＠torproject.org 23 Jan '20

23 Jan '20

commit 09a81245f9e9cb1cc122d64efef9c755aa445253 Merge: 649f995 6fd7a72 Author: emma peel <emma.peel(a)riseup.net> Date: Wed Jan 15 10:44:02 2020 +0100 Merge remote-tracking branch 'PROTechThor/PROTechThor-log-faq-link' content/onion-services/setup/contents.lr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

[community/develop] Add Project Ideas for GSoC to Community Portal
by hiro＠torproject.org 23 Jan '20

23 Jan '20

commit 4de1020c71e1af0a53c2469ad7e45c26a54aafd2 Author: Pili Guerra <pili(a)piliguerra.com> Date: Wed Jan 22 13:04:16 2020 +0100 Add Project Ideas for GSoC to Community Portal --- .../gsoc/cloudflare-captcha-monitoring/contents.lr | 47 +++++++++++ content/gsoc/contents.lr | 17 ++++ content/gsoc/onion-toolbox/contents.lr | 58 ++++++++++++++ content/gsoc/privacy-friendly-web/contents.lr | 44 +++++++++++ content/gsoc/tor-relay-ipv6-support/contents.lr | 56 ++++++++++++++ content/gsoc/tor-weather/contents.lr | 90 ++++++++++++++++++++++ models/project.ini | 43 +++++++++++ models/projects.ini | 33 ++++++++ templates/gsoc.html | 41 ++++++++++ templates/macros/projects.html | 16 ++++ templates/project.html | 49 ++++++++++++ 11 files changed, 494 insertions(+) diff --git a/content/gsoc/cloudflare-captcha-monitoring/contents.lr b/content/gsoc/cloudflare-captcha-monitoring/contents.lr new file mode 100644 index 0000000..e6ba0d5 --- /dev/null +++ b/content/gsoc/cloudflare-captcha-monitoring/contents.lr @@ -0,0 +1,47 @@ +_model: project +--- +_template: project.html +--- +active: True +--- +section: GSoC +--- +section_id: gsoc +--- +color: primary +--- +key: 1 +--- +languages: javascript +--- +mentors: arma, gk +--- +difficulty: medium +--- +title: Cloudflare Captcha Monitoring +--- +summary: + +We should track the rate that cloudflare gives captchas to Tor users over time. + +--- +description: + +My suggested way of doing that tracking is to sign up a very simple static webpage to be fronted by cloudflare, and then fetch it via Tor over time, and record and graph the rates of getting a captcha vs getting the real page. + +The reason for the "simple static page" is to make it really easy to distinguish whether we're getting hit with a captcha. The "distinguishing one dynamic web page from another" challenge makes exitmap tricky in the general case, but we can remove that variable here. + +One catch is that Cloudflare currently gives alt-svc headers in response to fetches from Tor addresses. So that means we need a web client that can follow alt-srv headers -- maybe we need a full Selenium like client? + +Once we get the infrastructure set up, we would be smart to run a second one which is just wget or curl or lynx or something, i.e. which doesn't behave like Tor Browser, in order to be able to track the difference between how Cloudflare responds to Tor Browser vs other browsers. + +I imagine that Cloudflare should be internally tracking how they're handling Tor requests, but having a public tracker (a) gives the data to everybody, and (b) helps Cloudflare have a second opinion in case their internal data diverges from the public version. + +The Berkeley ICSI group did research that included this sort of check: +https://www.freehaven.net/anonbib/#differential-ndss2016 +https://www.freehaven.net/anonbib/#exit-blocking2017 +but what I have in mind here is essentially a simpler subset of this research, skipping the complicated part of "how do you tell what kind of response you got" and with an emphasis on automation and consistency. + +There are two interesting metrics to track over time: one is the fraction of exit relays that are getting hit with captchas, and the other is the chance that a Tor client, choosing an exit relay in the normal weighted faction, will get hit by a captcha. + +Then there are other interesting patterns to look for, e.g. "are certain IP addresses punished consistently and others never punished, or is whether you get a captcha much more probabilistic and transient?" And does that pattern change over time? \ No newline at end of file diff --git a/content/gsoc/contents.lr b/content/gsoc/contents.lr new file mode 100644 index 0000000..2e4ffb5 --- /dev/null +++ b/content/gsoc/contents.lr @@ -0,0 +1,17 @@ +_template: layout.html +--- +section: GSoC +--- +section_id: gsoc +--- +html: gsoc.html +--- +color: primary +--- +key: 0 +--- +title: Project Ideas +--- +body: + +You may find some of these projects to be good ideas for Google Summer of Code. We have labelled each idea with which of our core developers would be good mentors. If one or more of these ideas looks promising to you, please contact us to discuss your plans rather than sending blind applications. \ No newline at end of file diff --git a/content/gsoc/onion-toolbox/contents.lr b/content/gsoc/onion-toolbox/contents.lr new file mode 100644 index 0000000..a551ba8 --- /dev/null +++ b/content/gsoc/onion-toolbox/contents.lr @@ -0,0 +1,58 @@ +_model: project +--- +_template: project.html +--- +active: True +--- +section: GSoC +--- +section_id: gsoc +--- +color: primary +--- +key: 1 +--- +languages: javascript +--- +mentors: hiro, asn +--- +difficulty: medium +--- +title: Onion Tool Box +--- +summary: + +Myonion is a developer tool box, providing a command line interface and a GUI to configure and deploy existing services via .onion. A minimal prototype for myonion already [exists](https://github.com/hiromipaw/myonion). + +Someone that may want to run an onion service can use the myonion wrapper app to start a .onion from their computer and sharea static website or a web application. + +Myonion can also be used to deploy the resulting configured app to a defined set of cloud providers. + +--- +description: + +## Problem definition + +It is not necessarily difficult to use onion services, but it might be tricky to configure a web service to be offered via .onion so that it doesn’t leak sensitive information. + +There are detailed [guides](https://riseup.net/en/security/network-security/tor/onionservices-b… available for users that would like to offer a web application via .onion and some tools have been developed to help service operators: discover known misconfiguration or [vulnerabilities](https://onionscan.org/) or deploy an [onion site](https://github.com/alecmuffett/eotk). + +## Scope + +Myonion provides a way to build and deploy onion ready applications, allowing developers to build and test web applications and easily share them with others, bundling the code and configuration in a lightweight, portable Docker container application that runs thesame everywhere. + +The experience for developers will be similar to using other industry solutions, like the [Docker desktop app](https://www.docker.com/products/docker-desktop). + +Developers using myonion are provided with pre-defined and customizable application templates, with corresponding configuration and a test set, eliminating error-prone manual setup and known onion service configuration mistakes. + +The resulting application is therefore deployable via a set of endpoint management tools to known providers. Providing a way to deploy onion services at scale. + +## Impact + +The idea behind myonion is to make onion services accessible to developers that might be interested to innovate in the privacy space, building applications that are designed for privacy and security. + +Involving a wider developer community can help creating a better image of Tor and onion services, replacing the “dark net” narrative with the secure and private web one. + +Onion services can also be relevant to all those people interested in the “zero-trust” strategy. The concept behind zero-trust is to adopt strategies and tools to help prevent data breaches by eliminating the concept of trust from an organization’s network architecture, with the principle of never trust, always verify. + +Ultimately myonion is about creating a better experience for onion services developers and operators and therefore fostering a more legitimate onion service ecosystem. diff --git a/content/gsoc/privacy-friendly-web/contents.lr b/content/gsoc/privacy-friendly-web/contents.lr new file mode 100644 index 0000000..da9cc13 --- /dev/null +++ b/content/gsoc/privacy-friendly-web/contents.lr @@ -0,0 +1,44 @@ +_model: project +--- +_template: project.html +--- +active: True +--- +section: GSoC +--- +section_id: gsoc +--- +color: primary +--- +key: 1 +--- +languages: javascript +--- +mentors: hiro +--- +difficulty: medium +--- +title: Privacy Friendly Web +--- +summary: + +The scope of this project is creating a open-source community-driven browsable list of patterns and release a css/js framework that web developers can extend and use in their work. +--- +description: + +Security concerned web users take conscious steps to limit the amount of data they share with the websites visited and third party services. + +There are a number of security enhancing tools available. Some come in the form of browser extensions and javascript blockers, others are full fledged web browsers designed with providing extra security to their users. + +One of this is the Tor Browser. The Tor Browser was designed to provide privacy while surfing the web and defend users against both network and local forensic adversaries. There are two main categories of requirements that have been considered: Security Requirements, and Privacy Requirements. + +Security Requirements are the minimum properties in order for a browser to be able to support Tor and similar privacy proxies safely. Privacy requirements are primarily concerned with reducing linkability: the ability for a user's activity on one site to be linked with their activity on another site without their knowledge or explicit consent. + +Websites can work seamsly with the Tor Browser and other privacy enhancing browsers and tools if they adopt a series of respectful and ethical patterns. + +The Tor Browser is in fact, based on Mozilla's Extended Support Release (ESR) Firefox branch. We have a series of patches against this browser to enhance privacy and security. Browser behavior is additionally augmented through the Torbutton extension, and we also change a number of Firefox preferences from their defaults. + +The Tor Project has developed over the years a set of web development guidelines that allow websites to work with security enhanced browsers without causing any or minimal functionality destruption to their users. These guidelines have been shaped in an internal styleguide that has been adopted across all torproject.org websites. + +We are now formalizing these web development patterns and some security concerns that need to be considered when developing websites for users surfing the web with security enhanced browsers and tools. + diff --git a/content/gsoc/tor-relay-ipv6-support/contents.lr b/content/gsoc/tor-relay-ipv6-support/contents.lr new file mode 100644 index 0000000..3624ca1 --- /dev/null +++ b/content/gsoc/tor-relay-ipv6-support/contents.lr @@ -0,0 +1,56 @@ +_model: project +--- +_template: project.html +--- +active: True +--- +section: GSoC +--- +section_id: gsoc +--- +color: primary +--- +key: 1 +--- +languages: C +--- +mentors: teor, ahf, dgoulet, catalyst +--- +difficulty: Medium +--- +title: Improve Tor Relay IPv6 Support +--- +summary: + +Tor helps people stay safe on the internet, by keeping their internet use secure and anonymous. More Tor clients are running on IPv6-only or dual-stack networks. But only 20% of Tor’s available relay bandwidth supports IPv6. We want to automate relay IPv6 address discovery and reachability checks, so that it is easier for relay operators to run IPv6 relays. + +--- +description: + +Students may choose to focus on designing and implementing core features, tor relay testing, reporting statistics, or diagnosing and fixing bugs. + + +## Prerequisites + +* Network configuration skills +* Basic understanding of Internet Protocol (IP) versions + +Recommended: + +* Experience testing network software +* Experience running Internet-connected servers + +## Links/Resources + +https://trac.torproject.org/projects/tor/wiki/TorRelayGuide#IPv6 + +https://trac.torproject.org/projects/tor/wiki/org/roadmaps/Tor/IPv6Features#ReachabilityChecks + +## Programming skills needed: + +* C coding +* Building Unix-based software + +Recommended: + +* Experience with network programming diff --git a/content/gsoc/tor-weather/contents.lr b/content/gsoc/tor-weather/contents.lr new file mode 100644 index 0000000..3bc6714 --- /dev/null +++ b/content/gsoc/tor-weather/contents.lr @@ -0,0 +1,90 @@ +_model: project +--- +_template: project.html +--- +active: True +--- +section: GSoC +--- +section_id: gsoc +--- +color: primary +--- +key: 2 +--- +languages: TBD +--- +mentors: karsten +--- +difficulty: medium +--- +title: Tor Weather +--- +summary: + +Tor Weather is the most efficient way to achieve and maintain a healthy Tor network on the long run. + +--- +description: + +Tor Weather was [discontinued on 2016-04-04](https://lists.torproject.org/pipermail/tor-relays/2016-April/00…, however "Tor Weather is still a good idea, it just needs somebody to implement it." + +How Tor Weather looked like: +https://web.archive.org/web/20141004055709/https://weather.torproject.org/subscribe/ + +## Motivation + +If a relay disappears today, it is unlikely that anyone will notice or even send an email to the operator unless it is a big one. + +Relay operators and the entire tor network would benefit from a Tor Weather service because it notifies relay operators when the state of their relays changed (and more). This will increase the likelihood that relay operators notice problems and actually mitigate the problem otherwise there is no "user feedback" since tor can cope with disappearing relays quite well. + +It also: +- shows the relay operator that someone actually cares if their relays go down or become outdated or have another problem +- gives the operator relay best-practices information. + +## Expected Effects + +If enough operators subscribe to such a service: +- relays might become more long lived / the churn rate might decrease +- the fraction of relays running outdated tor versions might decrease +- the fraction of exits with broken DNS might decrease + +It also has the benefit of being able to contact relay operators: +- completely automatically +- even if they choose to not set a public ContactInfo string in their torrc files. + +## Ideas for Notification Types + +_(sorted by importance)_ + +Support subscribing via single relay FP or MyFamily groups (should not need any subscription change if a relay gets added to the family). + +- [ ] Email me when my node is down +_How long before we send a notification?_ +- [ ] email me when my relay is affected by a security vulnerability +- [ ] email me when my relay runs an end-of-life version of tor +- [ ] email me when my relay runs an outdated tor version (note: this should depend on the related onionoo bugs to avoid emailing alpha relay people) +- [ ] email me when my exit relay fails to resolve hostnames (DNS failure) +- [ ] email me when my relay looses the [ ] stable, [ ] guard, [ ] exit flag +- [ ] email me when my MyFamily configuration is broken (meaning: non-mutual config detected or relay with same contactInfo but no MyFamily) +- [ ] email me when you detect issues with my relay +- [ ] email me with suggestions for configuration improvements for my relay (only once per improvement) +- [ ] email me when my relay is on the top [ ] 20 [ ] 50 [ ] 100 relays list +- [ ] email me with monthly/quarterly status information that includes information like what my position in the overall relay list is (sorted by CW), how much traffic my relay did during the last month and what fraction of the months time your relay was included in consensus as running (this shows information on how many % of the months' consensuses this relay has been included and running) +- [ ] aggregate emails for all my relays into a single digest email +- [ ] email me about new relay requirements +- [ ] email me about tor relay operator events + + +*Task:* Write a specification describing the meaning of each checkbox + +## Security and Privacy Implications + +The service stores email addresses of potential tor relay operators, they should be kept private and safeguarded, but a passive observer can collect them by watching outbound email traffic if no TLS is used. Suggest to use a dedicated email address for this service. + +## Additional Ideas + +- easy: integration into tor: show the URL pointing to the new Tor Weather service like the current link to the lifecycle blogpost when tor starts and detects to be a new relay +- Provide an uptimerobot-style status page for relay operators using onionoo data + + diff --git a/models/project.ini b/models/project.ini new file mode 100644 index 0000000..8b286a0 --- /dev/null +++ b/models/project.ini @@ -0,0 +1,43 @@ +[model] +name = Project +label = {{ this.title }} + +[fields.title] +label = Title +type = string + +[fields.link] +label = Link +type = url + +[fields.active] +label = Active +type = boolean + +[fields.summary] +label = Summary +type = markdown + +[fields.color] +label = Color +type = string + +[fields.description] +label = Description +type = markdown + +[fields.mentors] +label = Mentors +type = string + +[fields.languages] +label = Languages +type = string + +[fields.mentors] +label = Mentors +type = string + +[fields.difficulty] +label = Difficulty Level +type = string \ No newline at end of file diff --git a/models/projects.ini b/models/projects.ini new file mode 100644 index 0000000..c09bf77 --- /dev/null +++ b/models/projects.ini @@ -0,0 +1,33 @@ +[model] +name = Projects +label = {{ this.title }} + +[fields.title] +label = Title +type = string + +[fields.section] +label = Section +type = string +translate = True + +[fields.section_id] +label = Section_id +type = string +translate = False + +[fields.body] +label = Body +type = markdown + +[fields.color] +label = Color +type = string + +[fields.html] +label = Html +type = string + +[children] +model = project +order_by = title diff --git a/templates/gsoc.html b/templates/gsoc.html new file mode 100644 index 0000000..1c1add9 --- /dev/null +++ b/templates/gsoc.html @@ -0,0 +1,41 @@ + {% include 'breadcrumb.html' %} + <div class="row flex-xl-nowrap"> + <main role="main" class="mx-auto col-12 {{ bag('alternatives', this.alt, 'order') }}"> + <div class="container py-3"> + <div class="row"> + <p>{{ this.body }}</p> + </div> + </div> + <div class="container py-3"> + <h3 class="text-primary display-5">{{ _('Project Ideas') }}</h3> + </div> + <div class="container py-3"> + <div class="accordion" id="accordionJobs"> + {% from "macros/projects.html" import render_active %} + {% set items = this.children.filter(F.active == True).all() %} + {% for item in items %} + {{ render_active(item, this.alt) }} + {% endfor %} + </div> + </div> + <div class="container py-3"> + <h3 class="text-primary display-5">{{ _('Previous Projects') }}</h3> + </div> + <div class="container py-3"> + <div class="row"> + <div class="col-85"> + <ul class="jobs-ul"> + {% set items = this.children %} + {% for item in items.filter(F.active == False) %} + <li>{{ item.title }}</li> + {% endfor %} + </ul> + </div> + </div> + <div class="row"> + <p>{{ _('None of these ideas seem appealing? You may also want to propose your own project idea — which often results in the best projects.') }} <a href="mailto:gso@torproject.org">{{ _('We invite you to contact us to discuss your own project idea.') }}</a></p> + </div> + </div> + </main> + </div> + \ No newline at end of file diff --git a/templates/macros/projects.html b/templates/macros/projects.html new file mode 100644 index 0000000..99e102b --- /dev/null +++ b/templates/macros/projects.html @@ -0,0 +1,16 @@ +{% macro render_active(item, alternative) %} +<div class="card border-0"> + <div class="card-header bg-white border-0" id="headingOne"> + <h5 class="mb-0"> + <a href="{{ item.path|url }}">{{ item.title }}</a> + </h5> + <span class="badge badge-primary">{{ item.languages }}</span> + </div> + <div> + <div class="card-body"> + {{ item.summary }} + <a href="{{ item.path|url }}">{{ _('Read more.') }}</a> + </div> + </div> +</div> +{% endmacro %} \ No newline at end of file diff --git a/templates/project.html b/templates/project.html new file mode 100644 index 0000000..1aaed71 --- /dev/null +++ b/templates/project.html @@ -0,0 +1,49 @@ +<!doctype html> +{% include 'meta.html' %} +<body class="no-gutters"> + <header> + {% include 'navbar.html' %} + </header> + <div class="page"> + {% include 'header.html' %} + {% include 'pagenav.html' %} + <div class="container-fluid"> + <div class="row flex-xl-nowrap"> + <main role="main" class="mx-auto col-12 {{ bag('alternatives', this.alt, 'order') }}"> + <div class="container py-3 mt-5"> + <h4>Project Title: {{ this.title }}</h4> + <span class="badge badge-primary">{{ this.languages }}</span> <span class="badge badge-secondary">{{ this.difficulty }}</span> + </div> + <div class="container py-3 mt-5"> + <h4>Project Summary:</h4> + <p> + {{ this.summary }} + </p> + </div> + <div class="container py-3"> + <h4>Project Description:</h4> + <p> + {{ this.description }} + </p> + </div> + <div class="container py-3"> + <h4>Mentors:</h4> + <p> + {{ this.mentors }} + </p> + </div> + </main> + </div> + <div class="card mt-5"> + <ul class="list-group list-group-flush"> + <li class="list-group-item"> + <a href="{{ this.parent|url }}">{{ _("Back to ") }}{{ this.parent.title }}</a> + </li> + </ul> + </div> + </div> +</div> +<footer> + {% include 'footer.html' %} +</footer> +</body>

1 0

[community/develop] more updates for l10n section.
by hiro＠torproject.org 23 Jan '20

23 Jan '20

commit e7672f4557448337624e6de90f36f3e3869b4972 Author: emma peel <emma.peel(a)riseup.net> Date: Wed Jan 15 19:13:01 2020 +0100 more updates for l10n section. closes: https://dip.torproject.org/torproject/web/community/merge_requests/27 --- content/localization/pick-a-project/contents.lr | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/content/localization/pick-a-project/contents.lr b/content/localization/pick-a-project/contents.lr index d5fe0af..c5b5860 100644 --- a/content/localization/pick-a-project/contents.lr +++ b/content/localization/pick-a-project/contents.lr @@ -15,12 +15,13 @@ key: 3 html: two-columns-page.html --- body: -We want our tools to be available and localized for anyone who wants to use them and appreciate your help. To find out where your knowledge may be most helpful, take a look at the translation progress for the Tor ecosystem of tools so far: +We want our tools to be available and localized for anyone who wants to use them, and we appreciate your help doing so. To find out where your knowledge may be most helpful, take a look at the translation progress for the Tor ecosystem of tools so far: <img class="col-lg-6" src="../../static/images/localization/stats.png"> -Although we would value your contribution to any of the projects above, the most critical are Tor Browser, the Tor Browser User Manual, and our Support Portal: +Although we would value your contribution to any of the projects above, our most critical needs are Tor Browser, the Tor Browser User Manual, and our Support Portal: * Tor Browser is translated in many different Transifex resources, but you can see the [Tor Browser total strings translated per language](https://torpat.ch/locales) to see where help is needed. -* The Tor Browser User Manual is a very useful resource for new users that do not speak English, see [Tor Browser User Manual translation statistics](https://torpat.ch/manual-locales) or [translate](https://www.transifex.com/otf/tor-project-support-community-port…. -* The Support Portal is also a valuable resource for all Tor users, see [Tor Support Portal translation statistics](https://torpat.ch/support-locales) or [translate](https://www.transifex.com/otf/tor-project-support-community-port… +* The Tor Browser User Manual is a very useful resource for new users that do not speak English, see [Tor Browser User Manual translation statistics](https://torpat.ch/manual-locales) or [translate](https://www.transifex.com/otf/tor-project-support-community-port… to help. +* The [Support Portal](https://support.torproject.org/) is also a valuable resource for all Tor users, see [Tor Support Portal translation statistics](https://torpat.ch/support-locales) or [translate](https://www.transifex.com/otf/tor-project-support-community-port… to help. +* The [Community Portal](https://community.torproject.org/) is this website, where you can find ways to contribute to Tor. Help us [translate](https://www.transifex.com/otf/tor-project-support-community-port… it.

1 0

[community/develop] Fix gosc template and contents files
by hiro＠torproject.org 23 Jan '20

23 Jan '20

commit e97a3f2207b92097045ac4e61274ae681121eb8b Author: hiro <hiro(a)torproject.org> Date: Thu Jan 23 17:41:07 2020 +0100 Fix gosc template and contents files --- .../gsoc/cloudflare-captcha-monitoring/contents.lr | 10 ++-- content/gsoc/contents.lr | 6 +- content/gsoc/onion-toolbox/contents.lr | 8 ++- content/gsoc/privacy-friendly-web/contents.lr | 17 +++--- content/gsoc/tor-relay-ipv6-support/contents.lr | 8 ++- content/gsoc/tor-weather/contents.lr | 20 +++---- models/project.ini | 16 ++++-- templates/gsoc.html | 64 ++++++++-------------- 8 files changed, 75 insertions(+), 74 deletions(-) diff --git a/content/gsoc/cloudflare-captcha-monitoring/contents.lr b/content/gsoc/cloudflare-captcha-monitoring/contents.lr index e6ba0d5..e5b71a5 100644 --- a/content/gsoc/cloudflare-captcha-monitoring/contents.lr +++ b/content/gsoc/cloudflare-captcha-monitoring/contents.lr @@ -1,6 +1,8 @@ _model: project --- -_template: project.html +_template: layout.html +--- +html: two-columns-page.html --- active: True --- @@ -20,12 +22,12 @@ difficulty: medium --- title: Cloudflare Captcha Monitoring --- -summary: +subtitle: We should track the rate that cloudflare gives captchas to Tor users over time. --- -description: +body: My suggested way of doing that tracking is to sign up a very simple static webpage to be fronted by cloudflare, and then fetch it via Tor over time, and record and graph the rates of getting a captcha vs getting the real page. @@ -44,4 +46,4 @@ but what I have in mind here is essentially a simpler subset of this research, s There are two interesting metrics to track over time: one is the fraction of exit relays that are getting hit with captchas, and the other is the chance that a Tor client, choosing an exit relay in the normal weighted faction, will get hit by a captcha. -Then there are other interesting patterns to look for, e.g. "are certain IP addresses punished consistently and others never punished, or is whether you get a captcha much more probabilistic and transient?" And does that pattern change over time? \ No newline at end of file +Then there are other interesting patterns to look for, e.g. "are certain IP addresses punished consistently and others never punished, or is whether you get a captcha much more probabilistic and transient?" And does that pattern change over time? diff --git a/content/gsoc/contents.lr b/content/gsoc/contents.lr index 2e4ffb5..1e973f0 100644 --- a/content/gsoc/contents.lr +++ b/content/gsoc/contents.lr @@ -8,10 +8,14 @@ html: gsoc.html --- color: primary --- +subtitle: Some projects ideas for GSoC. +--- +cta: Get coding +--- key: 0 --- title: Project Ideas --- body: -You may find some of these projects to be good ideas for Google Summer of Code. We have labelled each idea with which of our core developers would be good mentors. If one or more of these ideas looks promising to you, please contact us to discuss your plans rather than sending blind applications. \ No newline at end of file +You may find some of these projects to be good ideas for Google Summer of Code. We have labelled each idea with which of our core developers would be good mentors. If one or more of these ideas looks promising to you, please contact us to discuss your plans rather than sending blind applications. diff --git a/content/gsoc/onion-toolbox/contents.lr b/content/gsoc/onion-toolbox/contents.lr index a551ba8..f9f0b8d 100644 --- a/content/gsoc/onion-toolbox/contents.lr +++ b/content/gsoc/onion-toolbox/contents.lr @@ -1,6 +1,8 @@ _model: project --- -_template: project.html +_template: layout.html +--- +html: two-columns-page.html --- active: True --- @@ -20,7 +22,7 @@ difficulty: medium --- title: Onion Tool Box --- -summary: +subtitle: Myonion is a developer tool box, providing a command line interface and a GUI to configure and deploy existing services via .onion. A minimal prototype for myonion already [exists](https://github.com/hiromipaw/myonion). @@ -29,7 +31,7 @@ Someone that may want to run an onion service can use the myonion wrapper app to Myonion can also be used to deploy the resulting configured app to a defined set of cloud providers. --- -description: +body: ## Problem definition diff --git a/content/gsoc/privacy-friendly-web/contents.lr b/content/gsoc/privacy-friendly-web/contents.lr index da9cc13..6eab414 100644 --- a/content/gsoc/privacy-friendly-web/contents.lr +++ b/content/gsoc/privacy-friendly-web/contents.lr @@ -1,6 +1,8 @@ _model: project --- -_template: project.html +_template: layout.html +--- +html: two-columns-page.html --- active: True --- @@ -12,7 +14,7 @@ color: primary --- key: 1 --- -languages: javascript +languages: javascript, CSS, html, Python --- mentors: hiro --- @@ -20,25 +22,24 @@ difficulty: medium --- title: Privacy Friendly Web --- -summary: +subtitle: The scope of this project is creating a open-source community-driven browsable list of patterns and release a css/js framework that web developers can extend and use in their work. --- -description: +body: Security concerned web users take conscious steps to limit the amount of data they share with the websites visited and third party services. There are a number of security enhancing tools available. Some come in the form of browser extensions and javascript blockers, others are full fledged web browsers designed with providing extra security to their users. -One of this is the Tor Browser. The Tor Browser was designed to provide privacy while surfing the web and defend users against both network and local forensic adversaries. There are two main categories of requirements that have been considered: Security Requirements, and Privacy Requirements. +One of this is the Tor Browser. The Tor Browser was designed to provide privacy while surfing the web and defend users against both network and local forensic adversaries. There are two main categories of requirements that have been considered: Security Requirements, and Privacy Requirements. -Security Requirements are the minimum properties in order for a browser to be able to support Tor and similar privacy proxies safely. Privacy requirements are primarily concerned with reducing linkability: the ability for a user's activity on one site to be linked with their activity on another site without their knowledge or explicit consent. +Security Requirements are the minimum properties in order for a browser to be able to support Tor and similar privacy proxies safely. Privacy requirements are primarily concerned with reducing linkability: the ability for a user's activity on one site to be linked with their activity on another site without their knowledge or explicit consent. Websites can work seamsly with the Tor Browser and other privacy enhancing browsers and tools if they adopt a series of respectful and ethical patterns. -The Tor Browser is in fact, based on Mozilla's Extended Support Release (ESR) Firefox branch. We have a series of patches against this browser to enhance privacy and security. Browser behavior is additionally augmented through the Torbutton extension, and we also change a number of Firefox preferences from their defaults. +The Tor Browser is in fact, based on Mozilla's Extended Support Release (ESR) Firefox branch. We have a series of patches against this browser to enhance privacy and security. Browser behavior is additionally augmented through the Torbutton extension, and we also change a number of Firefox preferences from their defaults. The Tor Project has developed over the years a set of web development guidelines that allow websites to work with security enhanced browsers without causing any or minimal functionality destruption to their users. These guidelines have been shaped in an internal styleguide that has been adopted across all torproject.org websites. We are now formalizing these web development patterns and some security concerns that need to be considered when developing websites for users surfing the web with security enhanced browsers and tools. - diff --git a/content/gsoc/tor-relay-ipv6-support/contents.lr b/content/gsoc/tor-relay-ipv6-support/contents.lr index 3624ca1..3b0cd0f 100644 --- a/content/gsoc/tor-relay-ipv6-support/contents.lr +++ b/content/gsoc/tor-relay-ipv6-support/contents.lr @@ -1,6 +1,8 @@ _model: project --- -_template: project.html +_template: layout.html +--- +html: two-columns-page.html --- active: True --- @@ -20,12 +22,12 @@ difficulty: Medium --- title: Improve Tor Relay IPv6 Support --- -summary: +subtitle: Tor helps people stay safe on the internet, by keeping their internet use secure and anonymous. More Tor clients are running on IPv6-only or dual-stack networks. But only 20% of Tor’s available relay bandwidth supports IPv6. We want to automate relay IPv6 address discovery and reachability checks, so that it is easier for relay operators to run IPv6 relays. --- -description: +body: Students may choose to focus on designing and implementing core features, tor relay testing, reporting statistics, or diagnosing and fixing bugs. diff --git a/content/gsoc/tor-weather/contents.lr b/content/gsoc/tor-weather/contents.lr index 3bc6714..95aa94a 100644 --- a/content/gsoc/tor-weather/contents.lr +++ b/content/gsoc/tor-weather/contents.lr @@ -1,6 +1,8 @@ _model: project --- -_template: project.html +_template: layout.html +--- +html: two-columns-page.html --- active: True --- @@ -20,12 +22,12 @@ difficulty: medium --- title: Tor Weather --- -summary: +subtitle: Tor Weather is the most efficient way to achieve and maintain a healthy Tor network on the long run. --- -description: +body: Tor Weather was [discontinued on 2016-04-04](https://lists.torproject.org/pipermail/tor-relays/2016-April/00…, however "Tor Weather is still a good idea, it just needs somebody to implement it." @@ -40,18 +42,18 @@ Relay operators and the entire tor network would benefit from a Tor Weather serv It also: - shows the relay operator that someone actually cares if their relays go down or become outdated or have another problem -- gives the operator relay best-practices information. +- gives the operator relay best-practices information. ## Expected Effects If enough operators subscribe to such a service: - relays might become more long lived / the churn rate might decrease - the fraction of relays running outdated tor versions might decrease -- the fraction of exits with broken DNS might decrease +- the fraction of exits with broken DNS might decrease It also has the benefit of being able to contact relay operators: - completely automatically -- even if they choose to not set a public ContactInfo string in their torrc files. +- even if they choose to not set a public ContactInfo string in their torrc files. ## Ideas for Notification Types @@ -76,7 +78,7 @@ _How long before we send a notification?_ - [ ] email me about tor relay operator events -*Task:* Write a specification describing the meaning of each checkbox +*Task:* Write a specification describing the meaning of each checkbox ## Security and Privacy Implications @@ -85,6 +87,4 @@ The service stores email addresses of potential tor relay operators, they should ## Additional Ideas - easy: integration into tor: show the URL pointing to the new Tor Weather service like the current link to the lifecycle blogpost when tor starts and detects to be a new relay -- Provide an uptimerobot-style status page for relay operators using onionoo data - - +- Provide an uptimerobot-style status page for relay operators using onionoo data diff --git a/models/project.ini b/models/project.ini index 8b286a0..2ee985e 100644 --- a/models/project.ini +++ b/models/project.ini @@ -14,7 +14,7 @@ type = url label = Active type = boolean -[fields.summary] +[fields.subtitle] label = Summary type = markdown @@ -22,7 +22,7 @@ type = markdown label = Color type = string -[fields.description] +[fields.body] label = Description type = markdown @@ -31,7 +31,7 @@ label = Mentors type = string [fields.languages] -label = Languages +label = Languages type = string [fields.mentors] @@ -40,4 +40,12 @@ type = string [fields.difficulty] label = Difficulty Level -type = string \ No newline at end of file +type = string + +[fields.html] +label = Html +type = string + +[fields.key] +label = key +type = string diff --git a/templates/gsoc.html b/templates/gsoc.html index 1c1add9..ff0898a 100644 --- a/templates/gsoc.html +++ b/templates/gsoc.html @@ -1,41 +1,23 @@ - {% include 'breadcrumb.html' %} - <div class="row flex-xl-nowrap"> - <main role="main" class="mx-auto col-12 {{ bag('alternatives', this.alt, 'order') }}"> - <div class="container py-3"> - <div class="row"> - <p>{{ this.body }}</p> - </div> - </div> - <div class="container py-3"> - <h3 class="text-primary display-5">{{ _('Project Ideas') }}</h3> - </div> - <div class="container py-3"> - <div class="accordion" id="accordionJobs"> - {% from "macros/projects.html" import render_active %} - {% set items = this.children.filter(F.active == True).all() %} - {% for item in items %} - {{ render_active(item, this.alt) }} - {% endfor %} - </div> - </div> - <div class="container py-3"> - <h3 class="text-primary display-5">{{ _('Previous Projects') }}</h3> - </div> - <div class="container py-3"> - <div class="row"> - <div class="col-85"> - <ul class="jobs-ul"> - {% set items = this.children %} - {% for item in items.filter(F.active == False) %} - <li>{{ item.title }}</li> - {% endfor %} - </ul> - </div> - </div> - <div class="row"> - <p>{{ _('None of these ideas seem appealing? You may also want to propose your own project idea — which often results in the best projects.') }} <a href="mailto:gso@torproject.org">{{ _('We invite you to contact us to discuss your own project idea.') }}</a></p> - </div> - </div> - </main> - </div> - \ No newline at end of file +<div class="container py-5"> + <div class="row py-5"> + <div class="col-lg-12"> + {{ this.body }} + </div> + </div> + <div class="row"> + {% from "macros/projects.html" import render_active %} + {% for child in this.children.filter(F.active == True).all() %} + {{ render_active(child, this.alt) }} + {% endfor %} + </div> + <div class="row"> + <ul> + {% from "macros/projects.html" import render_active %} + {% for child in this.children.filter(F.active == False).all() %} + <li>{{ item.title }}</li> + {% endfor %} + </div> + <div class="row py-5 text-center mx-auto"> + <p class="text-center">{{ _('None of these ideas seem appealing? You may also want to propose your own project idea — which often results in the best projects.') }} <a href="mailto:gso@torproject.org">{{ _('We invite you to contact us to discuss your own project idea.') }}</a></p> + </div> +</div>

1 0

[gettor/master] Ensure failure is declared before referenced
by cohosh＠torproject.org 23 Jan '20

23 Jan '20

commit 5404ef818317f0c0ceea6a6130f83ccc8d070fd7 Author: Cecylia Bocovich <cohosh(a)torproject.org> Date: Thu Jan 23 09:14:15 2020 -0500 Ensure failure is declared before referenced This fixes a bug where, if there were no errors in uploading binaries, failure is referenced before it was ever declared. --- scripts/update_git | 3 +++ 1 file changed, 3 insertions(+) diff --git a/scripts/update_git b/scripts/update_git index d107491..5808139 100755 --- a/scripts/update_git +++ b/scripts/update_git @@ -109,6 +109,9 @@ def upload_files(remotes): for remote in remotes: remote.upload(filename, arch) os.remove(filename) + + failure = False + #Retry failed uploads for url in failed_uploads: filename = url.split('/')[-1]

1 0