April 2020 - tor-commits - lists.torproject.org

[tor/master] channeltls: Clarify a relay impersonation defence
by teor＠torproject.org 28 Apr '20

28 Apr '20

commit 7517e1b5d31aada1f594c2594737a231d9d8e116 Author: teor <teor(a)torproject.org> Date: Tue Apr 28 21:11:10 2020 +1000 channeltls: Clarify a relay impersonation defence Clarify the comments in channel_tls_matches_target_method(), and make it clear that the attack is a covert attack. --- src/core/or/channeltls.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src/core/or/channeltls.c b/src/core/or/channeltls.c index 5cedd9fbc..b424d02a5 100644 --- a/src/core/or/channeltls.c +++ b/src/core/or/channeltls.c @@ -739,10 +739,13 @@ channel_tls_matches_target_method(channel_t *chan, * base_.addr is updated by connection_or_init_conn_from_address() * to be the address in the descriptor. It may be tempting to * allow either address to be allowed, but if we did so, it would - * enable someone who steals a relay's keys to impersonate/MITM it + * enable someone who steals a relay's keys to covertly impersonate/MITM it * from anywhere on the Internet! (Because they could make long-lived * TLS connections from anywhere to all relays, and wait for them to * be used for extends). + * + * An adversary who has stolen a relay's keys could also post a fake relay + * descriptor, but that attack is easier to detect. */ return tor_addr_eq(&(tlschan->conn->real_addr), target); }

1 0

[torspec/master] tor-spec: Do the same extend checks as tor
by teor＠torproject.org 28 Apr '20

28 Apr '20

commit b43b9156614596e73df63be69ee439be93444802 Author: teor <teor(a)torproject.org> Date: Tue Apr 28 21:07:24 2020 +1000 tor-spec: Do the same extend checks as tor Update the extend checks to match tor's implementation, particularly the comments in channel_tls_matches_target_method(). --- tor-spec.txt | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/tor-spec.txt b/tor-spec.txt index 7f0256e..df0ca38 100644 --- a/tor-spec.txt +++ b/tor-spec.txt @@ -1378,8 +1378,10 @@ see tor-design.pdf. - The IP matches the requested IP. - The OR knows that the IP of the connection it's using is canonical because it was listed in the NETINFO cell. - - The OR knows that the IP of the connection it's using is canonical - because it was listed in the server descriptor. + + ORs SHOULD NOT check the IPs that are listed in the server descriptor. + Trusting server IPs makes it easier to covertly impersonate a relay, after + stealing its keys. 5.4. Tearing down circuits

1 0

[metrics-web/master] Update news.json and metrics-lib.
by karsten＠torproject.org 28 Apr '20

28 Apr '20

commit d00c00a7cf34220adf22a498baf6ad1a5936f174 Author: Karsten Loesing <karsten.loesing(a)gmx.net> Date: Tue Apr 28 12:00:42 2020 +0200 Update news.json and metrics-lib. --- src/main/resources/web/json/news.json | 9 +++++++++ src/submods/metrics-lib | 2 +- 2 files changed, 10 insertions(+), 1 deletion(-) diff --git a/src/main/resources/web/json/news.json b/src/main/resources/web/json/news.json index fa83c9a..67daa24 100644 --- a/src/main/resources/web/json/news.json +++ b/src/main/resources/web/json/news.json @@ -4036,6 +4036,15 @@ "target" : "https://bugs.torproject.org/33385#comment:3" } ] }, { + "start" : "2020-04-23", + "protocols" : [ "snowflake" ], + "short_description" : "Redeployed the Snowflake bridge with support for non–Turbo Tunnel clients and KCP–Turbo Tunnel clients, removing support for QUIC–Turbo Tunnel clients.", + "description" : "Redeployed the Snowflake bridge with support for non–Turbo Tunnel clients and KCP–Turbo Tunnel clients, removing support for QUIC–Turbo Tunnel clients.", + "links" : [ { + "label" : "comment", + "target" : "https://bugs.torproject.org/33745#comment:12" + } ] +}, { "start" : "2014-06-01", "end" : "2014-06-19", "places" : [ "ru" ], diff --git a/src/submods/metrics-lib b/src/submods/metrics-lib index e7d7af8..3f298b1 160000 --- a/src/submods/metrics-lib +++ b/src/submods/metrics-lib @@ -1 +1 @@ -Subproject commit e7d7af88a63469f6bc049692ecfcc35f6c27f210 +Subproject commit 3f298b1b57050537645679b6c85bce871557b7b5

1 0

[translation/communitytpo-contentspot] https://gitweb.torproject.org/translation.git/commit/?h=communitytpo-contentspot
by translation＠torproject.org 28 Apr '20

28 Apr '20

commit ee831a8df6bfb044fc6026c79383eba4612ac89c Author: Translation commit bot <translation(a)torproject.org> Date: Tue Apr 28 09:45:41 2020 +0000 https://gitweb.torproject.org/translation.git/commit/?h=communitytpo-conten… --- contents+fa.po | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/contents+fa.po b/contents+fa.po index c62e00843b..cfbe4d4860 100644 --- a/contents+fa.po +++ b/contents+fa.po @@ -1499,8 +1499,7 @@ msgid "" "misconfiguration." msgstr "" "یک رله بد یک رله ای است که به درستی کار نمی کند یا در اتصال کاربران ما " -"دستکاری می کند. این می تواند به دلیل پیکربندی بد باشد یا مقاصد موذیانه انجام" -" شود." +"دستکاری می کند. این می تواند به دلیل پیکربندی بد یا مقاصد موذیانه باشد." #: https//community.torproject.org/relay/community-resources/ #: (content/relay-operations/community-resources/contents+en.lrpage.body) @@ -6689,6 +6688,9 @@ msgid "" "users' connections. This can be either through maliciousness or " "misconfiguration. Some common examples are..." msgstr "" +"یک رله بد یک رله ای است که به درستی کار نمی کند یا در اتصال کاربران ما " +"دستکاری می کند. این می تواند به دلیل پیکربندی بد یا مقاصد موذیانه انجام شود." +" برخی نمونه های رایج..." #: https//community.torproject.org/relay/community-resources/bad-relays/ #: (content/relay-operations/community-resources/bad-relays/contents+en.lrpage.body)

1 0

[translation/communitytpo-contentspot] https://gitweb.torproject.org/translation.git/commit/?h=communitytpo-contentspot
by translation＠torproject.org 28 Apr '20

28 Apr '20

commit 2cd8f6f67aa656f9417fc43470e47d61f06e690d Author: Translation commit bot <translation(a)torproject.org> Date: Tue Apr 28 09:15:34 2020 +0000 https://gitweb.torproject.org/translation.git/commit/?h=communitytpo-conten… --- contents+fa.po | 48 ++++++++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 46 insertions(+), 2 deletions(-) diff --git a/contents+fa.po b/contents+fa.po index 079cbf63f5..c62e00843b 100644 --- a/contents+fa.po +++ b/contents+fa.po @@ -3858,6 +3858,9 @@ msgid "" "You can see the open tickets about translation problems on our " "[bugtracker](https://trac.torproject.org/projects/tor/query?status=!closed&c…." msgstr "" +"می توانید بلیط های باز روی مشکلات ترجمه را روی [ردیاب " +"باگ](https://trac.torproject.org/projects/tor/query?status=!closed&componen…" +" ما ببینید " #: https//community.torproject.org/localization/becoming-tor-translator/ #: (content/localization/becoming-tor-translator/contents+en.lrpage.title) @@ -4487,6 +4490,9 @@ msgid "" "operators and supports multiple operating systems: [Ansible " "Relayor](http://github.com/nusenu/ansible-relayor)." msgstr "" +"نقش Ansible آمده به صورت خاص برای گردانندگان رله تور ایجاد شده و از چندین " +"سیستم عامل پشتیبانی می کند: [Ansible Relayor](http://github.com/nusenu" +"/ansible-relayor)." #: https//community.torproject.org/relay/setup/post-install/ #: (content/relay-operations/technical-setup/post-install/contents+en.lrpage.body) @@ -4760,6 +4766,8 @@ msgid "" "If you are an exit relay with IPv6 connectivity, tell your tor daemon to " "allow exiting via IPv6 so clients can reach IPv6 destinations:" msgstr "" +"اگر روی یک رله خروجی با اتصال IPv6 می باشید از طریق دیمن تور خروج IPv6 را " +"مجاز کنید تا کلاینت ها بتوانند به مقصد های IPv6 دسترسی یابند:" #: https//community.torproject.org/relay/setup/post-install/ #: (content/relay-operations/technical-setup/post-install/contents+en.lrpage.body) @@ -5245,6 +5253,9 @@ msgid "" "to start with a reduced exit policy (to reduce the amount of abuse emails) " "and further open it up as you become more experienced." msgstr "" +"به عنوان یک رله خروجی جدید - مخصوصاً اگر تازه با میزبان آشنا شده اید - بهتر " +"است تا با یک سیاست خروجی کاهش یافته (برای کاهش ایمیل های سو استفاده) استفاده" +" کنید و در گذر زمان آن را تغییر دهید." #: https//community.torproject.org/relay/setup/exit/ #: (content/relay-operations/technical-setup/exit/contents+en.lrpage.body) @@ -5253,6 +5264,9 @@ msgid "" "[ReducedExitPolicy](https://trac.torproject.org/projects/tor/wiki/doc/Reduce…" " wiki page." msgstr "" +"سیاست خروجی کاهش یافته در صفحه ویکی [سیاست خروجی کاهش " +"یافته](https://trac.torproject.org/projects/tor/wiki/doc/ReducedExitPolicy) " +"کمک می کند." #: https//community.torproject.org/relay/setup/exit/ #: (content/relay-operations/technical-setup/exit/contents+en.lrpage.body) @@ -5715,6 +5729,8 @@ msgid "" "abuse is the difference between decentralized fault-tolerant Internet " "freedom, and fragile, corruptible totalitarian control." msgstr "" +"تفاوت بین رویکرد فعالانه و رویکرد واکنشی به سو استفاده مانند تفاوت آزادی " +"اینترنت غیر متمرکز و کنترل توتالیتر فاسد می باشد." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -5893,6 +5909,9 @@ msgid "" "You can also use this DNSRBL to only allow Tor IPs to read but not post " "comments. https://www.torproject.org/projects/tordnsel.html.en" msgstr "" +"می توانید از این DNSRBL برای مجاز کردن آی‌پی های تور فقط برای خواندن و نه " +"پست کردن کامنت ها استفاده کنید. " +"https://www.torproject.org/projects/tordnsel.html.en" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6013,6 +6032,9 @@ msgid "" "in using the Tor Bulk Exit list script to download a list of IPs to include " "in your killfile for posts that match \"NNTP-Posting-Host:" msgstr "" +"به علاوه، اگر خبرخوان شما از killfile پشتیبانی می کند شاید علاقمند به " +"استفاده از اسکریپت لیست توده خروجی تور باشید تا یک لیست از آی‌پی ها را برای " +"قرار دادن در killfile برای پست ها و تطابق \"NNTP-Posting-Host: استفاده کنید." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6122,6 +6144,10 @@ msgid "" "to large corporate and even national outproxies, NATs, and services like " "Tor." msgstr "" +"اگر با خطا روبرو شد، قصد های منع سرویس با محدود کردن نرخ مبتنی بر iptable، " +"متعادل کننده بار مانند nginx و دستگاه های IPS قابل حل می باشد ولی آگاه باشید" +" که ترافیک اینترنت که بر اساس آی‌پی قابل تفکیک نیست چون برخی شرکت ها و ترجمه" +" نشانی شبکه و سرویس هایی مانند تور وجود دارند." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6167,6 +6193,9 @@ msgid "" "requests from Tor nodes as requiring special treatment: " "https://www.torproject.org/projects/tordnsel.html.en" msgstr "" +"پروژه تور یک DNSRBL خودکار برای علامت زدن درخواست هایی که از گره های تور می " +"آیند و نیاز به یک رفتار خاص دارند را فراهم کرده: " +"https://www.torproject.org/projects/tordnsel.html.en" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6175,6 +6204,9 @@ msgid "" "the service to defend against the attack from the Internet at large rather " "than specifically tailoring behavior for Tor." msgstr "" +"به طور کلی، اعتقاد داریم که چنین مسائلی با بهبود سرویس در برابر حملاتی از " +"این دست در مقابل اینترنت به بهترین شکل حل می شوند به جای اینکه فقط این الگو " +"برای تور پیاده شود." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6205,6 +6237,8 @@ msgid "" "The fact that a few logins happened to come from Tor is likely a small blip " "on your overall login attempt rate." msgstr "" +"اینکه چندین ورود از تور اتفاق افتاد احتمالاً یک پدیده موقتی روی نرخ کلی قصد " +"ورود بوده است." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6380,6 +6414,8 @@ msgid "" "It also provides a Bulk Exit List service for retrieving the entire list: " "https://check.torproject.org/cgi-bin/TorBulkExitList.py" msgstr "" +"یک سرویس لیست رله خروجی توده برای بازیابی تمام لیست را نیز فراهم می کند: " +"https://check.torproject.org/cgi-bin/TorBulkExitList.py" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6401,11 +6437,13 @@ msgid "" "In fact, in my experience, the fraud processing teams contracted by many " "ISPs simply mark all requests from Tor nodes as fraud using that" msgstr "" +"با تجربه ای که من داشته ام، تیم هایی که با جعل سر و کار دارند تنها درخواست " +"گره های تور از آن لیست را" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) msgid "very list." -msgstr "" +msgstr "به عنوان جعلی علامت می زنند." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6481,7 +6519,7 @@ msgstr "* شما مسئول مشکل نیستید." msgid "" "* You are a responsible server operator and concerned about the " "complaintant's problem." -msgstr "" +msgstr "* شما یک گرداننده سرور هستید و در مورد مشکل شاکی نگران هستید." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6498,6 +6536,8 @@ msgid "" "* In many cases, your ISP will be involved as a conduit for the 3rd party " "complaintant. Your ISP wants to know:" msgstr "" +"* در بسیاری موارد، ارائه دهنده خدمات اینترنتی شما به عنوان مجرایی برای شکایت" +" شخص ثالث خواهد بود، ارائه دهنده خدمات اینترنتی می خواهد بداند:" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6520,6 +6560,8 @@ msgid "" "* You are a competent server administrator and can address the issue. " "Minimally, you can at least discuss and respond to the issue intelligently." msgstr "" +"* شما یک مدیر سرور شایسته هستید و می توانید مشکل را حل کنید. حداقل می توانید" +" درباره آن بحث کنید و به شیوه ای هوشمندانه به مشکل پاسخ دهید." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6609,6 +6651,8 @@ msgid "" "* Torservers [response template " "emails](https://www.torservers.net/wiki/abuse/templates)." msgstr "" +"Torservers [قالب های پاسخ " +"ایمیل](https://www.torservers.net/wiki/abuse/templates) را فراهم کرده است." #: https//community.torproject.org/relay/community-resources/bad-relays/ #: (content/relay-operations/community-resources/bad-relays/contents+en.lrpage.title)

1 0

[translation/communitytpo-contentspot] https://gitweb.torproject.org/translation.git/commit/?h=communitytpo-contentspot
by translation＠torproject.org 28 Apr '20

28 Apr '20

commit 4b8b4a3d4998fb1b64d195fbff42c255946ad611 Author: Translation commit bot <translation(a)torproject.org> Date: Tue Apr 28 08:45:34 2020 +0000 https://gitweb.torproject.org/translation.git/commit/?h=communitytpo-conten… --- contents+fa.po | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) diff --git a/contents+fa.po b/contents+fa.po index b2b611e430..079cbf63f5 100644 --- a/contents+fa.po +++ b/contents+fa.po @@ -188,6 +188,9 @@ msgid "" " Community Team](https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-" "community-team) for more help." msgstr "" +"اگر این جامعه شما را شرح می دهد یا از این موضوع مطمئن نیستید، لطفاً [با تیم " +"جامعه ما برای کمک بیشتر ارتباط برقرار کنید](https://lists.torproject.org" +"/cgi-bin/mailman/listinfo/tor-community-team)." #: https//community.torproject.org/onion-services/ #: (content/onion-services/contents+en.lrpage.title) @@ -279,7 +282,7 @@ msgstr "" #: https//community.torproject.org/outreach/ #: (content/outreach/contents+en.lrpage.title) msgid "Outreach" -msgstr "" +msgstr "توسعه" #: https//community.torproject.org/outreach/ #: (content/outreach/contents+en.lrpage.subtitle) @@ -311,6 +314,8 @@ msgid "" "We've curated some beautiful materials for sharing in-person and on social " "media we welcome you to use." msgstr "" +"ما چند چیز برای به اشتراک‌گذاری بین افراد و شبکه اجتماعی آماده کرده ایم که " +"می توانید از آن ها استفاده کنید." #: https//community.torproject.org/relay/setup/ #: (content/relay-operations/technical-setup/contents+en.lrpage.title) @@ -464,6 +469,8 @@ msgid "" "Click below in which type of relay do you want to host and don't forget to " "read [Relay post-install and good practices](/relay/setup/post-install/)." msgstr "" +"نوع رله‌ای که می خواهید میزبانی کنید را انتخاب کنید و [کار های پس از نصب و " +"تجربه های خوب](/relay/setup/post-install/) را هم مطالعه کنید." #: https//community.torproject.org/relay/relays-requirements/ #: (content/relay-operations/relays-requirements/contents+en.lrpage.title) @@ -506,6 +513,8 @@ msgid "" "This can overwhelm consumer-level routers. If you run the Tor relay from a " "server (virtual or dedicated) in a data center you will be fine." msgstr "" +"این می تواند باعث فشار روی روتر های سطح مصرف کننده شود. اگر رله تور را از یک" +" سرور (مجازی یا اختصاصی) در یک مرکز داده اجرا کنید مشکلی پیش نخواهد آمد." #: https//community.torproject.org/relay/relays-requirements/ #: (content/relay-operations/relays-requirements/contents+en.lrpage.body) @@ -513,6 +522,8 @@ msgid "" "If you run it behind a consumer-level router at home you will have to try " "and see if your home router can handle it or if it starts failing." msgstr "" +"اگر یک روتر سطح مصرف کننده در خانه دارید می توانید امتحان کنید که آیا روتر " +"خانگی شما می تواند آن را تحمل کند یا از کار میفتد." #: https//community.torproject.org/relay/relays-requirements/ #: (content/relay-operations/relays-requirements/contents+en.lrpage.body) @@ -1717,6 +1728,8 @@ msgid "" "* Does the hoster allow you to set a custom DNS reverse entry? (DNS PTR " "record)" msgstr "" +"* آیا میزبان به شما اجازه برپایی یک ساناد معکوس سفارشی را می دهد؟ (ثبت PTR " +"ساناد)" #: https//community.torproject.org/relay/technical-considerations/ #: (content/relay-operations/technical-considerations/contents+en.lrpage.body) @@ -4691,6 +4704,8 @@ msgid "" "If you enable IPv6 without working IPv6 connectivity your entire relay will " "not be used, regardless if IPv4 is working." msgstr "" +"اگر IPv6 را بدون اتصال IPv6 فعال کنید رله شما مورد استفاده قرار نخواهد گرفت " +"حتی اگر IPv4 کار بکند." #: https//community.torproject.org/relay/setup/post-install/ #: (content/relay-operations/technical-setup/post-install/contents+en.lrpage.body)

1 0

[translation/support-portal] https://gitweb.torproject.org/translation.git/commit/?h=support-portal
by translation＠torproject.org 28 Apr '20

28 Apr '20

commit f347d985565b5c4cb82cfd741b8bdda4bddf1ae6 Author: Translation commit bot <translation(a)torproject.org> Date: Tue Apr 28 07:53:52 2020 +0000 https://gitweb.torproject.org/translation.git/commit/?h=support-portal --- contents+zh-CN.po | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/contents+zh-CN.po b/contents+zh-CN.po index 34e208bff7..bddc0aa459 100644 --- a/contents+zh-CN.po +++ b/contents+zh-CN.po @@ -1,3 +1,4 @@ +# # Translators: # Herman Koe <hkoe.academic(a)gmail.com>, 2018 # ヨイツの賢狼ホロ, 2019 @@ -13,9 +14,9 @@ # MD Rights <psychi2009(a)gmail.com>, 2020 # erinm, 2020 # Emma Peel, 2020 -# Scott Rhodes <starring169(a)gmail.com>, 2020 # ff98sha, 2020 # ciaran <ciaranchen(a)qq.com>, 2020 +# Scott Rhodes <starring169(a)gmail.com>, 2020 # msgid "" msgstr "" @@ -23,7 +24,7 @@ msgstr "" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2020-04-15 19:40+CET\n" "PO-Revision-Date: 2018-10-02 22:41+0000\n" -"Last-Translator: ciaran <ciaranchen(a)qq.com>, 2020\n" +"Last-Translator: Scott Rhodes <starring169(a)gmail.com>, 2020\n" "Language-Team: Chinese (China) (https://www.transifex.com/otf/teams/1519/zh_CN/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" @@ -9111,7 +9112,7 @@ msgstr "# dnf install tor -y" #: (content/rpm/install/contents+en.lrquestion.description) msgid "" "Using it for the first time, you will have to import the GPG public key." -msgstr "" +msgstr "首次使用时，你需要导入GPG公钥。" #: https//support.torproject.org/rpm/tor-rpm-install/ #: (content/rpm/install/contents+en.lrquestion.description) @@ -9126,7 +9127,7 @@ msgstr "" #: https//support.torproject.org/rpm/tor-rpm-install/ #: (content/rpm/install/contents+en.lrquestion.description) msgid "Fingerprint: 999E C8E3 14BC 8D46 022D 6C7D E217 C30C 3621 CD35" -msgstr "" +msgstr "指纹: 999E C8E3 14BC 8D46 022D 6C7D E217 C30C 3621 CD35" #: https//support.torproject.org/rpm/tor-rpm-install/ #: (content/rpm/install/contents+en.lrquestion.description) @@ -9146,7 +9147,7 @@ msgstr "" #: https//support.torproject.org/abuse/tor-project-opinion-on-abusers/ #: (content/abuse/abuse-opinion/contents+en.lrquestion.description) msgid "We take abuse seriously." -msgstr "" +msgstr "我们严肃对待滥用。" #: https//support.torproject.org/abuse/tor-project-opinion-on-abusers/ #: (content/abuse/abuse-opinion/contents+en.lrquestion.description)

1 0

[translation/tbmanual-contentspot] https://gitweb.torproject.org/translation.git/commit/?h=tbmanual-contentspot
by translation＠torproject.org 28 Apr '20

28 Apr '20

commit cb3c476285d1364533c591bde988ea8d18774b19 Author: Translation commit bot <translation(a)torproject.org> Date: Tue Apr 28 07:50:26 2020 +0000 https://gitweb.torproject.org/translation.git/commit/?h=tbmanual-contentspot --- contents+zh-CN.po | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/contents+zh-CN.po b/contents+zh-CN.po index e0ba6d7a45..1236ca7585 100644 --- a/contents+zh-CN.po +++ b/contents+zh-CN.po @@ -2422,7 +2422,7 @@ msgstr "点击这个仅会改变你的Tor链路。" #: https//tb-manual.torproject.org/mobile-tor/ #: (content/mobile-tor/contents+en.lrtopic.body) msgid "### SECURITY SETTINGS" -msgstr "" +msgstr "### 安全设定" #: https//tb-manual.torproject.org/mobile-tor/ #: (content/mobile-tor/contents+en.lrtopic.body) @@ -2445,12 +2445,12 @@ msgstr "" msgid "" "Tor Browser for Android provides the same three security levels that are " "available on desktop." -msgstr "" +msgstr "安卓版Tor 浏览器提供与桌面版同等的安全等级" #: https//tb-manual.torproject.org/mobile-tor/ #: (content/mobile-tor/contents+en.lrtopic.body) msgid "You can modify the security level by following given steps:" -msgstr "" +msgstr "你可以通过如下步骤修改安全等级：" #: https//tb-manual.torproject.org/mobile-tor/ #: (content/mobile-tor/contents+en.lrtopic.body) @@ -2470,12 +2470,12 @@ msgstr "" #: https//tb-manual.torproject.org/mobile-tor/ #: (content/mobile-tor/contents+en.lrtopic.body) msgid "### UPDATING" -msgstr "" +msgstr "### 升级" #: https//tb-manual.torproject.org/mobile-tor/ #: (content/mobile-tor/contents+en.lrtopic.body) msgid "You can update Tor Browser automatically or manually." -msgstr "" +msgstr "你可以自动或手动升级Tor 浏览器。" #: https//tb-manual.torproject.org/mobile-tor/ #: (content/mobile-tor/contents+en.lrtopic.body) @@ -2532,7 +2532,7 @@ msgstr "" #: https//tb-manual.torproject.org/mobile-tor/ #: (content/mobile-tor/contents+en.lrtopic.body) msgid "Click on \"Settings\", then go to \"Manage installed apps\"." -msgstr "" +msgstr "点击“设置”，进入“管理已安装应用”" #: https//tb-manual.torproject.org/mobile-tor/ #: (content/mobile-tor/contents+en.lrtopic.body)

1 0

[torspec/master] tor-spec: Explain the truncated reason better
by teor＠torproject.org 28 Apr '20

28 Apr '20

commit 79fba6de64025991da4aac402d0b7f69493105d8 Author: teor <teor(a)torproject.org> Date: Tue Apr 28 17:34:15 2020 +1000 tor-spec: Explain the truncated reason better It's the payload of a DESTROY cell, but the data of a RELAY_TRUNCATED cell. --- tor-spec.txt | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/tor-spec.txt b/tor-spec.txt index fa6026d..7f0256e 100644 --- a/tor-spec.txt +++ b/tor-spec.txt @@ -1438,11 +1438,12 @@ see tor-design.pdf. RELAY_TRUNCATED cell towards the OP; the node farther from the OP should send a DESTROY cell down the circuit. - The payload of a RELAY_TRUNCATED or DESTROY cell contains a single octet, - describing why the circuit is being closed or truncated. When sending a - TRUNCATED or DESTROY cell because of another TRUNCATED or DESTROY cell, - the error code should be propagated. The origin of a circuit always sets - this error code to 0, to avoid leaking its version. + The payload of a DESTROY cell contains a single octet, describing the + reason that the circuit was closed. Similarly, the data of a + RELAY_TRUNCATED cell also contains this single octet "reason" field. When + sending a TRUNCATED or DESTROY cell because of another TRUNCATED or + DESTROY cell, the error code should be propagated. The origin of a circuit + always sets this error code to 0, to avoid leaking its version. The error codes are:

1 0

[torspec/master] tor-spec: Extends accept all-zero ed25519 keys
by teor＠torproject.org 28 Apr '20

28 Apr '20

commit ce0d233f6d834be8a2fd2a10b2791978b90c1df1 Author: teor <teor(a)torproject.org> Date: Tue Apr 28 17:30:30 2020 +1000 tor-spec: Extends accept all-zero ed25519 keys The spec gives conficting advice about all-zero ed25519 keys in extends. Resolve this conflict by documenting tor's current behaviour. Also move a sentence about circuit IDs, so it's closer to the associated paragraph. --- tor-spec.txt | 23 ++++++++++++++--------- 1 file changed, 14 insertions(+), 9 deletions(-) diff --git a/tor-spec.txt b/tor-spec.txt index 6881436..fa6026d 100644 --- a/tor-spec.txt +++ b/tor-spec.txt @@ -1333,15 +1333,20 @@ see tor-design.pdf. When an onion router receives an EXTEND2 relay cell, it sends a CREATE2 cell to the next onion router, with the enclosed HLEN, HTYPE, and HDATA - as its payload. - - As special cases, if the EXTEND/EXTEND2 cell includes a legacy - identity, identity fingerprint, or Ed25519 identity of all zeroes, or - asks to extend back to the relay that sent the extend cell, the - circuit will fail and be torn down. The initiating onion router - chooses some circID not yet used on the connection between the two - onion routers. (But see section 5.1.1 above, concerning choosing - circIDs.) + as its payload. The initiating onion router chooses some circID not yet + used on the connection between the two onion routers. (But see section + 5.1.1 above, concerning choosing circIDs.) + + As special cases, if the EXTEND/EXTEND2 cell includes a legacy identity, or + identity fingerprint of all zeroes, or asks to extend back to the relay + that sent the extend cell, the circuit will fail and be torn down. + + Ed25519 identity keys are not required in EXTEND2 cells, so all zero + keys SHOULD be accepted. If the extending relay knows the ed25519 key from + the consensus, it SHOULD also check that key. (See section 5.1.2.) + + If an EXTEND2 cell contains the ed25519 key of the relay that sent the + extend cell, the circuit will fail and be torn down. When an onion router receives a CREATE/CREATE2 cell, if it already has a circuit on the given connection with the given circID, it drops the

1 0