April 2020 - tor-commits - lists.torproject.org

[dev/staging] Add project ideas
by pili＠torproject.org 13 Apr '20

13 Apr '20

commit 4b312f3dc00ab52f4fe62274f04fc52c1dd0161a Author: Pili Guerra <pili(a)piliguerra.com> Date: Fri Feb 28 21:25:22 2020 +0100 Add project ideas --- .../cloudflare-captcha-monitoring/contents.lr | 70 +++++++++++++++++++ .../project-ideas/gettor-distribution/contents.lr | 50 +++++++++++++ content/project-ideas/onion-toolbox/contents.lr | 67 ++++++++++++++++++ .../ooni-explorer-advanced-search/contents.lr | 61 ++++++++++++++++ .../ooni-probe-experiments/contents.lr | 61 ++++++++++++++++ .../privacy-aware-geo-lookup/contents.lr | 56 +++++++++++++++ .../project-ideas/privacy-friendly-web/contents.lr | 59 ++++++++++++++++ .../salmon-bridge-distribution/contents.lr | 48 +++++++++++++ .../snowflake-android-proxy/contents.lr | 47 +++++++++++++ content/project-ideas/tor-keygen/contents.lr | 49 +++++++++++++ .../tor-relay-ipv6-support/contents.lr | 81 ++++++++++++++++++++++ content/project-ideas/tor-weather/contents.lr | 77 ++++++++++++++++++++ 12 files changed, 726 insertions(+) diff --git a/content/project-ideas/cloudflare-captcha-monitoring/contents.lr b/content/project-ideas/cloudflare-captcha-monitoring/contents.lr new file mode 100644 index 0000000..c311934 --- /dev/null +++ b/content/project-ideas/cloudflare-captcha-monitoring/contents.lr @@ -0,0 +1,70 @@ +_model: project +--- +_template: layout.html +--- +html: two-columns-page.html +--- +active: True +--- +section: GSoC +--- +section_id: gsoc +--- +color: primary +--- +key: 1 +--- +languages: +python +javascript +--- +mentors: +GeKo +arma +--- +difficulty: medium +--- +title: Cloudflare CAPTCHA Monitoring +--- +subtitle: + +This project should implement a mechanism to track the rate that Cloudflare fronted webpages return CAPTCHAs to Tor users over time. + +--- +body: + +# Problem + +A large number of Tor users report getting hit by infinite CAPTCHA loops when visiting webpages fronted by Cloudflare. This makes them feel punished for using Tor to protect their privacy and prevents them from legitimately accessing websites. + +# Proposal + +For this project we would like to track in practice how often Cloudflare fronted webpages return CAPTCHAs to Tor clients. + +Our proposed approach consists of: + +1. Setting up a very simple static webpage to be fronted by Cloudflare +2. Write a web client to periodically fetch this static webpage via Tor and record how often a CAPTCHA is returned +3. Record and graph CAPTCHA vs real page rates +4. Using the pre-existing architecture, run a second client that does not fetch this webpage via Tor. This will allow us to contrast and compare how Cloudflare responds to Tor Browser vs other browsers. +5. Track and publish these details publicly + +There are two interesting metrics to track over time: + +- the fraction of exit relays that are getting hit with CAPTCHAs, and +- the chance that a Tor client, choosing an exit relay in the normal weighted faction, will get hit by a CAPTCHA. + +Then there are other interesting patterns to look for: + +- Are certain IP addresses punished consistently and others never punished? +- Is whether you get a CAPTCHA much more probabilistic and transient? +- Does that pattern change over time? + +# Resources + +There is pre-existing research by the Berkeley ICSI group which includes these sorts of checks: + +- https://www.freehaven.net/anonbib/#differential-ndss2016 +- https://www.freehaven.net/anonbib/#exit-blocking2017 + +For the original ticket and discussion, please see ticket [#33010](http://bugs.torproject.org/33010) \ No newline at end of file diff --git a/content/project-ideas/gettor-distribution/contents.lr b/content/project-ideas/gettor-distribution/contents.lr new file mode 100644 index 0000000..797a2ff --- /dev/null +++ b/content/project-ideas/gettor-distribution/contents.lr @@ -0,0 +1,50 @@ +_model: project +--- +_template: layout.html +--- +html: two-columns-page.html +--- +active: True +--- +section: GSoC +--- +section_id: gsoc +--- +color: primary +--- +key: 2 +--- +languages: +python +ansible +--- +org: Tor +--- +mentors: +cohosh +hiro +--- +difficulty: +--- +title: Implement new distribution methods for GetTor +--- +subtitle: + +This project should implement a feature to distribute Tor Browser downloads through Telegram or Facebook messenger. + +--- +body: + +# Problem + +Tor Browser ships with a few different anti-censorship tools to allow people free and open access to Internet content. However, some places censor Tor Browser downloads, making it difficult for users to install it in the first place. + +# Proposal + +[GetTor](https://gettor.torproject.org/) is a system for distributing Tor Browser using alternative methods such as email or Twitter to send users authenticated links to Tor Browser binaries. + +We are looking to expand the ways in which GetTor distributes Tor Browser binaries to make it easier for people to download and install Tor Browser. This project would consist in implementing a feature in GetTor to distribute Tor Browser downloads through Telegram and/or Facebook messenger. + +# Resources + +- GetTor repo on github: https://github.com/torproject/gettor \ No newline at end of file diff --git a/content/project-ideas/onion-toolbox/contents.lr b/content/project-ideas/onion-toolbox/contents.lr new file mode 100644 index 0000000..1d52e87 --- /dev/null +++ b/content/project-ideas/onion-toolbox/contents.lr @@ -0,0 +1,67 @@ +_model: project +--- +_template: layout.html +--- +html: two-columns-page.html +--- +active: True +--- +section: GSoC +--- +section_id: gsoc +--- +color: primary +--- +key: 3 +--- +languages: +Python +Docker +PythonQt5 +--- +mentors: +hiro +asn +--- +difficulty: medium +--- +title: Onion Tool Box +--- +subtitle: + +Myonion is a developer tool box, providing a command line interface and a GUI to configure and deploy existing services via .onion. The idea behind myonion is to make onion services accessible to developers that might be interested to innovate in the privacy space, building applications that are designed for privacy and security. +--- +body: + +# Problem + +It is not necessarily difficult to use onion services, but it might be tricky to configure a web service to be offered via .onion so that it doesn’t leak sensitive information. + +There are detailed [guides](https://riseup.net/en/security/network-security/tor/onionservices-b… available for users that would like to offer a web application via .onion and some tools have been developed to help service operators: discover known misconfiguration or [vulnerabilities](https://onionscan.org/) or deploy an [onion site](https://github.com/alecmuffett/eotk). + +Involving a wider developer community can help creating a better image of Tor and onion services, replacing the “dark net” narrative with the secure and private web one. + +Onion services can also be relevant to all those people interested in the “zero-trust” strategy. The concept behind zero-trust is to adopt strategies and tools to help prevent data breaches by eliminating the concept of trust from an organization’s network architecture, with the principle of never trust, always verify. + +Ultimately myonion is about creating a better experience for onion services developers and operators and therefore fostering a more legitimate onion service ecosystem. + +# Proposal + +Myonion is a developer tool box, providing a command line interface and a GUI to configure and deploy existing services via .onion. A minimal prototype for myonion already [exists](https://github.com/hiromipaw/myonion). + +Someone that may want to run an onion service can use the myonion wrapper app to start a .onion from their computer and sharea static website or a web application. + +Myonion can also be used to deploy the resulting configured app to a defined set of cloud providers. + +Myonion provides a way to build and deploy onion ready applications, allowing developers to build and test web applications and easily share them with others, bundling the code and configuration in a lightweight, portable Docker container application that runs the same everywhere. + +The experience for developers will be similar to using other industry solutions, like the [Docker desktop app](https://www.docker.com/products/docker-desktop). + +Developers using myonion are provided with pre-defined and customizable application templates, with corresponding configuration and a test set, eliminating error-prone manual setup and known onion service configuration mistakes. + +The resulting application is therefore deployable via a set of endpoint management tools to known providers. Providing a way to deploy onion services at scale. + +# Resources + +- Myonion repo on github: https://github.com/hiromipaw/myonion + diff --git a/content/project-ideas/ooni-explorer-advanced-search/contents.lr b/content/project-ideas/ooni-explorer-advanced-search/contents.lr new file mode 100644 index 0000000..be381fd --- /dev/null +++ b/content/project-ideas/ooni-explorer-advanced-search/contents.lr @@ -0,0 +1,61 @@ +_model: project +--- +_template: layout.html +--- +html: two-columns-page.html +--- +active: True +--- +section: GSoC +--- +section_id: gsoc +--- +color: primary +--- +key: 4 +--- +languages: React +--- +org: OONI +--- +mentors: +Federico Ceratto +Arturo Filastò +--- +difficulty: Medium +--- +title: OONI Explorer Advanced Search +--- +subtitle: + +OONI Explorer is an open data resource on internet censorship around the world. This project is about enriching the OONI Explorer search functionality with the ability to visualize an analysis of metadata pertaining to filtered measurements. +--- +body: + +# Background + +OONI Explorer is an open data resource on internet censorship around the world. This project is about enriching the OONI Explorer search functionality with the ability to visualize an analysis of metadata pertaining to filtered measurements. + +# Proposal + +This project is about enriching the OONI Explorer search functionality with the ability to visualize an analysis of metadata pertaining to filtered measurements. + +This would involve adding the ability to filter on multiple axis: country, ASN, time range, anomaly, confirmed, failure, domain or input, citizenlab category code. + +The results would then be presented in an aggregate form, such as showing: + +- The total measurement count +- The anomaly vs total ratio +- Confirmed vs total +- Failure vs total + +These results could then be presented as a table or some other charts, such as a heatmat. + +Some other more detailed, drill-down views could also be implemented. + +A potential applicant should also have some prior design experience + +# Resources + +- OONI Explorer repo on github: https://github.com/ooni/explorer + diff --git a/content/project-ideas/ooni-probe-experiments/contents.lr b/content/project-ideas/ooni-probe-experiments/contents.lr new file mode 100644 index 0000000..1eb568e --- /dev/null +++ b/content/project-ideas/ooni-probe-experiments/contents.lr @@ -0,0 +1,61 @@ +_model: project +--- +_template: layout.html +--- +html: two-columns-page.html +--- +active: True +--- +section: GSoC +--- +section_id: gsoc +--- +color: primary +--- +key: 5 +--- +languages: Golang +--- +org: OONI +--- +mentors: +Simone Basso +Arturo Filastò +--- +difficulty: low-high +--- +title: OONI Probe network experiments +--- +subtitle: + +OONI Probe is a free software project that aims to uncover internet censorship around the world. As part of this project you would be working on researching and developing new OONI Probe network experiments. + +--- +body: + +# Background + +The Open Observatory of Network Interference (OONI) is a free software project which aims to empower decentralized efforts in increasing transparency of internet censorship around the world. + +We develop free and open source software, called OONI Probe, that users can run to measure: + +- Blocking of websites; +- Blocking of instant messaging apps (WhatsApp, Facebook Messenger and Telegram); +- Blocking of censorship circumvention tools (such as Tor); +- Presence of systems (middleboxes) in your network that might be responsible for censorship and/or surveillance; +- Speed and performance of your network. + +By running OONI Probe, users can collect data that can potentially serve as evidence of internet censorship since it shows how, when, where, and by whom it is implemented. + +# Proposal + +*Prerequisites:* Knowledge of network programming + +As part of this project you would be working on researching and developing new OONI Probe network experiments. These experiments would be integrated inside of probe-engine and could eventually make their way into the OONI Probe desktop client. + +The GSoC project is only about researching and implementing a working test in probe-engine, not the UI and client integration of the test. + +# Resources + +- OONI Probe repo on github: https://github.com/ooni/probe-engine +- [Ideas for new experiments](https://github.com/ooni/probe-engine/issues?q=is%3Aopen+is%3Ai… \ No newline at end of file diff --git a/content/project-ideas/privacy-aware-geo-lookup/contents.lr b/content/project-ideas/privacy-aware-geo-lookup/contents.lr new file mode 100644 index 0000000..e170747 --- /dev/null +++ b/content/project-ideas/privacy-aware-geo-lookup/contents.lr @@ -0,0 +1,56 @@ +_model: project +--- +_template: layout.html +--- +html: two-columns-page.html +--- +active: True +--- +section: GSoC +--- +section_id: gsoc +--- +color: primary +--- +key: 6 +--- +languages: +Golang +Java +Android +--- +org: OONI +--- +mentors: +Simone Basso +Arturo Filastò +--- +difficulty: Medium +--- +title: Privacy aware geo lookup +--- +subtitle: + +The idea for this project is to research a way to do a GPS based location lookup which resolves the location of the user to a granularity which is useful for qualifying measurements, but that doesn’t compromise users safety and privacy. + +--- +body: + +# Problem + +When looking at OONI Probe measurements we often face a challenge in properly understanding what country (or more granular location) they are telling us things about. + +Often times the location information (since it's based on geoip) is inaccurate, because the underlying GeoIP database we used was old. + +On the other hand we also have a responsibility to protect user privacy to the extent that it's possible and therefore we don't collect IPs or store location information that is more granular than country level. + +# Proposal +*Prerequisites:* familiarity with Android development and aptitude for research + +The idea for this project is to research a way to do a GPS based location lookup which resolves the location of the user to a granularity which is useful for qualifying measurements, but that doesn’t compromise users safety and privacy. + +# Resources + +- OONI Probe engine repo on github: https://github.com/ooni/probe-engine + +For the original ticket and discussion, please see ticket [249](https://github.com/ooni/probe-engine/issues/249) \ No newline at end of file diff --git a/content/project-ideas/privacy-friendly-web/contents.lr b/content/project-ideas/privacy-friendly-web/contents.lr new file mode 100644 index 0000000..7ab642b --- /dev/null +++ b/content/project-ideas/privacy-friendly-web/contents.lr @@ -0,0 +1,59 @@ +_model: project +--- +_template: layout.html +--- +html: two-columns-page.html +--- +active: True +--- +section: GSoC +--- +section_id: gsoc +--- +color: primary +--- +key: 7 +--- +languages: +javascript +CSS +HTML +Python +--- +mentors: +hiro +--- +difficulty: medium +--- +title: Privacy Friendly Web +--- +subtitle: + +The scope of this project is creating a open-source community-driven browsable list of patterns and release a css/js framework that web developers can extend and use in their work. +--- +body: + +# Problem + +Security concerned web users take conscious steps to limit the amount of data they share with the websites visited and third party services. + +There are a number of security enhancing tools available. Some come in the form of browser extensions and javascript blockers, others are full fledged web browsers designed with providing extra security to their users. + +One of these is the Tor Browser. The Tor Browser was designed to provide privacy while surfing the web and defend users against both network and local forensic adversaries. There are two main categories of requirements that have been considered: Security Requirements, and Privacy Requirements. + +Security Requirements are the minimum properties in order for a browser to be able to support Tor and similar privacy proxies safely. Privacy requirements are primarily concerned with reducing linkability: the ability for a user's activity on one site to be linked with their activity on another site without their knowledge or explicit consent. + +# Proposal + +Websites can work seamlessly with the Tor Browser and other privacy enhancing browsers and tools if they adopt a series of respectful and ethical patterns. + +The Tor Browser is in fact, based on Mozilla's Extended Support Release (ESR) Firefox branch. We have a series of patches against this browser to enhance privacy and security. Browser behavior is additionally augmented through the Torbutton extension, and we also change a number of Firefox preferences from their defaults. + +The Tor Project has developed over the years a set of web development guidelines that allow websites to work with security enhanced browsers without causing any or minimal functionality destruption to their users. These guidelines have been shaped in an internal styleguide that has been adopted across all torproject.org websites. + +We are now formalizing these web development patterns and some security concerns that need to be considered when developing websites for users surfing the web with security enhanced browsers and tools. The scope of this project is creating a open-source community-driven browsable list of patterns and release a css/js framework that web developers can extend and use in their work. + +# Resources + +- Tor Project [styleguide](https://styleguide.torproject.org/) +- Styleguide repo on github: https://github.com/torproject/styleguide diff --git a/content/project-ideas/salmon-bridge-distribution/contents.lr b/content/project-ideas/salmon-bridge-distribution/contents.lr new file mode 100644 index 0000000..8ec5614 --- /dev/null +++ b/content/project-ideas/salmon-bridge-distribution/contents.lr @@ -0,0 +1,48 @@ +_model: project +--- +_template: layout.html +--- +html: two-columns-page.html +--- +active: True +--- +section: GSoC +--- +section_id: gsoc +--- +color: primary +--- +key: 8 +--- +languages: +--- +org: Tor +--- +mentors: +cohosh +ahf +--- +difficulty: +--- +title: Implementing Salmon as a bridge distribution mechanism +--- +subtitle: + +This project entails implementing Salmon, a bridge distribution mechanism that partitions and distributes bridges using reputation to give well-behaved users access to "better" bridges and add a penalty when their bridges get censored. + +--- +body: + +# Problem + +Bridges are Tor relays that are not publicly listed and therefore allow access to the Tor network in places where access to the public Tor relays, and therefore access to the Tor network, is blocked. Many users rely on bridges, or anti-censorship proxies, to connect to the Tor network. However, when censors learn this information, the bridges quickly become blocked and can no longer be used. We need a way of distributing bridge information to users so that they are able to connect without these bridges being discovered by the censors. + +# Proposal + +Our goal is to distribute bridges to users in censored regions when they need them, while also limiting the amount of bridge information that is leaked to censors. This project entails implementing Salmon, a bridge distribution mechanism that partitions and distributes bridges using reputation to give well-behaved users access to "better" bridges and add a penalty when their bridges get censored. + +# Resources + +- Original Paper: [Salmon: Robust Proxy Distribution for +Censorship Circumvention](https://petsymposium.org/2016/files/papers/Salmon__Robust_Pr… +- Salmon Project on github: https://github.com/SalmonProject \ No newline at end of file diff --git a/content/project-ideas/snowflake-android-proxy/contents.lr b/content/project-ideas/snowflake-android-proxy/contents.lr new file mode 100644 index 0000000..f922efb --- /dev/null +++ b/content/project-ideas/snowflake-android-proxy/contents.lr @@ -0,0 +1,47 @@ +_model: project +--- +_template: layout.html +--- +html: two-columns-page.html +--- +active: True +--- +section: GSoC +--- +section_id: gsoc +--- +color: primary +--- +key: 9 +--- +languages: +Android +--- +org: Tor +--- +mentors: +cohosh +--- +difficulty: +--- +title: Snowflake proxy on Android +--- +subtitle: + +This project entails implementing a Snowflake proxy app that will run on Android and relay a user's Tor traffic to the Tor network in the background. + +--- +body: + +# Background + +[Snowflake](https://snowflake.torproject.org/) is a circumvention system in which volunteers can run proxies to help users connect to the Tor network. Users make WebRTC connections to the proxies, who then relay this data to a Snowflake bridge and then on to the Tor network. The advantage of using WebRTC is that Snowflake proxies can frequently change IP address or operate behind a NAT. At the moment, we have implemented the Snowflake proxy code as a web extension or a web badge, but we have not yet implemented a proxy that will run smoothly on Android. + +# Proposal + +This project entails implementing a Snowflake proxy app that will run on Android and relay a user's Tor traffic to the Tor network in the background. There is an implementation component as well as an exploration and testing component while we figure out how to achieve good performance from a background application without using too much of the volunteer proxy's data or resources. + +# Resources + +- [Snowflake](https://snowflake.torproject.org/) +- Snowflake repo: https://gitweb.torproject.org/pluggable-transports/snowflake.git/ \ No newline at end of file diff --git a/content/project-ideas/tor-keygen/contents.lr b/content/project-ideas/tor-keygen/contents.lr new file mode 100644 index 0000000..f32192f --- /dev/null +++ b/content/project-ideas/tor-keygen/contents.lr @@ -0,0 +1,49 @@ +_model: project +--- +_template: layout.html +--- +html: two-columns-page.html +--- +active: True +--- +section: GSoC +--- +section_id: gsoc +--- +color: primary +--- +key: 12 +--- +languages: +C +Python +Golang +Rust +--- +mentors: +asn +dgoulet +--- +difficulty: medium/hard +--- +title: tor-keygen +--- +subtitle: + +The scope of this project is to write an application that generates cryptographic keys for Tor relays, dirauths and onion services. +--- +body: + +# Problem + + +# Proposal + +Prerequisites: Understanding of Tor protocol and tor codebase + +# Resources + +- https://trac.torproject.org/projects/tor/ticket/18098 +- https://trac.torproject.org/projects/tor/ticket/14389 +- https://github.com/torproject/tor/blob/e34d963c4453ceac7ff378ce0044d1046198… +- Original tor-keygen repo on github: https://github.com/haxxpop/torkeygen \ No newline at end of file diff --git a/content/project-ideas/tor-relay-ipv6-support/contents.lr b/content/project-ideas/tor-relay-ipv6-support/contents.lr new file mode 100644 index 0000000..86518a2 --- /dev/null +++ b/content/project-ideas/tor-relay-ipv6-support/contents.lr @@ -0,0 +1,81 @@ +_model: project +--- +_template: layout.html +--- +html: two-columns-page.html +--- +active: True +--- +section: GSoC +--- +section_id: gsoc +--- +color: primary +--- +key: 10 +--- +languages: +C +--- +mentors: +teor +ahf (to be confirmed) +--- +difficulty: Medium +--- +title: Improve Tor Relay IPv6 Support +--- +subtitle: + +Tor helps people stay safe on the internet, by keeping their internet use secure and anonymous. More Tor clients are running on IPv6-only or dual-stack networks. But only 20% of Tor’s available relay bandwidth supports IPv6. We want to automate relay IPv6 address discovery and reachability checks, so that it is easier for relay operators to run IPv6 relays. + +--- +body: + +The Tor Project will be improving tor relay IPv6 support in 2020. + +Students may choose to focus on: + * designing and implementing tor relay IPv6 features, + * tor relay IPv6 testing, or + * diagnosing and fixing bugs in tor's IPv6 code. + +## Prerequisites + +* Network configuration skills +* Basic understanding of IPv4 and IPv6 + +Recommended: + +* Experience testing network software +* Experience running Internet-connected servers + +## Programming skills needed: + +* C coding +* Building Unix-based (Linux, *BSD, macOS) software + +Recommended: + +* Experience with Unix network programming +* Python coding (for testing) +* Access to a server with public IPv4 and IPv6 addresses (to run a test relay) + +## Links/Resources + +### Technical Proposals + +Tor Relay IPv6 Reachability +https://gitweb.torproject.org/torspec.git/tree/proposals/311-relay-ipv6-reachability.txt + +Tor Relay Automatic IPv6 Address Discovery +https://gitweb.torproject.org/torspec.git/tree/proposals/312-relay-auto-ipv6-addr.txt + +### Relay Operator Guides + +Tor Relay Guide: IPv6 +https://trac.torproject.org/projects/tor/wiki/TorRelayGuide#IPv6 + +### Roadmaps + +Tor IPv6 Roadmap +https://trac.torproject.org/projects/tor/wiki/org/roadmaps/Tor/IPv6Features diff --git a/content/project-ideas/tor-weather/contents.lr b/content/project-ideas/tor-weather/contents.lr new file mode 100644 index 0000000..3023237 --- /dev/null +++ b/content/project-ideas/tor-weather/contents.lr @@ -0,0 +1,77 @@ +_model: project +--- +_template: layout.html +--- +html: two-columns-page.html +--- +active: True +--- +section: GSoC +--- +section_id: gsoc +--- +color: primary +--- +key: 11 +--- +languages: +python +java +--- +mentors: +GeKo +karsten +--- +difficulty: medium +--- +title: Tor Weather +--- +subtitle: + +This project would implement a notification system for relay operators to alert them when the state of their relay has changed. This is the most efficient way to achieve and maintain a healthy Tor network on the long run. +--- +body: + +# Problem + +If a relay disappears today, it is unlikely that anyone will notice or even send an email to the operator. + +The entire Tor network would benefit from a "Tor Weather" service to notify relay and bridge operators when the state of their relays has changed. This has a number of benefits, including: + +- increasing the likelihood that relay operators notice problems and actually mitigate them. +- showing relay operators that someone actually cares if their relays go down or become outdated or have another problems +- giving relay operators information about best-practices, e.g not running outdated versions, fixing their DNs, etc... + +Right now, there is very little direct feedback given to relay operators. This can mean that operators become discouraged and stop running relays. + +# Proposal + +This project would involve the implementation of an email notification service that relay operators can subscribe to and choose which notifications they want to receive about their relay. + +This project already existed and was known as "Tor Weather". It was unfortunately [discontinued](https://lists.torproject.org/pipermail/tor-relays/2016-April/… due to lack of maintenance and resources to keep the project alive. However, we think that this is still a great idea and the most efficient way to achieve and maintain a healthy Tor network on the long run. The resulting service should conform to our current [styleguide](https://styleguide.torproject.org/). + +This notification service should support subscribing via single relay fingerprint or MyFamily groups. Additionally, it should not need any subscription change if a new relay gets added to the family. As this service would store email addresses of potential tor relay operators, they should be kept private and safeguarded. However, a passive observer can collect them by watching outbound email traffic if no TLS is used. As such, this service should suggest using a dedicated email address for this service. + +Once a basic email notification service is implemented, these are some ideas for potential notification types that could be implemented within it: +- Email me when my node is down - Here we should decide how long before we send a notification? +- Email me when my relay is affected by a security vulnerability +- Email me when my relay runs an end-of-life version of tor +- Email me when my relay runs an outdated tor version +- Email me when my exit relay fails to resolve hostnames (DNS failure) +- Email me when my relay looses the stable/guard/exit flag +- Email me when my MyFamily configuration is broken +- Email me when you detect issues with my relay +- Email me with suggestions for configuration improvements for my relay +- Email me when my relay is on the top 20/50/100 relays list +- Email me with monthly/quarterly status information, e.g what is my position in the overall relay list, how much traffic did my relay do during the last month, etc... +- Email me about new relay requirements +- Email me about tor relay operator events + +For each notification implemented, there should be a corresponding specification written to describe the meaning of each notification type. + +# Resources + +- What Tor Weather looked like: https://web.archive.org/web/20141004055709/https://weather.torproject.org/s… +- Tor Weather repo: https://gitweb.torproject.org/weather.git/ + +For the original ticket and discussion, please see ticket [#26124](http://bugs.torproject.org/26124) \ No newline at end of file

1 0

[dev/staging] Add some more content to team pages
by pili＠torproject.org 13 Apr '20

13 Apr '20

commit a7ac9a6653bf49f90feaed40fd5f4b3243825bc0 Author: Pili Guerra <pili(a)piliguerra.com> Date: Mon Apr 13 15:59:00 2020 +0100 Add some more content to team pages --- content/applications/contents.lr | 2 +- content/applications/rbm/contents.lr | 34 +++++++++++++++++++++++ content/applications/tor-browser/contents.lr | 40 ++++++++++++++++++++++++++++ content/metrics/contents.lr | 2 +- 4 files changed, 76 insertions(+), 2 deletions(-) diff --git a/content/applications/contents.lr b/content/applications/contents.lr index 8e44939..58b847c 100644 --- a/content/applications/contents.lr +++ b/content/applications/contents.lr @@ -12,7 +12,7 @@ subtitle: The Applications Team is a group of Tor people who are working on diff --- key: 2 --- -html: training.html +html: team-page.html --- body: diff --git a/content/applications/rbm/contents.lr b/content/applications/rbm/contents.lr index e69de29..b1c34c1 100644 --- a/content/applications/rbm/contents.lr +++ b/content/applications/rbm/contents.lr @@ -0,0 +1,34 @@ +_model: project +--- +_template: layout.html +--- +html: project-page.html +--- +maintained: True +--- +section: applications +--- +section_id: applications +--- +color: primary +--- +key: 4 +--- +languages: +Perl +--- +maintainers: +boklm +--- +title: Reproducible Build Manager +--- +link: https://rbm.torproject.org/ +--- +subtitle: + +Reproducible Build Manager (rbm) is a tool that helps you create and build packages for multiple linux distributions, and automate the parts that can be automated. + +--- +body: + +longer text \ No newline at end of file diff --git a/content/applications/tor-browser/contents.lr b/content/applications/tor-browser/contents.lr index e69de29..4dfc964 100644 --- a/content/applications/tor-browser/contents.lr +++ b/content/applications/tor-browser/contents.lr @@ -0,0 +1,40 @@ +_model: project +--- +_template: layout.html +--- +html: project-page.html +--- +maintained: True +--- +section: applications +--- +section_id: applications +--- +color: primary +--- +key: 1 +--- +languages: +C +Python +Rust +Javascript +--- +maintainers: +acat +brade +mcs +pospeselr +sysrqb +--- +title: Tor Browser +--- +link: https://www.torproject.org/download/ +--- +subtitle: + +Tor Browser is an easy-to-use, portable package of Tor, HTTPS-Everywhere, NoScript, TorLauncher, Torbutton, and a Firefox fork, all preconfigured to work together out of the box. +--- +body: + +longer text \ No newline at end of file diff --git a/content/metrics/contents.lr b/content/metrics/contents.lr index e870b2c..7b1b14e 100644 --- a/content/metrics/contents.lr +++ b/content/metrics/contents.lr @@ -12,7 +12,7 @@ subtitle: The Metrics Team is a group of Tor people who care about measuring and --- key: 3 --- -html: training.html +html: team-page.html --- body:

1 0

[translation/abouttor-homepage] https://gitweb.torproject.org/translation.git/commit/?h=abouttor-homepage
by translation＠torproject.org 13 Apr '20

13 Apr '20

commit f78ccc172fd2c2162adc870de954d4f6e51639d8 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Apr 13 14:15:06 2020 +0000 https://gitweb.torproject.org/translation.git/commit/?h=abouttor-homepage --- sv-SE/aboutTor.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sv-SE/aboutTor.dtd b/sv-SE/aboutTor.dtd index 2324838334..2e1f82fc28 100644 --- a/sv-SE/aboutTor.dtd +++ b/sv-SE/aboutTor.dtd @@ -25,7 +25,7 @@ <!ENTITY aboutTor.tor_mission.label "Tor-projektet är en amerikansk 501(c)(3) ideell organisation som främjar mänskliga rättigheter och friheter genom att skapa och distribuera anonymitets- och sekretessteknik med fri och öppen källkod, stödja deras obegränsade tillgänglighet och användning och främja deras vetenskapliga och populära förståelse."> <!ENTITY aboutTor.getInvolved.label "Engagera dig »"> -<!ENTITY aboutTor.newsletter.tagline "Få de senaste nyheterna från Tor direkt till din inkorg."> +<!ENTITY aboutTor.newsletter.tagline "Få de senaste nyheterna från Tor direkt i din inkorg."> <!ENTITY aboutTor.newsletter.link_text "Anmäl dig till Tor-nyheter."> <!ENTITY aboutTor.donationBanner.freeToUse "Tor är gratis att använda på grund av donationer från människor som du."> <!ENTITY aboutTor.donationBanner.buttonA "Donera nu">

1 0

[translation/tbmanual-contentspot] https://gitweb.torproject.org/translation.git/commit/?h=tbmanual-contentspot
by translation＠torproject.org 13 Apr '20

13 Apr '20

commit be4dbfa836f48ccc3adbbca6e91cf49d3eaa4dbc Author: Translation commit bot <translation(a)torproject.org> Date: Mon Apr 13 11:51:21 2020 +0000 https://gitweb.torproject.org/translation.git/commit/?h=tbmanual-contentspot --- contents+de.po | 21 +++++++++++++-------- 1 file changed, 13 insertions(+), 8 deletions(-) diff --git a/contents+de.po b/contents+de.po index 80fc802671..7b28249970 100644 --- a/contents+de.po +++ b/contents+de.po @@ -10,6 +10,7 @@ # Emma Peel, 2020 # erinm, 2020 # Jonas Kröber <murmel.schelm(a)gmail.com>, 2020 +# Christian Nelke <christian.strozyk(a)googlemail.com>, 2020 # msgid "" msgstr "" @@ -17,7 +18,7 @@ msgstr "" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2020-04-12 08:00+CET\n" "PO-Revision-Date: 2018-11-14 12:31+0000\n" -"Last-Translator: Jonas Kröber <murmel.schelm(a)gmail.com>, 2020\n" +"Last-Translator: Christian Nelke <christian.strozyk(a)googlemail.com>, 2020\n" "Language-Team: German (https://www.transifex.com/otf/teams/1519/de/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" @@ -87,7 +88,7 @@ msgstr "Lade herunter" #: https//tb-manual.torproject.org/menu/ #: (content/menu/contents+en.lrtopic.body) msgid "Running Tor Browser for the First Time" -msgstr "" +msgstr "Tor Browser das erste Mal ausführen" #: https//tb-manual.torproject.org/menu/ #: (content/menu/contents+en.lrtopic.body) @@ -107,7 +108,7 @@ msgstr "Brücken" #: https//tb-manual.torproject.org/menu/ #: (content/menu/contents+en.lrtopic.body) msgid "Managing Identities" -msgstr "" +msgstr "Identitäten Verwalten" #: https//tb-manual.torproject.org/menu/ #: (content/menu/contents+en.lrtopic.body) @@ -156,7 +157,7 @@ msgstr "Bekannte Probleme" #: https//tb-manual.torproject.org/mobile-tor/ #: (content/mobile-tor/contents+en.lrtopic.title) msgid "Mobile Tor" -msgstr "" +msgstr "Mobile Version von Tor" #: https//tb-manual.torproject.org/menu/ #: (content/menu/contents+en.lrtopic.body) @@ -166,7 +167,7 @@ msgstr "Werde ein Tor-Übersetzer" #: https//tb-manual.torproject.org/menu/ #: (content/menu/contents+en.lrtopic.body) msgid "Making Tor Browser Portable" -msgstr "" +msgstr "Tor Browser portable machen" #: https//tb-manual.torproject.org/menu/ #: (content/menu/contents+en.lrtopic.body) @@ -646,7 +647,7 @@ msgstr "" #: https//tb-manual.torproject.org/running-tor-browser/ #: (content/running-tor-browser/contents+en.lrtopic.body) msgid "<img class=\"col-md-6\" src=\"../../static/images/pluggable-transport.png\">" -msgstr "" +msgstr "<img class=\"col-md-6\" src=\"../../static/images/pluggable-transport.png\">" #: https//tb-manual.torproject.org/running-tor-browser/ #: (content/running-tor-browser/contents+en.lrtopic.body) @@ -885,6 +886,8 @@ msgstr "" #: (content/bridges/contents+en.lrtopic.body) msgid "Your settings will automatically be saved once you close the tab." msgstr "" +"Die Einstellungen werden automatisch gespeichert sobald der Tab geschlossen " +"wird." #: https//tb-manual.torproject.org/circumvention/ #: (content/circumvention/contents+en.lrtopic.body) @@ -1023,6 +1026,8 @@ msgid "" "<img class=\"col-md-6\" align=\"right\" hspace=\"5\" " "src=\"../../static/images/request-a-bridge.png\">" msgstr "" +"<img class=\"col-md-6\" align=\"right\" hspace=\"5\" " +"src=\"../../static/images/request-a-bridge.png\">" #: https//tb-manual.torproject.org/bridges/ #: (content/bridges/contents+en.lrtopic.body) @@ -1095,7 +1100,7 @@ msgstr "" #: https//tb-manual.torproject.org/bridges/ #: (content/bridges/contents+en.lrtopic.body) msgid "Click \"Connect\" to save your settings." -msgstr "" +msgstr "Auf \"Verbinden\" klicken um die Einstellungen zu speichern." #: https//tb-manual.torproject.org/bridges/ #: (content/bridges/contents+en.lrtopic.body) @@ -2340,7 +2345,7 @@ msgstr "" #: https//tb-manual.torproject.org/mobile-tor/ #: (content/mobile-tor/contents+en.lrtopic.description) msgid "Learn about Tor for mobile devices" -msgstr "" +msgstr "Über Tor für mobile Endgeräte erfahren" #: https//tb-manual.torproject.org/mobile-tor/ #: (content/mobile-tor/contents+en.lrtopic.body)

1 0

[translation/torbutton-torbuttonproperties_completed] https://gitweb.torproject.org/translation.git/commit/?h=torbutton-torbuttonproperties_completed
by translation＠torproject.org 13 Apr '20

13 Apr '20

commit 972f8b610963e36dc9646072e48badecd41b0777 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Apr 13 11:14:39 2020 +0000 https://gitweb.torproject.org/translation.git/commit/?h=torbutton-torbutton… --- it/torbutton.properties | 65 +++++++++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 63 insertions(+), 2 deletions(-) diff --git a/it/torbutton.properties b/it/torbutton.properties index 6f28e06557..ac9603fe91 100644 --- a/it/torbutton.properties +++ b/it/torbutton.properties @@ -8,6 +8,8 @@ torbutton.circuit_display.unknown_country = Paese sconosciuto torbutton.circuit_display.guard = Guardia torbutton.circuit_display.guard_note = Il tuo nodo [Guardia] non deve cambiare. torbutton.circuit_display.learn_more = Per saperne di più +# torbutton.circuit_display.click_to_copy = Click to Copy +# torbutton.circuit_display.copied = Copied! torbutton.content_sizer.margin_tooltip = Il browser Tor aggiunge questo margine per rendere l'ampiezza e altezza della tua finestra meno distintiva, così si riduce la possibilità di che tu sia tracciato in linea. torbutton.panel.tooltip.disabled = Fai clic per attivare Tor torbutton.panel.tooltip.enabled = Fai clic per disattivare Tor @@ -60,9 +62,54 @@ pageInfo_OnionEncryptionWithBitsAndProtocol=Connessione cifrata (Servizio onion, pageInfo_OnionEncryption=Connessione cifrata (Servizio onion) # Onion services strings. Strings are kept here for ease of translation. -# LOCALIZATION NOTE: %S will be replaced with the .onion address. # onionServices.learnMore=Learn more -# onionServices.clientAuthMissing=Tor onion service missing client authorization +# onionServices.errorPage.browser=Browser +# onionServices.errorPage.network=Network +# onionServices.errorPage.onionSite=Onionsite +# LOCALIZATION NOTE: In the longDescription strings, %S will be replaced with +# an error code, e.g., 0xF3. +# Tor SOCKS error 0xF0: +# onionServices.descNotFound.pageTitle=Problem Loading Onionsite +# onionServices.descNotFound.header=Onionsite Not Found +# onionServices.descNotFound=The most likely cause is that the onionsite is offline. Contact the onionsite administrator. +# onionServices.descNotFound.longDescription=Details: %S — The requested onion service descriptor can't be found on the hashring and therefore the service is not reachable by the client. +# Tor SOCKS error 0xF1: +# onionServices.descInvalid.pageTitle=Problem Loading Onionsite +# onionServices.descInvalid.header=Onionsite Cannot Be Reached +# onionServices.descInvalid=The onionsite is unreachable due an internal error. +# onionServices.descInvalid.longDescription=Details: %S — The requested onion service descriptor can't be parsed or signature validation failed. +# Tor SOCKS error 0xF2: +# onionServices.introFailed.pageTitle=Problem Loading Onionsite +# onionServices.introFailed.header=Onionsite Has Disconnected +# onionServices.introFailed=The most likely cause is that the onionsite is offline. Contact the onionsite administrator. +# onionServices.introFailed.longDescription=Details: %S — Introduction failed, which means that the descriptor was found but the service is no longer connected to the introduction point. It is likely that the service has changed its descriptor or that it is not running. +# Tor SOCKS error 0xF3: +# onionServices.rendezvousFailed.pageTitle=Problem Loading Onionsite +# onionServices.rendezvousFailed.header=Unable to Connect to Onionsite +# onionServices.rendezvousFailed=The onionsite is busy or the Tor network is overloaded. Try again later. +# onionServices.rendezvousFailed.longDescription=Details: %S — The client failed to rendezvous with the service, which means that the client was unable to finalize the connection. +# Tor SOCKS error 0xF4: +# onionServices.clientAuthMissing.pageTitle=Authorization Required +# onionServices.clientAuthMissing.header=Onionsite Requires Authentication +# onionServices.clientAuthMissing=Access to the onionsite requires a key but none was provided. +# onionServices.clientAuthMissing.longDescription=Details: %S — The client downloaded the requested onion service descriptor but was unable to decrypt its content because client authorization information is missing. +# Tor SOCKS error 0xF5: +# onionServices.clientAuthIncorrect.pageTitle=Authorization Failed +# onionServices.clientAuthIncorrect.header=Onionsite Authentication Failed +# onionServices.clientAuthIncorrect=The provided key is incorrect or has been revoked. Contact the onionsite administrator. +# onionServices.clientAuthIncorrect.longDescription=Details: %S — The client was able to download the requested onion service descriptor but was unable to decrypt its content using the provided client authorization information. This may mean that access has been revoked. +# Tor SOCKS error 0xF6: +# onionServices.badAddress.pageTitle=Problem Loading Onionsite +# onionServices.badAddress.header=Invalid Onionsite Address +# onionServices.badAddress=The provided onionsite address is invalid. Please check that you entered it correctly. +# onionServices.badAddress.longDescription=Details: %S — The provided .onion address is invalid. This error is returned due to one of the following reasons: the address checksum doesn't match, the ed25519 public key is invalid, or the encoding is invalid. +# Tor SOCKS error 0xF7: +# onionServices.introTimedOut.pageTitle=Problem Loading Onionsite +# onionServices.introTimedOut.header=Onionsite Circuit Creation Timed Out +# onionServices.introTimedOut=Failed to connect to the onionsite, possibly due to a poor network connection. +# onionServices.introTimedOut.longDescription=Details: %S — The connection to the requested onion service timed out while trying to build the rendezvous circuit. +# +# LOCALIZATION NOTE: %S will be replaced with the .onion address. # onionServices.authPrompt.description=%S is requesting your private key. # onionServices.authPrompt.keyPlaceholder=Enter your private key for this onion service # onionServices.authPrompt.done=Done @@ -80,3 +127,17 @@ pageInfo_OnionEncryption=Connessione cifrata (Servizio onion) # onionServices.authPreferences.removeAll=Remove All # onionServices.authPreferences.failedToGetKeys=Unable to retrieve keys from tor # onionServices.authPreferences.failedToRemoveKey=Unable to remove key + +# Onion-Location strings. +# onionLocation.alwaysPrioritize=Always Prioritize Onions +# onionLocation.alwaysPrioritizeAccessKey=a +# onionLocation.notNow=Not Now +# onionLocation.notNowAccessKey=n +# onionLocation.description=There's a more private and secure version of this site available over the Tor network via onion services. Onion services help website publishers and their visitors defeat surveillance and censorship. +# onionLocation.tryThis=Try Onion Services +# onionLocation.onionAvailable=.onion available +# onionLocation.learnMore=Learn more… +# onionLocation.always=Always +# onionLocation.askEverytime=Ask every time +# onionLocation.prioritizeOnionsDescription=Prioritize .onion sites when known. +# onionLocation.onionServicesTitle=Onion Services

1 0

[translation/torbutton-torbuttonproperties] https://gitweb.torproject.org/translation.git/commit/?h=torbutton-torbuttonproperties
by translation＠torproject.org 13 Apr '20

13 Apr '20

commit 91b170a1e7184ecf7558c0e0f320a7b252598a3d Author: Translation commit bot <translation(a)torproject.org> Date: Mon Apr 13 11:14:31 2020 +0000 https://gitweb.torproject.org/translation.git/commit/?h=torbutton-torbutton… --- it/torbutton.properties | 74 ++++++++++++++++++++++++------------------------- 1 file changed, 37 insertions(+), 37 deletions(-) diff --git a/it/torbutton.properties b/it/torbutton.properties index 88762e2436..37ac5478cd 100644 --- a/it/torbutton.properties +++ b/it/torbutton.properties @@ -69,45 +69,45 @@ onionServices.errorPage.onionSite=Sito onion # LOCALIZATION NOTE: In the longDescription strings, %S will be replaced with # an error code, e.g., 0xF3. # Tor SOCKS error 0xF0: -onionServices.descNotFound.pageTitle=Problem Loading Onionsite -onionServices.descNotFound.header=Onionsite Not Found -onionServices.descNotFound=The most likely cause is that the onionsite is offline. Contact the onionsite administrator. -onionServices.descNotFound.longDescription=Details: %S — The requested onion service descriptor can't be found on the hashring and therefore the service is not reachable by the client. +onionServices.descNotFound.pageTitle=Problema di caricamento del sito onion +onionServices.descNotFound.header=Sito onion non trovato +onionServices.descNotFound=La causa più probabile è che il sito onion sia offline. Contatta l'amministratore del sito onion. +onionServices.descNotFound.longDescription=Dettagli: %S — Il descrittore del servizio onion richiesto non può essere trovato nell'hashring, perciò il servizio non è raggiungibile dal client. # Tor SOCKS error 0xF1: -onionServices.descInvalid.pageTitle=Problem Loading Onionsite -onionServices.descInvalid.header=Onionsite Cannot Be Reached -onionServices.descInvalid=The onionsite is unreachable due an internal error. -onionServices.descInvalid.longDescription=Details: %S — The requested onion service descriptor can't be parsed or signature validation failed. +onionServices.descInvalid.pageTitle=Problema di caricamento del sito onion +onionServices.descInvalid.header=Sito onion non raggiungibile +onionServices.descInvalid=Il sito onion non è raggiungibile per un errore interno. +onionServices.descInvalid.longDescription=Dettagli: %S — Il descrittore del servizio onion richiesto non può essere letto o la validazione della firma è fallita. # Tor SOCKS error 0xF2: -onionServices.introFailed.pageTitle=Problem Loading Onionsite -onionServices.introFailed.header=Onionsite Has Disconnected -onionServices.introFailed=The most likely cause is that the onionsite is offline. Contact the onionsite administrator. -onionServices.introFailed.longDescription=Details: %S — Introduction failed, which means that the descriptor was found but the service is no longer connected to the introduction point. It is likely that the service has changed its descriptor or that it is not running. +onionServices.introFailed.pageTitle=Problema di caricamento del sito onion +onionServices.introFailed.header=Il sito onion si è disconnesso +onionServices.introFailed=La causa più probabile è che il sito onion sia offline. Contatta l'amministratore del sito onion. +onionServices.introFailed.longDescription=Dettagli: %S — Introduzione fallita, il che significa che il descrittore è stato trovato ma il servizio non è più connesso al punto di introduzione. Probabilmente il servizio ha cambiato il suo descrittore o non è in esecuzione. # Tor SOCKS error 0xF3: -onionServices.rendezvousFailed.pageTitle=Problem Loading Onionsite -onionServices.rendezvousFailed.header=Unable to Connect to Onionsite -onionServices.rendezvousFailed=The onionsite is busy or the Tor network is overloaded. Try again later. -onionServices.rendezvousFailed.longDescription=Details: %S — The client failed to rendezvous with the service, which means that the client was unable to finalize the connection. +onionServices.rendezvousFailed.pageTitle=Problema di caricamento del sito onion +onionServices.rendezvousFailed.header=Impossibile connettersi al sito onion +onionServices.rendezvousFailed=Il sito onion è occupato o la rete Tor è sovraccarica. Riprova più tardi. +onionServices.rendezvousFailed.longDescription=Dettagli: %S — Il client non ha trovato riscontro con il servizio, il che significa che il client non è riuscito a completare la connessione. # Tor SOCKS error 0xF4: onionServices.clientAuthMissing.pageTitle=Autorizzazione necessaria -onionServices.clientAuthMissing.header=Onionsite Requires Authentication -onionServices.clientAuthMissing=Access to the onionsite requires a key but none was provided. -onionServices.clientAuthMissing.longDescription=Details: %S — The client downloaded the requested onion service descriptor but was unable to decrypt its content because client authorization information is missing. +onionServices.clientAuthMissing.header=Il sito onion richiede l'autenticazione +onionServices.clientAuthMissing=L'accesso al sito onion richiede una chiave ma non ne è stata fornita nessuna. +onionServices.clientAuthMissing.longDescription=Dettagli: %S — Il client ha scaricato il descrittore del servizio onion richiesto ma non è riuscito a decifrarne il contenuto perchè mancano informazioni di autorizzazione del client. # Tor SOCKS error 0xF5: onionServices.clientAuthIncorrect.pageTitle=Autorizzazione fallita -onionServices.clientAuthIncorrect.header=Onionsite Authentication Failed -onionServices.clientAuthIncorrect=The provided key is incorrect or has been revoked. Contact the onionsite administrator. -onionServices.clientAuthIncorrect.longDescription=Details: %S — The client was able to download the requested onion service descriptor but was unable to decrypt its content using the provided client authorization information. This may mean that access has been revoked. +onionServices.clientAuthIncorrect.header=Autenticazione al sito onion fallita +onionServices.clientAuthIncorrect=La chiave fornita non è corretta o è stata revocata. Contatta l'amministratore del sito onion. +onionServices.clientAuthIncorrect.longDescription=Dettagli: %S — Il client è riuscito a scaricare il descrittore del servizio onion richiesto ma non è riuscito a decifrarne il contenuto usando le informazioni di autorizzazione del client fornite. Potrebbe significare che l'accesso è stato revocato. # Tor SOCKS error 0xF6: -onionServices.badAddress.pageTitle=Problem Loading Onionsite -onionServices.badAddress.header=Invalid Onionsite Address -onionServices.badAddress=The provided onionsite address is invalid. Please check that you entered it correctly. -onionServices.badAddress.longDescription=Details: %S — The provided .onion address is invalid. This error is returned due to one of the following reasons: the address checksum doesn't match, the ed25519 public key is invalid, or the encoding is invalid. +onionServices.badAddress.pageTitle=Problema di caricamento del sito onion +onionServices.badAddress.header=Indirizzo onion non valido +onionServices.badAddress=L'indirizzo onion fornito non è valido. Controlla di averlo inserito correttamente. +onionServices.badAddress.longDescription=Dettagli: %S — L'indirizzo .onion fornito non è valido. Questo errore accade per uno dei seguenti motivi: il checksum dell'indirizzo non corrisponde, la chiave pubblica ed25519 non è valida o la codifica non è valida. # Tor SOCKS error 0xF7: -onionServices.introTimedOut.pageTitle=Problem Loading Onionsite -onionServices.introTimedOut.header=Onionsite Circuit Creation Timed Out -onionServices.introTimedOut=Failed to connect to the onionsite, possibly due to a poor network connection. -onionServices.introTimedOut.longDescription=Details: %S — The connection to the requested onion service timed out while trying to build the rendezvous circuit. +onionServices.introTimedOut.pageTitle=Problema di caricamento del sito onion +onionServices.introTimedOut.header=Creazione del circuito onion scaduta +onionServices.introTimedOut=Connessione al sito onion fallita, probabilmente per una connessione di rete debole. +onionServices.introTimedOut.longDescription=Dettagli: %S — La connessione al servizio onion richiesto è scaduta mentre si tentava di costruire il circuito di incontro. # # LOCALIZATION NOTE: %S will be replaced with the .onion address. onionServices.authPrompt.description=%S richiede la tua chiave privata. @@ -129,15 +129,15 @@ onionServices.authPreferences.failedToGetKeys=Impossibile recuperare le chiavi d onionServices.authPreferences.failedToRemoveKey=Impossibile rimuovere la chiave # Onion-Location strings. -onionLocation.alwaysPrioritize=Always Prioritize Onions +onionLocation.alwaysPrioritize=Priorità sempre agli onion onionLocation.alwaysPrioritizeAccessKey=a onionLocation.notNow=Non ora onionLocation.notNowAccessKey=n -onionLocation.description=There's a more private and secure version of this site available over the Tor network via onion services. Onion services help website publishers and their visitors defeat surveillance and censorship. -onionLocation.tryThis=Try Onion Services -onionLocation.onionAvailable=.onion available -onionLocation.learnMore=Learn more… +onionLocation.description=C'è una versione più privata e sicura di questo sito disponibile nella rete Tor tramite i servizi onion. I servizi onion aiutano i gestori dei siti ed i loro visitatori a sconfiggere la sorveglianza e la censura. +onionLocation.tryThis=Prova i servizi onion +onionLocation.onionAvailable=.onion disponibile +onionLocation.learnMore=Maggiori informazioni... onionLocation.always=Sempre -onionLocation.askEverytime=Ask every time -onionLocation.prioritizeOnionsDescription=Prioritize .onion sites when known. +onionLocation.askEverytime=Chiedi ogni volta +onionLocation.prioritizeOnionsDescription=Priorità ai siti .onion quando conosciuti. onionLocation.onionServicesTitle=Servizi onion

1 0

[exonerator/release] wrap BufferedReader creation with try-with-resources
by karsten＠torproject.org 13 Apr '20

13 Apr '20

commit 3a1174eabea1e866c8e97e223c136759970484c8 Author: noneofyourbusiness <test(a)devnull.com> Date: Sun Feb 23 15:18:07 2020 -0500 wrap BufferedReader creation with try-with-resources --- .../metrics/exonerator/ExoneraTorDatabaseImporter.java | 13 ++++--------- 1 file changed, 4 insertions(+), 9 deletions(-) diff --git a/src/main/java/org/torproject/metrics/exonerator/ExoneraTorDatabaseImporter.java b/src/main/java/org/torproject/metrics/exonerator/ExoneraTorDatabaseImporter.java index c9cc6b9..b5570cd 100644 --- a/src/main/java/org/torproject/metrics/exonerator/ExoneraTorDatabaseImporter.java +++ b/src/main/java/org/torproject/metrics/exonerator/ExoneraTorDatabaseImporter.java @@ -172,9 +172,8 @@ public class ExoneraTorDatabaseImporter { File parseHistoryFile = new File("stats", "exonerator-import-history"); if (parseHistoryFile.exists()) { - try { - BufferedReader br = new BufferedReader(new FileReader( - parseHistoryFile)); + try (BufferedReader br = new BufferedReader(new FileReader( + parseHistoryFile))) { String line; int lineNumber = 0; while ((line = br.readLine()) != null) { @@ -185,14 +184,12 @@ public class ExoneraTorDatabaseImporter { + "contains a corrupt entry in line {}. " + "Ignoring parse history file entirely.", lineNumber); lastImportHistory.clear(); - br.close(); return; } long lastModified = Long.parseLong(parts[0]); String filename = parts[1]; lastImportHistory.put(filename, lastModified); } - br.close(); } catch (IOException e) { logger.warn("Could not read import history. Ignoring.", e); lastImportHistory.clear(); @@ -375,15 +372,13 @@ public class ExoneraTorDatabaseImporter { private static void writeImportHistoryToDisk() { File parseHistoryFile = new File("stats/exonerator-import-history"); parseHistoryFile.getParentFile().mkdirs(); - try { - BufferedWriter bw = new BufferedWriter(new FileWriter( - parseHistoryFile)); + try (BufferedWriter bw = new BufferedWriter(new FileWriter( + parseHistoryFile))) { for (Map.Entry<String, Long> historyEntry : nextImportHistory.entrySet()) { bw.write(historyEntry.getValue() + "," + historyEntry.getKey() + "\n"); } - bw.close(); } catch (IOException e) { logger.warn("File 'stats/exonerator-import-history' could " + "not be written. Ignoring.", e);

1 0

[exonerator/release] Bump version to 4.3.0-dev.
by karsten＠torproject.org 13 Apr '20

13 Apr '20

commit 06ec2db71aceb8ba0ca346f30742d46039bb7979 Author: Karsten Loesing <karsten.loesing(a)gmx.net> Date: Wed Jan 15 23:45:45 2020 +0100 Bump version to 4.3.0-dev. --- CHANGELOG.md | 3 +++ build.xml | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 0db446b..9c87922 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,6 @@ +# Changes in version 4.?.? - 2020-0?-?? + + # Changes in version 4.3.0 - 2020-01-15 * Medium changes diff --git a/build.xml b/build.xml index c209699..cdc919c 100644 --- a/build.xml +++ b/build.xml @@ -9,7 +9,7 @@ <property name="javadoc-title" value="ExoneraTor API Documentation"/> <property name="implementation-title" value="ExoneraTor" /> - <property name="release.version" value="4.3.0" /> + <property name="release.version" value="4.3.0-dev" /> <property name="metricslibversion" value="2.10.0" /> <property name="jetty.version" value="-9.2.21.v20170120" /> <property name="warfile"

1 0

[exonerator/release] display warning if lock file cannot be deleted, and why
by karsten＠torproject.org 13 Apr '20

13 Apr '20

commit d756133dc3ea468d0f2b73a03762c1ebbc990b3c Author: tordinge <tordinge(a)aprivatesub.net> Date: Mon Feb 24 20:23:57 2020 -0500 display warning if lock file cannot be deleted, and why --- .../torproject/metrics/exonerator/ExoneraTorDatabaseImporter.java | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/src/main/java/org/torproject/metrics/exonerator/ExoneraTorDatabaseImporter.java b/src/main/java/org/torproject/metrics/exonerator/ExoneraTorDatabaseImporter.java index b5570cd..2f39f5a 100644 --- a/src/main/java/org/torproject/metrics/exonerator/ExoneraTorDatabaseImporter.java +++ b/src/main/java/org/torproject/metrics/exonerator/ExoneraTorDatabaseImporter.java @@ -25,6 +25,8 @@ import java.io.File; import java.io.FileReader; import java.io.FileWriter; import java.io.IOException; +import java.nio.file.Files; +import java.nio.file.Paths; import java.sql.CallableStatement; import java.sql.Connection; import java.sql.DriverManager; @@ -397,7 +399,11 @@ public class ExoneraTorDatabaseImporter { /* Delete the exonerator-lock file to allow the next executing of this * tool. */ private static void deleteLockFile() { - new File("exonerator-lock").delete(); + try { + Files.delete(Paths.get("exonerator-lock")); + } catch (IOException e) { + logger.warn("Could not delete lock file \"exonerator-lock\"", e); + } } }

1 0

[exonerator/release] since no regex involved, replace() should be faster than replaceAll() since no Pattern.compile().matcher() will be needed behind the scenes
by karsten＠torproject.org 13 Apr '20

13 Apr '20

commit 3a764fd3a5aa6ef0f4b0ad6c24c4e7f14bd2ec2c Author: tordinge <tordinge(a)aprivatesub.net> Date: Mon Feb 24 20:35:51 2020 -0500 since no regex involved, replace() should be faster than replaceAll() since no Pattern.compile().matcher() will be needed behind the scenes --- .../torproject/metrics/exonerator/ExoneraTorDatabaseImporter.java | 6 +++--- .../java/org/torproject/metrics/exonerator/ExoneraTorServlet.java | 4 ++-- src/main/java/org/torproject/metrics/exonerator/QueryServlet.java | 2 +- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/src/main/java/org/torproject/metrics/exonerator/ExoneraTorDatabaseImporter.java b/src/main/java/org/torproject/metrics/exonerator/ExoneraTorDatabaseImporter.java index 2f39f5a..1e5f3bb 100644 --- a/src/main/java/org/torproject/metrics/exonerator/ExoneraTorDatabaseImporter.java +++ b/src/main/java/org/torproject/metrics/exonerator/ExoneraTorDatabaseImporter.java @@ -228,7 +228,7 @@ public class ExoneraTorDatabaseImporter { try { fingerprintBase64 = Base64.encodeBase64String( Hex.decodeHex(entry.getFingerprint().toCharArray())) - .replaceAll("=", ""); + .replace("=", ""); } catch (DecoderException e) { logger.warn("Unable to decode hex fingerprint {} to convert it back " + "to base64. Aborting import.", entry.getFingerprint(), e); @@ -295,7 +295,7 @@ public class ExoneraTorDatabaseImporter { + "s", "0")); if (!addressHexString.contains("x") && addressHexString.length() == 32) { - orAddress24 = addressHexString.replaceAll(" ", "0") + orAddress24 = addressHexString.replace(" ", "0") .toLowerCase().substring(0, 6); } } @@ -327,7 +327,7 @@ public class ExoneraTorDatabaseImporter { try { fingerprintBase64 = Base64.encodeBase64String( Hex.decodeHex(entry.getFingerprint().toCharArray())) - .replaceAll("=", ""); + .replace("=", ""); } catch (DecoderException ex) { logger.warn("Unable to decode hex fingerprint {} to convert to " + "base64. Aborting import.", entry.getFingerprint(), ex); diff --git a/src/main/java/org/torproject/metrics/exonerator/ExoneraTorServlet.java b/src/main/java/org/torproject/metrics/exonerator/ExoneraTorServlet.java index 3ba42da..06fa0f5 100644 --- a/src/main/java/org/torproject/metrics/exonerator/ExoneraTorServlet.java +++ b/src/main/java/org/torproject/metrics/exonerator/ExoneraTorServlet.java @@ -480,7 +480,7 @@ public class ExoneraTorServlet extends HttpServlet { if (addressInSameNetwork.contains(":")) { address = addressInSameNetwork.replaceAll("[\\[\\]]", ""); link = String.format("%s?ip=[%s]&timestamp=%s&lang=%s", - requestUri, address.replaceAll(":", "%3A"), timestampStr, langStr); + requestUri, address.replace(":", "%3A"), timestampStr, langStr); address = "[" + address + "]"; } else { link = String.format("%s?ip=%s&timestamp=%s&lang=%s", @@ -609,7 +609,7 @@ public class ExoneraTorServlet extends HttpServlet { String permanentLinkUrl, String relayIp, String timestampStr, String langStr) { String encodedAddress = relayIp.contains(":") - ? "[" + relayIp.replaceAll(":", "%3A") + "]" : relayIp; + ? "[" + relayIp.replace(":", "%3A") + "]" : relayIp; out.printf(" <div class=\"row\">\n" + " <div class=\"col-xs-12\">\n" + " <h2>%s</h2>\n" diff --git a/src/main/java/org/torproject/metrics/exonerator/QueryServlet.java b/src/main/java/org/torproject/metrics/exonerator/QueryServlet.java index 85dec57..ee61e28 100644 --- a/src/main/java/org/torproject/metrics/exonerator/QueryServlet.java +++ b/src/main/java/org/torproject/metrics/exonerator/QueryServlet.java @@ -214,7 +214,7 @@ public class QueryServlet extends HttpServlet { + "s", "0")); if (!addressHexString.contains("x") && addressHexString.length() == 32) { - address48 = addressHexString.replaceAll(" ", "0") + address48 = addressHexString.replace(" ", "0") .toLowerCase(); } }

1 0