June 2020 - tor-commits - lists.torproject.org

[tor/master] Add 0.4.4 to list of tor branches used by git scripts.
by nickm＠torproject.org 09 Jun '20

09 Jun '20

commit eaae5625cb1c5fdd26c766157742725aa4b7ad9e Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Jun 9 14:17:15 2020 -0400 Add 0.4.4 to list of tor branches used by git scripts. --- scripts/git/git-list-tor-branches.sh | 3 +++ 1 file changed, 3 insertions(+) diff --git a/scripts/git/git-list-tor-branches.sh b/scripts/git/git-list-tor-branches.sh index b50365590..b0c30d2e8 100755 --- a/scripts/git/git-list-tor-branches.sh +++ b/scripts/git/git-list-tor-branches.sh @@ -145,6 +145,9 @@ branch release-0.4.2 branch maint-0.4.3 branch release-0.4.3 +branch maint-0.4.4 +branch release-0.4.4 + branch master finish

1 0

[tor/master] Bump version to 0.4.5.0-alpha-dev
by nickm＠torproject.org 09 Jun '20

09 Jun '20

commit d2f136aab1f7d76a458e834bd791cbb887c96b51 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Jun 9 14:14:43 2020 -0400 Bump version to 0.4.5.0-alpha-dev --- configure.ac | 4 ++-- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/configure.ac b/configure.ac index 6942db159..dcd1ce7e7 100644 --- a/configure.ac +++ b/configure.ac @@ -4,7 +4,7 @@ dnl Copyright (c) 2007-2019, The Tor Project, Inc. dnl See LICENSE for licensing information AC_PREREQ([2.63]) -AC_INIT([tor],[0.4.4.0-alpha-dev]) +AC_INIT([tor],[0.4.5.0-alpha-dev]) AC_CONFIG_SRCDIR([src/app/main/tor_main.c]) AC_CONFIG_MACRO_DIR([m4]) @@ -16,7 +16,7 @@ configure_flags="$*" # version number changes. Tor uses it to make sure that it # only shuts down for missing "required protocols" when those protocols # are listed as required by a consensus after this date. -AC_DEFINE(APPROX_RELEASE_DATE, ["2020-02-11"], # for 0.4.4.0-alpha-dev +AC_DEFINE(APPROX_RELEASE_DATE, ["2020-06-09"], # for 0.4.5.0-alpha-dev [Approximate date when this software was released. (Updated when the version changes.)]) # "foreign" means we don't follow GNU package layout standards diff --git a/contrib/win32build/tor-mingw.nsi.in b/contrib/win32build/tor-mingw.nsi.in index fb13a2eb3..8ca918b15 100644 --- a/contrib/win32build/tor-mingw.nsi.in +++ b/contrib/win32build/tor-mingw.nsi.in @@ -8,7 +8,7 @@ !include "LogicLib.nsh" !include "FileFunc.nsh" !insertmacro GetParameters -!define VERSION "0.4.4.0-alpha-dev" +!define VERSION "0.4.5.0-alpha-dev" !define INSTALLER "tor-${VERSION}-win32.exe" !define WEBSITE "https://www.torproject.org/" !define LICENSE "LICENSE" diff --git a/src/win32/orconfig.h b/src/win32/orconfig.h index 3c8f91d53..3c7b2ab5f 100644 --- a/src/win32/orconfig.h +++ b/src/win32/orconfig.h @@ -217,7 +217,7 @@ #define USING_TWOS_COMPLEMENT /* Version number of package */ -#define VERSION "0.4.4.0-alpha-dev" +#define VERSION "0.4.5.0-alpha-dev" #define HAVE_STRUCT_SOCKADDR_IN6 #define HAVE_STRUCT_IN6_ADDR

1 0

[translation/abouttor-homepage] https://gitweb.torproject.org/translation.git/commit/?h=abouttor-homepage
by translation＠torproject.org 09 Jun '20

09 Jun '20

commit d83e2f21ab7b96b1950776aa22da0579a4324756 Author: Translation commit bot <translation(a)torproject.org> Date: Tue Jun 9 17:15:05 2020 +0000 https://gitweb.torproject.org/translation.git/commit/?h=abouttor-homepage --- ja/aboutTor.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ja/aboutTor.dtd b/ja/aboutTor.dtd index af821347f2..10eb73a141 100644 --- a/ja/aboutTor.dtd +++ b/ja/aboutTor.dtd @@ -11,7 +11,7 @@ <!ENTITY aboutTor.ready.label "プライベートなブラウジングを開始"> <!ENTITY aboutTor.ready2.label "世界で最もプライベートなブラウジングを行うための準備が完了しました。"> <!ENTITY aboutTor.failure.label "何かが間違っています！"> -<!ENTITY aboutTor.failure2.label "Tor は、このブラウザでは動作しません。"> +<!ENTITY aboutTor.failure2.label "Tor は、現在このブラウザで動作していません。"> <!ENTITY aboutTor.search.label "DuckDuckGo で検索"> <!ENTITY aboutTor.searchDDGPost.link "https://duckduckgo.com">

1 0

[onionperf/master] Adds arbitrary traffic model documentation
by karsten＠torproject.org 09 Jun '20

09 Jun '20

commit 2c19e9475dd89771bc6f417f86676c350dd643c4 Author: Ana Custura <ana(a)netstat.org.uk> Date: Sat Jun 6 15:04:46 2020 +0100 Adds arbitrary traffic model documentation --- README.md | 95 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 95 insertions(+) diff --git a/README.md b/README.md index a3905f4..eee945f 100644 --- a/README.md +++ b/README.md @@ -271,6 +271,101 @@ specific log files from the `log_rotate` directories. You can also plot the meas results from the `json` files by running in `onionperf visualize` mode. See below for more details. +#### Measure Tor using arbitrary traffic models + +OnionPerf uses `tgen` to serve and fetch data through Tor. By default, the +traffic is generated using a bulk download model: each transfer performed is +5MB in size, and transfers are spaced 5 minutes apart. + +The class `TorPerfModel` defined in `onionperf/model.py` is used to generate +this traffic model at runtime: + +``` +class TorperfModel(GeneratableTGenModel): + + def __init__(self, tgen_port="8889", tgen_servers=["127.0.0.1:8888"], socksproxy=None): + self.tgen_port = tgen_port + self.tgen_servers = tgen_servers + self.socksproxy = socksproxy + self.graph = self.generate() + + def generate(self): + server_str = ','.join(self.tgen_servers) + g = DiGraph() + + if self.socksproxy is not None: + g.add_node("start", serverport=self.tgen_port, peers=server_str, loglevel="info", heartbeat="1 minute", socksproxy=self.socksproxy) + else: + g.add_node("start", serverport=self.tgen_port, peers=server_str, loglevel="info", heartbeat="1 minute") + g.add_node("pause", time="5 minutes") + g.add_node("transfer5m", type="get", protocol="tcp", size="5 MiB", timeout="270 seconds", stallout="0 seconds") + g.add_edge("start", "pause") + g.add_edge("pause", "pause") + g.add_edge("pause", "transfer5m") + + return g +``` + +Although OnionPerf does not currently support other TGen traffic models out of +the box, it is possible to modify the code shown above to change the +behaviour of the default model. + +All graph nodes and edges added after the "start" node can be redefined to model +any custom traffic behaviour. Refer to the [TGen +documentation](https://github.com/shadow/tgen/blob/master/doc/TGen-Overview.md) +and [list of traffic model graph +examples](https://github.com/shadow/tgen/blob/master/tools/scripts/generate_tgen_config.py). +For example, to model web traffic behaviour, the class can be modified as follows: + +``` +class TorperfModel(GeneratableTGenModel): + + def __init__(self, tgen_port="8889", tgen_servers=["127.0.0.1:8888"], socksproxy=None): + self.tgen_port = tgen_port + self.tgen_servers = tgen_servers + self.socksproxy = socksproxy + self.graph = self.generate() + + def generate(self): + server_str = ','.join(self.tgen_servers) + g = DiGraph() + + if self.socksproxy is not None: + g.add_node("start", serverport=self.tgen_port, peers=server_str, loglevel="info", heartbeat="1 minute", socksproxy=self.socksproxy) + else: + g.add_node("start", serverport=self.tgen_port, peers=server_str, loglevel="info", heartbeat="1 minute") + + g.add_node("streamA", sendsize="1 kib", recvsize="1 mib") + g.add_node("streamB1", sendsize="10 kib", recvsize="1 mib") + g.add_node("streamB2", sendsize="100 kib", recvsize="10 mib") + g.add_node("streamB3", sendsize="1 mib", recvsize="100 mib") + + g.add_node("pause_sync") + g.add_node("pause", time="1,2,3,4,5,6,7,8,9,10") + g.add_node("end", time="1 minute", count="30", recvsize="1 GiB", sendsize="1 GiB") + + # a small first round request + g.add_edge("start", "streamA") + # second round requests in parallel + g.add_edge("streamA", "streamB1") + g.add_edge("streamA", "streamB2") + g.add_edge("streamA", "streamB3") + # wait for both second round streams to finish + g.add_edge("streamB1", "pause_sync") + g.add_edge("streamB2", "pause_sync") + g.add_edge("streamB3", "pause_sync") + # check if we should stop + g.add_edge("pause_sync", "end") + g.add_edge("end", "pause") + g.add_edge("pause", "start") + + return g +``` + +The new traffic model will only be used for measurements once OnionPerf is reinstalled. + +Note that custom code may be required to analyze the log files and visualize the data. + ### Analyze and Visualize Results OnionPerf runs the data it collects through `analyze` mode every night at midnight to

1 0

[community/master] Update pluggable transport link
by gus＠torproject.org 09 Jun '20

09 Jun '20

commit d3713f649c4e1dc18ef1fad2e43e2519b283b120 Author: Nicolei Ocana <nicoleiocana(a)gmail.com> Date: Sun Jun 7 20:57:29 2020 +0000 Update pluggable transport link --- content/relay-operations/types-of-relays/contents.lr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/relay-operations/types-of-relays/contents.lr b/content/relay-operations/types-of-relays/contents.lr index c4ca5e8..dccab39 100644 --- a/content/relay-operations/types-of-relays/contents.lr +++ b/content/relay-operations/types-of-relays/contents.lr @@ -60,7 +60,7 @@ Tor bridges are nodes in the network that are not listed in the public Tor direc Bridges are useful for Tor users under oppressive regimes or for people who want an extra layer of security because they're worried somebody will recognize that they are contacting a public Tor relay IP address. Several countries, including China and Iran, have found ways to detect and block connections to Tor bridges. -[Pluggable transports](https://2019.www.torproject.org/docs/pluggable-transports.html.…, a special kind of bridge, address this by adding an additional layer of obfuscation. +[Pluggable transports](https://tb-manual.torproject.org/circumvention/), a special kind of bridge, address this by adding an additional layer of obfuscation. Bridges are relatively easy, low-risk and low bandwidth Tor nodes to operate, but they have a big impact on users. A bridge isn't likely to receive any abuse complaints, and since bridges are not listed in the public consensus, they are unlikely to be blocked by popular services.

1 0

[community/master] Merge branch 'pluggable-transport-link'
by gus＠torproject.org 09 Jun '20

09 Jun '20

commit 6ce05bb16cd965757dd8704370264cf71c0282f4 Merge: 45ac51b d3713f6 Author: gus <gus(a)torproject.org> Date: Mon Jun 8 23:24:40 2020 -0400 Merge branch 'pluggable-transport-link' content/relay-operations/types-of-relays/contents.lr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

[community/master] Clean up a few phrases
by gus＠torproject.org 09 Jun '20

09 Jun '20

commit 45ac51b0e3d00b456604123885a7b6f1ff6af646 Author: null pointer exception <57326449+deathgrippin(a)users.noreply.github.com> Date: Fri Jun 5 19:06:53 2020 +0000 Clean up a few phrases - Change language from "onion service version X" to "vX onion service" to fit in with other pages - Reword a few phrases to make them less awkward to read - Add missing spaces and colons --- content/onion-services/advanced/client-auth/contents.lr | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/content/onion-services/advanced/client-auth/contents.lr b/content/onion-services/advanced/client-auth/contents.lr index 18be426..24cb573 100644 --- a/content/onion-services/advanced/client-auth/contents.lr +++ b/content/onion-services/advanced/client-auth/contents.lr @@ -18,13 +18,13 @@ body: Client authorization is a method to make an onion service private and authenticated. It requires Tor clients to provide an authentication credential in order to connect to the onion service. -In Onion services version 3, this method works with a pair of keys (a public and a private). +For v3 onion services, this method works with a pair of keys (a public and a private). The service side is configured with a public key and the client can only access it with a private key. **Note:** Once you have configured client authorization, anyone with the address will not be able to access it from this point on. If no authorization is configured, the service will be accessible to anyone with the onion address. -## Configuring Onion service version 3 +## Configuring v3 Onion Services ### Service side @@ -59,16 +59,16 @@ $ openssl pkey -in /tmp/k1.prv.pem -pubout | grep -v " PUBLIC KEY" | base64pem - $ cat /tmp/k1.pub.key -**Step 4.** Create an authorized client file +**Step 4.** Create an authorized client file: Format the client authentication and create a new file in `<HiddenServiceDir>/authorized_clients/` directory. Each file in that directory should be suffixed with ".auth" (i.e. "alice.auth"; the file name is irrelevant) and its content format must be: <auth-type>:<key-type>:<base32-encoded-public-key> -The supported `<auth-type>` are: "descriptor". +The supported values for `<auth-type>` are: "descriptor". -The supported `<key-type>` are:"x25519". +The supported values for `<key-type>` are: "x25519". The `<base32-encoded-public-key>` is the base32 representation of the raw key bytes only (32 bytes for x25519). @@ -78,7 +78,7 @@ For example, the file `/var/lib/tor/hidden_service/authorized_clients/alice.auth If you are planning to have more authenticated clients, each file must contain one line only. Any malformed file will be ignored. -**Step 5.** Restart the tor service +**Step 5.** Restart the tor service: $ sudo systemctl reload tor @@ -109,7 +109,7 @@ If you are generating a private key for an onion site, the user does not necessa For more information about client authentication, please see [Tor manual](https://2019.www.torproject.org/docs/tor-onion-service.html.en#Clie…. -## Configuring Onion service version 2 +## Configuring v2 Onion Services To set up Cookie Authentication for **v2** services, see the entries for the [HidServAuth](https://2019.www.torproject.org/docs/tor-manual.html.en#HidSer… and [HiddenServiceAuthorizeClient](https://2019.www.torproject.org/docs/tor-manu… options in the tor manual. First add the following line to the [torrc](https://2019.www.torproject.org/docs/faq.html.en#torrc) file of your onion service: @@ -122,4 +122,4 @@ To access it with a tor client, add following line to torrc and restart tor: HidServAuth [onion-address] [auth-cookie] [service-name] -You can connect now to the onion service address. +You can now connect to the onion service address.

1 0

[tpo/master] Update Isa's photo
by gus＠torproject.org 09 Jun '20

09 Jun '20

commit ffd349f34c9a0d7c07a2128d6994ec5ca1b1539e Author: gus <gus(a)torproject.org> Date: Mon Jun 8 18:21:01 2020 -0400 Update Isa's photo --- assets/static/images/people/isabela.png | Bin 46938 -> 834334 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/assets/static/images/people/isabela.png b/assets/static/images/people/isabela.png index 924f6b41..732cdb61 100644 Binary files a/assets/static/images/people/isabela.png and b/assets/static/images/people/isabela.png differ

1 0

[tor-browser-build/master] Add #27903 to alpha Changelog, too
by gk＠torproject.org 08 Jun '20

08 Jun '20

commit b76fb9960da268cc6ad676241ea0d25706936175 Author: Georg Koppen <gk(a)torproject.org> Date: Mon Jun 8 17:35:56 2020 +0000 Add #27903 to alpha Changelog, too --- projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt | 2 ++ 1 file changed, 2 insertions(+) diff --git a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt index aa55f4f..c045d53 100644 --- a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt +++ b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt @@ -296,6 +296,8 @@ Tor Browser 9.5a5 -- February 12 2020 * Bug 32870: Update version of pion-webrtc * Bug 32767: Remove Disconnect search * Bug 30237: Add v3 onion services client authentication prompt + * Linux + * Bug 27903: Tor Browser 8 does not respect gtk3 settings * Android * Bug 30767: Custom obfs4 bridge does not work on Tor Browser for Android * Build System

1 0

[tpo/master] Add missing comma in versions list
by sysrqb＠torproject.org 08 Jun '20

08 Jun '20

commit b063dde5138f26faa1896f3b7f19d20329b8e10b Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Mon Jun 8 16:12:48 2020 +0000 Add missing comma in versions list --- content/projects/torbrowser/RecommendedTBBVersions/contents.lr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/projects/torbrowser/RecommendedTBBVersions/contents.lr b/content/projects/torbrowser/RecommendedTBBVersions/contents.lr index 99bfd39a..36ba2b9d 100644 --- a/content/projects/torbrowser/RecommendedTBBVersions/contents.lr +++ b/content/projects/torbrowser/RecommendedTBBVersions/contents.lr @@ -20,7 +20,7 @@ body: "9.5a13", "9.5a13-MacOS", "9.5a13-Linux", -"9.5a13-Windows" +"9.5a13-Windows", "10.0a1", "10.0a1-MacOS", "10.0a1-Linux",

1 0