June 2020 - tor-commits - lists.torproject.org

[tpo/master] Update content.lr
by antonela＠torproject.org 02 Jun '20

02 Jun '20

commit b22b5006656e6caf685727ce87b9b83539123774 Author: Antonela <hola(a)antonela.me> Date: Tue Jun 2 11:55:25 2020 -0300 Update content.lr --- content/releases/tor-browser-95/contents.lr | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/content/releases/tor-browser-95/contents.lr b/content/releases/tor-browser-95/contents.lr index 74f51ee0..dc1e1361 100644 --- a/content/releases/tor-browser-95/contents.lr +++ b/content/releases/tor-browser-95/contents.lr @@ -53,11 +53,20 @@ In this release, we have improved the way Tor Browser communicates with users ab **Onion Names** -Because of cryptographic protections, onion service URLs are not easy for humans to remember (ie, torproject.org vs. expyuzz4wqqyqhjn.onion). This makes it hard for users to discover or return to an onion site. We found that organically, developers have approached this problem in different ways, mostly with solutions tailored for their service. Given that there is no solution that works perfectly for all our user groups, we also approached this problem from a broad angle. For this release, we partnered with the [Freedom of the Press Foundation](https://freedom.press/) and [HTTPS Everywhere](https://www.eff.org/https-everywhere) to develop the first proof-of-concept for human-memorable names for onion services addresses. +Because of cryptographic protections, onion service URLs are not easy for humans to remember (ie, https://torproject.org vs. http://expyuzz4wqqyqhjn.onion/) This makes it hard for users to discover or return to an onion site. We found that organically, developers have approached this problem in different ways, mostly with solutions tailored for their service. Given that there is no solution that works perfectly for all our user groups, we also approached this problem from a broad angle. For this release, we partnered with Freedom of the Press Foundation (FPF) and the Electronic Frontier Foundation's HTTPS Everywhere to develop the first proof-of-concept human-memorable names for SecureDrop onion services addresses: + + The Intercept: + theintercept.securedrop.tor.onion + http://xpxduj55x2j27l2qytu2tcetykyfxbjbafin3x4i3ywddzphkbrd3jyd.onion + Lucy Parsons Labs: + lucyparsonslabs.securedrop.tor.onion + http://qn4qfeeslglmwxgb.onion + +Freedom of the Press Foundation has reached out to a small number of additional media organizations for participation, and Tor and FPF will jointly consider next steps based on feedback on this initial proof-of-concept. <img class="w-100" src="/static/images/tb95/onion-names(a)2x.png" alt="Tor Browser 9.5 Onion Names"/> - + **Give Feedback** If you find a bug or have a suggestion for how we could improve this release, please let us know. Thanks to all of the teams across Tor, and the many volunteers, who contributed to this release.

1 0

[translation/tor-launcher-network-settings] https://gitweb.torproject.org/translation.git/commit/?h=tor-launcher-network-settings
by translation＠torproject.org 02 Jun '20

02 Jun '20

commit cb137dd0fcf0f1979fef7c6162c60ea2e630cb69 Author: Translation commit bot <translation(a)torproject.org> Date: Tue Jun 2 16:53:12 2020 +0000 https://gitweb.torproject.org/translation.git/commit/?h=tor-launcher-networ… --- mr/network-settings.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mr/network-settings.dtd b/mr/network-settings.dtd index bab6388bae..03f09a6a05 100644 --- a/mr/network-settings.dtd +++ b/mr/network-settings.dtd @@ -32,7 +32,7 @@ <!ENTITY torsettings.useProxy.address.placeholder "IP address or hostname"> <!ENTITY torsettings.useProxy.port "पोर्ट"> <!ENTITY torsettings.useProxy.username "Username"> -<!ENTITY torsettings.useProxy.password "Password"> +<!ENTITY torsettings.useProxy.password "पासवर्ड "> <!ENTITY torsettings.useProxy.type.socks4 "SOCKS 4"> <!ENTITY torsettings.useProxy.type.socks5 "SOCKS 5"> <!ENTITY torsettings.useProxy.type.http "HTTP / HTTPS">

1 0

[translation/torcheck] https://gitweb.torproject.org/translation.git/commit/?h=torcheck
by translation＠torproject.org 02 Jun '20

02 Jun '20

commit c6fc10f3db0a89045a09c30a28870dae02e51ad4 Author: Translation commit bot <translation(a)torproject.org> Date: Tue Jun 2 16:52:44 2020 +0000 https://gitweb.torproject.org/translation.git/commit/?h=torcheck --- mr/torcheck.po | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/mr/torcheck.po b/mr/torcheck.po index fedbc6c00f..b199298883 100644 --- a/mr/torcheck.po +++ b/mr/torcheck.po @@ -7,8 +7,8 @@ msgid "" msgstr "" "Project-Id-Version: Tor Project\n" "POT-Creation-Date: 2012-02-16 20:28+PDT\n" -"PO-Revision-Date: 2019-04-09 01:51+0000\n" -"Last-Translator: carolyn <carolyn(a)anhalt.org>\n" +"PO-Revision-Date: 2020-06-02 16:26+0000\n" +"Last-Translator: vinay bichave <vinaybichave4(a)gmail.com>\n" "Language-Team: Marathi (http://www.transifex.com/otf/torproject/language/mr/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" @@ -65,7 +65,7 @@ msgid "Learn More »" msgstr "" msgid "Go" -msgstr "" +msgstr "जा " msgid "Donate to Support Tor" msgstr ""

1 0

[translation/tails-misc_release] https://gitweb.torproject.org/translation.git/commit/?h=tails-misc_release
by translation＠torproject.org 02 Jun '20

02 Jun '20

commit 1f5750c0567511fb82f7a5fcaa7da4993daf9454 Author: Translation commit bot <translation(a)torproject.org> Date: Tue Jun 2 16:48:56 2020 +0000 https://gitweb.torproject.org/translation.git/commit/?h=tails-misc_release --- mr.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mr.po b/mr.po index 9f402c2883..0d7c04754d 100644 --- a/mr.po +++ b/mr.po @@ -10,7 +10,7 @@ msgstr "" "Project-Id-Version: Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2020-03-21 09:59+0100\n" -"PO-Revision-Date: 2020-05-30 09:37+0000\n" +"PO-Revision-Date: 2020-06-02 16:39+0000\n" "Last-Translator: vinay bichave <vinaybichave4(a)gmail.com>\n" "Language-Team: Marathi (http://www.transifex.com/otf/torproject/language/mr/)\n" "MIME-Version: 1.0\n"

1 0

[translation/tails-misc] https://gitweb.torproject.org/translation.git/commit/?h=tails-misc
by translation＠torproject.org 02 Jun '20

02 Jun '20

commit 00171fe8830eb229cd72601b71fa5ad0167a2923 Author: Translation commit bot <translation(a)torproject.org> Date: Tue Jun 2 16:47:17 2020 +0000 https://gitweb.torproject.org/translation.git/commit/?h=tails-misc --- mr.po | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/mr.po b/mr.po index e5924d37dd..64311d6e14 100644 --- a/mr.po +++ b/mr.po @@ -10,7 +10,7 @@ msgstr "" "Project-Id-Version: Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2020-03-21 09:59+0100\n" -"PO-Revision-Date: 2020-05-30 09:37+0000\n" +"PO-Revision-Date: 2020-06-02 16:39+0000\n" "Last-Translator: vinay bichave <vinaybichave4(a)gmail.com>\n" "Language-Team: Marathi (http://www.transifex.com/otf/torproject/language/mr/)\n" "MIME-Version: 1.0\n" @@ -1098,7 +1098,7 @@ msgstr "" #: config/chroot_local-includes/usr/local/bin/tails-screen-locker:149 msgid "Password" -msgstr "" +msgstr "पासवर्ड " #: config/chroot_local-includes/usr/local/bin/tails-screen-locker:150 #: ../config/chroot_local-includes/usr/share/tails/greeter/additional_settings.ui.in:93

1 0

[community/master] Update Onion-Locatio nginx example and torrc with unix socket
by gus＠torproject.org 02 Jun '20

02 Jun '20

commit 785f8968011f2b1f8746324f98eba4b77778a2f4 Author: gus <gus(a)torproject.org> Date: Tue Jun 2 12:35:52 2020 -0400 Update Onion-Locatio nginx example and torrc with unix socket --- .../advanced/onion-location/contents.lr | 32 +++++++++++++++++----- 1 file changed, 25 insertions(+), 7 deletions(-) diff --git a/content/onion-services/advanced/onion-location/contents.lr b/content/onion-services/advanced/onion-location/contents.lr index 3c373a9..74664ab 100644 --- a/content/onion-services/advanced/onion-location/contents.lr +++ b/content/onion-services/advanced/onion-location/contents.lr @@ -82,9 +82,17 @@ Or open the website in Tor Browser and a purple pill will appear in the address ### Nginx -To configure Onion-Location header, you will need to edit nginx website configuration file. +To configure an Onion-Location header, the service operator should first configure an Onion service. -**Step 1.** Edit website configuration file +**Step 1.** Create an Onion service by setting the following in `torrc`: + +``` +HiddenServiceDir /var/lib/tor/hs-my-website/ +HiddenServiceVersion 3 +HiddenServicePort 80 unix:/var/run/tor-hs-my-website.sock +``` + +**Step 2.** Edit website configuration file In `/etc/nginx/conf.d/<your-website>.conf` add the Onion-Location header and the onion service address. For example: @@ -113,7 +121,7 @@ server { listen 443 ssl http2; listen [::]:443 ssl http2; - server_name <your-website.tld> <your-onion-address.onion>; + server_name <your-website.tld>; # managed by Certbot - https://certbot.eff.org/ ssl_certificate /etc/letsencrypt/live/<hostname>/fullchain.pem; @@ -125,7 +133,6 @@ server { add_header Onion-Location http://<your-onion-address>.onion$request_uri; # managed by Certbot - include /etc/letsencrypt/options-ssl-nginx.conf; ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; @@ -138,9 +145,20 @@ server { try_files $uri $uri/ =404; } } + +server { + listen unix:/var/run/tor-hs-my-website.sock; + + server_name <your-onion-address>.onion; + + access_log /var/log/nginx/hs-my-website.log; + + index index.html; + root /path/to/htdocs; +} ``` -**Step 2.** Test website configuration +**Step 3.** Test website configuration $ sudo nginx -t @@ -151,13 +169,13 @@ nginx: the configuration file /etc/nginx/nginx.conf syntax is ok nginx: configuration file /etc/nginx/nginx.conf test is successful ``` -**Step 3.** Restart nginx +**Step 4.** Restart nginx $ sudo nginx -s reload If you get an error message, something has gone wrong and you cannot continue until you've figured out why this didn't work. -**Step 4.** Testing your Onion-Location +**Step 5.** Testing your Onion-Location To test if the Onion-Location is working, fetch the web site HTTP headers, for example:

1 0

[tpo/master] Add new Tor Browser locales (lt, ms, th)
by sysrqb＠torproject.org 02 Jun '20

02 Jun '20

commit bf31abee3da122ccb441a08cc10dc0fa73a2fd0b Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Tue Jun 2 16:04:03 2020 +0000 Add new Tor Browser locales (lt, ms, th) --- databags/download-alternatives.ini | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/databags/download-alternatives.ini b/databags/download-alternatives.ini index 88847045..74ce2368 100644 --- a/databags/download-alternatives.ini +++ b/databags/download-alternatives.ini @@ -78,10 +78,18 @@ url = /ka/ url = /ko/ language = 한국어 (ko) +[lt] +url = /lt/ +language = lietuvių kalba (lt) + [mk] url = /mk/ language = македонски (mk) +[ms] +url = /ms/ +language = بهاس ملايو (ms) + [nb-NO] url = /nb-NO/ language = Norsk Bokmål (nb-NO) @@ -110,6 +118,10 @@ url = /ru/ url = /sv-SE/ language = Svenska (sv-SE) +[th] +url = /th/ +language = ภาษาไทย (th) + [tr] url = /tr/ language = Türkçe (tr)

1 0

[tor/master] remove a period from a doxygen heading
by nickm＠torproject.org 02 Jun '20

02 Jun '20

commit b4ccafd175465e811d2a70627465644760cc3fa4 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Jun 2 11:47:20 2020 -0400 remove a period from a doxygen heading The other headings don't have periods. --- src/lib/crypt_ops/certs.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/src/lib/crypt_ops/certs.md b/src/lib/crypt_ops/certs.md index 2768548b2..f3bd8c2c9 100644 --- a/src/lib/crypt_ops/certs.md +++ b/src/lib/crypt_ops/certs.md @@ -1,5 +1,5 @@ -@page certificates Certificates in Tor. +@page certificates Certificates in Tor We have, alas, several certificate types in Tor. @@ -27,4 +27,3 @@ their associated keys. documents that include keys and which are signed by keys. You can consider these documents to be an additional kind of certificate if you want.) -

1 0

[manual/master] Small grammar error on know issues
by gus＠torproject.org 02 Jun '20

02 Jun '20

commit 3cfeb56a0ce0df62e31e4c18ab15a3dea9160b56 Author: gus <gus(a)torproject.org> Date: Tue Jun 2 11:42:45 2020 -0400 Small grammar error on know issues --- content/known-issues/contents.lr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/known-issues/contents.lr b/content/known-issues/contents.lr index 1be38bf..7e8000b 100644 --- a/content/known-issues/contents.lr +++ b/content/known-issues/contents.lr @@ -30,4 +30,4 @@ body: ./start-tor-browser.desktop -* BitTorrent in specific is [not anonymous over Tor](https://blog.torproject.org/bittorrent-over-tor-isnt-good-idea). +* BitTorrent [is not anonymous over Tor](https://blog.torproject.org/bittorrent-over-tor-isnt-good-idea).

1 0

[manual/master] Adding @PROTechThor section about onion service authentication
by gus＠torproject.org 02 Jun '20

02 Jun '20

commit a46d2ba32dc6c9a8cb1d50c2a8a16317de977ba7 Author: gus <gus(a)torproject.org> Date: Tue May 26 14:12:44 2020 -0400 Adding @PROTechThor section about onion service authentication --- content/onion-services/contents.lr | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/content/onion-services/contents.lr b/content/onion-services/contents.lr index be2ab9c..cfb99a8 100644 --- a/content/onion-services/contents.lr +++ b/content/onion-services/contents.lr @@ -30,6 +30,16 @@ Click on hamburger menu (≡), go to Preferences (or Options in Windows), click Or if you're already running Tor Browser, you can click directly here: [Privacy & Security](about:preferences#privacy). When accessing a website that uses an onion service, Tor Browser will show at the URL bar an icon of a little black onion displaying the state of your connection: secure and using an onion service. And if you're accessing a website using https and onion service, it will show an icon of a black onion and the organization's name. You can learn more about the onionsite you are visiting by looking at the Circuit Display. +## Onion service authentication + +An authenticated onion service is a service like an onionsite that requires the client to provide an authentication token before accessing the service. +As a Tor user, you may authenticate yourself directly in the Tor Browser. +In order to access this service, you will need access credentials from the onion service operator. +When accessing an authenticated onion service, Tor Browser will show at the URL bar an icon of a little gray key, accompanied by a tooltip. +Enter your valid private key into the input field. + +<img class="col-md-6" src="../../static/images/client-auth-prompt.png" alt="Client Authorization"> + ### TROUBLESHOOTING If you cannot reach the onion service you require, make sure that you have entered the onion address correctly: even a small mistake will stop Tor Browser from being able to reach the site.

1 0