August 2020 - tor-commits - lists.torproject.org

[translation/support-portal] https://gitweb.torproject.org/translation.git/commit/?h=support-portal
by translation＠torproject.org 25 Aug '20

25 Aug '20

commit 049850466d2d73a59080d488984bc903b6988e8f Author: Translation commit bot <translation(a)torproject.org> Date: Tue Aug 25 18:17:55 2020 +0000 https://gitweb.torproject.org/translation.git/commit/?h=support-portal --- contents+es-AR.po | 46 ++++++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 44 insertions(+), 2 deletions(-) diff --git a/contents+es-AR.po b/contents+es-AR.po index b91c0df15b..1916fe4add 100644 --- a/contents+es-AR.po +++ b/contents+es-AR.po @@ -4527,6 +4527,9 @@ msgid "" "You should see an option to copy the log to your clipboard, which you will " "be able to paste it into a text editor or an email client." msgstr "" +"Debieras ver una opción para copiar el registro a tu portapapeles, al cual " +"serás capaz de pegar dentro de un editor de texto o un cliente de correo " +"electrónico." #: https//support.torproject.org/tbb/tbb-22/ #: (content/tbb/tbb-22/contents+en.lrquestion.title) @@ -4551,6 +4554,11 @@ msgid "" "servers in various parts of the world, and some bottlenecks and network " "latency will always be present." msgstr "" +"La red Tor tiene por encima de un millón de usuarios diarios, y sólo un poco" +" más de 6000 repetidores para rutear todo su tráfico, y la carga en cada " +"servidor puede a veces causar latencia. Y, por diseño, tu tráfico está " +"saltando a través de servidores de voluntarios en varias partes del mundo, y" +" algunos cuellos de botella y latencias de red siempre estarán presentes." #: https//support.torproject.org/tbb/tbb-22/ #: (content/tbb/tbb-22/contents+en.lrquestion.description) @@ -4571,6 +4579,11 @@ msgid "" "Research Topics: 2018 edition](https://blog.torproject.org/tors-open-" "research-topics-2018-edition) about Network Performance." msgstr "" +"Por una respuesta con mucha más profundidad, mirá el [Posteo de blog de " +"Roger sobre el tópico](https://blog.torproject.org/blog/why-tor-is-slow) y " +"los [Tópicos de Investigación Abierta en Tor: edición " +"2018](https://blog.torproject.org/tors-open-research-topics-2018-edition) " +"acerca de Desempeño de Red." #: https//support.torproject.org/tbb/tbb-22/ #: (content/tbb/tbb-22/contents+en.lrquestion.description) @@ -4597,6 +4610,8 @@ msgid "" "[DuckDuckGo](https://duckduckgo.com/) is the default search engine in Tor " "Browser." msgstr "" +"[DuckDuckGo](https://duckduckgo.com/) es el motor de búsqueda por defecto en" +" el Navegador Tor." #: https//support.torproject.org/tbb/tbb-23/ #: (content/tbb/tbb-23/contents+en.lrquestion.description) @@ -4605,6 +4620,9 @@ msgid "" "searches. Learn more about [DuckDuckGo privacy " "policy](https://duckduckgo.com/privacy)." msgstr "" +"DuckDuckGo no rastrea a sus usuarios ni almacena ningún dato acerca de " +"búsquedas de usuario. Aprendé más acerca de la [política de privacidad de " +"DuckDuckGo](https://duckduckgo.com/privacy)." #: https//support.torproject.org/tbb/tbb-24/ #: (content/tbb/tbb-24/contents+en.lrquestion.title) @@ -4615,6 +4633,7 @@ msgstr "Estoy teniendo un problema con DuckDuckGo." #: (content/tbb/tbb-24/contents+en.lrquestion.description) msgid "Please see the [DuckDuckGo support portal](https://duck.co/help)." msgstr "" +"Por favor, mirá el [portal de soporte de DuckDuckGo](https://duck.co/help)." #: https//support.torproject.org/tbb/tbb-24/ #: (content/tbb/tbb-24/contents+en.lrquestion.description) @@ -4626,6 +4645,8 @@ msgid "" "If you believe this is a Tor Browser issue, please report it on our [bug " "tracker](https://trac.torproject.org/)." msgstr "" +"Si creés que ésta es una cuestión del Navegador Tor, por favor informala en " +"nuestro [rastreador de errores](https://trac.torproject.org/)." #: https//support.torproject.org/tbb/tbb-25/ #: (content/tbb/tbb-25/contents+en.lrquestion.title) @@ -4635,7 +4656,7 @@ msgstr "Estoy teniendo un problema con NoScript." #: https//support.torproject.org/tbb/tbb-25/ #: (content/tbb/tbb-25/contents+en.lrquestion.description) msgid "Please see the [NoScript FAQ](https://noscript.net/faq)." -msgstr "" +msgstr "Por favor mirá las [PMF de NoScript](https://noscript.net/faq)." #: https//support.torproject.org/tbb/tbb-26/ #: (content/tbb/tbb-26/contents+en.lrquestion.title) @@ -4648,6 +4669,8 @@ msgid "" "Please see the [HTTPS Everywhere FAQ](https://www.eff.org/https-" "everywhere/faq)." msgstr "" +"Por favor mirá las [PMF de HTTPS Everywhere](https://www.eff.org/https-" +"everywhere/faq)." #: https//support.torproject.org/tbb/tbb-27/ #: (content/tbb/tbb-27/contents+en.lrquestion.title) @@ -4701,6 +4724,8 @@ msgid "" "Both options are located in the [hamburger menu (\"≡\")](../../glossary" "/hamburger-menu)." msgstr "" +"Anbas opciones están ubicadas en el [menú de hamburguesa " +"(\"≡\")](../../glossary/hamburger-menu)." #: https//support.torproject.org/tbb/tbb-29/ #: (content/tbb/tbb-29/contents+en.lrquestion.description) @@ -4709,6 +4734,10 @@ msgid "" "in the URL bar, and the New Identity option by clicking the small sparky " "broom icon at the top-right of the screen" msgstr "" +"También podés acceder a la opción Nuevo Circuito dentro del menú de " +"información del sitio en la barra URL, y a la opción Nueva Identidad " +"cliqueando el icono de la escobita chisporroteando arriba a la derecha de la" +" pantalla" #: https//support.torproject.org/tbb/tbb-29/ #: (content/tbb/tbb-29/contents+en.lrquestion.description) @@ -4748,7 +4777,7 @@ msgstr "" #: https//support.torproject.org/tbb/tbb-29/ #: (content/tbb/tbb-29/contents+en.lrquestion.description) msgid "![Tor Browser Menu](/static/images/menu-new-identity.png)" -msgstr "" +msgstr "![Menú del Navegador Tor](/static/images/menu-new-identity.png)" #: https//support.torproject.org/tbb/tbb-29/ #: (content/tbb/tbb-29/contents+en.lrquestion.description) @@ -4795,6 +4824,7 @@ msgstr "" #: (content/tbb/tbb-29/contents+en.lrquestion.description) msgid "![New Circuit for this Site](/static/images/new-circuit-display.png)" msgstr "" +"![Nuevo Circuito para este Sitio](/static/images/new-circuit-display.png)" #: https//support.torproject.org/tbb/tbb-3/ #: (content/tbb/tbb-3/contents+en.lrquestion.title) @@ -4888,6 +4918,10 @@ msgid "" "[Linux](https://www.torproject.org/download/) and " "[macOS](https://www.torproject.org/download/)." msgstr "" +"El Navegador Tor está disponible actualmente en " +"[Windows](https://www.torproject.org/download/), " +"[Linux](https://www.torproject.org/download/) y " +"[macOS](https://www.torproject.org/download/)." #: https//support.torproject.org/tbb/tbb-31/ #: (content/tbb/tbb-31/contents+en.lrquestion.description) @@ -4898,6 +4932,12 @@ msgid "" "app](https://play.google.com/store/apps/details?id=org.torproject.android) " "to route other apps on your Android device over the Tor network." msgstr "" +"Hay una versión del Navegador Tor para " +"[Android](https://www.torproject.org/download/#android) y [The Guardian " +"Project](https://guardianproject.info) también provee la [aplicación " +"Orbot](https://play.google.com/store/apps/details?id=org.torproject.android)" +" para rutear a otras aplicaciones en tu dispositivo Android sobre la red " +"Tor." #: https//support.torproject.org/tbb/tbb-31/ #: (content/tbb/tbb-31/contents+en.lrquestion.description) @@ -4905,6 +4945,8 @@ msgid "" "There is no official version of Tor for iOS yet, though we recommend [Onion " "Browser](https://onionbrowser.com)." msgstr "" +"No hay una versión oficial de Tor para iOS aún, aunque recomendamos el " +"[navegador Onion](https://onionbrowser.com)." #: https//support.torproject.org/tbb/tbb-32/ #: (content/tbb/tbb-32/contents+en.lrquestion.title)

1 0

[translation/support-portal] https://gitweb.torproject.org/translation.git/commit/?h=support-portal
by translation＠torproject.org 25 Aug '20

25 Aug '20

commit bfde779e977d14c1324e411eb846471f3ac29606 Author: Translation commit bot <translation(a)torproject.org> Date: Tue Aug 25 17:48:06 2020 +0000 https://gitweb.torproject.org/translation.git/commit/?h=support-portal --- contents+es-AR.po | 27 +++++++++++++++++++++++---- 1 file changed, 23 insertions(+), 4 deletions(-) diff --git a/contents+es-AR.po b/contents+es-AR.po index 55d2fd6b48..b91c0df15b 100644 --- a/contents+es-AR.po +++ b/contents+es-AR.po @@ -2037,7 +2037,7 @@ msgid "" msgstr "" "Si no ves esta opción y tenés al [Navegador Tor](../tor-browser) abierto, " "podés navegar hasta el [menú hamburguesa (\"≡\")](../glossary/hamburger-" -"menu), cliquear luego en \"Preferencias\", and finalmente en \"Tor\" en la " +"menu), cliquear luego en \"Preferencias\", y finalmente en \"Tor\" en la " "barra lateral." #: https//support.torproject.org/glossary/tor-log/ @@ -4319,6 +4319,10 @@ msgid "" "[article](https://blog.torproject.org/browser-fingerprinting-introduction-" "and-challenges-ahead) on The Tor Blog all about it." msgstr "" +"¿Querés aprender más acerca de la determinación de la huella digital de un " +"navegador? Aquí hay un [artículo](https://blog.torproject.org/browser-" +"fingerprinting-introduction-and-challenges-ahead) en el blog de Tor con todo" +" acerca de eso." #: https//support.torproject.org/tbb/tbb-15/ #: (content/tbb/tbb-15/contents+en.lrquestion.title) @@ -4342,9 +4346,9 @@ msgid "" "desktop) versions of websites." msgstr "" "Podés correr el [Navegador Tor para " -"Android](https://www.torproject.org/es_AR/download/#android) en el SO " -"Chrome. Tené en cuenta que al usar Tor Mobile en el SO Chrome, vas a ver las" -" versiones móviles (no las de escritorio) de los sitios web." +"Android](https://www.torproject.org/es_AR/download/#android) en Chrome OS. " +"Tené en cuenta que al usar Tor Mobile en Chrome OS, vas a ver las versiones " +"móviles (no las de escritorio) de los sitios web." #: https//support.torproject.org/tbb/tbb-15/ #: (content/tbb/tbb-15/contents+en.lrquestion.description) @@ -4352,6 +4356,9 @@ msgid "" "However, because we have not audited the app in Chrome OS, we don't know if " "all the privacy features of Tor Browser for Android will work well." msgstr "" +"Sin embargo, porque no hemos auditado la aplicación en Chrome OS, no sabemos" +" si todas las características de privacidad del Navegador Tor para Android " +"funcionarán bien." #: https//support.torproject.org/tbb/tbb-16/ #: (content/tbb/tbb-16/contents+en.lrquestion.title) @@ -4373,6 +4380,9 @@ msgid "" "selection to Tor; overriding the entry/exit nodes can compromise your " "anonymity." msgstr "" +"Obtenés la mejor seguridad que Tor puede proveer cuando dejás la selección " +"de la ruta a Tor; forzando los nodos de entrada/salida puede comprometer tu " +"anonimato." #: https//support.torproject.org/tbb/tbb-16/ #: (content/tbb/tbb-16/contents+en.lrquestion.description) @@ -4440,6 +4450,8 @@ msgid "" "There is something called the [TorBSD project](https://www.torbsd.org/), but" " their Tor Browser is not officially supported." msgstr "" +"Hay algo llamado el [proyecto TorBSD](https://www.torbsd.org/), pero su " +"Navegador Tor no está soportado oficialmente." #: https//support.torproject.org/tbb/tbb-2/ #: (content/tbb/tbb-2/contents+en.lrquestion.title) @@ -4488,6 +4500,10 @@ msgid "" "parameters) and [paper](https://www-" "users.cs.umn.edu/~hoppernj/single_guard.pdf) on entry guards." msgstr "" +"Para más información sobre cómo trabajan los repetidores guardianes, mirá " +"esta [entrada de blog](https://blog.torproject.org/improving-tors-anonymity-" +"changing-guard-parameters) y este [artículo](https://www-" +"users.cs.umn.edu/~hoppernj/single_guard.pdf) sobre guardianes de entrada." #: https//support.torproject.org/tbb/tbb-21/ #: (content/tbb/tbb-21/contents+en.lrquestion.title) @@ -4501,6 +4517,9 @@ msgid "" "(\"≡\")](../../glossary/hamburger-menu), then click on \"Preferences\", and " "finally on \"Tor\" in the side bar." msgstr "" +"Cuando tenés al Navegador Tor abierto, podés navegar hasta el [menú " +"hamburguesa (\"≡\")](../../glossary/hamburger-menu), cliquear luego en " +"\"Preferencias\", y finalmente en \"Tor\" en la barra lateral." #: https//support.torproject.org/tbb/tbb-21/ #: (content/tbb/tbb-21/contents+en.lrquestion.description)

1 0

[tor/master] Validate address more carefully when checking self-reachability
by asn＠torproject.org 25 Aug '20

25 Aug '20

commit 75772ea096e030ecc79f67b1444cac42aaed7449 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Aug 6 11:21:00 2020 -0400 Validate address more carefully when checking self-reachability Previously, we would treat *any* incoming circuit on a non-local channel as meaning that our ORPort was reachable. With this patch, we make sure that the address that the peer _says_ we have is the same as the one we're trying to advertise right now. Closes 20165. Bugfix on 4f5192b2803c706 in 0.1.0.1-rc, when reachability self-tests were first introduced. --- changes/bug20165 | 6 ++++++ src/core/or/channel.c | 2 ++ src/core/or/channel.h | 3 +++ src/core/or/channeltls.c | 7 +++++++ src/feature/relay/circuitbuild_relay.c | 24 +++++++++++++++++------- src/feature/relay/router.c | 25 +++++++++++++++++++++++++ src/feature/relay/router.h | 1 + 7 files changed, 61 insertions(+), 7 deletions(-) diff --git a/changes/bug20165 b/changes/bug20165 new file mode 100644 index 0000000000..bbe9f00032 --- /dev/null +++ b/changes/bug20165 @@ -0,0 +1,6 @@ + o Minor bugfixes (self-testing): + - When receiving an incoming circuit, only accept it as evidence that we + are reachable if the declared address of its channel is the same + address we think that we have. Otherwise, it could be evidence that + we're reachable on some other address. Fixes bug 20165; bugfix on + 0.1.0.1-rc. diff --git a/src/core/or/channel.c b/src/core/or/channel.c index 5a42d452f2..0f74950b4f 100644 --- a/src/core/or/channel.c +++ b/src/core/or/channel.c @@ -872,6 +872,8 @@ channel_init(channel_t *chan) /* Channel is not in the scheduler heap. */ chan->sched_heap_idx = -1; + + tor_addr_make_unspec(&chan->addr_according_to_peer); } /** diff --git a/src/core/or/channel.h b/src/core/or/channel.h index d52ebdf619..fc0dd3aaac 100644 --- a/src/core/or/channel.h +++ b/src/core/or/channel.h @@ -236,6 +236,9 @@ struct channel_t { /** The handle to this channel (to free on canceled timers) */ struct channel_handle_t *timer_handle; + /** If not UNSPEC, the address that the peer says we have. */ + tor_addr_t addr_according_to_peer; + /** * These two fields specify the minimum and maximum negotiated timeout * values for inactivity (send or receive) before we decide to pad a diff --git a/src/core/or/channeltls.c b/src/core/or/channeltls.c index ae60038c34..a9012fd317 100644 --- a/src/core/or/channeltls.c +++ b/src/core/or/channeltls.c @@ -1868,6 +1868,13 @@ channel_tls_process_netinfo_cell(cell_t *cell, channel_tls_t *chan) } } + if (me) { + /* We have a descriptor, so we are a relay: record the address that the + * other side said we had. */ + tor_addr_copy(&TLS_CHAN_TO_BASE(chan)->addr_according_to_peer, + &my_apparent_addr); + } + n_other_addrs = netinfo_cell_get_n_my_addrs(netinfo_cell); for (uint8_t i = 0; i < n_other_addrs; i++) { /* Consider all the other addresses; if any matches, this connection is diff --git a/src/feature/relay/circuitbuild_relay.c b/src/feature/relay/circuitbuild_relay.c index ad20e143be..64f3c341ae 100644 --- a/src/feature/relay/circuitbuild_relay.c +++ b/src/feature/relay/circuitbuild_relay.c @@ -588,13 +588,23 @@ onionskin_answer(struct or_circuit_t *circ, if ((!channel_is_local(circ->p_chan) || get_options()->ExtendAllowPrivateAddresses) && !channel_is_outgoing(circ->p_chan)) { - /* record that we could process create cells from a non-local conn - * that we didn't initiate; presumably this means that create cells - * can reach us too. */ - tor_addr_t remote_addr; - if (channel_get_addr_if_possible(circ->p_chan, &remote_addr)) { - int family = tor_addr_family(&remote_addr); - router_orport_found_reachable(family); + /* Okay, it's a create cell from a non-local connection + * that we didn't initiate. Presumably this means that create cells + * can reach us too. But what address can they reach us on? */ + const tor_addr_t *my_supposed_addr = &circ->p_chan->addr_according_to_peer; + if (router_addr_is_my_published_addr(my_supposed_addr)) { + /* Great, this create cell came on connection where the peer says + * that the our address is an address we're actually advertising! + * That should mean that we're reachable. But before we finally + * declare ourselves reachable, make sure that the address listed + * by the peer is the same family as the peer is actually using. + */ + tor_addr_t remote_addr; + int family = tor_addr_family(my_supposed_addr); + if (channel_get_addr_if_possible(circ->p_chan, &remote_addr) && + tor_addr_family(&remote_addr) == family) { + router_orport_found_reachable(family); + } } } diff --git a/src/feature/relay/router.c b/src/feature/relay/router.c index 675b977ade..3fcf0d616b 100644 --- a/src/feature/relay/router.c +++ b/src/feature/relay/router.c @@ -1729,6 +1729,31 @@ router_is_me(const routerinfo_t *router) return router_digest_is_me(router->cache_info.identity_digest); } +/** + * Return true if we are a server, and if @a addr is an address we are + * currently publishing (or trying to publish) in our descriptor. + * Return false otherwise. + **/ +bool +router_addr_is_my_published_addr(const tor_addr_t *addr) +{ + IF_BUG_ONCE(!addr) + return false; + + const routerinfo_t *me = router_get_my_routerinfo(); + if (!me) + return false; + + switch (tor_addr_family(addr)) { + case AF_INET: + return tor_addr_eq(addr, &me->ipv4_addr); + case AF_INET6: + return tor_addr_eq(addr, &me->ipv6_addr); + default: + return false; + } +} + /** Return a routerinfo for this OR, rebuilding a fresh one if * necessary. Return NULL on error, or if called on an OP. */ MOCK_IMPL(const routerinfo_t *, diff --git a/src/feature/relay/router.h b/src/feature/relay/router.h index 89b4a479a4..f71ada8eb7 100644 --- a/src/feature/relay/router.h +++ b/src/feature/relay/router.h @@ -100,6 +100,7 @@ int router_digest_is_me(const char *digest); const uint8_t *router_get_my_id_digest(void); int router_extrainfo_digest_is_me(const char *digest); int router_is_me(const routerinfo_t *router); +bool router_addr_is_my_published_addr(const tor_addr_t *addr); int router_build_fresh_descriptor(routerinfo_t **r, extrainfo_t **e); int router_rebuild_descriptor(int force); char *router_dump_router_to_string(routerinfo_t *router,

1 0

[tor/master] Merge branch 'mr/113'
by asn＠torproject.org 25 Aug '20

25 Aug '20

commit d4f3cfe99a4c3ef3495a8f8848981f9b30cc8a34 Merge: cc4e42ee32 75772ea096 Author: George Kadianakis <desnacked(a)riseup.net> Date: Tue Aug 25 20:37:04 2020 +0300 Merge branch 'mr/113' changes/bug20165 | 6 ++++++ src/core/or/channel.c | 2 ++ src/core/or/channel.h | 3 +++ src/core/or/channeltls.c | 7 +++++++ src/feature/relay/circuitbuild_relay.c | 24 +++++++++++++++++------- src/feature/relay/router.c | 25 +++++++++++++++++++++++++ src/feature/relay/router.h | 1 + 7 files changed, 61 insertions(+), 7 deletions(-)

1 0

[translation/support-portal] https://gitweb.torproject.org/translation.git/commit/?h=support-portal
by translation＠torproject.org 25 Aug '20

25 Aug '20

commit 5caa582a1e0f4d33376c8129cfd7d871f05731e3 Author: Translation commit bot <translation(a)torproject.org> Date: Tue Aug 25 17:17:59 2020 +0000 https://gitweb.torproject.org/translation.git/commit/?h=support-portal --- contents+es-AR.po | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/contents+es-AR.po b/contents+es-AR.po index 20d3f22715..55d2fd6b48 100644 --- a/contents+es-AR.po +++ b/contents+es-AR.po @@ -4280,6 +4280,8 @@ msgid "" "There's also a good chance a new add-on will increase the attack surface of " "Tor Browser." msgstr "" +"También hay una buena chance de que una nueva adición increamentará la " +"superficie de ataque del Navegador Tor." #: https//support.torproject.org/tbb/tbb-14/ #: (content/tbb/tbb-14/contents+en.lrquestion.description) @@ -4287,11 +4289,15 @@ msgid "" "This may allow sensitive data to be leaked or allow an attacker to infect " "Tor Browser." msgstr "" +"Esto podría permitir que datos delicados sean filtrados, o a un atacante que" +" infectara al Navegador Tor." #: https//support.torproject.org/tbb/tbb-14/ #: (content/tbb/tbb-14/contents+en.lrquestion.description) msgid "The add-on itself could even be maliciously designed to spy on you." msgstr "" +"La adición en sí misma podría estar, incluso, diseñada maliciosamente para " +"espiarte." #: https//support.torproject.org/tbb/tbb-14/ #: (content/tbb/tbb-14/contents+en.lrquestion.description) @@ -4301,6 +4307,10 @@ msgid "" "[NoScript](https://noscript.net) — and adding anything else could " "deanonymize you." msgstr "" +"El navegador Tor ya tiene instalados dos complementos — [HTTPS " +"Everywhere](https://www.eff.org/https-everywhere) y " +"[NoScript](https://noscript.net) — y añadir cualquier cosa más puede dejar " +"tu anonimato sin efecto." #: https//support.torproject.org/tbb/tbb-14/ #: (content/tbb/tbb-14/contents+en.lrquestion.description)

1 0

[tpo/master] Add new Tor Browser version 9.5.4
by sysrqb＠torproject.org 25 Aug '20

25 Aug '20

commit a4246a529c285f5c91cfc0a38d85798871e52660 Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Tue Aug 25 17:05:22 2020 +0000 Add new Tor Browser version 9.5.4 --- content/projects/torbrowser/RecommendedTBBVersions/contents.lr | 4 ++++ databags/versions.ini | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/content/projects/torbrowser/RecommendedTBBVersions/contents.lr b/content/projects/torbrowser/RecommendedTBBVersions/contents.lr index c0cb7d8c..da51d7a0 100644 --- a/content/projects/torbrowser/RecommendedTBBVersions/contents.lr +++ b/content/projects/torbrowser/RecommendedTBBVersions/contents.lr @@ -17,6 +17,10 @@ body: "9.5.3-MacOS", "9.5.3-Linux", "9.5.3-Windows", +"9.5.4", +"9.5.4-MacOS", +"9.5.4-Linux", +"9.5.4-Windows", "10.0a1", "10.0a1-MacOS", "10.0a1-Linux", diff --git a/databags/versions.ini b/databags/versions.ini index e1e162fd..110594a5 100644 --- a/databags/versions.ini +++ b/databags/versions.ini @@ -1,5 +1,5 @@ [torbrowser-stable] -version = 9.5.3 +version = 9.5.4 win32 = 0.4.3.6 [torbrowser-android-stable]

1 0

[tor-browser-build/maint-9.5] Add repo for macOS Big Sur fix
by gk＠torproject.org 25 Aug '20

25 Aug '20

commit 0374ac5abf3927c23f06cc8f48198420df74e56e Author: Georg Koppen <gk(a)torproject.org> Date: Tue Aug 25 14:33:21 2020 +0000 Add repo for macOS Big Sur fix --- projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt index 922e875..6186d71 100644 --- a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt +++ b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt @@ -6,7 +6,7 @@ Tor Browser 9.5.4 -- August 25 2020 * Windows + OS X + Linux * Bug 40019: Onion-Location should not be processed on .onion webpages [tor-browser] * OS X - * Bug 40015: Tor Browser is broken on MacOS 11 Big Sur + * Bug 40015: Tor Browser is broken on MacOS 11 Big Sur [tor-browser] Tor Browser 9.5.3 -- July 28 2020 * All Platforms

1 0

[community/master] Changed keyweb.de conditions
by gus＠torproject.org 25 Aug '20

25 Aug '20

commit 50dc8ad10cd42bfd46e0fdc1dc36b7bcbad6fcdc Author: Tom Matt <beather(a)posteo.net> Date: Fri Aug 21 12:55:15 2020 +0000 Changed keyweb.de conditions --- content/relay-operations/community-resources/good-bad-isps/contents.lr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/relay-operations/community-resources/good-bad-isps/contents.lr b/content/relay-operations/community-resources/good-bad-isps/contents.lr index 61ff218..dfef1a1 100644 --- a/content/relay-operations/community-resources/good-bad-isps/contents.lr +++ b/content/relay-operations/community-resources/good-bad-isps/contents.lr @@ -88,7 +88,7 @@ For network diversity and stronger anonymity, you should avoid providers and cou | [Weesly](http://weesly.de) | - | Yes | Yes | Yes | Note that you should let them know about your intention when ordering a server or in advance. | 06/2013 | | [EUServ](http://euserv.de) | - | - | Yes | No | They have a bad support, but if you know how to maintain your server, this ISP is a good choice. | - | | [IPX-Server](https://www.ipx-server.de/) | - | Yes | Yes | - | - | - | -| [Keyweb](https://www.keyweb.de/) | - | - | Yes | Yes | - | - | +| [Keyweb](https://www.keyweb.de/) | - | - | No | No | "Unfortunately this is not possible with us." | 2020 | | [Afterburst](http://afterburst.com) | - | - | Yes | No | - | - | | [myLoc Managed IT](https://myloc.de) | AS31010, AS24961 | Yes | Yes | No | - | 2018-10-25 | | [linevast](https://www.linevast.de/) | - | Yes | Yes | Yes | Only allowed on dedicated servers | 13/11/2015 |

1 0

[tpo/master] Fix typos, move host to the top, fixed yt link
by gus＠torproject.org 25 Aug '20

25 Aug '20

commit 7fc37edf6937a18afe5cf814f0b1fbd39125e8ae Author: antonela <antonela(a)torproject.org> Date: Mon Aug 24 09:37:11 2020 -0300 Fix typos, move host to the top, fixed yt link --- templates/privchat.html | 49 +++++++++++++++++++++++++------------------------ 1 file changed, 25 insertions(+), 24 deletions(-) diff --git a/templates/privchat.html b/templates/privchat.html index 91e49632..d5de746e 100644 --- a/templates/privchat.html +++ b/templates/privchat.html @@ -25,7 +25,7 @@ <div class="container py-3 mt-5"> <p class="h2 text-primary" target="_blank">Chapter #2 - the Good, the Bad, and the Ugly of Censorship Circumvention <div> - <p><span class="text-primary nick" style="font-size:18px;"><mark>August 28th ∙ 10:00 AM Pacific Time ∙ 17:00 UTC ∙ 13:00 Eastern Time ∙ <a href="https://youtu.be/gSyDvG4Z308" title="Tor Project You Tube Channel" target="_blank"><i class="fab fa-youtube"></i> @torproject YouTube channel</a></mark></span></p> + <p><span class="text-primary nick" style="font-size:18px;"><mark>August 28th ∙ 10:00 AM Pacific Time ∙ 17:00 UTC ∙ 13:00 Eastern Time ∙ <a href="https://youtu.be/aOOChyMCZH4" title="Tor Project You Tube Channel" target="_blank"><i class="fab fa-youtube"></i> @torproject YouTube channel</a></mark></span></p> </div> <a class="btn btn-small bg-primary text-light my-4" href="https://youtu.be/aOOChyMCZH4" target="_blank"><i class="mr-2 pt-1 fas fa-thumbtack-png"></i> {{ _("Save the date") }} </a></p> <div> @@ -36,7 +36,29 @@ </div> <div class="container pt-5 justify-content-center"> - <h4>Participants</h4> + + <h4>Host</h4> + + <div class="row"> + <div class="container"> + <div class="card flex-row flex-wrap py-3"> + <div class="col-3"> + <img class="card-img-top" src="{{ '/static/images/privchat/cory.png' }}" alt=""> + </div> + <div class="col"> + <div class="card-block px-2"> + <div class="pb-4"> + <h4 class="display-4 text-primary">Cory Doctorow</h4> + <strong class="display-5 text-primary mb-4">Electronic Frontier Foundation, MIT</strong> + </div> + <p class="text-tpo"><a href="https://craphound.com" target="_blank" title="Cory Doctorow">Cory Doctorow</a> is a science fiction author, activist, and journalist. He is the author of RADICALIZED and WALKAWAY, science fiction for adults, a YA graphic novel called IN REAL LIFE, the nonfiction business book INFORMATION DOESN’T WANT TO BE FREE, and young adult novels like HOMELAND, PIRATE CINEMA and LITTLE BROTHER. His latest book is POESY THE MONSTER SLAYER, a picture book for young readers. His next book is ATTACK SURFACE, an adult sequel to LITTLE BROTHER. He maintains a daily blog at Pluralistic.net. He works for the Electronic Frontier Foundation, is a MIT Media Lab Research Affiliate, is a Visiting Professor of Computer Science at Open University, a Visiting Professor of Practice at the University of North Carolina’s School of Library and Information Science and co-founded the UK Open Rights Group. Born in Toronto, Canada, he now lives in Los Angeles.</p> + </div> + </div> + </div> + </div> + </div> + + <h4 class="mt-5">Participants</h4> <div class="row"> <div class="container"> @@ -103,27 +125,6 @@ </div> </div> - <h4>Host</h4> - - <div class="row"> - <div class="container"> - - <div class="card flex-row flex-wrap py-3"> - <div class="col-3"> - <img class="card-img-top" src="{{ '/static/images/privchat/cory.png' }}" alt=""> - </div> - <div class="col"> - <div class="card-block px-2"> - <div class="pb-4"> - <h4 class="display-4 text-primary">Cory Doctorow</h4> - <strong class="display-5 text-primary mb-4">Electronic Frontier Foundation, MIT</strong> - </div> - <p class="text-tpo"><a href="https://craphound.com" target="_blank" title="Cory Doctorow">Cory Doctorow</a> is a science fiction author, activist, and journalist. He is the author of RADICALIZED and WALKAWAY, science fiction for adults, a YA graphic novel called IN REAL LIFE, the nonfiction business book INFORMATION DOESN’T WANT TO BE FREE, and young adult novels like HOMELAND, PIRATE CINEMA and LITTLE BROTHER. His latest book is POESY THE MONSTER SLAYER, a picture book for young readers. His next book is ATTACK SURFACE, an adult sequel to LITTLE BROTHER. He maintains a daily blog at Pluralistic.net. He works for the Electronic Frontier Foundation, is a MIT Media Lab Research Affiliate, is a Visiting Professor of Computer Science at Open University, a Visiting Professor of Practice at the University of North Carolina’s School of Library and Information Science and co-founded the UK Open Rights Group. Born in Toronto, Canada, he now lives in Los Angeles.</p> - </div> - </div> - </div> - - </div> <div class="container"> @@ -143,7 +144,7 @@ <img class="card-img-top mb-5" src="{{ '/static/images/privchat/privchat1-cover.png' }}" alt="PrivChat with Tor"> <p class="h2 text-primary" target="_blank">Chapter #1 - Online Privacy in 2020: Activism & COVID-19</p> <div> - <p><span class="text-primary nick"><mark>With Carmela Troncoso, Daniel Kahn Gillmor and Matt Michell. Hosted by Roger Dingledine.</mark></span></p> + <p><span class="text-primary nick"><mark>With Carmela Troncoso, Daniel Kahn Gillmor and Matt Mitchell. Hosted by Roger Dingledine.</mark></span></p> </div> <a class="btn btn-small bg-primary text-light mb-3" href="https://www.youtube.com/watch?v=gSyDvG4Z308" target="_blank"><i class="mr-2 pt-1 fab fa-youtube"></i>Watch</a> <div>

1 0

[tor/master] Log number of inbound/outbound ipv4/6 conns as part of heartbeat
by asn＠torproject.org 25 Aug '20

25 Aug '20

commit 24c721de37d2e10f5c864c2e8001f1468a8a4506 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Aug 7 10:45:29 2020 -0400 Log number of inbound/outbound ipv4/6 conns as part of heartbeat Closes #29113 --- changes/ticket29113 | 3 +++ src/core/mainloop/connection.c | 6 ++++++ src/core/or/status.c | 41 ++++++++++++++++++++++++++++++++++++++++- src/core/or/status.h | 1 + src/test/test_status.c | 19 +++++++++++++++---- 5 files changed, 65 insertions(+), 5 deletions(-) diff --git a/changes/ticket29113 b/changes/ticket29113 new file mode 100644 index 0000000000..b883999f5b --- /dev/null +++ b/changes/ticket29113 @@ -0,0 +1,3 @@ + o Minor features (heartbeat): + - Include the total number of inbound and outbound IPv4 and IPv6 + connections in the heartbeat message . Closes ticket 29113. diff --git a/src/core/mainloop/connection.c b/src/core/mainloop/connection.c index b89a4ae796..2b926a076c 100644 --- a/src/core/mainloop/connection.c +++ b/src/core/mainloop/connection.c @@ -82,6 +82,7 @@ #include "core/or/policies.h" #include "core/or/reasons.h" #include "core/or/relay.h" +#include "core/or/status.h" #include "core/or/crypt_path.h" #include "core/proto/proto_haproxy.h" #include "core/proto/proto_http.h" @@ -2042,6 +2043,9 @@ connection_handle_listener_read(connection_t *conn, int new_type) connection_mark_for_close(newconn); return 0; } + + note_connection(true /* inbound */, conn->socket_family); + return 0; } @@ -2213,6 +2217,8 @@ connection_connect_sockaddr,(connection_t *conn, } } + note_connection(false /* outbound */, conn->socket_family); + /* it succeeded. we're connected. */ log_fn(inprogress ? LOG_DEBUG : LOG_INFO, LD_NET, "Connection to socket %s (sock "TOR_SOCKET_T_FORMAT").", diff --git a/src/core/or/status.c b/src/core/or/status.c index ed8448883c..00a88a3178 100644 --- a/src/core/or/status.c +++ b/src/core/or/status.c @@ -113,6 +113,41 @@ log_onion_service_stats(void) hs_stats_get_n_rendezvous_launches()); } +/** + * @name connection counts for heartbeat + * + * Tracks incoming and outgoing connections on IPv4/IPv6, for heartbeat + * logs. + **/ +/**@{*/ +static unsigned n_incoming_ipv4; +static unsigned n_incoming_ipv6; +static unsigned n_outgoing_ipv4; +static unsigned n_outgoing_ipv6; +/**@}*/ + +/** + * Note that a connection has arrived or has been made, for use in the + * heartbeat message. + **/ +void +note_connection(bool inbound, int family) +{ + if (family == AF_INET) { + if (inbound) { + ++n_incoming_ipv4; + } else { + ++n_outgoing_ipv4; + } + } else if (family == AF_INET6) { + if (inbound) { + ++n_incoming_ipv6; + } else { + ++n_outgoing_ipv6; + } + } +} + /** Log a "heartbeat" message describing Tor's status and history so that the * user can know that there is indeed a running Tor. Return 0 on success and * -1 on failure. */ @@ -143,8 +178,12 @@ log_heartbeat(time_t now) bw_sent = bytes_to_usage(get_bytes_written()); log_fn(LOG_NOTICE, LD_HEARTBEAT, "Heartbeat: Tor's uptime is %s, with %d " - "circuits open. I've sent %s and received %s.%s", + "circuits open. I've sent %s and received %s. I've received %u " + "connections on IPv4 and %u on IPv6. I've made %u connections " + "with IPv4 and %u with IPv6.%s", uptime, count_circuits(), bw_sent, bw_rcvd, + n_incoming_ipv4, n_incoming_ipv6, + n_outgoing_ipv4, n_outgoing_ipv6, hibernating?" We are currently hibernating.":""); dirclient_dump_total_dls(); diff --git a/src/core/or/status.h b/src/core/or/status.h index 639f8cdf51..271e0dbc9a 100644 --- a/src/core/or/status.h +++ b/src/core/or/status.h @@ -11,6 +11,7 @@ #include "lib/testsupport/testsupport.h" +void note_connection(bool inbound, int family); int log_heartbeat(time_t now); #ifdef STATUS_PRIVATE diff --git a/src/test/test_status.c b/src/test/test_status.c index 0edc729b00..b938b86326 100644 --- a/src/test/test_status.c +++ b/src/test/test_status.c @@ -347,7 +347,9 @@ test_status_hb_not_in_consensus(void *arg) "not in the cached consensus.\n"); expect_log_msg("Heartbeat: Tor's uptime is 0:00 hours, " "with 0 circuits open. " - "I've sent 0 kB and received 0 kB.\n"); + "I've sent 0 kB and received 0 kB. " + "I've received 0 connections on IPv4 and 0 on IPv6. " + "I've made 0 connections with IPv4 and 0 with IPv6.\n"); expect_log_msg("Average packaged cell fullness: 100.000%. " "TLS write overhead: 0%\n"); expect_log_msg("Circuit handshake stats since last time: 1/1 TAP, " @@ -462,6 +464,8 @@ test_status_hb_simple(void *arg) expect_log_msg("Heartbeat: Tor's uptime is 0:00 hours, " "with 0 circuits open. " "I've sent 0 kB and received 0 kB. " + "I've received 0 connections on IPv4 and 0 on IPv6. " + "I've made 0 connections with IPv4 and 0 with IPv6. " "We are currently hibernating.\n"); done: @@ -581,7 +585,10 @@ test_status_hb_calls_log_accounting(void *arg) expect_log_msg("Heartbeat: Tor's uptime is 0:00 hours, " "with 0 circuits open. " - "I've sent 0 kB and received 0 kB.\n"); + "I've sent 0 kB and received 0 kB. " + "I've received 0 connections on IPv4 and 0 on IPv6. " + "I've made 0 connections with IPv4 and 0 with IPv6.\n"); + expect_log_msg_containing("Heartbeat: Accounting enabled. Sent: 0 kB, " "Received: 0 kB, Used: 0 kB / 0 kB, Rule: max. " "The current accounting interval ends on "); @@ -727,7 +734,9 @@ test_status_hb_packaged_cell_fullness(void *arg) tt_int_op(actual, OP_EQ, expected); expect_log_msg("Heartbeat: Tor's uptime is 0:00 hours, " "with 0 circuits open. " - "I've sent 0 kB and received 0 kB.\n"); + "I've sent 0 kB and received 0 kB. " + "I've received 0 connections on IPv4 and 0 on IPv6. " + "I've made 0 connections with IPv4 and 0 with IPv6.\n"); expect_log_msg("Average packaged cell fullness: 50.000%. " "TLS write overhead: 0%\n"); @@ -850,7 +859,9 @@ test_status_hb_tls_write_overhead(void *arg) tt_int_op(actual, OP_EQ, expected); expect_log_msg("Heartbeat: Tor's uptime is 0:00 hours, " "with 0 circuits open. " - "I've sent 0 kB and received 0 kB.\n"); + "I've sent 0 kB and received 0 kB. " + "I've received 0 connections on IPv4 and 0 on IPv6. " + "I've made 0 connections with IPv4 and 0 with IPv6.\n"); expect_log_msg("Average packaged cell fullness: 100.000%. " "TLS write overhead: 100%\n");

1 0