December 2021 - tor-commits - lists.torproject.org

[snowflake/main] Update go versions in CI tests
by cohosh＠torproject.org 14 Dec '21

14 Dec '21

commit 9c11e479d0d6fdcad47c9f3d55179dd907422a3a Author: Cecylia Bocovich <cohosh(a)torproject.org> Date: Fri Dec 10 10:43:31 2021 -0500 Update go versions in CI tests Debian packages Go 1.15 and 1.17, and we use 1.16 in Tor Browser. --- .gitlab-ci.yml | 15 +++++++++++---- 1 file changed, 11 insertions(+), 4 deletions(-) diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 0824267..5ec32fd 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -139,15 +139,22 @@ android: - go get golang.org/x/mobile/bind - gomobile bind -v -target=android $REPRODUCIBLE_FLAGS . -go-1.13: - image: golang:1.13-stretch +go-1.15: + image: golang:1.15-stretch <<: *golang-docker-debian-template <<: *test-template script: - *go-test -go-1.14: - image: golang:1.14-stretch +go-1.16: + image: golang:1.16-stretch + <<: *golang-docker-debian-template + <<: *test-template + script: + - *go-test + +go-1.17: + image: golang:1.17-stretch <<: *golang-docker-debian-template <<: *test-template script:

1 0

[tor-browser-build/master] Bug 40395: Update node to 12.22.1
by gk＠torproject.org 14 Dec '21

14 Dec '21

commit a0d781d425cd8ff06e6bc10e0320cec06438c6df Author: Nicolas Vigier <boklm(a)torproject.org> Date: Fri Dec 10 14:37:42 2021 +0100 Bug 40395: Update node to 12.22.1 --- projects/node/config | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/projects/node/config b/projects/node/config index 041e5d9..300e59c 100644 --- a/projects/node/config +++ b/projects/node/config @@ -2,8 +2,8 @@ version: '[% c("var/node_version") %]' filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.gz' var: - node_version: 10.23.1 - node_hash: 88aa16f5af79615b183ca55ed81393763169e75d1fb96013cf1831895c6cedfa + node_version: 12.22.1 + node_hash: dd650df7773a6ed3e390320ba51ef33cba6499f0e9397709ea3d1debdcbcb989 container: use_container: 1

1 0

[tor-browser-build/master] Bug 40395: Update how we check node version in list_toolchain_updates_checks
by gk＠torproject.org 14 Dec '21

14 Dec '21

commit f1f4381aaceb2c2c59097bd305ad0307a3dd84f7 Author: Nicolas Vigier <boklm(a)torproject.org> Date: Fri Dec 10 12:42:01 2021 +0100 Bug 40395: Update how we check node version in list_toolchain_updates_checks --- projects/firefox/list_toolchain_updates_checks | 28 ++++++++++++++++++++---- projects/geckoview/list_toolchain_updates_checks | 28 ++++++++++++++++++++---- 2 files changed, 48 insertions(+), 8 deletions(-) diff --git a/projects/firefox/list_toolchain_updates_checks b/projects/firefox/list_toolchain_updates_checks index a308468..26ee3a0 100644 --- a/projects/firefox/list_toolchain_updates_checks +++ b/projects/firefox/list_toolchain_updates_checks @@ -89,12 +89,32 @@ check_update_needed clang "$needed" "$current" # node read -d '' p << 'EOF' || true -if (m/^\\s*NODE_MIN_VERSION\\s*=\\s*StrictVersion\$"([^"]+)"\$/) { - print $1; - exit; +sub l { + ref $_[0] eq 'ARRAY' ? $_[0] : [ $_[0] ]; } + +my $d = YAML::XS::LoadFile('taskcluster/ci/toolchain/node.yml'); +my $node_toolchain; +T: foreach my $t (keys %$d) { + foreach my $alias (@{l($d->{$t}{run}{'toolchain-alias'})}) { + if ($alias eq 'linux64-node') { + foreach my $fetch (@{$d->{$t}{fetches}{fetch}}) { + if ($fetch =~ m/^nodejs-.*/) { + $node_toolchain = $fetch; + last T; + } + } + } + } +} + +exit 1 unless $node_toolchain; + +my $fetch = YAML::XS::LoadFile('taskcluster/ci/fetch/toolchains.yml'); +my ($version) = $fetch->{$node_toolchain}{fetch}{url} =~ m|^https://nodejs.org/dist/v([^/]+)/|; +print "$version\\n"; EOF -needed=$(cat python/mozbuild/mozbuild/nodeutil.py | perl -ne "$p") +needed=$(perl -MYAML::XS -e "$p") current='[% pc("node", "version") %]' check_update_needed node "$needed" "$current" diff --git a/projects/geckoview/list_toolchain_updates_checks b/projects/geckoview/list_toolchain_updates_checks index f31fa51..fef9756 100644 --- a/projects/geckoview/list_toolchain_updates_checks +++ b/projects/geckoview/list_toolchain_updates_checks @@ -180,12 +180,32 @@ check_update_needed clang "$needed" "$current" # node read -d '' p << 'EOF' || true -if (m/^\\s*NODE_MIN_VERSION\\s*=\\s*StrictVersion\$"([^"]+)"\$/) { - print $1; - exit; +sub l { + ref $_[0] eq 'ARRAY' ? $_[0] : [ $_[0] ]; } + +my $d = YAML::XS::LoadFile('taskcluster/ci/toolchain/node.yml'); +my $node_toolchain; +T: foreach my $t (keys %$d) { + foreach my $alias (@{l($d->{$t}{run}{'toolchain-alias'})}) { + if ($alias eq 'linux64-node') { + foreach my $fetch (@{$d->{$t}{fetches}{fetch}}) { + if ($fetch =~ m/^nodejs-.*/) { + $node_toolchain = $fetch; + last T; + } + } + } + } +} + +exit 1 unless $node_toolchain; + +my $fetch = YAML::XS::LoadFile('taskcluster/ci/fetch/toolchains.yml'); +my ($version) = $fetch->{$node_toolchain}{fetch}{url} =~ m|^https://nodejs.org/dist/v([^/]+)/|; +print "$version\\n"; EOF -needed=$(cat python/mozbuild/mozbuild/nodeutil.py | perl -ne "$p") +needed=$(perl -MYAML::XS -e "$p") current='[% pc("node", "version") %]' check_update_needed node "$needed" "$current"

1 0

[torspec/main] Clarify how we derive ed25519 for cross-certification.
by dgoulet＠torproject.org 14 Dec '21

14 Dec '21

commit 57d1e7d163910781b8b08dbbaa397c1d7c06abb7 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Dec 8 11:25:09 2021 -0500 Clarify how we derive ed25519 for cross-certification. The descriptor format uses a curve25519->ed25519 conversion algorithm to cross-certify descriptors with their ntor onion keys. This patch clarifies two aspects of the algorithm: 1. When deriving a private key, how to derive the part of the private key that _isn't_ a point on the curve. 2. That there are two algorithms here, one for private->private and one for public->public. --- dir-spec.txt | 18 ++++++++++++++---- 1 file changed, 14 insertions(+), 4 deletions(-) diff --git a/dir-spec.txt b/dir-spec.txt index 543e341..0eb174a 100644 --- a/dir-spec.txt +++ b/dir-spec.txt @@ -4162,10 +4162,20 @@ C. Converting a curve25519 public key to an ed25519 public key [Recomputing the sign bit from the private key every time sounds rather strange and inefficient to me… —isis] - Alternatively, without access to the corresponding ed25519 private - key, one may use the Montgomery u-coordinate to recover the - Montgomery v-coordinate by computing the right-hand side of the - Montgomery curve equation: + Note that in addition to its coordinates, an expanded Ed25519 private key + also has a 32-byte random value, "prefix", used to compute internal `r` + values in the signature. For security, this prefix value should be + derived deterministically from the curve25519 key. The Tor + implementation derives it as SHA512(private_key | STR)[0..32], where + STR is the nul-terminated string: + + "Derive high part of ed25519 key from curve25519 key\0" + + + On the client side, where there is no access to the curve25519 private + keys, one may use the curve25519 public key's Montgomery u-coordinate to + recover the Montgomery v-coordinate by computing the right-hand side of + the Montgomery curve equation: bv^2 = u(u^2 + au +1)

1 0

[torspec/main] Merge branch 'tor-gitlab/mr/55'
by dgoulet＠torproject.org 14 Dec '21

14 Dec '21

commit ab4a8d4433ba03de4189b438f8b3fb3ba3c8d985 Merge: 485abc9 57d1e7d Author: David Goulet <dgoulet(a)torproject.org> Date: Tue Dec 14 12:58:40 2021 -0500 Merge branch 'tor-gitlab/mr/55' dir-spec.txt | 18 ++++++++++++++---- 1 file changed, 14 insertions(+), 4 deletions(-)

1 0

[tor-browser/tor-browser-91.4.0esr-11.5-1] Bug 1745715 - Process app-bundled fonts before system fonts when initializing the font list, to ensure their families get the expected Base visibility level. r=emilio
by gk＠torproject.org 14 Dec '21

14 Dec '21

commit 6ebf4b5c74896f0d30c061d6c61e98586ff2ca79 Author: Jonathan Kew <jkew(a)mozilla.com> Date: Mon Dec 13 20:09:36 2021 +0000 Bug 1745715 - Process app-bundled fonts before system fonts when initializing the font list, to ensure their families get the expected Base visibility level. r=emilio Differential Revision: https://phabricator.services.mozilla.com/D133667 --- gfx/thebes/gfxFcPlatformFontList.cpp | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/gfx/thebes/gfxFcPlatformFontList.cpp b/gfx/thebes/gfxFcPlatformFontList.cpp index 41a305c537c4..3b6029bd4353 100644 --- a/gfx/thebes/gfxFcPlatformFontList.cpp +++ b/gfx/thebes/gfxFcPlatformFontList.cpp @@ -1524,17 +1524,21 @@ nsresult gfxFcPlatformFontList::InitFontListForPlatform() { } #endif - // iterate over available fonts - FcFontSet* systemFonts = FcConfigGetFonts(nullptr, FcSetSystem); - AddFontSetFamilies(systemFonts, policy.get(), /* aAppFonts = */ false); - #ifdef MOZ_BUNDLED_FONTS + // https://bugzilla.mozilla.org/show_bug.cgi?id=1745715: + // It's important to do this *before* processing the standard system fonts, + // so that if a family is present in both font sets, we'll treat it as app- + // bundled and therefore always visible. if (StaticPrefs::gfx_bundled_fonts_activate_AtStartup() != 0) { FcFontSet* appFonts = FcConfigGetFonts(nullptr, FcSetApplication); AddFontSetFamilies(appFonts, policy.get(), /* aAppFonts = */ true); } #endif + // iterate over available fonts + FcFontSet* systemFonts = FcConfigGetFonts(nullptr, FcSetSystem); + AddFontSetFamilies(systemFonts, policy.get(), /* aAppFonts = */ false); + return NS_OK; }

1 0

[translation/communitytpo-contentspot] new translations in communitytpo-contentspot
by translation＠torproject.org 14 Dec '21

14 Dec '21

commit ddad9c33e3e867c83baca4a988d529baef15a9ca Author: Translation commit bot <translation(a)torproject.org> Date: Tue Dec 14 11:45:11 2021 +0000 new translations in communitytpo-contentspot --- contents+fa.po | 26 +++++++++++++++++++------- 1 file changed, 19 insertions(+), 7 deletions(-) diff --git a/contents+fa.po b/contents+fa.po index 7e88598303..de11d0ea94 100644 --- a/contents+fa.po +++ b/contents+fa.po @@ -217,12 +217,12 @@ msgstr "درباره نحوه کار سرویس های پیازی یاد بگی #: (dynamic) https//community.torproject.org/onion-services/talk/ #: (content/onion-services/talk/contents+en.lrpage.title) msgid "Talk about onions" -msgstr "" +msgstr "درباره پیازی‌ها صحبت کنید" #: (dynamic) https//community.torproject.org/onion-services/talk/ #: (content/onion-services/talk/contents+en.lrpage.subtitle) msgid "Become an onion advocate and explain the importance of onion services." -msgstr "" +msgstr "یک مدافع پیازی شوید و اهمیت خدمات پیازی را توضیح دهید." #: (dynamic) https//community.torproject.org/onion-services/setup/ #: (content/onion-services/setup/contents+en.lrpage.title) @@ -245,6 +245,8 @@ msgid "" "Learn more about how to configure client authentication, Onion-Location and " "more tips to secure your onion service." msgstr "" +"درباره نحوه پیکربندی احراز هویت مشتری، Onion-Location و نکات دیگر برای ایمن " +"کردن سرویس پیازی خود بیشتر بدانید." #: (dynamic) msgid "Onionize any website" @@ -257,6 +259,10 @@ msgid "" " just regular sites. There is an installation guide for how to use this " "toolkit to onionize your site." msgstr "" +"یک جعبه ابزار وجود دارد که به شما امکان می‌دهد هر وب‌سایت موجود را گرفته و " +"آن را به عنوان یک سایت پیازی میزبانی کنید. شما این کار را به این علت انجام " +"می دهید که سایت‌های .onion امن‌تر از سایت‌های معمولی هستند. راهنمای نصب نحوه" +" استفاده از این جعبه ابزار برای پیازی کردن سایت شما وجود دارد. " #: (dynamic) msgid "Check out the code" @@ -364,12 +370,12 @@ msgstr "" #: https//community.torproject.org/gsoc/ #: (content/gsoc/contents+en.lrpage.title) msgid "Project Ideas" -msgstr "" +msgstr "ایده‌های پروژه" #: https//community.torproject.org/gsoc/ #: (content/gsoc/contents+en.lrpage.subtitle) msgid "Some project ideas for GSoC." -msgstr "" +msgstr "بعضی ایده‌های پروژه برای تابستان کد گوگل" #: https//community.torproject.org/gsoc/ #: (content/gsoc/contents+en.lrpage.section) @@ -378,7 +384,7 @@ msgstr "GSoC" #: https//community.torproject.org/gsoc/ (content/gsoc/contents+en.lrpage.cta) msgid "Get coding" -msgstr "" +msgstr "کدنویسی کنید" #: https//community.torproject.org/gsoc/ #: (content/gsoc/contents+en.lrpage.body) @@ -389,6 +395,12 @@ msgid "" "[contact us](mailto:gso+c@torproject.org) to discuss your plans rather than " "sending blind applications." msgstr "" +"ممکن است برخی از این پروژه‌‌ها را ایده‌های خوبی برای Google Summer of Code " +"بدانید. ما به هر ایده برچسب زده‌ایم که کدام یک از توسعه دهندگان اصلی ما " +"می‌توانند مربیان خوبی برای آن باشند. اگر یک یا چند مورد از این ایده‌ها برای " +"شما جالب به نظر می‌رسند، لطفا [با ما تماس " +"بگیرید](mailto:gso+c@torproject.org) تا در مورد برنامه‌های خود صحبت با هم " +"صحبت سازنده کنیم." #: (dynamic) https//community.torproject.org/outreach/kit/ #: (content/outreach/kit/contents+en.lrpage.title) @@ -422,12 +434,12 @@ msgstr "" #: (dynamic) https//community.torproject.org/outreach/meetup/ #: (content/outreach/meetup/contents+en.lrpage.title) msgid "Organize a Tor meetup" -msgstr "" +msgstr "سازماندهی یک جلسه تور" #: (dynamic) https//community.torproject.org/outreach/meetup/ #: (content/outreach/meetup/contents+en.lrpage.subtitle) msgid "Learn how to organize a Tor meetup with your friends." -msgstr "" +msgstr "یاد بگیرید که چگونه یک جلسه تور را با دوستان خود سازماندهی کنید." #: (dynamic) msgid "Tor Speakers Bureau"

1 0

[tor-browser/tor-browser-91.4.0esr-11.5-1] squash! TB4: Tor Browser's Firefox preference overrides.
by gk＠torproject.org 14 Dec '21

14 Dec '21

commit 886c911686d7fbd2d7a36874d6ef5fa8c728fbcf Author: Georg Koppen <gk(a)torproject.org> Date: Mon Dec 13 13:00:02 2021 +0000 squash! TB4: Tor Browser's Firefox preference overrides. Bug 40736: Disable third-party cookies in PBM --- browser/app/profile/000-tor-browser.js | 1 + 1 file changed, 1 insertion(+) diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js index 48005296c6c5..331baa9a6596 100644 --- a/browser/app/profile/000-tor-browser.js +++ b/browser/app/profile/000-tor-browser.js @@ -213,6 +213,7 @@ pref("javascript.options.large_arraybuffers", false); pref("privacy.firstparty.isolate", true); // Always enforce first party isolation pref("privacy.partition.network_state", false); // Disable for now until audit pref("network.cookie.cookieBehavior", 1); +pref("network.cookie.cookieBehavior.pbmode", 1); pref("network.http.spdy.allow-push", false); // Disabled for now. See https://bugs.torproject.org/27127 pref("network.predictor.enabled", false); // Temporarily disabled. See https://bugs.torproject.org/16633 // Bug 40177: Make sure tracker cookie purging is disabled

1 0

[translation/support-portal] new translations in support-portal
by translation＠torproject.org 14 Dec '21

14 Dec '21

commit bb042ba4aa24f6d669c513f8602f7eba7dcafd94 Author: Translation commit bot <translation(a)torproject.org> Date: Tue Dec 14 09:17:41 2021 +0000 new translations in support-portal --- contents+ru.po | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/contents+ru.po b/contents+ru.po index afd13c374b..02bc6c5bd7 100644 --- a/contents+ru.po +++ b/contents+ru.po @@ -3054,11 +3054,14 @@ msgid "" " either the destination website or your Tor exit node to correlate timings " "of your traffic as it enters the Tor network and also as it exits." msgstr "" +"Как сказано выше, если у злоумышленника есть доступ к вашему трафику, а " +"также трафику выходного узла Tor или конечного сайта, то злоумышленник может" +" вычислить вас по времени, когда ваш трафик входит и выходит из сети Tor." #: https//support.torproject.org/about/attacks-on-onion-routing/ #: (content/about/attacks-on-onion-routing/contents+en.lrquestion.description) msgid "Tor does not defend against such a threat model." -msgstr "" +msgstr "К сожалению, Tor не защищён от такой атаки." #: https//support.torproject.org/about/attacks-on-onion-routing/ #: (content/about/attacks-on-onion-routing/contents+en.lrquestion.description) @@ -3069,6 +3072,10 @@ msgid "" "friend by observing traffic at both ends and correlating the timing of only " "that traffic." msgstr "" +"Проще говоря, если правоохранительные органы имеют доступ к некоторым " +"участкам сети, они могут подтвердить свои подозрения, что вы регулярно " +"общаетесь со свим другом, наблюдая за временем начала и окончания трафика на" +" ваших участках сети." #: https//support.torproject.org/about/attacks-on-onion-routing/ #: (content/about/attacks-on-onion-routing/contents+en.lrquestion.description) @@ -3076,6 +3083,8 @@ msgid "" "Again, this is only useful to verify that parties already suspected of " "communicating with one another are doing so." msgstr "" +"Повторюсь, что это возможно только для подтверждения, что подозреваемые " +"общаются друг с другом." #: https//support.torproject.org/about/attacks-on-onion-routing/ #: (content/about/attacks-on-onion-routing/contents+en.lrquestion.description) @@ -3083,6 +3092,9 @@ msgid "" "In most countries, the suspicion required to obtain a warrant already " "carries more weight than timing correlation would provide." msgstr "" +"В большинстве стран, основания, необходимые для получения такого ордера, " +"гораздо сильнее, чам подтверждение того, что подозреваемые общаются друг с " +"другом." #: https//support.torproject.org/about/attacks-on-onion-routing/ #: (content/about/attacks-on-onion-routing/contents+en.lrquestion.description)

1 0

[translation/support-portal] new translations in support-portal
by translation＠torproject.org 14 Dec '21

14 Dec '21

commit 8380af5ed3f0f57471f85a9f0daca9043736d5fe Author: Translation commit bot <translation(a)torproject.org> Date: Tue Dec 14 04:17:29 2021 +0000 new translations in support-portal --- contents+id.po | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/contents+id.po b/contents+id.po index 4489d65a55..6d2ac02488 100644 --- a/contents+id.po +++ b/contents+id.po @@ -11813,12 +11813,12 @@ msgstr "" #: https//support.torproject.org/onionservices/v2-deprecation/ #: (content/onionservices/v2-deprecation/contents+en.lrquestion.description) msgid "HiddenServiceDir /full/path/to/your/new/v3/directory/" -msgstr "" +msgstr "HiddenServiceDir /full/path/to/your/new/v3/directory/" #: https//support.torproject.org/onionservices/v2-deprecation/ #: (content/onionservices/v2-deprecation/contents+en.lrquestion.description) msgid "HiddenServicePort <virtual port> <target-address>:<target-port>" -msgstr "" +msgstr "HiddenServicePort <virtual port> <target-address>:<target-port>" #: https//support.torproject.org/onionservices/v2-deprecation/ #: (content/onionservices/v2-deprecation/contents+en.lrquestion.description)

1 0