tor-commits March 2021

tor-commits@lists.torproject.org

17 participants
2169 discussions

[community/staging] Update GSoC Project descriptions
by hiro＠torproject.org 21 Mar '21

21 Mar '21

commit 5e7203d4925992265aeb1b876c5df629b299e87f Author: Pili Guerra <pili(a)piliguerra.com> Date: Wed Feb 5 12:36:31 2020 +0100 Update GSoC Project descriptions --- content/gsoc/onion-toolbox/contents.lr | 34 ++++++++++++---------- .../gsoc/ooni-explorer-advanced-search/contents.lr | 18 ++++++++---- content/gsoc/ooni-probe-experiments/contents.lr | 16 ++++++---- 3 files changed, 42 insertions(+), 26 deletions(-) diff --git a/content/gsoc/onion-toolbox/contents.lr b/content/gsoc/onion-toolbox/contents.lr index bae15c0..1d52e87 100644 --- a/content/gsoc/onion-toolbox/contents.lr +++ b/content/gsoc/onion-toolbox/contents.lr @@ -29,24 +29,31 @@ title: Onion Tool Box --- subtitle: -Myonion is a developer tool box, providing a command line interface and a GUI to configure and deploy existing services via .onion. A minimal prototype for myonion already [exists](https://github.com/hiromipaw/myonion). - -Someone that may want to run an onion service can use the myonion wrapper app to start a .onion from their computer and sharea static website or a web application. - -Myonion can also be used to deploy the resulting configured app to a defined set of cloud providers. - +Myonion is a developer tool box, providing a command line interface and a GUI to configure and deploy existing services via .onion. The idea behind myonion is to make onion services accessible to developers that might be interested to innovate in the privacy space, building applications that are designed for privacy and security. --- body: -## Problem definition +# Problem It is not necessarily difficult to use onion services, but it might be tricky to configure a web service to be offered via .onion so that it doesn’t leak sensitive information. There are detailed [guides](https://riseup.net/en/security/network-security/tor/onionservices-b… available for users that would like to offer a web application via .onion and some tools have been developed to help service operators: discover known misconfiguration or [vulnerabilities](https://onionscan.org/) or deploy an [onion site](https://github.com/alecmuffett/eotk). -## Scope +Involving a wider developer community can help creating a better image of Tor and onion services, replacing the “dark net” narrative with the secure and private web one. + +Onion services can also be relevant to all those people interested in the “zero-trust” strategy. The concept behind zero-trust is to adopt strategies and tools to help prevent data breaches by eliminating the concept of trust from an organization’s network architecture, with the principle of never trust, always verify. -Myonion provides a way to build and deploy onion ready applications, allowing developers to build and test web applications and easily share them with others, bundling the code and configuration in a lightweight, portable Docker container application that runs thesame everywhere. +Ultimately myonion is about creating a better experience for onion services developers and operators and therefore fostering a more legitimate onion service ecosystem. + +# Proposal + +Myonion is a developer tool box, providing a command line interface and a GUI to configure and deploy existing services via .onion. A minimal prototype for myonion already [exists](https://github.com/hiromipaw/myonion). + +Someone that may want to run an onion service can use the myonion wrapper app to start a .onion from their computer and sharea static website or a web application. + +Myonion can also be used to deploy the resulting configured app to a defined set of cloud providers. + +Myonion provides a way to build and deploy onion ready applications, allowing developers to build and test web applications and easily share them with others, bundling the code and configuration in a lightweight, portable Docker container application that runs the same everywhere. The experience for developers will be similar to using other industry solutions, like the [Docker desktop app](https://www.docker.com/products/docker-desktop). @@ -54,12 +61,7 @@ Developers using myonion are provided with pre-defined and customizable applicat The resulting application is therefore deployable via a set of endpoint management tools to known providers. Providing a way to deploy onion services at scale. -## Impact +# Resources -The idea behind myonion is to make onion services accessible to developers that might be interested to innovate in the privacy space, building applications that are designed for privacy and security. +- Myonion repo on github: https://github.com/hiromipaw/myonion -Involving a wider developer community can help creating a better image of Tor and onion services, replacing the “dark net” narrative with the secure and private web one. - -Onion services can also be relevant to all those people interested in the “zero-trust” strategy. The concept behind zero-trust is to adopt strategies and tools to help prevent data breaches by eliminating the concept of trust from an organization’s network architecture, with the principle of never trust, always verify. - -Ultimately myonion is about creating a better experience for onion services developers and operators and therefore fostering a more legitimate onion service ecosystem. diff --git a/content/gsoc/ooni-explorer-advanced-search/contents.lr b/content/gsoc/ooni-explorer-advanced-search/contents.lr index b4d883c..cd3f5d6 100644 --- a/content/gsoc/ooni-explorer-advanced-search/contents.lr +++ b/content/gsoc/ooni-explorer-advanced-search/contents.lr @@ -28,11 +28,18 @@ title: OONI Explorer Advanced Search --- subtitle: -This project is about enriching the OONI Explorer search functionality with the ability to visualize an analysis of metadata pertaining to filtered measurements. - +OONI Explorer is an open data resource on internet censorship around the world. This project is about enriching the OONI Explorer search functionality with the ability to visualize an analysis of metadata pertaining to filtered measurements. --- body: +# Problem + + + +# Proposal + +This project is about enriching the OONI Explorer search functionality with the ability to visualize an analysis of metadata pertaining to filtered measurements. + This would involve adding the ability to filter on multiple axis: country, ASN, time range, anomaly, confirmed, failure, domain or input, citizenlab category code. The results would then be presented in an aggregate form, such as showing: @@ -46,8 +53,9 @@ These results could then be presented as a table or some other charts, such as a Some other more detailed, drill-down views could also be implemented. -A potential applicant should also have some prior design +A potential applicant should also have some prior design experience + +# Resources -- *Prerequisites:* API call to be implemented by Federico -- *Links/Resource:* https://github.com/ooni/explorer +- OONI Explorer repo on github: https://github.com/ooni/explorer diff --git a/content/gsoc/ooni-probe-experiments/contents.lr b/content/gsoc/ooni-probe-experiments/contents.lr index c6426ef..4d5d2f7 100644 --- a/content/gsoc/ooni-probe-experiments/contents.lr +++ b/content/gsoc/ooni-probe-experiments/contents.lr @@ -28,16 +28,22 @@ title: OONI Probe network experiments --- subtitle: -As part of this project you would be working on researching and developing new OONI Probe network experiments. +OONI Probe is a free software project that aims to uncover internet censorship around the world. As part of this project you would be working on researching and developing new OONI Probe network experiments. --- body: -These experiments would be integrated inside of probe-engine and could eventually make their way into the OONI Probe desktop client. +# Problem + +# Proposal + +*Prerequisites:* Knowledge of network programming + +As part of this project you would be working on researching and developing new OONI Probe network experiments. These experiments would be integrated inside of probe-engine and could eventually make their way into the OONI Probe desktop client. The GSoC project is only about researching and implementing a working test in probe-engine, not the UI and client integration of the test. -For some inspiration on some ideas for new experiments, see: https://github.com/ooni/probe-engine/issues?q=is%3Aopen+is%3Aissue+label%3A… +# Resources -Prerequisites: Knowledge of network programming -Links/Resources: https://github.com/ooni/probe-engine \ No newline at end of file +- OONI Probe repo on github: https://github.com/ooni/probe-engine +- [Ideas for new experiments](https://github.com/ooni/probe-engine/issues?q=is%3Aopen+is%3Ai… \ No newline at end of file

1 0

[community/staging] GSoC mentors should be a list of strings
by hiro＠torproject.org 21 Mar '21

21 Mar '21

commit bf9327689fe06bd9554c13da645d0aa70203cac3 Author: Pili Guerra <pili(a)piliguerra.com> Date: Wed Feb 5 10:48:10 2020 +0100 GSoC mentors should be a list of strings --- models/project.ini | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/models/project.ini b/models/project.ini index 17c3260..09ba867 100644 --- a/models/project.ini +++ b/models/project.ini @@ -28,7 +28,7 @@ type = markdown [fields.mentors] label = Mentors -type = string +type = strings [fields.languages] label = Languages

1 0

[community/staging] Fix Mentor display
by hiro＠torproject.org 21 Mar '21

21 Mar '21

commit 5eae339ed7a32f881f1ee23f0185ec5572d05655 Author: Pili Guerra <pili(a)piliguerra.com> Date: Wed Feb 5 11:59:58 2020 +0100 Fix Mentor display --- content/gsoc/cloudflare-captcha-monitoring/contents.lr | 4 +++- content/gsoc/gettor-distribution/contents.lr | 2 +- content/gsoc/onion-toolbox/contents.lr | 4 +++- content/gsoc/ooni-explorer-advanced-search/contents.lr | 4 +++- content/gsoc/ooni-probe-experiments/contents.lr | 4 +++- content/gsoc/privacy-aware-geo-lookup/contents.lr | 4 +++- content/gsoc/privacy-friendly-web/contents.lr | 3 ++- content/gsoc/salmon-bridge-distribution/contents.lr | 4 +++- content/gsoc/snowflake-android-proxy/contents.lr | 3 ++- content/gsoc/tor-relay-ipv6-support/contents.lr | 4 +++- models/project.ini | 4 ---- templates/macros/projects.html | 6 ++++++ 12 files changed, 32 insertions(+), 14 deletions(-) diff --git a/content/gsoc/cloudflare-captcha-monitoring/contents.lr b/content/gsoc/cloudflare-captcha-monitoring/contents.lr index dbdc7e4..c311934 100644 --- a/content/gsoc/cloudflare-captcha-monitoring/contents.lr +++ b/content/gsoc/cloudflare-captcha-monitoring/contents.lr @@ -18,7 +18,9 @@ languages: python javascript --- -mentors: GeKo, arma +mentors: +GeKo +arma --- difficulty: medium --- diff --git a/content/gsoc/gettor-distribution/contents.lr b/content/gsoc/gettor-distribution/contents.lr index b39c92e..797a2ff 100644 --- a/content/gsoc/gettor-distribution/contents.lr +++ b/content/gsoc/gettor-distribution/contents.lr @@ -20,7 +20,7 @@ ansible --- org: Tor --- -mentors: +mentors: cohosh hiro --- diff --git a/content/gsoc/onion-toolbox/contents.lr b/content/gsoc/onion-toolbox/contents.lr index ed8b5e4..bae15c0 100644 --- a/content/gsoc/onion-toolbox/contents.lr +++ b/content/gsoc/onion-toolbox/contents.lr @@ -19,7 +19,9 @@ Python Docker PythonQt5 --- -mentors: hiro, asn +mentors: +hiro +asn --- difficulty: medium --- diff --git a/content/gsoc/ooni-explorer-advanced-search/contents.lr b/content/gsoc/ooni-explorer-advanced-search/contents.lr index 99b9484..b4d883c 100644 --- a/content/gsoc/ooni-explorer-advanced-search/contents.lr +++ b/content/gsoc/ooni-explorer-advanced-search/contents.lr @@ -18,7 +18,9 @@ languages: React --- org: OONI --- -mentors: Federico Ceratto, Arturo Filastò +mentors: +Federico Ceratto +Arturo Filastò --- difficulty: Medium --- diff --git a/content/gsoc/ooni-probe-experiments/contents.lr b/content/gsoc/ooni-probe-experiments/contents.lr index 8f18dcc..c6426ef 100644 --- a/content/gsoc/ooni-probe-experiments/contents.lr +++ b/content/gsoc/ooni-probe-experiments/contents.lr @@ -18,7 +18,9 @@ languages: Golang --- org: OONI --- -mentors: Simone Basso, Arturo Filastò +mentors: +Simone Basso +Arturo Filastò --- difficulty: low-high --- diff --git a/content/gsoc/privacy-aware-geo-lookup/contents.lr b/content/gsoc/privacy-aware-geo-lookup/contents.lr index d0ba616..1a58eb2 100644 --- a/content/gsoc/privacy-aware-geo-lookup/contents.lr +++ b/content/gsoc/privacy-aware-geo-lookup/contents.lr @@ -20,7 +20,9 @@ Java --- org: OONI --- -mentors: Simone Basso, Arturo Filastò +mentors: +Simone Basso +Arturo Filastò --- difficulty: Medium --- diff --git a/content/gsoc/privacy-friendly-web/contents.lr b/content/gsoc/privacy-friendly-web/contents.lr index c56e209..2878195 100644 --- a/content/gsoc/privacy-friendly-web/contents.lr +++ b/content/gsoc/privacy-friendly-web/contents.lr @@ -20,7 +20,8 @@ CSS HTML Python --- -mentors: hiro +mentors: +hiro --- difficulty: medium --- diff --git a/content/gsoc/salmon-bridge-distribution/contents.lr b/content/gsoc/salmon-bridge-distribution/contents.lr index 11855dc..85a5598 100644 --- a/content/gsoc/salmon-bridge-distribution/contents.lr +++ b/content/gsoc/salmon-bridge-distribution/contents.lr @@ -18,7 +18,9 @@ languages: --- org: Tor --- -mentors: +mentors: +cohosh +ahf --- difficulty: --- diff --git a/content/gsoc/snowflake-android-proxy/contents.lr b/content/gsoc/snowflake-android-proxy/contents.lr index 96f802b..1e2dbf9 100644 --- a/content/gsoc/snowflake-android-proxy/contents.lr +++ b/content/gsoc/snowflake-android-proxy/contents.lr @@ -19,7 +19,8 @@ Android --- org: Tor --- -mentors: cohosh +mentors: +cohosh --- difficulty: --- diff --git a/content/gsoc/tor-relay-ipv6-support/contents.lr b/content/gsoc/tor-relay-ipv6-support/contents.lr index 4aff974..ea4a9df 100644 --- a/content/gsoc/tor-relay-ipv6-support/contents.lr +++ b/content/gsoc/tor-relay-ipv6-support/contents.lr @@ -17,7 +17,9 @@ key: 10 languages: C --- -mentors: teor, ahf, dgoulet, catalyst +mentors: +teor +ahf --- difficulty: Medium --- diff --git a/models/project.ini b/models/project.ini index 09ba867..6d5f780 100644 --- a/models/project.ini +++ b/models/project.ini @@ -34,10 +34,6 @@ type = strings label = Languages type = strings -[fields.mentors] -label = Mentors -type = string - [fields.difficulty] label = Difficulty Level type = string diff --git a/templates/macros/projects.html b/templates/macros/projects.html index bbda578..a4e2850 100644 --- a/templates/macros/projects.html +++ b/templates/macros/projects.html @@ -4,9 +4,15 @@ <h5 class="mb-0"> <a href="{{ item.path|url }}">{{ item.title }}</a> </h5> + Languages: {% for lang in item.languages %} <span class="badge badge-primary">{{ lang }}</span> {% endfor %} + <br> + Mentors: + {% for person in item.mentors %} + <span class="badge badge-secondary">{{ person }}</span> + {% endfor %} </div> <div> <div class="card-body">

1 0

[community/staging] Add more details + Getting started to Snowflake Android proxy project
by hiro＠torproject.org 21 Mar '21

21 Mar '21

commit cc392a7d8a0b850c4710a026044d2c216c984cf2 Author: Pili Guerra <pili(a)piliguerra.com> Date: Mon Mar 2 18:04:15 2020 +0100 Add more details + Getting started to Snowflake Android proxy project --- content/gsoc/snowflake-android-proxy/contents.lr | 23 ++++++++++++++++++++++- 1 file changed, 22 insertions(+), 1 deletion(-) diff --git a/content/gsoc/snowflake-android-proxy/contents.lr b/content/gsoc/snowflake-android-proxy/contents.lr index f922efb..f1a8906 100644 --- a/content/gsoc/snowflake-android-proxy/contents.lr +++ b/content/gsoc/snowflake-android-proxy/contents.lr @@ -39,9 +39,30 @@ body: # Proposal -This project entails implementing a Snowflake proxy app that will run on Android and relay a user's Tor traffic to the Tor network in the background. There is an implementation component as well as an exploration and testing component while we figure out how to achieve good performance from a background application without using too much of the volunteer proxy's data or resources. +This project entails implementing a Snowflake proxy app that will run on Android and relay a user's Tor traffic to the Tor network in the background. This application does not use Tor itself, it will relay Tor traffic from censored users to the Snowflake bridge. It will do this by copying Tor traffic between a WebRTC connection to the user and a WebSocket connection to the Snowflake bridge. + +There is an implementation component as well as an exploration and testing component while we figure out how to achieve good performance from a background application without using too much of the volunteer proxy's data or resources. We'd like to build in the ability for multiple users to connect through +a proxy, but we'll start with just one user at first. This project is experimental in the sense that we don't yet know how many resources it will take and whether the proxies will be reliable enough for clients to use. + +# Getting Started + +A good way to get started is to read the resources provided below and familiarize yourself with how Snowflake works. You can then: + +1. Take a look at the existing WebExtension proxy code, and +2. Install the WebExtension to try it out for yourself: https://snowflake.torproject.org/ + +Once you feel ready to get started on some tickets, you can search for webextension (proxy) based tickets on our bug tracking system by looking for the keyword ["webextension"](https://trac.torproject.org/projects/tor/query?status=accepted&status=assigned&status=needs_information&status=needs_revision&status=new&status=reopened&keywords=~webextension&component=%5ECircumvention%2FSnowflake&group=type&col=id&col=summary&col=component&col=status&col=type&col=priority&col=milestone&order=priority) in the Snowflake component. # Resources +We already have the proxy implemented as a WebExtension in javascript. You can take a look at that implementation for a more detailed idea of what exactly we're trying to do: + +- https://gitweb.torproject.org/pluggable-transports/snowflake.git/tree/proxy + +Some other links that will be useful are: + +- the technical writeup: https://keroserene.net/snowflake/technical/ +- deployment details and open tickets: https://trac.torproject.org/projects/tor/wiki/doc/Snowflake + - [Snowflake](https://snowflake.torproject.org/) - Snowflake repo: https://gitweb.torproject.org/pluggable-transports/snowflake.git/ \ No newline at end of file

1 0

[community/staging] Fix 404 error #111
by hiro＠torproject.org 21 Mar '21

21 Mar '21

commit 928c0752af0bf45c1526790719176056f42f3958 Author: Gustavo Gus <gusgustavo(a)users.noreply.github.com> Date: Tue Feb 18 19:47:55 2020 +0000 Fix 404 error #111 --- .../relay-operations/community-resources/eff-tor-legal-faq/contents.lr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/relay-operations/community-resources/eff-tor-legal-faq/contents.lr b/content/relay-operations/community-resources/eff-tor-legal-faq/contents.lr index 385a255..8e78678 100644 --- a/content/relay-operations/community-resources/eff-tor-legal-faq/contents.lr +++ b/content/relay-operations/community-resources/eff-tor-legal-faq/contents.lr @@ -103,7 +103,7 @@ You may receive legal inquiries where you are prohibited by law from telling any Inquiries to EFF for the purpose of securing legal representation should be directed to our intake coordinator (info at eff.org). Such inquiries will be kept confidential subject to the limits of the attorney/client privilege. -For more information about responding to abuse complaints and other inquiries, check out the [Tor Abuse FAQ](https://2019.www.torproject.org/docs/faq-abuse.html.en) and the collection of [abuse response templates](/tor-abuse-templates/) on the Tor Project's website. +For more information about responding to abuse complaints and other inquiries, check out the [Tor Abuse FAQ](https://2019.www.torproject.org/docs/faq-abuse.html.en) and the collection of [abuse response templates](/relay/community-resources/tor-abuse-templates/) on the Tor Project's website. For information on what to do if law enforcement seeks access to your digital devices, check out EFF's [Know Your Rights](https://www.eff.org/wp/know-your-rights) guide.

1 0

[community/staging] Update content for OONI GSoC projects
by hiro＠torproject.org 21 Mar '21

21 Mar '21

commit 3d86d5893b03a05ca8957ec2264d9b195c15fb35 Author: Pili Guerra <pili(a)piliguerra.com> Date: Wed Feb 5 13:05:30 2020 +0100 Update content for OONI GSoC projects --- content/gsoc/ooni-explorer-advanced-search/contents.lr | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/content/gsoc/ooni-explorer-advanced-search/contents.lr b/content/gsoc/ooni-explorer-advanced-search/contents.lr index cd3f5d6..be381fd 100644 --- a/content/gsoc/ooni-explorer-advanced-search/contents.lr +++ b/content/gsoc/ooni-explorer-advanced-search/contents.lr @@ -32,9 +32,9 @@ OONI Explorer is an open data resource on internet censorship around the world. --- body: -# Problem - +# Background +OONI Explorer is an open data resource on internet censorship around the world. This project is about enriching the OONI Explorer search functionality with the ability to visualize an analysis of metadata pertaining to filtered measurements. # Proposal

1 0

[community/staging] Update GSoC project descriptions
by hiro＠torproject.org 21 Mar '21

21 Mar '21

commit 7555fb6d626f6b4317ffd0cf8861fd9c23f14175 Author: Pili Guerra <pili(a)piliguerra.com> Date: Wed Feb 5 14:50:36 2020 +0100 Update GSoC project descriptions --- content/gsoc/privacy-friendly-web/contents.lr | 15 ++++++++++++--- content/gsoc/salmon-bridge-distribution/contents.lr | 13 +++++++++++-- content/gsoc/snowflake-android-proxy/contents.lr | 11 +++++++++-- 3 files changed, 32 insertions(+), 7 deletions(-) diff --git a/content/gsoc/privacy-friendly-web/contents.lr b/content/gsoc/privacy-friendly-web/contents.lr index 2878195..7ab642b 100644 --- a/content/gsoc/privacy-friendly-web/contents.lr +++ b/content/gsoc/privacy-friendly-web/contents.lr @@ -33,18 +33,27 @@ The scope of this project is creating a open-source community-driven browsable l --- body: +# Problem + Security concerned web users take conscious steps to limit the amount of data they share with the websites visited and third party services. There are a number of security enhancing tools available. Some come in the form of browser extensions and javascript blockers, others are full fledged web browsers designed with providing extra security to their users. -One of this is the Tor Browser. The Tor Browser was designed to provide privacy while surfing the web and defend users against both network and local forensic adversaries. There are two main categories of requirements that have been considered: Security Requirements, and Privacy Requirements. +One of these is the Tor Browser. The Tor Browser was designed to provide privacy while surfing the web and defend users against both network and local forensic adversaries. There are two main categories of requirements that have been considered: Security Requirements, and Privacy Requirements. Security Requirements are the minimum properties in order for a browser to be able to support Tor and similar privacy proxies safely. Privacy requirements are primarily concerned with reducing linkability: the ability for a user's activity on one site to be linked with their activity on another site without their knowledge or explicit consent. -Websites can work seamsly with the Tor Browser and other privacy enhancing browsers and tools if they adopt a series of respectful and ethical patterns. +# Proposal + +Websites can work seamlessly with the Tor Browser and other privacy enhancing browsers and tools if they adopt a series of respectful and ethical patterns. The Tor Browser is in fact, based on Mozilla's Extended Support Release (ESR) Firefox branch. We have a series of patches against this browser to enhance privacy and security. Browser behavior is additionally augmented through the Torbutton extension, and we also change a number of Firefox preferences from their defaults. The Tor Project has developed over the years a set of web development guidelines that allow websites to work with security enhanced browsers without causing any or minimal functionality destruption to their users. These guidelines have been shaped in an internal styleguide that has been adopted across all torproject.org websites. -We are now formalizing these web development patterns and some security concerns that need to be considered when developing websites for users surfing the web with security enhanced browsers and tools. +We are now formalizing these web development patterns and some security concerns that need to be considered when developing websites for users surfing the web with security enhanced browsers and tools. The scope of this project is creating a open-source community-driven browsable list of patterns and release a css/js framework that web developers can extend and use in their work. + +# Resources + +- Tor Project [styleguide](https://styleguide.torproject.org/) +- Styleguide repo on github: https://github.com/torproject/styleguide diff --git a/content/gsoc/salmon-bridge-distribution/contents.lr b/content/gsoc/salmon-bridge-distribution/contents.lr index 85a5598..8ec5614 100644 --- a/content/gsoc/salmon-bridge-distribution/contents.lr +++ b/content/gsoc/salmon-bridge-distribution/contents.lr @@ -33,7 +33,16 @@ This project entails implementing Salmon, a bridge distribution mechanism that p --- body: -Short description: Many users rely on bridges, or anti-censorship proxies, to connect to the Tor network. We need a way of distributing bridge information to users so that they are able to connect. However, when censors learn this information the bridges quickly become blocked and can no longer be used. Our goal is to distribute bridges to users in censored regions when they need them, while also limiting the amount of bridge information that is leaked to censors. +# Problem -For more information on Salmon, see the related paper and source code. +Bridges are Tor relays that are not publicly listed and therefore allow access to the Tor network in places where access to the public Tor relays, and therefore access to the Tor network, is blocked. Many users rely on bridges, or anti-censorship proxies, to connect to the Tor network. However, when censors learn this information, the bridges quickly become blocked and can no longer be used. We need a way of distributing bridge information to users so that they are able to connect without these bridges being discovered by the censors. +# Proposal + +Our goal is to distribute bridges to users in censored regions when they need them, while also limiting the amount of bridge information that is leaked to censors. This project entails implementing Salmon, a bridge distribution mechanism that partitions and distributes bridges using reputation to give well-behaved users access to "better" bridges and add a penalty when their bridges get censored. + +# Resources + +- Original Paper: [Salmon: Robust Proxy Distribution for +Censorship Circumvention](https://petsymposium.org/2016/files/papers/Salmon__Robust_Pr… +- Salmon Project on github: https://github.com/SalmonProject \ No newline at end of file diff --git a/content/gsoc/snowflake-android-proxy/contents.lr b/content/gsoc/snowflake-android-proxy/contents.lr index 1e2dbf9..f922efb 100644 --- a/content/gsoc/snowflake-android-proxy/contents.lr +++ b/content/gsoc/snowflake-android-proxy/contents.lr @@ -33,8 +33,15 @@ This project entails implementing a Snowflake proxy app that will run on Android --- body: -Snowflake is a circumvention system in which volunteers can run proxies to help users connect to the Tor network. Users make WebRTC connections to the proxies, who then relay this data to a Snowflake bridge and then on to the Tor network. The advantage of using WebRTC is that Snowflake proxies can frequently change IP address or operate behind a NAT. At the moment, we have implemented the Snowflake proxy code as a web extension or a web badge, but we have not yet implemented a proxy that will run smoothly on Android. +# Background + +[Snowflake](https://snowflake.torproject.org/) is a circumvention system in which volunteers can run proxies to help users connect to the Tor network. Users make WebRTC connections to the proxies, who then relay this data to a Snowflake bridge and then on to the Tor network. The advantage of using WebRTC is that Snowflake proxies can frequently change IP address or operate behind a NAT. At the moment, we have implemented the Snowflake proxy code as a web extension or a web badge, but we have not yet implemented a proxy that will run smoothly on Android. + +# Proposal This project entails implementing a Snowflake proxy app that will run on Android and relay a user's Tor traffic to the Tor network in the background. There is an implementation component as well as an exploration and testing component while we figure out how to achieve good performance from a background application without using too much of the volunteer proxy's data or resources. -Skills Needed: Development experience on Android. \ No newline at end of file +# Resources + +- [Snowflake](https://snowflake.torproject.org/) +- Snowflake repo: https://gitweb.torproject.org/pluggable-transports/snowflake.git/ \ No newline at end of file

1 0

[community/staging] tor-relay-ipv6: Update GSoC Info
by hiro＠torproject.org 21 Mar '21

21 Mar '21

commit 6f92cbe54f495cb9f1d4c4edac27924d93c11948 Author: teor <teor(a)torproject.org> Date: Wed Feb 5 22:35:00 2020 +1000 tor-relay-ipv6: Update GSoC Info --- content/gsoc/tor-relay-ipv6-support/contents.lr | 40 ++++++++++++++++++------- 1 file changed, 30 insertions(+), 10 deletions(-) diff --git a/content/gsoc/tor-relay-ipv6-support/contents.lr b/content/gsoc/tor-relay-ipv6-support/contents.lr index ea4a9df..86518a2 100644 --- a/content/gsoc/tor-relay-ipv6-support/contents.lr +++ b/content/gsoc/tor-relay-ipv6-support/contents.lr @@ -19,7 +19,7 @@ C --- mentors: teor -ahf +ahf (to be confirmed) --- difficulty: Medium --- @@ -32,30 +32,50 @@ Tor helps people stay safe on the internet, by keeping their internet use secure --- body: -Students may choose to focus on designing and implementing core features, tor relay testing, reporting statistics, or diagnosing and fixing bugs. +The Tor Project will be improving tor relay IPv6 support in 2020. +Students may choose to focus on: + * designing and implementing tor relay IPv6 features, + * tor relay IPv6 testing, or + * diagnosing and fixing bugs in tor's IPv6 code. ## Prerequisites * Network configuration skills -* Basic understanding of Internet Protocol (IP) versions +* Basic understanding of IPv4 and IPv6 Recommended: * Experience testing network software * Experience running Internet-connected servers +## Programming skills needed: + +* C coding +* Building Unix-based (Linux, *BSD, macOS) software + +Recommended: + +* Experience with Unix network programming +* Python coding (for testing) +* Access to a server with public IPv4 and IPv6 addresses (to run a test relay) + ## Links/Resources -https://trac.torproject.org/projects/tor/wiki/TorRelayGuide#IPv6 +### Technical Proposals -https://trac.torproject.org/projects/tor/wiki/org/roadmaps/Tor/IPv6Features#ReachabilityChecks +Tor Relay IPv6 Reachability +https://gitweb.torproject.org/torspec.git/tree/proposals/311-relay-ipv6-reachability.txt -## Programming skills needed: +Tor Relay Automatic IPv6 Address Discovery +https://gitweb.torproject.org/torspec.git/tree/proposals/312-relay-auto-ipv6-addr.txt -* C coding -* Building Unix-based software +### Relay Operator Guides -Recommended: +Tor Relay Guide: IPv6 +https://trac.torproject.org/projects/tor/wiki/TorRelayGuide#IPv6 + +### Roadmaps -* Experience with network programming +Tor IPv6 Roadmap +https://trac.torproject.org/projects/tor/wiki/org/roadmaps/Tor/IPv6Features

1 0

[community/staging] Merge remote-tracking branch 'PROTechThor/com-lego'
by hiro＠torproject.org 21 Mar '21

21 Mar '21

commit c70cd45d912ab6b6993d785dbd5a6a284b818ffa Merge: 7555fb6 1068dcf Author: emma peel <emma.peel(a)riseup.net> Date: Fri Feb 7 14:16:18 2020 +0100 Merge remote-tracking branch 'PROTechThor/com-lego' README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

[community/staging] Add task links to IPv6 project
by hiro＠torproject.org 21 Mar '21

21 Mar '21

commit 4b5db4e993c589543820eef07731f621b3e205ca Author: Pili Guerra <pili(a)piliguerra.com> Date: Mon Mar 9 15:14:55 2020 +0100 Add task links to IPv6 project --- content/gsoc/tor-relay-ipv6-support/contents.lr | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) diff --git a/content/gsoc/tor-relay-ipv6-support/contents.lr b/content/gsoc/tor-relay-ipv6-support/contents.lr index e94d0b7..d28a631 100644 --- a/content/gsoc/tor-relay-ipv6-support/contents.lr +++ b/content/gsoc/tor-relay-ipv6-support/contents.lr @@ -72,6 +72,31 @@ Recommended: See our [Getting Started](https://gitweb.torproject.org/tor.git/tree/doc/HACKING/GettingStar… document for more information. +Once you have completed the above tasks, you may wish to move on to the following initial tasks for the project. + +### Initial Tasks + +* [Use Authority Addresses for Socket-Based Address Detection](https://gitweb.torproject.org/torspec.git/tree/proposals/312-rel…. +* [Add IPv6 Support to is_local_addr()](https://gitweb.torproject.org/torspec.git/tree/proposals/3…. +* [Add a BandwidthStatistics option](https://gitweb.torproject.org/torspec.git/tree/proposals/313-relay-…. +* [Close Existing Connections Before Testing Reachability](https://gitweb.torproject.org/torspec.git/tree/proposals/311-…. +* [Add unit tests or chutney tests for IPv6Traffic](https://trac.torproject.org/projects/tor/ticket/31543). + +### Main Tasks + +* [Add IPv6 Support to AuthDirMaxServersPerAddr](https://gitweb.torproject.org/torspec.git/tree/pr…. +* [Use Authenticated NETINFO Cells to Discover Relay IP Addresses](https://gitweb.torproject.org/torspec.git/tree/proposals/312-rel…. +* [Chutney tests for IPv6-only bridge clients](https://trac.torproject.org/projects/tor/ticket/20068). +* [IPv6 Exits succeed on Travis Linux, but Travis Linux doesn't support IPv6](https://trac.torproject.org/projects/tor/ticket/30182). + +### Stretch Goals + +* [Close Existing Connections Before Testing Reachability](https://gitweb.torproject.org/torspec.git/tree/proposals/311-…. +* [Use Add IPv6 DNS Support via the Libevent DNS API](https://gitweb.torproject.org/torspec.git/tree/proposals/312-relay-aut…. +* [Discovered Addresses as the Default OutboundBindAddress](https://gitweb.torproject.org/torspec.git/tree/proposa…. +* [Make chutney check for relay microdescriptors before verifying](https://trac.torproject.org/projects/tor/ticket/33428). +* [chutney doesn't verify using IPv6 addresses](https://trac.torproject.org/projects/tor/ticket/17011). + ## Links/Resources ### Technical Proposals

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

tor-commits March 2021