September 2021 - tor-commits - lists.torproject.org

[community/master] Minor fix
by gus＠torproject.org 09 Sep '21

09 Sep '21

commit 2d13f8d6cd547371e22f1a531afc6565f4255ab8 Author: gus <gus(a)torproject.org> Date: Thu Sep 9 18:08:05 2021 -0300 Minor fix --- databags/community-training-materials.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/databags/community-training-materials.json b/databags/community-training-materials.json index b717f92..bec44ea 100644 --- a/databags/community-training-materials.json +++ b/databags/community-training-materials.json @@ -37,7 +37,7 @@ "date": "2021", "cover": "/static/images/training/running-tor-bridges.png", "languages": "English", - "link": "https://web.archive.org/web/20210614063756/https://gitweb.torproject.org/co…" + "link": "https://gitweb.torproject.org/community/training.git/plain/2021/private-bri…" }, "exploring-the-tor-network": { "name": "Exploring the Tor network (poster)",

1 0

[community/master] Fix #228
by gus＠torproject.org 09 Sep '21

09 Sep '21

commit 3326a7fd0a263308dce03b99ade637fbfd70374b Author: gus <gus(a)torproject.org> Date: Thu Sep 9 18:01:01 2021 -0300 Fix #228 --- databags/community-training-materials.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/databags/community-training-materials.json b/databags/community-training-materials.json index 1c7eb48..b717f92 100644 --- a/databags/community-training-materials.json +++ b/databags/community-training-materials.json @@ -2,7 +2,7 @@ "all-about-tor": { "name": "All About Tor", "author": "Tor Project", - "link": "https://community.torproject.org/training/resources/tor-relay-workshop/", + "link": "https://gitweb.torproject.org/community/training.git/plain/2021/all-about-t…", "description": "Full set of slides for Tor Trainings: how the Tor network works, censorship circumvention, Tor Browser installation, and OnionShare.", "date": "2021", "cover": "/static/images/training/all-about-tor.png", @@ -16,7 +16,7 @@ "date": "2019", "cover": "/static/images/training/todo-sobre-tor.png", "languages": "Spanish", - "link" : "https://community.torproject.org/training/resources/tor-relay-workshop/" + "link" : "https://gitweb.torproject.org/community/training.git/plain/2019/all-about-t…" }, "tor network workshop": { "author": "Tor Project", @@ -37,7 +37,7 @@ "date": "2021", "cover": "/static/images/training/running-tor-bridges.png", "languages": "English", - "link": "https://community.torproject.org/training/resources/tor-relay-workshop/" + "link": "https://web.archive.org/web/20210614063756/https://gitweb.torproject.org/co…" }, "exploring-the-tor-network": { "name": "Exploring the Tor network (poster)",

1 0

[translation/tails-misc_release] https://gitweb.torproject.org/translation.git/commit/?h=tails-misc_release
by translation＠torproject.org 09 Sep '21

09 Sep '21

commit c681d51ee0056c9ee705d35c63347f5d48497b30 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Sep 9 14:46:42 2021 +0000 https://gitweb.torproject.org/translation.git/commit/?h=tails-misc_release --- da.po | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/da.po b/da.po index 305cdb42f9..9c9268d9e8 100644 --- a/da.po +++ b/da.po @@ -23,8 +23,8 @@ msgstr "" "Project-Id-Version: Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2021-09-06 12:01+0200\n" -"PO-Revision-Date: 2021-09-06 12:26+0000\n" -"Last-Translator: Transifex Bot <>\n" +"PO-Revision-Date: 2021-09-09 14:43+0000\n" +"Last-Translator: scootergrisen\n" "Language-Team: Danish (http://www.transifex.com/otf/torproject/language/da/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n"

1 0

[translation/tails-misc] https://gitweb.torproject.org/translation.git/commit/?h=tails-misc
by translation＠torproject.org 09 Sep '21

09 Sep '21

commit f42894720876f94c9a4aa7bc802898242be4e30a Author: Translation commit bot <translation(a)torproject.org> Date: Thu Sep 9 14:45:54 2021 +0000 https://gitweb.torproject.org/translation.git/commit/?h=tails-misc --- da.po | 28 ++++++++++++++-------------- 1 file changed, 14 insertions(+), 14 deletions(-) diff --git a/da.po b/da.po index e848749c40..4415bafc2d 100644 --- a/da.po +++ b/da.po @@ -23,8 +23,8 @@ msgstr "" "Project-Id-Version: Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2021-09-06 12:01+0200\n" -"PO-Revision-Date: 2021-09-06 12:26+0000\n" -"Last-Translator: Transifex Bot <>\n" +"PO-Revision-Date: 2021-09-09 14:43+0000\n" +"Last-Translator: scootergrisen\n" "Language-Team: Danish (http://www.transifex.com/otf/torproject/language/da/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" @@ -1720,13 +1720,13 @@ msgstr "_Indtast en bro som er kendt i forvejen" msgid "" "To save your bridge, <a href=\"doc/first_steps/persistence\">unlock you " "Persistent Storage</a>." -msgstr "" +msgstr "<a href=\"doc/first_steps/persistence\">Oplås dit vedvarende lager</a> for at gemme din bro." #: config/chroot_local-includes/usr/lib/python3/dist-packages/tca/ui/main_window.py:245 msgid "" "To save your bridge, <a href=\"doc/first_steps/persistence\">create a " "Persistent Storage</a> on your Tails USB stick." -msgstr "" +msgstr "<a href=\"doc/first_steps/persistence\">Opret et vedvarende lager</a> på din Tails USB-pen for at gemme din bro." #: config/chroot_local-includes/usr/lib/python3/dist-packages/tca/ui/main_window.py:265 #: config/chroot_local-includes/usr/lib/python3/dist-packages/tca/ui/main_window.py:668 @@ -1754,7 +1754,7 @@ msgstr "Opretter forbindelse til Tor med standardbroer…" #: config/chroot_local-includes/usr/lib/python3/dist-packages/tca/ui/main_window.py:433 msgid "Connecting to Tor with a custom bridge…" -msgstr "" +msgstr "Opretter forbindelse til Tor med en tilpasset bro…" #: config/chroot_local-includes/usr/lib/python3/dist-packages/tca/ui/main_window.py:542 msgid "" @@ -2033,7 +2033,7 @@ msgid "" "The Unsafe Browser was not enabled in the Welcome Screen.\\n\\nTo use the " "Unsafe Browser, restart Tails and enable the Unsafe Browser in the " "additional settings of the Welcome Screen." -msgstr "" +msgstr "Usikker brower blev ikke aktiveret på velkomstskærmen.\\n\\nHvis du vil bruge Usikker browser, så skal du genstarte Tails og aktivere Usikker browser i yderligere indstillinger på velkomstskærmen." #: config/chroot_local-includes/usr/local/sbin/unsafe-browser:95 msgid "" @@ -2630,11 +2630,11 @@ msgstr "I Tails er det i øjeblikket kun obfs4-broer der skjuler at du bruger To #: ../config/chroot_local-includes/usr/share/tails/tca/main.ui.in:372 msgid "Save bridge to _Persistent Storage" -msgstr "" +msgstr "Gem bro til _vedvarende lager" #: ../config/chroot_local-includes/usr/share/tails/tca/main.ui.in:397 msgid "Save bridge to Persistent Storage" -msgstr "" +msgstr "Gem bro til vedvarende lager" #: ../config/chroot_local-includes/usr/share/tails/tca/main.ui.in:398 msgid "toggle-button" @@ -2658,7 +2658,7 @@ msgstr "• Forkert tid" msgid "" "To prevent network attacks, your time zone and clock need to be correct to " "connect to Tor using a bridge." -msgstr "" +msgstr "For at forhindre netværksangreb skal din tidszone og dit ur være korrekt for at kunne oprette forbindelse til Tor med en bro." #: ../config/chroot_local-includes/usr/share/tails/tca/main.ui.in:639 msgid "Fix _Clock" @@ -2694,7 +2694,7 @@ msgstr "Konfigurer en lokal _proxy" #: ../config/chroot_local-includes/usr/share/tails/tca/main.ui.in:818 msgid "• Bridge over email" -msgstr "" +msgstr "• Bro over e-mail" #: ../config/chroot_local-includes/usr/share/tails/tca/main.ui.in:838 msgid "" @@ -2703,7 +2703,7 @@ msgid "" "1. Send an empty email to <tt>bridges(a)torproject.org</tt> from a Gmail or Riseup email address.\n" "\n" "2. Type below one of the bridges that you received by email." -msgstr "" +msgstr "For at anmode om nye Tor-broer kan du også:\n\n1. Sende en tom e-mail til <tt>bridges(a)torproject.org</tt> fra en e-mailadresse hos Gmail eller Riseup.\n\n2. Indtaste en af de broer du modtog via e-mail nedenfor." #: ../config/chroot_local-includes/usr/share/tails/tca/main.ui.in:971 #: ../config/chroot_local-includes/usr/share/tails/tca/main.ui.in:1379 @@ -2744,7 +2744,7 @@ msgid "" "Tor bridges are secret Tor relays. Use a bridge as your first Tor relay if connections to Tor are blocked, for example in some countries, by some public networks, or by some parental controls.\n" "\n" "Choose this option if you already know that you need a bridge. Otherwise, Tails will autodetect whether you need a bridge to connect to Tor from your local network." -msgstr "" +msgstr "Tor-broer er hemmelige Tor-relæer. Brug en bro som dit første Tor-relæ hvis forbindelser til Tor er blokeret, f.eks. i nogle lande, af nogle offentlige netværk eller af nogle forælderstyringer.\n\nVælg valgmuligheden hvis du allerede ved at du behøver en bro. Ellers registrerer Tails automatisk om du behøver en bro for at oprette forbindelse til Tor fra dit lokale netværk." #: ../config/chroot_local-includes/usr/share/tails/tca/main.ui.in:1211 msgid "<b>_Hide to my local network that I'm connecting to Tor (safer)</b>" @@ -2763,7 +2763,7 @@ msgid "" "Our team is doing its best to help you connect to Tor using the most discrete types of Tor bridges.\n" "\n" "You will have to do extra configuration if you don't know any Tor bridges yet, if you connect from a public Wi-Fi network, or if you are in the Eastern Hemisphere." -msgstr "" +msgstr "Tails opretter kun forbindelse til Tor efter du konfigurerede en Tor-bro. Broer er hemmelige Tor-relæer der skjuler at du opretter forbindelse til Tor.\n\nVores team gør deres bedste for at hjælpe dig med at oprette forbindelse til Tor med de mest diskrete typer Tor-broer.\n\nDu skal foretage ekstra konfiguration hvis du endnu ikke har nogle Tor-broer, hvis du opretter forbindelse fra et offentligt Wi-Fi-netværk eller hvis du er i den østlige halvkugle." #: ../config/chroot_local-includes/usr/share/tails/tca/main.ui.in:1324 msgid "" @@ -2886,7 +2886,7 @@ msgid "" "To prevent network attacks, your time zone and clock need to be correct to connect to Tor using bridges.\n" "\n" "Your time zone and clock cannot be used to identify or geolocalize you. Your time zone will never be sent over the network and will only be used to fix your clock and connect to Tor." -msgstr "" +msgstr "For at forhindre netværksangreb skal din tidszone og dit ur være korrekt for at oprette forbindelse to Tor med broer.\n\nDin tidszone og dit ur kan ikke bruges til at identificere eller geoplacere dig. Din tidszone sendes aldrig over netværket og bruges kun til at rette dit ur og oprette forbindelse til Tor." #: ../config/chroot_local-includes/usr/share/tails/tca/time-dialog.ui.in:117 msgid "Select the time zone you want to use"

1 0

[torspec/main] prop324: Add section for onion service handling
by dgoulet＠torproject.org 09 Sep '21

09 Sep '21

commit 888d43a1ef1db46cfeda2785299632de6844aa51 Author: David Goulet <dgoulet(a)torproject.org> Date: Wed Sep 8 10:30:52 2021 -0400 prop324: Add section for onion service handling Signed-off-by: David Goulet <dgoulet(a)torproject.org> --- proposals/324-rtt-congestion-control.txt | 106 ++++++++++++++++++++++++++++++- 1 file changed, 104 insertions(+), 2 deletions(-) diff --git a/proposals/324-rtt-congestion-control.txt b/proposals/324-rtt-congestion-control.txt index f98c28a..a2631a9 100644 --- a/proposals/324-rtt-congestion-control.txt +++ b/proposals/324-rtt-congestion-control.txt @@ -1317,7 +1317,109 @@ also be used as a side channel. So we must limit its use to a couple of cells per circuit, at most. https://blog.torproject.org/tor-security-advisory-relay-early-traffic-confi… -9. Acknowledgements +9. Onion Services + +Onion service requires us to advertise the protocol version and congestion +control parameters in a different way since the end points do not know each +other like a client knows all the relays and what they support. + +To address this, this is done in two parts. First, the service needs to +advertise to the world that it supports congestion control. This is done +through a new line in the descriptor, see section 9.1 below. + +Second, the client needs to inform the service that it wants to use congestion +control on the rendezvous circuit and with wich parameters. This is done +through the INTRODUCE cell as an extension, see section 9.2 below. + +9.1. Descriptor + +We propose to add a new line to advertise the flow control protocol version: + + "flow-control" SP version-number NL + + The "version-number" value is the same as the protocol version FlowCtrl + that relay advertises which is defined earlier in this proposal. Current + value can only be "2". + +Clients that are able to parse this line and know the protocol version can then +send in the INTRODUCE1 cell congestion control parameters that they would like +to use which is detailed in the next section. + +9.2 INTRODUCE cell extension + +We propose a new extension to the INTRODUCE cell which can be used to send +congestion control parameters down to the service. It is important to mention +that this is an extension to be used in the encrypted setion of the cell and +not its readable section by the introduction point. + +If used, it needs to be encoded within the N_EXTENSIONS field of the ENCRYPTED +section of the INTRODUCE1 cell defined in rend-spec-v3.txt section 3.3. The +content is defined as follow: + + EXT_FIELD_TYPE: + + [01] -- Congestion Control Parameters. + + If this flag is set, the extension should be used by the service to learn + what are the congestion control parameters to use on the rendezvous + circuit. + + EXT_FIELD content format is: + + N_PARAMS [1 byte] + N_PARAMS times: + PARAM_TYPE [1 byte] + PARAM_VALUE [8 byte] + + The PARAM_TYPE possible values are: + + [01] -- Newest protocol version supported + The newest protocol version that the client supports. + + [02] -- SENDME increment + The initial SENDME increment that should be used by both end points + when using congestion control. + + The PARAM_VALUE size is 8 bytes in order to accomodate 64bit values. It + MUST match the specified limits for the following PARAM_TYPE: + + [01] -- Min: 2, Max: 255 + [02] -- Min: 1, Max: 5000 (same as "cc_sendme_inc") + +9.3 Protocol Flow + +First, the client reads the "flow-control" line in the descriptor and gets the +maximum value from what it supports and the service supports. As an example, if +the client supports 2-3-4 and the service supports 2-3, then 3 is chosen. + +It then sends that value along its desired cc_sendme_inc value in the +INTRODUCE1 cell in the extension. + +The service will then validate that is does support version 3 and that the +parameter cc_sendme_inc is within range of the protocol. Congestion control is +then applied to the rendezvous circuit. + +9.4 Circuit Behavior + +If the extension is not found in the cell, the service MUST not use congestion +control on the rendezvous circuit. + +Any invalid values received in the extension should result in closing the +introduction circuit and thus not continuing the rendezvous process. An invalid +value is either if the value is not supported or out of the defined range. + +9.5 Security Considerations + +Advertising a new line in a descriptor does leak that a service is running at +least a certain tor version. We believe that this is an acceptable risk in +order to be able for service to take advantage of congestion control. Once a +new tor stable is released, we hope that most service upgrades and thus +everyone looks the same again. + +The new extension is located in the encrypted part of the INTRODUCE1 cell and +thus the introduction point can't learn its content. + +10. Acknowledgements Immense thanks to Toke Høiland-Jørgensen for considerable input into all aspects of the TCP congestion control background material for this proposal, @@ -1325,7 +1427,7 @@ as well as review of our versions of the algorithms. -10. [CITATIONS] +11. [CITATIONS] 1. Options for Congestion Control in Tor-Like Networks. https://lists.torproject.org/pipermail/tor-dev/2020-January/014140.html

1 0

[torspec/main] fixup! prop324: Add section for onion service handling
by dgoulet＠torproject.org 09 Sep '21

09 Sep '21

commit b03be04b5f30f50db0d887bf44d71dfebad2be2d Author: David Goulet <dgoulet(a)torproject.org> Date: Wed Sep 8 15:33:34 2021 -0400 fixup! prop324: Add section for onion service handling --- proposals/324-rtt-congestion-control.txt | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/proposals/324-rtt-congestion-control.txt b/proposals/324-rtt-congestion-control.txt index a2631a9..f4397b6 100644 --- a/proposals/324-rtt-congestion-control.txt +++ b/proposals/324-rtt-congestion-control.txt @@ -1345,6 +1345,11 @@ Clients that are able to parse this line and know the protocol version can then send in the INTRODUCE1 cell congestion control parameters that they would like to use which is detailed in the next section. +This line MUST be removed from the descriptor if the consensus disables +congestion control by setting "cc_alg=0". In other words, a service should only +advertise its flow control version if congestion control is enabled network +wide. + 9.2 INTRODUCE cell extension We propose a new extension to the INTRODUCE cell which can be used to send

1 0

[community/master] Change by url without authentication
by gus＠torproject.org 09 Sep '21

09 Sep '21

commit e8f2e3bee120f926ad21af08c60183e23ff30709 Author: jacobo <jacobo(a)metahumano.org> Date: Wed Sep 8 19:54:40 2021 -0500 Change by url without authentication --- content/relay/setup/snowflake/standalone/contents.lr | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/content/relay/setup/snowflake/standalone/contents.lr b/content/relay/setup/snowflake/standalone/contents.lr index 638b963..74b0532 100644 --- a/content/relay/setup/snowflake/standalone/contents.lr +++ b/content/relay/setup/snowflake/standalone/contents.lr @@ -19,7 +19,7 @@ There are several ways to setup and run a standalone snowflake proxy. You must first have [Docker](https://docs.docker.com/engine/install/) and [docker-compose](https://docs.docker.com/compose/install/) installed. -We have a [Docker image](https://hub.docker.com/repository/docker/thetorproject/snowflake-pro… to ease the setup of a snowflake proxy. +We have a [Docker image](https://hub.docker.com/r/thetorproject/snowflake-proxy) to ease the setup of a snowflake proxy. First [download docker-compose.yml](https://gitlab.torproject.org/tpo/anti-censorship/docke…. Then, deploy the proxy by running: ``` @@ -49,7 +49,7 @@ You will need Go 1.13+ to run the Snowflake proxy. ``` 3. Build the Snowflake proxy. ``` - cd snowflake/proxy + cd snowflake/proxy go build ``` 4. Run the Snowflake proxy.

1 0

[translation/tails-openpgp-applet] https://gitweb.torproject.org/translation.git/commit/?h=tails-openpgp-applet
by translation＠torproject.org 09 Sep '21

09 Sep '21

commit 03e60204ad2eb4f450e6121a77b40987d7b16d41 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Sep 9 08:46:42 2021 +0000 https://gitweb.torproject.org/translation.git/commit/?h=tails-openpgp-applet --- my/openpgp-applet.pot | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/my/openpgp-applet.pot b/my/openpgp-applet.pot index b782e4e855..1358f8adbf 100644 --- a/my/openpgp-applet.pot +++ b/my/openpgp-applet.pot @@ -8,7 +8,7 @@ msgstr "" "Project-Id-Version: Tor Project\n" "Report-Msgid-Bugs-To: tails(a)boum.org\n" "POT-Creation-Date: 2017-08-05 15:07-0400\n" -"PO-Revision-Date: 2021-09-09 04:10+0000\n" +"PO-Revision-Date: 2021-09-09 08:35+0000\n" "Last-Translator: Christine Ivy <christineivy19(a)gmail.com>\n" "Language-Team: Burmese (http://www.transifex.com/otf/torproject/language/my/)\n" "MIME-Version: 1.0\n" @@ -114,7 +114,7 @@ msgstr "" #: bin/openpgp-applet:545 msgid "Sign message as:" -msgstr "" +msgstr "မက်ဆေ့ချ် လက်မှတ်ထိုးသူ -" #: bin/openpgp-applet:549 msgid "Choose keys"

1 0

[translation/tails-openpgp-applet] https://gitweb.torproject.org/translation.git/commit/?h=tails-openpgp-applet
by translation＠torproject.org 09 Sep '21

09 Sep '21

commit a7cf1de01664082db109061101fcb6d62bac9f8d Author: Translation commit bot <translation(a)torproject.org> Date: Thu Sep 9 04:16:34 2021 +0000 https://gitweb.torproject.org/translation.git/commit/?h=tails-openpgp-applet --- my/openpgp-applet.pot | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/my/openpgp-applet.pot b/my/openpgp-applet.pot index b98afa403c..b782e4e855 100644 --- a/my/openpgp-applet.pot +++ b/my/openpgp-applet.pot @@ -8,8 +8,8 @@ msgstr "" "Project-Id-Version: Tor Project\n" "Report-Msgid-Bugs-To: tails(a)boum.org\n" "POT-Creation-Date: 2017-08-05 15:07-0400\n" -"PO-Revision-Date: 2019-01-15 12:27+0000\n" -"Last-Translator: erinm\n" +"PO-Revision-Date: 2021-09-09 04:10+0000\n" +"Last-Translator: Christine Ivy <christineivy19(a)gmail.com>\n" "Language-Team: Burmese (http://www.transifex.com/otf/torproject/language/my/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" @@ -79,7 +79,7 @@ msgstr "အမည်" #: bin/openpgp-applet:401 msgid "Key ID" -msgstr "" +msgstr "စကားဝှက်သော့ ID" #: bin/openpgp-applet:402 msgid "Status"

1 0

[community/master] Switch to better link on bandwidth shaping
by gus＠torproject.org 08 Sep '21

08 Sep '21

commit 94c82611d04314c289a572de5c5cca53ef925ac0 Author: ix0 <gitlab.tor(a)lucy.sh> Date: Wed Sep 8 21:16:54 2021 +0000 Switch to better link on bandwidth shaping --- content/relay/setup/post-install/contents.lr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/relay/setup/post-install/contents.lr b/content/relay/setup/post-install/contents.lr index 596c5fb..ccd8e8d 100644 --- a/content/relay/setup/post-install/contents.lr +++ b/content/relay/setup/post-install/contents.lr @@ -67,7 +67,7 @@ The following torrc configuration options can be used to restrict bandwidth and Having a fast relay for some time of the month is preferred over a slow relay for the entire month. -Also see the bandwidth entry in the [FAQ](https://support.torproject.org/#bandwidth-shaping). +Also see the bandwidth entry in the [FAQ](https://support.torproject.org/relay-operators/bandwidth-shaping/). # 7. Check IPv6 availability

1 0