- tor-commits - lists.torproject.org

[tor-browser-bundle/master] Bump GOPTLIB tag
by gk＠torproject.org 23 Apr '16

23 Apr '16

commit 1d68debb4d34b22ae76d1078b8f157cf4ab54e07 Author: Georg Koppen <gk(a)torproject.org> Date: Sat Apr 23 12:36:47 2016 +0000 Bump GOPTLIB tag --- gitian/versions.alpha | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gitian/versions.alpha b/gitian/versions.alpha index 0ba31d2..c6ab27d 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -32,7 +32,7 @@ LIBFTE_TAG=85ef8ae58dbf0d02ea26b627e343784b5574c428 # sketch master with fix FTEPROXY_TAG=597f8378f6f4f3de570b8e1064c2e4cb8d67fbd0 # tag 0.2.19 LIBDMG_TAG=dfd5e5cc3dc1191e37d3c3a6118975afdd1d7014 TXSOCKSX_TAG=216eb0894a1755872f4789f9458aa6cf543b8433 # unsigned habnabit/1.13.0.2 -GOPTLIB_TAG=0.2 +GOPTLIB_TAG=0.5 MEEK_TAG=0.22-18371-2 FAKETIME_TAG=70aa6b394d9341522dffe8a5a5cf5929e82cc6b9 # unsigned v0.9.6 GOED25519_TAG=c4161f4c7483313562781c61b9a20aba73daf9de

1 0

[research-web/master] tweak
by arma＠torproject.org 23 Apr '16

23 Apr '16

commit 1f87d6d1c5e226ce96de9c122b37a5618e8abbdf Author: Roger Dingledine <arma(a)torproject.org> Date: Sat Apr 23 00:39:06 2016 -0400 tweak --- htdocs/safetyboard.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/htdocs/safetyboard.html b/htdocs/safetyboard.html index 1024eab..480a5ac 100644 --- a/htdocs/safetyboard.html +++ b/htdocs/safetyboard.html @@ -108,7 +108,7 @@ Tor by letting us know what research is happening — which in turn can help you, since we might be able to let you know about a concurrent experiment (with their permission of course) that will mess up your results. Also, we can let you know about upcoming Tor design changes -that might change your plans or analysis. +that might influence your plans or analysis. To best help you, we want to hear about four aspects of your proposed

1 0

[research-web/master] add another faq based on discussion with users
by arma＠torproject.org 23 Apr '16

23 Apr '16

commit 7b433108edafc2a307ede24e49954e435bde9da1 Author: Roger Dingledine <arma(a)torproject.org> Date: Sat Apr 23 00:27:45 2016 -0400 add another faq based on discussion with users --- htdocs/safetyboard.html | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/htdocs/safetyboard.html b/htdocs/safetyboard.html index deb5752..1024eab 100644 --- a/htdocs/safetyboard.html +++ b/htdocs/safetyboard.html @@ -223,6 +223,16 @@ the process (ideally before the research is performed and before the paper is written), which we recognize requires more trust. We hope we add enough value to your research that you find this tradeoff worthwhile. +How will you know the right balance between benefits and risks? +This is a tough one. We want Tor to get stronger long-term, but we don't +want to put people into danger to do it. One answer is that most of this +board is made up of professors and other PETS researchers, who can provide +a more neutral perspective on the right balance. The other answer +is that this process is a feedback loop and we can adapt as we go: +once successful assessments have gone up on this page, and people are +including assessments in their papers, everybody else can look at them +and decide if they struck the right balance. + So you want conferences to adopt your guidelines? Not quite. We would be sad if program chairs told their reviewers "Make sure the paper follows Tor's guidelines for safe research." We would

1 0

[research-web/master] clarify the confidentiality part after ian asked
by arma＠torproject.org 23 Apr '16

23 Apr '16

commit 975110728a6e22fb1bc695c8b2480e225dd8bd1d Author: Roger Dingledine <arma(a)torproject.org> Date: Fri Apr 22 23:26:45 2016 -0400 clarify the confidentiality part after ian asked --- htdocs/safetyboard.html | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/htdocs/safetyboard.html b/htdocs/safetyboard.html index 12c8dec..deb5752 100644 --- a/htdocs/safetyboard.html +++ b/htdocs/safetyboard.html @@ -106,7 +106,9 @@ about the benefits and risks of your experiment. Hopefully our feedback on your thoughts will help too. At the same time, this process will help Tor by letting us know what research is happening — which in turn can help you, since we might be able to let you know about a concurrent -experiment that will mess up your results. +experiment (with their permission of course) that will mess up your +results. Also, we can let you know about upcoming Tor design changes +that might change your plans or analysis. To best help you, we want to hear about four aspects of your proposed @@ -188,7 +190,8 @@ who want to cooperate, while showing to the world that it's possible to do good Tor research safely. Can't I just run Tor relays and do my experiment without telling you? -Please don't! The directory authorities have been much more conservative +Please don't! The directory authority operators have been much more +conservative lately (after the CMU incident in particular) in terms of looking for suspicious patterns or behavior, and removing suspicious relays from the network. If the directory authority operators know about you, understand @@ -213,7 +216,8 @@ between the researchers and the program committees. We aren't trying to replace IRBs or other projects like ethicalresearch.org. What about confidentiality? -We will keep assessments that we receive confidential in the same +Unless you tell us otherwise, we will keep assessments that we receive +confidential in the same way that program committees do. You're coming to us much earlier in the process (ideally before the research is performed and before the paper is written), which we recognize requires more trust. We hope we

1 0

[translation/tor-launcher-network-settings_completed] Update translations for tor-launcher-network-settings_completed
by translation＠torproject.org 23 Apr '16

23 Apr '16

commit 7832c0b85816569b0e2e6f0ed2c42af205033bfa Author: Translation commit bot <translation(a)torproject.org> Date: Sat Apr 23 02:45:47 2016 +0000 Update translations for tor-launcher-network-settings_completed --- zh_CN/network-settings.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/zh_CN/network-settings.dtd b/zh_CN/network-settings.dtd index c9619ae..35343c2 100644 --- a/zh_CN/network-settings.dtd +++ b/zh_CN/network-settings.dtd @@ -65,7 +65,7 @@ <!ENTITY torsettings.copyLog "点击复制 Tor 日志"> <!ENTITY torsettings.bridgeHelpTitle "网桥中继帮助"> <!ENTITY torsettings.bridgeHelp1 "如果 Tor 网络无法连接，可能是因为互联网服务提供商 (ISP) 或其他机构对 Tor 进行了封锁。通常，使用 Tor 网桥可以解决这种问题。网桥指未公开的网络中继，更难于封锁。"> -<!ENTITY torsettings.bridgeHelp1B "你可以使用本软件集成的一组网桥，也可以通过以下三种方法获取网桥。"> +<!ENTITY torsettings.bridgeHelp1B "您可以使用集成的网桥，也可以以下列方式获取一些网桥并手动输入："> <!ENTITY torsettings.bridgeHelp2Heading "网页方式"> <!ENTITY torsettings.bridgeHelp2 "使用浏览器访问 https://bridges.torproject.org"> <!ENTITY torsettings.bridgeHelp3Heading "电子邮件自动回复方式">

1 0

[translation/tor-launcher-network-settings] Update translations for tor-launcher-network-settings
by translation＠torproject.org 23 Apr '16

23 Apr '16

commit efd075d511ac034b825b858316e0f2be211f61a0 Author: Translation commit bot <translation(a)torproject.org> Date: Sat Apr 23 02:45:44 2016 +0000 Update translations for tor-launcher-network-settings --- zh_CN/network-settings.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/zh_CN/network-settings.dtd b/zh_CN/network-settings.dtd index 5910dc8..35343c2 100644 --- a/zh_CN/network-settings.dtd +++ b/zh_CN/network-settings.dtd @@ -65,7 +65,7 @@ <!ENTITY torsettings.copyLog "点击复制 Tor 日志"> <!ENTITY torsettings.bridgeHelpTitle "网桥中继帮助"> <!ENTITY torsettings.bridgeHelp1 "如果 Tor 网络无法连接，可能是因为互联网服务提供商 (ISP) 或其他机构对 Tor 进行了封锁。通常，使用 Tor 网桥可以解决这种问题。网桥指未公开的网络中继，更难于封锁。"> -<!ENTITY torsettings.bridgeHelp1B "You may use the preconfigured, provided set of bridge addresses or you may obtain a custom set of addresses by using one of these methods:"> +<!ENTITY torsettings.bridgeHelp1B "您可以使用集成的网桥，也可以以下列方式获取一些网桥并手动输入："> <!ENTITY torsettings.bridgeHelp2Heading "网页方式"> <!ENTITY torsettings.bridgeHelp2 "使用浏览器访问 https://bridges.torproject.org"> <!ENTITY torsettings.bridgeHelp3Heading "电子邮件自动回复方式">

1 0

[translation/tor-launcher-properties_completed] Update translations for tor-launcher-properties_completed
by translation＠torproject.org 23 Apr '16

23 Apr '16

commit ef989e33a8c7f45453cfe7f2e5635fe2e70de043 Author: Translation commit bot <translation(a)torproject.org> Date: Sat Apr 23 02:45:38 2016 +0000 Update translations for tor-launcher-properties_completed --- zh_CN/torlauncher.properties | 1 + 1 file changed, 1 insertion(+) diff --git a/zh_CN/torlauncher.properties b/zh_CN/torlauncher.properties index b74e3f7..336456b 100644 --- a/zh_CN/torlauncher.properties +++ b/zh_CN/torlauncher.properties @@ -36,6 +36,7 @@ torlauncher.quit_win=关闭 torlauncher.done=完成 torlauncher.forAssistance=如需帮助，请联系 %S +torlauncher.forAssistance2=如需帮助，请访问 %S torlauncher.copiedNLogMessages=复制完成。%S 条 Tor 日志信息已准备好，可以将其粘贴到文本编辑器或电子邮件中。

1 0

[translation/tor-launcher-properties] Update translations for tor-launcher-properties
by translation＠torproject.org 23 Apr '16

23 Apr '16

commit 669c0fb65f369ffa0b1153ffdc5ef7a7fb0010e7 Author: Translation commit bot <translation(a)torproject.org> Date: Sat Apr 23 02:45:34 2016 +0000 Update translations for tor-launcher-properties --- zh_CN/torlauncher.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/zh_CN/torlauncher.properties b/zh_CN/torlauncher.properties index 909fca6..336456b 100644 --- a/zh_CN/torlauncher.properties +++ b/zh_CN/torlauncher.properties @@ -36,7 +36,7 @@ torlauncher.quit_win=关闭 torlauncher.done=完成 torlauncher.forAssistance=如需帮助，请联系 %S -torlauncher.forAssistance2=For assistance, visit %S +torlauncher.forAssistance2=如需帮助，请访问 %S torlauncher.copiedNLogMessages=复制完成。%S 条 Tor 日志信息已准备好，可以将其粘贴到文本编辑器或电子邮件中。

1 0

[tor-browser/tor-browser-45.0.2esr-6.x-1] Bug 16998: Disable link rel=preconnect
by gk＠torproject.org 22 Apr '16

22 Apr '16

commit e4606f2da9c79fec5f1f8cda10869063e640af9e Author: Arthur Edelstein <arthuredelstein(a)gmail.com> Date: Fri Apr 22 14:39:14 2016 -0700 Bug 16998: Disable link rel=preconnect --- dom/base/nsDocument.cpp | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/dom/base/nsDocument.cpp b/dom/base/nsDocument.cpp index a4181ef..719c274 100644 --- a/dom/base/nsDocument.cpp +++ b/dom/base/nsDocument.cpp @@ -9704,6 +9704,10 @@ nsDocument::MaybePreLoadImage(nsIURI* uri, const nsAString &aCrossOriginAttr, void nsDocument::MaybePreconnect(nsIURI* aOrigURI, mozilla::CORSMode aCORSMode) { + // Tor Browser: Here we disable <link rel="preconnect"> + // See #16998. + // TODO: Isolate preconnect by first party. +/* nsCOMPtr<nsIURI> uri; if (NS_FAILED(aOrigURI->Clone(getter_AddRefs(uri)))) { return; @@ -9738,6 +9742,7 @@ nsDocument::MaybePreconnect(nsIURI* aOrigURI, mozilla::CORSMode aCORSMode) } else { speculator->SpeculativeConnect(uri, nullptr); } +*/ } void

1 0

[tor-browser-bundle/master] Add changelog for 6.0a5
by gk＠torproject.org 22 Apr '16

22 Apr '16

commit 74beabeb2ead3694e0c258e20e80d9da58df9270 Author: Georg Koppen <gk(a)torproject.org> Date: Fri Apr 22 21:32:57 2016 +0000 Add changelog for 6.0a5 --- Bundle-Data/Docs/ChangeLog.txt | 56 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 56 insertions(+) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 8c5d733..4719c8b 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,59 @@ +Tor Browser 6.0a5 -- April 27 + * All Platforms + * Update Firefox to 45.1.0esr + * Update Tor to 0.2.8.2-alpha + * Update Torbutton to 1.9.5.3 + * Bug 18466: Make Torbutton compatible with Firefox ESR 45 + * Translation updates + * Update Tor Launcher to 0.2.9.1 + * Bug 13252: Do not store data in the application bundle + * Bug 10534: Don't advertise the help desk directly anymore + * Translation updates + * Update HTTPS-Everywhere to 5.1.6 + * Update NoScript to 2.9.0.11 + * Update meek to 0.22 (tag 0.22-18371-2) + * Bug 18371: Symlinks are incompatible with Gatekeeper signing + * Bug 15197 and child tickets: Rebase Tor Browser patches to ESR 45 + * Bug 18042: Disable SHA1 certificate support + * Bug 18821: Disable libmdns support for desktop and mobile + * Bug 18848: Disable additional welcome URL shown on first start + * Bug 14970: Exempt our extensions from signing requirement + * Bug 16328: Disable MediaDevices.enumerateDevices + * Bug 16673: Disable HTTP Alternative-Services + * Bug 17167: Disable Mozilla's tracking protection + * Bug 18603: Disable performance-based WebGL fingerprinting option + * Bug 18738: Disable Selfsupport and Unified Telemetry + * Bug 18799: Disable Network Tickler + * Bug 18800: Remove DNS lookup in lockfile code + * Bug 18801: Disable dom.push preferences + * Bug 18802: Remove the JS-based Flash VM (Shumway) + * Bug 18863: Disable MozTCPSocket explicitly + * Bug 15640: Place Canvas MediaStream behind site permission + * Bug 16326: Verify cache isolation for Request and Fetch APIs + * Bug 18741: Fix OCSP and favicon isolation for ESR 45 + * Bug 16998: Disable <link rel="preconnect"> for now + * Bug 18726: Add new default obfs4 bridge (GreenBelt) + * Windows + * Bug 13419: Support ICU in Windows builds + * Bug 16874: Fix broken https://sports.yahoo.com/dailyfantasy page + * Bug 18767: Context menu is broken on Windows in ESR 45 based Tor Browser + * OS X + * Bug 6540: Support OS X Gatekeeper + * Bug 13252: Tor Browser should not store data in the application bundle + * Build System + * All Platforms + * Bug 18127: Add LXC support for building with Debian guest VMs + * Bug 16224: Don't use BUILD_HOSTNAME anymore in Firefox builds + * Windows + * Bug 17895: Use NSIS 2.51 for installer to avoid DLL hijacking + * Bug 18290: Bump mingw-w64 commit we use + * OS X + * Bug 18331: Update toolchain for Firefox 45 ESR + * Bug 18690: Switch to Debian Wheezy guest VMs + * Linux + * Bug 18699: Stripping fails due to obsolete Browser/components directory + * Bug 18698: Include libgconf2-dev for our Linux builds + Tor Browser 6.0a4-hardened -- March 17 2016 * All Platforms * Update Firefox to 38.7.1esr

1 0