- tor-commits - lists.torproject.org

[webwml/master] point to "no backdoor" video
by arma＠torproject.org 11 Mar '16

11 Mar '16

commit 1660b67da42139b2736f5d274fa87096539e6fc0 Author: Roger Dingledine <arma(a)torproject.org> Date: Fri Mar 11 16:33:42 2016 -0500 point to "no backdoor" video make the support question point to the contact page --- docs/en/faq.wml | 45 ++++++++++----------------------------------- 1 file changed, 10 insertions(+), 35 deletions(-) diff --git a/docs/en/faq.wml b/docs/en/faq.wml index 024ae9a..966317b 100644 --- a/docs/en/faq.wml +++ b/docs/en/faq.wml @@ -404,16 +404,17 @@ Tor and HTTPS</a> to understand how Tor and HTTPS interact. can I use with Tor?</a></h3> <p> - If you want to use Tor with a web browser, we provide the Tor Browser, + Most people use Tor Browser, which includes everything you need to browse the web safely using - Tor. If you want to use another web browser with Tor, see <a - href="#TBBOtherBrowser">Other web browsers</a>. + Tor. Using other browsers is <a href="#TBBOtherBrowser">dangerous + and not recommended</a>. </p> <p> There are plenty of other programs you can use with Tor, but we haven't researched the application-level anonymity issues on all of them well enough to be able to recommend a safe - configuration. Our wiki has a list of instructions for <a + configuration. Our wiki has a community-maintained list of + instructions for <a href="<wiki>doc/TorifyHOWTO">Torifying specific applications</a>. Please add to these lists and help us keep them accurate! @@ -464,6 +465,9 @@ Tor?</a></h3> </p> <p> + We will <a + href="https://media.ccc.de/v/31c3_-_6251_-_en_-_saal_1_-_201412301400_-_state_of_…">never</a> + put a backdoor in Tor. We think that putting a backdoor in Tor would be tremendously irresponsible to our users, and a bad precedent for security software in general. If we ever put a deliberate backdoor in our @@ -534,43 +538,14 @@ Tor?</a></h3> our <a href="<page docs/trademark-faq>">trademark FAQ</a> for details. </p> - <p> - Lastly, you should realize that we release new versions of the - Tor software frequently, and sometimes we make backward incompatible - changes. So if you distribute a particular version of the Tor software, it - may not be supported — or even work — six months later. This - is a fact of life for all security software under heavy development. - </p> - <hr> <a id="SupportMail"></a> <h3><a class="anchor" href="#SupportMail">How can I get support?</a></h3> - <p>Your best bet is to first try the following:</p> - <ol> - <li>Read through this <a href="<page docs/faq>">FAQ</a>.</li> - <li>Read through the <a href="<page -docs/documentation>">documentation</a>.</li> - <li>Read through the <a - -href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk"> -tor-talk - archives</a> and see if your question is already answered.</li> - <li>Join our <a href="ircs://irc.torproject.org#tor">irc channel</a> -and - state the issue and wait for help.</li> - <li>Send an email to <a - -href="mailto:help@rt.torproject.org">help(a)rt.torproject.org</a>.</li> - <li>If all else fails, try <a href="<page about/contact>">contacting -us</a> directly.</li> - </ol> - - <p>If you find your answer, please stick around on the IRC channel -or the - mailing list to help others who were once in your position.</p> + <p>See the <a href="<page about/contact>#support">Support section + on the contact page</a>. <hr>

1 0

[webwml/master] resurrect the support section. remove the telephone section.
by arma＠torproject.org 11 Mar '16

11 Mar '16

commit cad27725b4370900854c5bc925f7a410c76cec91 Author: Roger Dingledine <arma(a)torproject.org> Date: Fri Mar 11 16:31:17 2016 -0500 resurrect the support section. remove the telephone section. --- about/en/contact.wml | 32 ++++++++++++++++++++++---------- 1 file changed, 22 insertions(+), 10 deletions(-) diff --git a/about/en/contact.wml b/about/en/contact.wml index 60d859c..9e26561 100644 --- a/about/en/contact.wml +++ b/about/en/contact.wml @@ -22,10 +22,10 @@ <li><a href="#security">Security Issues</a></li> </ul> -  + <p>If you have questions about using Tor:</p> + <ol> + <li>Read through the <a href="<page docs/faq>">FAQ</a> and the + <a href="<page docs/documentation>">documentation</a>.</li> + <li>See if your question is asked or answered on our + <a href="https://tor.stackexchange.com/">StackExchange page</a>.</li> + <li>Join the <a href="#irc">#tor irc channel</a>, state the issue, + and wait patiently for help.</li> + <li>Read through the archives of the + <a href="<page docs/documentation>#MailingLists">mailing lists</a> + to see if anybody else has raised your issue recently. Note that + you need to subscribe to the mailing lists before you can post.</li> + </ol> + + <p>If you find your answer, please stick around to contribute back + and help others who were once in your position.</p> + <a id="email"></a> <h3><a class="anchor" href="#email">Email</a></h3> -  + <p>If you have Tor questions, please try to help yourself via the + above support venues.</p> <ul> - <li><i>tor-talk(a)lists.torproject.org</i> is for all discussion - about theory, design, development, and use of Onion Routing. - <i>tor-dev(a)lists.torproject.org</i> is for Tor research and - development. For both of these <a href="<page - docs/documentation>#MailingLists">mailing lists</a>, - you must subscribe before you can post.</li> <li><i>donations(a)torproject.org</i> is for questions and comments about <a href="<page donate/donate>">getting money to the developers</a>. More donations means <a href="<page docs/faq>#Funding">more @@ -92,6 +102,7 @@ </ul> </p> + <a id="mail"></a> <h3><a class="anchor" href="#mail">Mailing Address</a></h3>

1 0

[webwml/master] clean up the 'how is tor different' section
by arma＠torproject.org 11 Mar '16

11 Mar '16

commit b5f1407d2a89d400a508268057ab1f2115503299 Author: Roger Dingledine <arma(a)torproject.org> Date: Fri Mar 11 16:05:54 2016 -0500 clean up the 'how is tor different' section --- docs/en/faq.wml | 72 +++++++++++++++++++++++---------------------------------- 1 file changed, 29 insertions(+), 43 deletions(-) diff --git a/docs/en/faq.wml b/docs/en/faq.wml index f8d3566..024ae9a 100644 --- a/docs/en/faq.wml +++ b/docs/en/faq.wml @@ -301,25 +301,22 @@ things?</a></li> </p> <p> - The Tor software is a program you can run on your computer that -helps keep - you safe on the Internet. Tor protects you by bouncing your -communications + Tor is a program you can run on your computer that helps keep + you safe on the Internet. It protects you by bouncing your communications around a distributed network of relays run by volunteers all around - the world: it prevents somebody watching your Internet connection -from + the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit - from learning your physical location. This set of volunteer relays -is - called the Tor network. You can read more about how Tor works on the -<a - href="<page about/overview>">overview page</a>. + from learning your physical location. + This set of volunteer relays is called the <b>Tor network</b>. + The way most people use Tor is with <b>Tor Browser</b>, + which is a version of Firefox that fixes many privacy issues. + You can read more about how Tor works on the <a href="<page + about/overview>">overview page</a>. </p> <p> - The Tor Project is a non-profit (charity) organization that -maintains - and develops the Tor software. + The <b>Tor Project</b> is a non-profit (charity) organization that + maintains and develops the Tor software. </p> <hr> @@ -342,47 +339,38 @@ install anything. You just have to point your browser at their proxy server. Simple proxy providers are fine solutions if you do not want protections for -your privacy and anonymity online and you trust the provider from doing +your privacy and anonymity online and you trust the provider to not do bad things. Some simple proxy providers use SSL to secure your connection -to them. -This may protect you against local eavesdroppers, such as those at a -cafe with -free wifi Internet. +to them, which protects you against local eavesdroppers, such as those at a +cafe with free wifi Internet. </p> <p> Simple proxy providers also create a single point of failure. The provider -knows who you are and where you browse on the Internet. They can see +knows both who you are and what you browse on the Internet. They can see your traffic as it passes through their server. In some cases, they can even see inside your encrypted traffic as they relay it to your banking site or to ecommerce stores. -You have to trust the provider isn't doing any number of things, such as +You have to trust the provider isn't watching your traffic, injecting their own advertisements into your traffic -stream, and recording your personal details. +stream, or recording your personal details. </p> <p> Tor passes your traffic through at least 3 different servers before sending it on to the destination. Because there's a separate layer of encryption for -each of the three relays, Tor does not modify, or even know, what you -are -sending into it. It merely relays your traffic, completely encrypted -through -the Tor network and has it pop out somewhere else in the world, -completely -intact. The Tor client is required because we assume you trust your -local -computer. The Tor client manages the encryption and the path chosen -through -the network. The relays located all over the world merely pass -encrypted -packets between themselves.</p> +each of the three relays, somebody watching your Internet connection +can't modify, or read, what you are +sending into the Tor network. Your traffic is encrypted between the Tor +client (on your computer) and where it pops out somewhere else in the +world. +</p> <p> <dl> <dt>Doesn't the first server see who I am?</dt><dd>Possibly. A bad @@ -395,18 +383,16 @@ merely sees world, so using Tor by itself is fine. You are still protected from this node figuring -out who you are and where you are going on the Internet.</dd> +out both who you are and where you are going on the Internet.</dd> <dt>Can't the third server see my traffic?</dt><dd>Possibly. A bad third of three servers can see the traffic you sent into Tor. It won't know who sent -this traffic. If you're using encryption, such as visiting a bank or -e-commerce website, or encrypted mail connections, etc, it will only -know the -destination. It won't be able to see the data inside the traffic -stream. You -are still protected from this node figuring out who you are and if using -encryption, what data you're sending to the destination.</dd> +this traffic. If you're using encryption (like +HTTPS), it will only know the destination. See <a +href="https://www.eff.org/pages/tor-and-https">this visualization of +Tor and HTTPS</a> to understand how Tor and HTTPS interact. +</dd> </dl> </p>

1 0

[webwml/master] get rid of the table of contents for the table of contents
by arma＠torproject.org 11 Mar '16

11 Mar '16

commit a5d7a5e3da014b37524eaf43396d893f02624859 Author: Roger Dingledine <arma(a)torproject.org> Date: Fri Mar 11 14:37:01 2016 -0500 get rid of the table of contents for the table of contents --- docs/en/faq.wml | 14 -------------- 1 file changed, 14 deletions(-) diff --git a/docs/en/faq.wml b/docs/en/faq.wml index 4c082db..f8d3566 100644 --- a/docs/en/faq.wml +++ b/docs/en/faq.wml @@ -14,20 +14,6 @@ <h1>Tor FAQ</h1> <hr> - <p><a href="#General">General questions:</a><br /> - <a href="#CompilationAndInstallation">Compilation and Installation:</a><br /> - <a href="#TBBGeneral">Tor Browser (general):</a><br /> - <a href="#TBB3.x">Tor Browser (3.x and later):</a><br /> - <a href="#AdvancedTorUsage">Advanced Tor usage:</a><br /> - <a href="#RunningATorRelay">Running a Tor relay:</a><br /> - <a href="#TorHiddenServices">Tor hidden services:</a><br /> - <a href="#Development">Development:</a><br /> - <a href="#AnonymityAndSecurity">Anonymity and Security:</a><br /> - <a href="#AlternateDesigns">Alternate designs that we don't do (yet):</a><br /> - <a href="#Abuse">Abuse:</a></p> - -<hr> - <p>General questions:</p> <ul> <li><a href="#WhatIsTor">What is Tor?</a></li>

1 0

[torspec/master] tiny tweak to proposal 264
by arma＠torproject.org 11 Mar '16

11 Mar '16

commit 21a6b6b4ea899dbb7a088cdc0ac37525024bf58e Author: Roger Dingledine <arma(a)torproject.org> Date: Fri Mar 11 14:17:08 2016 -0500 tiny tweak to proposal 264 --- proposals/264-subprotocol-versions.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/proposals/264-subprotocol-versions.txt b/proposals/264-subprotocol-versions.txt index 7d84228..240422b 100644 --- a/proposals/264-subprotocol-versions.txt +++ b/proposals/264-subprotocol-versions.txt @@ -273,7 +273,7 @@ Status: Open A.1. Inferring missing protos lines. The directory authorities no longer allow versions of Tor before - 0.2.4.8-alpha. But right now, there is no version of Tor in the + 0.2.4.18-rc. But right now, there is no version of Tor in the consensus before 0.2.4.19. Therefore, we should disallow versions of Tor earlier than 0.2.4.19, so that we can have the protocol list for all current Tor versions include:

1 0

[doctor/master] Add IP addresses for LizardNSA outside of the network blocks
by atagar＠torproject.org 11 Mar '16

11 Mar '16

commit 76daa69e754b1bc1df1f70ffcbc76a67f194b6d0 Author: David Goulet <dgoulet(a)ev0ke.net> Date: Wed Mar 9 13:25:35 2016 -0500 Add IP addresses for LizardNSA outside of the network blocks Signed-off-by: David Goulet <dgoulet(a)ev0ke.net> --- data/tracked_relays.cfg | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/data/tracked_relays.cfg b/data/tracked_relays.cfg index 5b01e43..6ee4e23 100644 --- a/data/tracked_relays.cfg +++ b/data/tracked_relays.cfg @@ -35,3 +35,19 @@ LizardNSA.address 192.158.28.0/22 LizardNSA.address 199.223.232.0/21 LizardNSA.address 23.236.48.0/20 LizardNSA.address 23.251.128.0/19 + +# Invidual addresses. +LizardNSA.address 104.155.194.175 +LizardNSA.address 104.155.196.158 +LizardNSA.address 104.155.197.125 +LizardNSA.address 104.155.199.128 +LizardNSA.address 104.155.200.87 +LizardNSA.address 104.155.207.129 +LizardNSA.address 104.155.207.163 +LizardNSA.address 104.155.207.42 +LizardNSA.address 107.167.177.9 +LizardNSA.address 107.167.180.96 +LizardNSA.address 107.167.183.218 +LizardNSA.address 107.167.183.98 +LizardNSA.address 107.167.184.244 +LizardNSA.address 108.59.82.108

1 0

[nyx/master] Fix the nyx cpu usage so now only one decimal digit is showed
by atagar＠torproject.org 11 Mar '16

11 Mar '16

commit 922bbcc6367f5b414d42ba0cbd30747ffbbd5c5b Author: patacca <patacca(a)autistici.org> Date: Thu Mar 10 19:47:36 2016 +0100 Fix the nyx cpu usage so now only one decimal digit is showed --- nyx/controller.py | 4 ++-- nyx/panel/header.py | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/nyx/controller.py b/nyx/controller.py index 318df4b..5e4f1b9 100644 --- a/nyx/controller.py +++ b/nyx/controller.py @@ -286,8 +286,8 @@ class Controller: Redraws the displayed panel content. Arguments: - force - redraws reguardless of if it's needed if true, otherwise ignores - the request when there arne't changes to be displayed + force - redraws regardless of if it's needed if true, otherwise ignores + the request when there aren't changes to be displayed """ force |= self._force_redraw diff --git a/nyx/panel/header.py b/nyx/panel/header.py index 0d6591a..338ca63 100644 --- a/nyx/panel/header.py +++ b/nyx/panel/header.py @@ -472,7 +472,7 @@ def get_sampling(last_sampling = None): 'nyx_total_cpu_time': nyx_total_cpu_time, 'tor_cpu': '%0.1f' % (100 * tor_resources.cpu_sample), - 'nyx_cpu': nyx_cpu, + 'nyx_cpu': '%0.1f' % (nyx_cpu), 'memory': str_tools.size_label(tor_resources.memory_bytes) if tor_resources.memory_bytes > 0 else 0, 'memory_percent': '%0.1f' % (100 * tor_resources.memory_percent),

1 0

[nyx/master] Bugfix: Now bandwidth graph is displayed correctly
by atagar＠torproject.org 11 Mar '16

11 Mar '16

commit 1393a025fe2ccf16eec8d16bcda84638be269cd8 Author: patacca <patacca(a)autistici.org> Date: Thu Mar 10 19:53:23 2016 +0100 Bugfix: Now bandwidth graph is displayed correctly --- nyx/panel/graph.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nyx/panel/graph.py b/nyx/panel/graph.py index 086d04d..ecf7c1e 100644 --- a/nyx/panel/graph.py +++ b/nyx/panel/graph.py @@ -214,7 +214,7 @@ class GraphCategory(object): pass - def _header(self, is_primary, width): + def _header(self, width, is_primary): if is_primary: header = CONFIG['attr.graph.header.primary'].get(self.stat_type(), '') header_stats = self._primary_header_stats

1 0

[nyx/master] features.refreshRate must be in range(1, 25.5)
by atagar＠torproject.org 11 Mar '16

11 Mar '16

commit e1f2130a10e1686b4ac74095a9762178ac88dbbf Author: patacca <patacca(a)autistici.org> Date: Thu Mar 10 19:54:49 2016 +0100 features.refreshRate must be in range(1,25.5) --- nyx/controller.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/nyx/controller.py b/nyx/controller.py index 5e4f1b9..8585fa7 100644 --- a/nyx/controller.py +++ b/nyx/controller.py @@ -30,7 +30,8 @@ NYX_CONTROLLER = None def conf_handler(key, value): if key == 'features.redrawRate': - return max(1, value) + # https://docs.python.org/2/library/curses.html?#curses.halfdelay + return min(max(1, value), 25.5) elif key == 'features.refreshRate': return max(0, value)

1 0

[nyx/master] Implemented right to left scrolling (ticket #15160)
by atagar＠torproject.org 11 Mar '16

11 Mar '16

commit c32b0e121be823fd186fae37c2819f873421317f Author: patacca <patacca(a)autistici.org> Date: Thu Mar 10 19:58:21 2016 +0100 Implemented right to left scrolling (ticket #15160) --- nyx/panel/graph.py | 14 +++++++++++--- 1 file changed, 11 insertions(+), 3 deletions(-) diff --git a/nyx/panel/graph.py b/nyx/panel/graph.py index ecf7c1e..7df5929 100644 --- a/nyx/panel/graph.py +++ b/nyx/panel/graph.py @@ -28,7 +28,7 @@ GraphStat = enum.Enum(('BANDWIDTH', 'bandwidth'), ('CONNECTIONS', 'connections') Interval = enum.Enum(('EACH_SECOND', 'each second'), ('FIVE_SECONDS', '5 seconds'), ('THIRTY_SECONDS', '30 seconds'), ('MINUTELY', 'minutely'), ('FIFTEEN_MINUTE', '15 minute'), ('THIRTY_MINUTE', '30 minute'), ('HOURLY', 'hourly'), ('DAILY', 'daily')) Bounds = enum.Enum(('GLOBAL_MAX', 'global_max'), ('LOCAL_MAX', 'local_max'), ('TIGHT', 'tight')) -DrawAttributes = collections.namedtuple('DrawAttributes', ('stat', 'subgraph_height', 'subgraph_width', 'interval', 'bounds_type', 'accounting')) +DrawAttributes = collections.namedtuple('DrawAttributes', ('stat', 'subgraph_height', 'subgraph_width', 'interval', 'bounds_type', 'accounting', 'right_to_left')) INTERVAL_SECONDS = { Interval.EACH_SECOND: 1, @@ -78,6 +78,7 @@ CONFIG = conf.config_dict('nyx', { 'features.graph.interval': Interval.EACH_SECOND, 'features.graph.bound': Bounds.LOCAL_MAX, 'features.graph.max_width': 300, # we need some sort of max size so we know how much graph data to retain + 'features.graph.right_to_left': False, 'features.panels.show.connection': True, 'features.graph.bw.transferInBytes': False, 'features.graph.bw.accounting.show': True, @@ -554,6 +555,7 @@ class GraphPanel(panel.Panel): interval = self.update_interval, bounds_type = self.bounds_type, accounting = self.get_attr('_accounting_stats'), + right_to_left = CONFIG['features.graph.right_to_left'], ) if self.is_title_visible(): @@ -586,7 +588,10 @@ class GraphPanel(panel.Panel): self.addstr(1, x, data.header(attr.subgraph_width), curses.A_BOLD, color) for x_offset, label in x_axis_labels.items(): - self.addstr(attr.subgraph_height, x + x_offset + axis_offset, label, color) + if attr.right_to_left: + self.addstr(attr.subgraph_height, x + attr.subgraph_width - x_offset, label, color) + else: + self.addstr(attr.subgraph_height, x + x_offset + axis_offset, label, color) for y, label in y_axis_labels.items(): self.addstr(y, x, label, color) @@ -596,7 +601,10 @@ class GraphPanel(panel.Panel): column_height = int(min(attr.subgraph_height - 2, (attr.subgraph_height - 2) * column_count / (max(1, max_bound) - min_bound))) for row in range(column_height): - self.addstr(attr.subgraph_height - 1 - row, x + col + axis_offset + 1, ' ', curses.A_STANDOUT, color) + if attr.right_to_left: + self.addstr(attr.subgraph_height - 1 - row, x + attr.subgraph_width - col - 1, ' ', curses.A_STANDOUT, color) + else: + self.addstr(attr.subgraph_height - 1 - row, x + col + axis_offset + 1, ' ', curses.A_STANDOUT, color) def _get_graph_bounds(self, attr, data, subgraph_columns): """

1 0