- tor-commits - lists.torproject.org

[webwml/staging] List GSoC idea under the project
by arma＠torproject.org 10 Mar '16

10 Mar '16

commit 2a4999e7a887bed84e91cd84919744eae69cf47c Author: Damian Johnson <atagar(a)torproject.org> Date: Wed Feb 24 08:31:18 2016 -0800 List GSoC idea under the project Oops, I've been striving to include task ideas under the project they're related to. --- getinvolved/en/volunteer.wml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index cd4908f..c1a36c9 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -693,6 +693,11 @@ meetings around the world.</li> Onions</a> research paper. + + Project Ideas: + <a href="#exitmap_improvements">Exitmap Improvements</a> + + <a id="project-doctor"></a> <h3>DocTor (<a href="https://gitweb.torproject.org/doctor.git">code</a>, <a

1 0

[webwml/staging] Add 'Implement and Integrate CONIKS for Tor Messenger' project idea
by arma＠torproject.org 10 Mar '16

10 Mar '16

commit a7cbf704197e8494bb63d80885f7b99dfadbb0df Author: Damian Johnson <atagar(a)torproject.org> Date: Tue Feb 23 09:37:14 2016 -0800 Add 'Implement and Integrate CONIKS for Tor Messenger' project idea Project idea courtesy of Arlo. --- getinvolved/en/volunteer.wml | 72 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 72 insertions(+) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index 4eda17c..cd4908f 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -1371,6 +1371,78 @@ tampering. Third, unit tests should be added for existing and new code in order to make the code base more robust. </li> + + <a id="coniks_in_messenger"></a> + <li> + Implement and Integrate CONIKS for Tor Messenger + + Effort Level: Medium + + Skill Level: Medium + + Likely Mentors: Marcela, Arlo (arlolra) + +CONIKS is an end-user key management and verification system for end-to-end +secure communication services, which improves upon existing key management +systems by providing both strong security and better usability using a model +called key transparency. CONIKS does this by requiring providers to manage +tamper-evident, publicly-auditable key directories, which contain mappings from +usernames to public keys, on behalf of their users. This design makes it easier +for users (both "default" users and power users) to establish trust since they +don't have to worry about or even see keys, but users also don't have to +trust the provider to be well-behaved because the CONIKS client can run as +part of the secure messaging app and automatically check that the service +provider doesn’t map spurious keys to their users' usernames, and it can +verify that observed name-to-key mappings are consistent with what other +clients in the system are seeing. Unlike existing key transparency solutions, +CONIKS also provides strong privacy guarantees by employing cryptographic +primitives for robust data obfuscation. + + + +The CONIKS system design, protocols, and proof-of-concept are described in +great detail in the <a +href="https://www.usenix.org/system/files/conference/usenixsecurity15/sec15-paper…">CONIKS +research paper</a>, and basic reference implementations of a CONIKS key server +and a CONIKS client are avialable on <a +href="https://github.com/coniks-sys/coniks-ref-implementation">Github</a>. + + + +This project has two main components: (1) designing and implementing a CONIKS +key server tailored to Tor Messenger users, and (2) building a CONIKS client +which integrates with the Tor Messenger client. One challenge the applicant +will face is ensuring that the key server design is efficient and scalable for +large volumes of users, concurrent traffic and guarantees this scalability even +as Tor Messenger's user base grows. On the client side, the main challenges +will be to focus on space efficiency as well as minimizing computational +overhead when implementing the CONIKS consistency checks, and determining how +to best communicate CONIKS consistency check results to users in the UI. Since +Tor Messenger does not hand out online identities per se, as most online +communication services do (like, say, Twitter, in which each user has a unique +handle), the CONIKS key server for Tor Messenger will have to map usernames +from third-party communication services to the encryption keys used in Tor +Messenger. One additional important challenge that the applicant will have to +help address is ensuring that each such third-party username remains unique in +the Tor Messenger space and that such external, third-party identities are +indeed controlled by the expected user of that third-party communication +service. + + + +Some design and implementation questions have been discussed in <a +href="https://trac.torproject.org/projects/tor/ticket/17961">Ticket #17961</a>. + + + +The applicant should have some familiarity with well-known crypto primitives +and algorithms, as well as have a basic understanding of the key transparency +model. Client side integration will require some basic use of JavaScript. +Consider submitting a patch for <a +href="https://github.com/arlolra/ctypes-otr/issues">one of the open key +verification issues</a> as part of the application process. + + </li> <!-- <a id=""></a> <li>

1 0

[webwml/staging] Drop commented out project ideas
by arma＠torproject.org 10 Mar '16

10 Mar '16

commit cfd38ff48e4be6fc21f7d0556073c70f6fc37626 Author: Damian Johnson <atagar(a)torproject.org> Date: Tue Feb 23 09:30:20 2016 -0800 Drop commented out project ideas They're invisible anyway, why burden page load with these? We can always resurrect them later if we want - that's what revision control is for after all! --- getinvolved/en/volunteer.wml | 149 ------------------------------------------- 1 file changed, 149 deletions(-) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index 25e7621..4eda17c 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -1089,55 +1089,6 @@ information see ticket 7416.</a> </li> - - <a id="improveTorTestCoverage"></a> <li> Improve test coverage in Tor @@ -1421,106 +1372,6 @@ in order to make the code base more robust. </li>  - - -<!-- <a id=""></a> <li>

1 0

[webwml/staging] Update TorBirdy description on the volunteer page
by arma＠torproject.org 10 Mar '16

10 Mar '16

commit e1434db26bd3a5930c6fb4095ef95486a61ecc7c Author: Sukhbir Singh <sukhbir(a)torproject.org> Date: Tue Feb 23 15:52:51 2016 -0500 Update TorBirdy description on the volunteer page --- getinvolved/en/volunteer.wml | 32 ++++++++++++-------------------- 1 file changed, 12 insertions(+), 20 deletions(-) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index c1a36c9..4c7d4df 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -1027,40 +1027,32 @@ meetings around the world.</li> TorBirdy is an extension that configures Thunderbird to make connections over the Tor anonymity network. TorBirdy has been under development for quite a while but there are two known leaks that prevent it from being used by a wider -audience. As part of this project, you will be working on plugging the known -leaks and implementing a HTTP proxy. +audience. As part of this project, you will be working on implementing a HTTP +proxy. -Part 1: There are two patches pending with Mozilla that will plug the two known -leaks in Thunderbird where the local time is disclosed through the date and the -message-ID header. As part of your project, you will work on getting these -patches finished/reimplemented and getting them merged with Mozilla. Please -look at tickets <a -href="https://trac.torproject.org/projects/tor/ticket/6314">#6314</a> and <a -href="https://trac.torproject.org/projects/tor/ticket/6315">#6315</a> for more -information. - -Part 2: TorBirdy needs a HTTP proxy or a HTTP -> SOCKS5 shim. Please look at +HTTP Proxy TorBirdy needs a HTTP proxy or a HTTP -> SOCKS5 shim. Please look at ticket <a href="https://trac.torproject.org/projects/tor/ticket/6958">#6958</a> -for more information. Note: this has to be done using JavaScript and not using +for more information. Note: this has to be done using JavaScript and without using an external proxy. If time permits and you are awesome enough to finish the above two tasks, you -will be working on the remaining TorBirdy tickets. +will be working on the <a href="https://trac.torproject.org/projects/tor/query?status=!closed&component=Tor…"> +remaining TorBirdy tickets</a>. -Applicants should be familiar with C++ and JavaScript. As part of your -application for this project, please submit code samples for previous C++ and -JavaScript projects that you have developed or point us to projects you have -been involved with (links to a public Git/GitHub repository preferred). Prior -extension development is a big plus and will be given preference during -application ranking. +Applicants should be familiar with JavaScript (and preferably C++ as well). As +part of your application for this project, please submit code samples for +previous JavaScript projects that you have developed, or point us to projects +you have been involved with (links to a public Git/GitHub repository +preferred). Prior extension development is a big plus and will be given +preference during application ranking.

1 0

[webwml/staging] Add Tor Messenger to volunteer page and update link for TorBirdy
by arma＠torproject.org 10 Mar '16

10 Mar '16

commit 6e6fe7d2a54c999d9d859f367d711a3cd1c2b514 Author: Sukhbir Singh <sukhbir(a)torproject.org> Date: Wed Feb 24 11:24:39 2016 -0500 Add Tor Messenger to volunteer page and update link for TorBirdy --- getinvolved/en/volunteer.wml | 19 ++++++++++++++++++- 1 file changed, 18 insertions(+), 1 deletion(-) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index 4c7d4df..47b661f 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -197,6 +197,14 @@ meetings around the world.</li> </tr> <tr> + <td><a href="#project-tormessenger">Tor Messenger</a></td> + <td>Bundle</td> + <td>JavaScript, XUL, Scripting</td> + <td>Heavy</td> + <td>arlolra, boklm, sukhe</td> + </tr> + + <tr> <td><a href="#project-torbirdy">TorBirdy</a></td> <td>Browser Add-on</td> <td>JavaScript</td> @@ -505,9 +513,18 @@ meetings around the world.</li> otherwise feature complete. + <a id="project-tormessenger"></a> + <h3><a href="https://trac.torproject.org/projects/tor/wiki/doc/TorMessenger">Tor Messenger</a> (<a + href="https://gitweb.torproject.org/tor-messenger-build.git">code</a>, <a + href="https://trac.torproject.org/projects/tor/query?status=!closed&component=Tor…">bug tracker</a>)</h3> + + + Tor Messenger is a cross-platform chat program that aims to be secure by default and sends all of its traffic over Tor. + + <a id="project-torbirdy"></a> <h3>TorBirdy (<a - href="https://github.com/ioerror/torbirdy">code</a>, <a + href="https://gitweb.torproject.org/torbirdy.git">code</a>, <a href="https://trac.torproject.org/projects/tor/wiki/torbirdy/dev">bug tracker</a>)</h3>

1 0

[webwml/staging] Drop 'Txtorcon/Stem Integration'
by arma＠torproject.org 10 Mar '16

10 Mar '16

commit 5c8c2cfb93b5ebc64e5cd6839926bc12b925608c Author: Damian Johnson <atagar(a)torproject.org> Date: Thu Feb 25 08:44:18 2016 -0800 Drop 'Txtorcon/Stem Integration' Meejah isn't inclined to mentor this over the summer so dropping it. --- getinvolved/en/volunteer.wml | 45 -------------------------------------------- 1 file changed, 45 deletions(-) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index 94457de..a95141c 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -600,11 +600,6 @@ meetings around the world.</li> Tor. - - Project Ideas: - <a href="#txtorcon-stemIntegration">Txtorcon/Stem Integration</a> - - <a id="project-txtorcon"></a> <h3><a href="https://txtorcon.readthedocs.org">Txtorcon</a> (<a href="https://github.com/meejah/txtorcon">code</a>, <a @@ -616,11 +611,6 @@ meetings around the world.</li> Used by OONI and APAF. - - Project Ideas: - <a href="#txtorcon-stemIntegration">Txtorcon/Stem Integration</a> - - <a id="project-tlsdate"></a> <h3>Tlsdate (<a href="https://github.com/ioerror/tlsdate">code</a>)</h3> @@ -856,41 +846,6 @@ meetings around the world.</li> <ol> - <a id="txtorcon-stemIntegration"></a> - <li> - Txtorcon/Stem Integration - - Effort Level: Medium - - Skill Level: Medium - - Likely Mentors: meejah, Damian (atagar) - Txtorcon is a Twisted-based Python controller library, and Stem is a - synchronous (threaded) one, also in Python. There is no need to have - two implementations of (at least) the protocol parsing code. This - project would entail eliminating duplication by leveraging Stem's - parsing in txtorcon while keeping txtorcon's API the same (or at least - close). - Besides this you should identify some additional tasks to improve our - controller space across these two libraries. Some ideas are... - <ul> - <li>Write a tutorial for <a - href="https://stem.torproject.org/tutorials.html">stem's tutorial - page</a> demonstrating cross txtorcon/stem usage.</li> - <li>Expand the txtorcon API to include functionality of <a - href="https://gitweb.torproject.org/stem.git/tree/stem/control.py">stem's - controller</a> that would be of interest to twisted users. All additions - should include tests!</li> - <li>Come up with some ideas of your own! We'd love to discuss them with - you.</li> - </ul> - This would very likely involve changes to both libraries, although - most would be expected to be in txtorcon. meejah is available to - mentor txtorcon changes, and Damian (atagar) can help with Stem. - It would help if you're already familiar with event-based programming, - bonus points if it's Twisted. - </li> - <a id="torCleanup"></a> <li> Tor Codebase Cleanup

1 0

[webwml/staging] Add 'Expand Nyx' project idea
by arma＠torproject.org 10 Mar '16

10 Mar '16

commit 4b64fbdd12bfe8b831531b2c169f99c53f94d02b Author: Damian Johnson <atagar(a)torproject.org> Date: Fri Feb 26 09:39:06 2016 -0800 Add 'Expand Nyx' project idea --- getinvolved/en/volunteer.wml | 51 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 51 insertions(+) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index a95141c..2800644 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -463,6 +463,11 @@ meetings around the world.</li> a bit more. + + Project Ideas: + <a href="#expand_nyx">Expand Nyx</a> + + <a id="project-orbot"></a> <h3><a href="https://guardianproject.info/apps/orbot/">Orbot</a> (<a href="https://gitweb.torproject.org/orbot.git">code</a>, <a @@ -1257,6 +1262,52 @@ in order to make the code base more robust. </li> + <a id="expand_nyx"></a> + <li> + Expand Nyx + + Effort Level: Medium + + Skill Level: Medium + + Likely Mentors: Damian (atagar) + +Nyx (previously known as <a href="https://www.atagar.com/arm/">arm</a>) is an +ncurses monitor that provides Tor relay operators... + + + <ul> + <li><a href="https://www.atagar.com/arm/images/screenshot_page1_full.png">bandwidth graphs and event log</a></li> + <li><a href="https://www.atagar.com/arm/images/screenshot_page2_full.png">connections</a></li> + <li><a href="https://www.atagar.com/arm/images/screenshot_page3_full.png">user's torrc</a></li> + <li><a href="https://www.atagar.com/arm/images/screenshot_configPanel_full.png">config editor</a></li> + </ul> + + +Nyx is presently under development in preparation for its next release. If you +like python, terminals, and collaborating on an active codebase this just might +be the project for you! + + + +Proposals should involve a grab-bag of moderately small improvements you'd like +to make. You're encouraged to brainstorm ideas of their own but here's a few to +get ya started... + + + <ul> + <li>Bring back the <a href="https://www.atagar.com/arm/images/screenshot_interpretor_full.png">interpreter panel</a>. This panel was dropped when refactoring Nyx, but it would be a neat component to bring back. You can <a href="https://gitweb.torproject.org/nyx.git/tree/src/cli/interpretorPanel.py?h=re…">find old code for it in the history</a> and Stem (the library backing Nyx) has a much improved <a href="https://stem.torproject.org/tutorials/down_the_rabbit_hole.html">variant of this we can leverage</a>. This task would involve writing the curses code around Stem's interpreter functions.</li> + <li>Windows support. Like most curses applications Nyx doesn't run natively on Windows. We've had dozens of users request this and <a href="https://trac.torproject.org/projects/tor/wiki/doc/arm#Windows">it should be possible</a>. This would involve supporting PDCurses and expanding Stem to be able to query the cpu/memory usage of the tor process.</li> + <li>Unit testing! Nyx has <a href="https://gitweb.torproject.org/nyx.git/tree/test">started adding tests</a> but it's still very minimal. Achieving any substantial code coverage will require us to figure out how to unit test curses components.</li> + <li>Onionoo provides additional relay information that could enrich our connection panel such as geoip and rdns. Trick is that at present we can only query it on a per-relay basis which would leak our connections (no-go for security). However, if we could get information about all relays in bulk it would sidestep this. For some old thoughts on this see <a href="https://trac.torproject.org/projects/tor/wiki/doc/arm#CircuitDetails">here</a>.</li> + <li>... and more! Again, don't hesitate to propose ideas of your own.</li> + </ul> + + + As part of your application for this project please get your hands wet with the codebase by contributing patches for <a href="https://gitweb.torproject.org/nyx.git">Nyx</a> and <a href="https://stem.torproject.org/faq.html#how-do-i-get-started">Stem</a>! + + </li> + <a id="coniks_in_messenger"></a> <li> Implement and Integrate CONIKS for Tor Messenger

1 0

[webwml/staging] Remove Nick from project ideas
by arma＠torproject.org 10 Mar '16

10 Mar '16

commit 0e1f64209805753f779e24623bf625fc8645b5c5 Author: Damian Johnson <atagar(a)torproject.org> Date: Thu Feb 25 08:40:43 2016 -0800 Remove Nick from project ideas Nick reports that he's unavailable to mentor this summer so dropping him from the project ideas. --- getinvolved/en/volunteer.wml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index 47b661f..566056a 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -899,7 +899,7 @@ meetings around the world.</li> Skill Level: Medium to High - Likely Mentors: Nick (nickm), David (dgoulet) + Likely Mentors: David (dgoulet) The Tor code is more than 10 years old in places, and we haven't always had enough time or wisdom to write things as well as we could have. Our unit @@ -1111,7 +1111,7 @@ information see ticket 7416.</a> Skill Level: Medium - Likely Mentors: Nick (nickm), David (dgoulet) + Likely Mentors: David (dgoulet) Right now, our unit test coverage with the tests we ship is around 30% -- only 30% of the executable lines in our source are reached by the @@ -1177,7 +1177,7 @@ easy to test.) Skill Level: Medium - Likely Mentors: Nick (nickm), David (dgoulet) + Likely Mentors: David (dgoulet) Right now, if you run a busy Tor server on a multicore computer, most of the cores are mostly unused. We have a "cpuworker" mechanism to move @@ -1227,7 +1227,7 @@ the codebase that you want to work on. Skill Level: Medium - Likely Mentors: Nick (nickm), David (dgoulet), George (asn) + Likely Mentors: David (dgoulet), George (asn) We're working on a revamp of the entire Tor hidden service design to improve the security and reliability of the hidden service system. @@ -1264,7 +1264,7 @@ the codebase that you want to work on. Skill Level: Medium - Likely Mentors: Nick (nickm), David (dgoulet) + Likely Mentors: David (dgoulet) Right now, you can only use Tor's DNS support to look up IPv4 and IPv6 addresses, and to fetch PTR records. But DNS can do so much more!

1 0

[webwml/staging] Drop 'Profile UDP transport protocols'
by arma＠torproject.org 10 Mar '16

10 Mar '16

commit 7f428a9449357a15771a8883156f1bf28ef2d814 Author: Damian Johnson <atagar(a)torproject.org> Date: Thu Feb 25 08:42:52 2016 -0800 Drop 'Profile UDP transport protocols' Yawning asked for this to be removed as it's likely too big for students this summer. --- getinvolved/en/volunteer.wml | 26 -------------------------- 1 file changed, 26 deletions(-) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index 1f5e08a..94457de 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -1005,32 +1005,6 @@ meetings around the world.</li> - <a id="profileUDPTransport"></a> - <li> - Profile UDP transport protocols - - Effort Level: Medium to High - - Skill Level: High - - Likely Mentors: Yawning - - There are <a - href="https://research.torproject.org/techreports/datagram-comparison-2011-11-07.…">lots - of options</a> as to how Tor could send its data over UDP rather than TCP, - and some will likely perform significantly better than others. This project - will evaluate these options, so as to decide which should be used in future - versions of Tor. A first step will be to benchmark the various transport - protocols being considered, in terms of performance and also code quality, - including userspace TCP, <a - href="https://github.com/bittorrent/libutp">μTP</a>, <a - href="http://en.wikipedia.org/wiki/Stream_Control_Transmission_Protocol">SCTP</a> - and <a href="http://curvecp.org/">CurveCP</a>. Initially these transport - protocols will be examined in isolation, but if the project progresses well - one or more could be integrated in Tor. - - </li> - <a id="makeTorbirdyBetter"></a> <li> Make TorBirdy Better

1 0

[webwml/staging] Drop 'Ahmia - Hidden Service Search'
by arma＠torproject.org 10 Mar '16

10 Mar '16

commit f4f3346b3c4a45f37fb5b66e3614ff615478ca30 Author: Damian Johnson <atagar(a)torproject.org> Date: Thu Feb 25 08:42:05 2016 -0800 Drop 'Ahmia - Hidden Service Search' This was done in SoP last year. --- getinvolved/en/volunteer.wml | 58 -------------------------------------------- 1 file changed, 58 deletions(-) diff --git a/getinvolved/en/volunteer.wml b/getinvolved/en/volunteer.wml index 566056a..1f5e08a 100644 --- a/getinvolved/en/volunteer.wml +++ b/getinvolved/en/volunteer.wml @@ -1292,64 +1292,6 @@ the codebase that you want to work on. </li> - <a id="ahmiaSearch"></a> - <li> - Ahmia - Hidden Service Search - - Effort Level: Medium - - Skill Level: Medium - - Likely Mentors: Juha Nurmi (numes), George (asn) - -Ahmia is open-source search engine software for Tor hidden service deep dark web sites. You can test the running search engine at ahmia.fi. For more information see our <a href="https://blog.torproject.org/category/tags/ahmiafi">blog post about Ahmia's GSoC2014 development</a>. - - - -Ahmia is a working search engine that indexes, searches, and catalogs content published on Tor Hidden Services. Furthermore, it is an environment to share meaningful insights, statistics, insights, and news about the Tor network itself. In this context, there is a lot of work to do. - - - -The Ahmia web service is written using the Django web framework. As a result, the server-side language is Python. On the client-side, most of the pages are plain HTML. There are some pages that require JavaScript, but the search itself works without client-side JavaScript. - - - -There are several possible directions for this project, including... - - - <ol> - <li>Improving the search results (very important) - <ul> - <li>Tweaking search algorithms</li> - <li>Adjust Apache Solr</li> - <li>Enrich the data that is used to rank the search results</li> - </ul> - </li> - <li>Improving UX and UI (very important) - <ul> - <li>Showing relevant knowledge</li> - <li>Design the navigation and information architecture</li> - <li>HTML5, CSS and Django development</li> - </ul> - </li> - <li>Review code and infrastructure - <ul> - <li>Review code and fix bugs</li> - <li>Writing Django test cases</li> - <li>Linux configurations, automatizations</li> - </ul> - </li> - <li>Gather statistics over time and publish them - <ul> - <li>Gather different kind of stats about Hidden Services</li> - <li>Publish these stats using HTTP REST API</li> - <li>Using this API show meaningful tables, charts and visualizations</li> - </ul> - </li> - </ol> - - </li> - <a id="exitmap_improvements"></a> <li> Exitmap Improvements

1 0