- tor-commits - lists.torproject.org

[torbrowser/maint-2.2] a wild firefox 7.0.1 appears to prove that there is no god
by erinn＠torproject.org 29 Sep '11

29 Sep '11

commit bbef1f7a356da590a2cae5d6d389b9ba44740f99 Author: Erinn Clark <erinn(a)torproject.org> Date: Fri Sep 30 03:07:47 2011 +0100 a wild firefox 7.0.1 appears to prove that there is no god --- build-scripts/versions.mk | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/build-scripts/versions.mk b/build-scripts/versions.mk index af6335e..8856a87 100644 --- a/build-scripts/versions.mk +++ b/build-scripts/versions.mk @@ -3,7 +3,7 @@ RELEASE_VER=2.2.33 HTTPSEVERY_VER=1.0.3 -FIREFOX_VER=7.0 +FIREFOX_VER=7.0.1 LIBEVENT_VER=2.0.14-stable LIBPNG_VER=1.4.8 NOSCRIPT_VER=2.1.2.8

1 0

[torbrowser/maint-2.2] give windows makefile the ability to use both normal wget and the python wget steven made
by erinn＠torproject.org 29 Sep '11

29 Sep '11

commit ff24c49c8444afcb0d8606c7997daa8cfef56fb5 Author: Erinn Clark <erinn(a)torproject.org> Date: Fri Sep 30 03:04:12 2011 +0100 give windows makefile the ability to use both normal wget and the python wget steven made --- build-scripts/windows.mk | 13 +++++++------ 1 files changed, 7 insertions(+), 6 deletions(-) diff --git a/build-scripts/windows.mk b/build-scripts/windows.mk index d62aeff..9d721db 100644 --- a/build-scripts/windows.mk +++ b/build-scripts/windows.mk @@ -50,7 +50,8 @@ PIDGIN=$(FETCH_DIR)/PidginPortable-$(PIDGIN_VER) PWD:=$(shell pwd) PYTHON=/c/Python26/python.exe SEVENZIP="/c/Program Files/7-Zip/7z.exe" -WGET=$(PYTHON) $(PWD)/pyget.py +PYGET=$(PYTHON) $(PWD)/pyget.py +WGET=wget VIRUSSCAN=$(PYTHON) $(PWD)/virus-scan.py WINRAR="/c/Program Files/WinRAR/WinRAR.exe" CC=gcc @@ -346,7 +347,7 @@ launcher: ## Torbutton development version torbutton.xpi: - $(WGET) -O $@ $(TORBUTTON) + $(PYGET) -O $@ $(TORBUTTON) ## English comes as default langpack_en-US.xpi: @@ -354,19 +355,19 @@ langpack_en-US.xpi: ## BetterPrivacy betterprivacy.xpi: - $(WGET) -O $@ $(BETTERPRIVACY) + $(PYGET) -O $@ $(BETTERPRIVACY) ## NoScript development version noscript.xpi: - $(WGET) -O $@ $(NOSCRIPT) + $(PYGET) -O $@ $(NOSCRIPT) ## HTTPS Everywhere httpseverywhere.xpi: - $(WGET) -O $@ $(HTTPSEVERYWHERE) + $(PYGET) -O $@ $(HTTPSEVERYWHERE) ## Generic language pack rule langpack_%.xpi: - $(WGET) -O $@ $(MOZILLA_LANGUAGE)/$*.xpi + $(PYGET) -O $@ $(MOZILLA_LANGUAGE)/$*.xpi ## ## Customize the bundle

1 0

[torbrowser/maint-2.2] update name of windows changelog in windows makefile
by erinn＠torproject.org 29 Sep '11

29 Sep '11

commit 797fe84498de96470e2bdeee8996c6026240ff53 Author: Erinn Clark <erinn(a)torproject.org> Date: Fri Sep 30 03:04:38 2011 +0100 update name of windows changelog in windows makefile --- build-scripts/windows.mk | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/build-scripts/windows.mk b/build-scripts/windows.mk index 9d721db..739317f 100644 --- a/build-scripts/windows.mk +++ b/build-scripts/windows.mk @@ -291,7 +291,7 @@ install-docs: cp $(TOR)/LICENSE $(TOR)/README $(DOCSDIR)/Tor cp $(QT_LIB)/../LICENSE.GPL* $(QT_LIB)/../LICENSE.LGPL $(DOCSDIR)/Qt cp $(MING)/../msys/1.0/share/doc/MSYS/COPYING $(DOCSDIR)/MinGW - cp ../changelog.win-2.2 $(DOCSDIR)/changelog + cp ../changelog.windows-2.2 $(DOCSDIR)/changelog cp ../README.WIN-2.2 $(DOCSDIR)/README-TorBrowserBundle ## Copy over FirefoxPortable

1 0

r25140: {} add today's presentation (projects/presentations)
by Andrew Lewman 29 Sep '11

29 Sep '11

Author: phobos Date: 2011-09-29 16:14:46 +0000 (Thu, 29 Sep 2011) New Revision: 25140 Added: projects/presentations/2011-09-29-FCADV-data-security.pdf projects/presentations/2011-09-29-FCADV-data-security.tex Log: add today's presentation Added: projects/presentations/2011-09-29-FCADV-data-security.pdf =================================================================== (Binary files differ) Property changes on: projects/presentations/2011-09-29-FCADV-data-security.pdf ___________________________________________________________________ Added: svn:mime-type + application/octet-stream Added: projects/presentations/2011-09-29-FCADV-data-security.tex =================================================================== --- projects/presentations/2011-09-29-FCADV-data-security.tex (rev 0) +++ projects/presentations/2011-09-29-FCADV-data-security.tex 2011-09-29 16:14:46 UTC (rev 25140) @@ -0,0 +1,130 @@ +\documentclass{beamer} +\mode<presentation> +\usetheme{Boadilla} +\title{FCADV Data Security} +\author{Andrew Lewman \\ andrew(a)torproject.org} +\date{September 29, 2011} +\begin{document} + +\begin{frame} +\maketitle +\begin{center} +\includegraphics[height=3cm]{./images/2009-tor-logo} +\end{center} +\end{frame} + +\begin{frame} +\frametitle{What are we talking about?} +\begin{itemize} +\item Quick overview of data security and privacy +\item Securing data independent of location +\item Shelters, survivors, and Internets +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{} +\begin{quotation} +\noindent \includegraphics[width=1cm]{./images/opquo}\quad +Knowledge is power... Knowledge is happiness. +\end{quotation} +\bigskip +\textbf{Thomas Jefferson, 1817} +\end{frame} + +\begin{frame} +\frametitle{The Tor Project, Inc.} +501(c)(3) non-profit organization dedicated to the research and development of technologies for online anonymity and privacy +\begin{center} +\includegraphics[height=5cm]{./images/2009-oval_sticker_new} +\end{center} +\end{frame} + +\begin{frame} +\frametitle{Crashing into data security and privacy} +\begin{itemize} +\item Encryption +\pause \item Access controls +\pause \item Backups +\pause \item Masking +\pause \item Erasure +\pause \item ISO/IEC 27002 Standard +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Crashing into data security} +Follow the data itself. Ignore the technology used to touch it. +\end{frame} + +\begin{frame} +\frametitle{The life of a case file} +\begin{itemize} +\item Data is collected. +\item Data entered into ALICE. +\item Then what? +\pause \item who gets access to it? +\pause \item how is it transmitted to the next stop? +\pause \item where is it living? +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Forget Alice, think about the data} +\begin{itemize} +\item zip code, sex, date of birth are all that's needed to deanonymize someone +\item ALICE computers should be separate from any other networks, such as survivor networks in a shelter, or reachable from outside the shelter. +\item firewalls are just locks on a door, they stop honest people from going further. +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Securing data} +\begin{itemize} +\item disaster recovery, or where do I send a safe full of valuables? +\pause \item encryption? It should solve all my problems, right? +\pause \item how did you encrypt the case file? all as one big file, or individually? +\pause \item subpoena can force decryption +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Internet access in the shelter} +\begin{itemize} +\item survivors will find a way to connect to the 'net +\item may circumvent your controls to their own detriment +\item IP address gives them away +\item shared computer, cookies (browser, flash, dom, html5) +\item wifi access means everyone can get on it +\item private browsing mode is hardly private +\item use read-only operating systems, livecd/liveusb so no one can save + anything locally. Tor makes one of these, btw. +\item virtual machines +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{OMG nevar goin' on dar Internets again!} +\begin{itemize} +\item Risk assessment +\pause \item minimization of harm +\pause \item containment +\pause \item work with your vendors +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Questions?} +\begin{center} +\includegraphics[scale=1.0]{images/question-mark} +\end{center} +\end{frame} + +\begin{frame} +\frametitle{Copyrights} +\begin{itemize} +\item question mark, http://how-to-do-it.net/ +\end{itemize} +\end{frame} + +\end{document} \ No newline at end of file Property changes on: projects/presentations/2011-09-29-FCADV-data-security.tex ___________________________________________________________________ Added: svn:mime-type + text/x-tex

1 0

[arm/packaging] Dropping cagraph from arm exports
by atagar＠torproject.org 29 Sep '11

29 Sep '11

commit 6bf70593d32977b78789f509107509be717d889b Author: Damian Johnson <atagar(a)torproject.org> Date: Thu Sep 29 08:54:08 2011 -0700 Dropping cagraph from arm exports Removing cagraph from the package exports. This can be fetched dynamically if the user wants to try the gui prototype, the only gotcha being a likely permission issue during the fetch (I should clarify that message...). --- export.sh | 10 +++++----- 1 files changed, 5 insertions(+), 5 deletions(-) diff --git a/export.sh b/export.sh index ffa886a..ef33bd7 100755 --- a/export.sh +++ b/export.sh @@ -26,11 +26,11 @@ echo "5460adb1394c368ba492cc33d6681618b3d3062b3f5f70b2a87520fc291701c3 <- expect tar -C $exportDst/src -xzf torctl.tar.gz rm torctl.tar.gz -wget --quiet http://www.atagar.com/arm/resources/deps/11-06-10/cagraph.tar.gz -sha256sum cagraph.tar.gz -echo "1439acd40ce016f4329deb216d86f36a749e4b8bf73a313a757396af6f95310d <- expected" -tar -C $exportDst/src -xzf cagraph.tar.gz -rm cagraph.tar.gz +#wget --quiet http://www.atagar.com/arm/resources/deps/11-06-10/cagraph.tar.gz +#sha256sum cagraph.tar.gz +#echo "1439acd40ce016f4329deb216d86f36a749e4b8bf73a313a757396af6f95310d <- expected" +#tar -C $exportDst/src -xzf cagraph.tar.gz +#rm cagraph.tar.gz # the following installed torctl from its master repo rather than our # dependency mirror

1 0

[arm/master] Release notes for 1.4.4.1 hotfix release
by atagar＠torproject.org 29 Sep '11

29 Sep '11

commit 156d01c94ad993f39bb570a520ff936754991192 Author: Damian Johnson <atagar(a)torproject.org> Date: Thu Sep 29 08:44:37 2011 -0700 Release notes for 1.4.4.1 hotfix release --- ChangeLog | 4 ++++ 1 files changed, 4 insertions(+), 0 deletions(-) diff --git a/ChangeLog b/ChangeLog index 5ab7654..287ab57 100644 --- a/ChangeLog +++ b/ChangeLog @@ -37,6 +37,10 @@ Besides the normal bug fixes and minor features, this release introduces the con * fix: listener wasn't registering GUARD events * fix: dropping nonexistent ORCONN attributes * fix: clarifying the missing torrc message + * fix (9/29/11): dropping gtk/cagraph requirements (caught by monochromec, vinc3nt, and Bill White) + * fix (9/29/11): crash from esc in interpretor panel prompt (caught by Sebastian, https://trac.torproject.org/projects/tor/ticket/4098) + * fix (9/29/11): deduplicating 'Circuit build timeout' and 'looks like we don't need to wait so long' messages (patch by StrangeCharm, https://trac.torproject.org/projects/tor/ticket/4096) + * fix (9/29/11): forcing redraw on ctrl+L reguardless of need (caught by np, https://trac.torproject.org/projects/tor/ticket/2830) 7/16/11 - version 1.4.3 (6cf4836) This completes the codebase refactoring project that's been a year in the works and provides numerous performance and usability improvements. Most notably this includes a setup wizard for new relays, menuing interface, gui prototype, substantial performance improvements, and support for Mac OSX.

1 0

[arm/release] fix: replacing changelog 'ticket' entries w/ links
by atagar＠torproject.org 29 Sep '11

29 Sep '11

commit 28194cc5af6fddb431221b72a1278373d6acdc32 Author: Damian Johnson <atagar(a)torproject.org> Date: Mon Sep 26 07:10:52 2011 -0700 fix: replacing changelog 'ticket' entries w/ links Forgot to fill in the trac urls for the tickets when making the changelog for this last release. --- ChangeLog | 8 ++++---- src/version.py | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/ChangeLog b/ChangeLog index 472dd5d..5ab7654 100644 --- a/ChangeLog +++ b/ChangeLog @@ -11,12 +11,12 @@ Besides the normal bug fixes and minor features, this release introduces the con o /find option which searches the backlog for the given regex o /events option which displays any events that we've listened for o /write option which dumps the interpretor backlog to a file - * added: control socket support (feature request by dererk, ticket) - * added: optional system wide torrc integration (thanks to ioerror, ticket) + * added: control socket support (feature request by dererk, https://trac.torproject.org/projects/tor/ticket/3638) + * added: optional system wide torrc integration (thanks to ioerror, https://trac.torproject.org/projects/tor/ticket/3629) * added: dialog for guards, bridges, and exits with exit port usage and client locales (feature request by waltman and ioerror) * added: configuration editor for the gui interface (implemented by krkhan) * added: notice that warns the user against running tor or arm as root - * change: doing a manual redraw when the user presses ctrl+L (ticket) + * change: doing a manual redraw when the user presses ctrl+L (https://trac.torproject.org/projects/tor/ticket/2830) * change: moving download location to archive.torproject.org so downloads will have ssl (suggested by arma) * change: rewrite of the descriptor popup, cleaning up the code and minor performance improvements * fix: preventing arm from starting if there's a running tor instance that we can't connect to @@ -25,7 +25,7 @@ Besides the normal bug fixes and minor features, this release introduces the con * fix: skipping log parsing if misformatted (caught by Sjon) * fix: incorrect armrc path in man page (caught by dererk) * fix: toning down the warning when all connection resolvers fail (suggested by Sebastian) - * fix: quitting wizard when the user presses 'q' instead of just esc (suggested by monochromec, ticket) + * fix: quitting wizard when the user presses 'q' instead of just esc (suggested by monochromec, https://trac.torproject.org/projects/tor/ticket/3995) * fix: quitting could cause unclean curses shutdown * fix: relay address fetching would ignore default values at shutdown, causing a stacktrace * fix: concurrency bug could crash arm if a CIRC event occurs while caching attached relays diff --git a/src/version.py b/src/version.py index 8e7f493..0745fb9 100644 --- a/src/version.py +++ b/src/version.py @@ -2,6 +2,6 @@ Provides arm's version and release date. """ -VERSION = '1.4.5.0_dev' +VERSION = '1.4.5_dev' LAST_MODIFIED = "September 25, 2011"

1 0

[arm/release] Added log duplicate masks for longer-than-expected circuit build times and re-estimates of slow circuits.
by atagar＠torproject.org 29 Sep '11

29 Sep '11

commit 079201c6a0dec175823956d5490661ac742fb32b Author: Tom Lowenthal <me(a)tomlowenthal.com> Date: Sun Sep 25 20:30:58 2011 -0700 Added log duplicate masks for longer-than-expected circuit build times and re-estimates of slow circuits. --- src/settings.cfg | 9 +++++++++ 1 files changed, 9 insertions(+), 0 deletions(-) diff --git a/src/settings.cfg b/src/settings.cfg index 0e8f9dd..28c3008 100644 --- a/src/settings.cfg +++ b/src/settings.cfg @@ -272,6 +272,12 @@ config.summary.TestingEstimatedDescriptorPropagationTime Delay before clients at # 16 (79.193.61.171:443). # [INFO] rep_hist_downrate_old_runs(): Discounting all old stability info by a # factor of 0.950000 +# [NOTICE] Circuit build timeout of 96803ms is beyond the maximum build time we +# have ever observed. Capping it to 96107ms. +# The above NOTICE changes to an INFO message in maint-0.2.2 +# [NOTICE] Based on 1000 circuit times, it looks like we don't need to wait so +# long for circuits to finish. We will now assume a circuit is too slow +# to use after waiting 65 seconds. # [NOTICE] We stalled too much while trying to write 150 bytes to address # [scrubbed]. If this happens a lot, either something is wrong with # your network connection, or something is wrong with theirs. (fd 238, @@ -312,6 +318,9 @@ msg.DEBUG *pending in tls object). at_most msg.DEBUG connection_read_to_buf(): TLS connection closed on read. Closing. msg.INFO run_connection_housekeeping(): Expiring msg.INFO rep_hist_downrate_old_runs(): Discounting all old stability info by a factor of +msg.INFO *build time we have ever observed. Capping it to +msg.NOTICE *build time we have ever observed. Capping it to +msg.NOTICE *We will now assume a circuit is too slow to use after waiting msg.NOTICE We stalled too much while trying to write msg.NOTICE I learned some more directory information, but not enough to build a circuit msg.NOTICE Attempt by

1 0

[arm/release] fix: crash from esc in interpretor panel prompt
by atagar＠torproject.org 29 Sep '11

29 Sep '11

commit ed4bee53a3dd4258ced3168819656bff7d8f211f Author: Damian Johnson <atagar(a)torproject.org> Date: Wed Sep 28 07:31:43 2011 -0700 fix: crash from esc in interpretor panel prompt When the user presses 'esc' in the interpretor panel prompt the getstr result is None. I didn't account for this, causing a stacktrace. Caught by Sebastian. https://trac.torproject.org/projects/tor/ticket/4098 --- src/cli/interpretorPanel.py | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) diff --git a/src/cli/interpretorPanel.py b/src/cli/interpretorPanel.py index 37b9e58..246636c 100644 --- a/src/cli/interpretorPanel.py +++ b/src/cli/interpretorPanel.py @@ -70,6 +70,7 @@ class InterpretorPanel(panel.Panel): inputLine = min(self.maxY - 1, displayLength) inputFormat = getFormat(torInterpretor.INPUT_FORMAT) input = self.getstr(inputLine, xOffset, "", inputFormat, validator = validator) + if input == None: input = "" input, isDone = input.strip(), False if not input:

1 0

[arm/release] fix: forcing redraw on ctrl+L reguardless of need
by atagar＠torproject.org 29 Sep '11

29 Sep '11

commit ad8741d5f43b0ba441d094bc1dea9aa9a4354254 Author: Damian Johnson <atagar(a)torproject.org> Date: Wed Sep 28 10:12:27 2011 -0700 fix: forcing redraw on ctrl+L reguardless of need The ctrl+L keybinding is suppose to perform a redraw but this was only making a 'request' rather than forcing it, so unchanged portions of the interface weren't actually redrawn. Caught by np. https://trac.torproject.org/projects/tor/ticket/2830 --- src/cli/controller.py | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/src/cli/controller.py b/src/cli/controller.py index 4e6dc82..762f955 100644 --- a/src/cli/controller.py +++ b/src/cli/controller.py @@ -778,7 +778,7 @@ def drawTorMonitor(stdscr, startTime): cli.wizard.showWizard() elif key == ord('l') - 96: # force redraw when ctrl+l is pressed - control.redraw() + control.redraw(True) else: for panelImpl in displayPanels: isKeystrokeConsumed = panelImpl.handleKey(key)

1 0