April 2014 - tor-dev - lists.torproject.org

New events calendar
by Ximin Luo 30 Apr '14

30 Apr '14

Hi all, I decided to create a new calendar, since the old one is out-of-date and we seem to have lost the access. View as a web page: https://www.google.com/calendar/embed?src=dt92shou5q1ooe1kptubhclo4s%40grou… Import into your calendar program: https://www.google.com/calendar/ical/dt92shou5q1ooe1kptubhclo4s%40group.cal… If anyone would like write-access, or for me to make a one-off change, just ask! Please also update any links to the old calendar in trac; I forget where they all are. X -- GPG: 4096R/1318EFAC5FBBDBCE git://github.com/infinity0/pubkeys.git

1 0

TOR compilation with MinGW
by primster primster 30 Apr '14

30 Apr '14

Hi, i’d like to compile tor in my mingw installation, how could i achieve the same results as you: https://www.torproject.org/dist/win32/ It will be awesome to have tiny client as soon as possible in one exe Could you please give me full instruction or shell script ? -- Regards!

1 0

GsoC: Revamp GetTor
by Israel Leiva 29 Apr '14

29 Apr '14

Hi all! My name is Israel Leiva, and I'll be working on the "Revamp GetTor" [1] project during this GsoC. My mentors will be sukhe and mrphs. What I propose is to redesign the current "GetTor" code in order to make it oriented to modules, which the users can access via common "services" (like SMTP, for instance) and get the required info (packages or links). The idea is that this new design could allow the implementation of new modules in the future. You can find more details about my proposal in [2]. Needless to say I'm very excited and honored to collaborate with the Tor project and community! [1] https://www.torproject.org/getinvolved/volunteer.html.en#revamp_gettor [2] http://ileiva.github.io/gettor_proposal.html Best, -- israel

2 2

Version bump of obfsproxy to 0.2.8 in TB breaks FTE
by Kevin P Dyer 28 Apr '14

28 Apr '14

Hi Mike, It looks like [1] broke FTE [2]. Can you hold off on pushing any releases public, until we resolve #11629? George - Can we revert obfsproxy back to 0.2.4, to give me time to sort this out? -Kevin [1] https://gitweb.torproject.org/builders/tor-browser-bundle.git/commit/ce30cd… [2] https://trac.torproject.org/projects/tor/ticket/11629

2 2

GetTor Meeting (April 29)
by Sukhbir Singh 28 Apr '14

28 Apr '14

Hi, We will be having our first meeting on revamping GetTor in #tor-dev tomorrow from 20:00 - 20:45 UTC. Israel Leiva is the GSoC student who will be working on improving GetTor over the summer so we are looking for suggestions from the community on how we can improve the bundle distribution. (Sorry for the short notice and duration but everyone's schedule seems to be busy!) -- Sukhbir

1 1

GSoC: Pluggable Transports Combiner
by quinn jarrell 26 Apr '14

26 Apr '14

Hi everyone, My name is Quinn Jarrell and I'm a student University of Illinois at Urbana Champaign. I'm excited to join GSoC and I'll be working on building a pluggable transporter this summer for Google summer of code. The pluggable transports combiner will allow transports to be chained together to form more varieties of transports and make them harder to detect and block. You can read more about it here: [0]. My mentors are Infinity0 and dcf. My IRC name RushingWookie, and you'll often see me lurking in #tor-dev. I'm excited to work for Tor this summer and I can't wait to get started. Quinn Jarrell [0] https://trac.torproject.org/projects/tor/wiki/doc/PluggableTransports#Combi…

2 1

Please help testing a new Onionoo version that uses Gson to format documents
by Karsten Loesing 26 Apr '14

26 Apr '14

Hi everyone, [I'm blind-copying everyone who I know has been working on an Onionoo client in the past. If you received two copies of this email, or if you received this email even though you're not subscribed to tor-dev@, and you don't want to be informed of updates related to Onionoo, please let me know.] Please help testing the Onionoo version running here: http://54.81.197.70:8080/onionoo/ This version uses Google's Gson library to format JSON documents, rather than concatenating strings that happen to represent JSON documents (#11577). While this change doesn't sound very difficult, it required quite a few code changes. This is good, because the new code is much cleaner. I'm just not certain whether I broke things. Please try to point your Onionoo client to the new Onionoo version and see if something breaks. Please also try edge cases and give this Onionoo instance a hard time. Just note that this version only contains a few days of data. Things to try out in particular: - Responses contain less whitespace than before. Please make sure that your client handles the more compact responses correctly. - UTF-8 characters in details documents should still be in escaped form, e.g., \u00F2 for the ò in Filastò in the contact field. Other fields that might contain UTF-8 characters are city_name, as_name, etc. - The fields parameter for details documents required some hacking, so I might have broken it. I'm planning to deploy the new version on yatei in 5--7 days from now. If you find a bug, please either comment on #11577 or open a new ticket, whatever seems more appropriate. Thanks for your help! All the best, Karsten

2 2

How to run a headless second Firefox instance?
by David Fifield 25 Apr '14

25 Apr '14

We talked a while ago about using a browser extension to make HTTPS requests on behalf of a pluggable transport, so that the TLS doesn't stand out as unusual (#11183). I have that working pretty well and you can try it out. Using these bundles, you can run the meek pluggable transport and the TLS layer looks just like Firefox, because it is Firefox. https://trac.torproject.org/projects/tor/ticket/11183#comment:16 https://people.torproject.org/~dcf/pt-bundle/3.5.2.1-meek-5/ How it works: tor starts a wrapper program called meek-client-torbrowser, which starts a second copy of firefox using a separate profile.meek-http-helper. The second profile has some different prefs (https://gitweb.torproject.org/user/dcf/tor-browser-bundle.git/blob/861e270c…) and it runs the HTTP helper extension. The extension prevents a second browser window from opening. Once the second firefox starts up, meek-client-torbrowser runs meek-client and sets it up to communicate using the browser helper. What I need some advice on: In order to prevent a browser window from opening in the second instance of firefox, the helper extension opens a modal dialog and never returns. If the dialog is ever closed, the whole browser is shut down. It looks like this (https://gitweb.torproject.org/pluggable-transports/meek.git/blob/d2de8adc06…) try { // Block forever. var prompts = Components.classes["@mozilla.org/embedcomp/prompt-service;1"] .getService(Components.interfaces.nsIPromptService); prompts.confirm(null, "Query", "Get down, get funky?"); } finally { var app = Components.classes["@mozilla.org/toolkit/app-startup;1"] .getService(Components.interfaces.nsIAppStartup); app.quit(app.eForceQuit); } It gets the job done, but it sucks because the first thing you see is the dialog and you have to know not to close it. Is there a way to accomplish the same thing (keep the browser running, but don't show a browser window) without raising a conspicuous dialog? David Fifield

5 7

Tor Browser Weekly IRC meetings moved to 15:00 UTC Fridays
by Mike Perry 25 Apr '14

25 Apr '14

Due to the EU "Summer Time" changes generating new conflicts for a few people, the Tor Browser team's weekly IRC meeting will now be on Fridays at 15:00 UTC in #tor-dev on irc.oftc.net, starting this Friday, April 25th. For details on our meeting format, see the original post: https://lists.torproject.org/pipermail/tbb-dev/2014-February/000000.html -- Mike Perry

3 2

txtorcon v0.9.2
by meejah 24 Apr '14

24 Apr '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I am happy to announce that txtorcon v0.9.2 is now available. This release adds a few minor bug-fixes and a few API enhancements. Full details: * add on_disconnect callback for TorControlProtocol (no more monkey-patching Protocol API) * add age() method to Circuit * add time_created property to Circuit * don't incorrectly listen for NEWDESC events in TorState * add .flags dict to track flags in Circuit, Stream * build_circuit() can now take hex IDs (as well as Router instances) * add unique_name property to Router (returns the hex id, unless Named then return name) * add location property to Router * TorState.close_circuit now takes either a Circuit ID or Circuit instance * TorState.close_stream now takes either a Stream ID or Stream instance * support both GeoIP API versions * more test-coverage * small patch from enriquefynn improving tor binary locating * strip OK lines in TorControlProtocol (https://github.com/meejah/txtorcon/issues/8) * use TERM not KILL when Tor launch times out (https://github.com/meejah/txtorcon/pull/68>) from hellais * Unit-test coverage now at 98% sha256 sums for the distribution files: 93e934f83e3fc6fcf40e76f7c9c28459af04205fb912d384aaacb7ac5269bb8f dist/txtorcon-0.9.2-py2-none-any.whl fe90743cdc453002ad046aa6556b611b4e85b813ff92865769d3d27712c2ca47 dist/txtorcon-0.9.2.tar.gz There are also signatures on github and txtorcon.readthedocs.org You may download from github or the hidden service: https://github.com/meejah/txtorcon/releases/tag/v0.9.2 https://github.com/meejah/txtorcon/releases/download/v0.9.2/txtorcon-0.9.2-… https://github.com/meejah/txtorcon/releases/download/v0.9.2/txtorcon-0.9.2-… https://github.com/meejah/txtorcon/releases/download/v0.9.2/txtorcon-0.9.2.… https://github.com/meejah/txtorcon/releases/download/v0.9.2/txtorcon-0.9.2.… http://timaq4ygg2iegci7.onion/txtorcon-0.9.2.tar.gz http://timaq4ygg2iegci7.onion/txtorcon-0.9.2.tar.gz.asc Source code: https://github.com/meejah/txtorcon/archive/v0.9.2.tar.gz Thanks, meejah -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBAgAGBQJTWVf5AAoJEMJgKAMSgGmn07kIAKSwjBck76dyN1lWJj0fRl/f BevLpnp+rb+ge5hBAeKfsVTYciDBZeSo8/fE44wTNh5Qj9HEhFopVC4WF61rIFU+ 4IkpnFvfmVEd8Iu1vqQ/hFmP1jrvT8T+nTbaTGkcoCSPI+GyXkbxLqcl0Fncq51M M0OIRphyWA7EK3YoZ2Q1BOEIwsN0pwERYUhU0CGS45L7OZmyw86RXTMBZpBnNXrD 5VjQdpx8fvrV2iCRXi/k/e2Jy/xqs8o0I2+o9M6WrBiGCs5S9YbjsAKzRb7dsaBZ RlRAdKUjyzkquPl4K8E5ocDToB1hIGvqCSp7s11a5rq5T/jUiDMYrjkxIXH1Yg4= =W7+f -----END PGP SIGNATURE-----

1 0