July 2014 - tor-dev - lists.torproject.org

orbot: get its ports from another app
by CJ 29 Jul '14

29 Jul '14

Hello, I'm currently developping orwall, a UI over iptables allowing to block all IP traffic and forcing selected apps through Orbot (while blocking the others), among other things. I'm wondering if there's a way to ask Orbot, if installed, its SOCKS and TransPort configuration. I think NetCipher lib may do it, but I'm not that sure. Thanks in advance for your answer/help :). Cheers, C.

2 2

GSoc Stegotorus status update
by Noah Rahman 29 Jul '14

29 Jul '14

Sorry for the delay, I have been travelling for the past week and a half and was at HOPE. I have finished debugging the swf steg, and am hunting down the last bugs in the pdf steg. SRI advised me that they are still working on their JavaScript transcoding library they wish to plug into the SWF and JS stegs, so I will move the JS steg and JSON stegs over but at the unti tests for JSON first. By the time of the PT meeing on August 1st I intend: to have JS, SWF and PDF debugged with unit tests finish testing the handshake code and make it robust to packets arriving out of order (discussed ideas for this in person with vmon) be ready to start debugging the transparent proxy start sketching out how to incorporate the JSON steg and the SRI jel library (if they get it finished in the next two weeks) Best Noah

1 0

Please merge these anti-fingerprinting bugfixes
by faether 28 Jul '14

28 Jul '14

Can a TBB developer please push these very simple but important anti- fingerprinting prefs through: pref("full-screen-api.enabled", false); pref("browser.link.open_newwindow.restriction", 0); pref("dom.disable_window_move_resize", true); Fixing: https://trac.torproject.org/projects/tor/ticket/12609 (two weeks old) https://trac.torproject.org/projects/tor/ticket/9881 (ten months old) I've written a proposal to treat fingerprinting related bugfixes like other security bugfixes with regards to urgency and release management: https://trac.torproject.org/projects/tor/ticket/12715

2 1

Re: [tor-dev] Chutney couldn't start Tor instances
by Jesse Victors 27 Jul '14

27 Jul '14

Thanks Sukhbir, This was exactly it. I took me a few times, but I got it in the end. To make Chutney work: 1) Comment out the "TestingClientDownloadSchedule" line in torrc_templates/client.tmpl and in torrc_templates/client.tmpl 2) Comment out the "TestingV3AuthVotingStartOffset" line in torrc_templates/authority.tmpl 3) In torrc_templates/authority.tmpl, change the value of "TestingV3AuthInitialVoteDelay" from 2 to 20 4) In the same file, change the value of "TestingV3AuthInitialDistDelay" from 2 to 20. These are the lowest these values can go. 5) $ ./chutney configure networks/basic 6) $ ./chutney start networks/basic 7) $ ./chutney status networks/basic As you pointed out, removing line 469 of lib/chutney/TorNet.py (removing the --quiet option at launch) does give some great diagnostic information. 10/10 nodes now running, thanks again for the help. Hopefully the Chutney devs see this! Relevant: https://xkcd.com/196/ -- Jesse V. On 07/27/2014 04:00 AM, tor-dev-request(a)lists.torproject.org wrote: > Date: Sat, 26 Jul 2014 18:51:44 -0400 > From: Sukhbir Singh <sukhbir.in(a)gmail.com> > To: tor-dev(a)lists.torproject.org > Subject: Re: [tor-dev] Chutney couldn't start Tor instances > Message-ID: > <CADtjFvXs=Zfvus75iSs6oUZ1tXmwayVG+3HZv8n4OVR8-5+5+w(a)mail.gmail.com> > Content-Type: text/plain; charset=UTF-8 > > Hi, > >> No log files are generated in <path>/net/nodes/000a, so I don't know what >> happened. I don't see any conflicts with ports on localhost as far as I can >> see. >> Tor version 0.2.4.22 and Python 2.7.5+ are installed. Any ideas? > I find it helpful to remove the "--quiet" switch from > lib/chutney/TorNet.py (line 469) so that I can actually see why Tor > failed to start. That is the right place to start looking. > > In your case, it is probably TestingClientDownloadSchedule or > TestingServerDownloadSchedule that is causing the issue since I > remember something with one of the versions in 0.2.4 (not exactly sure > which). Try removing these lines from torrc_templates/client.tmpl, > torrc_template/relay.tmpl and then reconfigure the network and then > start it. It is either this, or DirServer/DirAuthority but the verbose > output will tell you the exact problem (look for "err"). > > I have found these issues to be common when using an earlier version > because of mismatch between the templates Chuntey is configured to use > (recent versions of Tor) versus earlier versions with different > options. But the fix is easy -- just update the template and > reconfigure the network. >

1 0

[404] :-( Retrieving Hidden Service Public-Key ...
by Achref Akremi 27 Jul '14

27 Jul '14

onion adress: 3g2upl4pq6kufc4m.onion date: 18 Jul 2014 22:27:20 GMT 1st: compute the v2 descriptor id: > with replicas 0: efa0506e1e5d3f193bf6509e1f4709e6e2322436 > with replicas 1: efa0506e1e5d3f193bf6509e1f4709e6e2322436 2nd: find responsible HSdir's: > efa0506e1e5d3f193bf6509e1f4709e6e2322436 > pmocek > marcuse1 > riptide > fc2c757e88910b3d72594706c477e21f60334a15 > torpidsCZwedos > gracefoster > halingrad 3rd: request: > http:// HSdir[IP] : HSdir[DirPort] /tor/rendezvous2/ Desc-ID ^^^^ here i got a 404 response >.< sorry ... if i'm doing something wrong ... if i do tell me :p

3 2

(meek|flashproxy)+(obfs3|fte|scramblesuit|...)
by Kevin P Dyer 27 Jul '14

27 Jul '14

Are there any roadblocks that prevent us from doing the following? 1. Remove the hard-coded bridge_prefs.js in the TBB. 2. Set meek as the default pluggable transport in the TBB. 3. Use meek to acquire an up-to-date bridge_prefs.js from, say, torproject.org. 4. Use the information from the acquired bridge_prefs.js to connect to Tor as normal. Ostensibly, this doesn't do a better job of hiding bridge addresses. However, it allows us to modify bridge addresses without releasing a new TBB. -Kevin

3 4

Chutney couldn't start Tor instances
by Jesse Victors 27 Jul '14

27 Jul '14

Hello everyone, I'm doing some research on Tor and I'm trying to set up a small sample Tor network to play with. I cloned the Chutney repository with /$ git clone https://git.torproject.org/chutney.git/ and then I ran /$ ./chutney configure networks/basic/ which generated the keys for each of the three authorities and also set up five relays and two clients. Everything looked good, but when I ran /$ ./chutney start networks/basic/ it says: /Starting nodes// //Couldn't launch test000a (tor --quiet -f <path>/net/nodes/000a/torrc): 255// //Couldn't launch test001a (tor --quiet -f ///<path>//net/nodes/001a/torrc): 255// //Couldn't launch test002a (tor --quiet -f ///<path>//net/nodes/002a/torrc): 255// //Couldn't launch test003r (tor --quiet -f ///<path>//net/nodes/003r/torrc): 255// //Couldn't launch test004r (tor --quiet -f ///<path>//net/nodes/004r/torrc): 255// //Couldn't launch test005r (tor --quiet -f ///<path>//net/nodes/005r/torrc): 255// //Couldn't launch test006r (tor --quiet -f ///<path>//net/nodes/006r/torrc): 255// //Couldn't launch test007r (tor --quiet -f ///<path>//net/nodes/007r/torrc): 255// //Couldn't launch test008c (tor --quiet -f ///<path>//net/nodes/008c/torrc): 255// //Couldn't launch test009c (tor --quiet -f ///<path>//net/nodes/009c/torrc): 255/ No log files are generated in <path>/net/nodes/000a, so I don't know what happened. I don't see any conflicts with ports on localhost as far as I can see. Tor version 0.2.4.22 and Python 2.7.5+ are installed. Any ideas? -- Jesse V.

2 1

Tor Research Framework
by Gareth Owen 26 Jul '14

26 Jul '14

Hi all I am releasing under the GPL a Java based Tor research framework that I have developed. The goal of the framework is to provide a simple and easy to read/modify implementation of the protocol that allows you to do things wrong. This enables researchers to try things out without trying to battle with the full tor client source or with a client that tries to help you (e.g. by proactively building circuits) - this one does as its told and no more. At present, it is a fully functional client with a number of examples for hidden services and SOCKS. You can build arbitrary circuits, build streams, send junk cells, etc. I want to build up the examples over the coming months to include sample attacks on tor (e.g. traffic pattern generators/detectors). I also want to build out the documentation to reduce the barrier to entry for researchers as much as possible. I hope it will be useful to someone - patches/pull requests always welcome! Source: https://github.com/drgowen/tor-research-framework Best wishes Gareth -- Dr Gareth Owen Senior Lecturer School of Computing, University of Portsmouth Tel: 02392 846423 Web: ghowen.me

1 0

[GSoC] BridgeDB Twitter Distributor report
by Kostas Jakeliunas 26 Jul '14

26 Jul '14

Progress/activities since last time: * incorporating BridgeRequest's together with an initial bridge request API over JSON (it's easier to do both as they are tightly related.) The bridge request api is based on isis' initial fix/12029-dist-api_r1; * bogus server-side bridge provider that implements the json api: just something that gives fake bridges based on the request (which is handled/contained in BridgeRequest.) (will have server side code real soon now (hoped to have it by now.)) * my churn_rewrite could probably make use of bridgedb's current approach to pickled storage. (It's also worth switching to twisted.spread.jelly for (mostly) security) * experimenting with sending images over twitter DMs. Twitter API does not support images in DMs, but the web as well as various mobile apps support attaching images to DMs (images end up in twitter CDN. (served over ton.twitter.com) which is good.) Some progress here: the web client DM send requests (where image files can be attached) are contained; the bot should be able to send images in DMs soon, emulating a normal web user agent (but using the two twitter APIs for all other activities and DMs.) * once bridgerequest's + request api (client-side + my mock server-side thing) are done, the bot will have approached a not-far-from-functional state Apologies for the late report. -- Kostas. 0x0e5dce45 @ pgp.mit.edu

1 0

Counter Base Encryption
by Soroosh Sardari 26 Jul '14

26 Jul '14

Hi I have to do some experiments on tor and I must disable counter-based encryption for cells. Is there a simple way to do that? I appreciate any idea. Soroosh

1 0