September 2014 - tor-dev - lists.torproject.org

Re: [tor-dev] Symlink to latest sources
by Peter Swire 15 Sep '14

15 Sep '14

Dear Roger, You've avoided that for both binaries and sources? That's interesting. I guess it makes sense, if it's been a problem before. I mostly would like to be able to wget the the sources and build them automatically, without having to specify a version number. Whenever I setup a new machine, I like to make it a tor relay; I don't particularly care about versions, just as long as it's new enough to not have any old vulnerabilities. Best, Peter > Hi Peter, > > So far we have avoided doing this approach, since it increases the number > of user support cases where we ask "what version?" and they say "latest" > because their file name doesn't actually tell them what version it is. > > I guess we could try adding the symlink but then never tell anybody > about it, in hopes that users will keep downloading the files that have > version numbers in their names. > > What problem are you trying to solve? > > --Roger

4 4

Tor Research Framework update
by Gareth Owen 12 Sep '14

12 Sep '14

Hi all I thought I'd give you an update on where the Tor Research Framework is now at as there's been lots of development over the last few weeks. At present, the framework is a largely fully functional tor client with code that is easy to read, follow and crucially change for custom functionality. URL: https://github.com/drgowen/tor-research-framework Completed ======= The examples exercise a big chunk of the functionality so in the examples directory, we now have examples on how to do: - Circuit building, Random circuits based on flags, etc - Building HS circuits and establishing streams to their service - Consensus parsing examples - RELAY_EARLY scanner - scans HSDirs looking for RELAY_EARLYs coming the wrong way (aka the recent Blackhat deanon attack) - Tor SOCKS Proxy and PortForwarder The examples are here: https://github.com/drgowen/tor-research-framework/tree/master/src/main/java… The RELAY_EARLY scanner took around five minutes to write for example and didn't require modifying core library code. Work in progress ========== Fuzzer: We also have another chap (twilsonb) working on a fuzzing framework for Tor that is capable of fuzzing the protocol and directory services - although this is at early stage I'm sure he'd welcome help from anyone interested. Relay: We're working on building the capability to act as a Tor relay with examples for building malicious guard nodes that deny circuits or do correlation attacks. Naturally, we'll also look later down the line at optionally integrating with the shadow simulator for research which shouldn't be done on the live network. -- If anyone is interested in helping out then please dont hesitate to get in touch. Best Gareth -- Dr Gareth Owen Senior Lecturer School of Computing, University of Portsmouth Tel: 02392 846423 Web: ghowen.me

3 10

Let's talk about Globe/Atlas development this Thu, Sep 11, 14:00 UTC in #tor-dev
by Karsten Loesing 11 Sep '14

11 Sep '14

Hello front-end web developers, almost two months ago, Philipp and I started a call to find new developers for one of the two main Tor network status websites Atlas or Globe: https://blog.torproject.org/blog/looking-front-end-web-developers-network-s… We received great replies from some of you, but we failed to give you enough input to start developing. Unless you did start developing and we totally failed to see your results! We should fix this failure to communicate. Let's meet on Thursday, September 11, at 14:00 UTC in #tor-dev on OFTC and talk about Globe and Atlas development. If you're interested in front-end web development and want to help, even if you missed our original call, please join us. To be clear, neither Philipp nor I will be leading this development effort, mostly because neither of us knows enough about front-end web development to be a good leader. We're rather hoping to bring a few interested web developer folks together and answer any of your questions about relevant Tor specifics or about the back-end data service Onionoo. But let's talk more about that on Thursday! All the best, Karsten

1 1

CGI and Hidden Services
by TerryZ＠Safe-mail.net 10 Sep '14

10 Sep '14

Hi, Does CGI work the same way it does with regular websites when using it for Tor Hidden Services? Do the methods POST and GET work the same over Tor on Hidden Services? Thanks

2 1

Re: [tor-dev] Let's talk about Globe/Atlas development this Thu, Sep 11, 14:00 UTC in #tor-dev
by Tim 10 Sep '14

10 Sep '14

Dear Globe/Atlas Developers, When I used Atlas today with JavaScript turned off, it looked like it didn't work. I've heard that the Tor Browser is moving towards JavaScript being off by default (or, at the very least, one of 3-4 security level options). As you redevelop, can you consider making Atlas/Globe work without JavaScript, or, at the very least, teach it to ask for JavaScript? (Alternately, I may have made a mistake in assuming that JavaScript was the issue. Web development / bug reports really aren't my thing.) T On 9 Sep 2014, at 22:00 , tor-dev-request(a)lists.torproject.org wrote: > Date: Tue, 09 Sep 2014 11:00:00 +0200 > From: Karsten Loesing <karsten(a)torproject.org> > To: "tor-dev(a)lists.torproject.org" <tor-dev(a)lists.torproject.org> > Subject: [tor-dev] Let's talk about Globe/Atlas development this Thu, > Sep 11, 14:00 UTC in #tor-dev > Message-ID: <540EC190.3010200(a)torproject.org> > Content-Type: text/plain; charset=ISO-8859-1 > > Hello front-end web developers, > > almost two months ago, Philipp and I started a call to find new > developers for one of the two main Tor network status websites Atlas or > Globe: > > https://blog.torproject.org/blog/looking-front-end-web-developers-network-s… > > We received great replies from some of you, but we failed to give you > enough input to start developing. Unless you did start developing and > we totally failed to see your results! We should fix this failure to > communicate. Let's meet on > > Thursday, September 11, at 14:00 UTC in #tor-dev on OFTC > > and talk about Globe and Atlas development. If you're interested in > front-end web development and want to help, even if you missed our > original call, please join us. > > To be clear, neither Philipp nor I will be leading this development > effort, mostly because neither of us knows enough about front-end web > development to be a good leader. We're rather hoping to bring a few > interested web developer folks together and answer any of your questions > about relevant Tor specifics or about the back-end data service Onionoo. > > But let's talk more about that on Thursday! > > All the best, > Karsten

2 1

Lowercase-t-tor patch workshop on #tor-dev IRC channel
by rl1987 09 Sep '14

09 Sep '14

Dear tor-dev, Everyone who is working on any kind of improvement to lowercase-t-tor code and would like to give/receive assistance (code reviews, advice, etc.) is welcome on Tuesday, September 16, 17:00 UTC @ #tor-dev OFTC channel This might become a regular weekly thing, if it proves to be successful.

1 0

Pluggable transports meeting tomorrow (16:00UTC Wednesday 10th of September 2014)
by George Kadianakis 09 Sep '14

09 Sep '14

Hola brothers and sisters, just wanted to remind you that the regular biweekly pluggable transports meeting is going to occur tomorrow at 16:00 UTC. Place is the #tor-dev IRC channel in the OFTC network. As you see, the meeting day was recently changed from Fridays to Wednesdays: https://lists.torproject.org/pipermail/tor-dev/2014-August/007317.html Thanks for your attention!

1 0

Symlink to latest sources
by Peter Swire 08 Sep '14

08 Sep '14

Dear Tor-dev, On the dist page ( https://www.torproject.org/dist/ ) all the sources are listed by version number. It would be awesome if there was a symlink to the latest stable release, called something like "tor-latest.tar.gz" On some other projects, e.g. gnu parallel ( http://ftp.gnu.org/gnu/parallel/ ) do this. Thank you, Peter

2 1

Rescheduling of OONI dev meeting of next week
by Arturo Filastò 05 Sep '14

05 Sep '14

Hello Oonitarians, Next week (on Friday 12th at 17:00 CET) we were supposed to have our weekly ooni dev meeting. Some of, though, will be at the OTF summit in DC and will therefore not be able to attend. After discussing this at todays weekly meeting we concluded to ask for feedback on whether we should skip next week and postpone it to next Friday 19th or if we should do it another day in the week of the 15th. If you have a strong opinion on doing either of these please let us know, if not it will by default be postponed to Friday 19th 17:00 CET. Have fun, ~ Art.

1 0

Orbot Fails to Transparent Proxy on lge-e739
by Jordan 05 Sep '14

05 Sep '14

Hi, all, I'm writing this not as a bug ticket: I'd like to try to get involved with fixing this issue (which is why I cc'd you, Nathan). Orbot seems to fail transparent proxy. Here's my device info, probably more for humor than for information: - Device: LGE E739 (T-Mobile MyTouch). - Android Kernel: Linux localhost 2.6.35.7-cyanogenmod+ #1 PREEMPT - Cyanogenmod Version: cyanogenmod 9 - Default iptables version: v1.4.14 Just a side note, that this bug doesn't seem to occur on certain versions of orbot (more on that later). Here are the properties of what happens when Orbot "fails to transparent proxy." - I can't get a mobile data connection. - I am able to connect to Wi-Fi just fine. However... - Some applications (specifically, **K-9 mail**), throw IOExceptions. I've tried to do a better job at tracking on which versions of Orbot this occurs, however, based on the last three releases, this is what I have found: - version 14.0.7.2: No TP - version 14.0.7.1: No TP - version 17.0.6: TP worked initially, and then randomly failed, even after I cleared iptables rules and reinstalled. For any version, it didn't seem to matter if I had a firewall installed (I tested both droidwall and AFWall+...and no firewall, too). I'm currently trying my hand at porting CM 11 to my device (having..."fun" do they call it?), but I figured I could try to get Orbot working in the meantime. Is this an issue to be resolved? I realize I'm using an out-dated kernel. Could it be an iptables issue? Thanks!

2 1