- tor-dev - lists.torproject.org

Why the seeming correlation between flash proxy and meek on metrics graphs?
by David Fifield 16 Sep '14

16 Sep '14

In comparing the user graphs of pluggable transports, I found that there seems to be a correlation between the graphs of flashproxy and meek. They are not equal, but they seem to go up and down at the same time. Other transports don't show such an effect as far as I can tell. What could the cause be? I am trying to rule out a measurement error. Could it be an artifact of both transports running on the same bridge? After the "How to use meek" blog post on August 15, there was a noticeable increase in the number of meek users, from about 5 to about 20 concurrent users: https://metrics.torproject.org/users.html?graph=userstats-bridge-transport&… The blog post also seems to have had a positive effect on flashproxy and scramblesuit, too. I suspect it is because the blog post also named other transports and suggested to try them first: https://metrics.torproject.org/users.html?graph=userstats-bridge-transport&… https://metrics.torproject.org/users.html?graph=userstats-bridge-transport&… On the other hand, I don't see any noticeable rise for obfs3 and fte: https://metrics.torproject.org/users.html?graph=userstats-bridge-transport&… https://metrics.torproject.org/users.html?graph=userstats-bridge-transport&… What's interesting is when we plot meek and flashproxy together (this is the first attached image). There seems to be a strong correspondence between the two. They both jump on August 15, as expected, but then they both jump again together on August 21. In early September they settle back down, but still mostly match each other's up/down patterns: https://metrics.torproject.org/users.html?graph=userstats-bridge-transport&… What's really intriguing is that the apparent correlation goes back in time, even before August 15. Compare the shapes of the graphs during July, for example. The correlation between meek and scramblesuit appears to be not as strong (this is the second attached image). There's a rise around August 15, but no big secondary spike, although the first part of September matches pretty well. https://metrics.torproject.org/users.html?graph=userstats-bridge-transport&… There's no obvious positive correlation between meek and fte (this is the third attached image) nor meek and obfs3 (this is the fourth attached image). https://metrics.torproject.org/users.html?graph=userstats-bridge-transport&… Why could this be? Some hypotheses: * meek and flashproxy have similar capabilities (resistance to IP blocking), so maybe the circumstances where they work are similar. If one works, so does the other, so we expect them to more or less track one another. * There is a bug in metrics collection, so that, for example, sometimes a meek connection is counted as flashproxy or vice versa. The backend bridge for both meek and flashproxy is the same; i.e., tor2.bamsoftware.com. (Before May 8, 2014, it was a different bridge, namely tor1, but both transports were still running on it together.) * After my blog post, a bunch of people just picked transports at random until they found one that worked, which was likely one of {flashproxy, meek, scramblesuit}, and now we're just seeing the aggregation of those user's daily usage. Doesn't explain a match before August 15, though. To figure this out I'm thinking of i) counting bytes transferred on the flashproxy and meek external ports, or ii) moving one to a different bridge (or different tor instance), to see if the effect remains. Do you have any other ideas? David Fifield

2 4

Debian popcon as a vulnerability?
by Griffin Boyce 15 Sep '14

15 Sep '14

Hello all! I am wondering whether to force-uninstall Debian's popularity-contest package as part of Stormy's installation process. It would be good to have an idea how popular Stormy is, but on the other hand, I'm not sure how anonymous the reporting is on Debian's end. This is also relevant for users of the tor package, who might also be at mild risk (though far less so because the number of users is so high, and doesn't reveal location of location-hidden services). Anyone have opinions on this? I'm leaning towards checking if popularity-contest is installed and then asking if the user would like it to be removed. If y'all have other recommendations, please comment here or on the ticket. Ticket: https://trac.torproject.org/projects/tor/ticket/13154 thanks! Griffin -- "I believe that usability is a security concern; systems that do not pay close attention to the human interaction factors involved risk failing to provide security by failing to attract users." ~Len Sassaman

3 2

Re: [tor-dev] Symlink to latest sources
by Peter Swire 15 Sep '14

15 Sep '14

Dear Roger, You've avoided that for both binaries and sources? That's interesting. I guess it makes sense, if it's been a problem before. I mostly would like to be able to wget the the sources and build them automatically, without having to specify a version number. Whenever I setup a new machine, I like to make it a tor relay; I don't particularly care about versions, just as long as it's new enough to not have any old vulnerabilities. Best, Peter > Hi Peter, > > So far we have avoided doing this approach, since it increases the number > of user support cases where we ask "what version?" and they say "latest" > because their file name doesn't actually tell them what version it is. > > I guess we could try adding the symlink but then never tell anybody > about it, in hopes that users will keep downloading the files that have > version numbers in their names. > > What problem are you trying to solve? > > --Roger

4 4

Tor Research Framework update
by Gareth Owen 12 Sep '14

12 Sep '14

Hi all I thought I'd give you an update on where the Tor Research Framework is now at as there's been lots of development over the last few weeks. At present, the framework is a largely fully functional tor client with code that is easy to read, follow and crucially change for custom functionality. URL: https://github.com/drgowen/tor-research-framework Completed ======= The examples exercise a big chunk of the functionality so in the examples directory, we now have examples on how to do: - Circuit building, Random circuits based on flags, etc - Building HS circuits and establishing streams to their service - Consensus parsing examples - RELAY_EARLY scanner - scans HSDirs looking for RELAY_EARLYs coming the wrong way (aka the recent Blackhat deanon attack) - Tor SOCKS Proxy and PortForwarder The examples are here: https://github.com/drgowen/tor-research-framework/tree/master/src/main/java… The RELAY_EARLY scanner took around five minutes to write for example and didn't require modifying core library code. Work in progress ========== Fuzzer: We also have another chap (twilsonb) working on a fuzzing framework for Tor that is capable of fuzzing the protocol and directory services - although this is at early stage I'm sure he'd welcome help from anyone interested. Relay: We're working on building the capability to act as a Tor relay with examples for building malicious guard nodes that deny circuits or do correlation attacks. Naturally, we'll also look later down the line at optionally integrating with the shadow simulator for research which shouldn't be done on the live network. -- If anyone is interested in helping out then please dont hesitate to get in touch. Best Gareth -- Dr Gareth Owen Senior Lecturer School of Computing, University of Portsmouth Tel: 02392 846423 Web: ghowen.me

3 10

Let's talk about Globe/Atlas development this Thu, Sep 11, 14:00 UTC in #tor-dev
by Karsten Loesing 11 Sep '14

11 Sep '14

Hello front-end web developers, almost two months ago, Philipp and I started a call to find new developers for one of the two main Tor network status websites Atlas or Globe: https://blog.torproject.org/blog/looking-front-end-web-developers-network-s… We received great replies from some of you, but we failed to give you enough input to start developing. Unless you did start developing and we totally failed to see your results! We should fix this failure to communicate. Let's meet on Thursday, September 11, at 14:00 UTC in #tor-dev on OFTC and talk about Globe and Atlas development. If you're interested in front-end web development and want to help, even if you missed our original call, please join us. To be clear, neither Philipp nor I will be leading this development effort, mostly because neither of us knows enough about front-end web development to be a good leader. We're rather hoping to bring a few interested web developer folks together and answer any of your questions about relevant Tor specifics or about the back-end data service Onionoo. But let's talk more about that on Thursday! All the best, Karsten

1 1

CGI and Hidden Services
by TerryZ＠Safe-mail.net 10 Sep '14

10 Sep '14

Hi, Does CGI work the same way it does with regular websites when using it for Tor Hidden Services? Do the methods POST and GET work the same over Tor on Hidden Services? Thanks

2 1

Re: [tor-dev] Let's talk about Globe/Atlas development this Thu, Sep 11, 14:00 UTC in #tor-dev
by Tim 10 Sep '14

10 Sep '14

Dear Globe/Atlas Developers, When I used Atlas today with JavaScript turned off, it looked like it didn't work. I've heard that the Tor Browser is moving towards JavaScript being off by default (or, at the very least, one of 3-4 security level options). As you redevelop, can you consider making Atlas/Globe work without JavaScript, or, at the very least, teach it to ask for JavaScript? (Alternately, I may have made a mistake in assuming that JavaScript was the issue. Web development / bug reports really aren't my thing.) T On 9 Sep 2014, at 22:00 , tor-dev-request(a)lists.torproject.org wrote: > Date: Tue, 09 Sep 2014 11:00:00 +0200 > From: Karsten Loesing <karsten(a)torproject.org> > To: "tor-dev(a)lists.torproject.org" <tor-dev(a)lists.torproject.org> > Subject: [tor-dev] Let's talk about Globe/Atlas development this Thu, > Sep 11, 14:00 UTC in #tor-dev > Message-ID: <540EC190.3010200(a)torproject.org> > Content-Type: text/plain; charset=ISO-8859-1 > > Hello front-end web developers, > > almost two months ago, Philipp and I started a call to find new > developers for one of the two main Tor network status websites Atlas or > Globe: > > https://blog.torproject.org/blog/looking-front-end-web-developers-network-s… > > We received great replies from some of you, but we failed to give you > enough input to start developing. Unless you did start developing and > we totally failed to see your results! We should fix this failure to > communicate. Let's meet on > > Thursday, September 11, at 14:00 UTC in #tor-dev on OFTC > > and talk about Globe and Atlas development. If you're interested in > front-end web development and want to help, even if you missed our > original call, please join us. > > To be clear, neither Philipp nor I will be leading this development > effort, mostly because neither of us knows enough about front-end web > development to be a good leader. We're rather hoping to bring a few > interested web developer folks together and answer any of your questions > about relevant Tor specifics or about the back-end data service Onionoo. > > But let's talk more about that on Thursday! > > All the best, > Karsten

2 1

Lowercase-t-tor patch workshop on #tor-dev IRC channel
by rl1987 09 Sep '14

09 Sep '14

Dear tor-dev, Everyone who is working on any kind of improvement to lowercase-t-tor code and would like to give/receive assistance (code reviews, advice, etc.) is welcome on Tuesday, September 16, 17:00 UTC @ #tor-dev OFTC channel This might become a regular weekly thing, if it proves to be successful.

1 0

Pluggable transports meeting tomorrow (16:00UTC Wednesday 10th of September 2014)
by George Kadianakis 09 Sep '14

09 Sep '14

Hola brothers and sisters, just wanted to remind you that the regular biweekly pluggable transports meeting is going to occur tomorrow at 16:00 UTC. Place is the #tor-dev IRC channel in the OFTC network. As you see, the meeting day was recently changed from Fridays to Wednesdays: https://lists.torproject.org/pipermail/tor-dev/2014-August/007317.html Thanks for your attention!

1 0

Symlink to latest sources
by Peter Swire 08 Sep '14

08 Sep '14

Dear Tor-dev, On the dist page ( https://www.torproject.org/dist/ ) all the sources are listed by version number. It would be awesome if there was a symlink to the latest stable release, called something like "tor-latest.tar.gz" On some other projects, e.g. gnu parallel ( http://ftp.gnu.org/gnu/parallel/ ) do this. Thank you, Peter

2 1

Rescheduling of OONI dev meeting of next week
by Arturo Filastò 05 Sep '14

05 Sep '14

Hello Oonitarians, Next week (on Friday 12th at 17:00 CET) we were supposed to have our weekly ooni dev meeting. Some of, though, will be at the OTF summit in DC and will therefore not be able to attend. After discussing this at todays weekly meeting we concluded to ask for feedback on whether we should skip next week and postpone it to next Friday 19th or if we should do it another day in the week of the 15th. If you have a strong opinion on doing either of these please let us know, if not it will by default be postponed to Friday 19th 17:00 CET. Have fun, ~ Art.

1 0

Orbot Fails to Transparent Proxy on lge-e739
by Jordan 05 Sep '14

05 Sep '14

Hi, all, I'm writing this not as a bug ticket: I'd like to try to get involved with fixing this issue (which is why I cc'd you, Nathan). Orbot seems to fail transparent proxy. Here's my device info, probably more for humor than for information: - Device: LGE E739 (T-Mobile MyTouch). - Android Kernel: Linux localhost 2.6.35.7-cyanogenmod+ #1 PREEMPT - Cyanogenmod Version: cyanogenmod 9 - Default iptables version: v1.4.14 Just a side note, that this bug doesn't seem to occur on certain versions of orbot (more on that later). Here are the properties of what happens when Orbot "fails to transparent proxy." - I can't get a mobile data connection. - I am able to connect to Wi-Fi just fine. However... - Some applications (specifically, **K-9 mail**), throw IOExceptions. I've tried to do a better job at tracking on which versions of Orbot this occurs, however, based on the last three releases, this is what I have found: - version 14.0.7.2: No TP - version 14.0.7.1: No TP - version 17.0.6: TP worked initially, and then randomly failed, even after I cleared iptables rules and reinstalled. For any version, it didn't seem to matter if I had a firewall installed (I tested both droidwall and AFWall+...and no firewall, too). I'm currently trying my hand at porting CM 11 to my device (having..."fun" do they call it?), but I figured I could try to get Orbot working in the meantime. Is this an issue to be resolved? I realize I'm using an out-dated kernel. Could it be an iptables issue? Thanks!

2 1

Fast flag assigned to slow relay
by Lei Yang 04 Sep '14

04 Sep '14

Hi, I notice that some relays with very low bandwidth (e.g., 2 KB/s) in the consensus have 'Fast' flag. However, the definition of 'Fast' in dir-sepc.txt is that a router is 'Fast' if it is active, and its bandwidth is either in the top 7/8ths for known active routers or at least some minimum (20KB/s until 0.2.3.7-alpha, and 100KB/s after that). For example, the relay named "PotatoPlace" has only 5KB/s but is marked as a "Fast" node if we check that in http://torstatus.blutmagie.de/ Does anybody can please explain this? Best, Lei

1 0

Reminder: tor dev meetings Wednesdays 1330 UTC
by Nick Mathewson 03 Sep '14

03 Sep '14

Reminder: the next Tor meeting is on #tor-dev on OFTC, at 1330 UTC on Wednesday. (That's approximately 12 hours from now: this is a time change.) This is the weekly IRC meeting for people working on the program "tor". (It won't cover all the other programs developed under the Tor umbrella.) cheers, -- Nick

1 2

oonibackend 1.1.0 released
by Arturo Filastò 02 Sep '14

02 Sep '14

Hello Oonitarians, I am pleased to announce that a new version of oonibackend has now been released. Here are some of the changes introduced in the new version: * Make changes to the bouncer API to make it aware of the policy of collectors. * Improve the bouncer API to make it more RESTful. * Add test helper that can be used to discover the DNS resolver being used by the probe. * Code coverage and unittesting improvements. * Fix compatibility with latest txtorcon versions. Starting from this version we will also be uploading the package to pypi, hence you will be able to install oonibackend with: pip install oonibackend https://pypi.python.org/pypi/oonibackend Have fun, ~ Art.

1 0

DNSSEC
by merc1984＠f-m.fm 02 Sep '14

02 Sep '14

I am surprised to find that there is no form of DNSSEC associated with TOR. I am running dnscrypt, but find that I fail the DNSSEC test at http://dnssec.vs.uni-due.de/ when using the TBB. I have unbound chained to dnscrypt which is on a rotary to 5 trusted DNS resolvers. How can you not understand what this means WRT DNS cache poisoning? Why are we susceptible to DNS cache poisoning? I suppose that the TOR system needs to resolve .onion addresses, but there should be some way of using dnssec locally if the TOR system cannot provide authenticated DNS. No one in the #tor irc channel seems to know how TOR DNS is done, and unfortunately there's not a word about it at https://trac.torproject.org/projects/tor/wiki/doc/DnsResolver . But I suspect it must be TCP DNS as TOR can't do UDP. And I suspect DNS must be done by relay servers, in order to resolve intermediate .onion addresses. Beyond that, it's a mystery how it's done. How to secure TOR DNS? -- http://www.fastmail.fm - mmm... Fastmail...

5 6

[PATCH] Proposal 236 and voting
by George Kadianakis 01 Sep '14

01 Sep '14

I inline a patch that specifies how voting should happen in proposal 236. The changes reflect a discussion I had yesterday with nickm during the Tor IRC meeting. BTW, while I like the simplicity of the new vote (just an integer), I'm afraid that this might hide any misconfigurations of the guardiness system in authorities. For example, maybe an authority is misconfigured and considers only 2 consensuses for guardiness data (instead of 6000 consensuses) and if it publishes only an integer percentage then we might not notice this misconfiguration. Maybe the number of consensuses parsed and the number of months considered should also be mentioned somewhere in the votes?

2 2

Weather post-GSoC
by meejah 31 Aug '14

31 Aug '14

Now that GSoC is over, there are some things that should be accomplished in the Tor Weather codebase soon to reach "deployment": 1. remove local copy of OnionPy and replace with real thing 2. (ideally automated) front-end tests 3. ensure production and Vagrant setup are as close as possible 4. tests with dump/copy of live database Less important, but still Very Nice To Have: 5. more unit-test coverage would be nice too 6. nicer-looking HTML I do not have enough spare cycles to accomplish all these things myself. I will commit to rapidly reviewing/merging to the "develop" branch any pull-requests. If any of the above sounds interesting, please follow-up here (or in #tor-dev). Thanks, meejah

2 5

DNSSEC
by merc1984＠f-m.fm 31 Aug '14

31 Aug '14

Does anyone know why TOR does not use DNSSEC? The only documentation I found on the TORProject website for DNS does not actually explain how DNS works on TOR. I infer it must be TCP, as TOR can not do UDP, and I imagine that relay nodes must be the resolvers in order to resolve .onion domains. But beyond that there is no information on how it works. Seems to me that the lack of DNSSEC in TOR is a gigantic security hole. (DNS cache poisoning) -- http://www.fastmail.fm - Access your email from home and the web

3 2

Gpg subkey for deb.torproject.org archive expired
by Lampshade 30 Aug '14

30 Aug '14

pub 2048R/886DDD89 2009-09-04 [expires: 2014-09-03] Key fingerprint = A3C4 F0F9 79CA A22C DBA8 F512 EE8C BC9E 886D DD89 uid deb.torproject.org archive signing key sub 2048R/219EC810 2009-09-04 [expires: 2014-08-29] Above text is from https://www.torproject.org/docs/signing-keys.html.en Today is 30 august, so subkey expired and master key is going to expire soon. Please generate new keys for Debian and Ubuntu users, of course in secure manner.

2 1

Re: [tor-dev] problems building on osx 10.9.4
by Tim 30 Aug '14

30 Aug '14

Hi Alan, Apologies for the overlapping reply to your last question - I'm still catching up. Chutney on OS X I can successfully run chutney with the following environmental variables set: PYTHON=python CHUTNEY_PATH=/path/to/chutney make test-network I then a lot of output, which ends with this result: Verifying data transmission: Success You may wish to permanently set PYTHON and CHUTNEY_PATH in your ~/.bashrc using: export PYTHON=python export CHUTNEY_PATH=/path/to/chutney You may need to supply the full path to python, but it's unlikely. For the record, I'm using python 2.7.8 from MacPorts to match some libraries I have installed. coverage-html on OS X For what it's worth, when I first tried to run make coverage-html on my os x setup, I get output ending with: lcov --capture --rc lcov_branch_coverage=1 --no-external --directory . --output-file "./coverage_html/lcov.tmp" Capturing coverage data from . Found gcov version: 4.2.1 Scanning . for .gcda files ... geninfo: WARNING: no .gcda files found in . - skipping! Finished .info-file creation lcov --remove "./coverage_html/lcov.tmp" --rc lcov_branch_coverage=1 'test/*' 'ext/tinytest*' '/usr/*' --output-file "./coverage_html/lcov.info" Reading tracefile ./coverage_html/lcov.tmp lcov: ERROR: no valid records found in tracefile ./coverage_html/lcov.tmp make: *** [coverage-html] Error 255 This was because my configure invocation didn't include the test coverage option: ./configure --with-libevent-dir=/opt/local --with-openssl-dir=/opt/local --enable-coverage --disable-asciidoc The documentation is successfully produced with: make clean && make && make test && make coverage-html Overall coverage rate: lines......: 33.6% (16872 of 50276 lines) functions..: 47.5% (1590 of 3350 functions) branches...: 23.7% (9708 of 40978 branches) As I said, I've used MacPorts - https://www.macports.org/ - to install: $ port list lcov libevent openssl lcov @1.11 devel/lcov libevent @2.0.21 devel/libevent openssl @1.0.1i devel/openssl You may wish to switch to lcov 1.11 if your version is giving you grief on OS X. So it appears there is no need to switch to Linux just yet… you'll run into similar configuration issues on any platform :-) Tim On 30 Aug 2014, at 13:22 , tor-dev-request(a)lists.torproject.org wrote: > Date: Fri, 29 Aug 2014 13:29:30 -0400 > From: Alan Fay <emptyset(a)freesideatlanta.org> > To: tor-dev(a)lists.torproject.org > Subject: Re: [tor-dev] problems building on osx 10.9.4 > Message-ID: > <CAFC4BBwOHTPrCZ6yT7-4i_6AYwnqGuqpUeLue=MAW7xdJF7o_Q(a)mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > Arlo, > > Thanks, I got the build working with a local build/path of libevent2, just > as you described. I used brew for the other dependencies. > > I am able to run ./scripts/test/coverage coverage-output without problems, > but running: > $ make coverage-html > > Has the following problem: [ > http://0bin.net/paste/9DYCmagMbr8HNiw4#rtSQ-ia0BrOS1nzilEVu3dBlUKrenXGRyVXD… > ] > gcov doesn't have a -v switch, just -version (this was from lcov installed > via $ brew install lcov) > > I got chutney after a little bit of searching. The documentation doesn't > make clear that chutney is part of the tor projects, located here: [ > https://gitweb.torproject.org/chutney.git] > > One of errors I get from running $ make test-network is: > ./chutney: line 4: python2: command not found > > This looks like a platform problem. That's why I'm wondering if it's > better to work on this code on some flavor of Linux system instead of osx. > > Thanks, > Alan

1 0

problems building on osx 10.9.4
by Tim 30 Aug '14

30 Aug '14

Alan, When building tor from the latest git sources on OS X 10.9.4, I have found that I need to: * install libevent, * install a newer version of OpenSSL (the system version is missing a symbol), and * disable man page generation. (Alternately, there are further tools that need to be installed to build the man pages.) I use the following configure invocation, for an installation in /opt/local (it looks like you're using /usr/local ): ./configure --with-libevent-dir=/opt/local --with-openssl-dir=/opt/local --disable-asciidoc I use MacPorts - https://www.macports.org/ - as a package manager, and have the following versions of the libraries installed: $ port list openssl libevent openssl @1.0.1i devel/openssl libevent @2.0.21 devel/libevent Let us know how you go. Tim On 29 Aug 2014, at 13:49 , tor-dev-request(a)lists.torproject.org wrote: > Date: Thu, 28 Aug 2014 12:33:59 -0400 > From: Alan Fay <emptyset(a)freesideatlanta.org> > To: tor-dev(a)lists.torproject.org > Subject: [tor-dev] problems building on osx 10.9.4 > Message-ID: > <CAFC4BBxo0zAeDe6n_=JgN_sagiN=DaYN0GRBJLpkZb6W90d73Q(a)mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > Hello! > > I'm trying to get a working build of Tor so I can learn more about working > on item "m. Improve test coverage in Tor". Apologies ahead of time for > being green; this seemed to be the most accessible place to start > contributing...I read through doc/HACKING and I'm slowly working through > that. > > I'm running osx 10.9.4. I ran: > > $ ./autogen.sh > $ ./configure > ... > checking for libevent directory... configure: WARNING: We found the > libraries for libevent, but we could not find the C header files. You may > need to install a devel package. > configure: error: Missing headers; unable to proceed. > > I installed libevent-2.0.21-stable from source, and then nickm on #tor-dev > helped me see some permissions issues in /usr/local/include/event2 and > /usr/local/lib/libevent* ; please see: [ > http://0bin.net/paste/fuObUINKL1EOICf8#jJuGjo2wv65-7QNcHLGBcFPsNdAwhRlWmg6O… > ] > > I found reference to this error on the tor-relay mailing list here, but I > didn't get far with any of those suggested fixes, and it's also for osx > 10.4. This is the first hit when I google the error: [ > https://lists.torproject.org/pipermail/tor-relays/2012-January/001192.html] > > Thanks, > Alan >

1 0

[GSoC] Revamp GetTor summary
by ilv 30 Aug '14

30 Aug '14

Hi! First of all, I want to thank the people at tor-dev that make this happen every year, it was an awesome experience and I sincerely hope to be around for a long time. I also want to thank my mentor Sukhbir for always being around to solve doubts and checking up my progress, and to my co-mentor Nima for his always useful advices and comments. Secondly, I would like to give you a brief summary of what I did during this 3-4 months: 1) Rewrote GetTor from scratch. Now it should be easier to add new ways to distribute download links for TBB. 2) Created two components for this new GetTor: SMTP and XMPP. 3) Enabled the (old) multilingual feature. Now you can receive replies in your language (in case translation exists). 4) Created a component to automatically upload TBB to Dropbox. 5) Enabled basic blacklisting of users. It basically prevents flood by specifying a limit of requests during a certain period of time. 6) Added a small SQLite database for 5) and to get some stats. No real info about the addresses/accounts stored. I would really appreciate any feedback on the work done, specially about the points 5) and 6). Do these points make sense to you? The plan for now is to keep doing tests and deploy it asap (hopefully during September). As always, you can check the code on [0]. That would be for now, have a nice weekend! [0] https://github.com/ileiva/gettor/tree/master/src Best, -- 4096R/540BFC0E

1 0

problems building on osx 10.9.4
by Alan Fay 29 Aug '14

29 Aug '14

Hello! I'm trying to get a working build of Tor so I can learn more about working on item "m. Improve test coverage in Tor". Apologies ahead of time for being green; this seemed to be the most accessible place to start contributing...I read through doc/HACKING and I'm slowly working through that. I'm running osx 10.9.4. I ran: $ ./autogen.sh $ ./configure ... checking for libevent directory... configure: WARNING: We found the libraries for libevent, but we could not find the C header files. You may need to install a devel package. configure: error: Missing headers; unable to proceed. I installed libevent-2.0.21-stable from source, and then nickm on #tor-dev helped me see some permissions issues in /usr/local/include/event2 and /usr/local/lib/libevent* ; please see: [ http://0bin.net/paste/fuObUINKL1EOICf8#jJuGjo2wv65-7QNcHLGBcFPsNdAwhRlWmg6O… ] I found reference to this error on the tor-relay mailing list here, but I didn't get far with any of those suggested fixes, and it's also for osx 10.4. This is the first hit when I google the error: [ https://lists.torproject.org/pipermail/tor-relays/2012-January/001192.html] Thanks, Alan

2 2

Catch probability of EE node greater than G and E node
by saurav dahal 29 Aug '14

29 Aug '14

Hello, The following is the default Tor network in shadow simulator: Total BW of Guard flagged nodes=258.15 MB/S Total BW of Middle nodes=23.69 MB/S Total BW of Exit flagged nodes=13.23 MB/S Total BW of Guard+Exit flagged nodes=213.4 MB/S *1st Case:* I inserted 40 guard nodes and 40 exit nodes, each of 5 MB/S in above Tor network and performed the simulation. Following are the bandwidth weights derived from the consensus document of webclient when Guard and Exit nodes of 5MB/S are added separately: Wbd=1454 Wbe=0 Wbg=4882 Wbm=10000 Wdb=10000 Web=10000 Wed=7091 Wee=10000 Weg=7091 Wem=10000 Wgb=10000 Wgd=1454 Wgg=5118 Wgm=5118 Wmb=10000 Wmd=1454 Wme=0 Wmg=4882 Wmm=10000 *2nd Case:* I added 80 Guard-Exit (EE) nodes, each 5MB/S and perform the simulation. Following are the bandwidth weights derived from the consensus document when EE nodes of 5MB/S are added: Wbd=4722 Wbe=0 Wbg=0 Wbm=10000 Wdb=10000 Web=10000 Wed=4826 Wee=10000 Weg=4826 Wem=10000 Wgb=10000 Wgd=452 Wgg=10000 Wgm=10000 Wmb=10000 Wmd=4722 Wme=0 Wmg=0 Wmm=10000 I calculated catch probability i.e., probability that a client chooses my inserted nodes in both guard and exit position, in both cases and found that the 2nd case yields more probability. By examining the above weights, how it is possible that the catch probability for EE nodes are much higher than those of guard and exit node separately? OR is there any other reason for this? Can anybody please explain this? Thanks, -- Saurav

1 0