- tor-dev - lists.torproject.org

Review of GSoC proposal - Ahmia.fi
by Srikrishna 25 Mar '16

25 Mar '16

Hi people, Sorry for the late approach. Here is my proposal for the project, Improving Ahmia.fi, search engine for hidden services. Any suggestions are most welcome. Thanks to Juha ( juha.nurmi(a)ahmia.fi ) for helping me out with the proposal. I'll be available on irc as 'skrish13' or you can comment on the doc itself or reply here :) Link for my proposal -> https://docs.google.com/document/d/1GOQMi7qkR7Ppuh4sF5EoSv4Io5D2Dwpz8OyzNoi… -- Thanks and Regards Srikrishna <Attached my PGP signature> <Using PGP/MIME, notify me for Inline PGP>

1 0

[GSoC] CONIKS implementation for Tor Messenger
by Huy Vu Quoc 25 Mar '16

25 Mar '16

Dear devs, My name is Huy, and I am a computer science student at Hanoi University of Science and Technology, Vietnam. GSoC is a great opportunity for me to contribute to Tor. I have been watching the development of Tor Messenger since its release. As my major is cryptography, I find the idea “implement and integrate CONIKS for Tor Messenger” very interesting. I am studying the CONIKS paper and my confusions were mostly answered in Elias's thread. I'm thinking about how to integrate CONIKS module to current implementation of Tor Messenger. I have some questions to ask: - A standard for data formats & protocol: I know the standard is essential for the project, so can I define a standard when developing (with your review) or I have to wait for your work in future? Another question about GSoC: - What should be deliverable by mid-term of GSoC? Btw, I also created a pull-request for ctypes-otr project on Github. Best, Huy Vu

3 9

WTF is going on? An evolutionary biology approach to the human condition
by Hugo Maxwell Connery 24 Mar '16

24 Mar '16

Dr. E. O. Wilson. 40 mins + 20 mins questions. https://www.youtube.com/watch?v=DWLoluq-HCo How and why. /Hugo PS: Sorry, this may be completely outside of the normal channel of this space. I hope that some members are shocked by this presentation. I believe in tech, but more importantly I believe in the informed.

2 1

Request for feedback/victims: cfc
by Yawning Angel 24 Mar '16

24 Mar '16

Hello, Inspired by https://trac.torproject.org/projects/tor/ticket/18361 I've been working on way to improve the situation. My "proof of concept" tech demo is what I consider good enough for use by brave people that aren't me, so I have put up an XPI package at: https://people.torproject.org/~yawning/volatile/cfc-20160323/ The source: https://git.schwanenlied.me/yawning/cfc (Requires the Firefox SDK aka Jetpack to package). By default the addon will: * Rewrite the CloudFlare captcha error page with messages that reflect my perception of reality[0]. * Rewrite imgur ".gifv" links to ".gif". Under "Tools->Addons->Extensions" you can configure the addon to: * Automatically fetch a cached copy of pages hosted on CloudFlare infrastructure from archive.is. * Automatically fetch a cached copy of pages that present a CloudFlare captcha from archive.is. * Pop up a UI widget asking if you want to fetch a cached copy of the page from archive.is each time you encounter a captcha. * Disable the snarky error message replacement (Requires a restart to take effect, because I'm lazy). * Disable the gifv URL rewrite. TODO: * Support a user definable blacklist (eg: If you want to always use archive.is to access gawker.com or other clickbait bullshit, you should be able to easily do so). * Add more general quality of life things. * Think about making it work on Fenec (It currently will not because PopUpNotifications are handled differently, among other things). * Rewrite the internals to prepare for e10s. WARNING: * If archive.is is evil, they can track you across page fetches trivially, because this sort of use case is outside of Tor Browser's current threat model (Yes, CloudFlare/Google can also do the same thing currently, who do you trust more?). * PEOPLE THAT HAVE BIG SCARY ADVERSARIES IN THEIR THREAT MODEL SHOULD NOT USE THIS. If you don't know how to install addons given as XPI files, you shouldn't be using this. This is only tested on 6.0a4 (Linux/64 bit). It *should* work on everything that isn't Orfox that's relatively modern, YMMV. Regards, -- Yawning Angel [0]: A very cynical/adversarial take on things. Opinions are my own, etc, and I don't care if you're offended.

7 8

Urgent fixes for 0.2.8.2-alpha
by Tim Wilson-Brown - teor 24 Mar '16

24 Mar '16

Hi All, I think I've completed the urgent fixes assigned to me for 0.2.8.2-alpha and mentioned in the network team meeting yesterday. If we merge the following patches into the upcoming 0.2.8.2-alpha, we'll know: #18616 - whether AccountingMax still breaks relay bootstrap (master - not in any released version) #18351 - whether log messages are too frequent, or whether there are actual outgoing connection issues (0.2.8.1-alpha) #18517 - whether meek and bridges on private addresses are still broken (0.2.8.1-alpha) #18489 - whether extrainfo descriptors are still broken with fallback directory mirrors (0.2.8.1-alpha / 0.2.4.7-alpha) The release in brackets is when each issue was introduced. I don't know of any other patches (assigned to me) that are urgent enough to hold up the next alpha. Tim Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP 968F094B teor at blah dot im OTR CAD08081 9755866D 89E2A06F E3558B7F B5A9D14F

1 0

GSOC'16
by Ahmet Fatih Çamaltı 24 Mar '16

24 Mar '16

Hi, I'm Ahmet. I'm a senior undergraduate Computer Science student at Turgut Ozal University, Turkey. I'm interested Expand the OS and Server Support of the Let's Encrypt Client project for GSOC'16 and I would like to work on this. I will write proposal draft and upload to the system soon. Should I need to do anything else? Can you provide a little bit more details for this project for the proposal? Thank you for your interest.

1 0

GSoC proposal: Panopticlick
by Akito Ono 24 Mar '16

24 Mar '16

Hello! I'm writing a proposal for the Panopticlick project. Would you advise me about this proposal? https://gist.github.com/ak1t0/1bf1b6bd4e3fc99e2097 Best regards, Akito

2 3

GSoC proposal Review
by Pushkar Pathak 24 Mar '16

24 Mar '16

Hi, Please review my proposal to Improve Ahmia-Hidden Search Service https://docs.google.com/document/d/1VylEqQBdFPe-ev_naT9qA4ycNM1_U5j8OhMLATD… Thanks, Pushkar.

1 0

(no subject)
by Huy Vu Quoc 24 Mar '16

24 Mar '16

Hi Arlo, > It may be prudent to consider a memory-managed language (I'll suggest golang here as popular choice) for the server component. It is good to know that I can use golang to develop the server component. I am going to rewrite this part. > Wherever possible, we'd like to avoid modals and use the notification bar. There's also a suggestion to grey out the conversation window and use a throbber here, https://github.com/arlolra/ctypes-otr/issues/20 Since the monitoring protocol is done periodically so there certainly exist a case of an unexpected key change whereas there are not any conversation windows. In such a case, how do we show the message using the notification bar? I think that a popup modal is a good choice for this situation. Btw, I also added a timeout enforcement for responding to events in my proposal. Timeout for requests is 100ms and this can be changed based on some surveys and tests during development phase (may the registration request take a longer time than other requests?). Best Regards, Vu Huy

1 0

Query regarding GSOC '16 - txtorcon
by Akash Mishra 24 Mar '16

24 Mar '16

Hi all, I am Akash Mishra, an undergraduate from India and if given an opportunity, I would love to participate in GSOC with the TOR project. This will be my first time contributing to an open source project. I have been using python for all my college projects for over a year. Due to my familiarity with python, I would like to work on txtorcon - Convert txtorcon to txaio - during the summers. The requirements state that I should be very familiar with asynchronous programming and with one of twisted or asyncio. I have only basic familiarity with asyncio - having explored it once after watching a pycon talk on it. But I am very enthusiastic to learn and bridge the skillgap that will be needed to complete the project. I have already started with the krondo tutorials on twisted to gain familiarity with the twisted framework. How should i get started with txtorcon project ? Are there any minor issues that i can work on as of now ? Thanks, Akash Mishra

2 7