tor-dev

tor-dev@lists.torproject.org

3581 discussions

bittorrent based pluggable transport
by Dan Cristian Octavian 07 Mar '15

07 Mar '15

Hello! My name is Dan, I've been working on a pluggable transport for Tor based on bittorrent as cover traffic and wanted to let you know about it. https://github.com/danoctavian/bit-smuggler In a nutshell, I'm tunnelling a data stream through a bittorrent peer connection that is created by real bittorrent clients (uTorrent for this implementation) - to avoid "parroting" traffic pitfalls and active probing. This made the implementation quite tricky to get right, so my reasoning is that it's a worthy trade-off. I worked with Dr. George Danezis as my supervisor for the project. He came up with the idea to try bittorrent, the crypto strategy and advised me throughout. The docs in the repo contain more information. I researched this topic for my master thesis, and the last 2 months i did a rewrite of the project. At the moment I did not integrate with Tor (working on an Extended orPort implementation) and I need to do more work on the server to make it run properly as a long running process. Please ask me anything for clarification and let me know how can i make this useful for the Tor project. Any kind of feedback is very welcome. I'm working a 9-5 starting next week, but I'm going to work on it in my spare time. Thanks!

6 13

Where can I find info for TunnelDirConns 0|1 ?
by HOANG NGUYEN PHONG 07 Mar '15

07 Mar '15

Dear all, I read a discussion about "How can Tor use a one hop circuit to a directory server during initial bootstrap?" here However, why I cannot find "TunnelDirConns 0|1" in torproject.org/docs/tor-manual.html.en? Is the feature already removed or replaced with another name? Next, may I ask that as Weasel mentioned in his answer for the question: "This so-called tunneled connection doesn't provide anonymity. It only provides confidentiality, i.e. nobody listening on your network can know exactly what you fetched" However, in Tor directory Protocol 3, there is a sentence "all directory information is uploaded and downloaded with HTTP" which means no encryption for what we fetch, so where is the "confidentiality"? Best Regard.

2 1

Patch to improve time-period interval changes in 224-rend-spec-ng.txt
by Adrien Johnson 07 Mar '15

07 Mar '15

Hello all, I have a patch for proposal 224-rend-spec-ng.txt that clarifies the definition of time periods and improves the behaviour when the time period duration needs to be changed. -Adrien Johnson

1 0

Tor Browser sha256 checksums for old versions?
by Griffin Boyce 07 Mar '15

07 Mar '15

Hey all, I was just wondering if it's possible to get a gpg-signed list of sha256 checksums for the Tor Browser. The website only shows the current version's list of hashes. Which is really useful, but it would be great to have them all if possible. thanks, Griffin -- “Sometimes the questions are complicated and the answers are simple.” ― Dr. Seuss

2 2

TBB for Ubuntu Touch?
by CJ 05 Mar '15

05 Mar '15

Hello, I just saw Ubuntu Touch might be installed on some devices, for example a nexus7, or nexus4, or nexus10. Is there anything to do in order to get TBB on Ubuntu Touch, knowing it's a more or less standard Linux system? Did anyone tried it? I think I'll give a try to Touch on my nexus 7 — might be the time to do some tests regarding Tor on this kind of OS ;). Cheers, C.

2 3

Different Key Fingerprints for Tor Browser?
by Florian Rüchel 05 Mar '15

05 Mar '15

Hey, just downloaded Tor Browser and noticed that most of the fingerprints on the page " 0x4E2C6E8793298290". However, under "Mac OS X and Linux" it reads " Erinn Clark signs the Tor Browsers. Import her key (0x416F061063FEE659) ". Shouldn't this be updated to the other fingerprint as well oder am I missing something? Regards, Florian

2 1

Re: [tor-dev] TBB for Ubuntu Touch?
by Nathan Freitas 05 Mar '15

05 Mar '15

On Thu, Mar 5, 2015, at 12:54 AM, CJ wrote: > Hello, > > I just saw Ubuntu Touch might be installed on some devices, for example > a nexus7, or nexus4, or nexus10. > > Is there anything to do in order to get TBB on Ubuntu Touch, knowing > it's a more or less standard Linux system? Did anyone tried it? You can definitely get tor running as a binary, but the low-level OS is actually more closely based on Android, and the window manager layer in Ubuntu Touch is quite different from the desktop version. > > I think I'll give a try to Touch on my nexus 7 — might be the time to do > some tests regarding Tor on this kind of OS ;). Give it a try - who knows what might be possible. Ubuntu Touch is definitely a platform I am excited about too! +n

1 0

Porting Tor Browser to the BSDs
by Libertas 03 Mar '15

03 Mar '15

Has anyone looked into this? I talked to the maintainer of the OpenBSD Firefox port, but he wasn't very interested and pointed out the difficulty caused by the deterministic build system. I can verify that it doesn't work out of the box, but haven't had time to play with it much more than that. I think that the Tor Browser is an increasingly important tool, and that it's a problem that it isn't available on the BSDs. Thoughts? Suggestions?

5 8

RFC: Tor Messenger Second Alpha
by Sukhbir Singh 03 Mar '15

03 Mar '15

Hi, Tor Messenger is an instant messaging client currently under development. It is designed to make connections using the Tor network and will therefore be a valuable piece in the privacy-enhancing software toolkit (web: Tor Browser, email: Thunderbird + TorBirdy, chat: Tor Messenger.) Based on the Instantbird IM client [0], Tor Messenger: - sends all traffic over Tor, - uses Off-the-Record (OTR) encryption [1] of conversations by default, - can be used with a wide variety of chat networks, - has an easy-to-use graphical user interface localized into multiple languages. Some more information about Tor Messenger (and why we picked Instantbird) can be found on the wiki [2]. * Current Status We have Tor Messenger bundles for Linux (32-bit and 64-bit) with OTR (using ctypes-otr [4]) and Tor support (Tor binary and Tor Launcher included), among other privacy settings. We are doing automated builds of Tor Messenger using rbm [5] (thanks to Nicolas Vigier). @@@ WARNING: NOT READY FOR PUBLIC USE. DO NOT DISTRIBUTE. @@@ * Bundles Linux (32-bit) https://people.torproject.org/~sukhbir/tor-messenger-0.0.5/tor-messenger-0.… Linux (64-bit) https://people.torproject.org/~sukhbir/tor-messenger-0.0.5/tor-messenger-0.… sha256sum https://people.torproject.org/~sukhbir/tor-messenger-0.0.5/sha256sums.txt https://people.torproject.org/~sukhbir/tor-messenger-0.0.5/sha256sums.txt.a… The bundles are signed with the key 0xB297B391. Extract the bundles and then run: ./start-tor-messenger. This is an early release and there may be serious privacy leaks and other issues -- please DO NOT recommend Tor Messenger to end users; this release is only for developers and advanced users who would like to help us with testing but understand the risks involved with using alpha software. DO NOT ignore this warning. Notable changes since the last release include various privacy improvements, OTR UI enhancements and support for authentication via SMP. @@@ WARNING: NOT READY FOR PUBLIC USE. DO NOT DISTRIBUTE. @@@ * Feedback With this release, we invite feedback not limited to anonymity leaks, usability issues, feature requests and suggestions for improvement. Please submit your feedback using the bug tracker [3] (select the "Tor Messenger" component). You can also talk to us on this mailing list or on IRC. (No seriously, don't use the bundles for any serious communication yet.) [0] - http://instantbird.com/ [1] - https://otr.cypherpunks.ca/ [2] - https://trac.torproject.org/projects/tor/wiki/doc/TorMessenger [3] - https://trac.torproject.org/projects/tor/newticket [4] - https://github.com/arlolra/ctypes-otr [5] - http://rbm.boklm.eu/ Thanks, Arlo Breault and Sukhbir Singh

1 0

GSOC - Tor not selected this year?
by Frederic Jacobs 03 Mar '15

03 Mar '15

Hey Tor-Dev, I see there are a few proposals coming in for GSoC projects but browsing the list of selected projects, it does appear that Tor was not selected this year. (Neither is Mozilla <http://blog.queze.net/post/2015/03/03/Mozilla-not-accepted-for-Google-Summe…>). So unless I’m getting it wrong, I don’t think Tor will be part of GSoC this year :( Have a nice day everyone, Fred

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

tor-dev