- tor-dev - lists.torproject.org

[404] :-( Retrieving Hidden Service Public-Key ...
by Achref Akremi 27 Jul '14

27 Jul '14

onion adress: 3g2upl4pq6kufc4m.onion date: 18 Jul 2014 22:27:20 GMT 1st: compute the v2 descriptor id: > with replicas 0: efa0506e1e5d3f193bf6509e1f4709e6e2322436 > with replicas 1: efa0506e1e5d3f193bf6509e1f4709e6e2322436 2nd: find responsible HSdir's: > efa0506e1e5d3f193bf6509e1f4709e6e2322436 > pmocek > marcuse1 > riptide > fc2c757e88910b3d72594706c477e21f60334a15 > torpidsCZwedos > gracefoster > halingrad 3rd: request: > http:// HSdir[IP] : HSdir[DirPort] /tor/rendezvous2/ Desc-ID ^^^^ here i got a 404 response >.< sorry ... if i'm doing something wrong ... if i do tell me :p

3 2

(meek|flashproxy)+(obfs3|fte|scramblesuit|...)
by Kevin P Dyer 27 Jul '14

27 Jul '14

Are there any roadblocks that prevent us from doing the following? 1. Remove the hard-coded bridge_prefs.js in the TBB. 2. Set meek as the default pluggable transport in the TBB. 3. Use meek to acquire an up-to-date bridge_prefs.js from, say, torproject.org. 4. Use the information from the acquired bridge_prefs.js to connect to Tor as normal. Ostensibly, this doesn't do a better job of hiding bridge addresses. However, it allows us to modify bridge addresses without releasing a new TBB. -Kevin

3 4

Chutney couldn't start Tor instances
by Jesse Victors 26 Jul '14

26 Jul '14

Hello everyone, I'm doing some research on Tor and I'm trying to set up a small sample Tor network to play with. I cloned the Chutney repository with /$ git clone https://git.torproject.org/chutney.git/ and then I ran /$ ./chutney configure networks/basic/ which generated the keys for each of the three authorities and also set up five relays and two clients. Everything looked good, but when I ran /$ ./chutney start networks/basic/ it says: /Starting nodes// //Couldn't launch test000a (tor --quiet -f <path>/net/nodes/000a/torrc): 255// //Couldn't launch test001a (tor --quiet -f ///<path>//net/nodes/001a/torrc): 255// //Couldn't launch test002a (tor --quiet -f ///<path>//net/nodes/002a/torrc): 255// //Couldn't launch test003r (tor --quiet -f ///<path>//net/nodes/003r/torrc): 255// //Couldn't launch test004r (tor --quiet -f ///<path>//net/nodes/004r/torrc): 255// //Couldn't launch test005r (tor --quiet -f ///<path>//net/nodes/005r/torrc): 255// //Couldn't launch test006r (tor --quiet -f ///<path>//net/nodes/006r/torrc): 255// //Couldn't launch test007r (tor --quiet -f ///<path>//net/nodes/007r/torrc): 255// //Couldn't launch test008c (tor --quiet -f ///<path>//net/nodes/008c/torrc): 255// //Couldn't launch test009c (tor --quiet -f ///<path>//net/nodes/009c/torrc): 255/ No log files are generated in <path>/net/nodes/000a, so I don't know what happened. I don't see any conflicts with ports on localhost as far as I can see. Tor version 0.2.4.22 and Python 2.7.5+ are installed. Any ideas? -- Jesse V.

2 1

Tor Research Framework
by Gareth Owen 26 Jul '14

26 Jul '14

Hi all I am releasing under the GPL a Java based Tor research framework that I have developed. The goal of the framework is to provide a simple and easy to read/modify implementation of the protocol that allows you to do things wrong. This enables researchers to try things out without trying to battle with the full tor client source or with a client that tries to help you (e.g. by proactively building circuits) - this one does as its told and no more. At present, it is a fully functional client with a number of examples for hidden services and SOCKS. You can build arbitrary circuits, build streams, send junk cells, etc. I want to build up the examples over the coming months to include sample attacks on tor (e.g. traffic pattern generators/detectors). I also want to build out the documentation to reduce the barrier to entry for researchers as much as possible. I hope it will be useful to someone - patches/pull requests always welcome! Source: https://github.com/drgowen/tor-research-framework Best wishes Gareth -- Dr Gareth Owen Senior Lecturer School of Computing, University of Portsmouth Tel: 02392 846423 Web: ghowen.me

1 0

[GSoC] BridgeDB Twitter Distributor report
by Kostas Jakeliunas 26 Jul '14

26 Jul '14

Progress/activities since last time: * incorporating BridgeRequest's together with an initial bridge request API over JSON (it's easier to do both as they are tightly related.) The bridge request api is based on isis' initial fix/12029-dist-api_r1; * bogus server-side bridge provider that implements the json api: just something that gives fake bridges based on the request (which is handled/contained in BridgeRequest.) (will have server side code real soon now (hoped to have it by now.)) * my churn_rewrite could probably make use of bridgedb's current approach to pickled storage. (It's also worth switching to twisted.spread.jelly for (mostly) security) * experimenting with sending images over twitter DMs. Twitter API does not support images in DMs, but the web as well as various mobile apps support attaching images to DMs (images end up in twitter CDN. (served over ton.twitter.com) which is good.) Some progress here: the web client DM send requests (where image files can be attached) are contained; the bot should be able to send images in DMs soon, emulating a normal web user agent (but using the two twitter APIs for all other activities and DMs.) * once bridgerequest's + request api (client-side + my mock server-side thing) are done, the bot will have approached a not-far-from-functional state Apologies for the late report. -- Kostas. 0x0e5dce45 @ pgp.mit.edu

1 0

Counter Base Encryption
by Soroosh Sardari 26 Jul '14

26 Jul '14

Hi I have to do some experiments on tor and I must disable counter-based encryption for cells. Is there a simple way to do that? I appreciate any idea. Soroosh

1 0

What are some aspects of Tor that are suffering right now due to lack of speed?
by Virgil Griffith 25 Jul '14

25 Jul '14

Hidden services quickly come to mind. Are there other candidates? I can imagine people deciding not to view certain content through Tor because of speed (e.g., pornhub). But I suspect I am missing some use cases. -V

2 1

DEFAULT_ROUTE_LEN [was: Silly (or not so silly) question]
by grarpamp 24 Jul '14

24 Jul '14

On Wed, Jul 23, 2014 at 6:34 PM, Roger Dingledine <arma(a)mit.edu> wrote: > On Wed, Jul 23, 2014 at 11:24:47PM +0100, Noel David Torres Taño wrote: >> What would happen if a Tor node changes behaviour and uses four or five >> relay steps instead of three? At around DEFAULT_ROUTE_LEN 8 or above I get a lot of these, with EXTEND being shown in various command locations, and no connectivity to hidden services. Lower values or 4 or 5 probably work just fine but I didn't bother testing more than a couple clearnet and onion circuits since it's not yet a controller/config tunable and thus takes edit/compile/run time. So even my test of 9 > 5 > 7 > 8 take with salt. Don't know if this likely represent a bug to test more, or just timeouts... the circuits that did work setup in times not feeling much more than time/3*LEN. I'd suggest an undocumented tunable and unit test if it's worth research/statistic/function_checking purpose. relay_send_command_from_edge_(): Bug: Uh-oh. We're sending a RELAY_COMMAND_EXTEND cell, but we have run out of RELAY_EARLY cells on that circuit. Commands sent before: (unrecognized),(unrecognized),(unrecognized),(unrecognized),EXTEND,EXTEND,(unrecognized) >> Would it enhance Tor's security? > > I assume you mean a Tor client? > > https://www.torproject.org/docs/faq#ChoosePathLength > >> Is it possible to relay Tor through a Tor connection? I mean using Tor >> with its three steps to reach a Tor entry node to get three extra steps. > > Yes, it is possible. But it is currently considered a flaw, because it > can be used to work around the 'infinite path length' defenses. > http://freehaven.net/anonbib/#congestion-longpaths > https://gitweb.torproject.org/torspec.git/blob/HEAD:/proposals/110-avoid-in… > https://trac.torproject.org/projects/tor/ticket/2667 > >> Would that difficult correlation attacks? > > Defending against correlation attacks is an open research, so "maybe". > But it's not clear how it would, since an adversary who can see or > measure your first hop (on the first circuit) and also your last hop > (on the last circuit) would still be in the right place to do the attack.

2 1

New Version of OnionMail 1.6.0.667B is Out
by Liste 24 Jul '14

24 Jul '14

* Thunderbird autoconfiguraticon. * Web Server. * User subscription webpages. * Full integrated PGP key generation and keyServer sender. * Mail Queue (onli exit/enter server). * Bash OnionMail Setup wizard. * And much more... You can activate an OnionMail server in 5 minutes! You can create a new user account in 100 seconds! The mode is easier to get a mail box is described here: http://onionmail.info/network/ >From this new version you can get a mail box via web directly. Download the new version at: http://onionmail.info/download/ User Manual: http://www.onionmail.info/manual.html What is OnionMail? http://onionmail.info/paper.html OnionMail Project http://onionmail.info

1 0

channel_t to IP Address
by Gareth Owen 24 Jul '14

24 Jul '14

Hi all Quick question, how does one turn channel_t into an IP address, e.g. given a circuit_t how do I get the IP address of the previous and next hop (noting that they might not be in the consensus so I cant use the identity hash). I can see the information is in the connection_t struct but I don't know how to get that from the channel/circuit. Any help appreciated. Thanks Gareth -- Dr Gareth Owen Senior Lecturer School of Computing, University of Portsmouth Tel: 02392 846423 Web: ghowen.me

2 3