- tor-dev - lists.torproject.org

Re: [tor-dev] TOR peer-to-peer network
by Aravindan B 01 Dec '13

01 Dec '13

> > Hi all, > > I am stuck at one point and not able to proceed. I want to establish a > peer-to-peer TOR network using Stem. I am trying to simulate TOR in VANET. > I am using CORE emulator (VANET) and Stem tor for the same as both supports > python scripts. > > As you can see in the attached topology I am wanted to use 4 nodes with > 10.0.0.21 as client, > 10.0.0.22 - entry > 10.0.023 - middle node > 10.0.0.24 - exit node > > I am trying to setup a peer-to-peer tor network with these above nodes. > I am using TOR bridges for the entry and middle nodes. This is working fine > if I run it outside core whereas when I try to run these bridges inside > core emulator with those node IP:ports, its failing and TOR circuit is > timing out. Is there anything I need to run on these nodes like a server or > something (if yes, need a code for that) to respond to the connecting tor > client? > > When i use the bridges which i got from the internet, it works. whereas > when i try to use my own IPs its not working. Please let me know how to > proceed on this as i am stuck here for a long time. Thanks in advance. > > Thanks and Regards > Aravindan > >

2 1

Orbot+Orchid redesign
by Nathan Freitas 01 Dec '13

01 Dec '13

Now that Orchid is released at a v1 stage, I have been thinking about having Orbot use it by default, and then offering ARM and x86 binaries as add-on enhancements. This would make the core Tor on Android experience more lightweight for client only use. If people want to run relays, need a higher performance option or want the "real" Tor, they can get the Orbot native APK add-on for their architecture. Any objections to this approach? Is Orchid ready for this?

2 1

Dynamic Networks in Chutney
by Christopher Baines 30 Nov '13

30 Nov '13

I am attempting to use Chutney to test some hidden service related functionality in Tor. Specifically distributed hidden services involving more than one node. Furthermore, to extensively test aspects of this, the network needs to change. At the moment, I have just looked at nodes coming up and down, but this could probably be extended also. Currently I believe the support for this functionality is limited to a patch (very functional, I have been using it successfully) that allows nodes to start after a delay [1]. While this does work, this could make any tests that use delays respond differently depending on what system they are ran. The best solution to this that I can see is using some event based system, such that chutney (using an existing Tor controller) connects to the nodes as necessary, to check their state, and trigger any events as necessary. A few high level examples that I would like to use: - when node 010h has uploaded a descriptor for service <service>, start node 011h - when any of nodes (000a, 001a, 002a) have a service descriptor for <service>, start node 011h Do others using/developing chutney think this would be a useful addition, and is anyone already working on doing this or similar? 1: https://trac.torproject.org/projects/tor/ticket/10155

2 1

OnionMail: First public server + 2 Hidden services.
by Liste 28 Nov '13

28 Nov '13

OnionMail Ver. 0.1.3B Is out! OnionMail is a SMTP/POP3 Mail hidden service with tor->mail (exit), mail->tor (enter). Now an exit/enter node is onionmail.info How to get an OnionMail box: http://onionmail.info/reqmail.html We suggest the `ridot` server. How to install OnionMail http://www.youtube.com/watch?v=FcM01lT9b3A http://onionmail.info

1 0

Tor Ecosystem Presentation
by Damian Johnson 28 Nov '13

28 Nov '13

Hi all. A little over a week ago I gave a presentation at Seattle's TA3M at Ada's Books to give an overview of the projects within the Tor ecosystem. This is a revised version of a similar presentation Roger and Jake gave at 29c3... Presentation: https://archive.org/download/t3am-seattle-nov2013/damian_johnson.mp4 Slides: https://www.atagar.com/transfer/tor_ecosystem/ I'm really startled about how high pitched my voice turned out. Strange I've never heard myself recorded and played back before. That aside, the presentation turned out pretty well. Many thanks to Lee and Chirs (TA3M's organizers) and Mr. Caggiano who recorded the presentation. Cheers! -Damian

3 2

Trac upgraded to 1.0
by Erinn Clark 28 Nov '13

28 Nov '13

Hi everyone! Weasel and I have upgraded https://trac.torproject.org/projects/tor to version 1.0 of Trac. I've tried to make sure that all functionality is the same (or improved), but if you see anything missing or broken, please let me know! Thanks, Erinn

1 0

What happened to Tor Router?
by SiNA Rabbani 26 Nov '13

26 Nov '13

Hi, I am trying to update myself on the status of Tor Router. I remember not too long ago it was a sexy project, funds were raised and people got paid to work on it. Has it been abandoned? How come we still don't have a Tor hardware router? All the best, SiNA I'm wondering why

8 10

Development of an HTTP PT
by dardok 25 Nov '13

25 Nov '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi, I am quite new in here but I am interested to help and improve the TOR system. I am interested in PTs and particularly in developing a HTTP PT. I've read some papers [0],[1],[2],[3] and the ticket #8676 and I consider that it would be a good idea to make an effort and try to implement the HTTP PT as is stated in the ticket, that is using real browser and server services. After talking with asn, we conclude that a good point to start this development may be to focus on the HTTP transport part, that is to know how to control the browser or the server and how to embed the TOR traffic into the HTTP protocol (requests and responses). Things such as the data obfuscation, the delays in the communications and the packet chopping won't be considered, because it may be used another PT such Scramblesuit to do that task. The CLIENT side: TBB <-> Scramblesuit PT <-> HTTP PT <-> CENSOR NET and the SERVER side: CENSOR NET <-> HTTP PT <-> Scramblesuit PT <-> TOR bridge The important is to know how to embed the TOR traffic already obfuscated into the requests and responses to avoid suspicion. Also as I said before, to know how to control a browser binary to make the HTTP traffic from the client side as much traditional as possible, for instance using a firefox binary or something like that. The same must be applied to the server side, implementing a real NGINX server or an Apache server on port 80 and writting some CGI to classify the traffic incoming from the TOR clients through the HTTP requests. The same server may have another CGI to write and send the HTTP responses to those TOR clients with the traffic into them. I would like to find someone interested to work on this topic. Thanks and I wait for your comments or suggestions! [0] http://www.owlfolio.org/media/2010/05/stegotorus.pdf [1] http://www.cs.kau.se/philwint/pdf/wpes2013.pdf [2] https://www.ieee-security.org/TC/SP2013/papers/4977a065.pdf [3] https://github.com/sjmurdoch/http-transport/blob/master/design.md -----BEGIN PGP SIGNATURE----- iQEcBAEBCgAGBQJSarhoAAoJEFz9RJtDk2+MsnwH/2MugLeUH+EOc6bzyKJ25W/N 5Kf9w1YdU276z5eba6+fY38H6l3hwErT6TaiWcULiVra1JshLLWaTGHS9AiP4Nf3 QTUVjUMQNiqGkLvNBIkxwqe8MQo1d5GgEhul4fYzMKS46clhmkb6lILIfZ4bRDyc 8bctM8qOk7mLVkp9Ip+ehv/J6S4wmSNtKUIj88mUyfRDDXn/+r7OQx+FDoC/3YiL XzFpaeofPgdWb35cieQvR2wWqWN3N5BRK1R7o0g02BfOYEXOxQ2KaIWUqJBiyKqo uzSAkic1a5qDpJImAQhjAVrqZi1NKZbQQM+33caWm8T9fWkNojClQZ2PzbJn0os= =zI1W -----END PGP SIGNATURE-----

5 5

FTE v0.2 Release Candidate
by Kevin P Dyer 25 Nov '13

25 Nov '13

I'm pleased to announce the release candidate of a pluggable transport powered by Format-Transforming Encryption. Cross-platform PTTBBs are available on the FTE website: https://fteproxy.org/download dcf - I've added a patch to ticket #9941. This patch can be applied to [2], to integrate FTE into the PTTBB. My fork is available at [3]. The source code [4] for fteproxy is available on github. -Kevin [1] https://trac.torproject.org/projects/tor/ticket/9941 [2] https://git.torproject.org/pluggable-transports/bundle.git [3] https://github.com/kpdyer/bundle [4] https://github.com/kpdyer/fteproxy

1 0

Re: [tor-dev] bananaphone obfsproxy module
by George Kadianakis 25 Nov '13

25 Nov '13

David Stainton <dstainton415(a)gmail.com> writes: > Hi, > > Yeah... I should add a doc string to the BaseTransport __init__ > explaining that it runs upon connect. > > OK yesterday I implemented transport class method called setup()... > The BananaphoneTransport overrides setup()... storing the markov model > in a class attribute. > I had to modify pyobfsproxy.py and run the class setup() method after > the external cli args are parsed. > > I made it work for external cli mode... by making pyobfsproxy.py run > the setup method for each transport after > args.validation_function(args) runs... because the setup method needs > some args to read the corpus file and build the markov model. > > What should I do to get arguments passed to obfsproxy when running in > managed mode? > Hm. Good question. You probably want to go to obfsproxy/managed/server.py and obfsproxy/managed/client.py and place a strategic run_transport_setup() hook. I would place it before the launch_transport_listener() call. You might also need to use obfsproxy/transports/get_transport_class() somewhere in there. Another nice thing would be if you could pass the pt_config struct in setup(), so that transports can use pt_config elements during initialization. As an example, see how obfs2 configures its shared-secret in its __init__ using getServerTransportOptions(). That could be done in its setup(), I think. Does this make sense? If you don't want to do this coding, I can do it at some point next week. Cheers! ( And while I'm on it, let me tell you about the different ways that you can pass parameters to obfsproxy. I wanted to document this somewhere, and this thread seems like a good excuse :) - External mode: You can pass global parameters to external mode transports by using the register_external_mode_cli() and validate_external_mode_cli() functions. - Managed mode: - Global parameters: These are parameters that are passed to obfsproxy on startup. - Server: On the server-side we can pass global parameters to obfsproxy by using the TOR_PT_SERVER_TRANSPORT_OPTIONS environment variable. Obfsproxy exposes those parameters using the transport_config struct and obfsproxy/common/transport_config.py:getServerTransportOptions . - Client: On the client-side we don't have a way to pass global parameters to obfsproxy yet. If we ever need to, we can do it with environment variables here too. - Per-connection parameters: These are parameters which are supposed to be different for each connection. An example of such a parameter can be a shared-secret used for a specific bridge connection. - Server: On the server-side we don't have a way to pass per-connection parameters at the moment. - Client: On the client-side we pass per-connection parameters using the SOCKS handshake as a covert channel. Transports can retrieve these parameters using the handle_socks_args() method. )

2 11