- tor-dev - lists.torproject.org

resistance to rubberhose and UDP questions
by Eugen Leitl 04 Oct '12

04 Oct '12

I've had an IRC session with the designer of cjdns (on cjdns) who made a few interesting points, and suggestions. Comments? Verbatim chat snip below. 18:03 <@cjd> if you took the components from cjdns, you could build a TOR like protocol which used UDP if possible and made connections much faster 18:04 <+eleitl> I wonder why they didn't choose UDP 18:05 <@cjd> you need to fall back on tcp in case you're firewalled to hell 18:05 <+eleitl> Apparently, they're thinking about it https://blog.torproject.org/blog/moving-tor-datagram-transport 18:06 <@cjd> problem with tor is (correct me if I) 18:06 <@cjd> 'm wrong) 18:06 <@cjd> the directory is signed by the tor foundation 18:07 <@cjd> so they can sign a fake directory and run a bunch of directory servers and when Alice connects to their directory server, they give her a bunch of fake nodes 18:07 <@cjd> run their own botnet with fake tor nodes so your circuit is always owned 18:07 <+eleitl> I don't really know for sure, but there's intrinsic trust to Tor developers, yes. 18:08 <+eleitl> You can run your own Tor network, though. 18:08 <+eleitl> Some botnets do that. 18:08 <@cjd> I trust them to make the software right, esp. since I could check if they did. 18:09 <@cjd> But a little arm twisting can change someone's motives pretty fast. 18:09 <+eleitl> Maintaining signing secrets is a problem. 18:09 <+eleitl> They should have used a P2P design. 18:10 <@cjd> If someone (with government hat?) tells you they can make your life hell... I wouldn't fault them for doing what the man says. 18:10 <@cjd> *wouldn't fault you 18:10 <+eleitl> I'll try bugging some Tor developers about that scenario, and see how they squirm. 18:11 <+eleitl> Also, the UDP connection thing. 18:11 <@cjd> You can "stack" your circuit setup packets if you're using UDP 18:11 <@cjd> stack -> all headers in the same packet 18:12 <@cjd> cjdns does the same thing 18:13 <+eleitl> Can I use snippage from this chat verbatim, or will I need to rephrase? 18:14 <@cjd> sure go ahead 18:14 <+eleitl> Thanks! 18:14 <@cjd> can only speak for myself ofc 18:14 <+eleitl> Sure.

1 0

Damian's Status Report - September 2012
by Damian Johnson 04 Oct '12

04 Oct '12

Hi all. As is often the case work and such meant not too much time for tor. For September all I have to report is... * Network Status Document Parsing This has been my main focus for September and it's still not finished... but it's close! Version 3 document parsing just has a couple days of work left, then abstracting it to cover v2 documents and microdescriptors should be relatively easy-ish. I'm really looking forward to merging this feature branch. It has grown quite monstrous... https://gitweb.torproject.org/user/atagar/stem.git/shortlog/refs/heads/docu… * Stem Documentation Hosting For a while now I've had a TODO item for making a nightly cron that built and hosted Stem's new sphinx documentation. I was about to do this when I recalled that meejah once recommended ReadTheDocs, a service that does... well, exactly that. After a few minor bumps [1][2][3] it's now live... https://stem.readthedocs.org/ We definitely need to put effort into making them more reader friendly. At present it's just a dump of all the pydocs which, while informative, is actually a bit overwhelming for new users. Module summary pages would greatly help. * MAPADDRESS Support Ravi submitted a patch for adding MAPADDRESS support to stem's controller. It's a nice addition, especially the integ test... https://trac.torproject.org/6951 * Arm Issues Looked into a couple arm issues... - Tor's start time didn't show up if the system has proc contents but we fail to parse it [5]. - Can't connect when using a control socket with password auth [6]. * Updated Dev Wiki In response to a potential volunteer I wrote a summary of several development tasks [4]. Updated stem's wiki with what was in that email... https://trac.torproject.org/projects/tor/wiki/doc/stem Cheers! -Damian [1] https://github.com/rtfd/readthedocs.org/issues/255 [2] https://github.com/rtfd/readthedocs.org/issues/256 [3] https://gitweb.torproject.org/stem.git/commitdiff/705b61674e8cec9e5608a32c6… [4] https://lists.torproject.org/pipermail/tor-dev/2012-September/004021.html [5] https://trac.torproject.org/6862 [6] https://trac.torproject.org/6881

1 0

gsathya's September devlog
by Sathyanarayanan Gunasekaran 03 Oct '12

03 Oct '12

Tickets I hacked on, closed, discussed, code reviewed, etc - ### Pyonionoo * Hacked on the Pyonionoo front end to make it deployable. I've mostly finished implementing all the features. Thanks to karsten for the really fast code reviews! #6708: Pyonionoo returns code 500 for a few parameters #6954: Internal Pyonionoo thread prints out traceback after 1 minute #6953: (relays|bridges)_published in Pyonionoo should not depend on relays/bridges contained in result #6956: lookup and country parameters in Pyonionoo should not be case-sensitive #6955: Illegal value for type parameter leads to uncaught exception in Pyonionoo #6707: Pyonionoo leaves out "relays[ _published]" when asking only for bridges ### Onionoo #6864: search shouldn't use space separated values ### Metrics Analysis #1854: Investigate raising the minimum bandwidth for getting the Fast flag * Made https://pad.riseup.net/p/tormetrics with asn and Aaron's help -- need to start working on it rsn. ### Atlas #6711: Replace full exit policy with exit policy summary on relay details page ### Compass #6618: convert compass to a single page app #6677: add a 'total' line at the bottom of the table #6818: compass appears broken #6807: Add a loading image when doing an Ajax request #6639: Rename navigation bar entries, add About page and logo #6691: BaseFilter isn't really an abstract class... yet #6959: compass calls itself tor metrics Things to do in October - * Deploy pyonionoo front end. * Hack on my undergrad thesis - Measuring the diversity of Tor network * Restart work on pyonionoo back end.

1 0

gsathya's August devlog
by Sathyanarayanan Gunasekaran 03 Oct '12

03 Oct '12

Tickets I hacked on - ### Compass #6498 - make compass, add FastExits, AlmostFastExits options #6679 - Make Compass' website interface more intuitive #6618 - Convert Compass to a single page app #6692 - Displaying more information when using 'group by' feature #6696 - add Byte/s to Advertised Bandwidth column #6617 - fix links to atlas #6681 - change top to default to -1 * Code reviewed Karsten's patches to #6680, #6702, #6693.

1 0

Tor's current traffic scheduling
by Sambuddho Chakravarty 03 Oct '12

03 Oct '12

Hi All I am a bit curious to know how does the traffic scheduling work in the present Tor distributions. Is it EWMA or the old round robin method ? Thanks Sambuddho

2 2

automation of open links in new tab in TBB
by jiang song 30 Sep '12

30 Sep '12

Hi, If I use firefox, I can use a simple command line to open a link in a new tab automatically, like firefox www.google.com now I want to open TBB first, and then open a link in a new tab, is there any script or method to automate this operation? I need this automation for some experiment, I know TBB is a modified firefox, so if there are TBB developes here, they may know how to do this, thanks!

2 5

Help with pf and iOS
by sid77＠slackware.it 28 Sep '12

28 Sep '12

Hi all, it took me a year or so but I've finally managed to build Tor for iOS with a working support for TransPort, as you can see on: https://github.com/sid77/evelyn/blob/master/tor/make.sh The next natural step is to hack together full device torification as iOS jailbroken devices can run pf (without ALTQ support). I'm not very comfortable with pf and pfctl so my first step was to head out to https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy#BSDPF looking for some clue. However, jailbroken iOS' ifconfig can not bring up a second loopback interface (I think the kernel is not allowing it) so I had to test out some custom rules, my current pf.conf is as follow: -8<- scrub in rdr pass on lo0 inet proto tcp all -> 127.0.0.1 port 9040 rdr pass on lo0 inet proto udp to port domain -> 127.0.0.1 port domain block return out pass quick on lo0 keep state pass out quick inet proto tcp user nobody flags S/SA modulate state pass out quick route-to lo0 inet proto udp to port domain keep state pass out quick route-to lo0 inet proto tcp all flags S/SA modulate state -8<- taken from: https://github.com/sid77/mobiletor/blob/master/pf.conf I apply it running this script: https://github.com/sid77/sbsettingstor/blob/master/com.sbsettingstor.enable Tor is running as user nobody (not really secure but I still have to figure out system user management on the platform) and answering DNS queries on 127.0.0.1:53. This solution is failing *REALLY* hard as I managed to run into a kernel panic as soon as I tried to generate some traffic with Mobile Safari or Cydia. Is there any pf guru out there which can give me some insights? Ciao, Marco

4 4

automatic play of video with webbrowser
by esolve esolve 26 Sep '12

26 Sep '12

Hi, all: I want to investigate on video streaming on tor. I want to use tor and browser to play some videos for many times so I want to automate the operation. Are there any scripts that can automate the playing of videos(like from youtube,etc) I know playing videos can impediment the anonymity, but that is not my concern. Thanks!

2 1

information about "last_restarted"
by succer110＠tiscali.it 25 Sep '12

25 Sep '12

Hi everyone tor devel! I would like to know more information about last_restarted information. - It's possibile to forge this kind of data or is somehow certified by the tor network? Sometime, while sampling hourly some data by onionoo i've noticed some difference in the uptime by + or - a few seconds in this value. - Any idea of how this is possible?! - In which file do i find the code that handle this value? Thank you! Invita i tuoi amici e Tiscali ti premia! Il consiglio di un amico vale più di uno spot in TV. Per ogni nuovo abbonato 30 € di premio per te e per lui! Un amico al mese e parli e navighi sempre gratis: http://freelosophy.tiscali.it/

2 1

Email-based rendezvous for flash proxies
by David Fifield 25 Sep '12

25 Sep '12

I have made a design and written some code for an email-based registration system for flash proxy clients. Registration is the process by which a censored client sends its IP address to request service from an external proxy. In summary, a censored client sends its address in encrypted email over SMTP over TLS to a distinguished email address. A program running on the flash proxy facilitator makes an IMAP connection over TLS, polls for messages, then decrypts them and registers the addresses withing. The email messages are sent by a registration helper program, not the client's own email account, and they appear to come from a dummy address. More information is in the ticket: https://trac.torproject.org/projects/tor/ticket/6383#comment:5 I would appreciate a second look at the design, especially the use of crypto. The ticket's comment number 5 calls out some particular features. This is our first registration system with a claim to being hard to block. This is step 1 that goes through the firewall in the diagram at http://crypto.stanford.edu/flashproxy/#how-it-works. The censor sees a TLS session with a Gmail MX server, followed later by an incoming connection from a flash proxy at a previously unseen IP address. What makes this different than other circumvention ideas is that nothing is sent directly to any published or unpublished Tor relay. David Fifield

1 0