- tor-dev - lists.torproject.org

Scripts and VMs for helping people setup a relay or bridge
by Alessandro Fiori 09 Apr '19

09 Apr '19

Hi, since i have released some Docker images for help people to run their own service or relays, i'm releasing some Virtualbox images and scripts for who want to run their relays. Virtual machines are in importable OVA format, and are based on Ubuntu Command Line Install, for a very light-weight system. I have released, for now, a Script and Virtual Machine for Tor middle relay, next days i will release bridge scripts for bridge with pluggable transports pre-installed. The Script repository is located here: https://github.com/randomtable/ChimeraOS/tree/master/Scripts The Virtual Machines repository is located here: https://github.com/randomtable/ChimeraOS/tree/master/VMs I'm writing to "dev" mailing list, because a very expert eye is always needed. I hope this can be useful for everyone. Alessandro Fiori

2 1

Re: [tor-dev] New revision: Proposal 295: Using ADL for relay cryptography (solving the crypto-tagging attack)
by Jeff Burdges 08 Apr '19

08 Apr '19

If I understand, proposal 295 looks similar to either BEAR or LION from the LIONNESS. I vaguely recall both BEAR and LION being "broken" in some setting, although I cannot site the paper. Anyone? I suppose the BEAR and LION break originates from using them for authentication while proposal 295’s separate SVer function fixes this? Jeff

1 1

Tor Directory Meta-Format + Line Wrapping?
by Iain Learmonth 03 Apr '19

03 Apr '19

Hi, Looking at the specification for the Tor directory protocol's meta-format, it has some text on line wrapping: > When line wrapping, implementations MUST wrap lines > at 64 characters. Upon decoding, implementations MUST > ignore and discard all linefeed characters. I can't work out how an implementation is meant to know if a linefeed character is meant to be for line-wrapping or if it's meant to be the end of a keyword line. Are there any implementations that actually do line wrapping? Thanks, Iain.

3 2

Re: [tor-dev] Docker images for help people to run Tor (teor) (teor)
by Alessandro Fiori 01 Apr '19

01 Apr '19

Hi, thanks for your support! I've modified Dockerfiles to properly install the right Tor version and starting two relays with both scripts. The images have been released on Docker Hub too. Next step for me is preparing script and image for easily setting up a bridge. Since all containers created are Linux containers, and since all my Dockerfiles are "one shot configurations", I will release bash scripts soon. I will contact the community very soon for more advices on relays, and promote-review the project (since the project is newborn, I want to spread for find issues and fix them). If you want to control all the released code and images, the two principal repositories are: https://github.com/randomtable/ChimeraOS https://hub.docker.com/u/alessandrofiori Many thanks Il giorno lun 1 apr 2019 alle ore 14:00 < tor-dev-request(a)lists.torproject.org> ha scritto: > Send tor-dev mailing list submissions to > tor-dev(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev > or, via email, send a message with subject or body 'help' to > tor-dev-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-dev-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-dev digest..." > > > Today's Topics: > > 1. Re: Docker images for help people to run Tor (teor) (teor) > 2. Next Network Team Meeting Time (teor) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 1 Apr 2019 12:57:35 +1000 > From: teor <teor(a)riseup.net> > To: tor-dev(a)lists.torproject.org > Subject: Re: [tor-dev] Docker images for help people to run Tor (teor) > Message-ID: <EBC8EE49-155E-4B26-BC19-E2B0642FF2DB(a)riseup.net> > Content-Type: text/plain; charset="utf-8" > > Hi, > > > On 1 Apr 2019, at 07:55, Alessandro Fiori <alefiori3(a)gmail.com> wrote: > > > > Hi, > > I would like to share with the community some tests I've made for > setting up a "swarm" of Tor relays. > > > > I setted up 3 exit relays and 3 middle relays on the same IPv4 address, > to make some testing, and the entire swarm works like a charm. > > > > Due to Tor limitation, I have decided to build a template for preparing > the cluster, and upload it to GitHub. > > > > You can find the example mini-cluster here: > > https://github.com/randomtable/ChimeraOS/tree/master/TorSwarm > > > > I have tested the exit capabilities on another network with different > public IP address. > > > > All the relays have published their own descriptors, I have prepared the > containers as a single, separated machines. > > > > The process is different from preparing a single relay, because of > Docker build process. > > > > I have disabled caching during the cluster process, so i have been able > to modify torrc without issues. > > > > Because its very interesting, attached to this e-mail there is the > console Logs from the 6 relays. > > > > All containers are read-only, so the entire relay will destroy at the > end of session. > > > > I hope this can be useful. > > Tor clients will only see 2 of your 6 relays, because the Tor directory > authorities only publish 2 relays per IPv4 address. > > Also, please use the deb.torproject.org repositories to get the latest > version of tor: > Mar 31 19:57:08.000 [warn] Please upgrade! This version of Tor (0.3.3.9) > is not recommended, according to the directory authorities. Recommended > versions are: > 0.2.9.15,0.2.9.16,0.2.9.17,0.3.4.10,0.3.4.11,0.3.5.7,0.3.5.8,0.4.0.1-alpha,0.4.0.2-alpha,0.4.0.3-alpha > > https://trac.torproject.org/projects/tor/wiki/TorRelayGuide/DebianUbuntu > > T >

1 0

Next Network Team Meeting Time
by teor 01 Apr '19

01 Apr '19

Hi, The next network team meeting is at 2300 UTC on Tuesday 2 April. Here is our full April schedule: * Tuesday 2 April at 2300 UTC * Monday 8 April at 1700 UTC * Monday 15 April at 1700 UTC * Tuesday 23 April at 1700 UTC (Monday 22 April is the Easter Monday public holiday) * Monday 29 April at 1700 UTC Daylight saving changed recently, so at least one of these meetings will be at a different local time for you. Our 1700 UTC meeting tracks north american daylight saving time. Our 2300 UTC meeting does not change for daylight saving time. T -- teor ----------------------------------------------------------------------

1 0

Re: [tor-dev] Docker images for help people to run Tor (teor)
by Alessandro Fiori 01 Apr '19

01 Apr '19

Hi, I would like to share with the community some tests I've made for setting up a "swarm" of Tor relays. I setted up 3 exit relays and 3 middle relays on the same IPv4 address, to make some testing, and the entire swarm works like a charm. Due to Tor limitation, I have decided to build a template for preparing the cluster, and upload it to GitHub. You can find the example mini-cluster here: https://github.com/randomtable/ChimeraOS/tree/master/TorSwarm I have tested the exit capabilities on another network with different public IP address. All the relays have published their own descriptors, I have prepared the containers as a single, separated machines. The process is different from preparing a single relay, because of Docker build process. I have disabled caching during the cluster process, so i have been able to modify torrc without issues. Because its very interesting, attached to this e-mail there is the console Logs from the 6 relays. All containers are read-only, so the entire relay will destroy at the end of session. I hope this can be useful. Alessandro Fiori Il giorno sab 30 mar 2019 alle ore 13:00 < tor-dev-request(a)lists.torproject.org> ha scritto: > Send tor-dev mailing list submissions to > tor-dev(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev > or, via email, send a message with subject or body 'help' to > tor-dev-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-dev-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-dev digest..." > > > Today's Topics: > > 1. Re: Docker images for help people to run Tor (teor) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sat, 30 Mar 2019 13:08:53 +1000 > From: teor <teor(a)riseup.net> > To: tor-dev(a)lists.torproject.org > Subject: Re: [tor-dev] Docker images for help people to run Tor > Message-ID: <3D4905AF-1C10-47BF-8823-EB3228FF990F(a)riseup.net> > Content-Type: text/plain; charset="utf-8" > > Hi, > > (Please try to reply to the thread, not the digest!) > > > On 30 Mar 2019, at 11:51, Alessandro Fiori <alefiori3(a)gmail.com> wrote: > > > > Because the images are built separately, and Containers doesn't have > persistent data by default, i'm testing the launch of a "relay swarm", > which isn't the "Docker Swarm". > > The concept of a "Relay swarm" is to have multiple running relay > containers on the same user machine, without any conflict. > > > > The idea (i will testing it very soon) is possible, by pulling an image > and running it multiple times, creating intermetiate containers. > > > > A function like the "relay swarm" can be very useful, i don't know if > this approach can be risky, so i'm preparing a script for launching only > one type of relay swarm (middle or exit relays). > > > > If there is no security concerns, this function will be a very key > function for grow up the Network, because a user can run multiple relays at > a time. > > Tor only allows 2 relays per IPv4 address. > > T >

2 1

Re: [tor-dev] tor-dev Digest, Vol 98, Issue 18
by Alessandro Fiori 30 Mar '19

30 Mar '19

Hi, and thanks for replying! I have built another image, for Non-Exit relays. Essentially, the Dockerfile is the same to the Dockerfile for build an Exit Relay, i have added the command for uncomment "ExitRelay 0" line in the torrc file. I have modified the Hidden Service image too, providing only the Hidden Service without opening ports, reducing the attack surface. Because the images are built separately, and Containers doesn't have persistent data by default, i'm testing the launch of a "relay swarm", which isn't the "Docker Swarm". The concept of a "Relay swarm" is to have multiple running relay containers on the same user machine, without any conflict. The idea (i will testing it very soon) is possible, by pulling an image and running it multiple times, creating intermetiate containers. A function like the "relay swarm" can be very useful, i don't know if this approach can be risky, so i'm preparing a script for launching only one type of relay swarm (middle or exit relays). If there is no security concerns, this function will be a very key function for grow up the Network, because a user can run multiple relays at a time. I'm presenting this project to the large community, so i can receive feedback and take actions in case of issues. Kind regards, Alessandro Fiori Il giorno ven 29 mar 2019 alle ore 13:00 < tor-dev-request(a)lists.torproject.org> ha scritto: > Send tor-dev mailing list submissions to > tor-dev(a)lists.torproject.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev > or, via email, send a message with subject or body 'help' to > tor-dev-request(a)lists.torproject.org > > You can reach the person managing the list at > tor-dev-owner(a)lists.torproject.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of tor-dev digest..." > > > Today's Topics: > > 1. Re: Docker images for help people to run Tor > (Chelsea Holland Komlo) > 2. Re: Docker images for help people to run Tor (Alessandro Fiori) > 3. Re: Docker images for help people to run Tor (teor) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 28 Mar 2019 05:46:57 -0700 > From: Chelsea Holland Komlo <me(a)chelseakomlo.com> > To: tor-dev(a)lists.torproject.org > Cc: Alessandro Fiori <alefiori3(a)gmail.com> > Subject: Re: [tor-dev] Docker images for help people to run Tor > Message-ID: <554cdbb2a021c08e08faef91d3bcb9a2(a)chelseakomlo.com> > Content-Type: text/plain; charset=US-ASCII > > Hi, > > Thanks for this information and putting this together! Making relays > easier to run is always a helpful thing to us. > > We have a wiki page to aggregate relay infrastructure projects such as > this. If you can add your projects to this page (and any required > instructions), that would be great. > > > https://trac.torproject.org/projects/tor/wiki/community/relay_infrastructure > > Thanks for the contribution! > Chelsea > > On 2019-03-27 21:18, Alessandro Fiori wrote: > > Hi, I'm an Italian developer who want to help development and grow up > > the Tor network. > > I would like to share with you an idea to grow up the Tor Network. > > Working with Docker, i have released two images, a Tor Exit Relay > > image (named "tor-relay") and an image (named "torworld-template"). > > The idea is to use Docker and build images for facilitate users to run > > a Tor Relay or an Hidden Service. > > The two images are located on Docker Hub in this locations: > > > > Tor Exit Relay: https://hub.docker.com/r/alessandrofiori/tor-relay > > Tor Machine Template: > > https://hub.docker.com/r/alessandrofiori/torworld-template > > > > If you want to see how the images are built, please check the > > following Dockerfile > > > > Tor Exit Relay: > > > https://raw.githubusercontent.com/randomtable/ChimeraOS/master/DockerFile-T… > > Tor Machine Template: > > > https://raw.githubusercontent.com/randomtable/ChimeraOS/master/DockerFile-T… > > > > If you want to see how i automate the build and push process, please > > check the following script: > > > > Process with system cleanup: > > > https://raw.githubusercontent.com/randomtable/ChimeraOS/master/build-script… > > Process for rolling release: > > > https://raw.githubusercontent.com/randomtable/ChimeraOS/master/build-rollin… > > > > Actually i'm working in a Windows environment, i will release ubuntu > > scripts soon. > > > > I would like to share with everyone, so if this can be helpful, this > > can be a starting point for build up images for help people to run > > relays or hidden services. > > > > This kind of approach can be reduce costs for people who want to run a > > relay or an hidden service, and can be an help for building a more > > censorship-resistant platform, by using a Docker Swarm, and > > replicating instances. > > > > Waiting for your reply as soon as possible, i'm very curious if this > > project can be helpful for Tor Project! > > > > Kind regards (and thanks for your hard work) > > Alessandro Fiori > > _______________________________________________ > > tor-dev mailing list > > tor-dev(a)lists.torproject.org > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev > > > ------------------------------ > > Message: 2 > Date: Thu, 28 Mar 2019 23:57:46 +0100 > From: Alessandro Fiori <alefiori3(a)gmail.com> > To: Chelsea Holland Komlo <me(a)chelseakomlo.com> > Cc: tor-dev(a)lists.torproject.org > Subject: Re: [tor-dev] Docker images for help people to run Tor > Message-ID: > <CAP6e1PnzqMRXdGmnF1U=oZqA2s69gdY= > Wc+D4LSzPsygbYckNw(a)mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > Hi, and thanks for reply! > I added a line in the dedicated page, and modified the README.md on GitHub > for more specific informations to the users. > > I've decided to release two scripts (I'm releasing for Ubuntu too), for run > an Exit Relay or Hidden Service then, with Docker image. > > If needed, let me know if there would be useful releasing an image of a > Non-Exit-Relay. > > I will add more informations in the following days, for more explanations > and specific infos about building process. > I have decided to release only scripts or text file (for build process and > pull process), and no binaries, to keep processes transparent and > controllable. > > The next step for me is writing to forums and IRC, so people can review the > configurations. > I would like to meet the best practices to provide a robust and secure > service under all aspects. > > Another further step will be to contact Docker and try to achieve the > "Verified Publisher" or "Official Image" status, to keep the User Trust up. > > Official Images have automated security scans, so it can be a benefit to > community. > > I hope this can be useful, let me know! > > Kind regards (and thanks for your hard work... really!) > > Il giorno gio 28 mar 2019 alle ore 13:46 Chelsea Holland Komlo < > me(a)chelseakomlo.com> ha scritto: > > > Hi, > > > > Thanks for this information and putting this together! Making relays > > easier to run is always a helpful thing to us. > > > > We have a wiki page to aggregate relay infrastructure projects such as > > this. If you can add your projects to this page (and any required > > instructions), that would be great. > > > > > > > https://trac.torproject.org/projects/tor/wiki/community/relay_infrastructure > > > > Thanks for the contribution! > > Chelsea > > > > On 2019-03-27 21:18, Alessandro Fiori wrote: > > > Hi, I'm an Italian developer who want to help development and grow up > > > the Tor network. > > > I would like to share with you an idea to grow up the Tor Network. > > > Working with Docker, i have released two images, a Tor Exit Relay > > > image (named "tor-relay") and an image (named "torworld-template"). > > > The idea is to use Docker and build images for facilitate users to run > > > a Tor Relay or an Hidden Service. > > > The two images are located on Docker Hub in this locations: > > > > > > Tor Exit Relay: https://hub.docker.com/r/alessandrofiori/tor-relay > > > Tor Machine Template: > > > https://hub.docker.com/r/alessandrofiori/torworld-template > > > > > > If you want to see how the images are built, please check the > > > following Dockerfile > > > > > > Tor Exit Relay: > > > > > > https://raw.githubusercontent.com/randomtable/ChimeraOS/master/DockerFile-T… > > > Tor Machine Template: > > > > > > https://raw.githubusercontent.com/randomtable/ChimeraOS/master/DockerFile-T… > > > > > > If you want to see how i automate the build and push process, please > > > check the following script: > > > > > > Process with system cleanup: > > > > > > https://raw.githubusercontent.com/randomtable/ChimeraOS/master/build-script… > > > Process for rolling release: > > > > > > https://raw.githubusercontent.com/randomtable/ChimeraOS/master/build-rollin… > > > > > > Actually i'm working in a Windows environment, i will release ubuntu > > > scripts soon. > > > > > > I would like to share with everyone, so if this can be helpful, this > > > can be a starting point for build up images for help people to run > > > relays or hidden services. > > > > > > This kind of approach can be reduce costs for people who want to run a > > > relay or an hidden service, and can be an help for building a more > > > censorship-resistant platform, by using a Docker Swarm, and > > > replicating instances. > > > > > > Waiting for your reply as soon as possible, i'm very curious if this > > > project can be helpful for Tor Project! > > > > > > Kind regards (and thanks for your hard work) > > > Alessandro Fiori > > > _______________________________________________ > > > tor-dev mailing list > > > tor-dev(a)lists.torproject.org > > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev > > >

2 1

Docker images for help people to run Tor
by Alessandro Fiori 28 Mar '19

28 Mar '19

Hi, I'm an Italian developer who want to help development and grow up the Tor network. I would like to share with you an idea to grow up the Tor Network. Working with Docker, i have released two images, a Tor Exit Relay image (named "tor-relay") and an image (named "torworld-template"). The idea is to use Docker and build images for facilitate users to run a Tor Relay or an Hidden Service. The two images are located on Docker Hub in this locations: Tor Exit Relay: https://hub.docker.com/r/alessandrofiori/tor-relay Tor Machine Template: https://hub.docker.com/r/alessandrofiori/torworld-template If you want to see how the images are built, please check the following Dockerfile Tor Exit Relay: https://raw.githubusercontent.com/randomtable/ChimeraOS/master/DockerFile-T… Tor Machine Template: https://raw.githubusercontent.com/randomtable/ChimeraOS/master/DockerFile-T… If you want to see how i automate the build and push process, please check the following script: Process with system cleanup: https://raw.githubusercontent.com/randomtable/ChimeraOS/master/build-script… Process for rolling release: https://raw.githubusercontent.com/randomtable/ChimeraOS/master/build-rollin… Actually i'm working in a Windows environment, i will release ubuntu scripts soon. I would like to share with everyone, so if this can be helpful, this can be a starting point for build up images for help people to run relays or hidden services. This kind of approach can be reduce costs for people who want to run a relay or an hidden service, and can be an help for building a more censorship-resistant platform, by using a Docker Swarm, and replicating instances. Waiting for your reply as soon as possible, i'm very curious if this project can be helpful for Tor Project! Kind regards (and thanks for your hard work) Alessandro Fiori

3 3

How to see the translated strings from Release_tweets.md in use
by scootergrisen 23 Mar '19

23 Mar '19

How/Where do i se the translated strings from Transifex Release_tweets.md in use?

1 0

Orbot and Tor on Android Q
by Nathan Freitas 22 Mar '19

22 Mar '19

Orbot 16.0.6-BETA-1-tor-0.3.5.8 <https://github.com/n8fr8/orbot/releases/tag/16.0.6-BETA-1-tor-0.3.5.8> https://github.com/n8fr8/orbot/releases/tag/16.0.6-BETA-1-tor-0.3.5.8 is out (binaries on Github for now) for testing, specifically on Android Q. It is built on a new release of: tor-android-binary-tor-0.3.5.8-rc <https://github.com/n8fr8/tor-android/releases/tag/tor-android-binary-tor-0.…> https://github.com/n8fr8/tor-android/releases/tag/tor-android-binary-tor-0.… This now uses the method of bundling the tor executable as a tor.so library, allowing the Android runtime to unpack them into the /data/libs read-only space within the app's private directory. We then can just execute it there, without needing to unpack it, copy it, etc. The word is that this will work on Android Q still. I have tested on an emulator, but not a real device yet. I don't have a Pixel of any kind, at the moment, so please let me know if you do and can test. Otherwise, we are working to move tor and other important binaries, like obfs4proxy, into actual in-process libraries. We've recently made great progress with this on our iOS work with Onion Browser, and so it should now be possible on Android. New commits below.... *** ATTENTION ANDROID Q / PIXEL TEST USERS: We've made changes just for you! WARNING: Meek/Obfs4 bridges WILL NOT work on Android Q yet, just plain Tor fb14c76 <https://github.com/n8fr8/orbot/commit/fb14c76c3a75977af9e86887b54dad5d15ae2…> fixed strings with two many \ escapes 4557577 <https://github.com/n8fr8/orbot/commit/455757726d519ac56cd53eaed29c3abef2570…> updating to tor-0.3.5.8-rc to add support for Android Q 22d5ffd <https://github.com/n8fr8/orbot/commit/22d5ffdf8bc3d51bb014e319d9f1e6b2ecb3e…> update gradle tools 76796fe <https://github.com/n8fr8/orbot/commit/76796fea83ef7efe3e33f6f5862fd71171a70…> Merge pull request #200 <https://github.com/n8fr8/orbot/pull/200> from eighthave/fastlane-supply 6ba0cec <https://github.com/n8fr8/orbot/commit/6ba0ceccbde67310c22fc9fa4e0dc88d93274…> add .gitlab-ci.yml setup with errorprone 3face00 <https://github.com/n8fr8/orbot/commit/3face00a66874afb793470922e381a9e463b1…> build gradle to 4.4.1, and make gradlew verify the download 69bd7fe <https://github.com/n8fr8/orbot/commit/69bd7fe9e6fd0fcde92ea53dd6236e50f7b37…> move app store graphics into fdroid/fastlane file layout f93c11e <https://github.com/n8fr8/orbot/commit/f93c11e74599cc24c7467d58ba0fc81c38c3c…> Merge pull request #190 <https://github.com/n8fr8/orbot/pull/190> from SkewedZeppelin/master 8ab13f6 <https://github.com/n8fr8/orbot/commit/8ab13f63a6f529d97816568170e02a1bced3c…> Fixup bad indentation from 6e4b700 <https://github.com/n8fr8/orbot/commit/6e4b7008035b2bf1a9035b730aad178bfd424…> 12b91c4 <https://github.com/n8fr8/orbot/commit/12b91c44f3af675dd0db5a3bacbf232c0f8d6…> Expose PreferIPv6 and NoIPv4Traffic options 8ad7668 <https://github.com/n8fr8/orbot/commit/8ad7668013a7291b98cf8689cd99961db69f8…> Move Google repo above jcenter d4befad <https://github.com/n8fr8/orbot/commit/d4befad117f3485f0aa67b2ce44d3f1b13de2…> cleanup and binary loading fixes

1 0