January 2017 - tor-project - lists.torproject.org

Summary of meek's costs, November 2016
by David Fifield 09 Jan '17

09 Jan '17

Here's the summary of meek's CDN fees for November 2016. App Engine + Amazon + Azure = total by period all 2014 $600.63 + $917.89 + $0.00 = $1518.52 January 2015 $464.37 + $669.02 + $0.00 = $1133.39 February 2015 $650.53 + $604.83 + $0.00 = $1255.36 March 2015 $690.29 + $815.68 + $0.00 = $1505.97 April 2015 $886.43 + $785.37 + $0.00 = $1671.80 May 2015 $871.64 + $896.39 + $0.00 = $1768.03 June 2015 $601.83 + $820.00 + $0.00 = $1421.83 July 2015 $732.01 + $837.08 + $0.00 = $1569.09 August 2015 $656.76 + $819.59 + $154.89 = $1631.24 September 2015 $617.08 + $710.75 + $490.58 = $1818.41 October 2015 $672.01 + $110.72 + $300.64 = $1083.37 November 2015 $602.35 + $474.13 + $174.18 = $1250.66 December 2015 $561.29 + $603.27 + $172.60 = $1337.16 January 2016 $771.17 + $1581.88 + $329.10 = $2682.15 February 2016 $986.39 + $977.85 + $445.83 = $2410.07 March 2016 $1079.49 + $865.06 + $534.71 = $2479.26 April 2016 $1169.23 + $1074.25 + $508.93 = $2752.41 May 2016 $525.46 + $1097.46 + $513.56 = $2136.48 June 2016 $0.00 + $1117.67 + $575.50 = $1693.17 July 2016 $0.00 + $1121.71 + $592.47 = $1714.18 August 2016 $0.00 + $1038.62 + $607.13 = $1645.75 September 2016 $0.00 + $932.22 + $592.92 = $1525.14 October 2016 $0.00 + $1259.19 + $646.00 = $1905.19 November 2016 $0.00 + $1613.00 + $597.76 = $2210.76 -- total by CDN $13138.96 + $21743.63 + $6629.67 = $41512.26 grand total https://metrics.torproject.org/userstats-bridge-transport.html?start=2016-0… == Amazon a.k.a. meek-amazon == EU (Ireland) 559M requests $670.98 3213 GB $253.40 Global 11M requests $11.45 39 GB $3.01 US East (Northern Virginia) 456M requests $456.69 2785 GB $216.95 -- total 1027M requests $1139.12 6037 GB $473.36 charge for alarms $0.50 https://atlas.torproject.org/#details/F4AD82B2032EDEF6C02C5A529C42CFAFE5165… == Azure a.k.a. meek-azure == Zone 1 6722 GB $584.84 Zone 2 70 GB $ 9.67 Zone 3 7 GB $ 1.77 Zone 4 11 GB $ 1.48 -- total 6810 GB $597.76 https://atlas.torproject.org/#details/AA033EEB61601B2B7312D89B62AAA23DC3ED8… Earlier reports in this series: https://trac.torproject.org/projects/tor/wiki/doc/meek#Costs

1 0

(FWD) Tor at the Pre-Conference R&D Networking Event
by Roger Dingledine 06 Jan '17

06 Jan '17

Would you like to help me explain Tor, and how we relate to privacy, to researchers and government agencies at the FTC PrivacyCon event in Washington DC on Jan 11? Lorrie asked me to sign us up, because she wants Tor to be represented there. It would be great if it's not just me. :) --Roger ----- Forwarded message from Roger Dingledine <arma(a)mit.edu> ----- Date: Mon, 12 Dec 2016 01:29:58 -0500 From: Roger Dingledine <arma(a)mit.edu> To: privacycon(a)ftc.gov Subject: Tor at the Pre-Conference R&D Networking Event Hi Lorrie, others, Please sign us up for some space at your Jan 11 event: https://www.ftc.gov/news-events/press-releases/2016/11/ftc-host-rd-networki… Name of organization: The Tor Project Name of contact person: Roger Dingledine Email address of contact person: arma(a)mit.edu One paragraph description of the organization's interest in privacy research: The Tor Project is a free-software non-profit project to build an anonymity toolkit used by individuals, companies, governments, and law enforcement around the world: https://www.torproject.org/ Tor is central to a myriad of research collaborations supported by the National Science Foundation and related funders. On the metrics and measurement side, we're working on how to safely and ethically collect usage statistics about the Tor network. On the network side, we're developing architectural improvements like stronger crypto in next-generation onion services, and ways to detect and resist denial-of-service attacks on Tor without impacting user privacy. On the censorship side, we're deploying a global infrastructure where users launch censorship tests and safely report their results. And on the application side, we're building better browser behavior so users can control what information websites get to learn about them. The Tor network has grown since its start in 2002 to several million active users pushing over 80 Gbps of traffic. The Tor Project has a staff of 28 developers, researchers, and advocates, plus several dozen volunteers who help out on a daily basis. Thanks! --Roger ----- End forwarded message -----

2 2

Fwd: [tor-dev] Interested in contributing to Tor Project - IP Hijacking detection for Tor relays
by teor 03 Jan '17

03 Jan '17

For those of you who didn't see this on tor-dev: > Begin forwarded message: > > From: Nikhil <rnikhil275(a)gmail.com <mailto:rnikhil275@gmail.com>> > Subject: [tor-dev] Interested in contributing to Tor Project - IP Hijacking detection for Tor relays > Date: 29 December 2016 at 22:50:12 AEDT > To: tor-dev(a)lists.torproject.org <mailto:tor-dev@lists.torproject.org> > Reply-To: tor-dev(a)lists.torproject.org <mailto:tor-dev@lists.torproject.org> > > Hi, > > I am Nikhil. R, a student from India. You can know more about me from here[1] and here[2]. I have been running a Tor relay for sometime and now I am interested in contributing to the Tor Project. Specifically, I would like to work on IP Hijacking detection for Tor relays. I understand this does not involve directly with the Tor core hence I think this project is ideal in getting my feet wet with the Tor Community and get me started for further contributions to the Tor Project. > > > BGP hijacking is difficult without inside help from ISP's(I think ?) but state run adversaries don't necessarily have this problem. This has a great risk of exposing all Tor clients or even mess around with the name resolution in exit relays. I have also read about incidents where an attacker using BGP hijacking, hijacked a portion of a Bitcoin mining pool traffic to pay himself instead of the people contributing the processing power. I feel BGP has major security implications in this aspect and a monitoring service is necessary. There are many monitoring services and we can possibly leverage one of them for the routing data. > > The main motive of the service would be to find anomalies/ malicious changes in the routing information compared to previous snapshots of the same. How do we actually do this comparison ? Any pointers for that ? The project also mentions that the service should be Tor-aware. What exactly does this mean ? Does it mean that, it should monitor all tor relays ip addresses ? It would be wonderful if you could elaborate on the project in a little more detail. > > I am a beginner in this area and please excuse me if any of the above questions are too stupid. > > Regards, > Nikhil. R > > [1]:https://in.linkedin.com/in/rnikhil275 <https://in.linkedin.com/in/rnikhil275> > > [2]https://rnikhil275.github.io <https://rnikhil275.github.io/> > _______________________________________________ > tor-dev mailing list > tor-dev(a)lists.torproject.org <mailto:tor-dev@lists.torproject.org> > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev T -- Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B ricochet:ekmygaiu4rzgsk6n xmpp: teor at torproject dot org ------------------------------------------------------------------------

1 0

Notes from December 22 2016 Vegas team meeting
by Karsten Loesing 02 Jan '17

02 Jan '17

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 See this posting for context: https://lists.torproject.org/pipermail/tor-project/2016-April/000223.html Notes for December 22 2016 meeting: Alison: 0) Global South outreach: funding for travel, connecting with local organizations 1) LFP has begun work along the US-Mexico border. 2) The Tor Glossary draft was submitted to tor-internal for comments Shari: 1) Summer 2017 Tor Meeting in Montreal? 2) Looking over grant proposal to Sida due 12/23. 3) Lots of end-of-year campaign stuff. Nick: 1) new releases came out 2) TBB release schedule makes some stuff harder for us; should discuss with GK. 3) priorities uncertain pending word on funding proposals 4) hiring status! Isabela: 1) working with orfox team to meet ISC 1st milestone deadline (dec 23) 2) working on answering questions from OTF related to final invoice report 3) helping get 2017 contracts in place 4) helping with SIDA second review due on dec 23 5) misc stuff (donation campaign, global south work etc) 6) REMINDER I WILL TAKE THE FIRST WEEK OF JANUARY OFF (: 7) Linda updates - metrics new site is being coded :) and she will prep a blog post about this work / she is working with OONI folks to finalize both web and mobile UIs / Jan plan is to work on materials for user testing of orfox security slider 8) Hiro updates - working on Trac wish list (email feature - she emailed tor internal for feedback on this one | and she is working on email and having a console client for the xmlrpc plugin); working with metrics team on #20928 - working on getting more info about other tasks she is picking up from Sebastian list Arturo: 1) Finalising the mobile and web UIs for ooniprobe with Adarsh 2) Started implementing the web UI based on the feedback from Adarsh 3) Published report on internet censorship in Malaysia: https://ooni.torproject.org/post/malaysia-report/ Kate: 1) Media around the onion services update - a bit close to the holidays, I think; saw Softpedia, lwn.net, and iMasters articles. 2) Malaysia media (press release--ditto/holidays) and thinking through media strategy with OONI (good Malaysian coverage mostly generated by Malaysian partner) 3) Generated social media tactics for Shari and others to consider for fundraising 4) Answered press queries Karsten: 1) Moving forward with Metrics website redesign/reorganization, had 2 meetings this week and many iterations, will ask for feedback on tor-project@ on Friday. Mike: 1) Did some coordination wrt Ten Principles post. Is now linked from neveragain.tech. 2) Prepped mails for Tor Labs, but haven't sent them yet - holiday travel. :/ -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBCAAGBQJYaiOUAAoJEC3ESO/4X7XBQdIH/i3BYYaIxWeg98RzP8EnqGG+ vkECmKa/mUyT7eY/8jGv3bEHhGTsR9hqH8TIQpM/NOx8h1LVFHvfA32qtfXmxgn0 68rAOdBRDCoAOEvuh8awCLE9Apvz8M5MSbDGppn/UdDVspJXAGP2F00kqBaPNTZr qobpdoHsase1hoWFe1SLsprrom66XILo9gQ1n0aYPbof5GZVGMio3Izs/Xl1qxpr bjwWB0k7iMHDdd3jglzZNuZwPEAZ1R6U23Q+b+SQ7uUa5ba36/AFjXopr5KgjLx/ sUgZbiCyizVfhX5PbJtCmwFsEB20vGIhiz6ER4T+AMC7TJ5e1OqdR7NNicD33Vk= =4W3E -----END PGP SIGNATURE-----

1 0

We want your feedback on the redesigned Tor metrics website! (DUE: 1/5/2017)
by Linda Naeun Lee 02 Jan '17

02 Jan '17

Hello all, The metrics and UX team have teamed up to make a more usable and useful metrics webpage. Prototype: http://107.23.39.12/index.html Feedback pad: https://pad.riseup.net/p/esVoPphdMGnU Please provide feedback by January 5th 2017 at 15:00 UTC on the pad rather than emailing this thread. You are welcome to share the pad with people you think would provide valuable feedback. The pad has all the information you need to know--and poking around the prototype for a couple minutes and giving us your immediate thoughts (~5 minutes) should be sufficient. But if you want additional information on what we changed and how we worked on this, here's the (slightly not up to date) project page: https://trac.torproject.org/projects/tor/wiki/doc/UX/MetricsRedesign Cheers, Linda -- Current Key: https://pgp.mit.edu/pks/lookup?search=lindanaeunlee GPG Fingerprint: FA0A C9BE 2881 B347 9F4F C0D7 BE70 F826 5ED2 8FA2

3 2