Would you like to help me explain Tor, and how we relate to privacy,
to researchers and government agencies at the FTC PrivacyCon event in
Washington DC on Jan 11?
Lorrie asked me to sign us up, because she wants Tor to be represented
there. It would be great if it's not just me. :)
--Roger
----- Forwarded message from Roger Dingledine <arma(a)mit.edu> -----
Date: Mon, 12 Dec 2016 01:29:58 -0500
From: Roger Dingledine <arma(a)mit.edu>
To: privacycon(a)ftc.gov
Subject: Tor at the Pre-Conference R&D Networking Event
Hi Lorrie, others,
Please sign us up for some space at your Jan 11 event:
https://www.ftc.gov/news-events/press-releases/2016/11/ftc-host-rd-networki…
Name of organization: The Tor Project
Name of contact person: Roger Dingledine
Email address of contact person: arma(a)mit.edu
One paragraph description of the organization's interest in privacy
research:
The Tor Project is a free-software non-profit project to build an
anonymity toolkit used by individuals, companies, governments, and law
enforcement around the world:
https://www.torproject.org/
Tor is central to a myriad of research collaborations supported by
the National Science Foundation and related funders. On the metrics
and measurement side, we're working on how to safely and ethically
collect usage statistics about the Tor network. On the network side,
we're developing architectural improvements like stronger crypto
in next-generation onion services, and ways to detect and resist
denial-of-service attacks on Tor without impacting user privacy. On the
censorship side, we're deploying a global infrastructure where users
launch censorship tests and safely report their results. And on the
application side, we're building better browser behavior so users can
control what information websites get to learn about them.
The Tor network has grown since its start in 2002 to several million
active users pushing over 80 Gbps of traffic. The Tor Project has a
staff of 28 developers, researchers, and advocates, plus several dozen
volunteers who help out on a daily basis.
Thanks!
--Roger
----- End forwarded message -----
For those of you who didn't see this on tor-dev:
> Begin forwarded message:
>
> From: Nikhil <rnikhil275(a)gmail.com <mailto:rnikhil275@gmail.com>>
> Subject: [tor-dev] Interested in contributing to Tor Project - IP Hijacking detection for Tor relays
> Date: 29 December 2016 at 22:50:12 AEDT
> To: tor-dev(a)lists.torproject.org <mailto:tor-dev@lists.torproject.org>
> Reply-To: tor-dev(a)lists.torproject.org <mailto:tor-dev@lists.torproject.org>
>
> Hi,
>
> I am Nikhil. R, a student from India. You can know more about me from here[1] and here[2]. I have been running a Tor relay for sometime and now I am interested in contributing to the Tor Project. Specifically, I would like to work on IP Hijacking detection for Tor relays. I understand this does not involve directly with the Tor core hence I think this project is ideal in getting my feet wet with the Tor Community and get me started for further contributions to the Tor Project.
>
>
> BGP hijacking is difficult without inside help from ISP's(I think ?) but state run adversaries don't necessarily have this problem. This has a great risk of exposing all Tor clients or even mess around with the name resolution in exit relays. I have also read about incidents where an attacker using BGP hijacking, hijacked a portion of a Bitcoin mining pool traffic to pay himself instead of the people contributing the processing power. I feel BGP has major security implications in this aspect and a monitoring service is necessary. There are many monitoring services and we can possibly leverage one of them for the routing data.
>
> The main motive of the service would be to find anomalies/ malicious changes in the routing information compared to previous snapshots of the same. How do we actually do this comparison ? Any pointers for that ? The project also mentions that the service should be Tor-aware. What exactly does this mean ? Does it mean that, it should monitor all tor relays ip addresses ? It would be wonderful if you could elaborate on the project in a little more detail.
>
> I am a beginner in this area and please excuse me if any of the above questions are too stupid.
>
> Regards,
> Nikhil. R
>
> [1]:https://in.linkedin.com/in/rnikhil275 <https://in.linkedin.com/in/rnikhil275>
>
> [2]https://rnikhil275.github.io <https://rnikhil275.github.io/>
> _______________________________________________
> tor-dev mailing list
> tor-dev(a)lists.torproject.org <mailto:tor-dev@lists.torproject.org>
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev
T
--
Tim Wilson-Brown (teor)
teor2345 at gmail dot com
PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B
ricochet:ekmygaiu4rzgsk6n
xmpp: teor at torproject dot org
------------------------------------------------------------------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
See this posting for context:
https://lists.torproject.org/pipermail/tor-project/2016-April/000223.html
Notes for December 22 2016 meeting:
Alison:
0) Global South outreach: funding for travel, connecting with local
organizations
1) LFP has begun work along the US-Mexico border.
2) The Tor Glossary draft was submitted to tor-internal for comments
Shari:
1) Summer 2017 Tor Meeting in Montreal?
2) Looking over grant proposal to Sida due 12/23.
3) Lots of end-of-year campaign stuff.
Nick:
1) new releases came out
2) TBB release schedule makes some stuff harder for us; should discuss
with GK.
3) priorities uncertain pending word on funding proposals
4) hiring status!
Isabela:
1) working with orfox team to meet ISC 1st milestone deadline (dec 23)
2) working on answering questions from OTF related to final invoice report
3) helping get 2017 contracts in place
4) helping with SIDA second review due on dec 23
5) misc stuff (donation campaign, global south work etc)
6) REMINDER I WILL TAKE THE FIRST WEEK OF JANUARY OFF (:
7) Linda updates - metrics new site is being coded :) and she will
prep a blog post about this work / she is working with OONI folks to
finalize both web and mobile UIs / Jan plan is to work on materials
for user testing of orfox security slider
8) Hiro updates - working on Trac wish list (email feature - she
emailed tor internal for feedback on this one | and she is working on
email and having a console client for the xmlrpc plugin); working with
metrics team on #20928 - working on getting more info about other
tasks she is picking up from Sebastian list
Arturo:
1) Finalising the mobile and web UIs for ooniprobe with Adarsh
2) Started implementing the web UI based on the feedback from Adarsh
3) Published report on internet censorship in Malaysia:
https://ooni.torproject.org/post/malaysia-report/
Kate:
1) Media around the onion services update - a bit close to the
holidays, I think; saw Softpedia, lwn.net, and iMasters articles.
2) Malaysia media (press release--ditto/holidays) and thinking through
media strategy with OONI (good Malaysian coverage mostly generated by
Malaysian partner)
3) Generated social media tactics for Shari and others to consider for
fundraising
4) Answered press queries
Karsten:
1) Moving forward with Metrics website redesign/reorganization, had 2
meetings this week and many iterations, will ask for feedback on
tor-project@ on Friday.
Mike:
1) Did some coordination wrt Ten Principles post. Is now linked from
neveragain.tech.
2) Prepped mails for Tor Labs, but haven't sent them yet - holiday
travel. :/
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
iQEcBAEBCAAGBQJYaiOUAAoJEC3ESO/4X7XBQdIH/i3BYYaIxWeg98RzP8EnqGG+
vkECmKa/mUyT7eY/8jGv3bEHhGTsR9hqH8TIQpM/NOx8h1LVFHvfA32qtfXmxgn0
68rAOdBRDCoAOEvuh8awCLE9Apvz8M5MSbDGppn/UdDVspJXAGP2F00kqBaPNTZr
qobpdoHsase1hoWFe1SLsprrom66XILo9gQ1n0aYPbof5GZVGMio3Izs/Xl1qxpr
bjwWB0k7iMHDdd3jglzZNuZwPEAZ1R6U23Q+b+SQ7uUa5ba36/AFjXopr5KgjLx/
sUgZbiCyizVfhX5PbJtCmwFsEB20vGIhiz6ER4T+AMC7TJ5e1OqdR7NNicD33Vk=
=4W3E
-----END PGP SIGNATURE-----
Hello all,
The metrics and UX team have teamed up to make a more usable and useful
metrics webpage.
Prototype: http://107.23.39.12/index.html
Feedback pad: https://pad.riseup.net/p/esVoPphdMGnU
Please provide feedback by January 5th 2017 at 15:00 UTC on the pad
rather than emailing this thread. You are welcome to share the pad with
people you think would provide valuable feedback.
The pad has all the information you need to know--and poking around the
prototype for a couple minutes and giving us your immediate thoughts (~5
minutes) should be sufficient.
But if you want additional information on what we changed and how we
worked on this, here's the (slightly not up to date) project page:
https://trac.torproject.org/projects/tor/wiki/doc/UX/MetricsRedesign
Cheers,
Linda
--
Current Key: https://pgp.mit.edu/pks/lookup?search=lindanaeunlee
GPG Fingerprint: FA0A C9BE 2881 B347 9F4F C0D7 BE70 F826 5ED2 8FA2
Hey there,
Following the great news that Onion Browser for iOS finally became free,
I took a look at Apple AppStore to see what other apps are there that
are pretending to be "the" Tor for iOS, and unfortunately found plenty
that use Tor logo or brand name to promote themselves. Most of which are
not free (as in beer / nor as in freedom) and seem to be even injecting
ads to users.
The worst part... some of them have hundreds of 5 star reviews. So I
collected a bunch of them under this ticket:
https://trac.torproject.org/projects/tor/ticket/20873
However I couldn't find the right component to file the ticket under. So
I thought I'd drop a line to the mailing list and let people know this
exists, in case the ones who need to deal with these issues read the
mailing list.
Should we have a legal component on trac?
Enjoy the weekend!
--
Nima
0X58C4B928A3E218F6 | @mrphs
"I disapprove of what you say, but I will defend to the death your right
to say it" --Evelyn Beatrice Hall
If you're doing short-term contracting work, this might be a good
opportunity to pick some "It sure would be nice to have this feature"
topic...
---------- Forwarded message ----------
From: Deji Bryce Olukotun <deji(a)accessnow.org>
Date: 20 December 2016 at 16:39
Subject: [OTF-Talk] Lush Digital Fund - deadline January 15
To: otf-talk(a)opentechfund.org
Hi to All,
Apologies for cross-posting.
I'm pleased to report that the Lush Digital Fund is available for applications.
Background: Access Now partnered with the ethical UK-based cosmetics
company to raise awareness around internet shutdowns and created a
special product called an Error 404 bath bomb. You can read more about
our collaboration here: https://uk.lush.com/tag/keepiton
Profits from the sale of the Error 404 bath bomb -- which are still
continuing -- are placed into a Digital Fund, with the aim of raising
250,000 pounds. Grants are a maximum of 10,000 pounds each (about U.S.
$12,600 today.)
The first application round is fairly simple. Also note that Lush's
funding flexibility allows the company to support small grassroots
groups or individuals who do not have official charity / non-profit
status. Applications do not need to be focused on internet shutdowns
to be considered.
http://digitalfund.org.uk/
The deadline is January 15. Feel free to write with questions.
Best,
--
Deji Bryce Olukotun
Senior Global Advocacy Manager
Access Now | accessnow.org
tel: +1 415-935-4572 | @dejiridoo
PGP: 0x6012CDA8
Fingerprint: 3AEE 4194 F70E C806 A810 857A 6AD5 8F48 6012 CDA8
Subscribe to our free weekly newsletter on digital rights, the Access
Now Express: https://www.accessnow.org/campaign/#sign-up
--
This is now the OTF-Talk mailing list (formally OTF-Projects), where
past and current OTF supported projects can share information, ask
questions, and more.
You can continue to post monthly reports here or to OTF-Active (the
list for currently supported projects)
---
You received this message because you are subscribed to the Google
Groups "OTF-Talk" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to OTF-Talk+unsubscribe(a)opentechfund.org.
To post to this group, send email to OTF-Talk(a)opentechfund.org.
To view this discussion on the web visit
https://groups.google.com/a/opentechfund.org/d/msgid/OTF-Talk/CAN9cB4FW38W6….
For more options, visit https://groups.google.com/a/opentechfund.org/d/optout.
Hi everyone!
This ticket has been opened by mrphs couple days ago and it seems we lack a
component for such idea:
https://trac.torproject.org/projects/tor/ticket/21013
I propose we add a new Component to Trac that is called something like
"General" (which is probably not the best name btw) and put ticket like this
in it.
Ticket without component usually will get lost in the dark dark void of Trac
and we have no right now for "general purposes" Tor ideas/issues/improvement.
Thoughts?
David
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
See this posting for context:
https://lists.torproject.org/pipermail/tor-project/2016-April/000223.html
Notes for December 15 2016 meeting:
isabela:
1) Worked on DRL full proposal for Tor on mobile
2) Linda is keeping me updated on her work with metrics and ooni teams
- - I am very excited not only with the results of it but the process
both teams are taking to build both experiences.
2.1) Metrics new design is freezing today for development - here are
her final feedback to the team:
2.1.1) comments on the design:
https://drive.google.com/open?id=0B36YkvDtVNK_YkcyZVZWZk5PeHM
2.1.2) comments on the text:
https://drive.google.com/open?id=0B36YkvDtVNK_Q3Q3bGdaUFllelk
2.2) Spent most of the week performing interviews with OONI users to
collect their feedback
3) Hiro updates
3.1) Sent her plans on how to approach the email interface to create
and update tickets request from Trac wish list with the rest of Tor
community for feedback
3.2) She is looking into Trac api to see what can be done there for
other requests from the wish list
3.3) VPN for gitlab - she has to wait till network-team and admins
have discussed requirements and how it will be used etc
3.4) She will meet with Sebastian to start planning the handover of duties
3.5) I gave a last chance for new people who has to be added to
people's page to give me a description by eow - after that I will
create a ticket for hiro with all the changes Shari passed to me to
do. This is a first pass, we might have other updates for this page in
the future (according to Shari)
3.6) I start to follow up with Kevin on the blog status and gave the
heads up to Hiro about taking over the blog maintenance as well
4) Working on final report/invoice to sponsorU
5) Working with android folks to make sure we reach first milestone of
isc by dec 23rd (alpha release of security slider on orfox)
6) helped a little bit with blog posts and tweets
7) Starting to get on Sida proposal
Nick:
1) Merged ed25519 identity-based circuit extension and another part of
hidden services. Noice!
2) Guard revamp lands tomorrow, I hope.
3) 0.2.9.8 stable comes out next week, barring misadventure.
4) 0.3.0.1-alpha on a similar timeframe.
5) Blog post coordination: how important is it to get our release and
our "what's new in 029" blog post out on the same day?
Georg:
1) We got all the Tor Browser releases out that contained the last
SponsorU bits
2) Helped with the DRL proposal
3) Helped Isabela with the SponsorU report
Arturo:
1) Published report in collaboration with Amnesty international on
Ethiopia: https://ooni.torproject.org/post/ethiopia-report/
2) Published announcement on the beta release of the Web UI:
https://ooni.torproject.org/post/web-ui-post/
3) David Fifield started looking at the data collected by OONI on Tor
bridges and directory authorities. See:
https://lists.torproject.org/pipermail/ooni-dev/2016-December/000482.html
4) Started drafting a design document for the OONI Probe Orchestration
System:
https://github.com/TheTorProject/ooni-spec/blob/feature/opos/OONI-Probe-Orc…
Mike:
1) Blog post on ten principles is ready when we want it to go up.
Thinking of cross-post on medium.com.
2) About to send mail to all the Tor Labs projects
Kate:
1) Press release and some press work on OONI/Amnesty's excellent
Ethiopia report; coverage in AfricaTimes, Associated Press
(republished in many outlets, including Washington Post web site), and
we're expecting a Forbes article.
2) Answering multiple press queries about Trump
3) Answering press inquiries on other topics
Shari:
1) End of year campaign stuff. The blog posts are taking quite a bit
of time.
2) Board meeting last week.
3) Gonna make edits to the Sida proposal before we submit again on
December 23.
Karsten:
1) Spending a lot of time and energy on the Metrics
redesign/reorganization this week.
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
iQEcBAEBCAAGBQJYV5mtAAoJEC3ESO/4X7XBRvkH/R0jWOsK/K7iF3ZtZeqIOkCl
bPUJ/61/S4CPmrCXZTwNPeXtzbOLacj1oQF2cP7eGmWt0Kz+rd9RTD1k/vz7qw51
xnmMwI1eXQoH6x3Nwg8wG6k/Jc/6s6gtIJNEw6V4TnuXph8CRkJbK8EiS/xogBwm
tC4R9YUvANoCTw8a96UAMHfS1gjkuGDbX0Mrv0RayJj7hNl6N8nkqt93mSqqBt2i
gyOxwmA28jFx1apT3rfDrGAcq9kzBUyMV7bAN2PN9bN9xoEsfPdsNZJxGPKS6uQT
NBJ8iwnrkAvbxKxes4wUBYzFBqC6cjFydySPUe+sPzt0WPXvhrTe749rpRfIZW8=
=kM1C
-----END PGP SIGNATURE-----