- tor-project - lists.torproject.org

The tor network is constrained by.... (meek, exits, etc)
by Tom Ritter 17 Jan '17

17 Jan '17

I am continually getting asked this question and then asked to back it up. I'm hoping the metrics team might be able to guide me here.... Firstly, while we don't have (public) datasets showing this, I am fairly certain that the public meek bridges have their bandwidth capped (to limit costs) and raising that cap would directly improve the speed of meek users. (Implying that the bottleneck the majority of the time is the meek transport.) Right? Secondly, I know it's too simplistic to say "Our exits are operating at 85% of capacity, our guards are 65% and our middles at 40%" (for a host of reasons, including guard/middle overlap) but how close can we get to something simple that demonstrates more exits will help the (non-bridge) network the most? (If that is in fact the case!) I might have more questions to relay, but for now these seem to be the main ones. -tom

5 5

Notes from January 12 2017 Vegas team meeting
by Karsten Loesing 16 Jan '17

16 Jan '17

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Notes for January 12 2017 meeting: Alison: 0) meeting with Rocnation and next steps; This is Jay-Z's entertainment company and a Tor person met one of their people (who loves Tor) on a plane. I will meet with them in NYC to talk about helping their clients with digital security. 1) support portal and glossary progress; Glossary is nearly finished, and when it is that and the TB manual will go up on support.torproject.org, then more work on the portal itself. 2) LFP grant applications; submitted one, just about to finish another 3) upcoming training/speaking events; two in Hidalgo County, TX; Pratt Institute, NY; Drexel University, PA; Camden, NJ 4) Global South outreach 5) Starting to plan the Tor meeting Nick: 0) Takeaways from RWC / HACS 1) Progress towards 0.3.0 2) Hiring progress and questions 3) sponsor4 planning in progress, sponsor R winding up, what's our funding plan? Georg: 1) Still need to get started with the process of obtaining a new authenticode signing certificate <-- Georg will follow-up on this one with the Digicert people 2) Preparations for Tor Browser 6.5 Shari: 1) Search for new Communications Director. Please distribute job description and encourage good people to apply. 2) Planning for Amsterdam Tor meeting. 3) Working with team on donation database stuff. 4) Working with Brad on various financial things. 5) Trying to resolve some personnel questions. Arturo: 0) Worked on specifying the OONI Probe orchestration system (https://github.com/TheTorProject/ooni-spec/blob/ac60b1ed237a7179e627f7c276c…) It has been circulated internally awaiting for feedback 1) Started smoke testing of the re-engineered data processing pipeline 2) More progress on implementing the reviewed web UI. Tracking the core ooniprobe changes required in this master ticket: https://github.com/TheTorProject/ooni-probe/issues/708 (viewable with Zenhub) or this milestone: https://github.com/TheTorProject/ooni-probe/milestone/17. 3) Deployed new production measurements interface: https://measurements.ooni.torproject.org/ 4) Preparing for the public release of ooniprobe mobile due at the end of the month (deployed collectors and test helpers on port 443) 5) We published a report at the end of December regarding information controls in Kenya: https://ooni.torproject.org/post/kenya-study/ Kate: 1) answering press queries and coordinating interviews 2) ze social media 3) Editing and coordinating blog posts 4) answering emails Isabela: 0) working on a complementary report to OTF 1) picking up projects with teams 1.1) orfox team has to make a stable release with our slider to finish our next milestone, linda has done a lot of progress on the prep-material for our user testing part of this contract 1.2) linda is doing a lot of prep-work to kick off the website redesign project (big project), more on that will be coming out soon 1.3) network team - getting otf deliverables break down into tasks and organized with nick 1.4) following up with hiro, tbb otf tasks, general organizing of sponsor info etc 2) getting started on drl sponsor S final report 3) trying to put together a 'growth strategy 2016 review' - which is an update on the one I sent around Q3 2015. Karsten: 1) Deployed redesigned Metrics website, got good response overall, made a list of future improvements, but none of them being urgent, so we'll move focus to other projects now. 2) Made plans with RaBe, our web designer, for Q1/2017 to work on remaining Sponsor X deliverables that require web design. 3) Made plans with hiro to lead OnionPerf integration project. Mike: 1) Mostly dug out from email. 2) Helping with tor-core hiring -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBCAAGBQJYfIcnAAoJEC3ESO/4X7XBvcsH/2/9Cf2juT+sS3/cBXxQsd5T Gth3QAqmts79NiUy7RzLFlNzb4jP11Uqq3grcb5awcn0bJuIeEOz3X6xFWU3IRsu gWwQVLBAcIrsKxvlZd7ZrJDW28zI1NspubCaxNv0D5hyAgITb0nbBiplJJ+DDURV M3lWBAtOXRW7L5qDZbW72QS4RPmU3s1rljZVYwWdXVxouWsfmj10zjSMMrVAswFG Ia0BpkJNXRtKc37YrVptp6h7VyE8rIqnrW9/8dC4cOpcGMkiLRnFlhW+Sw4LCNXV wbnn1u3GUl0Uyix/z8zfMqi7LpY6wx7jpzWrwGSRbXc60EX3FsRcR7dcMNRuMMs= =XjdF -----END PGP SIGNATURE-----

1 0

Fwd: FYI Ransomware Chronicle TOR
by Shari Steele 11 Jan '17

11 Jan '17

Hey all. I thought this was pretty cool. David gave me permission to forward. Shari > Begin forwarded message: > > From: "David Balaban" <info(a)privacy-pc.com> > Subject: FYI Ransomware Chronicle TOR > Date: January 10, 2017 at 7:28:27 AM PST > To: execdir(a)torproject.org > Reply-To: "David Balaban" <info(a)privacy-pc.com> > > > > Dear Sir\Madam, > > My name is David Balaban, I run http://privacy-pc.com/ <http://privacy-pc.com/> > > I have put together this (hopefully) useful and convenient post: http://privacy-pc.com/articles/ransomware-chronicle.html <http://privacy-pc.com/articles/ransomware-chronicle.html> > > You can find all ransomware related events in one post. Beginning May 9, every single day is covered: new ransomware releases, virus updates, decryptors, other important events. It is really all-inclusive, nothing more detailed is available that covers ransomware news. > > You can use it for your articles, reports, news, etc. > > It is an ongoing list, I am going to update it on a weekly basis. > > Regards, > > - David Balaban

1 0

Fwd: [Netfreedom] Tech Event at Internews on Thursday Night
by Shari Steele 11 Jan '17

11 Jan '17

> Begin forwarded message: > > From: "Kat Duffy (kduffy(a)INTERNEWS.ORG)" <kduffy(a)INTERNEWS.ORG> > Subject: [Netfreedom] Tech Event at Internews on Thursday Night > Date: January 11, 2017 at 8:00:44 AM PST > To: "netfreedom(a)lists.cymru.com" <netfreedom(a)lists.cymru.com> > > Colleagues, > > I believe I know some of you, but for others, my name is Kat Duffy and I recently joined Internews as our VP for Global Technology. I'm really looking forward to getting to know all of you in the months ahead! > > For those of you in DC, I wanted to extend an invite to an event we're hosting here at Internews this Thursday evening (i.e., tomorrow). https://www.eventbrite.com/e/developing-consensus-using-artificial-intellig… <https://www.eventbrite.com/e/developing-consensus-using-artificial-intellig…> > > The general language is below in italics, but for the more tech-minded, here's an alternative explanation: Pol.is <http://pol.is/> tackles scaling up consensus identification by collecting a matrix of perspectives and everyone’s position on those perspectives (agreement / disagreement / uncertainty). Pol.is <http://pol.is/> then runs dimensionality reduction and clustering, identifying voting blocs across many perspectives. The perspectives are submitted by the crowd, so the entire process is emergent. The result is a real-time experience which identifies voting blocs and shared consensus, and scales to thousands of people. > > This Thursday evening, Internews is hosting a conversation with Colin Megill, the CEO and co-founder of Pol.is <http://pol.is/>, an open source platform that brings artificial intelligence and machine learning to democratic participation and online civic engagement. In 2016, the Government of Taiwan officially adopted Pol.is <http://pol.is/> as a platform for gathering citizen comment, but its use cases extend beyond governance. If you’re interested in how technology can help you seek opinion more efficiently, and more effectively, this should be an interesting event. > > I hope you can attend, and please feel free to share with your networks! > > all my best, > Kat > > > From: Joshua Machleder <jmachleder(a)usaid.gov <mailto:jmachleder@usaid.gov>> > Sent: Tuesday, January 10, 2017 4:28 PM > To: Kat Duffy (kduffy(a)INTERNEWS.ORG <mailto:kduffy@internews.org>) > Subject: Re: Introductions > > Let's meet at Timgad Cafe <http://www.timgadcafe.com/>, how does that sound? > > On Tue, Jan 10, 2017 at 3:00 PM, Kat Duffy (kduffy(a)INTERNEWS.ORG <mailto:kduffy@INTERNEWS.ORG>) <kduffy(a)internews.org <mailto:kduffy@internews.org>> wrote: > Shall I come to you, or should we meet out somewhere? > > From: Joshua Machleder [mailto:jmachleder@usaid.gov <mailto:jmachleder@usaid.gov>] > Sent: Tuesday, January 10, 2017 2:51 PM > > To: Kat Duffy (kduffy(a)INTERNEWS.ORG <mailto:kduffy@INTERNEWS.ORG>) <kduffy(a)INTERNEWS.ORG <mailto:kduffy@INTERNEWS.ORG>> > Subject: Re: Introductions > > 3 is great. I've put it in my calendar. > > On Tue, Jan 10, 2017 at 2:47 PM, Kat Duffy (kduffy(a)INTERNEWS.ORG <mailto:kduffy@INTERNEWS.ORG>) <kduffy(a)internews.org <mailto:kduffy@internews.org>> wrote: > Would it be possible to shoot for 3? If not, I can make 2:30 work. > > From: Joshua Machleder [mailto:jmachleder@usaid.gov <mailto:jmachleder@usaid.gov>] > Sent: Tuesday, January 10, 2017 10:15 AM > To: Kat Duffy (kduffy(a)INTERNEWS.ORG <mailto:kduffy@INTERNEWS.ORG>) <kduffy(a)INTERNEWS.ORG <mailto:kduffy@INTERNEWS.ORG>> > Subject: Re: Introductions > > Great. Does 2:30 work for you? > > On Tue, Jan 10, 2017 at 09:40 Kat Duffy (kduffy(a)INTERNEWS.ORG <mailto:kduffy@INTERNEWS.ORG>) <kduffy(a)internews.org <mailto:kduffy@internews.org>> wrote: > > > > > > > > > > Sure! How's Thursday for you? > > > > > > > Sent using OWA for iPhone > > > > From: Joshua Machleder <jmachleder(a)usaid.gov <mailto:jmachleder@usaid.gov>> > > > Sent: Tuesday, January 10, 2017 9:10:30 AM > > > > To: Kat Duffy (kduffy(a)INTERNEWS.ORG <mailto:kduffy@INTERNEWS.ORG>) > > > Subject: Re: Introductions > > > > > Hi Kat, > > Actually, that's the one day that week that seems to be booked. Is there another day that week that might work for you? > > > Best, > > > Josh > > > > > > > On Tue, Jan 10, 2017 at 8:44 AM, Kat Duffy (kduffy(a)INTERNEWS.ORG <mailto:kduffy@INTERNEWS.ORG>) > > <kduffy(a)internews.org <mailto:kduffy@internews.org>> wrote: > > > > Aw, thanks for the kind words. I'll aim to live up to them. :) That week sounds great. Want to shoot for the 31st, perhaps 9:30 am or late afternoon? > > > > > > Sent using OWA for iPhone > > > > From: Joshua Machleder <jmachleder(a)usaid.gov <mailto:jmachleder@usaid.gov>> > > > Sent: Tuesday, January 10, 2017 6:39:22 AM > > > To: Kat Duffy (kduffy(a)INTERNEWS.ORG <mailto:kduffy@INTERNEWS.ORG>) > > > Subject: Re: Introductions > > > > > > > > > > > > > Hi Kat, > > > > > > Great to hear from you and really looking forward to meeting you -- I have heard so many nice things from some of my former colleagues, as well as from current ones. > > > > > > > I'll be out of the country until the week of 1/30. If it's OK with you to schedule this far out, I'm relatively open that week (save for Tuesday). > > > > > > > Best, > > > Josh > > > > > > > On Tue, Jan 10, 2017 at 12:43 AM, Kat Duffy (kduffy(a)INTERNEWS.ORG <mailto:kduffy@INTERNEWS.ORG>) > > <kduffy(a)internews.org <mailto:kduffy@internews.org>> wrote: > > > > > > Josh, > > > > > > > > Great to meet you! I'm finally on board post holidays, and I'd love to meet up at some point. How does next week look for you? (Understand if things are crazy with transition and you need a longer time frame.) > > > > > > > > Claire, moving you to BCC to save your inbox, but thanks much for intro. :) > > > > > > > > cheers, > > > > k > > > > > > > > > > > > From: Joshua Machleder <jmachleder(a)usaid.gov <mailto:jmachleder@usaid.gov>> > > > Sent: Tuesday, December 13, 2016 12:38 PM > > > To: Claire Ehmann > > > Cc: Kat Duffy (kduffy(a)INTERNEWS.ORG <mailto:kduffy@INTERNEWS.ORG>) > > > Subject: Re: Introductions > > > > > > > > > > > > > Hey Claire and Kat, > > > > > > Thanks for the virtual introduction -- I haven't met Kat yet, but am looking forward to. I have heard great things about Kat from my former colleagues at Internews (who themselves are a stellar group). > > > > > > > Kat, I'll be back in DC next week and would be very keen to meet up, if you are around, or in the new year if that works better for you. > > > > > > > Best, > > > Josh > > > > > > > On Tue, Dec 13, 2016 at 12:03 PM, Claire Ehmann > > <cehmann(a)usaid.gov <mailto:cehmann@usaid.gov>> wrote: > > > > > > Hi Josh, > > > I'm sure the grapevine has reached you out in Tanzania, but Kat Duffy was just named VP for Global Technology Programs at Internews. Do you already know each other? Kat and I have been following > > similar parallel paths (OK, mine is stodgier) of technology + DRG so I'm happy to connect you two and hope you can find time to meet in the New Year. > > > > > > > Safe travels, > > > Claire > > > > > > > > -- > > > > > > > > > > > > Claire Ehmann > > USAID > > Transition Support Team <https://pages.usaid.gov/A/transition> > > > Deputy Director for Operations > > > 571-217-1304 <tel:571-217-1304> > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > Josh Machleder > > > Senior Media Development Advisor > > > > USAID/DCHA/DRG Center of Excellence on Democracy, Human Rights and Governance > > > (202) 712-4942 <tel:(202)%20712-4942> > > > > > > > > > > > > > > > > > > > > > > > > > Click > > here <https://www.mailcontrol.com/sr/MZbqvYs5QwJvpeaetUwhCQ==> to report this email as spam. > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > Josh Machleder > > > Senior Media Development Advisor > > > > USAID/DCHA/DRG Center of Excellence on Democracy, Human Rights and Governance > > > (202) 712-4942 <tel:(202)%20712-4942> > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > Josh Machleder > > > Senior Media Development Advisor > > > > USAID/DCHA/DRG Center of Excellence on Democracy, Human Rights and Governance > > > (202) 712-4942 <tel:(202)%20712-4942> > > > > > > > > > > > > > > > > > > > > -- > Josh Machleder > Senior Media Development Advisor > USAID/DCHA/DRG Center of Excellence on Democracy, Human Rights and Governance > (202) 712-4942 <tel:(202)%20712-4942> > > > -- > Josh Machleder > Senior Media Development Advisor > USAID/DCHA/DRG Center of Excellence on Democracy, Human Rights and Governance > (202) 712-4942 > _______________________________________________ > Netfreedom mailing list > Netfreedom(a)lists.cymru.com <mailto:Netfreedom@lists.cymru.com> > https://lists.cymru.com/mailman/listinfo/netfreedom <https://lists.cymru.com/mailman/listinfo/netfreedom>

1 0

Job Opening - Communications Director
by Erin Wyatt 10 Jan '17

10 Jan '17

Hello Everyone, As you may know, The Tor Project is looking for a new Communications Director. The job description is attached in PDF format and can be viewed here: https://www.torproject.org/about/jobs-comm-director.html.en Please send/share/forward to anyone you think would be great at this job! Thank you! Cheers, Erin Wyatt HR Manager ewyatt(a)torproject.org GPG Fingerprint: 35E7 2A9F 6655 45F9 2CB6 6624 BA0C 9400 F80F 91CE

1 0

We love your amazing Tor pixel artwork!
by isis agora lovecruft 09 Jan '17

09 Jan '17

Hello Bruno! I've come across some of your awesome pixel art around the internet before, [0] but I had no idea that you had made a Tor logo, [1] until I saw that Dell Cameron used it for a recent article in the Daily Dot. [2] THIS IS THE BEST. Seriously, this makes me so excited and proud. So I was thinking it would be cool if there were some way that Tor users and relay operators could get merch, like T-shirts, stickers, and such, with your Tor logo art on it, but, as the artist, you should get compensation for it. I'm just a developer and not really savvy on artwork licensing, merch sites, or payment processing, so I'm not sure how to best make this happen. Perhaps one of my colleagues in CC might know more and be better able to help set this up? Again, thanks so much for the Tor art, and also all your other fan art, it's all REALLY cool. Also, if you made more logos and stuff for us… I might die. Your art is amazing. We have some tickets [3] for ideas for graphic design work and we need some other logo design (e.g. I think we still need a finalised Tor Labs logo?), but—as you can see—this is clearly not our forté. [0]: http://bbrunomoraes.tumblr.com/ [1]: http://cdn0.dailydot.com/cache/d7/6e/d76e90b9af414b60c7e6daf06701b2f6.jpg [2]: https://www.dailydot.com/layer8/tor-project-russian-hackers-dhs/ [3]: https://bugs.torproject.org/11501 Best, -- ♥Ⓐ isis agora lovecruft _________________________________________________________ OpenPGP: 4096R/0A6A58A14B5946ABDE18E207A3ADB67A2CDB8B35 Current Keys: https://fyb.patternsinthevoid.net/isis.txt

1 0

Notes from January 5 2017 Vegas team meeting
by Karsten Loesing 09 Jan '17

09 Jan '17

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Notes for January 5 2017 meeting: Alison 1) Tor Glossary is nearly finished; where should it live until support.torproject.org is ready? 2) support portal work continues 3) next for community team: revisit Rapid Response Program, finish membership docs, continue Global South outreach push 4) LFP: currently working with some libraries on the border Roger 1) Report-back from 33c3 -- happy to answer questions. 2) Working with Shari and Jon on invites for Amsterdam. 3) Follow-up on loose ends from Hamburg meetings. 4) I'm reviewing PETS papers this week. 5) Next week I'm going to the NSF PI meeting and the FTC Privacy Showcase. 6) Shout-out to Kate! Georg 1) I'm taking care of my backlog (dealing with the OTF situation etc.) 2) I talked to asn about opening up our HackerOne bug bounty program. Any arguments for not doing that (right now)? <-- Georg is following up on that item coordinating with others (isabela, OTF and HackerOne folks etc.) 3) We need a new code signing certificate for Windows Tor Browser bundles later this year (the current one is valid up to May 25) Shari 1) Writing up note to tor-internal about end-of-year campaign. It was more about rebuilding relationships and deploying infrastructure than whipping up a Twitter frenzy. We took in something over $100k. 2) Working on job description for Communications Director. Hope to distribute on Monday, January 9. 3) Looking for projects that need to be funded in 2017. Trying to get ahead of planning funding proposals and finding foundation funders. 4) Lots of meeting planning for Amsterdam. Jon's finding it very expensive (not a surprise, but still...) If folks have suggestions for venues, we're all ears! 5) Planning a short trip to San Francisco at the end of the month to touch base with a few folks there. Nick 1) I'm in NYC for Real World Crypto, so: distracted this week. 2) Hiring for net team is a lot of work! 3) Planning to freeze in about 3 weeks. 4) Need help planning 2017. Mike: 1) Misc. Karsten: 1) Got some useful feedback on the new Metrics website, we'll fix a few things and go live some time next week, accompanied by a blog post. 2) Got more coding work done than usual, probably because everyone's on vacation. -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBCAAGBQJYc/FPAAoJEC3ESO/4X7XBtYEH/18/+r803HZbQEMQARA+xaDN KjQpX4cLjfylf8DKDVCCC7J8O44cmOVHE7fWGfE66TZCH1k/KLXboSFBoIQ6FuBD PULAv1BhkHnuUU9yehL0oi2uwMOaZjTN/nA1qrBw3fjpCWxaY/eT+97e+KdHvUbV bGPjwShVGkBlZuublVdrio4DIj940AwP4+SR5lm0xh3cXXOovNVSWqmCyM1X7FIe MTc1iAX0c2YY4BFkjyQJApLB0ZtWP2b7Th5asLHOIzEzTWBJP43L9VFteOgI8V2Z nGEbNjy+p9kfvd6li+jWE0h7rjw+L8nG/xOZ0y0f8UuS5xVmnKPxrKmTcuUT3rA= =5L2k -----END PGP SIGNATURE-----

1 0

Summary of meek's costs, November 2016
by David Fifield 09 Jan '17

09 Jan '17

Here's the summary of meek's CDN fees for November 2016. App Engine + Amazon + Azure = total by period all 2014 $600.63 + $917.89 + $0.00 = $1518.52 January 2015 $464.37 + $669.02 + $0.00 = $1133.39 February 2015 $650.53 + $604.83 + $0.00 = $1255.36 March 2015 $690.29 + $815.68 + $0.00 = $1505.97 April 2015 $886.43 + $785.37 + $0.00 = $1671.80 May 2015 $871.64 + $896.39 + $0.00 = $1768.03 June 2015 $601.83 + $820.00 + $0.00 = $1421.83 July 2015 $732.01 + $837.08 + $0.00 = $1569.09 August 2015 $656.76 + $819.59 + $154.89 = $1631.24 September 2015 $617.08 + $710.75 + $490.58 = $1818.41 October 2015 $672.01 + $110.72 + $300.64 = $1083.37 November 2015 $602.35 + $474.13 + $174.18 = $1250.66 December 2015 $561.29 + $603.27 + $172.60 = $1337.16 January 2016 $771.17 + $1581.88 + $329.10 = $2682.15 February 2016 $986.39 + $977.85 + $445.83 = $2410.07 March 2016 $1079.49 + $865.06 + $534.71 = $2479.26 April 2016 $1169.23 + $1074.25 + $508.93 = $2752.41 May 2016 $525.46 + $1097.46 + $513.56 = $2136.48 June 2016 $0.00 + $1117.67 + $575.50 = $1693.17 July 2016 $0.00 + $1121.71 + $592.47 = $1714.18 August 2016 $0.00 + $1038.62 + $607.13 = $1645.75 September 2016 $0.00 + $932.22 + $592.92 = $1525.14 October 2016 $0.00 + $1259.19 + $646.00 = $1905.19 November 2016 $0.00 + $1613.00 + $597.76 = $2210.76 -- total by CDN $13138.96 + $21743.63 + $6629.67 = $41512.26 grand total https://metrics.torproject.org/userstats-bridge-transport.html?start=2016-0… == Amazon a.k.a. meek-amazon == EU (Ireland) 559M requests $670.98 3213 GB $253.40 Global 11M requests $11.45 39 GB $3.01 US East (Northern Virginia) 456M requests $456.69 2785 GB $216.95 -- total 1027M requests $1139.12 6037 GB $473.36 charge for alarms $0.50 https://atlas.torproject.org/#details/F4AD82B2032EDEF6C02C5A529C42CFAFE5165… == Azure a.k.a. meek-azure == Zone 1 6722 GB $584.84 Zone 2 70 GB $ 9.67 Zone 3 7 GB $ 1.77 Zone 4 11 GB $ 1.48 -- total 6810 GB $597.76 https://atlas.torproject.org/#details/AA033EEB61601B2B7312D89B62AAA23DC3ED8… Earlier reports in this series: https://trac.torproject.org/projects/tor/wiki/doc/meek#Costs

1 0

(FWD) Tor at the Pre-Conference R&D Networking Event
by Roger Dingledine 06 Jan '17

06 Jan '17

Would you like to help me explain Tor, and how we relate to privacy, to researchers and government agencies at the FTC PrivacyCon event in Washington DC on Jan 11? Lorrie asked me to sign us up, because she wants Tor to be represented there. It would be great if it's not just me. :) --Roger ----- Forwarded message from Roger Dingledine <arma(a)mit.edu> ----- Date: Mon, 12 Dec 2016 01:29:58 -0500 From: Roger Dingledine <arma(a)mit.edu> To: privacycon(a)ftc.gov Subject: Tor at the Pre-Conference R&D Networking Event Hi Lorrie, others, Please sign us up for some space at your Jan 11 event: https://www.ftc.gov/news-events/press-releases/2016/11/ftc-host-rd-networki… Name of organization: The Tor Project Name of contact person: Roger Dingledine Email address of contact person: arma(a)mit.edu One paragraph description of the organization's interest in privacy research: The Tor Project is a free-software non-profit project to build an anonymity toolkit used by individuals, companies, governments, and law enforcement around the world: https://www.torproject.org/ Tor is central to a myriad of research collaborations supported by the National Science Foundation and related funders. On the metrics and measurement side, we're working on how to safely and ethically collect usage statistics about the Tor network. On the network side, we're developing architectural improvements like stronger crypto in next-generation onion services, and ways to detect and resist denial-of-service attacks on Tor without impacting user privacy. On the censorship side, we're deploying a global infrastructure where users launch censorship tests and safely report their results. And on the application side, we're building better browser behavior so users can control what information websites get to learn about them. The Tor network has grown since its start in 2002 to several million active users pushing over 80 Gbps of traffic. The Tor Project has a staff of 28 developers, researchers, and advocates, plus several dozen volunteers who help out on a daily basis. Thanks! --Roger ----- End forwarded message -----

2 2

Fwd: [tor-dev] Interested in contributing to Tor Project - IP Hijacking detection for Tor relays
by teor 03 Jan '17

03 Jan '17

For those of you who didn't see this on tor-dev: > Begin forwarded message: > > From: Nikhil <rnikhil275(a)gmail.com <mailto:rnikhil275@gmail.com>> > Subject: [tor-dev] Interested in contributing to Tor Project - IP Hijacking detection for Tor relays > Date: 29 December 2016 at 22:50:12 AEDT > To: tor-dev(a)lists.torproject.org <mailto:tor-dev@lists.torproject.org> > Reply-To: tor-dev(a)lists.torproject.org <mailto:tor-dev@lists.torproject.org> > > Hi, > > I am Nikhil. R, a student from India. You can know more about me from here[1] and here[2]. I have been running a Tor relay for sometime and now I am interested in contributing to the Tor Project. Specifically, I would like to work on IP Hijacking detection for Tor relays. I understand this does not involve directly with the Tor core hence I think this project is ideal in getting my feet wet with the Tor Community and get me started for further contributions to the Tor Project. > > > BGP hijacking is difficult without inside help from ISP's(I think ?) but state run adversaries don't necessarily have this problem. This has a great risk of exposing all Tor clients or even mess around with the name resolution in exit relays. I have also read about incidents where an attacker using BGP hijacking, hijacked a portion of a Bitcoin mining pool traffic to pay himself instead of the people contributing the processing power. I feel BGP has major security implications in this aspect and a monitoring service is necessary. There are many monitoring services and we can possibly leverage one of them for the routing data. > > The main motive of the service would be to find anomalies/ malicious changes in the routing information compared to previous snapshots of the same. How do we actually do this comparison ? Any pointers for that ? The project also mentions that the service should be Tor-aware. What exactly does this mean ? Does it mean that, it should monitor all tor relays ip addresses ? It would be wonderful if you could elaborate on the project in a little more detail. > > I am a beginner in this area and please excuse me if any of the above questions are too stupid. > > Regards, > Nikhil. R > > [1]:https://in.linkedin.com/in/rnikhil275 <https://in.linkedin.com/in/rnikhil275> > > [2]https://rnikhil275.github.io <https://rnikhil275.github.io/> > _______________________________________________ > tor-dev mailing list > tor-dev(a)lists.torproject.org <mailto:tor-dev@lists.torproject.org> > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev T -- Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B ricochet:ekmygaiu4rzgsk6n xmpp: teor at torproject dot org ------------------------------------------------------------------------

1 0