- tor-project - lists.torproject.org

Summary of meek's costs, November 2016
by David Fifield 09 Jan '17

09 Jan '17

Here's the summary of meek's CDN fees for November 2016. App Engine + Amazon + Azure = total by period all 2014 $600.63 + $917.89 + $0.00 = $1518.52 January 2015 $464.37 + $669.02 + $0.00 = $1133.39 February 2015 $650.53 + $604.83 + $0.00 = $1255.36 March 2015 $690.29 + $815.68 + $0.00 = $1505.97 April 2015 $886.43 + $785.37 + $0.00 = $1671.80 May 2015 $871.64 + $896.39 + $0.00 = $1768.03 June 2015 $601.83 + $820.00 + $0.00 = $1421.83 July 2015 $732.01 + $837.08 + $0.00 = $1569.09 August 2015 $656.76 + $819.59 + $154.89 = $1631.24 September 2015 $617.08 + $710.75 + $490.58 = $1818.41 October 2015 $672.01 + $110.72 + $300.64 = $1083.37 November 2015 $602.35 + $474.13 + $174.18 = $1250.66 December 2015 $561.29 + $603.27 + $172.60 = $1337.16 January 2016 $771.17 + $1581.88 + $329.10 = $2682.15 February 2016 $986.39 + $977.85 + $445.83 = $2410.07 March 2016 $1079.49 + $865.06 + $534.71 = $2479.26 April 2016 $1169.23 + $1074.25 + $508.93 = $2752.41 May 2016 $525.46 + $1097.46 + $513.56 = $2136.48 June 2016 $0.00 + $1117.67 + $575.50 = $1693.17 July 2016 $0.00 + $1121.71 + $592.47 = $1714.18 August 2016 $0.00 + $1038.62 + $607.13 = $1645.75 September 2016 $0.00 + $932.22 + $592.92 = $1525.14 October 2016 $0.00 + $1259.19 + $646.00 = $1905.19 November 2016 $0.00 + $1613.00 + $597.76 = $2210.76 -- total by CDN $13138.96 + $21743.63 + $6629.67 = $41512.26 grand total https://metrics.torproject.org/userstats-bridge-transport.html?start=2016-0… == Amazon a.k.a. meek-amazon == EU (Ireland) 559M requests $670.98 3213 GB $253.40 Global 11M requests $11.45 39 GB $3.01 US East (Northern Virginia) 456M requests $456.69 2785 GB $216.95 -- total 1027M requests $1139.12 6037 GB $473.36 charge for alarms $0.50 https://atlas.torproject.org/#details/F4AD82B2032EDEF6C02C5A529C42CFAFE5165… == Azure a.k.a. meek-azure == Zone 1 6722 GB $584.84 Zone 2 70 GB $ 9.67 Zone 3 7 GB $ 1.77 Zone 4 11 GB $ 1.48 -- total 6810 GB $597.76 https://atlas.torproject.org/#details/AA033EEB61601B2B7312D89B62AAA23DC3ED8… Earlier reports in this series: https://trac.torproject.org/projects/tor/wiki/doc/meek#Costs

1 0

(FWD) Tor at the Pre-Conference R&D Networking Event
by Roger Dingledine 06 Jan '17

06 Jan '17

Would you like to help me explain Tor, and how we relate to privacy, to researchers and government agencies at the FTC PrivacyCon event in Washington DC on Jan 11? Lorrie asked me to sign us up, because she wants Tor to be represented there. It would be great if it's not just me. :) --Roger ----- Forwarded message from Roger Dingledine <arma(a)mit.edu> ----- Date: Mon, 12 Dec 2016 01:29:58 -0500 From: Roger Dingledine <arma(a)mit.edu> To: privacycon(a)ftc.gov Subject: Tor at the Pre-Conference R&D Networking Event Hi Lorrie, others, Please sign us up for some space at your Jan 11 event: https://www.ftc.gov/news-events/press-releases/2016/11/ftc-host-rd-networki… Name of organization: The Tor Project Name of contact person: Roger Dingledine Email address of contact person: arma(a)mit.edu One paragraph description of the organization's interest in privacy research: The Tor Project is a free-software non-profit project to build an anonymity toolkit used by individuals, companies, governments, and law enforcement around the world: https://www.torproject.org/ Tor is central to a myriad of research collaborations supported by the National Science Foundation and related funders. On the metrics and measurement side, we're working on how to safely and ethically collect usage statistics about the Tor network. On the network side, we're developing architectural improvements like stronger crypto in next-generation onion services, and ways to detect and resist denial-of-service attacks on Tor without impacting user privacy. On the censorship side, we're deploying a global infrastructure where users launch censorship tests and safely report their results. And on the application side, we're building better browser behavior so users can control what information websites get to learn about them. The Tor network has grown since its start in 2002 to several million active users pushing over 80 Gbps of traffic. The Tor Project has a staff of 28 developers, researchers, and advocates, plus several dozen volunteers who help out on a daily basis. Thanks! --Roger ----- End forwarded message -----

2 2

Fwd: [tor-dev] Interested in contributing to Tor Project - IP Hijacking detection for Tor relays
by teor 03 Jan '17

03 Jan '17

For those of you who didn't see this on tor-dev: > Begin forwarded message: > > From: Nikhil <rnikhil275(a)gmail.com <mailto:rnikhil275@gmail.com>> > Subject: [tor-dev] Interested in contributing to Tor Project - IP Hijacking detection for Tor relays > Date: 29 December 2016 at 22:50:12 AEDT > To: tor-dev(a)lists.torproject.org <mailto:tor-dev@lists.torproject.org> > Reply-To: tor-dev(a)lists.torproject.org <mailto:tor-dev@lists.torproject.org> > > Hi, > > I am Nikhil. R, a student from India. You can know more about me from here[1] and here[2]. I have been running a Tor relay for sometime and now I am interested in contributing to the Tor Project. Specifically, I would like to work on IP Hijacking detection for Tor relays. I understand this does not involve directly with the Tor core hence I think this project is ideal in getting my feet wet with the Tor Community and get me started for further contributions to the Tor Project. > > > BGP hijacking is difficult without inside help from ISP's(I think ?) but state run adversaries don't necessarily have this problem. This has a great risk of exposing all Tor clients or even mess around with the name resolution in exit relays. I have also read about incidents where an attacker using BGP hijacking, hijacked a portion of a Bitcoin mining pool traffic to pay himself instead of the people contributing the processing power. I feel BGP has major security implications in this aspect and a monitoring service is necessary. There are many monitoring services and we can possibly leverage one of them for the routing data. > > The main motive of the service would be to find anomalies/ malicious changes in the routing information compared to previous snapshots of the same. How do we actually do this comparison ? Any pointers for that ? The project also mentions that the service should be Tor-aware. What exactly does this mean ? Does it mean that, it should monitor all tor relays ip addresses ? It would be wonderful if you could elaborate on the project in a little more detail. > > I am a beginner in this area and please excuse me if any of the above questions are too stupid. > > Regards, > Nikhil. R > > [1]:https://in.linkedin.com/in/rnikhil275 <https://in.linkedin.com/in/rnikhil275> > > [2]https://rnikhil275.github.io <https://rnikhil275.github.io/> > _______________________________________________ > tor-dev mailing list > tor-dev(a)lists.torproject.org <mailto:tor-dev@lists.torproject.org> > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev T -- Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B ricochet:ekmygaiu4rzgsk6n xmpp: teor at torproject dot org ------------------------------------------------------------------------

1 0

Notes from December 22 2016 Vegas team meeting
by Karsten Loesing 02 Jan '17

02 Jan '17

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 See this posting for context: https://lists.torproject.org/pipermail/tor-project/2016-April/000223.html Notes for December 22 2016 meeting: Alison: 0) Global South outreach: funding for travel, connecting with local organizations 1) LFP has begun work along the US-Mexico border. 2) The Tor Glossary draft was submitted to tor-internal for comments Shari: 1) Summer 2017 Tor Meeting in Montreal? 2) Looking over grant proposal to Sida due 12/23. 3) Lots of end-of-year campaign stuff. Nick: 1) new releases came out 2) TBB release schedule makes some stuff harder for us; should discuss with GK. 3) priorities uncertain pending word on funding proposals 4) hiring status! Isabela: 1) working with orfox team to meet ISC 1st milestone deadline (dec 23) 2) working on answering questions from OTF related to final invoice report 3) helping get 2017 contracts in place 4) helping with SIDA second review due on dec 23 5) misc stuff (donation campaign, global south work etc) 6) REMINDER I WILL TAKE THE FIRST WEEK OF JANUARY OFF (: 7) Linda updates - metrics new site is being coded :) and she will prep a blog post about this work / she is working with OONI folks to finalize both web and mobile UIs / Jan plan is to work on materials for user testing of orfox security slider 8) Hiro updates - working on Trac wish list (email feature - she emailed tor internal for feedback on this one | and she is working on email and having a console client for the xmlrpc plugin); working with metrics team on #20928 - working on getting more info about other tasks she is picking up from Sebastian list Arturo: 1) Finalising the mobile and web UIs for ooniprobe with Adarsh 2) Started implementing the web UI based on the feedback from Adarsh 3) Published report on internet censorship in Malaysia: https://ooni.torproject.org/post/malaysia-report/ Kate: 1) Media around the onion services update - a bit close to the holidays, I think; saw Softpedia, lwn.net, and iMasters articles. 2) Malaysia media (press release--ditto/holidays) and thinking through media strategy with OONI (good Malaysian coverage mostly generated by Malaysian partner) 3) Generated social media tactics for Shari and others to consider for fundraising 4) Answered press queries Karsten: 1) Moving forward with Metrics website redesign/reorganization, had 2 meetings this week and many iterations, will ask for feedback on tor-project@ on Friday. Mike: 1) Did some coordination wrt Ten Principles post. Is now linked from neveragain.tech. 2) Prepped mails for Tor Labs, but haven't sent them yet - holiday travel. :/ -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBCAAGBQJYaiOUAAoJEC3ESO/4X7XBQdIH/i3BYYaIxWeg98RzP8EnqGG+ vkECmKa/mUyT7eY/8jGv3bEHhGTsR9hqH8TIQpM/NOx8h1LVFHvfA32qtfXmxgn0 68rAOdBRDCoAOEvuh8awCLE9Apvz8M5MSbDGppn/UdDVspJXAGP2F00kqBaPNTZr qobpdoHsase1hoWFe1SLsprrom66XILo9gQ1n0aYPbof5GZVGMio3Izs/Xl1qxpr bjwWB0k7iMHDdd3jglzZNuZwPEAZ1R6U23Q+b+SQ7uUa5ba36/AFjXopr5KgjLx/ sUgZbiCyizVfhX5PbJtCmwFsEB20vGIhiz6ER4T+AMC7TJ5e1OqdR7NNicD33Vk= =4W3E -----END PGP SIGNATURE-----

1 0

We want your feedback on the redesigned Tor metrics website! (DUE: 1/5/2017)
by Linda Naeun Lee 02 Jan '17

02 Jan '17

Hello all, The metrics and UX team have teamed up to make a more usable and useful metrics webpage. Prototype: http://107.23.39.12/index.html Feedback pad: https://pad.riseup.net/p/esVoPphdMGnU Please provide feedback by January 5th 2017 at 15:00 UTC on the pad rather than emailing this thread. You are welcome to share the pad with people you think would provide valuable feedback. The pad has all the information you need to know--and poking around the prototype for a couple minutes and giving us your immediate thoughts (~5 minutes) should be sufficient. But if you want additional information on what we changed and how we worked on this, here's the (slightly not up to date) project page: https://trac.torproject.org/projects/tor/wiki/doc/UX/MetricsRedesign Cheers, Linda -- Current Key: https://pgp.mit.edu/pks/lookup?search=lindanaeunlee GPG Fingerprint: FA0A C9BE 2881 B347 9F4F C0D7 BE70 F826 5ED2 8FA2

3 2

iOS AppStore - Trademark violations
by Nima Fatemi 23 Dec '16

23 Dec '16

Hey there, Following the great news that Onion Browser for iOS finally became free, I took a look at Apple AppStore to see what other apps are there that are pretending to be "the" Tor for iOS, and unfortunately found plenty that use Tor logo or brand name to promote themselves. Most of which are not free (as in beer / nor as in freedom) and seem to be even injecting ads to users. The worst part... some of them have hundreds of 5 star reviews. So I collected a bunch of them under this ticket: https://trac.torproject.org/projects/tor/ticket/20873 However I couldn't find the right component to file the ticket under. So I thought I'd drop a line to the mailing list and let people know this exists, in case the ones who need to deal with these issues read the mailing list. Should we have a legal component on trac? Enjoy the weekend! -- Nima 0X58C4B928A3E218F6 | @mrphs "I disapprove of what you say, but I will defend to the death your right to say it" --Evelyn Beatrice Hall

5 4

Fwd: [OTF-Talk] Lush Digital Fund - deadline January 15
by Tom Ritter 21 Dec '16

21 Dec '16

If you're doing short-term contracting work, this might be a good opportunity to pick some "It sure would be nice to have this feature" topic... ---------- Forwarded message ---------- From: Deji Bryce Olukotun <deji(a)accessnow.org> Date: 20 December 2016 at 16:39 Subject: [OTF-Talk] Lush Digital Fund - deadline January 15 To: otf-talk(a)opentechfund.org Hi to All, Apologies for cross-posting. I'm pleased to report that the Lush Digital Fund is available for applications. Background: Access Now partnered with the ethical UK-based cosmetics company to raise awareness around internet shutdowns and created a special product called an Error 404 bath bomb. You can read more about our collaboration here: https://uk.lush.com/tag/keepiton Profits from the sale of the Error 404 bath bomb -- which are still continuing -- are placed into a Digital Fund, with the aim of raising 250,000 pounds. Grants are a maximum of 10,000 pounds each (about U.S. $12,600 today.) The first application round is fairly simple. Also note that Lush's funding flexibility allows the company to support small grassroots groups or individuals who do not have official charity / non-profit status. Applications do not need to be focused on internet shutdowns to be considered. http://digitalfund.org.uk/ The deadline is January 15. Feel free to write with questions. Best, -- Deji Bryce Olukotun Senior Global Advocacy Manager Access Now | accessnow.org tel: +1 415-935-4572 | @dejiridoo PGP: 0x6012CDA8 Fingerprint: 3AEE 4194 F70E C806 A810 857A 6AD5 8F48 6012 CDA8 Subscribe to our free weekly newsletter on digital rights, the Access Now Express: https://www.accessnow.org/campaign/#sign-up -- This is now the OTF-Talk mailing list (formally OTF-Projects), where past and current OTF supported projects can share information, ask questions, and more. You can continue to post monthly reports here or to OTF-Active (the list for currently supported projects) --- You received this message because you are subscribed to the Google Groups "OTF-Talk" group. To unsubscribe from this group and stop receiving emails from it, send an email to OTF-Talk+unsubscribe(a)opentechfund.org. To post to this group, send email to OTF-Talk(a)opentechfund.org. To view this discussion on the web visit https://groups.google.com/a/opentechfund.org/d/msgid/OTF-Talk/CAN9cB4FW38W6…. For more options, visit https://groups.google.com/a/opentechfund.org/d/optout.

1 0

Fwd: [E-B] Technology Projects Manager / Technology Projects Director
by Shari Steele 20 Dec '16

20 Dec '16

Hey all. EFF has a job opening for a technology projects manager/director. Shari > Begin forwarded message: > > From: Maggie Utgoff via eff-board <eff-board(a)eff.org> > Subject: [E-B] Technology Projects Manager / Technology Projects Director > Date: December 20, 2016 at 1:22:32 PM PST > To: eff-board(a)eff.org > Reply-To: Maggie Utgoff <mutgoff(a)eff.org> > > Please circulate. > > https://www.eff.org/opportunities/jobs/technology-projects-manager-technolo… > -- > Maggie Utgoff > Employee Experience Manager > Electronic Frontier Foundation https://www.eff.org/join > 815 Eddy Street, San Francisco, CA 94109 +1 415 436 9333 x116 >

1 0

Adding a "General" component to Trac
by David Goulet 19 Dec '16

19 Dec '16

Hi everyone! This ticket has been opened by mrphs couple days ago and it seems we lack a component for such idea: https://trac.torproject.org/projects/tor/ticket/21013 I propose we add a new Component to Trac that is called something like "General" (which is probably not the best name btw) and put ticket like this in it. Ticket without component usually will get lost in the dark dark void of Trac and we have no right now for "general purposes" Tor ideas/issues/improvement. Thoughts? David

2 1

Notes from December 15 2016 Vegas team meeting
by Karsten Loesing 19 Dec '16

19 Dec '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 See this posting for context: https://lists.torproject.org/pipermail/tor-project/2016-April/000223.html Notes for December 15 2016 meeting: isabela: 1) Worked on DRL full proposal for Tor on mobile 2) Linda is keeping me updated on her work with metrics and ooni teams - - I am very excited not only with the results of it but the process both teams are taking to build both experiences. 2.1) Metrics new design is freezing today for development - here are her final feedback to the team: 2.1.1) comments on the design: https://drive.google.com/open?id=0B36YkvDtVNK_YkcyZVZWZk5PeHM 2.1.2) comments on the text: https://drive.google.com/open?id=0B36YkvDtVNK_Q3Q3bGdaUFllelk 2.2) Spent most of the week performing interviews with OONI users to collect their feedback 3) Hiro updates 3.1) Sent her plans on how to approach the email interface to create and update tickets request from Trac wish list with the rest of Tor community for feedback 3.2) She is looking into Trac api to see what can be done there for other requests from the wish list 3.3) VPN for gitlab - she has to wait till network-team and admins have discussed requirements and how it will be used etc 3.4) She will meet with Sebastian to start planning the handover of duties 3.5) I gave a last chance for new people who has to be added to people's page to give me a description by eow - after that I will create a ticket for hiro with all the changes Shari passed to me to do. This is a first pass, we might have other updates for this page in the future (according to Shari) 3.6) I start to follow up with Kevin on the blog status and gave the heads up to Hiro about taking over the blog maintenance as well 4) Working on final report/invoice to sponsorU 5) Working with android folks to make sure we reach first milestone of isc by dec 23rd (alpha release of security slider on orfox) 6) helped a little bit with blog posts and tweets 7) Starting to get on Sida proposal Nick: 1) Merged ed25519 identity-based circuit extension and another part of hidden services. Noice! 2) Guard revamp lands tomorrow, I hope. 3) 0.2.9.8 stable comes out next week, barring misadventure. 4) 0.3.0.1-alpha on a similar timeframe. 5) Blog post coordination: how important is it to get our release and our "what's new in 029" blog post out on the same day? Georg: 1) We got all the Tor Browser releases out that contained the last SponsorU bits 2) Helped with the DRL proposal 3) Helped Isabela with the SponsorU report Arturo: 1) Published report in collaboration with Amnesty international on Ethiopia: https://ooni.torproject.org/post/ethiopia-report/ 2) Published announcement on the beta release of the Web UI: https://ooni.torproject.org/post/web-ui-post/ 3) David Fifield started looking at the data collected by OONI on Tor bridges and directory authorities. See: https://lists.torproject.org/pipermail/ooni-dev/2016-December/000482.html 4) Started drafting a design document for the OONI Probe Orchestration System: https://github.com/TheTorProject/ooni-spec/blob/feature/opos/OONI-Probe-Orc… Mike: 1) Blog post on ten principles is ready when we want it to go up. Thinking of cross-post on medium.com. 2) About to send mail to all the Tor Labs projects Kate: 1) Press release and some press work on OONI/Amnesty's excellent Ethiopia report; coverage in AfricaTimes, Associated Press (republished in many outlets, including Washington Post web site), and we're expecting a Forbes article. 2) Answering multiple press queries about Trump 3) Answering press inquiries on other topics Shari: 1) End of year campaign stuff. The blog posts are taking quite a bit of time. 2) Board meeting last week. 3) Gonna make edits to the Sida proposal before we submit again on December 23. Karsten: 1) Spending a lot of time and energy on the Metrics redesign/reorganization this week. -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBCAAGBQJYV5mtAAoJEC3ESO/4X7XBRvkH/R0jWOsK/K7iF3ZtZeqIOkCl bPUJ/61/S4CPmrCXZTwNPeXtzbOLacj1oQF2cP7eGmWt0Kz+rd9RTD1k/vz7qw51 xnmMwI1eXQoH6x3Nwg8wG6k/Jc/6s6gtIJNEw6V4TnuXph8CRkJbK8EiS/xogBwm tC4R9YUvANoCTw8a96UAMHfS1gjkuGDbX0Mrv0RayJj7hNl6N8nkqt93mSqqBt2i gyOxwmA28jFx1apT3rfDrGAcq9kzBUyMV7bAN2PN9bN9xoEsfPdsNZJxGPKS6uQT NBJ8iwnrkAvbxKxes4wUBYzFBqC6cjFydySPUe+sPzt0WPXvhrTe749rpRfIZW8= =kM1C -----END PGP SIGNATURE-----

1 0