- tor-project - lists.torproject.org

What folks say about Tor
by Shari Steele 26 Oct '16

26 Oct '16

Hey all. I’m collecting quotes of complimentary things our adversaries have said about Tor for possible inclusion on a t-shirt, and I would really appreciate your help. Roger got me started with a bunch of quotes below, but most of them are missing attribution. So if any of you have additional quotes and/or can add attribution to Roger’s quotes below, I would be extremely grateful. Thanks in advance for your help with this! Shari > Here are some: > > - "Still the King of high secure, low latency Internet Anonymity" "There > are no contenders for the throne in waiting" -- from an NSA or GCHQ > slide deck in 2011 > > - "Tor Project staffed with smart people!" from the same slide deck > > - "Tor is very good -- No passive exploitation :-(" from the same slide > deck > > - "TorButton: A Thorn in the side of SIGINT" from the same slide deck > > - "Catastrophic: near-total loss/lack of insight to target communications, > presence" refering to impact of Tor, TrueCrypt, and Tails. > > - "Very naughty people use Tor" -- GCHQ, in a summary slide from a slide > deck analyzing hidden service security (also "Near impossible to figure > out who is talking to who"). > > There are a few more that I should hunt down, like a good quote about > Tails, and something complimentary of Mike in particular. But maybe > those will be a good start?

4 4

can someone reboot storm?
by isabela 25 Oct '16

25 Oct '16

Hi there, sorry if this is the wrong place. I've noticed since yesterday that storm is not accessible. The fact I can't access the information there is starting to block some work from moving forward. I know isis has been taking care of our storm instance for a while. I don't know if she is still doing it, and if she is, I don't know if she has time now to get storm working again. (thank you isis!) Would be possible to reboot the machine and see if it comes back? Again, sorry if this is not the right place. Isabela

1 1

Fwd: [Netfreedom] IFF 2017 Call for Proposals
by Shari Steele 25 Oct '16

25 Oct '16

> Begin forwarded message: > > From: Sarah Bushman <sbushman(a)irex.org> > Subject: [Netfreedom] IFF 2017 Call for Proposals > Date: October 25, 2016 at 8:16:28 AM PDT > To: netfreedom(a)lists.cymru.com > > Dear IF colleagues, > > The 2017 Call for Internet Freedom Festival (IFF) Proposals is currently open, and we would love for you to submit your session or workshop ideas to be part of the festival program! > > The *final deadline* for submission on Monday, November 28th, 2016. We’re expecting a big turnout, so submit your session soon! > > Host a Session —> https://internetfreedomfestival.org/host-a-session/ <https://internetfreedomfestival.org/host-a-session/> > > Furthermore, via funds raised for the IFF Diversity & Inclusion Fund, the IFF is now able to offer a limited amount of travel assistance to the event, to participants whose session proposals are selected for the festival program! > > IFF Diversity & Inclusion Fund -> https://internetfreedomfestival.org/internet-freedom-festival-diversity-inc… <https://internetfreedomfestival.org/internet-freedom-festival-diversity-inc…> > > The IFF is a gathering made for this community, by this community - and we want to ensure that your voice and ideas are heard. So think big, be innovative, be creative, and send in your session ideas by November 28th! > > And remember, IFF is March 6-10, 2017 this year! See you in Valencia! > > -- > > Sarah E. Bushman > > Program Officer > > IREX/USA > > 1275 K Street, NW, Ste. 600 > > Washington, DC 20005 > > 202-628-8188 x129 > > Skype: sarahbushman > > Make a Better World: www.irex.org/donate <http://www.irex.org/donate> > > _______________________________________________ > Netfreedom mailing list > Netfreedom(a)lists.cymru.com > https://lists.cymru.com/mailman/listinfo/netfreedom

1 0

Anything wrong with "March 22-28, Amsterdam"?
by Roger Dingledine 25 Oct '16

25 Oct '16

Hi folks, We're considering to do our next big meeting March 22-28, 2017, in or near Amsterdam. These dates would be right before Rightscon in Belgium, which could be a great coincidence since people could come to our hackdays before they go to Rightscon. Let us know if there are problems with these dates! :) --Roger

2 2

Learning how to give talks & getting practice
by Griffin Boyce 19 Oct '16

19 Oct '16

This was originally sent to tor-meeting@, but is being forwarded here by request. Hope it is useful! =) -------- Original Message -------- Hi all, At the meeting, there was a discussion on how people can learn how to give talks -- particularly if they have some experience but want to refine their skills a bit. I'm not sure if there was a proper report-back on it, but here are some suggestions on getting experience: 1) Join Toastmasters or similar clubs Toastmasters costs money ($128/year in Boston), but there are lots of similar clubs on Meetup and around universities that don't cost anything and are a great way to get over fear of speaking and get feedback on technique. 2) Prepare and give a talk to your cat Or by yourself. Presenting your talk to yourself (out loud) is a great way to figure out what works and what doesn't, or what passages just need more work. It's also good to do this before giving a proper talk -- not just for practice, but also to make sure that your talk is within time limits. 3) Give talks at small events that aren't recorded Presenting a lightning talk at a hackerspace or small conferences can be a low-stress way to get experience. 4) Hard Mode Give talks that *are* recorded, and pick apart your performance later by watching that talk on YouTube. I wouldn't say I *recommend* this, but have definitely done it ;P MOAR TIPS: http://web.mit.edu/urop/resources/speaking.html https://www.toastmasters.org/Resources/Public-Speaking-Tips -- Accept what you cannot change, and change what you cannot accept. PGP: 0x03cf4a0ab3c79a63

5 4

Notes from October 17th Community Team Meeting
by Yidhra Kthanid 19 Oct '16

19 Oct '16

Notes are at https://storm.torproject.org/grain/Xyq4zgG9PZop5SxaG8yPoj # Glossary * Work has been done on glossary in the last few weeks https://storm.torproject.org/shared/wjpmSOq0ku3zZEppCdPV_xXr4mXPxjKvIH3PUyx… * Almost done, needs reviewing * Should try to make less jargony and easier to understand # Support desk stopgap efforts * support.torproject.org is in the works, RT help desk being disabled * Help desk getting too many requests, but now all users emails execdir@ for help * Support messages being forwarded to a mailing list staffed by Phoul + flexlibris * Only meant to be a temporary stopgap * No current timeline on the portal # Tor browser manual progress * Manual has been edited * Ready apart from a few screenshots that have to be retaken * Next steps are publishing blog post and opening up translations # What we need help with * Support portal templates (some out of date, some unfriendly, and some not covered)! # T-Shirt update * Jon has processes in place and want to see if he can keep up on his own - doesn't want help * Don't want to start sending emails about tshirts while not being able to keep up with backlog * Not 100% on size of backlog - maybe hundreds? * Emails operators to say that we're working on backlog and thinking of other stuff * Possibility of automating (enter fingerprint to check eligibility) * Automatically sending emails to eligible operators. * Possibility of editing the Tor Weather code to do this * Handing out tshirts at 33C3/other cons to people who don't wish to give address - ask arma2 -- pgp: 0xBD26F0F8029825DD

1 0

Notes from October 13 2016 Vegas team meeting
by Karsten Loesing 17 Oct '16

17 Oct '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 See this posting for context: https://lists.torproject.org/pipermail/tor-project/2016-April/000223.html Notes for October 13 2016 meeting: Georg: 1) Worked on the upcoming proposal for OTF 2) SponsorU items 3) Whom do we plan to have on stage for a possible 33c3 talk? 4) Helped a bit with the meeting with the frontend dev for the security slider port to Orfox Nick: 1) Very soon, 0.2.9 will be in testing. We will need it tested! Isabela will send out requests and appeals. Please help! 2) Not much else to report. Kate: 1) Following up on multiple articles in progress about Tor (good news articles). 2) Following up on Seattle meeting action items 3) Holiday plan for teaching family and other totally nontechnical people about Tor (Each one teach five). 4) Sent Q and A to reporter who is covering trump and uses SecureDrop. 5) Tweaking Wendy's privacy op-ed. 6) Met with reporter and all he wanted to talk about was fixing Tor Messenger bug b/c he loves Tor Messenger. Mike: 1) The blog is being converted. Performing complicated comment merge+extraction will cost more $$. Do we really need those comments? (We probably should have reverted to the dump where they still existed if so, so I guess not?) 2) Android is still a mess. The CopperHead folks are upset about Android 7.1 and the semi-discontinuation of the current devices. This may delay things, but they think if we launch Tor Labs soon, it will be OK. I told them I am shooting for end-of-month. Arturo: 1) Posted OONI UX designer job on the Tor website and open source design (https://www.torproject.org/about/jobs-ooni-ux-designer.html.en, https://github.com/opensourcedesign/jobs/pull/112) Please share and spread as much as you can. 2) Resolved some of the last critical bugs for the 2.0.0 release, so that is likely to be released very soon now. 3) We would like to have a OONI internal meeting mid November + 2 days of Open Hack day. This would allow us to meet the new developer in person and do some better coordination. 4) We published a long report on internet controls in Zambia during the elections: https://ooni.torproject.org/post/zambia-election-monitoring/ 5) The 2.0.0 release of ooniprobe will have enabled by default a tor deck, that will check to see if the meek domain fronts are working and if plain tor is able to bootstrap properly. 6) Working on a report on internet censorship in Ethiopia. Alison: 1) had a call with Maria to begin preliminary work on future partnerships with OONI and the Community Team (for Rapid Response, Outreach, etc) 2) support portal: still chugging along, will talk to Shari today about getting the resources we need to make this happen 3) membership guidelines: waiting on Lunar's final notes and then will send the doc to tor-internal@ to approve 4) been noticing/hearing from users about our woefully out-of-date and misleading documentation. we should have a sprint to fix these. will the website redesign help? should this happen before that? 5) where do we stand on the general contact email? Karsten: 1) We're very close to merging and deploying data synchronization between CollecTor instances. Finally! 2) Planning to ask devs to help with writing and testing CollecTor and later Onionoo operation guides, though not before end of next week: https://people.torproject.org/~karsten/volatile/metrics-operation-guides-20… 3) We realized that metrics-lib builds are reproducible, and we're considering to publish a guide for reproducing them, to have multiple people building and signing releases, and to publish this as Good Tor News later this year or in 2017. Isabela: 1) Follow up with Adam on OTF reports and NCE 2) Follow up with OTF proposal v4 / deadline friday 3) Plan on sending out today a call asking help on testing core tor releases / goal is to have a QA team that can help us with that on every release / 0.2.9 will be a pilot 4) Met Thomas the dev who will do the orfox front end gig with us / we will send him the contract asap and he should get started pretty soon 5) Great progress on security slider user experience on orfox / which can be used on tor browser desktop as well / Linda is driving this 6) Preparing for Chile 7) Starting to collect stuff for Q3 report to sponsorS 8) all week next week at OTF summit Roger: 1) CCC tickets: connect people who need them with people who have tokens. I've done some of this connecting, and I'll do more soon. People should let me know if they still need a ticket / if they have an extra voucher. 2) NSF posters + slides: for the January NSF PI meeting, we need one summary slide per NSF project, and we have five of them. Also an optional poster. I'll be commandeering Tor people to help with those in the coming week. 3) Rachel's NSF proposal: her sociology Tor+Wikipedia paper got accepted, and now they plus Mako are writing an NSF proposal to explore the https://blog.torproject.org/blog/call-arms-helping-internet-services-accept… topic further. I'm going to write them a letter of support on behalf of Tor, but not be a co-proposer, because conflict. 4) Next dev meeting: Mar 12-16 is during swsx so it's a poor choice. Next option we're looking at is Mar 23--27. Let us know if there's a conflict. 5) Speaker's bureau: I filed a ticket: https://bugs.torproject.org/20305 but there is no movement yet. 6) I'm talking to some professors about a new NSF proposal to fund a research testbed Tor network, which could build from the testing Tor network that dgoulet et al are operating. The proposal timing is not good but maybe we'll try something anyway. I have Cass in the loop. Shari: 1) trying to catch up after a week's vacation. :( 2) on the verge of hiring a chief financial and grants officer 3) working on getting end-of-year campaign ready 4) revising budget for otf proposal 5) finishing up with 990 -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBCAAGBQJYBMiDAAoJEC3ESO/4X7XBYycH/iH12PocwTnQQAmQaru8MOWG F7RjvNGZMsIcmdNfhAWFuvekrNeoCL00DugnLJU8+PCebrvFwY1VCjVjmmMQIGIx XtOqEJDMXb0MSQjI8VQNn7nExuoHw6TQNQftfzuh70Xt8VMdGgMgTuIIuRykaWBF Phrz4B+L28ChRmEXy09FwW60xpj2SDSDEwHHTKLGYQc1we+6DVZI7S1ohlN6LW8X ADwi3llfYAJc+J3bN6KrE6nBtDuzKBQZgNsOZllFwHd5DfRfKATGzz3BVP77NBhi D70PMRkutkxI+A3J26reMVyeTGJ8Xger02qOhPo6DdHddQUuyChhWQR721S7cig= =YMid -----END PGP SIGNATURE-----

1 0

Fwd: Tech For Justice Hackathon Invite
by Nima Fatemi 15 Oct '16

15 Oct '16

FYI -------- Forwarded Message -------- Subject: Tech For Justice Hackathon Invite Date: Fri, 14 Oct 2016 10:47:39 -0500 From: Christy Leos <christy(a)internetbar.org> To: nima(a)torproject.org CC: Jeffrey Aresty <jeffaresty(a)internetbar.org> Hello Nima, My name is Christy Leos and I am the Director of Operations for Tech For Justice. My boss Jeff Aresty mentioned meeting you at Rights Con and discussing Tor and some of our projects as well. I wanted to reach out and invite you to our upcoming virtual hackathon techforjustice.org/legal-justice-hackathon. We would love to have you work with us to create solutions; Tor's expertise and know how would be extremely beneficial for the justice issues currently plaguing our communities. If you could share this information with your organization and its members, that would be amazing. Please let me know if you have any questions or would like more details. Thank you for your time, Christy Leos *Director of Operations * *InternetBar.org <http://InternetBar.org> Institute * *The Houston Bar Center* *723 Main St. Houston, TX* 361-220-8128

1 0

If you're going to 33c3, be sure to get a ticket!
by Roger Dingledine 14 Oct '16

14 Oct '16

https://events.ccc.de/2016/09/01/call-for-participation-33rd-chaos-communic… https://events.ccc.de/2016/09/13/33c3-ticket-sales/ Congress is on track to sell out again this year. We plan to have a bunch of Tor people there, so we can answer Tor development and community questions for all the people who will have them. So if you are planning to be there, be sure to make plans to get a ticket! Some of our friends at CCC still complain about last year when we surprised them by wanting five tickets two weeks before the event. Let's not do that again. This month (October) is the best month for getting a ticket, since after October everything gets messier. Let us know if you will be going there as a Tor person and you need a ticket. Let us know early and often until it is resolved! Thanks, --Roger

9 9

Fwd: Research about Tor Security Problem
by Shari Steele 14 Oct '16

14 Oct '16

> Begin forwarded message: > > From: پیوندی <rastin(a)tuta.io> > Subject: Research about Tor Security Problem > Date: October 14, 2016 at 7:52:05 AM PDT > To: <execdir(a)torproject.org> > > hi > A lot of research has gone into improving the Tor network, but its use of DNS has received little attention. In this research project, we set out to learn how DNS can harm the anonymity of Tor users, and how adversaries can leverage the DNS protocol to deanonymize users. > > website: > https://nymity.ch/tor-dns <https://nymity.ch/tor-dns/> > > Report: > https://nymity.ch/tor-dns/tor-dns.pdf <https://nymity.ch/tor-dns/tor-dns.pdf> > >

2 1