- tor-project - lists.torproject.org

Remove mercurius4 obfs4 bridge from Tor Browser?
by David Fifield 05 Aug '16

05 Aug '16

According to my and Lynn Tsai's bridge reachability measurements, the default obfs4 bridge mercurius4 has not been running for a few months. It was refusing connections in March and April, and more recently has just been timing out. Time to remove it? pref("extensions.torlauncher.default_bridge.obfs4.6", "obfs4 104.131.108.182:56880 EF577C30B9F788B0E1801CF7E433B3B77792B77A cert=0SFhfDQrKjUJP8Qq6wrwSICEPf3Vl/nJRsYxWbg3QRoSqhl2EB78MPS2lQxbXY4EW1wwXA iat-mode=0");

5 8

Re: [tor-project] New Bridge Authority
by Sina Rabbani 04 Aug '16

04 Aug '16

This may just be my own paranoia, but I can't help but to wonder about the level of physical security a "darkened basement" can provide for such a mission critical component of the network. All the best, Sina "Be the change that you wish to see in the world." - Mahatma Gandhi ----- On Aug 4, 2016, at 1:31 PM, isis agora lovecruft isis(a)torproject.org wrote: > isis agora lovecruft transcribed 2.9K bytes: >> Today, I am very excite to take a field trip (!!) to a datacenter (!!!) with >> some most excellent folks from Greenhost (DrWhax and Sacha!!!). We will be >> racking a server and installing an OS on it, and getting it ready to be a new >> Bridge Authority to replace Tonga. > > So… it actually wasn't to the datacenter, but merely to the darkened basement > server room of the Greenhost offices, which Sacha described as "the nicest > office in the building!" > > I've set up the server, bought two new harddisks and configured RAID, > installed an OS on it, and done some preliminary hardening. The server should > go to the datacenter early next week, and then we can start the transition. > It looks like everything should happen well before the 31 August deadline, so > the apocalypse has been averted and there's little reason to freak out. > > Best regards, > -- > ♥Ⓐ isis agora lovecruft > _________________________________________________________ > OpenPGP: 4096R/0A6A58A14B5946ABDE18E207A3ADB67A2CDB8B35 > Current Keys: https://fyb.patternsinthevoid.net/isis.txt > > _______________________________________________ > tor-project mailing list > tor-project(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-project

1 0

Please credit NSF in your Tor research papers!
by Roger Dingledine 04 Aug '16

04 Aug '16

When I fill out the annual reports for our NSF projects (SponsorM, SponsorQ, SponsorV currently), I brag about our research papers, and it works much better if we remember to credit NSF in the acknowledgements section of the paper. Here is good text to use: "This work was partially supported by the NSF under grants CNS-1111539, CNS-1314637, and CNS-1520552." More generally, if you are going to be an author on a Tor research paper, including just a submission, please let Kate and me know so we can do good things with this info. Thanks! --Roger

1 0

Re: [tor-project] The Tor Project Social Contract
by Nathan Freitas 03 Aug '16

03 Aug '16

On Wed, Aug 3, 2016, at 04:45 AM, John Gilmore wrote: > Nathan wrote: > > I agree corporate/commercial licensing is a great option for > > sustainable revenue generation. Let's make sure this allows for > > that. In the case of Moxie, his software is not free to developers > > who was to incorporate it into non GPL software. > > The Social Contract is probably not the place to debate (or record > the result of debate about) the specific license used for Tor software. > > Nathan seems to have an issue with GPL licensed software. But his > argument undercuts his point. I have no issue with it, and license as much of my own software under GPL as possible. I agree it creates a great opportunity for licensing revenue that Tor does not have, at least with the core tor daemon. +n

1 0

Re: [tor-project] The Tor Project Social Contract
by Nathan Freitas 03 Aug '16

03 Aug '16

On Tue, Aug 2, 2016, at 02:26 PM, Kate wrote: > I believe that our tools should remain free to users and we should > strategize other ways to make money. "Pay what you can" software is an > idea widely understood in the global north; is it also in the global > south? Pay with what? Bitcoin? Credit cards? If you get the software > installed at your local roadside store, who do you pay? These are all > barriers to using Tor. Just to be clear, if what someone can pay is "nothing" they are free to do so in the "pay what you can" scenario, without stigma. Perhaps we could ask their contribution to just spread the word. Within this contract, I think Mike and I are both just asking for this kind of future option to not be off the table. Perhaps if it is always stated as an "optional donation" then it would fit within the "always free" pledge more cleanly? I agree corporate/commercial licensing is a great option for sustainable revenue generation. Let's make sure this allows for that. In the case of Moxie, his software is not free to developers who was to incorporate it into non GPL software. +n

2 1

Re: [tor-project] Volunteer Application
by teor 02 Aug '16

02 Aug '16

Hi Zaheer, Please reply-all to the list, so others can help you as well. Have you tried building Orbot? https://gitweb.torproject.org/orbot.git You could also look at the Orbot bug tracker, choose a small task, and submit a patch. https://trac.torproject.org/projects/tor/query?status=accepted&status=assig… Tim > On 2 Aug 2016, at 22:03, Zaheer Ahmed <zaheercena(a)gmail.com> wrote: > > Hi > I also worked as Android Developer for Native Apps that's why I am now interested in Orbot. Please Consider it if you can. Again No Demand just offering services for my passion in Security field. Thank you. > > Regards > Zaheer Ahmed > +923351443176 > > On Tue, Aug 2, 2016 at 4:51 PM, teor <teor2345(a)gmail.com> wrote: > > > On 2 Aug 2016, at 19:43, Shari Steele <ssteele(a)torproject.org> wrote: > > > > > > > >> Begin forwarded message: > >> > >> From: Zaheer Ahmed <zaheercena(a)gmail.com> > >> Subject: Volunteer Application > >> Date: August 1, 2016 at 12:11:23 AM PDT > >> To: execdir(a)torproject.org > >> > >> Hi > >> I have been studying Tor from last Several Months and Researching on it now I want to properly get involved in tor Organization. > >> > >> I h'v Spirit, Dedication and also wanted to be. I am a Software Developer worked on Android and core C++ programming. I will not demand Money from you for letting me work in > >> The Tor Project > >> 217 1st Ave South #4903 > >> Seattle, WA 98194 USA > >> > >> Your Reply will be highly appreciated. > >> Regards > >> Zaheer Ahmed > >> +923351443176 > >> zaheercena(a)gmail.com > > Hi Zaheer, > > There are many things you can do as a Tor volunteer: > https://www.torproject.org/getinvolved/volunteer.html.en > > With your experience, perhaps you might be interested in orbot, which provides Tor on Android? > https://guardianproject.info/apps/orbot/ > > Tim > > Tim Wilson-Brown (teor) > > teor2345 at gmail dot com > PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B > ricochet:ekmygaiu4rzgsk6n > xmmp: teor at torproject dot org > > > > > > Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B ricochet:ekmygaiu4rzgsk6n xmmp: teor at torproject dot org

2 2

Fwd: Volunteer Application
by Shari Steele 02 Aug '16

02 Aug '16

> Begin forwarded message: > > From: Zaheer Ahmed <zaheercena(a)gmail.com> > Subject: Volunteer Application > Date: August 1, 2016 at 12:11:23 AM PDT > To: execdir(a)torproject.org > > Hi > I have been studying Tor from last Several Months and Researching on it now I want to properly get involved in tor Organization. > > I h'v Spirit, Dedication and also wanted to be. I am a Software Developer worked on Android and core C++ programming. I will not demand Money from you for letting me work in > The Tor Project > 217 1st Ave South #4903 > Seattle, WA 98194 USA > > Your Reply will be highly appreciated. > Regards > Zaheer Ahmed > +923351443176 > zaheercena(a)gmail.com <mailto:zaheercena@gmail.com>

2 1

Amazon Smile
by Tom Ritter 01 Aug '16

01 Aug '16

Hi all, I noticed that Amazon Smile[0] has Tor Project as a recipient; been using it lately when I order from them. Has anyone collected the money? Is it significant in any way? (I mean anything is helpful of course, I'm just not sure if it's "a couple of tens of dollars" or "a few hundred".) Might be worth tweeting about also, there are firefox/chrome extensions that automatically redirect you so you remember to go through smile.amazon.com -tom [0] https://smile.amazon.com/gp/chpf/about/ref=smi_se_abtpo_r_about_smi

5 4

Summary of meek's costs, June 2016
by David Fifield 01 Aug '16

01 Aug '16

Here's the summary of meek's CDN fees for June 2016. App Engine + Amazon + Azure = total by period all 2014 $600.63 + $917.89 + $0.00 = $1518.52 January 2015 $464.37 + $669.02 + $0.00 = $1133.39 February 2015 $650.53 + $604.83 + $0.00 = $1255.36 March 2015 $690.29 + $815.68 + $0.00 = $1505.97 April 2015 $886.43 + $785.37 + $0.00 = $1671.80 May 2015 $871.64 + $896.39 + $0.00 = $1768.03 June 2015 $601.83 + $820.00 + $0.00 = $1421.83 July 2015 $732.01 + $837.08 + $0.00 = $1569.09 August 2015 $656.76 + $819.59 + $154.89 = $1631.24 September 2015 $617.08 + $710.75 + $490.58 = $1818.41 October 2015 $672.01 + $110.72 + $300.64 = $1083.37 November 2015 $602.35 + $474.13 + $174.18 = $1250.66 December 2015 $561.29 + $603.27 + $172.60 = $1337.16 January 2016 $771.17 + $1581.88 + $329.10 = $2682.15 February 2016 $986.39 + $977.85 + $445.83 = $2410.07 March 2016 $1079.49 + $865.06 + $534.71 = $2479.26 April 2016 $1169.23 + $1074.25 + $508.93 = $2752.41 May 2016 $525.46 + $1097.46 + $513.56 = $2136.48 June 2016 $0.00 $1117.67 + $575.50 = $1693.17 -- total by CDN $13138.96 + $15778.89 + $4200.52 = $33118.37 grand total https://metrics.torproject.org/userstats-bridge-transport.html?start=2016-0… The number of users dropped a little bit during June, from about 6K to about 5K. If you are one of the users affected by the meek-google shutdown, see here for a workaround: https://lists.torproject.org/pipermail/tor-talk/2016-June/041699.html == App Engine a.k.a. meek-google == 0 GB $0.00 0 instance hours $0.00 https://atlas.torproject.org/#details/88F745840F47CE0C6A4FE61D827950B06F9E4… == Amazon a.k.a. meek-amazon == Asia Pacific (Singapore) 219M requests $263.77 660 GB $91.60 Asia Pacific (Sydney) 7M requests $9.74 55 GB $7.51 Asia Pacific (Tokyo) 1M requests $2.09 17 GB $2.29 EU (Ireland) 254M requests $305.11 1636 GB $129.12 South America (Sao Paulo) 16M requests $35.35 178 GB $41.85 US East (Northern Virginia) 129M requests $129.37 1265 GB $99.38 -- total 629M requests $745.43 3813 GB $371.75 charge for alarms $0.50 https://atlas.torproject.org/#details/F4AD82B2032EDEF6C02C5A529C42CFAFE5165… == Azure a.k.a. meek-azure == Zone 1 5926 GB $515.55 Zone 2 434 GB $ 59.95 -- total 6360 GB $575.50 https://atlas.torproject.org/#details/AA033EEB61601B2B7312D89B62AAA23DC3ED8… Earlier reports in this series: https://trac.torproject.org/projects/tor/wiki/doc/meek#Costs

1 0

Notes from July 28 2016 Vegas team meeting
by Karsten Loesing 01 Aug '16

01 Aug '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 See this posting for context: https://lists.torproject.org/pipermail/tor-project/2016-April/000223.html Notes for July 28 2016 meeting: Alison: 1) Support manual: Colin sent it to tor-project@ for final review, once that's finished we'll focus on translations and ways to promote and disseminate it. We're also working on a Tor glossary, and eventually will get started on an FAQ. The end goal for support stuff is to make it into a portal similar to support.twitter.com. 2) Social contract: it's done and it's here in read-only form: https://storm.torproject.org/shared/UleWiALOvWDnWxEqPcAfr49tkHaM-h7PlSmoHlR…. I need to send a mail to tor-project@ about ratifying it (I guess they will see this first anyway, but that's okay). I'm not sure the best way to do that; I can just write something brief explaining what the SC is and give folks a week or so to accept/object to it, and then if all is well I can publish it on the blog and other places. Thinking "About Tor" and the community team wiki are two places it should live. 3) Working on a lot of outreach trying to build the community team. 4) Cool stuff coming up for LFP/Tor outreach: IFLA, DCPL, Toronto Public Library, maybe Finland Roger: 0) I was at PETS last week; I'm at SponsorR meeting this week and next. 1) NSF: Good news! We're on track to get another NSF grant, for 2 years, joint with University of Illinois Chicago and Eindhoven. They funded something like 5 proposals out of 120. 2) I've been thinking a lot lately about what I should focus on once I finish traveling too much (i.e. starting in Oct). Catching up on the research side is a strong contender, especially since we're heading towards have five (five!) concurrent NSF grants. 3) David and I talked about good content for technical 33c3 talks, and Tor Browser seemed like a great option. David mailed Mike and Georg. 4) We're asking Isis to run the next bridge directory authority. Linus and Moritz and I had a good chat about a replacement (ninth) directory authority. 5) How are we doing on the blog re-do? 6) I just mailed Lunar to make sure he's still on track to start up TWN in September. 7) How are we doing on moving Storm to a weasel-run host? Nick: 1) releasing 0.2.8.6 (stable!) RSN. Have to decide whether to include some annoying solaris fixes in it. Leaning towards no. 2) We are missing a step in our dev-meeting and benefits communication. That step is that we should say "If you have not heard from XYZ by date ABC, you should assume your email was lost, and send again". 3) PETS etc. Isabela: 1) Finishing the draft of the SIDA proposal 2) Did retrospective with network-team last Monday (our second IRC retrospective!) 3) Simply Secure is progressing with our style guidelines Mike: 0) I am back to help Georg this week rebasing and tagging Tor Browser for next weeks release. 1) After that, I will be digging myself out of email and trying to come up with a plan for Tor Labs Kate: 1) Internet of Things media coverage with Nathan (Intercept, Wired, podcast, etc.) 2) Working on Q and A with Nima to pull out some key things from HOPE for human rights activists and nontechnical users 3) Snooping nodes—Edited and published statement by Donncha and Roger on blog about our positive relationship to this NEU research 4) Media strategy around Jake situation 5) Have various good newses to roll out to the media and will do so as soon timing makes sense 6) Met with a big bunch of reporters at HOPE, mainly to build relationships. It went really well. The focus was not to pitch specific things but we did bat around story ideas. They are interested in: a) Onion services rollout (stage by stage if necessary--so it's helpful to keep me in the loop about when things are coming up); b) Tor metrics Shari: 1) We put out the release ending the investigation. As expected, it’s been getting a lot of press. 2) Invitations went out for TorDev. 3) We’re rolling out benefits for all employees as of August 1. Erin the HR person has been rocking. 4) I'll be traveling to the East Coast for the rest of this week and half of next week. Visiting with family in NYC this weekend, meeting with reporters and Gunner (!) on Friday. Then heading to DC for the DRL audit next week. Meeting with Nima while I’m there. Karsten: 1) Had three (!) meetings with iwakeh since last week to coordinate MOSS award work. Wrote/tested/reviewed a lot of code. Changes are 90% to improve code quality and 10% to add features, so will be invisible to most people. But software quality matters, and soon we'll add fancy features, too. -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBAgAGBQJXnwvkAAoJEC3ESO/4X7XBDQsIAMhbFtIA1uvhJ9W3d33TFtw5 HKQqP9k9bAy1AjHZpIvZOy9g+rLS+g8BuXdiHQ3kZB6YQYdgWM/VxBYr/uxw/+Et nuI4xVkZPobK5LMwXtKgaplaDAxSWf98PTQ5T2Wbmr0m2oxHDnu0EJdNxVp/W1Ug a1afc8pXW8JvxZ0H4OVCPheaRpV5Yq2BfWxl3OPFP5YTPPO3mNknp9PUO7lKsKPQ s01u5OwwEHQ9y+aZUIG548QDnsliqJ/JfI8iECzkFfuKNVhFgZjv/plMqsDPNzdA jd+jfwhNnvmOcpDNuKXW1/N1zt7rG+R4W6wAvJEvi6gbE66/rCR92NjNvV6xMnE= =tnvh -----END PGP SIGNATURE-----

1 0