- tor-project - lists.torproject.org

Create tor-users and bringt it to live
by Jens Kubieziel 22 Jun '16

22 Jun '16

Hi, following up our discussion about tor-talk and tor-users I created the ticket <URL:https://trac.torproject.org/projects/tor/ticket/19477> as well as the list itself <URL:https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-users>. As a next step I suggest we make an announcement about the existence and purpose of tor-users as well as the planned fading out of tor-talk. IMHO this should then be sent to tor-talk and tor-dev. Could someone of you phrase a nice announcement? Thanks, -- Jens Kubieziel http://www.kubieziel.de There's no point in being grown up if you can't be childish sometimes. -- Dr. Who

1 0

Fwd: Russian bill requires encryption backdoors in all messenger apps
by Kate 21 Jun '16

21 Jun '16

FYI-- -------- Forwarded Message -------- Subject: Russian bill requires encryption backdoors in all messenger apps Date: Tue, 21 Jun 2016 15:59:16 -0400 From: Nathan White <nathan(a)accessnow.org> Russian bill requires encryption backdoors in all messenger apps By Patrick Howell O'Neill <http://www.dailydot.com/authors/patrick-howell-oneill/> Backdoors into encrypted communications may soon be mandatory in Russia <http://dailydot.com/tags/russia>. A new bill in the Russian Duma, the country's lower legislative house, proposes to make cryptographic backdoors mandatory in all messaging apps in the country so the Federal Security Service—the successor to the KGB—can obtain special access to all communications within the country. Apps like WhatsApp <http://www.dailydot.com/tags/whatsapp>, Viber <http://www.dailydot.com/tags/viber>, and Telegram <http://www.dailydot.com/tags/telegram>, all of which offer varying levels of encrypted security for messages, are specifically targeted in the "anti-terrorism" bill, according to Russian-language media <http://www.currenttime.tv/a/27809255.html>. Fines for offending companies could reach 1 million rubles or about $15,000. The new Russian legislation, which has already been approved by the Committee on Security, is just the latest such flare up in a global debate over encryption <http://dailydot.com/tags/encryption/> that earned a bright spotlight in the U.S. earlier this year, particularly after the San Bernardino terrorist attack <http://www.dailydot.com/tags/san-bernardino-shooting/> led the FBI <http://dailydot.com/tags/fbi>to pl <http://www.dailydot.com/politics/fbi-san-bernardino-iphone-exploit-no-vulne…>ead for access to one of the shooter's encrypted iPhones <http://www.dailydot.com/politics/fbi-san-bernardino-iphone-exploit-no-vulne…> . Russian Senator Yelena Mizulina argued that the new bill ought to become law because, she said, teens are brainwashed in closed groups on the internet to murder police officers, a practice protected by encryption. Mizulina then went further. "Maybe we should revisit the idea of pre-filtering [messages]," she said. "We cannot look silently on this." Encryption uses advanced mathematics to protect data so that even the world's most powerful computers cannot unlock data they are not meant to have access to. The technology is used in various ways to protect everything from credit card transactions on the internet to your emails and internet traffic. Government focus on encryption intensified in recent months after Apple <http://www.dailydot.com/tags/apple> andGoogle <http://www.dailydot.com/tags/google> offered encryption options on their smartphones. WhatsApp, with over 1 billion users around the world, offers encryption on messaging. The technology is seen as a fundamental cornerstone of cybersecurity <http://dailydot.com/tags/cybersecurity/>, such that if a business is not using encryption to protect sensitive data, it's often deemed irresponsible by experts. But just as encryption keeps out crooks, it keeps out governments, law enforcement, and intelligence agency spying. That's led to high-level debates around the globe about the rising popularity of encryption. While government authorities around the world argue in favor of special access backdoors, a vast consensus of technologists argue such backdoors will undermine cybersecurity and create an internet more dangerous and volatile than ever before. --

1 0

Tomorrow: EFF/Tor Worldwide Day of Action to stop changes to Rule 41
by Kate 21 Jun '16

21 Jun '16

Hi, The EFF/Tor Worldwide Day of Action to stop the Rule 41 changes is happening tomorrow; already many people can view the banner on the Tor website and click through. Basically, these changes (which EFF calls "catastrophic") will let judges allow the Department of Justice (and FBI) to legally hack computers using Tor all over the world by obtaining a search warrant--starting December 1, 2016. The search warrants allowable under these rule changes are very broad and could affect thousands of innocent Tor users. The purpose of this Day of Action is to educate people and mobilize them to act--either by signing a petition or contacting Congress (you can do one of these from the banner on the Tor website). Then, members of US Congress will use that public pressure to try to pass the #SMHAct, which would undo these rule changes. It is an uphill battle. Please tweet and retweet about this situation--all day if you can. Email your lists. Alison got us started: https://twitter.com/flexlibris/status/744301855614787584 And I quote: HI IF YOU USE TOR OR A VPN RULE 41 WOULD GIVE THE DOJ EXPANSIVE POWERS TO HACK YOUR SHIT NO MATTER WHERE YOU LIVE That is the gist. Please spread the word. Cheers, Katie ps: The US Department of Justice has jurisdiction over immigrants, native americans, and many different groups and projects: https://www.justice.gov/agencies --I am trying to find out whether these Rule 41 changes might impact any of these groups. pps: For more policy information about this bill, see https://cdt.org/insight/issue-brief-proposed-changes-to-rule-41/ (but remember the changes are no longer proposed and will happen automatically unless Congress passes SMHAct) or https://www.eff.org/deeplinks/2016/04/rule-41-little-known-committee-propos…

3 2

Notes from June 16 2016 Vegas team meeting
by Karsten Loesing 21 Jun '16

21 Jun '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 See this posting for context: https://lists.torproject.org/pipermail/tor-project/2016-April/000223.html Notes for June 16 2016 meeting: Georg: 1) Slowly working on SponsorU items (https://trac.torproject.org/projects/tor/query?status=!closed&sponsor=Spons…) 2) Tor Browser 6.x issues kept us busy (above all: https://bugs.torproject.org/19400 and related items) Alison: 1) I've done pretty much nothing this week except deal with the Jake situation, which I move to stop calling the Jake situation and call the "community truth and reconciliation" or something like that. 2) I've started collecting a lot of resources on transformative justice and talking to people who understand how to work through things like this. I suggest that we hire a professional to help us work through these things at Tor dev. 3) This week I'll get back to work on all the things that this situation has caused me to neglect: community docs, SIDA and OTF proposals, community team work, support team stuff, and so on. 4) Library Freedom Project is going great though! Kate: 1) Rule 41: Campaign: We are partnering with EFF to launch a campaign to support a law that would 2) Kate: Lots of time spent strategizing around the media regarding the Jake Situation. 3) Working to promote good news about Tor: Working on blog posts with Serene and others. Really interesting! Shari: 1) Lots of time spent talking with our lawyer, helping the investigator, checking in with people with stories, explaining things to our funders, talking with others. Will be looking next week to ways to move things forward and start rebuilding trust and safety in the organization. 2) Met all week with Roger, Isa, Sue Abt and Cass to map our grants and figure out how to keep better track of them where lots of us know all of the things, as opposed to the current situation where many of us know some of the things. 3) Getting ready for DRL site visit on June 27-28. 4) In San Francisco for three days next week: meeting face-to-face with lawyer, hopefully meeting with Alison, ED Club meeting, and some EFF stuff, including an EFF board meeting. Nick: 1) Working on triage 2) Sponsor allocation email that Roger sent. Isabela: 1) Worked in Seattle with Shari, Sue and Roger 2) Now in Detroit - plan to work with Nick on triage today and tomorrow 3) Plan on be between this conference and work till Monday when I fly back to SF -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBAgAGBQJXaOfgAAoJEC3ESO/4X7XBUkIH/0cC2Eu1vMx8lesbCCvsjQGy rtnulJW3tFLtmIAcfW7zvInHSAJ3xAEBcWmQ/kKmIWZFO1JoJpTMf2A7/lz4eXHw zQsNC9ODW3qwxqOgdPX9OvPqwXrhZtzANE+zvoCG0f9dcKOctX4d04xTDiFIDisF wg1Sjwi2cn0aPODkn8djvr0WCNUOdWoHXfFxwfsbE02ZANA4vJDYCDnDkewW6JjB oOBJxH0e7R5e+7uJhWfCa5NJE48EH76YDPBVns4dF7G/Ck/U/mIBQ+fKkwwP/ZYa VeLnu4cC7xmc1JRLvfJvx3czmX6b/BHj+MQUWlcdz+wUfvp9/UMC40UoyV5G68w= =VBwO -----END PGP SIGNATURE-----

1 0

regarding tor relay shirts
by Jon Selon 13 Jun '16

13 Jun '16

Hey all! Shari forwarded me the string of emails concerning the tor relay shirts. I would love to take this project on. We do have a small surplus of the relay shirts here at the Seattle office, so if someone could just point me in the right direction I will knock all this out. Where is this list of requests? Is this something I need to subscribe to? Let me know and I'll get this done. Any information you could provide would be greatly appreciated. Thanks, Jon Selon Admin Assist

1 0

Notes from June 9 2016 Vegas team meeting
by Karsten Loesing 13 Jun '16

13 Jun '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 See this posting for context: https://lists.torproject.org/pipermail/tor-project/2016-April/000223.html Notes for June 9 2016 meeting: Georg: 1) We finished the Tor Browser transition to ESR 45 by releasing 6.0.1, 6.5a1 and 6.5a1-hardened 2) Our focus goes back to the remaining SponsorU items (not all are there yet): https://trac.torproject.org/projects/tor/query?status=!closed&sponsor=Spons… Isabela: 1) working with core team to make 029 smaller - make sure everyone has tasks assigned to them, and that those tasks are associated with our deliverables. 2) Working on DRL docs for their visit at the end of the month (with Shari and Sue) 3) Working on OTF application (had a call yesterday) 4) Next week I will be in Seattle for to work on organizing sponsor stuff then I will be in Detroit - probably not available for this meeting Kate: 1) Update on Rule 41 2) Media strategy Shari: 1) talked with various funders addressing their general questions about our needs and proposals 2) trying to finish evaluating grant management software in preparation for our retreat next week 3) getting Erin up to speed on hr matters; we met with a health benefits broker yesterday about health insurance for employees; we will start covering people August 1 Karsten: 1) People are angry that they don't get their t-shirts, see recent postings in thread "Tor Weather has been discontinued" on tor-relays@. Nick: 1) See Isabela wrt deliverables, triage. 2) Misc coding Roger: 1) I am in Croatia until Saturday (with a talk on Friday), then working my way to Seattle for next week. I will write up a todo list for what I want to get out of next week. 2) Also I will read and review 5 foci papers this weekend. -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBAgAGBQJXXnUoAAoJEC3ESO/4X7XBRCIH/0TSpvPmXLiIyrvAjPYs2ihB ZLFi72INdAS2pX75Wh0HYyommTwpI50ReOQNzzbTM5D/lXtxmAE79hzUTZRq7GDQ 9DxkE1V73/rP6kvTvniWyNU3XfYgMdYAabO6vNFL7f79cs45LPCWRBF0Joy8tlyw bf/yXKzG3qU8J3xZTRlBhWS8WognEW8z4cy9Qqg0Sqr9d3tCxLaDjMShzls4DNjx RC4Pf/se3TZW7dN1TZmc9IM536KXsnhYOU/JibPPxmk8FMvvzs3LfVcl2FepcP8a KKBFDOB9PsEkPLTrSwEKGCQI+DTOLniJ7g0M7vaSWHQzLcg/L4wAY1tr9CmFGxg= =jUmU -----END PGP SIGNATURE-----

1 0

State of tshirts for volunteers running Tor relays
by Sebastian Hahn 12 Jun '16

12 Jun '16

Hi, is there anyone who can shed some light on who is currently sending out shirts for volunteers, what their status is, etc? It seems this has completely grinded to a halt with the fundraising campaign, which is a real shame. Should we stop promising shirts to people who run relays? Is there a shortage? People on tor-relays have claimed that they're now waiting 7 months for their shirt. It's totally understandable if people are buried with work, but there's just no information about whether we even have anyone who is supposed to be doing the work right now. Thanks for any kind of feedback on this Sebastian

4 3

Infographic about Pluggable Transports
by Nima Fatemi 11 Jun '16

11 Jun '16

Attention: Metrics, UX and PT teams =================================== I'm working on an infographic about Pluggable Transport, that is ideally going to help educating both end-users and bridge operators (including potential bridge operators). I've prepared a list of things we could cover on this. Please review and let me know if there's anything I've missed that should be added to the list. This infographic is going to have two sections, the first part is more of a how-to. Showing 6-8 steps, demonstrating how to download Tor Browser and configuring it to use a PT to connect to Tor network. The second part, is the actual infographic part: - List of PTs included in Tor Browser with a one-line summary and significance of each - List of PTs under development - Stats + Total number of PT bridges + Average number of PT clients per day + Maybe compare the numbers with direct connections? - Links to PT page (on website and wiki) What are other interesting numbers about PT world? Is there anything else I should add to this? I was thinking about adding average traffic the default bridges are getting per mounth, since it's very significant. 'Azadi' alone has transferred more than 103 TBytes since Feb: month rx | tx | total | avg. rate ------------------------+-------------+-------------+--------------- Feb '16 12.07 TiB | 13.48 TiB | 25.56 TiB | 87.62 Mbit/s Mar '16 16.81 TiB | 18.84 TiB | 35.64 TiB | 114.31 Mbit/s Apr '16 11.17 TiB | 12.59 TiB | 23.76 TiB | 78.74 Mbit/s May '16 7.16 TiB | 8.07 TiB | 15.23 TiB | 48.84 Mbit/s Jun '16 1.55 TiB | 1.73 TiB | 3.28 TiB | 57.62 Mbit/s Best, -- Nima 0XC009DB191C92A77B | @mrphs "I disapprove of what you say, but I will defend to the death your right to say it" --Evelyn Beatrice Hall

4 4

Fwd: Mozilla Will Fund Code Audits For Open Source Software
by Damian Johnson 10 Jun '16

10 Jun '16

Considering how closely we work with Mozilla I suspect this program is no surprise, but none the less forwarding it along since it could very well benefit some of our sub-projects. Cheers! -Damian ---------- Forwarded message ---------- From: Slashdot: manishs <atagar2(a)gmail.com> Date: Fri, Jun 10, 2016 at 7:45 AM Subject: Mozilla Will Fund Code Audits For Open Source Software To: atagar1(a)gmail.com Reader Orome1 writes: The Mozilla Foundation has set up the Secure Open Source (SOS) Fund, whose aim is to help open source software projects get rid their code of vulnerabilities. Projects that want Mozilla's help must be open source/free software and must be actively maintained, but they have a much better probability to being chosen if their software is commonly used and is vital to the continued functioning of the Internet or the Web. Three open source projects -- PCRE, libjpeg-turbo, and phpMyAdmin -- have already gone through the process, and the result was removal of 43 vulnerabilities (including one critical). [![](https://a.fsdn.com/sd/twitter_icon_large.png)](http://twitter.com/home?status=Mozilla+Will+Fund+Code+Audits+For+Open+Source+Software%3A+http%3A%2F%2Fbit.ly%2F25PgTSg) [![](https://a.fsdn.com/sd/facebook_icon_large.png)](http://www.facebook.com/sharer.php?u=https%3A%2F%2Fnews.slashdot.org%2Fstory%2F16%2F06%2F10%2F1418216%2Fmozilla-will-fund-code-audits-for-open-source-software%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook) [![Share on Google+](http://www.gstatic.com/images/icons/gplus-16.png)](http://plus.goo… [Read more of this story](https://news.slashdot.org/story/16/06/10/1418216/mozilla-will-fund-c… at Slashdot. ![](http://feeds.feedburner.com/~r/Slashdot/slashdot/~4/VLQ1G2rQYWM) URL: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/VLQ1G2rQYWM/mozilla-will-fu…

1 0

[machine usage] crm, ubuntu1404lts-persona
by Peter Palfrader 07 Jun '16

07 Jun '16

Hello gentle people! I am looking over the machines that tor is paying for, and two of them are the 1984 machine that we have labelled only as crm and ubuntu1404lts-persona. I think they may have been created at one point by Andrew. Does anybody know who might be using these machines? If you have an idea, please let us know. If one of them is your machine, or at one point was, please let us know if it is still useful and we should keep it around. (And please briefly describe what it is being used for.) If I don't hear anything, and nobody objects either, I will stop having them auto-renewed, i.e., I will decommission them. Thanks. -- | .''`. ** Debian ** Peter Palfrader | : :' : The universal https://www.palfrader.org/ | `. `' Operating System | `- https://www.debian.org/

2 3