- tor-project - lists.torproject.org

regarding tor relay shirts
by Jon Selon 13 Jun '16

13 Jun '16

Hey all! Shari forwarded me the string of emails concerning the tor relay shirts. I would love to take this project on. We do have a small surplus of the relay shirts here at the Seattle office, so if someone could just point me in the right direction I will knock all this out. Where is this list of requests? Is this something I need to subscribe to? Let me know and I'll get this done. Any information you could provide would be greatly appreciated. Thanks, Jon Selon Admin Assist

1 0

Notes from June 9 2016 Vegas team meeting
by Karsten Loesing 13 Jun '16

13 Jun '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 See this posting for context: https://lists.torproject.org/pipermail/tor-project/2016-April/000223.html Notes for June 9 2016 meeting: Georg: 1) We finished the Tor Browser transition to ESR 45 by releasing 6.0.1, 6.5a1 and 6.5a1-hardened 2) Our focus goes back to the remaining SponsorU items (not all are there yet): https://trac.torproject.org/projects/tor/query?status=!closed&sponsor=Spons… Isabela: 1) working with core team to make 029 smaller - make sure everyone has tasks assigned to them, and that those tasks are associated with our deliverables. 2) Working on DRL docs for their visit at the end of the month (with Shari and Sue) 3) Working on OTF application (had a call yesterday) 4) Next week I will be in Seattle for to work on organizing sponsor stuff then I will be in Detroit - probably not available for this meeting Kate: 1) Update on Rule 41 2) Media strategy Shari: 1) talked with various funders addressing their general questions about our needs and proposals 2) trying to finish evaluating grant management software in preparation for our retreat next week 3) getting Erin up to speed on hr matters; we met with a health benefits broker yesterday about health insurance for employees; we will start covering people August 1 Karsten: 1) People are angry that they don't get their t-shirts, see recent postings in thread "Tor Weather has been discontinued" on tor-relays@. Nick: 1) See Isabela wrt deliverables, triage. 2) Misc coding Roger: 1) I am in Croatia until Saturday (with a talk on Friday), then working my way to Seattle for next week. I will write up a todo list for what I want to get out of next week. 2) Also I will read and review 5 foci papers this weekend. -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBAgAGBQJXXnUoAAoJEC3ESO/4X7XBRCIH/0TSpvPmXLiIyrvAjPYs2ihB ZLFi72INdAS2pX75Wh0HYyommTwpI50ReOQNzzbTM5D/lXtxmAE79hzUTZRq7GDQ 9DxkE1V73/rP6kvTvniWyNU3XfYgMdYAabO6vNFL7f79cs45LPCWRBF0Joy8tlyw bf/yXKzG3qU8J3xZTRlBhWS8WognEW8z4cy9Qqg0Sqr9d3tCxLaDjMShzls4DNjx RC4Pf/se3TZW7dN1TZmc9IM536KXsnhYOU/JibPPxmk8FMvvzs3LfVcl2FepcP8a KKBFDOB9PsEkPLTrSwEKGCQI+DTOLniJ7g0M7vaSWHQzLcg/L4wAY1tr9CmFGxg= =jUmU -----END PGP SIGNATURE-----

1 0

State of tshirts for volunteers running Tor relays
by Sebastian Hahn 13 Jun '16

13 Jun '16

Hi, is there anyone who can shed some light on who is currently sending out shirts for volunteers, what their status is, etc? It seems this has completely grinded to a halt with the fundraising campaign, which is a real shame. Should we stop promising shirts to people who run relays? Is there a shortage? People on tor-relays have claimed that they're now waiting 7 months for their shirt. It's totally understandable if people are buried with work, but there's just no information about whether we even have anyone who is supposed to be doing the work right now. Thanks for any kind of feedback on this Sebastian

4 3

Infographic about Pluggable Transports
by Nima Fatemi 11 Jun '16

11 Jun '16

Attention: Metrics, UX and PT teams =================================== I'm working on an infographic about Pluggable Transport, that is ideally going to help educating both end-users and bridge operators (including potential bridge operators). I've prepared a list of things we could cover on this. Please review and let me know if there's anything I've missed that should be added to the list. This infographic is going to have two sections, the first part is more of a how-to. Showing 6-8 steps, demonstrating how to download Tor Browser and configuring it to use a PT to connect to Tor network. The second part, is the actual infographic part: - List of PTs included in Tor Browser with a one-line summary and significance of each - List of PTs under development - Stats + Total number of PT bridges + Average number of PT clients per day + Maybe compare the numbers with direct connections? - Links to PT page (on website and wiki) What are other interesting numbers about PT world? Is there anything else I should add to this? I was thinking about adding average traffic the default bridges are getting per mounth, since it's very significant. 'Azadi' alone has transferred more than 103 TBytes since Feb: month rx | tx | total | avg. rate ------------------------+-------------+-------------+--------------- Feb '16 12.07 TiB | 13.48 TiB | 25.56 TiB | 87.62 Mbit/s Mar '16 16.81 TiB | 18.84 TiB | 35.64 TiB | 114.31 Mbit/s Apr '16 11.17 TiB | 12.59 TiB | 23.76 TiB | 78.74 Mbit/s May '16 7.16 TiB | 8.07 TiB | 15.23 TiB | 48.84 Mbit/s Jun '16 1.55 TiB | 1.73 TiB | 3.28 TiB | 57.62 Mbit/s Best, -- Nima 0XC009DB191C92A77B | @mrphs "I disapprove of what you say, but I will defend to the death your right to say it" --Evelyn Beatrice Hall

4 4

Fwd: Mozilla Will Fund Code Audits For Open Source Software
by Damian Johnson 10 Jun '16

10 Jun '16

Considering how closely we work with Mozilla I suspect this program is no surprise, but none the less forwarding it along since it could very well benefit some of our sub-projects. Cheers! -Damian ---------- Forwarded message ---------- From: Slashdot: manishs <atagar2(a)gmail.com> Date: Fri, Jun 10, 2016 at 7:45 AM Subject: Mozilla Will Fund Code Audits For Open Source Software To: atagar1(a)gmail.com Reader Orome1 writes: The Mozilla Foundation has set up the Secure Open Source (SOS) Fund, whose aim is to help open source software projects get rid their code of vulnerabilities. Projects that want Mozilla's help must be open source/free software and must be actively maintained, but they have a much better probability to being chosen if their software is commonly used and is vital to the continued functioning of the Internet or the Web. Three open source projects -- PCRE, libjpeg-turbo, and phpMyAdmin -- have already gone through the process, and the result was removal of 43 vulnerabilities (including one critical). [![](https://a.fsdn.com/sd/twitter_icon_large.png)](http://twitter.com/home?status=Mozilla+Will+Fund+Code+Audits+For+Open+Source+Software%3A+http%3A%2F%2Fbit.ly%2F25PgTSg) [![](https://a.fsdn.com/sd/facebook_icon_large.png)](http://www.facebook.com/sharer.php?u=https%3A%2F%2Fnews.slashdot.org%2Fstory%2F16%2F06%2F10%2F1418216%2Fmozilla-will-fund-code-audits-for-open-source-software%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook) [![Share on Google+](http://www.gstatic.com/images/icons/gplus-16.png)](http://plus.goo… [Read more of this story](https://news.slashdot.org/story/16/06/10/1418216/mozilla-will-fund-c… at Slashdot. ![](http://feeds.feedburner.com/~r/Slashdot/slashdot/~4/VLQ1G2rQYWM) URL: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/VLQ1G2rQYWM/mozilla-will-fu…

1 0

[machine usage] crm, ubuntu1404lts-persona
by Peter Palfrader 07 Jun '16

07 Jun '16

Hello gentle people! I am looking over the machines that tor is paying for, and two of them are the 1984 machine that we have labelled only as crm and ubuntu1404lts-persona. I think they may have been created at one point by Andrew. Does anybody know who might be using these machines? If you have an idea, please let us know. If one of them is your machine, or at one point was, please let us know if it is still useful and we should keep it around. (And please briefly describe what it is being used for.) If I don't hear anything, and nobody objects either, I will stop having them auto-renewed, i.e., I will decommission them. Thanks. -- | .''`. ** Debian ** Peter Palfrader | : :' : The universal https://www.palfrader.org/ | `. `' Operating System | `- https://www.debian.org/

2 3

Notes from June 2 2016 Vegas team meeting
by Karsten Loesing 07 Jun '16

07 Jun '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 See this posting for context: https://lists.torproject.org/pipermail/tor-project/2016-April/000223.html Notes for June 2 2016 meeting: Alison: 1) status of community documents 2) still working on SIDA proposal with Isa Mike: 1) Postponed my vacation for another week or so to help with community issues. I'll be quietly working on my phone prototype in the meantime. 2) Will be attending a panel on the Decentralized Web next week. Then maybe vacation? Unclear. Shari: 1) Erin the new HR person starts on Monday, so I'll need help from various folks to get her set up. 2) Board meeting recap. Nick: 1) Changed addresses on many online accounts. Make sure everybody in the office knows how not to get phished. Karsten: 1) Released DescripTor 1.2.0 containing a complete rewrite of docs into Javadocs. 2) Finished metrics proposal together with Cass, Isabela, iwakeh, and Shari. Kate: 1) It's important that Tor people talking to the media about Tor touch base with me prior to interviews so that I can help them with media training (if needed), discuss the reporter with them, etc. I need to understand which reporters are covering which topics. This is an evergreen request and also a longstanding policy. Georg: 1) Tor Browser 6.0 is out \o/ Isabela: 1) network team - working on next release [make it smaller] 2) OTF - reply to their questions [also pinged Sue on invoices we should be doing will ping her again is $ to come in ;)] 3) DRL- preparing F-indicators and extension letter -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBAgAGBQJXVrBAAAoJEC3ESO/4X7XBFpsH/2Olfmnra7LFD4rjQ0rW5SK6 mexUJK+BuDagpIRj/96rZyWZAYXrVSND3p4ECMf/elOZqdZrZ04CNkrxyMRRIZBU m5Wl+T/pyJxowPv9nE7jgmkwM+156ZfMkJmqKC6NK9j52BY14C05p8Ni5c3IfPbg kjW8kNKx9apBnxbA+dhnTq9rHzNbvEDzNc1FhowVr1nsxHOevQwl+SPHdluJ5PoA PyP4Ux/qKtm0chumd1NPxh9I1WvZXXUdq2UwfWcfez3dWmepl+WCEy6mGRdpJ9TF bMlHKpaCN6xh0MC8fGGYX+WjDFHAjPHyW7gO+15NOTFVl7DSLUk3NUGkuW3Mh5Q= =/6x0 -----END PGP SIGNATURE-----

1 0

Hewlett Foundation Grants
by Tom Ritter 06 Jun '16

06 Jun '16

Someone pointed out the Hewlett Foundation grants to me: http://hewlett.org/blog/posts/refining-our-cyber-initiative-grantmaking-str… http://hewlett.org/sites/default/files/Cyber%20Initative%20Refined%20Grantm… It does not seem that they have 'open' grant applications, but they fund in the hundreds-of-thousands of dollars range to orgs like Berkman, New America, CDT, and a bunch of universities - so it seems worthwhile to think about and see if Tor could put in a proposal...? The goals for their grants are: - Building Capacity of Civil Society Orgs - Building Capacity of Individual Decision-Makers and Influencers - Building a Robust Network of Cybersecurity Experts - Generating Policy Driven Research and Thought Leadership - Cofunding It's not a slam dunk for the main sort of work Tor does, but it seems like it may fit OONI quite well or could be a vehicle for sponsorship of devs to attend things like Open Web Summits. -tom

1 0

Proxy Blocking Latency (preprint)
by David Fifield 01 Jun '16

01 Jun '16

Lynn Tsai and I, with the help of others, have been measuring how long it takes for Tor Browser's default bridges to be blocked. https://arxiv.org/abs/1605.08808 (click "PDF") Abstract: Censors of the Internet must continually discover and block new circumvention proxy servers. We seek to understand the pace of this process, specifically, the length of the delay between when a proxy becomes potentially discoverable and when the censor blocks it. We measure this delay by testing the reachability of previously unseen Tor bridges, before and after their introduction into Tor Browser, from sites in the U.S., China, and Iran, over a period of five months. We find that China's national firewall blocks these new bridges, but only after a varying delay of between 2 and 18 days, and that blocking occurs only after a user-ready software release, despite bridges being available earlier in source code. While the firewall notices new bridges in Tor Browser, bridges that appear only in Orbot, a version of Tor for mobile devices, remain unblocked. This work highlights the fact that censors can behave in unintuitive ways, which presents difficulties for threat modeling but also opportunities for evasion. The best summaries are on pages 4 and 5, which show in graphical/tabular form the dates of releases and how long the bridges remained reachable after. We would appreciate any comments or corrections. In particular, the description of the Tor Browser release process could stand some fact-checking by a Tor Browser developer.

2 2

Fwd: Applications extended - APNIC Internet Operations Research Grant
by Virgil Griffith 31 May '16

31 May '16

This seems like a lovely grant opportunity for someone doing BGP or traffic analysis work. Must have some presence in Asia Pacific. -V ---------- Forwarded message ---------- From: *APNIC Secretariat* <apnic-no-reply(a)apnic.net> Date: Tuesday, 31 May 2016 Subject: Applications extended - APNIC Internet Operations Research Grant ________________________________________________________________________ APNIC Internet Operations Research Grant applications extended ________________________________________________________________________ APNIC is pleased to announce that applications for the APNIC Internet Operations Research Grant have been extended by TWO WEEKS to 15 June 2016 (23:59 UTC). Applicants can apply for funding between AUD 5,000 to AUD 45,000 for research projects on topics related to Internet operations, infrastructure and related protocols, for example: - Network measurement and analysis - IPv6 deployment - BGP routing - Network security - Peering and interconnection Apply now --------- If you have a project that supports the development of an Internet research community whose results can improve the availability, reliability and security of the Internet in the Asia Pacific, then apply now. We encourage members of Network Operators Groups, members/partners of IXPs, operators of root servers, and academics and postgraduate students to submit their proposals. The APNIC Internet Operations Research Grant is administered and managed by ISIF Asia. For more information, please see: http://isif.asia/grant ________________________________________________________________________ APNIC Secretariat secretariat(a)apnic.net <javascript:_e(%7B%7D,'cvml','secretariat(a)apnic.net');> Asia Pacific Network Information Centre (APNIC) Tel: 61 7 3858 3100 PO Box 3646 South Brisbane, QLD 4101 Australia Fax: 61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http://www.apnic.net ________________________________________________________________________

1 0