Re: [tor-dev] Using Tor w/o GeoIP

2012-01-22 Thread Sebastian Hahn

On Jan 23, 2012, at 2:38 AM, Nathan Freitas wrote:
> It is legal on Android, but I have always been concerned about that sort
> of secondary download from a Tor perspective, in that you would want to
> make sure it was downloaded through the Tor network itself, right?
> 
> Maybe I can just create an Orbot-lite version that does not include
> privoxy and geoip, etc.

I think that is kind of what I meant, tell users they need this other
app from the market as well to use geoip features. Users could install
it via the market or separately, in the same way they installed orbot
in the first place.

___
tor-dev mailing list
tor-dev@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev


Re: [tor-dev] Using Tor w/o GeoIP

2012-01-22 Thread Nathan Freitas
On 01/22/2012 08:14 PM, Sebastian Hahn wrote:
> As a client, the geoipdb is only required for specification of nodes by
> country code, yes. On relays/bridges, we also use it for statistics. One

Thanks for the clarification.

> idea for you might be to not include the geoip thing by default at all,
> and only when the user requests a feature that requires it do you inform
> them that they need to fetch another file. I'm not clear if that's legal
> on Android, but if it is, it could be an effective mechanism.

It is legal on Android, but I have always been concerned about that sort
of secondary download from a Tor perspective, in that you would want to
make sure it was downloaded through the Tor network itself, right?

Maybe I can just create an Orbot-lite version that does not include
privoxy and geoip, etc.

> Also we've had plans to make the geoip db a thing the tor client
> downloads on demand only, but haven't gotten far with that. If you
> wanted to help with that on an 0.2.4 timeframe, that'd probably be
> fantastic.

It would be easier if that was just part of the native Tor
functionality, instead of something tacked on as part of Orbot. I will
do what I can, so keep me in the loop.

+n8fr8
___
tor-dev mailing list
tor-dev@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev


Re: [tor-dev] Using Tor w/o GeoIP

2012-01-22 Thread Sebastian Hahn

On Jan 20, 2012, at 1:48 AM, Nathan Freitas wrote:

> Is it the geoip database only required if you are specifying
> Exit/Entrances nodes by country code?
> 
> I am thinking about not fully unpacking it into Android storage, unless
> the user activates those option in Orbot. This will save quite a bit of
> internal storage space.
> 
> Thanks!
> 
> +n8fr8

As a client, the geoipdb is only required for specification of nodes by
country code, yes. On relays/bridges, we also use it for statistics. One
idea for you might be to not include the geoip thing by default at all,
and only when the user requests a feature that requires it do you inform
them that they need to fetch another file. I'm not clear if that's legal
on Android, but if it is, it could be an effective mechanism.

Also we've had plans to make the geoip db a thing the tor client
downloads on demand only, but haven't gotten far with that. If you
wanted to help with that on an 0.2.4 timeframe, that'd probably be
fantastic.

___
tor-dev mailing list
tor-dev@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev


Re: [tor-dev] Windows Alternative of torsocks/tsocks ?

2012-01-22 Thread Roger Dingledine
On Sun, Jan 22, 2012 at 04:11:03PM -0500, Catalin Patulea wrote:
> > On 1/22/12 11:28 AM, Roger Dingledine wrote:
> >> See also TorCap2: http://www.virtualventures.ca/~cat/
> >> but I've never succeeded at getting a license statement out of the author.
> Roger, I'm sorry if I seemed uncooperative when you asked about the
> licensing terms of TorCap2. I can see a reference to a discussion with
> you back in 2006, but I no longer have copies of the actual
> correspondence, so I don't recall what happened.

Great to see that you're still around; and I'm happy to see that torcap2
has a license now!

(The correspondence in 2006 was me sending one mail and not getting
(or seeing) a response. No worries.)

--Roger

___
tor-dev mailing list
tor-dev@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev


[tor-dev] Windows Alternative of torsocks/tsocks ?

2012-01-22 Thread Catalin Patulea
[resending after subscribing to list]

Hi Fabio,

> On 1/22/12 11:28 AM, Roger Dingledine wrote:
>> See also TorCap2: http://www.virtualventures.ca/~cat/
>> but I've never succeeded at getting a license statement out of the author.
Roger, I'm sorry if I seemed uncooperative when you asked about the
licensing terms of TorCap2. I can see a reference to a discussion with
you back in 2006, but I no longer have copies of the actual
correspondence, so I don't recall what happened.

> Can you confirm whether the TorCap2 is licensed under BSD, GPL or other
> opensource license?
I have released TorCap2 under the LGPL 3.0 (I have updated the readme
and included a license.txt in the zip files). You can use TorCap2
as-is in an application of any license. Any modifications to TorCap2
must be published under the LGPL.

> at some Tor related Project we would like to use TorCap2 as a part of an
> OpenSource Project whose concept is described at
> https://piratenpad.de/p/AnonymousWebApplicationFramework .
On a technical note, I doubt that TorCap2 is the right approach here.
If you can limit yourself to support Python-only applications to
start, then a SOCKS client in Python that implements the same
interface as the 'socket' module seems like a much cleaner solution to
me. This is now platform-independent, less complex (easier to debug),
and gives the Python code the *option* between native sockets and
Tor-ified sockets, under the same interface. (maybe you want to check
connectivity.. or find the hosts's external IP by fetching a URL.. or
talk to hosts on the local network.. etc.)

Porting existing Python code would be a matter of search-replacing
'socket' with 'torsocket' (or even just 'import torsocket as socket').
Of course, with this design you would leak network traffic if you
spawned a separate process, or if you used a Python native library
that directly accesses the OS's socket API. But maybe it's good to
start with supporting Python-only applications initially, given the
complexity of Win32 API hooking..

Just my $0.02..

Catalin
___
tor-dev mailing list
tor-dev@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev


Re: [tor-dev] Windows Alternative of torsocks/tsocks ?

2012-01-22 Thread Fabio Pietrosanti (naif)
On 1/22/12 11:28 AM, Roger Dingledine wrote:
> On Sun, Jan 22, 2012 at 10:55:50AM +0100, Fabio Pietrosanti (naif) wrote:
>> does anyone know if there is a windows alternative to torsocks/tsocks?
> [snip]
>> But to make this "library preload" under windows we only found:
>> Torcap: http://www.freehaven.net/~aphex/torcap/
>> Freecap: http://www.freecap.ru/eng/
> 
> See also TorCap2: http://www.virtualventures.ca/~cat/
> but I've never succeeded at getting a license statement out of the author.

Hi Catalin Patulea,

at some Tor related Project we would like to use TorCap2 as a part of an
OpenSource Project whose concept is described at
https://piratenpad.de/p/AnonymousWebApplicationFramework .

We downloaded the source code of TorCap2
http://www.virtualventures.ca/~cat/code/TorCap2-src.zip

It appear that the source code license it's not defined.

Can you confirm whether the TorCap2 is licensed under BSD, GPL or other
opensource license?

In the source-code and in your home-page it's not defined.

We hope to ear news from you about which license apply to Torcap2, as
it's a tool that can be really helpful if it can be integrated within
other opensource project :-)

-naif
___
tor-dev mailing list
tor-dev@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev


Re: [tor-dev] Windows Alternative of torsocks/tsocks ?

2012-01-22 Thread Roger Dingledine
On Sun, Jan 22, 2012 at 10:55:50AM +0100, Fabio Pietrosanti (naif) wrote:
> does anyone know if there is a windows alternative to torsocks/tsocks?
[snip]
> But to make this "library preload" under windows we only found:
> Torcap: http://www.freehaven.net/~aphex/torcap/
> Freecap: http://www.freecap.ru/eng/

See also TorCap2: http://www.virtualventures.ca/~cat/
but I've never succeeded at getting a license statement out of the author.

> Does anyone know if there's something else for win32 that can just run
> as a commandline tool to be included in a startup script, handling the
> DNS Query and TCP Connect torrifying them?

There isn't a good answer to this question, I believe.

It might be good to look into what the various openvpn tools use. Or
what the open source VM tools use to hook traffic. I haven't seen any
versions of those that are broken out into a modular way though.

There's a recurring theme where some organization realizes there's no
generic open source tool to wrap network syscalls in Windows, so they
write one, but it takes way more effort than they anticipated, and by
the time they're done they don't release it as open source, and instead
try to commercialize it and fail. Goto step 1.

You could be the one to break the cycle. :)

--Roger

___
tor-dev mailing list
tor-dev@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev


[tor-dev] Windows Alternative of torsocks/tsocks ?

2012-01-22 Thread Fabio Pietrosanti (naif)
Hi all,

does anyone know if there is a windows alternative to torsocks/tsocks?

We sketched down a draft to build up an anonymous web application
framework that would allow to build TorHS exposed python webapps on a
desktop computer.

The draft is available at
https://piratenpad.de/p/AnonymousWebApplicationFramework (feel free to
modify)

The idea is to deliver "GlobaLeaks.exe" (but possibly other software)
including Tor, with a web-application framework that include all the
functionalities to handle:
- Tor Hidden Service exposure
- Tor outbound communication

For Tor Outbound outbound connections, the idea is to wrap all the
application (Python, Tornadoweb, scripts) under Torsocks/tsocks.

For Mac OS X / Linux it's easy, we can use torsocks/tsocks:
TorSocks: http://code.google.com/p/torsocks/

But to make this "library preload" under windows we only found:
Torcap: http://www.freehaven.net/~aphex/torcap/
Freecap: http://www.freecap.ru/eng/

Does anyone know if there's something else for win32 that can just run
as a commandline tool to be included in a startup script, handling the
DNS Query and TCP Connect torrifying them?

-naif
___
tor-dev mailing list
tor-dev@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev