[tor-dev] obfsproxy getting scramblesuit password from file in unmanaged mode

2014-05-20 Thread irregulator
Hey all, when running obfsproxy with scramblesuit in unmanaged mode (e.g. to obfuscate non-Tor traffic) the UniformDH password is passed in command line like this: obfsproxy scramblesuit --password=W3ECD5GOYU5AAW4G35GSH5QXIHSRBU2X The problem with this is that the password is visible in the syst

[tor-dev] Reminder: tor development meetings every Wednesday, 1900UTC

2014-05-20 Thread Nick Mathewson
Hi, all! Here's your regular reminder for the weekly IRC meeting for people working on the program "tor". (This won't cover all the other programs developed under the Tor umbrella.) The next meeting time will be: Wednesday May 21, 19:00 UTC. (That's 3pm EDT and 12:00 noon PDT.) As usual,

Re: [tor-dev] obfsproxy getting scramblesuit password from file in unmanaged mode

2014-05-20 Thread Yawning Angel
On Tue, 20 May 2014 18:25:46 +0300 irregula...@riseup.net wrote: > Hey all, > > when running obfsproxy with scramblesuit in unmanaged mode (e.g. to > obfuscate non-Tor traffic) the UniformDH password is passed in command > line like this: > > obfsproxy scramblesuit --password=W3ECD5GOYU5AAW4G35GS

[tor-dev] A Child's Garden of Pluggable Transports

2014-05-20 Thread David Fifield
Have you ever wondered what makes the Tor protocol fingerprintable, and makes pluggable transports necessary? Have you wondered how obfs3 obscures byte patterns in Tor? What a flash proxy WebSocket connection actually looks like, and why it defeats IP blocking but not DPI? Then I have the wiki pag

[tor-dev] Question to Java developers: what are good frameworks for Tor's server-side Java applications

2014-05-20 Thread Karsten Loesing
Hello devs, I'm seeking advice from people with experience in writing server-side Java applications. Let me give you some background about this request: for the past five years, I have been developing server-side Java applications which all process large amounts of Tor directory data and provide

Re: [tor-dev] Question to Java developers: what are good frameworks for Tor's server-side Java applications

2014-05-20 Thread Noah Rahman
Hi Karsten, A lot of people I respect seem to use Dropwizard for this sort of thing. https://dropwizard.github.io/dropwizard/ As for deployment on Debian (dunno if it's in the standard Debian universe) https://groups.google.com/d/msg/dropwizard-user/gv4TDQbcHBc/LGJz0egMNWQJ Hope that helps Bes

Re: [tor-dev] Question to Java developers: what are good frameworks for Tor's server-side Java applications

2014-05-20 Thread another_base_name2001
You could try Spring. It seems to be a common framework for Server Side Java. http://projects.spring.io/spring-framework/ Noah Rahman wrote: Hi Karsten, A lot of people I respect seem to use Dropwizard for this sort of thing. https://dropwizard.github.io/dropwizard/ As for deployment on Debi

[tor-dev] How to distribute Tor with other software

2014-05-20 Thread Micah Lee
I just wrote a little program called OnionShare, that makes it simple to share a file securely using a password-protected Tor hidden service: https://github.com/micahflee/onionshare Right now it only runs in Tails. I'd like to make a versin that runs in OSX and Windows, too. How can I make softwar

Re: [tor-dev] How to distribute Tor with other software

2014-05-20 Thread meejah
Micah Lee writes: > When you run onionshare.py, it modifies /etc/tor/torrc and reloads the > Tor config, and when it's done it restores the original torrc and > reloads again. You could use one of the controller libraries (stem if you want synchronous, txtorcon if async/Twisted) to do this; they