Re: [tor-dev] Distributing Tor developer keys via Fedora packages

Hi Matt, On Mon, 20 Jul 2020 at 22:37, Matthew Finkel wrote: > > I propose distributing the Tor developer keys inside the Fedora package > > distribution-gpg-keys.[1] This would give most Linux users a trustworthy > > chain of signatures from their own distributor (e.g. CentOS or Fedora) to > >

[tor-dev] Distributing Tor developer keys via Fedora packages

Hi everyone, I propose distributing the Tor developer keys inside the Fedora package distribution-gpg-keys.[1] This would give most Linux users a trustworthy chain of signatures from their own distributor (e.g. CentOS or Fedora) to Tor project downloads. I am happy to take care of this, although

Re: [tor-dev] Tor Project Idea | GSOC 2015 | Panopticlick | fake fingerprint

I think I like this idea.. Well done. On Wednesday, February 11, 2015, Rohit Dua <8ohit@gmail.com> wrote: > Hello > > I'm Rohit from India, aspiring for gsoc-2015(TOR). This will be my 2nd > consecutive year for gsoc participation. Previous mediawiki. Project:BUB > tool

[tor-dev] Scaling tor for a global population

t/anonbib/bibtex.html#usenix11-pirtor) Is there a better list available for someone new to Tor to read up on the scalability challenges? -- Andrew pgp 0x6B4D6475 https://www.torproject.org/ +1-781-948-1982 ___ tor-dev mailing list tor-dev@lists.torprojec

Re: [tor-dev] Tor Geolocating exit nodes.

trust the tor network by design. The user can influence the client to use countries they think are safe. See https://www.torproject.org/docs/faq.html.en#ChooseEntryExit -- Andrew pgp 0x6B4D6475 https://www.torproject.org/ +1-781-948-1982 ___ tor-dev mai

Re: [tor-dev] Proposal for improving social incentives for relay operators

;warm glow" and "reputation". Perhaps join the EFF's Tor Challenge? https://www.eff.org/torchallenge/ They would love the help. -- Andrew pgp 0x6B4D6475 https://www.torproject.org/ +1-781-948-1982 ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] Tor Cloud - Issues/Maintainer/Next Steps

On Sun, Apr 20, 2014 at 06:54:54AM -0700, s...@redteam.net wrote 0.6K bytes in 0 lines about: : I have created a ticket for Tor Cloud, I think I need access to the Which ticket number? -- Andrew pgp 0x6B4D6475 ___ tor-dev mailing list tor-dev

Re: [tor-dev] Help hacking Mumble

Any movement on this? anything new? On Sun, Feb 9, 2014 at 9:52 PM, Matt wrote: > On Fri, 07 Feb 2014 09:54:35 +0400 > meejah wrote: > > > What I would suggest: > > > > 1. change ConnectDialog so that it always uses not-yet-looked-up > >QHostAddresses (perhaps only if a proxy is enabled)

Re: [tor-dev] Help hacking Mumble

Matt, What are you thinking about this? On Thu, Feb 6, 2014 at 6:06 PM, Matt wrote: > On Thu, 30 Jan 2014 22:01:18 + > Matt wrote: > > Here is one of the Mumble developers' take on the issue: > > > > I don't know where @zanethomas's post went, but I just want to clarify > > what needs to

Re: [tor-dev] Help hacking Mumble

Matt, have you gotten any response? On Thu, Jan 30, 2014 at 10:01 PM, Matt wrote: > If you're into C++ or Qt, we could use some help. Mumble[0] is a free > software VoIP application that various people have had success > using with Tor. One problem using Mumble with Tor is that Mumble > doesn't

Re: [tor-dev] Tor Ecosystem Presentation

1-t3am-tor-ecosystem.odp and .pdf. -- Andrew http://tpo.is/contact pgp 0x6B4D6475 ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] What happened to Tor Router?

izon, http://www.indiegogo.com/projects/orp1-an-open-router-project -- Andrew http://tpo.is/contact pgp 0x6B4D6475 ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] What happened to Tor Router?

/trac.torproject.org/projects/tor/wiki/doc/OpenWRT [1] http://learn.adafruit.com/onion-pi/overview [2] https://pogoplug.com/safeplug [3] http://www.excito.com [4] https://lists.torproject.org/pipermail/tor-dev/2013-November/005773.html -- Andrew http://tpo.is/contact pgp 0x6B4D6475 _

Re: [tor-dev] Apple App Store Redux

year. In general, our code should be highly portable to any OS, and others can go through the specifics of getting our highly portable code into various app stores, because they understand the nuances and details of their preferred OS. [0] https://f-droid.org/ --

Re: [tor-dev] recreated website png diagrams as svg

made by the EFF for us. You can find the originals inside https://media.torproject.org/image/official-images/tor_design_archive.zip I've added them to the site image directory for now. -- Andrew http://tpo.is/contact pgp 0x6B4D6475 ___ tor

Re: [tor-dev] next globe update feedback

nload page). : : Mike, Roger, etc: Any objections? TBB should stay where it is. Maybe feature this globe app from the metrics page. : Christian: Pity it doesn't have a valid cert. It would be nice if it : defaulted to SSL. Can we run the code somewhere rather than on a 3rd party server?

Re: [tor-dev] Reminder: Attentive Otter IM Bundle Meeting in 1h

How about a specific time? with the time zone indicated. thanks. On Wed, Oct 9, 2013 at 10:11 AM, Jurre van Bergen wrote: > On 10/09/2013 06:04 PM, Tom Lowenthal wrote: > > Hello hello, > > > > This is your roughly 60-minute reminder that we'll be comparing > > proposals for the IM browser bund

Re: [tor-dev] OnionMail First Test

Josef, Spot on. On Wed, Sep 18, 2013 at 1:23 AM, wrote: > Why you guys use JAVA for such a security concerned email client? > > JAVA itself isn't secure and most relayable computers don't have > a virtual machine. You know JavaSnoop and vm-hookers like that? > > Just rewrite it into plain C im

Re: [tor-dev] Retiring old user number estimates

lan: > > - Compute user numbers for 2012 and before; the current numbers start > on January 1, 2013. This is going to take at least until September > 23. What's stopping us from computing user numbers back to the beginning of recorded data? -- A

Re: [tor-dev] Trac upgraded to 0.12.3

On Mon, 26 Aug 2013 22:45:20 +0200 Erinn Clark wrote: > Hello everyone! > > Weasel and I have upgraded https://trac.torproject.org to a newer > version. Thank you Erinn and weasel! -- Andrew http://tpo.is/contact pgp 0x6B4D6475 ___ tor

Re: [tor-dev] how much havoc can a compromised baseband do to a Guardian ROM device?

On Mon, 29 Jul 2013 15:00:05 +0200 Eugen Leitl wrote: > Anyone knows whether a Nexus 4 baseband processor has r/w > access to system memory? How does this relate to tor development? -- Andrew http://tpo.is/contact pgp 0x6B4D6475 ___ tor-dev m

Re: [tor-dev] Problems. Flash plugin works by default! I can see youtube video with Tor Browser Bundle

work! > > In settings(plugins) "Flash plugin" is disabled and it is inactive. > In Tor Button settings Plugins are turned off. What happens? Is it a > BUG? This is a better message for h...@rt.torproject.org opening a bug, https://bugs.torproject.org. --

Re: [tor-dev] License of TorDNSEL (was: Haskell packages?)

't change the licensing. -- Andrew http://tpo.is/contact pgp 0x6B4D6475 ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] Chrome browser and sand boxing.

Thanks. On Thu, May 23, 2013 at 5:00 PM, Andrew Lewman wrote: > On Thu, 23 May 2013 15:35:28 + > Andrew F wrote: > > > I have Googled and searched the Tor website, but I have not found any > > information on chrome's sandbox feature and Tor. Specifically wi

Re: [tor-dev] Chrome browser and sand boxing.

On Thu, 23 May 2013 15:35:28 + Andrew F wrote: > I have Googled and searched the Tor website, but I have not found any > information on chrome's sandbox feature and Tor. Specifically with > flash. Is there any information out their on this? https://trac.torproject.org/project

[tor-dev] Chrome browser and sand boxing.

I have Googled and searched the Tor website, but I have not found any information on chrome's sandbox feature and Tor. Specifically with flash. Is there any information out their on this? Thanks ___ tor-dev mailing list tor-dev@lists.torproject.org http

Re: [tor-dev] Discussion on the crypto migration plan of the identity keys of Hidden Services

George, I would definitely create an extended transition time frame. 6 months or a year where both keys will work. just make it clear there is a cut off date. And I think Adrelanos's concept is a valid one. Since we may need to do this again, why not put a structure in place that facilitate

Re: [tor-dev] Tor Launcher settings UI feedback request

. Another thought is with flashproxy in the pluggable transports bundle, what percent of flashproxies work by default with no user config needed? I wonder if we could extrapolate that percentage to a larger "what if we did relay by default?" for all bundles... -- Andrew

Re: [tor-dev] Tor Launcher settings UI feedback request

On the contrary, I think you should list them all under an menu item called advanced connections. Users who need these connections will have them and those that don't, probably won't know what they are and thats ok. On Fri, May 3, 2013 at 5:41 PM, Runa A. Sandvik wrote: > On Fri, May 3, 2013 at

Re: [tor-dev] Moving our website to git and splitting it in two

ia is for all videos, images, pdf, etc that are currently on the site? media.torproject.org becomes a mirrored dir on the webservers. This would make www.tpo content only, media.tpo images/video/pdfs only, dist.tpo for "products" -- Andrew http:/

Re: [tor-dev] Obfs Links on dist are Suddenly Gone

y is huge and its size is knocking over Tor website mirrors.) Yeah, we filled up the disk, and I purged anything with a non-current Tor version. -- Andrew http://tpo.is/contact pgp 0x6B4D6475 ___ tor-dev mailing list tor-dev@lists.tor

Re: [tor-dev] Improving the HTTP interface of BridgeDB: bridges.torproject.org

l, no need to flood other systems and back them up with unrelated email. We can scale each individual system as needed based on usage. People are just clicking links anyway, they might as well click the most direct one that goes directly to the system. -- Andrew http://tpo.is/contact pgp 0x6B4D6475

Re: [tor-dev] Improving the HTTP interface of BridgeDB: bridges.torproject.org

ges.torproject.org 3. I think we should scrap "normal bridges" and only promoted obfuscated bridges. In the bigger picture, "normal bridges" are already subject to DPI attack and blocked in many places in the world based on Tor's network signature alone. All bridges should b

Re: [tor-dev] Fwd: [Wikitech-l] Can we help Tor users make legitimate edits?

... I think nymble is superceded by blacr, http://freehaven.net/anonbib/cache/blacr-ndss.pdf. It's model usecase is Tor-using editors wishing to work with Wikipedia. -- Andrew http://tpo.is/contact pgp 0x6B4D6475 ___ tor-dev mailing list tor-dev@lists

Re: [tor-dev] Xeronet's torrc

I don't see how this custom torrc is going to improve anything, other than an attacker learning how unique you are in the tor network. -- Andrew http://tpo.is/contact pgp 0x6B4D6475 ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

[tor-dev] More TBB usability challenges

self-extract completes and the user is left looking at their IE window with the TBB download page. Three of them went to their Downloads folder to find Tor. The other few waited for something to happen. When I asked the waiting few why they were waiting, they said because they "ran TBB" and

[tor-dev] [PATCH 1/2] New option LocalOutboundBindAddress

This works just like OutboundBindAddress, but instead of excluding connections to loopback addresses, it affects only connections to loopback addresses. The whitespace in this commit is a bit nutty, in order to put whitespace changes into a separate commit. --- doc/tor.1.txt | 11

[tor-dev] [PATCH 2/2] New option LocalOutboundBindAddress: whitespace changes only

--- src/or/config.c | 88 +-- src/or/connection.c | 60 +-- 2 files changed, 73 insertions(+), 75 deletions(-) diff --git a/src/or/config.c b/src/or/config.c index 03e07f9..12f4f79 100644 --- a/src/or/config.c

Re: [tor-dev] RIAA v Verizon: 404

, thus > producing a 404. @EFF Webmaster, could you please fix this or provide > the new address of this document? Is this perhaps the following: Fixed on our website too. Thanks! -- Andrew http://tpo.is/contact pgp 0x6B4D6475 ___ tor-

Re: [tor-dev] resistance to rubberhose and UDP questions

t; various circumstances? No, they clearly do not know these things. Towards this point, very few know who run the DirAuths, where they are, and how we vetted these people. We've done a bad job of communicating this info. -- Andrew http://tpo.is/contact pgp 0x6B4D6475 __

Re: [tor-dev] IRC meeting to plan sponsor L milestones on Wed July 18, 15:00 UTC in #tor-dev

On Tue, 14 Aug 2012 10:09:39 +0200 Karsten Loesing wrote: > Mike, Andrew, Roger, Runa: please update the wiki page with your > feedback in this thread. Please keep the developer feedback per > deliverable as short as possible, ideally in a single paragraph. We need a better way

Re: [tor-dev] IRC meeting to plan sponsor L milestones on Wed July 18, 15:00 UTC in #tor-dev

eed to later. Won't the past text and the diff be in the wiki history for the page? > All of that said, I totally agree that for #1, we need to be sure > Andrew and the funder both understand that we can't promise that > we'll deploy any particular transport protocol -- the firs

Re: [tor-dev] IRC meeting to plan sponsor L milestones on Wed July 18, 15:00 UTC in #tor-dev

lawsuit from a bored person looking to sue Tor for labor law violations. -- Andrew http://tpo.is/contact pgp 0x6B4D6475 ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] Thandy and what's next

and get a working Thandy. Hello Tomas, Can you update us on thandy progress so far? I've seen some work in the alpha version of vidalia. Where do you need help? -- Andrew http://tpo.is/contact pgp 0x6B4D6475 ___ tor-dev mailing list tor-dev@list

Re: [tor-dev] First-time tails/tor user feedback

“your browser”, > no one believed that users would interpret them differently. I agree with you. -- Andrew http://tpo.is/contact pgp 0x6B4D6475 ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

[tor-dev] First-time tails/tor user feedback

utdown tails and let me know when they thought their data was safely no longer on the system. 1 of 8 figured out how to shutdown tails by clicking the big red button in the upper right corner. The rest hit the power button on the laptop. After rebooting, i showed them all they coul

Re: [tor-dev] Alternatives to Tor Exit Enclaves

ients will not use it, therefore voiding the purpose of > exit enclaving. Is there a plan to re-enable clients to use exit enclaves? -- Andrew http://tpo.is/contact pgp 0x6B4D6475 ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.t

Re: [tor-dev] Alternatives to Tor Exit Enclaves

Hi Arturo, On 18 April 2012 17:47, Arturo Filastò wrote: > On 4/18/12 5:33 PM, Andrew Clausen wrote: >> Do .exit addresses already do what you had in mind?  For example, if >> you add "AllowDotExit 1" to your torrc, you can type an address like >> this >

Re: [tor-dev] Alternatives to Tor Exit Enclaves

fault (but the more dangerous anotherserver.anexitnode.exit still remain disabled by default). Cheers, Andrew On 18 April 2012 17:28, Arturo Filastò wrote: > The purpose of Exit Enclaves was to allow people running a website to > make Tor users > access it without ever leaving the Tor net

Re: [tor-dev] Tor for iOS via official channels

n the past and been rejected for being a 'proxy/circumvention tool'. -- Andrew http://tpo.is/contact pgp 0x6B4D6475 ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] Tor download link

archive.torproject.org and not torproject.org/dist for their source code needs. /dist is for the current release only. -- Andrew pgp key: 0x74ED336B ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo

Re: [tor-dev] سلام برنامه تور فارسی برای ایران

27;ve unsubscribed you from the list. -- Andrew pgp key: 0x74ED336B ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] MITM for TOR

See https://www.torproject.org/docs/faq.html.en#WhyCalledTor for the details. -- Andrew pgp key: 0x74ED336B ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] Sanitizing and publishing our web server logs

other personally identifying info. It will also be helpful to know more about our websites, usage, referrers, etc. If Tor is going to be transparent in its data collection practices, we should be able to publish our web server logs without issue. -- Andrew pgp 0x74

Re: [tor-dev] Survey on Tor Trac usage and how you manage your tasks

Is there any way to automate the keyword creation for tickets? -- Andrew pgp 0x74ED336B ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] Survey on Tor Trac usage and how you manage your tasks

'needs_information' to mean the user needs to provide info to me before further progress. > 1.11 What other features do you use in Trac? I use the timeline heavily to see what's changed. I mostly subscribe to RSS feeds of tickets, wiki pages, and time

Re: [tor-dev] Sanitizing and publishing our web server logs

ages. The search terms are also valuable if we want to buy keywords for ads some day. We've had two volunteers do this already through google adwords and the results are surprising. -- Andrew pgp 0x74ED336B ___ tor-dev mailing lis

Re: [tor-dev] Instructions for building the Vidalia-bundle?

On Tuesday, August 09, 2011 06:07:13 Robert Ransom wrote: > On 2011-08-06, Andrew Lewman wrote: > > On Friday, August 05, 2011 13:02:46 Steve Snyder wrote: > >> Is there documentation anywhere on how to build the Vidalia-bundle for > >> Windows? If so, where can I find

Re: [tor-dev] Instructions for building the Vidalia-bundle?

ld the bundle https://svn.torproject.org/vidalia/vidalia/trunk/pkg/win32/build-bundle- installer.txt -- Andrew pgp 0x74ED336B ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] [PATCH] Allow tordnsel to build on Squeeze

e > resulting binary works fine. Haskell has proven quite trusty, though. Thanks! I can only get patch 0001 to apply cleanly. The other two fail. I'll keep poking at it. -- Andrew pgp 0x74ED336B ___ tor-dev mailing list tor-de

[tor-dev] Thoughts on simplified packaging

le to get the software and configuration they want. -- Andrew pgp 0x74ED336B ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] The Torouter and the DreamPlug

vi only and consumer friendly generally do not go together. -- Andrew pgp key: 0x74ED336B ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] The Torouter and the DreamPlug

re yet. The hardware needs to stand on its own, with real users, and not have a way we can remotely access anything. -- Andrew pgp key: 0x74ED336B ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] Too many cooks spoil the broth---or: how about we clean up the wiki?

le will figure it out. torproject.org is the largest link farm to trac, we can update that. Attached is the linking domains, according to google, to trac.tpo. -- Andrew pgp key: 0x74ED336B Domains,Links,Linked pages torproject.org,"514,582","3,600" seul.org,"11,250",3

Re: [tor-dev] Too many cooks spoil the broth---or: how about we clean up the wiki?

careful with is the actual faq pages. Those are heavily linked from around the world. I can pull up the view of our trac according to google's webmaster tools if you're interested. -- Andrew pgp key: 0x74ED336B ___ tor-dev mailing

Re: [tor-dev] The Torouter and the DreamPlug

" through "your router ate my cat and soured my milk". -- Andrew pgp key: 0x74ED336B ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] The Torouter and the DreamPlug

d Internet from somewhere else in the world. It is not to create more relays. -- Andrew pgp key: 0x74ED336B ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] The Torouter and the DreamPlug

e need to start testing, not keep thinking about what we could do. We're going to get a flood of feedback from actual people testing the excito or dreamplug. -- Andrew pgp 0x74ED336B ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] The Torouter and the DreamPlug

f it's being used in a way that > it was not designed for? Vidalia was designed to do this from the start, which is why it uses tcp/ip instead of some ephermeral file descriptor locally. The connection between their vidalia and the tor process is in plaintext. That should be

Re: [tor-dev] Tor meets real users

e headers. For a long time, we at Tor have had a love/hate relationship with javascript. We want the website to work well without it, but at the same time, having it would make our site more usable to those with it enabled. -- Andrew pgp 0x74ED336B __

Re: [tor-dev] Tor meets real users

On Wed, 18 May 2011 00:39:03 -0700 Mike Perry wrote: > We should definitely translate Andrew's report and this commentary > into tickets in the bug tracker, otherwise it will be forgotten.. On my todo list. -- Andrew pgp 0x74ED336B

Re: [tor-dev] Tor meets real users

tub program, which then does the rest via https or bittorrent. > > None of them had pgp installed, and therefore no way to verify > > the .asc and zip file. > That is to be expected. (And I am confident was expected by Andrew). Yes, expected. > > Most of them figured out to

[tor-dev] Tor meets real users

at verification of a cert entails. The relevant tor experience was what I wanted to communicate and for us to start thinking through ways to address it. Perhaps Mike's desire for a anonymous browser is a correct path for usability and better anonymity for the user. I belie

Re: [tor-dev] The Torouter project - where are we now?

we can an entirely new OS and build environment. The openwrt-based torouter can be a community-run and maintained project. I'd rather Tor Project spend its time and effort on making tor work on debian-compatible low-cost hardware, like a dreamplug or excito, than trying to force tor into a

Re: [tor-dev] The Torouter project - where are we now?

his sounds good, if the router can handle it. > If not, then just running a bridge is ok too. I think starting with a bridge config is good. Starting with transparent tor wifi may be too much to start. The original goal of the router was to provide automatically configured bridges and relays

Re: [tor-dev] Thoughts on https://trac.torproject.org/projects/tor/wiki/dev/SupportPolicy

to have a discussion about this over the past few days. I think our best option, for now, is to simply state what we can build ourselves, make these OSes our supported OSes, and encourage others to make their own builds if their favorite OS is not officially supported. -- Andrew pgp key

Re: [tor-dev] or-dev mailing list migration February 19, 2011

And this is complete. Mail archive migration is coming soon. On Sun, 13 Feb 2011 21:37:20 -0500 Andrew Lewman wrote: > A reminder that this migration occurs this weekend. > > On Mon, 24 Jan 2011 15:28:30 -0500 > Andrew Lewman wrote: > > > Hello or-dev subscribers, &g