The Tor Project issueshttps://gitlab.torproject.org/groups/tpo/-/issues2021-08-23T16:31:49Zhttps://gitlab.torproject.org/tpo/web/community/-/issues/116[Onion Services] How to use DoS protections2021-08-23T16:31:49ZGus[Onion Services] How to use DoS protectionsRecently asn and dgoulet released a framework explaining how to configure your Onion Service to limit some DoS attacks. We should have a how to use this feature.Recently asn and dgoulet released a framework explaining how to configure your Onion Service to limit some DoS attacks. We should have a how to use this feature.Sponsor 84: Onion GuidesGusGushttps://gitlab.torproject.org/tpo/web/community/-/issues/114[Onion Service] How to use onionbalance2021-08-23T16:31:49ZGus[Onion Service] How to use onionbalanceWe should have a small how to on using onionbalance in Onion Services section.We should have a small how to on using onionbalance in Onion Services section.GusGushttps://gitlab.torproject.org/tpo/web/support/-/issues/94[Tor Browser 9.5][Onion services] Update URL bar onion indicators2021-08-23T16:29:33ZGus[Tor Browser 9.5][Onion services] Update URL bar onion indicatorsIn the next release, Tor Browser 9.5 will change Onion indicators in URL bar, check this ticket for more reference:
https://trac.torproject.org/projects/tor/ticket/32645
We will need to update the [documentation in support portal](http...In the next release, Tor Browser 9.5 will change Onion indicators in URL bar, check this ticket for more reference:
https://trac.torproject.org/projects/tor/ticket/32645
We will need to update the [documentation in support portal](https://support.torproject.org/onionservices/onionservices-5/) - Onion-services-5 - to reflect this change.
This modification is already available in [Tor Browser Alpha](https://www.torproject.org/download/alpha/)https://gitlab.torproject.org/tpo/core/tor/-/issues/33688README cleanups2021-07-22T16:18:20ZGhost UserREADME cleanupsHello everyone,
I just started playing around with Tor a few days back so as one could expect I started with `README.1st.md` file. I realized that different `*.md` files are not consistent style-wise so I decided to clean them up a bit.
...Hello everyone,
I just started playing around with Tor a few days back so as one could expect I started with `README.1st.md` file. I realized that different `*.md` files are not consistent style-wise so I decided to clean them up a bit.
Brief summary:
- no empty line at the very beginning of the file,
- single empty line between sections (sometimes there were two)
```
... end of the sentence.
New Section
----
```
rather than
```
... end of the sentence.
New Section
----
```
- external links use [name](url) format,
- there is no single space in front of the section name
```
Foo
===
```
is changed to
```
Foo
===
```
Which fixes syntax issues in editors like GNU Emacs with enabled markdown preview.
- I tried to check all links (local and external) and fix the ones which were broken.
For example **the Tor proposal process** inside `README.1st.md` or `doc/WritingTests.txt` were changed to `.../doc/HACKING/WritingTests.md` in few places).
----
At the very end of `README.1st.md` file there are some TODO (I think?) sections. I wrapped them around in "TODO" section.
```
TODO
-----------------------
XXXXX also describe
doc/HACKING/WritingTests.md
torguts.git
torspec.git
The design paper
freehaven.net/anonbib
XXXX describe these and add links.
```
However I am not sure if these are still needed there. Most of these topics are mentioned already in this file and linked to other files (WritingTests, torspec, etc.).Tor: 0.4.4.x-finalhttps://gitlab.torproject.org/tpo/web/manual/-/issues/64Document v3 onion support in Tor Browser using Securedrop rulesets and HTTPSE...2021-07-01T02:23:23ZPili GuerraDocument v3 onion support in Tor Browser using Securedrop rulesets and HTTPSEverywhereIn legacy/trac#28005 we will implement a PoC for improving the usability of long onion names. We will need to update the tor browser manual to explain this new feature.In legacy/trac#28005 we will implement a PoC for improving the usability of long onion names. We will need to update the tor browser manual to explain this new feature.GusGushttps://gitlab.torproject.org/tpo/network-health/sbws/-/issues/33473Document which branches developers should base their patches on2020-08-22T13:07:10ZjugaDocument which branches developers should base their patches onsbws: 1.1.x-finaljugajugahttps://gitlab.torproject.org/tpo/core/tor/-/issues/33369Tor Manual:Add TOC and Cross-Reference links2021-07-22T16:18:20ZTracTor Manual:Add TOC and Cross-Reference links - Add a TOC to the HTML Tor Manual page
- Add links to existing cross-refs.
**Trac**:
**Username**: swati - Add a TOC to the HTML Tor Manual page
- Add links to existing cross-refs.
**Trac**:
**Username**: swatiTor: 0.4.4.x-finalhttps://gitlab.torproject.org/tpo/core/tor/-/issues/33339Add script to check ordering of options in manpage2021-07-22T16:18:20ZTaylor YuAdd script to check ordering of options in manpageAdd a script to check the ordering of option names within a manpage section.
This will be an initial version that doesn't restrict section names and doesn't recognize pragma comments that mark intentionally out-of-order option names.
l...Add a script to check the ordering of option names within a manpage section.
This will be an initial version that doesn't restrict section names and doesn't recognize pragma comments that mark intentionally out-of-order option names.
legacy/trac#32621 will contain a more fully-functional script suitable for automation.Tor: 0.4.3.x-finalTaylor YuTaylor Yuhttps://gitlab.torproject.org/tpo/core/tor/-/issues/33275Tor Manual: Alphabetize Remaining Tor Manual2021-07-22T16:18:20ZTracTor Manual: Alphabetize Remaining Tor ManualAlphabetically sort the options in the following sections:
- DENIAL OF SERVICE MITIGATION OPTIONS
- DIRECTORY AUTHORITY SERVER OPTIONS
- HIDDEN SERVICE OPTIONS
- TESTING NETWORK OPTIONS
**Trac**:
**Username**: swatiAlphabetically sort the options in the following sections:
- DENIAL OF SERVICE MITIGATION OPTIONS
- DIRECTORY AUTHORITY SERVER OPTIONS
- HIDDEN SERVICE OPTIONS
- TESTING NETWORK OPTIONS
**Trac**:
**Username**: swatiTor: 0.4.4.x-finalhttps://gitlab.torproject.org/tpo/core/tor/-/issues/33188Tor Manual: Alphabetize Server and Directory Server Options2021-07-22T16:18:20ZTracTor Manual: Alphabetize Server and Directory Server OptionsAlphabetize options in the Server Options and Directory Server Options
**Trac**:
**Username**: swatiAlphabetize options in the Server Options and Directory Server Options
**Trac**:
**Username**: swatihttps://gitlab.torproject.org/tpo/network-health/team/-/issues/5We should look over all our bad relay scanners we have and document them2022-09-19T06:26:34ZGeorg KoppenWe should look over all our bad relay scanners we have and document themGeorg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/40023Go through process of distributing private bridges2021-07-15T17:32:56ZPhilipp Winterphw@torproject.orgGo through process of distributing private bridgesOver at legacy/trac#31872, we created a process for distributing private bridges to NGOs:
https://trac.torproject.org/projects/tor/wiki/org/teams/AntiCensorshipTeam/NGOBridgeSupport
It's now time to go through this process with a non-tr...Over at legacy/trac#31872, we created a process for distributing private bridges to NGOs:
https://trac.torproject.org/projects/tor/wiki/org/teams/AntiCensorshipTeam/NGOBridgeSupport
It's now time to go through this process with a non-trivial number of censored users. Once we did, we need to document our experience and iteratively improve the process.Sponsor 30 - Objective 2.3GusGushttps://gitlab.torproject.org/tpo/core/tor/-/issues/32971Document OwningControllerProcess time interval2021-07-22T16:18:20ZteorDocument OwningControllerProcess time intervalTor checks for its owning controller process every 15 seconds:
https://github.com/torproject/tor/blob/4f02812242d1fd90d859eb98ac3fb1ed182f18cf/src/lib/evloop/procmon.c#L168
We should document this interval in the man page.Tor checks for its owning controller process every 15 seconds:
https://github.com/torproject/tor/blob/4f02812242d1fd90d859eb98ac3fb1ed182f18cf/src/lib/evloop/procmon.c#L168
We should document this interval in the man page.Tor: 0.4.3.x-finalhttps://gitlab.torproject.org/tpo/core/tor/-/issues/32929Tor Manual: Split Node options into their own subsection2021-07-22T16:19:08ZteorTor Manual: Split Node options into their own subsectionLet's put the client *Node* and GeoIPExcludeUnknown options in their own manpage section.
For context, see:
https://trac.torproject.org/projects/tor/ticket/32846#comment:11Let's put the client *Node* and GeoIPExcludeUnknown options in their own manpage section.
For context, see:
https://trac.torproject.org/projects/tor/ticket/32846#comment:11Tor: 0.4.3.x-finalhttps://gitlab.torproject.org/tpo/core/tor/-/issues/32928Tor Manual: Split Circuit Timeout options into their own subsection2021-07-22T16:19:08ZteorTor Manual: Split Circuit Timeout options into their own subsectionLet's put the *Circuit*Timeout options in their own manpage section.
For context, see:
https://trac.torproject.org/projects/tor/ticket/32846#comment:11Let's put the *Circuit*Timeout options in their own manpage section.
For context, see:
https://trac.torproject.org/projects/tor/ticket/32846#comment:11Tor: 0.4.3.x-finalhttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/32922New cross-browser fingerprinting method2023-09-01T01:40:59ZTracNew cross-browser fingerprinting methodThis isnt really an enhancement, but is everyone here aware of this new cross-browser fingerprinting method? Have there been any tests of the current Tor Browser's resistance to this?
----------------------------
http://uniquemachine....This isnt really an enhancement, but is everyone here aware of this new cross-browser fingerprinting method? Have there been any tests of the current Tor Browser's resistance to this?
----------------------------
http://uniquemachine.org/
#
https://arstechnica.com/information-technology/2017/02/now-sites-can-fingerprint-you-online-even-when-you-use-multiple-browsers/
http://yinzhicao.org/TrackingFree/crossbrowsertracking_NDSS17.pdf
----------------------------
If already discussed elsewhere, redirect to relevant ticket.
I tested the uniquemachine.org webpage on the Tor Browser on a computer running Windows10 and it got stuck on 'fingerprinting GPU' and the display of graphics - probably due to webGL disabled but i cant be sure.
In terms of defenses to this:
- Disabling javascript is the obvious. webGL is already disabled by default in the Tor Browser, so all ok there ?
- disabling the microphone is another measure. i cant see that Windows10 has the option to disable speakers aside from turning the volume down to 0 for all apps, or for just for the Tor Browser.
- Is running the Tor Browser in a virtual machine kind of overkill to be completely sure of preventing this (and other) cross-browser fingerprinting?
**Trac**:
**Username**: thelamperhttps://gitlab.torproject.org/tpo/core/tor/-/issues/32860Bridge Dockerfile for Raspberry Pi 32021-07-22T16:19:07ZTracBridge Dockerfile for Raspberry Pi 3It would be great to see support for these devices, as they are getting more and more popular.
I can provide a Dockerfile for a Bridge+obfs4 for Raspberry Pi 3, based on phw@ work
**Trac**:
**Username**: qdiiIt would be great to see support for these devices, as they are getting more and more popular.
I can provide a Dockerfile for a Bridge+obfs4 for Raspberry Pi 3, based on phw@ work
**Trac**:
**Username**: qdiiPhilipp Winterphw@torproject.orgPhilipp Winterphw@torproject.orghttps://gitlab.torproject.org/tpo/core/tor/-/issues/32846Tor Manual: Alphabetize Client Options2021-07-22T16:19:07ZTracTor Manual: Alphabetize Client OptionsThis ticket is for the alphabetical sorting of Client options. Making this a child ticket for legacy/trac#4310.
**Trac**:
**Username**: swatiThis ticket is for the alphabetical sorting of Client options. Making this a child ticket for legacy/trac#4310.
**Trac**:
**Username**: swatihttps://gitlab.torproject.org/tpo/core/tor/-/issues/32814Move V3AuthUseLegacyKey into dirauth module2021-09-16T14:22:17ZNick MathewsonMove V3AuthUseLegacyKey into dirauth moduleThis option is also used in router.c, where maybe it should not be.This option is also used in router.c, where maybe it should not be.Tor: unspecifiedhttps://gitlab.torproject.org/tpo/core/tor/-/issues/32790Add NSF support to circpad docs2021-07-22T16:19:07ZMike PerryAdd NSF support to circpad docsThe circpad dev doc needs NSF support numbers. Here's the fix: https://github.com/torproject/tor/pull/1615The circpad dev doc needs NSF support numbers. Here's the fix: https://github.com/torproject/tor/pull/1615Tor: 0.4.3.x-final