The Tor Project issueshttps://gitlab.torproject.org/groups/tpo/-/issues2024-03-18T17:22:03Zhttps://gitlab.torproject.org/tpo/network-health/team/-/issues/351New round of contacting operators for DNS issues and badexiting problematic r...2024-03-18T17:22:03ZGeorg KoppenNew round of contacting operators for DNS issues and badexiting problematic relays (2024-03-11)We got a new report about two relays:
```
Relay 3EC0EAB430E9885BDF937B4EAC578DD4A2E74075 failed DNS check 5/5 times
Relay A53C46F5B157DD83366D45A8E99A244934A14C46 failed DNS check 1/1 times
```
Only the first remains. I've reached out to...We got a new report about two relays:
```
Relay 3EC0EAB430E9885BDF937B4EAC578DD4A2E74075 failed DNS check 5/5 times
Relay A53C46F5B157DD83366D45A8E99A244934A14C46 failed DNS check 1/1 times
```
Only the first remains. I've reached out to the operator. Details of that relay are:
```
[+] 3EC0EAB430E9885BDF937B4EAC578DD4A2E74075
> Addr: 167.71.6.109 - Contact: '[selling-pack-hml-jkjk] [@] [protonmail.ch] //\\// Questions / Security Issues / Bugs / Please Contact Me' - Nickname: 'mrrogerprivacy001' - Version: 0.4.8.10
> Flags: ['Exit', 'Fast', 'Running', 'V2Dir', 'Valid']
> OR Port: 443, Dir Port: 0
> Bandwidth: 9.613838 MB/s
> Uptime: 3 days, 6:24:14
https://metrics.torproject.org/rs.html#details/3EC0EAB430E9885BDF937B4EAC578DD4A2E74075
```Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/issues/40346Start disabled2024-03-18T17:30:14ZcypherpunksStart disabledRegardless of any other settings, I would suggest Snowflake never begin operating automatically upon installation, instead requiring the first use on any given device to be initiated manually.
I briefly had Snowflake installed on a pers...Regardless of any other settings, I would suggest Snowflake never begin operating automatically upon installation, instead requiring the first use on any given device to be initiated manually.
I briefly had Snowflake installed on a personal device, where it was disabled while I looked into the possibility of using a DNS sinkhole to prevent the use of my connection for undesirable purposes. I had preemptively turned services.sync.addons.ignoreUserEnabledChanges on so that, once I was comfortable, enabling Snowflake on my personal device I would not inadvertently enable it on my work computer. I unexpectedly needed to have the work machine reset and did not disable this flag, so Snowflake was installed and enabled when I synchronised my settings. I responded quickly and uninstalled the extension entirely, but it appears to have been active for long enough to have routed a connection to the website of a violent extremist group that was identified and flagged by our IT systems. This incident has caused me to seriously reconsider the risk using Snowflake creates, not just to myself but also by inadvertently enabling uses like the connection in question despite my efforts to prevent doing so, and as a result I am highly unlikely to reinstall it.
That this situation involved a mistake on my part does not justify it as a possibility. It cannot be expected that no user will ever make such a mistake - even advanced users cannot be expected to never forget things - and if such a simple and potentially-unavoidable mistake can cause automatic operation to put the user at risk like this then safeguards should be put in place both to protect them and to avoid deterring them entirely.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42459Add startpage onion service to list of search providers2024-03-26T21:17:06ZrichardAdd startpage onion service to list of search providersStartpage has added a new onion service, so lets add it to the list of built-in search providers.
URL: http://startpagel6srwcjlue4zgq3zevrujfaow726kjytqbbjyrswwmjzcqd.onion/
We'd like this in the next stable release 13.0.12 and the nex...Startpage has added a new onion service, so lets add it to the list of built-in search providers.
URL: http://startpagel6srwcjlue4zgq3zevrujfaow726kjytqbbjyrswwmjzcqd.onion/
We'd like this in the next stable release 13.0.12 and the next alpha release 13.5a6Dan BallardDan Ballardhttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42458Update the "Submit Feedback" link in "About Tor Browser"2024-03-26T21:14:46Zebanamebanam@torproject.orgUpdate the "Submit Feedback" link in "About Tor Browser"The link in "Submit Feedback", visible in `Help` > `About Tor Browser`, currently points to https://support.torproject.org/get-in-touch/. I think we can make it point to https://support.torproject.org/misc/bug-or-feedback/ directly instead.The link in "Submit Feedback", visible in `Help` > `About Tor Browser`, currently points to https://support.torproject.org/get-in-touch/. I think we can make it point to https://support.torproject.org/misc/bug-or-feedback/ directly instead.richardrichardhttps://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/issues/196HTTPS distributor is missing a language selector menu2024-03-12T17:17:05Zmeskiomeskio@torproject.orgHTTPS distributor is missing a language selector menuhttps://gitlab.torproject.org/tpo/core/arti/-/issues/1331Port the ability for directory authorities to compute consensus documents2024-03-12T16:57:09ZGabagaba@torproject.orgPort the ability for directory authorities to compute consensus documentsDirectory authorities need to take the votes and form, encode, compute, and sign the consensus once per hour. This process includes computing a consensus on included relays, descriptors and microdescriptors for each relay, flags and othe...Directory authorities need to take the votes and form, encode, compute, and sign the consensus once per hour. This process includes computing a consensus on included relays, descriptors and microdescriptors for each relay, flags and other properties of each relay, parameters and the weight of these parameters, and recommended versions of Tor.
In this issue, we will port the system for directory authorities to generate votes into Arti.Arti: Directory authorities implementationhttps://gitlab.torproject.org/tpo/core/arti/-/issues/1330Textually encode votes2024-03-12T16:54:05ZGabagaba@torproject.orgTextually encode votesArti: Directory authorities implementationhttps://gitlab.torproject.org/tpo/core/arti/-/issues/1329Compute microdescriptors for current md consensus versions2024-03-12T16:53:53ZGabagaba@torproject.orgCompute microdescriptors for current md consensus versionsArti: Directory authorities implementationhttps://gitlab.torproject.org/tpo/core/arti/-/issues/1328Compute recommended protocol versions2024-03-12T16:51:40ZGabagaba@torproject.orgCompute recommended protocol versionsArti: Directory authorities implementationhttps://gitlab.torproject.org/tpo/core/arti/-/issues/1327Compute known flags2024-03-12T16:53:20ZGabagaba@torproject.orgCompute known flagsArti: Directory authorities implementationhttps://gitlab.torproject.org/tpo/core/arti/-/issues/1326Compute recommended versions2024-03-12T16:53:02ZGabagaba@torproject.orgCompute recommended versionsArti: Directory authorities implementationhttps://gitlab.torproject.org/tpo/core/arti/-/issues/1325Vote on network parameters2024-03-12T16:52:56ZGabagaba@torproject.orgVote on network parametersArti: Directory authorities implementationhttps://gitlab.torproject.org/tpo/core/arti/-/issues/1324Decide which decriptors to vote for, for each relay2024-03-12T16:52:43ZGabagaba@torproject.orgDecide which decriptors to vote for, for each relayArti: Directory authorities implementationhttps://gitlab.torproject.org/tpo/core/arti/-/issues/1323Decide which relays to include in vote2024-03-12T16:52:29ZGabagaba@torproject.orgDecide which relays to include in voteArti: Directory authorities implementationhttps://gitlab.torproject.org/tpo/core/arti/-/issues/1322Assign flags according to configuration and measurement2024-03-12T16:45:13ZGabagaba@torproject.orgAssign flags according to configuration and measurementArti: Directory authorities implementationhttps://gitlab.torproject.org/tpo/core/arti/-/issues/1321Port the system for directory authorities to generate votes2024-03-12T16:54:42ZGabagaba@torproject.orgPort the system for directory authorities to generate votesDirectory authorities vote on a consensus view of the network once per hour and thus need a mechanism to generate these votes. This issue we will port the directory authority’s system to generate votes into Arti.Directory authorities vote on a consensus view of the network once per hour and thus need a mechanism to generate these votes. This issue we will port the directory authority’s system to generate votes into Arti.Arti: Directory authorities implementationhttps://gitlab.torproject.org/tpo/core/arti/-/issues/1320Port the ability for directory authorities to manage authority keys2024-03-12T16:39:50ZGabagaba@torproject.orgPort the ability for directory authorities to manage authority keysEach directory authority has a “directory signing key.” Directory authorities use this key to provide a signed list of all the known relays to clients using the network. This means that unless an adversary can control a majority of the d...Each directory authority has a “directory signing key.” Directory authorities use this key to provide a signed list of all the known relays to clients using the network. This means that unless an adversary can control a majority of the directory authorities, they can't trick a client into using other Tor relays.
This Activity includes developing ways for directory authorities to generate and manage signing and identity keys, to store keys in an encrypted way, to consume authority signing keys and certificates, and to alert when keys and certificates are close to expiration.Arti: Directory authorities implementationhttps://gitlab.torproject.org/tpo/core/arti/-/issues/1319Consume a "bad-relay" configuration2024-03-12T16:01:11ZGabagaba@torproject.orgConsume a "bad-relay" configurationArti: Directory authorities implementationhttps://gitlab.torproject.org/tpo/core/arti/-/issues/1318Pin relay keys to prevent key-change attacks2024-03-12T16:03:13ZGabagaba@torproject.orgPin relay keys to prevent key-change attacksArti: Directory authorities implementationhttps://gitlab.torproject.org/tpo/core/arti/-/issues/1317Track relay history to determine fast, stable, guard, hsdir flags2024-03-12T16:02:33ZGabagaba@torproject.orgTrack relay history to determine fast, stable, guard, hsdir flagsArti: Directory authorities implementation