Trac issueshttps://gitlab.torproject.org/legacy/trac/-/issues2020-06-13T17:40:12Zhttps://gitlab.torproject.org/legacy/trac/-/issues/5689tor-browser-2.2.35-9_en-US.exe infected?2020-06-13T17:40:12ZTractor-browser-2.2.35-9_en-US.exe infected?Centurylink Online Security 9.01 (F-Secure bundled by Centurylink, my ISP) on Windows XP reports that the trojan Gen.Variant.Kazy.25958 is infecting tbb-firefox.exe from the latest bundle listed in the subject line. I verified the signa...Centurylink Online Security 9.01 (F-Secure bundled by Centurylink, my ISP) on Windows XP reports that the trojan Gen.Variant.Kazy.25958 is infecting tbb-firefox.exe from the latest bundle listed in the subject line. I verified the signature on the downloaded file per your instructions and it was OK. I Unzipped the bundle on another virtual machine without the F-Secure product and copied the files to my Linux machine. I scanned the files with Bitdefender for Unices 7.6-4 with the latest definitions. It also indicated the same infection in tbb-firefox.exe
Please advise if there is any additional information I can provide.
**Trac**:
**Username**: taylorkhTorBrowserBundle 2.2.x-stableErinn ClarkErinn Clarkhttps://gitlab.torproject.org/legacy/trac/-/issues/2369Sponsor F phase one (May2011) deliverables2011-09-04T13:48:18ZRoger DingledineSponsor F phase one (May2011) deliverablesMaster ticket for all phase one (May 31 2011) SponsorF deliverables:
[org/sponsors/SponsorF](org/sponsors/SponsorF)
[org/sponsors/SponsorF/May2011](org/sponsors/SponsorF/May2011)
[[TicketQuery(parent=this)]]Master ticket for all phase one (May 31 2011) SponsorF deliverables:
[org/sponsors/SponsorF](org/sponsors/SponsorF)
[org/sponsors/SponsorF/May2011](org/sponsors/SponsorF/May2011)
[[TicketQuery(parent=this)]]Deliverable-Mar2011Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/2296Create a small document that explains who to contact for security stuff2020-06-13T01:02:55ZJacob AppelbaumCreate a small document that explains who to contact for security stuffWe need to collect a small set of email addresses, gpg keys, and other information about notification of security important related updates.
For Debian - we contact Peter
For Ubuntu - we contact Jacob
For OpenWRT - we contact Jacob
For ...We need to collect a small set of email addresses, gpg keys, and other information about notification of security important related updates.
For Debian - we contact Peter
For Ubuntu - we contact Jacob
For OpenWRT - we contact Jacob
For Android - we contact Nathan and Helix
For Windows - we contact Helix
For Redhat - we contact ???
For Gentoo - we contact ???
For other distros - do we want to to contact vendor-sec and call it a day?Deliverable-Mar2011Jacob AppelbaumJacob Appelbaumhttps://gitlab.torproject.org/legacy/trac/-/issues/2277Sponsor E Phase One Deliverables2011-10-25T18:23:21ZAndrew LewmanSponsor E Phase One DeliverablesMaster ticket for all Phase One deliverables.
[[TicketQuery(parent=this)]]Master ticket for all Phase One deliverables.
[[TicketQuery(parent=this)]]Deliverable-Mar2011Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/2273Training materials and sessions for train the trainers.2011-04-11T00:42:57ZAndrew LewmanTraining materials and sessions for train the trainers.Create training materials and sessions for train the trainers. Pull from the educational materials in #2272. We should have enough material to fill 3 hours of training, from start to finish. It may need to cover how the Internet works...Create training materials and sessions for train the trainers. Pull from the educational materials in #2272. We should have enough material to fill 3 hours of training, from start to finish. It may need to cover how the Internet works at a basic level through basics of information security before getting to Tor.
Materials also need to include a mix of hands-on "try it for yourself" exercises.Deliverable-Mar2011Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/2272Tor materials for trainings2020-06-12T23:58:19ZAndrew LewmanTor materials for trainingsCreate, collate, produce educational materials about Internet censorship and using Tor for circumvention. These materials should work equally well via online access and in-person via conferences. Discussed materials are:
1. screencast...Create, collate, produce educational materials about Internet censorship and using Tor for circumvention. These materials should work equally well via online access and in-person via conferences. Discussed materials are:
1. screencasts of installing and configuring tor
1. video of a "tor talk"
1. collate tor presentations and docs into one master presentation
1. get professional artwork completed for all slides that need it
1. create animation that visually explains the concepts in the presentationDeliverable-Mar2011Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/2023please provision a server/VM for Thandy testing2010-10-27T20:52:23ZErinn Clarkplease provision a server/VM for Thandy testingWe're going to start working on Thandy (https://trac.torproject.org/projects/tor/wiki/projects/Thandy) and need a server to begin testing distribution, roles, and other such things. Having a URL like thandy-test.torproject.org would be g...We're going to start working on Thandy (https://trac.torproject.org/projects/tor/wiki/projects/Thandy) and need a server to begin testing distribution, roles, and other such things. Having a URL like thandy-test.torproject.org would be good too.
Some requirements:
* three separate accounts: one for timestamping, one for me to use and upload stuff, and one to run the webserver. I'll suggest these as names: thandy-admin, thandy-upload, and thandy-www. Maybe someone (Nick) will have better suggestions.
* admin-level permissions for Sebastian and I to be able to change server configuration. For this reason it might be better to have a separate VM dedicated to Thandy stuff, though given the currently minimal resource requirements, it could be a pretty small one.
* ability to serve stuff over http/https.
Thanks!Deliverable-Mar2011weasel (Peter Palfrader)weasel (Peter Palfrader)https://gitlab.torproject.org/legacy/trac/-/issues/1763Project: publish "10 things to think about circumvention systems" whitepaper2010-09-28T17:50:19ZNick MathewsonProject: publish "10 things to think about circumvention systems" whitepaperRoger wrote a draft whitepaper here. We should get it into publishable format so that it can get more attention.Roger wrote a draft whitepaper here. We should get it into publishable format so that it can get more attention.Deliverable-Sep2010Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/8609Grant access to tor-assistants2013-05-23T17:27:18ZSukhbir SinghGrant access to tor-assistantsI have sent a request to join tor-assistants that is pending approval.
Please approve the request.I have sent a request to join tor-assistants that is pending approval.
Please approve the request.https://gitlab.torproject.org/legacy/trac/-/issues/8074Research making Tor-logo webcam bandaids2014-02-25T17:56:43ZRoger DingledineResearch making Tor-logo webcam bandaidsRight now we give out Tor stickers designed for the back of your laptop. Everybody in the world needs a smaller bandaid-form-factor Tor sticker to go on the front of your laptop, at the top where the little spy device is.
How hard / exp...Right now we give out Tor stickers designed for the back of your laptop. Everybody in the world needs a smaller bandaid-form-factor Tor sticker to go on the front of your laptop, at the top where the little spy device is.
How hard / expensive would it be to make good quality stickers?
(Idea came from a nice fellow in NYC that I met at the Access awards night.)KelleyKelleyhttps://gitlab.torproject.org/legacy/trac/-/issues/8026Add roger@torproject.org alias that goes to arma2013-01-21T21:29:50ZRoger DingledineAdd roger@torproject.org alias that goes to armaHello weasel-or-whoever,
Jake just arranged for various official groups to think that my mail is roger@torproject.org. Can somebody set that up so it reaches me?
Thanks!Hello weasel-or-whoever,
Jake just arranged for various official groups to think that my mail is roger@torproject.org. Can somebody set that up so it reaches me?
Thanks!https://gitlab.torproject.org/legacy/trac/-/issues/7641Grant access to rt for aagbsn2013-10-24T12:28:01ZAaron GibsonGrant access to rt for aagbsnSometimes I reply to support emails that end up on tor-assistants.
Andrew says "don't do that, use rt"
Please give me access to rt.Sometimes I reply to support emails that end up on tor-assistants.
Andrew says "don't do that, use rt"
Please give me access to rt.https://gitlab.torproject.org/legacy/trac/-/issues/7274Create a number of 3-5 minute videos2015-05-28T03:31:09ZRuna SandvikCreate a number of 3-5 minute videosOne of our deliverables for [Sponsor L](https://trac.torproject.org/projects/tor/wiki/org/sponsors/SponsorL) is to create a number of short videos to portray the documentation we have on our website.One of our deliverables for [Sponsor L](https://trac.torproject.org/projects/tor/wiki/org/sponsors/SponsorL) is to create a number of short videos to portray the documentation we have on our website.https://gitlab.torproject.org/legacy/trac/-/issues/7056Proposal: Produce Tor Expert Packages and Tails.2015-05-28T03:11:41ZcypherpunksProposal: Produce Tor Expert Packages and Tails.I was introduced to Tor at [TechCamp Zanzibar](http://wiki.techcampglobal.org/#TechCamp_Zanzibar_October_2_-_3) by Karen. I spent the past two days of travel engorging all that is Tor. I had a phone call with Andrew as well. I am unclear...I was introduced to Tor at [TechCamp Zanzibar](http://wiki.techcampglobal.org/#TechCamp_Zanzibar_October_2_-_3) by Karen. I spent the past two days of travel engorging all that is Tor. I had a phone call with Andrew as well. I am unclear where in the world Andrew resides, but he was very professional about my call at what was likely very early in the morning on a week end. Here are my impressions as a successful entrepreneur looking at advanced technology which is equivalent to magic for most of the world.
I installed Tor Browser on my macbook and started to use it. I read through the documentation, once I found it. It appears to be using Tor Browser on your main system is fraught with peril. In fact, couple the NOScript usability issues with the scary warnings about downloading something and Tor Browser on your main system seems wholly illogical and unsafe to use. I removed Tor Browser.
You work with the Tails project. I propose using Tor on anything BUT at dedicated anonymity machine is unsafe. It should only be used inside Tails. The Tor Project should only produce the Tor expert bundles and the Tails operating system. Anything else is putting users at risk. The Tor Expert package is solely for those experts who understand how to use Tor, configure the bits, and understand their risks. This set of people encompasses users who think they know all of this too.
The Tails operating system is based on Debian linux. It should be said that this operating system is a tool. It is not a general purpose operating system for everyone. It works fantastically inside parallels on my macbook. I suggest shipping Tails as the default download.
This proposal allows Tor to continue to focus on its core products:
1. Research and academic output.
2. The core Tor software.
3. The Tails Operating System.
4. Education of the world on the previous three products.
These four products are all Tor should be building. Everything else is secondary to the project and a distraction.
I have reviewed the [Tor Projects](https://www.torproject.org/projects/projects.html.en) page and discovered you are distracted from your core goal. Andrew explained how many of these products are related to the core tor research. He is wrong and making excuses. And he knows it. The Tor Project has too few people according to your core people page, doing too many things. I strongly suggest you hire a true Product Manager to make these decisions. Sell all of these useless products to some other company and focus on the four products above.
Good day.https://gitlab.torproject.org/legacy/trac/-/issues/6931Deploy tools to target areas.2014-02-18T23:42:19ZAndrew LewmanDeploy tools to target areas.Deploy tools to target areas.Deploy tools to target areas.https://gitlab.torproject.org/legacy/trac/-/issues/6930Work with partners to determine target areas.2014-02-18T23:42:10ZAndrew LewmanWork with partners to determine target areas.Work with partners to determine target areas.Work with partners to determine target areas.https://gitlab.torproject.org/legacy/trac/-/issues/6929Schedule a hackfest in the US.2014-02-18T23:42:02ZAndrew LewmanSchedule a hackfest in the US.Schedule a journalist hackfest in the US.Schedule a journalist hackfest in the US.https://gitlab.torproject.org/legacy/trac/-/issues/6928Publish results of a usability study of Tails2014-02-18T23:41:54ZAndrew LewmanPublish results of a usability study of TailsPublish results of a usability study of TailsPublish results of a usability study of Tailshttps://gitlab.torproject.org/legacy/trac/-/issues/6927Publish results of a usability study of the Tor Browser2014-02-18T23:41:35ZAndrew LewmanPublish results of a usability study of the Tor BrowserPublish results of a usability study of the Tor BrowserPublish results of a usability study of the Tor Browserhttps://gitlab.torproject.org/legacy/trac/-/issues/6926Deploy the first version of the community software2013-03-19T18:57:02ZAndrew LewmanDeploy the first version of the community softwareDeploy the first version of the community softwareDeploy the first version of the community softwareAndrew LewmanAndrew Lewman