Trac issueshttps://gitlab.torproject.org/legacy/trac/-/issues2012-09-20T18:41:13Zhttps://gitlab.torproject.org/legacy/trac/-/issues/6835update twitter, identica, and facebook accounts with new social@ email address2012-09-20T18:41:13ZAndrew Lewmanupdate twitter, identica, and facebook accounts with new social@ email addressRuna SandvikRuna Sandvikhttps://gitlab.torproject.org/legacy/trac/-/issues/6030Create tor-qa mailing list and subscribe some folks2012-06-08T13:22:50ZMike PerryCreate tor-qa mailing list and subscribe some folksRuna thinks that it will be useful to keep mailinglist archives of the volunteer tester emails. I think whatever Runa thinks is best for the process she has to manage is probably best for that process.
We should create tor-qa@lists.tp.o...Runa thinks that it will be useful to keep mailinglist archives of the volunteer tester emails. I think whatever Runa thinks is best for the process she has to manage is probably best for that process.
We should create tor-qa@lists.tp.o, and subscribe the handful of testers she has to it.Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/6022Make ldap account for Zack Weinberg2012-06-03T09:25:17ZRoger DingledineMake ldap account for Zack WeinbergZack, aka zwol on irc, is the Stegotorus developer. We just got permission to publish it as open source. We should put it in our git repository.
And since we expect Zack to continue development on it, and vmon will have a personal repo ...Zack, aka zwol on irc, is the Stegotorus developer. We just got permission to publish it as open source. We should put it in our git repository.
And since we expect Zack to continue development on it, and vmon will have a personal repo for it too, we should give zwol an ldap account too.
name (first/middle/last): Zack Weinberg
preferred username: zwol
forwarding email address: zackw@panix.com
pgp key fingerprint: 82F8 54F3 CE73 174B 8B63 1740 91FC C32B 6769 AA64weasel (Peter Palfrader)weasel (Peter Palfrader)https://gitlab.torproject.org/legacy/trac/-/issues/6012Unclaimed flattr account for torproject...2012-06-06T08:53:17ZcypherpunksUnclaimed flattr account for torproject...Flattr just tweeted: "People and projects that get flattred but don’t claim their money: https://flattr.com/catalog/unclaimed/toplist" and there is a torproject account in the top 3 which was flattr'd 142 times (as of now). Maybe someone...Flattr just tweeted: "People and projects that get flattred but don’t claim their money: https://flattr.com/catalog/unclaimed/toplist" and there is a torproject account in the top 3 which was flattr'd 142 times (as of now). Maybe someone should take a look at this ;)Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/6011Write up proposal outline for build security2015-05-28T03:28:46ZMike PerryWrite up proposal outline for build security#3688 is probably just the start of getting our build security where it needs to be, and even that may require a lot of baby steps before the solution is realized.
Once that's done, we should create a build and update deployment process...#3688 is probably just the start of getting our build security where it needs to be, and even that may require a lot of baby steps before the solution is realized.
Once that's done, we should create a build and update deployment process that is akin to the Tor dirauth consensus process: N independent machines creating identical builds and detached signatures, and the build only gets published if all manage to agree.
It will also be a lot of work even to get to a manual version of this process. We should figure out how to break the plan into more baby steps and write funding proposal(s) for them.
The ultimate goal should be to get full funding to deploy our autoupdater with this multi-key validation process so that other organizations can use it. That will require even more funding and work.Mike PerryMike Perryhttps://gitlab.torproject.org/legacy/trac/-/issues/6008Improve software assurance2013-10-24T01:50:00ZAndrew LewmanImprove software assuranceImproving software assurance through repeatable builds across all operating systems and verifiable build system security. Without getting into endless black holes (see http://cm.bell-labs.com/who/ken/trust.html), we should be able to doc...Improving software assurance through repeatable builds across all operating systems and verifiable build system security. Without getting into endless black holes (see http://cm.bell-labs.com/who/ken/trust.html), we should be able to document how our software was built and others should be able to repeat the exact same steps and build the exact same binaries. The binaries should be verifiable through some hash algorithm or forensic analysis of the resulting binaries.
This goes towards improving our build integrity and build security once others can independently verify the binaries.Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/5996Greatly improve usability of GPG for all operating systems2020-06-13T08:06:09ZAndrew LewmanGreatly improve usability of GPG for all operating systemsUsers increasingly are trying to use GPG or PGP to verify our software. This is a great trend to encourage. Unfortunately, the current software available for Windows and OSX is clumsy or non-functional for users. Thandy may replace the n...Users increasingly are trying to use GPG or PGP to verify our software. This is a great trend to encourage. Unfortunately, the current software available for Windows and OSX is clumsy or non-functional for users. Thandy may replace the need for this improvement, but people will still want to verify that thandy does comes from tor.
Help existing projects improve their usability for non-technical users.
Tor is becoming an introduction to GPG/PGP for many people and telling users to 'figure it out' on their own doesn't work so well. It makes users just not verify the software is actually from Tor, or they ask for less secure ways to accomplish the goal, like MD5/SHA-1 hashes of the packages.https://gitlab.torproject.org/legacy/trac/-/issues/5995Build Q&A Forum with translations2013-03-19T18:57:29ZAndrew LewmanBuild Q&A Forum with translationsBuild a Question and Answer forum where the community votes on the top answers to a question related to anything Tor. The software should support translations inline or as a separate forum for various languages. Sort of like a stackexcha...Build a Question and Answer forum where the community votes on the top answers to a question related to anything Tor. The software should support translations inline or as a separate forum for various languages. Sort of like a stackexchange for Tor. The software should be published as freely licensed, open source software (BSD 3-Clause likely).Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/5990Create 3-minute training video about TIMBB2013-10-24T01:53:01ZAndrew LewmanCreate 3-minute training video about TIMBBPeople will watch up to a 3 minute video about how Tor Instant Messaging Browser works, how to use it, and what it does and does not provide. We should produce a high quality video about TIMBB for users to watch and learn.People will watch up to a 3 minute video about how Tor Instant Messaging Browser works, how to use it, and what it does and does not provide. We should produce a high quality video about TIMBB for users to watch and learn.Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/5989Create 3-minute training videos about TBB2014-09-11T15:01:44ZAndrew LewmanCreate 3-minute training videos about TBBPeople will watch up to a 3 minute video about how Tor Browser works, how to use it, and what it does and does not provide. We should produce a high quality video about TBB for users to watch and learn.People will watch up to a 3 minute video about how Tor Browser works, how to use it, and what it does and does not provide. We should produce a high quality video about TBB for users to watch and learn.Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/5975please create a new Windows VM2012-05-29T02:40:47ZErinn Clarkplease create a new Windows VMWe have the extra licenses now, so setting up a new Windows VM from scratch would be extremely useful for build & testing purposes. How much space do we have available? I think 150gb would be ideal for this one as well. (And thanks for a...We have the extra licenses now, so setting up a new Windows VM from scratch would be extremely useful for build & testing purposes. How much space do we have available? I think 150gb would be ideal for this one as well. (And thanks for adding the extra space to the other one.)Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/5921Anonymous donation available?2020-06-13T01:13:23ZcypherpunksAnonymous donation available?Hello Tor folk!
I am wondering wether it is possible to donate anonymously to the Tor Project.
Could you please tell me how I can manage to give money to your organization without being tracked, especially when located in Europe.
Furt...Hello Tor folk!
I am wondering wether it is possible to donate anonymously to the Tor Project.
Could you please tell me how I can manage to give money to your organization without being tracked, especially when located in Europe.
Furthermore, is it helpful for you if people donate to torservers.net?
Thank you very much indeed for your attention!Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/5854No deb.torproject.org-keyring in Ubuntu Precise2020-06-13T02:46:02ZRuna SandvikNo deb.torproject.org-keyring in Ubuntu PreciseThe deb.torproject.org-keyring package is not in the list of packages for Ubuntu Precise, so you get a package-not-found error when you try to install it.The deb.torproject.org-keyring package is not in the list of packages for Ubuntu Precise, so you get a package-not-found error when you try to install it.Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/5843announce new tor-browser-bundle releases2012-05-23T00:38:53Zcypherpunksannounce new tor-browser-bundle releasesTor stable releases are announced on tor-announce [1].
Tor alpha releases are announced via tor-talk [2].
The recent security updates to TBB make clear that keeping the userbase informed about new releases especially on the client site ...Tor stable releases are announced on tor-announce [1].
Tor alpha releases are announced via tor-talk [2].
The recent security updates to TBB make clear that keeping the userbase informed about new releases especially on the client site is crucial for security and anonymity.
Therefore I would suggest to create torbrowser-announce.
I thinks a separate mailing-list is better because this reduces the noise for someone only trying to monitor new TBB releases while not being interested in general tor-talk.
TBB users are also informed via the default startpage, but not everyone uses the default page and in some cases the admins responsible for deploying updates don't use TBB themself (or read blog.tpo).
[1] https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-announce
[2] https://lists.torproject.org/pipermail/tor-talk/2012-April/024115.htmlAndrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/5794please allocate more disk space for the Linux VM2012-06-05T19:42:10ZErinn Clarkplease allocate more disk space for the Linux VMIn order to accommodate a separate alpha build tree and buildbot functionality, we need a lot more disk space allocated to the Linux build VM (dixie). Currently the building is done in /srv/build-trees, which I think has a somewhat idios...In order to accommodate a separate alpha build tree and buildbot functionality, we need a lot more disk space allocated to the Linux build VM (dixie). Currently the building is done in /srv/build-trees, which I think has a somewhat idiosyncratic setup (like, it may be mounted space, rather than space actually on the VM?) I don't know the details but in order to maintain consistency more space should be added there rather than having the size of the whole VM expanded. If I'm right, anyway.
I would like at least another 100gb.Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/5765please increase the frequency of the recommended-versions cron job update2012-05-04T17:06:46ZErinn Clarkplease increase the frequency of the recommended-versions cron job updateWe really need to have recommended-versions be updated basically immediately. It doesn't make any sense to keep two versions (one of which is not recommended) in the file until it is finally synced after an hour, just to make another com...We really need to have recommended-versions be updated basically immediately. It doesn't make any sense to keep two versions (one of which is not recommended) in the file until it is finally synced after an hour, just to make another commit later. This is also a problem if any mistakes are made in the file. It's a tiny file and I recommend syncing it every minute, but if that's too frequent for some reason, every 5 minutes is probably fine.Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/5751Standardize SOCKS extensions to support proxied DNS queries2020-06-13T01:08:39ZRobert RansomStandardize SOCKS extensions to support proxied DNS queriesTor supports anonymous DNS resolution through its SocksPort, but no application (except the `tor-resolve` utility shipped with Tor) uses that feature, probably because it's not an IETF standard. Perhaps that should be changed.
This wil...Tor supports anonymous DNS resolution through its SocksPort, but no application (except the `tor-resolve` utility shipped with Tor) uses that feature, probably because it's not an IETF standard. Perhaps that should be changed.
This will probably involve designing a new DNS-resolution SOCKS command and implementing it in Tor; Tor's current SOCKS commands are not likely to be accepted as a standard (even if they're renumbered) because they do not support most of DNS's new and interesting features.https://gitlab.torproject.org/legacy/trac/-/issues/5748reduce cache time on blog2012-05-04T16:56:49ZRoger Dingledinereduce cache time on blogThe blog still makes new posts unreadable for an hour.
The original reasoning for doing this was to reduce load on the blog.
Can we change it to 60 seconds? What exactly is the tradeoff here?
This issue came up again when trying to po...The blog still makes new posts unreadable for an hour.
The original reasoning for doing this was to reduce load on the blog.
Can we change it to 60 seconds? What exactly is the tradeoff here?
This issue came up again when trying to post about the latest Firefox security bug:
https://blog.torproject.org/blog/firefox-security-bug-proxy-bypass-current-tbbsAndrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/5717Offering new donation option: Paysafecard2012-05-08T17:14:22ZTracOffering new donation option: PaysafecardI would really appreciate if the Tor Project offered an option to donate via Paysafecard.
Paysafecard enables the donator to remain anonymous which is crucial for a lot of people. Without an anonymous and relatively easy way to donate, ...I would really appreciate if the Tor Project offered an option to donate via Paysafecard.
Paysafecard enables the donator to remain anonymous which is crucial for a lot of people. Without an anonymous and relatively easy way to donate, many people do not give money to the Tor Project due to their need for protecting their identities.
Please think about it. Other privacy-related services on the web already offer this donation option.
**Trac**:
**Username**: guiseppeAndrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/5714Create User Git Repositories for components I'm working on2012-05-01T13:54:28ZShondoit WalkerCreate User Git Repositories for components I'm working onThus far I've been using my own github page for sharing of patches/fixes/improvements for, mostly, torbrowser.
Now that I have an ldap account, I would like the following repo's to help keep everything in one place:
/user/shondoit/torbr...Thus far I've been using my own github page for sharing of patches/fixes/improvements for, mostly, torbrowser.
Now that I have an ldap account, I would like the following repo's to help keep everything in one place:
/user/shondoit/torbrowser.git
/user/shondoit/vidalia.git
/user/shondoit/tor.git
At least the first one.Andrew LewmanAndrew Lewman