Trac issueshttps://gitlab.torproject.org/legacy/trac/-/issues2013-10-24T01:50:00Zhttps://gitlab.torproject.org/legacy/trac/-/issues/6008Improve software assurance2013-10-24T01:50:00ZAndrew LewmanImprove software assuranceImproving software assurance through repeatable builds across all operating systems and verifiable build system security. Without getting into endless black holes (see http://cm.bell-labs.com/who/ken/trust.html), we should be able to doc...Improving software assurance through repeatable builds across all operating systems and verifiable build system security. Without getting into endless black holes (see http://cm.bell-labs.com/who/ken/trust.html), we should be able to document how our software was built and others should be able to repeat the exact same steps and build the exact same binaries. The binaries should be verifiable through some hash algorithm or forensic analysis of the resulting binaries.
This goes towards improving our build integrity and build security once others can independently verify the binaries.Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/6921Write the script/story board for this video2013-10-24T01:52:36ZAndrew LewmanWrite the script/story board for this videoWrite the script/story board for this videoWrite the script/story board for this videohttps://gitlab.torproject.org/legacy/trac/-/issues/5990Create 3-minute training video about TIMBB2013-10-24T01:53:01ZAndrew LewmanCreate 3-minute training video about TIMBBPeople will watch up to a 3 minute video about how Tor Instant Messaging Browser works, how to use it, and what it does and does not provide. We should produce a high quality video about TIMBB for users to watch and learn.People will watch up to a 3 minute video about how Tor Instant Messaging Browser works, how to use it, and what it does and does not provide. We should produce a high quality video about TIMBB for users to watch and learn.Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/7641Grant access to rt for aagbsn2013-10-24T12:28:01ZAaron GibsonGrant access to rt for aagbsnSometimes I reply to support emails that end up on tor-assistants.
Andrew says "don't do that, use rt"
Please give me access to rt.Sometimes I reply to support emails that end up on tor-assistants.
Andrew says "don't do that, use rt"
Please give me access to rt.https://gitlab.torproject.org/legacy/trac/-/issues/3859upgrade trac to 0.122014-01-20T09:24:59ZErinn Clarkupgrade trac to 0.12Debian finally upgraded the version of Trac it has available to 0.12! We should figure out how to upgrade and migrate everything and do it soon. If this is a complex thing, this can be the parent ticket.
http://bugs.debian.org/cgi-bin/p...Debian finally upgraded the version of Trac it has available to 0.12! We should figure out how to upgrade and migrate everything and do it soon. If this is a complex thing, this can be the parent ticket.
http://bugs.debian.org/cgi-bin/pkgreport.cgi?pkg=trac;dist=unstablehttps://gitlab.torproject.org/legacy/trac/-/issues/6911final report for SponsorI2014-02-18T23:38:35ZAndrew Lewmanfinal report for SponsorIWrite the final project report for SponsorI. Due 30 June 2013.Write the final project report for SponsorI. Due 30 June 2013.https://gitlab.torproject.org/legacy/trac/-/issues/6927Publish results of a usability study of the Tor Browser2014-02-18T23:41:35ZAndrew LewmanPublish results of a usability study of the Tor BrowserPublish results of a usability study of the Tor BrowserPublish results of a usability study of the Tor Browserhttps://gitlab.torproject.org/legacy/trac/-/issues/6928Publish results of a usability study of Tails2014-02-18T23:41:54ZAndrew LewmanPublish results of a usability study of TailsPublish results of a usability study of TailsPublish results of a usability study of Tailshttps://gitlab.torproject.org/legacy/trac/-/issues/6929Schedule a hackfest in the US.2014-02-18T23:42:02ZAndrew LewmanSchedule a hackfest in the US.Schedule a journalist hackfest in the US.Schedule a journalist hackfest in the US.https://gitlab.torproject.org/legacy/trac/-/issues/6930Work with partners to determine target areas.2014-02-18T23:42:10ZAndrew LewmanWork with partners to determine target areas.Work with partners to determine target areas.Work with partners to determine target areas.https://gitlab.torproject.org/legacy/trac/-/issues/6931Deploy tools to target areas.2014-02-18T23:42:19ZAndrew LewmanDeploy tools to target areas.Deploy tools to target areas.Deploy tools to target areas.https://gitlab.torproject.org/legacy/trac/-/issues/6890Work with the Tails team to identify bugs needing bounties2014-02-18T23:43:00ZAndrew LewmanWork with the Tails team to identify bugs needing bountiesWork with the Tails team to identify bugs needing bounties. The tails team has a number of bugs they want to fix in various programs on which they rely. Create a bug bounty program and start getting these bugs resolved.Work with the Tails team to identify bugs needing bounties. The tails team has a number of bugs they want to fix in various programs on which they rely. Create a bug bounty program and start getting these bugs resolved.https://gitlab.torproject.org/legacy/trac/-/issues/6925Conduct a usability study of Tails2014-02-18T23:43:33ZAndrew LewmanConduct a usability study of TailsConduct a usability study of TailsConduct a usability study of Tailshttps://gitlab.torproject.org/legacy/trac/-/issues/8074Research making Tor-logo webcam bandaids2014-02-25T17:56:43ZRoger DingledineResearch making Tor-logo webcam bandaidsRight now we give out Tor stickers designed for the back of your laptop. Everybody in the world needs a smaller bandaid-form-factor Tor sticker to go on the front of your laptop, at the top where the little spy device is.
How hard / exp...Right now we give out Tor stickers designed for the back of your laptop. Everybody in the world needs a smaller bandaid-form-factor Tor sticker to go on the front of your laptop, at the top where the little spy device is.
How hard / expensive would it be to make good quality stickers?
(Idea came from a nice fellow in NYC that I met at the Access awards night.)KelleyKelleyhttps://gitlab.torproject.org/legacy/trac/-/issues/6920write the storyboard/script for this video2014-09-11T15:01:28ZAndrew Lewmanwrite the storyboard/script for this videoKelleyKelleyhttps://gitlab.torproject.org/legacy/trac/-/issues/5989Create 3-minute training videos about TBB2014-09-11T15:01:44ZAndrew LewmanCreate 3-minute training videos about TBBPeople will watch up to a 3 minute video about how Tor Browser works, how to use it, and what it does and does not provide. We should produce a high quality video about TBB for users to watch and learn.People will watch up to a 3 minute video about how Tor Browser works, how to use it, and what it does and does not provide. We should produce a high quality video about TBB for users to watch and learn.Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/5176setup tor-check git repo2014-11-15T09:18:30ZAndrew Lewmansetup tor-check git repoPlease setup a new tor-check git repo on git.tpo. aabgsn, andrew, and arma need commit privs as a start.
Thanks.Please setup a new tor-check git repo on git.tpo. aabgsn, andrew, and arma need commit privs as a start.
Thanks.Sebastian HahnSebastian Hahnhttps://gitlab.torproject.org/legacy/trac/-/issues/7056Proposal: Produce Tor Expert Packages and Tails.2015-05-28T03:11:41ZcypherpunksProposal: Produce Tor Expert Packages and Tails.I was introduced to Tor at [TechCamp Zanzibar](http://wiki.techcampglobal.org/#TechCamp_Zanzibar_October_2_-_3) by Karen. I spent the past two days of travel engorging all that is Tor. I had a phone call with Andrew as well. I am unclear...I was introduced to Tor at [TechCamp Zanzibar](http://wiki.techcampglobal.org/#TechCamp_Zanzibar_October_2_-_3) by Karen. I spent the past two days of travel engorging all that is Tor. I had a phone call with Andrew as well. I am unclear where in the world Andrew resides, but he was very professional about my call at what was likely very early in the morning on a week end. Here are my impressions as a successful entrepreneur looking at advanced technology which is equivalent to magic for most of the world.
I installed Tor Browser on my macbook and started to use it. I read through the documentation, once I found it. It appears to be using Tor Browser on your main system is fraught with peril. In fact, couple the NOScript usability issues with the scary warnings about downloading something and Tor Browser on your main system seems wholly illogical and unsafe to use. I removed Tor Browser.
You work with the Tails project. I propose using Tor on anything BUT at dedicated anonymity machine is unsafe. It should only be used inside Tails. The Tor Project should only produce the Tor expert bundles and the Tails operating system. Anything else is putting users at risk. The Tor Expert package is solely for those experts who understand how to use Tor, configure the bits, and understand their risks. This set of people encompasses users who think they know all of this too.
The Tails operating system is based on Debian linux. It should be said that this operating system is a tool. It is not a general purpose operating system for everyone. It works fantastically inside parallels on my macbook. I suggest shipping Tails as the default download.
This proposal allows Tor to continue to focus on its core products:
1. Research and academic output.
2. The core Tor software.
3. The Tails Operating System.
4. Education of the world on the previous three products.
These four products are all Tor should be building. Everything else is secondary to the project and a distraction.
I have reviewed the [Tor Projects](https://www.torproject.org/projects/projects.html.en) page and discovered you are distracted from your core goal. Andrew explained how many of these products are related to the core tor research. He is wrong and making excuses. And he knows it. The Tor Project has too few people according to your core people page, doing too many things. I strongly suggest you hire a true Product Manager to make these decisions. Sell all of these useless products to some other company and focus on the four products above.
Good day.https://gitlab.torproject.org/legacy/trac/-/issues/6011Write up proposal outline for build security2015-05-28T03:28:46ZMike PerryWrite up proposal outline for build security#3688 is probably just the start of getting our build security where it needs to be, and even that may require a lot of baby steps before the solution is realized.
Once that's done, we should create a build and update deployment process...#3688 is probably just the start of getting our build security where it needs to be, and even that may require a lot of baby steps before the solution is realized.
Once that's done, we should create a build and update deployment process that is akin to the Tor dirauth consensus process: N independent machines creating identical builds and detached signatures, and the build only gets published if all manage to agree.
It will also be a lot of work even to get to a manual version of this process. We should figure out how to break the plan into more baby steps and write funding proposal(s) for them.
The ultimate goal should be to get full funding to deploy our autoupdater with this multi-key validation process so that other organizations can use it. That will require even more funding and work.Mike PerryMike Perryhttps://gitlab.torproject.org/legacy/trac/-/issues/7274Create a number of 3-5 minute videos2015-05-28T03:31:09ZRuna SandvikCreate a number of 3-5 minute videosOne of our deliverables for [Sponsor L](https://trac.torproject.org/projects/tor/wiki/org/sponsors/SponsorL) is to create a number of short videos to portray the documentation we have on our website.One of our deliverables for [Sponsor L](https://trac.torproject.org/projects/tor/wiki/org/sponsors/SponsorL) is to create a number of short videos to portray the documentation we have on our website.