Trac issueshttps://gitlab.torproject.org/legacy/trac/-/issues2020-06-13T18:33:52Zhttps://gitlab.torproject.org/legacy/trac/-/issues/2758Proposal for modular transport spec2020-06-13T18:33:52ZRoger DingledineProposal for modular transport specWe're working on a pair of transport proxies for Tor that will make it harder to fingerprint by traffic content. We should generalize the way that Tor launches these proxies, and the way that we describe them in bridge address lines, so ...We're working on a pair of transport proxies for Tor that will make it harder to fingerprint by traffic content. We should generalize the way that Tor launches these proxies, and the way that we describe them in bridge address lines, so other people can make new proxies down the road and Tor will be able to handle them automatically.Deliverable-Mar2011Thomas BenjaminThomas Benjaminhttps://gitlab.torproject.org/legacy/trac/-/issues/2711status/clients-seen should answer even when uptime < 24 hours2020-06-13T14:09:21ZRoger Dingledinestatus/clients-seen should answer even when uptime < 24 hoursRight now Tor bridges only disclose clients-seen in their extra-info descriptors if the bridge has been up 24 hours, for privacy reasons. Fine.
But we also use the same algorithm for answering questions from the controller. The result i...Right now Tor bridges only disclose clients-seen in their extra-info descriptors if the bridge has been up 24 hours, for privacy reasons. Fine.
But we also use the same algorithm for answering questions from the controller. The result is that many bridge users who are actually serving clients are told that they have no users. This is the wrong feedback to give them.Deliverable-Mar2011https://gitlab.torproject.org/legacy/trac/-/issues/2692website css needs right-to-left support for arabic/farsi2020-06-13T17:18:59ZRoger Dingledinewebsite css needs right-to-left support for arabic/farsiBefore we can do #2274 or #2275, we need right-to-left support in our website ccs, and we need a way for the wml (and/or wmi) pages to specify that they want to use it.
Do we have support hidden in our css files already, or is this goin...Before we can do #2274 or #2275, we need right-to-left support in our website ccs, and we need a way for the wml (and/or wmi) pages to specify that they want to use it.
Do we have support hidden in our css files already, or is this going to be a big effort?Deliverable-Mar2011Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/2535Research task summaries and bibliography recommendations for Dan's class2020-06-13T17:49:42ZRoger DingledineResearch task summaries and bibliography recommendations for Dan's class[Not sure what component to put this in. I picked metrics, but maybe there should be a separate 'research' component.]
Dan Boneh is teaching a class next quarter on circumvention and anonymity. The students will break up into groups and...[Not sure what component to put this in. I picked metrics, but maybe there should be a separate 'research' component.]
Dan Boneh is teaching a class next quarter on circumvention and anonymity. The students will break up into groups and do research projects on various topics. We're writing up more detailed examples of some of the research topics (#2530, #2531), but we should put the whole list somewhere for posterity.
Also, he wanted to pick 15 to 20 papers to cover, and wanted some tips.Deliverable-Mar2011Roger DingledineRoger Dingledinehttps://gitlab.torproject.org/legacy/trac/-/issues/2531write up problem statement for bridge reachability testing via reflection2020-06-13T17:49:42ZRoger Dingledinewrite up problem statement for bridge reachability testing via reflectionDan Boneh is teaching a class next quarter on circumvention and anonymity. The students will break up into groups and do research projects on various topics. One of the topics I'd like him to cover is the "can we take advantage of existi...Dan Boneh is teaching a class next quarter on circumvention and anonymity. The students will break up into groups and do research projects on various topics. One of the topics I'd like him to cover is the "can we take advantage of existing resources in these countries to get those resources to covertly scan our bridges" question.
I should write up my preliminary thoughts and assumptions here in more detail.Deliverable-Mar2011Thomas BenjaminThomas Benjaminhttps://gitlab.torproject.org/legacy/trac/-/issues/2530write up problem statement for entropy-of-network analysis2020-06-13T17:49:41ZRoger Dingledinewrite up problem statement for entropy-of-network analysisDan Boneh is teaching a class next quarter on circumvention and anonymity. The students will break up into groups and do research projects on various topics. One of the topics I'd like him to cover is the "how much safety are we getting ...Dan Boneh is teaching a class next quarter on circumvention and anonymity. The students will break up into groups and do research projects on various topics. One of the topics I'd like him to cover is the "how much safety are we getting from the Tor network over time" question.Deliverable-Mar2011Karsten LoesingKarsten Loesinghttps://gitlab.torproject.org/legacy/trac/-/issues/2369Sponsor F phase one (May2011) deliverables2011-09-04T13:48:18ZRoger DingledineSponsor F phase one (May2011) deliverablesMaster ticket for all phase one (May 31 2011) SponsorF deliverables:
[org/sponsors/SponsorF](org/sponsors/SponsorF)
[org/sponsors/SponsorF/May2011](org/sponsors/SponsorF/May2011)
[[TicketQuery(parent=this)]]Master ticket for all phase one (May 31 2011) SponsorF deliverables:
[org/sponsors/SponsorF](org/sponsors/SponsorF)
[org/sponsors/SponsorF/May2011](org/sponsors/SponsorF/May2011)
[[TicketQuery(parent=this)]]Deliverable-Mar2011Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/2296Create a small document that explains who to contact for security stuff2020-06-13T01:02:55ZJacob AppelbaumCreate a small document that explains who to contact for security stuffWe need to collect a small set of email addresses, gpg keys, and other information about notification of security important related updates.
For Debian - we contact Peter
For Ubuntu - we contact Jacob
For OpenWRT - we contact Jacob
For ...We need to collect a small set of email addresses, gpg keys, and other information about notification of security important related updates.
For Debian - we contact Peter
For Ubuntu - we contact Jacob
For OpenWRT - we contact Jacob
For Android - we contact Nathan and Helix
For Windows - we contact Helix
For Redhat - we contact ???
For Gentoo - we contact ???
For other distros - do we want to to contact vendor-sec and call it a day?Deliverable-Mar2011Jacob AppelbaumJacob Appelbaumhttps://gitlab.torproject.org/legacy/trac/-/issues/2278For the deployed hardware routers, how do we update?2011-05-19T19:34:26ZAndrew LewmanFor the deployed hardware routers, how do we update?Figure out how to keep the deployed hardware routers updated with current openwrt, libraries, and tor software.
What do we do when the hardware vendor chosen in #2271 changes specifications or models altogether?
Do we need a thandy cli...Figure out how to keep the deployed hardware routers updated with current openwrt, libraries, and tor software.
What do we do when the hardware vendor chosen in #2271 changes specifications or models altogether?
Do we need a thandy client for openwrt to handle these updates?Deliverable-Mar2011Jacob AppelbaumJacob Appelbaumhttps://gitlab.torproject.org/legacy/trac/-/issues/2277Sponsor E Phase One Deliverables2011-10-25T18:23:21ZAndrew LewmanSponsor E Phase One DeliverablesMaster ticket for all Phase One deliverables.
[[TicketQuery(parent=this)]]Master ticket for all Phase One deliverables.
[[TicketQuery(parent=this)]]Deliverable-Mar2011Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/2276Ask hardware vendors if they'd like to help.2011-04-11T00:44:32ZAndrew LewmanAsk hardware vendors if they'd like to help.After finding a plausible hardware platform in #2271, ask the hardware vendor if they'd like to help with logistics, discounts, deployment, or other for our hardware tor router.After finding a plausible hardware platform in #2271, ask the hardware vendor if they'd like to help with logistics, discounts, deployment, or other for our hardware tor router.Deliverable-Mar2011Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/2275Persian translations updated2020-06-13T17:32:31ZAndrew LewmanPersian translations updatedFull translation of all materials, software documentation, and software interfaces into Persian/Farsi.Full translation of all materials, software documentation, and software interfaces into Persian/Farsi.Deliverable-Mar2011Runa SandvikRuna Sandvikhttps://gitlab.torproject.org/legacy/trac/-/issues/2274Arabic translations updated2020-06-13T17:32:30ZAndrew LewmanArabic translations updatedFull translation of all materials, software documentation, and interfaces into arabic.Full translation of all materials, software documentation, and interfaces into arabic.Deliverable-Mar2011Runa SandvikRuna Sandvikhttps://gitlab.torproject.org/legacy/trac/-/issues/2273Training materials and sessions for train the trainers.2011-04-11T00:42:57ZAndrew LewmanTraining materials and sessions for train the trainers.Create training materials and sessions for train the trainers. Pull from the educational materials in #2272. We should have enough material to fill 3 hours of training, from start to finish. It may need to cover how the Internet works...Create training materials and sessions for train the trainers. Pull from the educational materials in #2272. We should have enough material to fill 3 hours of training, from start to finish. It may need to cover how the Internet works at a basic level through basics of information security before getting to Tor.
Materials also need to include a mix of hands-on "try it for yourself" exercises.Deliverable-Mar2011Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/2272Tor materials for trainings2020-06-12T23:58:19ZAndrew LewmanTor materials for trainingsCreate, collate, produce educational materials about Internet censorship and using Tor for circumvention. These materials should work equally well via online access and in-person via conferences. Discussed materials are:
1. screencast...Create, collate, produce educational materials about Internet censorship and using Tor for circumvention. These materials should work equally well via online access and in-person via conferences. Discussed materials are:
1. screencasts of installing and configuring tor
1. video of a "tor talk"
1. collate tor presentations and docs into one master presentation
1. get professional artwork completed for all slides that need it
1. create animation that visually explains the concepts in the presentationDeliverable-Mar2011Andrew LewmanAndrew Lewmanhttps://gitlab.torproject.org/legacy/trac/-/issues/2271Determine needed specifications for hardware, test some real world selections2020-06-12T23:58:21ZAndrew LewmanDetermine needed specifications for hardware, test some real world selectionsDetermine which cpu, memory, and flash disk we want to have in a router. Order some samples and test the specs with whatever image comes from #2270.
We seem to be leaning towards the model here: [Buffalo WZR-HP-G300H](http://wiki.openw...Determine which cpu, memory, and flash disk we want to have in a router. Order some samples and test the specs with whatever image comes from #2270.
We seem to be leaning towards the model here: [Buffalo WZR-HP-G300H](http://wiki.openwrt.org/toh/buffalo/wzr-hp-g300h)
Questions to consider include:
1. how much bandwidth can we realistically push with this device? 1mbps? 2mbps? 10mbps?
1. how much cpu is needed for the openssl crypto?
1. what happens if the device is run at 100% cpu due to crypto for hours?
1. how much cpu does a tor bridge consume at 1mbps? 5 mbps? 10 mbps?
1. how much ram does a tor bridge consume at 1mbps? 5 mbps? 10 mbps?
1. if we have a management gui, how much ram does it take?
1. do we allow remote Vidalia to connect to the tor process to get circuits and the rest of the vidalia features as a client for the transparent tor proxy?Deliverable-Mar2011Jacob AppelbaumJacob Appelbaumhttps://gitlab.torproject.org/legacy/trac/-/issues/2270Figure out the OpenWRT image for the hardware router.2020-06-12T23:58:16ZAndrew LewmanFigure out the OpenWRT image for the hardware router.Figure out the necessary openwrt set of components and libraries. Figure out the necessary Tor client, tor bridge, and config for a transparent tor proxy.Figure out the necessary openwrt set of components and libraries. Figure out the necessary Tor client, tor bridge, and config for a transparent tor proxy.Deliverable-Mar2011Jacob AppelbaumJacob Appelbaumhttps://gitlab.torproject.org/legacy/trac/-/issues/2023please provision a server/VM for Thandy testing2010-10-27T20:52:23ZErinn Clarkplease provision a server/VM for Thandy testingWe're going to start working on Thandy (https://trac.torproject.org/projects/tor/wiki/projects/Thandy) and need a server to begin testing distribution, roles, and other such things. Having a URL like thandy-test.torproject.org would be g...We're going to start working on Thandy (https://trac.torproject.org/projects/tor/wiki/projects/Thandy) and need a server to begin testing distribution, roles, and other such things. Having a URL like thandy-test.torproject.org would be good too.
Some requirements:
* three separate accounts: one for timestamping, one for me to use and upload stuff, and one to run the webserver. I'll suggest these as names: thandy-admin, thandy-upload, and thandy-www. Maybe someone (Nick) will have better suggestions.
* admin-level permissions for Sebastian and I to be able to change server configuration. For this reason it might be better to have a separate VM dedicated to Thandy stuff, though given the currently minimal resource requirements, it could be a pretty small one.
* ability to serve stuff over http/https.
Thanks!Deliverable-Mar2011weasel (Peter Palfrader)weasel (Peter Palfrader)https://gitlab.torproject.org/legacy/trac/-/issues/1875Automate Orbot builds2013-10-16T18:54:20ZErinn ClarkAutomate Orbot buildsOrbot builds are currently done by hand. The process is pretty simple, so it ought to be easy to automate. Nathan might have some ideas of things he wants added to this, so I'm adding him to the cc.Orbot builds are currently done by hand. The process is pretty simple, so it ought to be easy to automate. Nathan might have some ideas of things he wants added to this, so I'm adding him to the cc.Deliverable-Mar2011Nathan FreitasNathan Freitashttps://gitlab.torproject.org/legacy/trac/-/issues/1853Develop bridge image for the cloud2012-02-28T00:21:11ZRoger DingledineDevelop bridge image for the cloudWhen we first started working on the bridge design, we were thinking to ourselves "we should get lots of bridges, so China can't block them all." That was wrong. Instead we should be thinking "we should make sure the rate of getting new ...When we first started working on the bridge design, we were thinking to ourselves "we should get lots of bridges, so China can't block them all." That was wrong. Instead we should be thinking "we should make sure the rate of getting new bridge addresses exceeds the rate that China can block them." The key resource that bridges need is changeable IP addresses. So we should experiment with easy-to-set-up images for the cloud, so people can pop up a bridge, and then discard it once it gets blocked.
Step one is to set up a bridge on the cloud (say, Amazon) and run it for a little while, to make sure there aren't any stupid things making this harder than it sounds.
Step two is to learn more about the pricing structures: is baseline time cheap but bandwidth is expensive? Or CPU? Etc. How much money are we talking here, for a variety of bridge scenarios? Evaluate a variety of cloud providers.
Step three, investigate programmatic "get new IP address" cloud functions we can use. In the future (e.g. #1851 or others), bridges will be able to automatically discover that they need a new IP address. The crude approach would be to abandon the bridge image and start up another one next door. The better approach would be to teach Tor how to press the "new IP address please" button on its host.
Step four is to learn more about automation. What are the steps for making it so you can tell other people "just launch image Z and you'll be running a bridge"? Do these steps and make it so.
Step five is to write the howto for groups like RFA who want to ask people to run bridges for them. Make sure to resolve usability pieces like "should my bridges publish in bridgedb or not".Deliverable-Mar2011