Trac issueshttps://gitlab.torproject.org/legacy/trac/-/issues2020-06-13T17:35:15Zhttps://gitlab.torproject.org/legacy/trac/-/issues/31063GoodBad ISPs should move to community portal2020-06-13T17:35:15ZGusGoodBad ISPs should move to community portalNew relay operators shouldn't need to search in Trac to find Good/Bad providers.
We should move this page to the new community portal / relay operators section:
https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPsNew relay operators shouldn't need to search in Trac to find Good/Bad providers.
We should move this page to the new community portal / relay operators section:
https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPsWebsiteV3GusGushttps://gitlab.torproject.org/legacy/trac/-/issues/27132find Tor-friendly payment site2020-06-13T17:37:26Ztraumschulefind Tor-friendly payment siteFrom parent #11569
> it seems the clear next step is to find one not-totally-unusable payment site that doesn't hate Tor users, and drive all the traffic there.From parent #11569
> it seems the clear next step is to find one not-totally-unusable payment site that doesn't hate Tor users, and drive all the traffic there.WebsiteV3https://gitlab.torproject.org/legacy/trac/-/issues/22842Create a knowledge base that's more in-depth than FAQs2020-06-13T17:24:57ZTaylor YuCreate a knowledge base that's more in-depth than FAQsIt would be useful for visitors to our web pages to have access to content that:
* goes into more depth than a FAQ entry
* is more formal than a blog post
* is less comprehensive than a reference manual section
* is more stable than a wi...It would be useful for visitors to our web pages to have access to content that:
* goes into more depth than a FAQ entry
* is more formal than a blog post
* is less comprehensive than a reference manual section
* is more stable than a wiki page
These pages would form sort of a knowledge base or resource section.WebsiteV3HiroHirohttps://gitlab.torproject.org/legacy/trac/-/issues/22241Implement a proper wiki (just as Mozilla does)2020-06-13T17:24:43ZTracImplement a proper wiki (just as Mozilla does)Just an idea that I got: "Wiki" articles are available in trac, which makes it less likely to be seen https://trac.torproject.org/projects/tor/wiki/TitleIndex
Mozilla for example has its own wiki portal https://wiki.mozilla.org/Main_Pa...Just an idea that I got: "Wiki" articles are available in trac, which makes it less likely to be seen https://trac.torproject.org/projects/tor/wiki/TitleIndex
Mozilla for example has its own wiki portal https://wiki.mozilla.org/Main_Page (and it uses MediaWiki which makes it much more attractive, and has the look of a wiki)
(Of course, already existing articles may be ported to that new portal)
**Trac**:
**Username**: blockflareWebsiteV3HiroHirohttps://gitlab.torproject.org/legacy/trac/-/issues/22178Website redesign: Mirror list site2020-06-13T17:11:41ZSamdneyWebsite redesign: Mirror list siteFor the current site:
https://www.torproject.org/getinvolved/mirrors
it has to be discussed the following points for the future website:
1. Where should it live?
1. Content (the mirror list itself, Something else? What?)For the current site:
https://www.torproject.org/getinvolved/mirrors
it has to be discussed the following points for the future website:
1. Where should it live?
1. Content (the mirror list itself, Something else? What?)WebsiteV3https://gitlab.torproject.org/legacy/trac/-/issues/22076adjust text shown on screen based on size of text2020-06-13T17:24:37ZTracadjust text shown on screen based on size of textWhen viewing this web page I find I have to increase the size of text because I have poor vision.
If I use the control-+ to increase the text size, your web page forces me to scroll the window left to right to read lines of text.
Use t...When viewing this web page I find I have to increase the size of text because I have poor vision.
If I use the control-+ to increase the text size, your web page forces me to scroll the window left to right to read lines of text.
Use the method that wikipedia.com uses for displaying the screen.
wikipedia.com adjusts the text to fit within the displayed window by making lines shorter as text size increases and making lines longer as text size increases.
Go to wikipedia.com and view any entry. Then do a control-+ to increase text size and see what it does. Then do a control-- to reduce size of text and see what it does. NOTE: I am using Ubuntu 16.04 - hence my control-+ increases text size and control-- will decrease text size. I don't know what keys are used to do this with other operating systems.
Just an idea from a 71 year old with bad eyes.
**Trac**:
**Username**: efitteryWebsiteV3traumschuletraumschulehttps://gitlab.torproject.org/legacy/trac/-/issues/21178torproject.org submenus and page structures behave inconsistently2020-06-13T17:24:18ZLinda Leetorproject.org submenus and page structures behave inconsistentlyI've found some behavioral inconsistencies in torproject.org, which I think can confuse our visitors. It would be great if we could fix some of these things.
1. If you go to the "About Tor" page or the "Contact" pages, both are highlig...I've found some behavioral inconsistencies in torproject.org, which I think can confuse our visitors. It would be great if we could fix some of these things.
1. If you go to the "About Tor" page or the "Contact" pages, both are highlighted in the horizontal menu. (to view: https://www.torproject.org/about/overview.html.en)
2. About Tor > Projects leads to "Software and Services" (https://www.torproject.org/projects/projects.html.en). I think that this should be consistently named.
3. About Tor > Projects does does not redirect to a different page and has submenu items visible from the About Tor page. About Tor > Documentation and About Tor > Projects both do. My suggestion is to making Tor People redirect to a separate page with a separate vertical side menu, but also having the About Tor> Projects and About Tor > Documentation menus nested in the vertical menu on About Tor is also acceptable, as long as these side menus behave consistently.
4. Some pages are blank: https://www.torproject.org/docs/manual.html.en, https://www.torproject.org/docs/installguide.html.en. This is bad because it makes them look broken. I don't have a better idea of what to put here without restructuring the whole website contents, but I think at the very least it should not be blank.
5. You can browse to some pages that have different styling (go https://www.torproject.org/docs/documentation.html.en, click "Install Tor Browser" to get to https://www.torproject.org/projects/torbrowser.html.en), which really throws me off. It looks like it's a different site, or I've been redirected/scammed. I think there are other instances of this, but I can't recall every instance of where this happened.
6. This may not be too big of an issue, but the main menu (Tor Home About Tor Documentation Press Blog Contact) keeps the current tab highlighted if the user is in that tab (Press is highlighted on https://www.torproject.org/press/press.html.en), but this doesn't happen for the submenu (Download Volunteer Donate)--the volunteer page https://www.torproject.org/getinvolved/volunteer.html.en does not have volunteer highlighted.WebsiteV3HiroHirohttps://gitlab.torproject.org/legacy/trac/-/issues/20688OpenBSD missing from systems that 'work best' with relays2020-06-13T17:24:11ZTracOpenBSD missing from systems that 'work best' with relaysThe URL:
https://www.torproject.org/docs/tor-doc-relay.html.en#setup
states:
> You can run a Tor relay on pretty much any operating system. Tor relays work best on current distributions of Linux, FreeBSD, NetBSD, and Windows Server...The URL:
https://www.torproject.org/docs/tor-doc-relay.html.en#setup
states:
> You can run a Tor relay on pretty much any operating system. Tor relays work best on current distributions of Linux, FreeBSD, NetBSD, and Windows Server.
OpenBSD is notably missing from the list even though it provides a way to run a tor relay. Is there a reason for this?
**Trac**:
**Username**: mulanderWebsiteV3https://gitlab.torproject.org/legacy/trac/-/issues/19930web site menu needlessly jumps around2020-06-13T17:24:03ZTracweb site menu needlessly jumps aroundGo to a page like
https://www.torproject.org/docs/tor-hidden-service.html.en
Examine the menu on the left. Think of what you want to put your pointer on, and move your pointer there. *Because* your mouse-pointer is there, the location ...Go to a page like
https://www.torproject.org/docs/tor-hidden-service.html.en
Examine the menu on the left. Think of what you want to put your pointer on, and move your pointer there. *Because* your mouse-pointer is there, the location of things near it is different! Where you wanted to click changed because you tried to click. That's annoying, and it gives no new functionality. You may wish to emphasize what the user is going to select if they click, but there are better ways than changing the layout of the menu to do it.
I suggest making the text a different color. That's almost always safe, and it's what people expect.
**Trac**:
**Username**: chadmillerWebsiteV3cypherpunkscypherpunkshttps://gitlab.torproject.org/legacy/trac/-/issues/18695We should have a repository list that includes important external repositories2020-06-13T17:23:45ZNick MathewsonWe should have a repository list that includes important external repositoriesMany developers like using github or personal repository
Many developers' github repositories are nontrivial to find.
Let's index them on our website or wiki somewhere?Many developers like using github or personal repository
Many developers' github repositories are nontrivial to find.
Let's index them on our website or wiki somewhere?WebsiteV3cypherpunkscypherpunkshttps://gitlab.torproject.org/legacy/trac/-/issues/18245Collect different mocks for new site2020-06-13T17:23:35ZIsabela FernandesCollect different mocks for new siteThis ticket is for tracking different mocks proposed for torproject.org site based on the Berlin Dev Meeting 2015 discussion:
https://trac.torproject.org/projects/tor/wiki/Website/MainSiteRedesign
We will reach out to designers in the c...This ticket is for tracking different mocks proposed for torproject.org site based on the Berlin Dev Meeting 2015 discussion:
https://trac.torproject.org/projects/tor/wiki/Website/MainSiteRedesign
We will reach out to designers in the community and ask for their help.WebsiteV3Isabela FernandesIsabela Fernandeshttps://gitlab.torproject.org/legacy/trac/-/issues/18243Website redesign - Phase 12020-06-13T17:23:35ZIsabela FernandesWebsite redesign - Phase 1This is the master ticket created to track the efforts to implement a new site for Tor Project, based on the discussion done during Berlin Dev Meeting in Oct 2015:
https://trac.torproject.org/projects/tor/wiki/Website/MainSiteRedesign
Y...This is the master ticket created to track the efforts to implement a new site for Tor Project, based on the discussion done during Berlin Dev Meeting in Oct 2015:
https://trac.torproject.org/projects/tor/wiki/Website/MainSiteRedesign
You can find the other phases of the project and more information on the link above as well.
Phase 1:
* Content mapping
* Decide what to do with content we are moving out of the main site
* Start mocking how the new site will look like
* Test our mocks (get user research help)WebsiteV3Isabela FernandesIsabela Fernandeshttps://gitlab.torproject.org/legacy/trac/-/issues/17969Directory Listing. [https://torproject.org/]2020-06-13T17:23:30ZTracDirectory Listing. [https://torproject.org/]**A misconfigured server can show a directory listing, which could potentially yield sensitive information to an attacker.**
Read More at : http://cwe.mitre.org/data/definitions/548.html
and
https://www.owasp.org/index.php/OWASP_Period...**A misconfigured server can show a directory listing, which could potentially yield sensitive information to an attacker.**
Read More at : http://cwe.mitre.org/data/definitions/548.html
and
https://www.owasp.org/index.php/OWASP_Periodic_Table_of_Vulnerabilities_-_Directory_Indexing
The Website https://torproject.org have a Vulnerability of _Directory Listing_ Which may Loss Some Certain DATA and the Data may Loss to the Attacker.
Directory Listing is not Much Vulnerable But Information may Be loss and if the Attacker Try to Tunnel Some Directory so that Information May Leak to which is
Critical.
Exmaple :
https://torproject.org/js/
https://torproject.org/css/
https://torproject.org/docs/
https://torproject.org/images/
https://torproject.org/include/
This All are Visible to the Normal User which is not good fro the Respective Org.
The Hard-Work of Developer for Writing the CSS or JS is wasted.
Rather than That
https://torproject.org/cgi-bin/
https://torproject.org/server-status/
But if Attacker Try to tunnel this respective Websites he/she will be able to grab the Details of the Website.
It can Play Major Vulnerability and a normal Vulnerability to.
For Patching : The Developer just have to host a File to the Server Which is **.htaccess**
This File will Restrict all the Directory to a Normal User or a Web-Surfer and if Attacker try to Tunnel it he/she will Grab Nothing.
Please Patch it Soon.
ThankYou
Dhiraj Mishra.
**Trac**:
**Username**: DhirajWebsiteV3Sebastian HahnSebastian Hahnhttps://gitlab.torproject.org/legacy/trac/-/issues/17805The website should support "stable" and "oldstable" tor releases2020-06-13T17:23:27ZNick MathewsonThe website should support "stable" and "oldstable" tor releasesRight now we have "alpha" and "stable". But sometimes we want to have an extra stable listed as well.
No hurry on this one.Right now we have "alpha" and "stable". But sometimes we want to have an extra stable listed as well.
No hurry on this one.WebsiteV3cypherpunkscypherpunkshttps://gitlab.torproject.org/legacy/trac/-/issues/17669Old links to outdated versions of Tor Browser should redirect to a page with ...2020-06-13T17:23:23ZcypherpunksOld links to outdated versions of Tor Browser should redirect to a page with the latest version of Tor BrowserWhen I follow a link online to an old version of Tor Browser Bundle, e.g.
https://www.torproject.org/dist/torbrowser/3.6.6/torbrowser-install-3.6.6_en-US.exe
I receive a 404 message. Instead of displaying a default 404 page, a Tor Brow...When I follow a link online to an old version of Tor Browser Bundle, e.g.
https://www.torproject.org/dist/torbrowser/3.6.6/torbrowser-install-3.6.6_en-US.exe
I receive a 404 message. Instead of displaying a default 404 page, a Tor Browser specific 404 response should helpfully redirect users to the latest version of Tor Browser, either by providing a helpful message such as "Click here to download Tor Browser" or via a 301 redirect.WebsiteV3HiroHirohttps://gitlab.torproject.org/legacy/trac/-/issues/17413Usability of MacOS installation process2020-06-13T17:23:18ZcypherpunksUsability of MacOS installation processUsability of MacOS installation process
Consequence: User is unable to verify package signature
Steps to reproduce:
1. Download Tor browser
2. Go to https://www.torproject.org/docs/verifying-signatures.html.en for instructions.
3...Usability of MacOS installation process
Consequence: User is unable to verify package signature
Steps to reproduce:
1. Download Tor browser
2. Go to https://www.torproject.org/docs/verifying-signatures.html.en for instructions.
3. Read the block of text for MacOS and Linux.
4. Follow the link at the bottom of that section to:
https://www.gnupg.org/documentation/
5. Struggle with the information on that page.
6. Try to go to the SourceForge link there for GPG Mac download.
uBlock Origin blockade: uBlock Origin has prevented the following page from loading:http://macgpg.sourceforge.net/
Because of the following filter
| sourceforge.net^$other^ |
|-------------------------|
Found in: uBlock filters – Badware risks
7. Give up.
----
What should have happened:
Follow the GPGTools link at the top of the Tor page's Mac/Linux instruction block.
https://www.torproject.org/docs/verifying-signatures.html.en
----
Suggested fixes:
* Divide the MacOS instructions from the Linux instructions.
* Add numbers to the procedures... something like this, for the MacOS:
1. Download Tor Browser and save the signature.asc to your Desktop.
1. Download and install GPGTools.
1. Open a Terminal window (Terminal is in /Applications/Utilities or find it with search)
1. Paste the following into the terminal: [... ...]
...adding links appropriately in the procedure
* Use link colors to help people visually scan through the pages. Take advantage of the human tendency to skim over text and just read the bold, colored stuff:
-Use a color with better contrast against black (the green is wonderful but too dark for good contrast)
-Include more keywords in links
* Related installation issue that probably belongs somewhere else:
Opening the DMG and installing the Tor Browser: The application file shows a file modification date of Dec 31, 1999, so it's difficult to know whether the downloaded one is newer than one I have already.
No version number is in the file name.
Get Info (cmd-I) (which not every Mac user knows about) does show a version number, and it also shows the file has a creation date of Dec 31, 2000, which is before the mod date. The weird dates might cause version control issues but are also likely to worry people who see them.WebsiteV3traumschuletraumschulehttps://gitlab.torproject.org/legacy/trac/-/issues/17393Make the various javascript on Tor sites be LibreJS-compatible?2020-06-13T17:23:17ZRoger DingledineMake the various javascript on Tor sites be LibreJS-compatible?On reading https://www.gnu.org/software/repo-criteria.html (as pointed out on tor-talk), I came across "B0": "All code sent to the user's browser must be free software and labeled for LibreJS or other suitable free automatic license anal...On reading https://www.gnu.org/software/repo-criteria.html (as pointed out on tor-talk), I came across "B0": "All code sent to the user's browser must be free software and labeled for LibreJS or other suitable free automatic license analyzer".
I don't know anything about the politics behind libre JS or the like, but I know some of the Tor sites use JavaScript, and I also know we're not meaning to keep any of it non-free.
Is there some enthusiastic free software zealot out there who wants to inventory the javascript used on various Tor sites, and move us closer to labeling it all as free?WebsiteV3traumschuletraumschulehttps://gitlab.torproject.org/legacy/trac/-/issues/16576Add a 'community projects' list (separate page?) to the website2020-12-11T15:41:49ZRoger DingledineAdd a 'community projects' list (separate page?) to the websiteWe have a growing list of community projects -- projects that use Tor but have their own community / entity / something as well.
I'm thinking Ricochet, SecureDrop, Globaleaks, Whonix, Onion Browser, ChatSecure, HTTPS Everywhere, Onionsh...We have a growing list of community projects -- projects that use Tor but have their own community / entity / something as well.
I'm thinking Ricochet, SecureDrop, Globaleaks, Whonix, Onion Browser, ChatSecure, HTTPS Everywhere, Onionshare, pond, tor-ramdisk, Cupcake, Ahmia.
In the future we might list OnionBalance, OnionTip, Roster.
Since there are quite a few, we might list some at the top as 'highlighted community projects', and then the rest down below that.WebsiteV3traumschuletraumschulehttps://gitlab.torproject.org/legacy/trac/-/issues/16548Change the HS nomenclature from hidden to onion2020-06-13T17:23:05ZGriffin BoyceChange the HS nomenclature from hidden to onionAs discussed during the anonymous services meeting, we should change (or discuss changing) the nomenclature on the website to reflect [Syverson's Genuine Onion'' paper](https://www.nrl.navy.mil/itd/chacs/syverson-genuine-onion-simple-fas...As discussed during the anonymous services meeting, we should change (or discuss changing) the nomenclature on the website to reflect [Syverson's Genuine Onion'' paper](https://www.nrl.navy.mil/itd/chacs/syverson-genuine-onion-simple-fast-flexible-and-cheap-website-authentication).
Please do not make the mistake of grepping for Hidden and replacing it with Onion.WebsiteV3cypherpunkscypherpunkshttps://gitlab.torproject.org/legacy/trac/-/issues/16546Should we move anonbib to the Tor website?2020-06-13T17:23:04ZNick MathewsonShould we move anonbib to the Tor website?Right now, anonbib exists under freehaven auspices, and is not maintained by Tor.
"Not maintained" being the operative word.
Should we move it to a torproject url and try to pretty it up a bit?Right now, anonbib exists under freehaven auspices, and is not maintained by Tor.
"Not maintained" being the operative word.
Should we move it to a torproject url and try to pretty it up a bit?WebsiteV3cypherpunkscypherpunks