Trac issueshttps://gitlab.torproject.org/legacy/trac/-/issues2020-06-13T18:22:07Zhttps://gitlab.torproject.org/legacy/trac/-/issues/34151Readme needs update2020-06-13T18:22:07ZHashikDReadme needs updateFor testing, according to ReadMe.md...
''Unit testing with Jasmine are available with: npm install npm test
To run locally, start an HTTP server in build/ and navigate to /embed.html''
_npm run build_ needs to be a prerequisite before...For testing, according to ReadMe.md...
''Unit testing with Jasmine are available with: npm install npm test
To run locally, start an HTTP server in build/ and navigate to /embed.html''
_npm run build_ needs to be a prerequisite before starting the server and navigating to /embed.html.HashikDHashikDhttps://gitlab.torproject.org/legacy/trac/-/issues/34120Pluggable Transport Versus Bridge2020-06-16T01:12:55ZTracPluggable Transport Versus BridgeIn the Tor preferences>Tor, it states that one can select a Bridge. If so done, then the first option is to "Select a built-in bridge". However, it doesn't. It actually selects a pluggable transport.
Pluggable transports use bridges,...In the Tor preferences>Tor, it states that one can select a Bridge. If so done, then the first option is to "Select a built-in bridge". However, it doesn't. It actually selects a pluggable transport.
Pluggable transports use bridges, but they are not bridges.
Recommend rewording to be more accurate.
**Trac**:
**Username**: TormanToohttps://gitlab.torproject.org/legacy/trac/-/issues/33869update spreadsheet after migrations2020-06-13T17:01:38Zanarcatupdate spreadsheet after migrationsi just updated the docs for this, but not before i migrated a bunch of machines without updating the spreadsheet, which is probably missing a bunch of hosts in the gnt-fsn cluster now.i just updated the docs for this, but not before i migrated a bunch of machines without updating the spreadsheet, which is probably missing a bunch of hosts in the gnt-fsn cluster now.anarcatanarcathttps://gitlab.torproject.org/legacy/trac/-/issues/33787T-shirts for volunteers should be substituted, or supplemented, with socks2020-06-13T17:37:32ZTracT-shirts for volunteers should be substituted, or supplemented, with socksNote: this ticket was created on April 1, it's probably a joke
The community team should consider awarding volunteers with socks instead of t-shirts. Socks are much better for at least 3 reasons:
1. They are a symbolic reference to SOC...Note: this ticket was created on April 1, it's probably a joke
The community team should consider awarding volunteers with socks instead of t-shirts. Socks are much better for at least 3 reasons:
1. They are a symbolic reference to SOCKS (obviously)
2. They can be worn in a much more clandestine fashion, which corresponds to the way Tor users browse the internet
3. They are smaller, so easier to transport (and cheaper)
They could be provided in various colour, like t-shirts are now - classic black, Tor green and Tor purple, all with Tor onion logo, would be solid choices.
I suggest providing them in sets of two pairs (4 individual sock pieces) to represent SOCKS4a. Better yet, they could be provided as 5 individual sock pieces in order to represent SOCKS5 and as a workaround to the common and dreaded missing sock problem. It could also be considered to provide them as three pairs (6 individual sock pieces, possibly each pair in different colour) in anticipation of a breakthrough in SOCKS technology and the introduction of SOCKS6.
**Trac**:
**Username**: umGusGushttps://gitlab.torproject.org/legacy/trac/-/issues/33520'hacking Tor' web page has a few problems2020-06-16T01:11:29ZTrac'hacking Tor' web page has a few problemsThe page https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Hacking#WaystoBuildTorBrowser for building just the browser has a couple of problems.
The first is that the origin/Master branch doesn't build using those instructi...The page https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Hacking#WaystoBuildTorBrowser for building just the browser has a couple of problems.
The first is that the origin/Master branch doesn't build using those instructions. The 'mach configure' line's first option throws an error. Remove that option and you get ValueError in build/moz.configure/init.configure split-triplet.
I went to branch tor-browser-68.5.0esr-9.5-1 and these went away. The page should point people to either 'oldest branch that builds' or just say use the latest if you're going to hack.
With this version, the steps are good except it misses one. It says that tor-launcher needs to be in browser/extensions. It doesn't say that torbutton needs to be in toolkit/torproject.
I know they are small, but they might save someone else some time.
**Trac**:
**Username**: drjohnson1984https://gitlab.torproject.org/legacy/trac/-/issues/33287Bug on Tor for Android on bridge settings2020-06-16T01:11:11ZTracBug on Tor for Android on bridge settingsOn the Tor Browser for Android, when setting the bridges settings a bug occurs: it does not save the ip address of the bridge.
Screen recording available:
https://youtu.be/Do_HPaS9mrY
Device Information:
Model: moto g7 plus
Android ver...On the Tor Browser for Android, when setting the bridges settings a bug occurs: it does not save the ip address of the bridge.
Screen recording available:
https://youtu.be/Do_HPaS9mrY
Device Information:
Model: moto g7 plus
Android version: 10
**Trac**:
**Username**: angrilymushroomhttps://gitlab.torproject.org/legacy/trac/-/issues/33274Switch from YAML to YAML::XS in tools/update-responses/update_responses2020-06-16T01:25:59ZboklmSwitch from YAML to YAML::XS in tools/update-responses/update_responsesIn the script `tools/update-responses/update_responses` we use the `YAML` perl module. However on https://metacpan.org/pod/YAML we can read:
If you want robust and fast YAML processing using the normal Dump/Load API, please consider sw...In the script `tools/update-responses/update_responses` we use the `YAML` perl module. However on https://metacpan.org/pod/YAML we can read:
If you want robust and fast YAML processing using the normal Dump/Load API, please consider switching to YAML::XS. It is by far the best Perl module for YAML at this time.
So we should probably switch to `YAML::XS`. We are already using `YAML::XS` in rbm.https://gitlab.torproject.org/legacy/trac/-/issues/33202Update Tor Browser for Android's Google Play description2020-06-16T01:11:07ZTracUpdate Tor Browser for Android's Google Play descriptionTBA's Google Play description still has the sentence: "Give before the end of 2019, and Mozilla will match your gift: https://donate.torproject.org/donate/donate-tbi-gp".
This should be updated.
**Trac**:
**Username**: PROTechThorTBA's Google Play description still has the sentence: "Give before the end of 2019, and Mozilla will match your gift: https://donate.torproject.org/donate/donate-tbi-gp".
This should be updated.
**Trac**:
**Username**: PROTechThorhttps://gitlab.torproject.org/legacy/trac/-/issues/33069Init sk if loaded from service blob to be on the curve2020-06-13T15:50:24ZTracInit sk if loaded from service blob to be on the curvediff --git a/src/feature/hs/hs_service.c b/src/feature/hs/hs_service.c
index 81b37eab4..300fedc4f 100644
--- a/src/feature/hs/hs_service.c
+++ b/src/feature/hs/hs_service.c
@@ -3548,6 +3548,12 @@ hs_service_add_ephemeral(ed25519_secret_k...diff --git a/src/feature/hs/hs_service.c b/src/feature/hs/hs_service.c
index 81b37eab4..300fedc4f 100644
--- a/src/feature/hs/hs_service.c
+++ b/src/feature/hs/hs_service.c
@@ -3548,6 +3548,12 @@ hs_service_add_ephemeral(ed25519_secret_key_t *sk, smartlist_t *ports,
/* Handle the keys. */
memcpy(&service->keys.identity_sk, sk, sizeof(service->keys.identity_sk));
+
+ /* QAD make sure the scalar is on the curve since ed25519_donna_pubkey will probably return 0 */
+ service->keys.identity_sk[0] &= 248;
+ service->keys.identity_sk[31] &= 127;
+ service->keys.identity_sk[31] |= 64;
+
if (ed25519_public_key_generate(&service->keys.identity_pk,
&service->keys.identity_sk) < 0) {
log_warn(LD_CONFIG, "Unable to generate ed25519 public key"
**Trac**:
**Username**: saibatoTor: 0.4.3.x-finalhttps://gitlab.torproject.org/legacy/trac/-/issues/33059Adds "quit" besides "new identity" in Tor Browser mobile notification2020-06-16T01:10:54ZTracAdds "quit" besides "new identity" in Tor Browser mobile notificationAll in the title
**Trac**:
**Username**: uhdvAll in the title
**Trac**:
**Username**: uhdvhttps://gitlab.torproject.org/legacy/trac/-/issues/33044Outreachy internship timeline2020-06-13T17:36:50ZTracOutreachy internship timelineI'm rearranging the timeline of my Outreachy internship, keeping tracking of what's been done so far and upcoming tasks.
**Month 1 (Dec 3 to Jan 3):**
- Resolved about 250 frontdesk tickets, not counting those marked as spam.
- https...I'm rearranging the timeline of my Outreachy internship, keeping tracking of what's been done so far and upcoming tasks.
**Month 1 (Dec 3 to Jan 3):**
- Resolved about 250 frontdesk tickets, not counting those marked as spam.
- https://github.com/torproject/lego/pull/13
- Opened a new ticket based on user feedback: https://trac.torproject.org/projects/tor/ticket/32853
- Wrote the December 2019 feedback report: https://lists.torproject.org/pipermail/tor-project/2020-January/002645.html
**Month 2 (Jan 4 to Feb 4):**
- Resolved about 30 new frontdesk tickets, not counting those marked as spam.
- Closed some old unassigned open frontdesk tickets.
- The frontdesk queue has been reduced from 320 to 40 tickets.
- Worked on the Tor Mobile manual: https://github.com/torproject/manual/pull/58
- Created new issue based on user feedback: https://dip.torproject.org/torproject/web/tpo/issues/56
**Trac**:
**Username**: PROTechThorhttps://gitlab.torproject.org/legacy/trac/-/issues/32972Chutney doesn't remove temporary files after processing warnings2020-06-13T13:31:18ZoparaChutney doesn't remove temporary files after processing warningsWhen the Chutney test-network script ends, it displays warnings from the tor logs. It summarizes/filters them in the `show_warnings()` function in `tools/warnings.sh`. This function creates two files with `LOGS=$(mktemp)` and `FILTERED_L...When the Chutney test-network script ends, it displays warnings from the tor logs. It summarizes/filters them in the `show_warnings()` function in `tools/warnings.sh`. This function creates two files with `LOGS=$(mktemp)` and `FILTERED_LOGS=$(mktemp)` but never deletes them when it's done.
The proposal is to add `rm "${LOGS}" "${FILTERED_LOGS}"` at the end of the function.https://gitlab.torproject.org/legacy/trac/-/issues/32859Tor man docs missing DoS log example2020-06-13T15:49:39ZTracTor man docs missing DoS log exampleIn "DENIAL OF SERVICE MITIGATION OPTIONS" man section, there is:
"If any of the DoS mitigations are enabled, a heartbeat message will appear in your log at NOTICE level which looks like:
DoS mitigation since startup: 429042 circuits re...In "DENIAL OF SERVICE MITIGATION OPTIONS" man section, there is:
"If any of the DoS mitigations are enabled, a heartbeat message will appear in your log at NOTICE level which looks like:
DoS mitigation since startup: 429042 circuits rejected, 17 marked addresses.
2238 connections closed. 8052 single hop clients refused.
The following options are useful only for a public relay. They control the Denial of Service mitigation subsystem described above."
However, Tor daemon actually logs:
"DoS mitigation since startup: **__x circuits killed with too many cells__**. y circuits rejected, z marked addresses. m connections closed. n single hop clients refused."
I propose:
1. adding log examples for each of the 3 log mitigation options, in their sections.
This perhaps will make more clear what "too many cells" means, as there seem to be no other documentation sources regarding this.
2. adding the **"x circuits killed with too many cells" **in the final log example.
**Trac**:
**Username**: JoeBeeezTor: unspecifiedDamian JohnsonDamian Johnsonhttps://gitlab.torproject.org/legacy/trac/-/issues/32589Update the logos of Firefox and Chrome in https://snowflake.torproject.org/2020-06-13T18:21:17ZcypherpunksUpdate the logos of Firefox and Chrome in https://snowflake.torproject.org/https://gitlab.torproject.org/legacy/trac/-/issues/31949Broken links in support page faqs2020-06-13T17:12:33ZTracBroken links in support page faqsAt https://support.torproject.org/, the "Edit this page" links under "Most Frequently Asked Questions" doesn't work.
**Trac**:
**Username**: PROTechThorAt https://support.torproject.org/, the "Edit this page" links under "Most Frequently Asked Questions" doesn't work.
**Trac**:
**Username**: PROTechThorHiroHirohttps://gitlab.torproject.org/legacy/trac/-/issues/31791disable alt key toggling the menu bar2020-06-16T01:07:38ZThorindisable alt key toggling the menu barFollowing the discussion at https://trac.torproject.org/projects/tor/ticket/31512#comment:10 where I suspect changes to the inner window are happening. Of the plethora of things that can alter the inner window measurements....
`ui.key.m...Following the discussion at https://trac.torproject.org/projects/tor/ticket/31512#comment:10 where I suspect changes to the inner window are happening. Of the plethora of things that can alter the inner window measurements....
`ui.key.menuAccessKey` = `0` will disable the alt key toggling the menu bar on and off
Letterboxing solves this issue, but it can also be very annoying if your letterboxed height keeps jumping sizes. It's not the only thing that can alter your height, but it is something that users can inadvertently trigger (I have fat thumbs, 10 of them, and it really annoys me: hence I set this myself in Firefox)
I'll leave it up to you. If the threat is mitigated, then why remove functionality. Feel free to close... or action ...https://gitlab.torproject.org/legacy/trac/-/issues/31739TBB 9.0a6 Issues with Cloudflare2020-06-16T01:07:30ZcypherpunksTBB 9.0a6 Issues with CloudflareUA has changed again so Cloudflare will likely need to be pinged. alt-svc no longer redirects to their transparent onions, and reCAPTCHA returns consistently on ESR68.UA has changed again so Cloudflare will likely need to be pinged. alt-svc no longer redirects to their transparent onions, and reCAPTCHA returns consistently on ESR68.https://gitlab.torproject.org/legacy/trac/-/issues/31685Snowflake : ON/OFF switch2020-06-13T18:21:01ZcypherpunksSnowflake : ON/OFF switchThe ON/OFF switch is not user friendly,
Maybe change the "Turn on" by "State : off" & "Turn off" by "State : on" ?
Or just setup a static string with "State" ?
Thanks
G.The ON/OFF switch is not user friendly,
Maybe change the "Turn on" by "State : off" & "Turn off" by "State : on" ?
Or just setup a static string with "State" ?
Thanks
G.https://gitlab.torproject.org/legacy/trac/-/issues/31585start-tor-browser.desktop KConfigIni Invalid entry2019-09-02T07:05:25ZTracstart-tor-browser.desktop KConfigIni Invalid entryAccording to freedesktop.org specs, among the characters that must be escaped is the backslash '\'. Line 32 of tor .desktop is a continuation of line 31. The Exec=sh.. command contains a '\' to continue the command on the next line. That...According to freedesktop.org specs, among the characters that must be escaped is the backslash '\'. Line 32 of tor .desktop is a continuation of line 31. The Exec=sh.. command contains a '\' to continue the command on the next line. That backslash at the end of line 31 must escaped with a second backslash. KConfigIni flags line 32 as Invalid, missing =.
```
Fix: \ --> \\
```
**Trac**:
**Username**: Psnarfhttps://gitlab.torproject.org/legacy/trac/-/issues/31581KDE Desktop file error2020-06-16T01:25:40ZTracKDE Desktop file errorThe freedesktop spec for .desktop files requires the '\' char be escaped. In your desktop file, the Exec= command contains a continuation char with the rest of the command on the next line. Kwinini flags that as an error, no '='.
To fix...The freedesktop spec for .desktop files requires the '\' char be escaped. In your desktop file, the Exec= command contains a continuation char with the rest of the command on the next line. Kwinini flags that as an error, no '='.
To fix, replace the end of the Exec command with "\\" which escapes the bash continuation char.
Tor v8.5.4
**Trac**:
**Username**: Psnarf