Changes

Page history
Apply conversion script to all *.md files. authored by Alexander Hansen Færøy's avatar Alexander Hansen Færøy
Show whitespace changes
Inline Side-by-side
doc/TorBOX/Dev.md
View page @ a1a4b621
[https://www.whonix.org Whonix Homepage]
[Whonix Homepage](https://www.whonix.org)
[[TOC(noheading, depth=0)]]
= Tickets =
# Tickets
Moved to https://github.com/Whonix/Whonix/issues
= Related Tickets =
== Tor ==
|| '''ticket''' || '''topic''' || '''status''' ||
|| #5439; #4019 || notice flood; Tor warns about public SocksPort addresses twice on startup || '''(new defect)''' ||
|| #5438 || sockslistenaddr in torrc || '''fixed''' ||
|| #5437 || man page: IsolateClientProtocol needs clarification? || '''fixed''' ||
|| #5210 || Enable gcc and ld hardening by default in 0.2.3.x || '''(needs_revision defect)''' ||
|| #5220 || Intelligently use capabilities/privileges and drop what we don't need for Debian Gnu/Linux || '''accepted, no progress''' ||
|| #5553 || prevent protocol leaks; Tor client connection API or protocol review howto || '''accepted, no progress''' ||
|| #6060 || add http proxy support to Tor || '''accepted, no progress''' ||
== Vidalia ==
|| #6207 || apt-get install tor vidalia results in defunct Vidalia || ''duplicate'' ||
|| #4716 || vidalia... tries to start a per-user Tor with system-wide settings || ''accepted, no progress'' ||
|| #6209 || Add Vidalia to tpo precise repository || ''accepted, no progress'' ||
|| [https://tails.boum.org/todo/robust_and_strict_New_Identity_feature/ Tails] || Tails wants to push some things upstream || TODO ||
== obfsproxy ==
|| #6201 || Add obfsproxy to Tor stable repository || '''workaround, now using Debian package''' ||
== Analysis ==
|| #5928 || Research: IP discovery through Tor behind isolated network || '''No time?''' ||
== TorIM ==
|| #5498 || Tor IM Bundle - use decentralized system (ex: cabels or TorChat) || '''No time?''' ||
|| #1676 || Audit jabber/XMPP support for pidgin || '''stalled''' ||
== Infrastructure ==
|| #3592 || lack of web forums || '''accepted, in progress''' ||
|| #2436 || Front Page of Wiki Not Editable || '''REJECTED''', there is now [https://trac.torproject.org/projects/tor/wiki/WikiStartAlternate WikiStartAlternate], but ignored. ||
|| #5561 || introduce rules for Tor wiki, trac, irc; netiquette; policy || '''REJECTED''' ||
|| #1039 || subdomain.torproject.org as www.torproject.org/subdomain (comment: for reaching Tor check through tpo's hidden service) || '''REJECTED''' ||
|| #6103 || Make a list of all torproject.org hidden services (and bring them back online) || '''implemented''', https://trac.torproject.org/projects/tor and https://www.torproject.org/docs/tor-hidden-service.html.en ||
== GPG ==
|| #5606 || deb package with all torproject.org signing pgp keys || '''?''' ||
|| #2617 || Add GPG keys to website, remove dependency on keyservers || '''REJECTED''' ||
# Related Tickets
## Tor
| **ticket** | **topic** | **status** |
|------------|-----------|------------|
| #5439; #4019 | notice flood; Tor warns about public SocksPort addresses twice on startup | **(new defect)** |
| #5438 | sockslistenaddr in torrc | **fixed** |
| #5437 | man page: IsolateClientProtocol needs clarification? | **fixed** |
| #5210 | Enable gcc and ld hardening by default in 0.2.3.x | **(needs_revision defect)** |
| #5220 | Intelligently use capabilities/privileges and drop what we don't need for Debian Gnu/Linux | **accepted, no progress** |
| #5553 | prevent protocol leaks; Tor client connection API or protocol review howto | **accepted, no progress** |
| #6060 | add http proxy support to Tor | **accepted, no progress** |
## Vidalia
| #6207 | apt-get install tor vidalia results in defunct Vidalia | _duplicate_ |
|-------|--------------------------------------------------------|-------------|
| #4716 | vidalia... tries to start a per-user Tor with system-wide settings | _accepted, no progress_ |
| #6209 | Add Vidalia to tpo precise repository | _accepted, no progress_ |
| [Tails](https://tails.boum.org/todo/robust_and_strict_New_Identity_feature/) | Tails wants to push some things upstream | TODO |
## obfsproxy
| #6201 | Add obfsproxy to Tor stable repository | **workaround, now using Debian package** |
|-------|----------------------------------------|------------------------------------------|
## Analysis
| #5928 | Research: IP discovery through Tor behind isolated network | **No time?** |
|-------|------------------------------------------------------------|--------------|
## TorIM
| #5498 | Tor IM Bundle - use decentralized system (ex: cabels or TorChat) | **No time?** |
|-------|------------------------------------------------------------------|--------------|
| #1676 | Audit jabber/XMPP support for pidgin | **stalled** |
## Infrastructure
| #3592 | lack of web forums | **accepted, in progress** |
|-------|--------------------|---------------------------|
| #2436 | Front Page of Wiki Not Editable | **REJECTED**, there is now [WikiStartAlternate](https://trac.torproject.org/projects/tor/wiki/WikiStartAlternate), but ignored. |
| #5561 | introduce rules for Tor wiki, trac, irc; netiquette; policy | **REJECTED** |
| #1039 | subdomain.torproject.org as www.torproject.org/subdomain (comment: for reaching Tor check through tpo's hidden service) | **REJECTED** |
| #6103 | Make a list of all torproject.org hidden services (and bring them back online) | **implemented**, https://trac.torproject.org/projects/tor and https://www.torproject.org/docs/tor-hidden-service.html.en |
## GPG
| #5606 | deb package with all torproject.org signing pgp keys | **?** |
|-------|------------------------------------------------------|-------|
| #2617 | Add GPG keys to website, remove dependency on keyservers | **REJECTED** |
== Ubuntu ==
Ubuntu bugs do not matter so much anymore, since we switched to Debian.
|| [https://bugs.launchpad.net/launchpad/+bug/716535 716535] || apt-get freeze attack (Valid-Until) || '''importance: "low"(!)''' ||
|| [https://bugs.launchpad.net/ubuntu/+source/bash/+bug/1105645 1105645] || /etc/bash.d/ wishlist || -
== Debian / Ubuntu ==
|| [https://bugs.launchpad.net/ubuntu/+source/ntp/+bug/1039420] || NTP security vulnerability because not using authentication by default || '''?''' ||
|| [http://brainstorm.ubuntu.com/idea/30050/] || Idea #30050: Secure Network Time Synchronization || ''' Vote! ||
|| [http://brainstorm.ubuntu.com/idea/30076/] || Idea #30076: Enhancy Privacy/Security, Wipe RAM on shut down, reboot and trigger || ''' Vote! ||
== Debian ==
|| [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23687166 23687166] || ntp: NTP security vulnerability because not using authentication by default || stalled
|| [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700811 700811] || interface comes up even if a script in /etc/network/if-pre-up.d/ fails || - ||
|| [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=675008 675008] || bash: should handle /etc/bashrc.d (or similar) for non-login interactive shell || - ||
== Tor Browser ==
|| #5480 || can we get a link to "https://www.torproject.org/dist/torbrowser/latest-tor-browser" || '''REJECTED''' ||
|| #5322 || doesn't obey user.js? setting custom proxy settings || '''ANSWERED''' ||
|| #3455 || Tor Browser should set SOCKS username for a request based on referer || '''ACCEPTED, ASSIGNED''' ||
|| #5236 || Make a deb of the Torbrowser and add to repository || '''very unlikely''' ||
|| #3994 || Get TorBrowser in Debian || '''very unlikely''' ||
|| #4522 || Add privilege separation for bundled browser || '''needs_information enhancement''' ||
|| #5791 || Gather apparmor/selinux/seatbelt profiles for each component of TBB || '''assigned project''' ||
|| #5024 || compile time hardening of TBB (RELRO, canary, PIE) || '''(new enhancement)''' ||
|| #5611 || Enhance "Transparent Torification (Requires custom transproxy or Tor router)" in Tor Button. || '''?''' ||
|| #6025 || enable Bookmarks Toolbar by default || '''?''' ||
|| #6053 || TorButton breaks functionality to have multiple homepages (startpages) || '''?''' ||
|| #5273 || Update TBB design doc for 2.3.x-alpha (missing Tor Browser Update Check Technical Documentation) || '''new defect''' ||
== torsocks ==
|| #6155 || Import torsocks from google code to torproject.org trac || '''(assigned defect)''' ||
|| #8137 || add option to allow connections to local addresses || new ||
== Tor Check ==
|| #6098 || Add a hidden service to check.torproject.org || '''new enhancement''' ||
== TorBirdy ==
|| [https://trac.torproject.org/projects/tor/query?status=accepted&status=assigned&status=needs_information&status=needs_review&status=needs_revision&status=new&status=reopened&component=TorBirdy&order=priority&col=id&col=summary&col=component&col=status&col=type&col=priority&col=milestone TorBirdy] || different topics || '''new''' ||
|| #6018 || Add TorBirdy to the torproject.org repository || '''new''' ||
== Virtual Box ==
|| [https://www.virtualbox.org/ticket/10828 #10828] || VBoxService --disable-timesync broken || '''Done. [https://sourceforge.net/p/whonix/wiki/TimeSync/ Workarround.]''' They say it's actually a feature, not a bug or a missing feature. ||
== Arm ==
|| [https://trac.torproject.org/projects/tor/ticket/7611 #7611] || Man page parser out of date || '''new defect''' ||
== KDE ==
* [https://bugs.kde.org/show_bug.cgi?id=314224 KDE Bug 314224 - clock freezes after modifying layout.js]
= wiki editing =
* [http://trac.edgewall.org/wiki/WikiFormatting list of all commands]
| [716535](https://bugs.launchpad.net/launchpad/+bug/716535) | apt-get freeze attack (Valid-Until) | **importance: "low"(!)** |
|------------------------------------------------------------|-------------------------------------|--------------------------|
| [1105645](https://bugs.launchpad.net/ubuntu/+source/bash/+bug/1105645) | /etc/bash.d/ wishlist | -
## Debian / Ubuntu
| [https://bugs.launchpad.net/ubuntu/+source/ntp/+bug/1039420] | NTP security vulnerability because not using authentication by default | **?** |
|--------------------------------------------------------------|------------------------------------------------------------------------|-------|
| [http://brainstorm.ubuntu.com/idea/30050/] | Idea #30050: Secure Network Time Synchronization | ''' Vote! |
| [http://brainstorm.ubuntu.com/idea/30076/] | Idea #30076: Enhancy Privacy/Security, Wipe RAM on shut down, reboot and trigger | ''' Vote! |
## Debian
| [23687166](http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23687166) | ntp: NTP security vulnerability because not using authentication by default | stalled
|------------------------------------------------------------------------|-----------------------------------------------------------------------------|--------
| [700811](http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700811) | interface comes up even if a script in /etc/network/if-pre-up.d/ fails | - |
| [675008](http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=675008) | bash: should handle /etc/bashrc.d (or similar) for non-login interactive shell | - |
## Tor Browser
| #5480 | can we get a link to "https://www.torproject.org/dist/torbrowser/latest-tor-browser" | **REJECTED** |
|-------|--------------------------------------------------------------------------------------|--------------|
| #5322 | doesn't obey user.js? setting custom proxy settings | **ANSWERED** |
| #3455 | Tor Browser should set SOCKS username for a request based on referer | **ACCEPTED, ASSIGNED** |
| #5236 | Make a deb of the Torbrowser and add to repository | **very unlikely** |
| #3994 | Get TorBrowser in Debian | **very unlikely** |
| #4522 | Add privilege separation for bundled browser | **needs_information enhancement** |
| #5791 | Gather apparmor/selinux/seatbelt profiles for each component of TBB | **assigned project** |
| #5024 | compile time hardening of TBB (RELRO, canary, PIE) | **(new enhancement)** |
| #5611 | Enhance "Transparent Torification (Requires custom transproxy or Tor router)" in Tor Button. | **?** |
| #6025 | enable Bookmarks Toolbar by default | **?** |
| #6053 | TorButton breaks functionality to have multiple homepages (startpages) | **?** |
| #5273 | Update TBB design doc for 2.3.x-alpha (missing Tor Browser Update Check Technical Documentation) | **new defect** |
## torsocks
| #6155 | Import torsocks from google code to torproject.org trac | **(assigned defect)** |
|-------|---------------------------------------------------------|-----------------------|
| #8137 | add option to allow connections to local addresses | new |
## Tor Check
| #6098 | Add a hidden service to check.torproject.org | **new enhancement** |
|-------|----------------------------------------------|---------------------|
## TorBirdy
| [TorBirdy](https://trac.torproject.org/projects/tor/query?status=accepted&status=assigned&status=needs_information&status=needs_review&status=needs_revision&status=new&status=reopened&component=TorBirdy&order=priority&col=id&col=summary&col=component&col=status&col=type&col=priority&col=milestone) | different topics | **new** |
|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|------------------|---------|
| #6018 | Add TorBirdy to the torproject.org repository | **new** |
## Virtual Box
| [#10828](https://www.virtualbox.org/ticket/10828) | VBoxService --disable-timesync broken | **Done. [Workarround.](https://sourceforge.net/p/whonix/wiki/TimeSync/)** They say it's actually a feature, not a bug or a missing feature. |
|---------------------------------------------------|---------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------|
## Arm
| [#7611](https://trac.torproject.org/projects/tor/ticket/7611) | Man page parser out of date | **new defect** |
|---------------------------------------------------------------|-----------------------------|----------------|
## KDE
* [KDE Bug 314224 - clock freezes after modifying layout.js](https://bugs.kde.org/show_bug.cgi?id=314224)
# wiki editing
* [list of all commands](http://trac.edgewall.org/wiki/WikiFormatting)
* html supported!
{{{
#!html
```
<h1 style="text-align: left; color: blue">
HTML Test
</h1>
}}}
* pictures supported! [[Image(https://www.torproject.org/images/icon-TorBrowser.jpg)]]
* [http://trac-hacks.org/wiki/TocMacro trac wiki - TOC - Table of Contents]
```
* pictures supported! ![https://www.torproject.org/images/icon-TorBrowser.jpg](https://www.torproject.org/images/icon-TorBrowser.jpg)
* [trac wiki - TOC - Table of Contents](http://trac-hacks.org/wiki/TocMacro)
= Similar Projects =
# Similar Projects
https://sourceforge.net/p/whonix/wiki/Authorship/#similar-projects
= people talking about Whonix =
# people talking about Whonix
moved to https://sourceforge.net/p/whonix/wiki/Security/#security-reviews-and-feedback
= Our Shell scripts and Build Documentation =
Build Documentation [[BR]]
# Our Shell scripts and Build Documentation
Build Documentation
https://sourceforge.net/p/whonix/wiki/BuildDocumentation/
= Questions =
Archived: [https://trac.torproject.org/projects/tor/wiki/doc/TorBOX/Dev/ArchivedDiscussion/QUESTIONS Dev/ArchivedDiscussion/QUESTIONS]
# Questions
Archived: [Dev/ArchivedDiscussion/QUESTIONS](https://trac.torproject.org/projects/tor/wiki/doc/TorBOX/Dev/ArchivedDiscussion/QUESTIONS)
New questions: [http://sourceforge.net/p/whonix/wiki/Readme/#contacting-whonix-developers-feedback-questions Contacting Whonix developers / Feedback / Questions]
\ No newline at end of file
New questions: [Contacting Whonix developers / Feedback / Questions](http://sourceforge.net/p/whonix/wiki/Readme/#contacting-whonix-developers-feedback-questions)
\ No newline at end of file