Changes

Page history
Apply conversion script to all *.md files. authored by Alexander Hansen Færøy's avatar Alexander Hansen Færøy
Show whitespace changes
Inline Side-by-side
doc/TorBOX/Dev.md
View page @ a1a4b621
[https://www.whonix.org Whonix Homepage] [Whonix Homepage](https://www.whonix.org)
[[TOC(noheading, depth=0)]] [[TOC(noheading, depth=0)]]
= Tickets = # Tickets
Moved to https://github.com/Whonix/Whonix/issues Moved to https://github.com/Whonix/Whonix/issues
= Related Tickets = # Related Tickets
== Tor == ## Tor
|| '''ticket''' || '''topic''' || '''status''' || | **ticket** | **topic** | **status** |
|| #5439; #4019 || notice flood; Tor warns about public SocksPort addresses twice on startup || '''(new defect)''' || |------------|-----------|------------|
|| #5438 || sockslistenaddr in torrc || '''fixed''' || | #5439; #4019 | notice flood; Tor warns about public SocksPort addresses twice on startup | **(new defect)** |
|| #5437 || man page: IsolateClientProtocol needs clarification? || '''fixed''' || | #5438 | sockslistenaddr in torrc | **fixed** |
|| #5210 || Enable gcc and ld hardening by default in 0.2.3.x || '''(needs_revision defect)''' || | #5437 | man page: IsolateClientProtocol needs clarification? | **fixed** |
|| #5220 || Intelligently use capabilities/privileges and drop what we don't need for Debian Gnu/Linux || '''accepted, no progress''' || | #5210 | Enable gcc and ld hardening by default in 0.2.3.x | **(needs_revision defect)** |
|| #5553 || prevent protocol leaks; Tor client connection API or protocol review howto || '''accepted, no progress''' || | #5220 | Intelligently use capabilities/privileges and drop what we don't need for Debian Gnu/Linux | **accepted, no progress** |
|| #6060 || add http proxy support to Tor || '''accepted, no progress''' || | #5553 | prevent protocol leaks; Tor client connection API or protocol review howto | **accepted, no progress** |
| #6060 | add http proxy support to Tor | **accepted, no progress** |
== Vidalia ==
|| #6207 || apt-get install tor vidalia results in defunct Vidalia || ''duplicate'' || ## Vidalia
|| #4716 || vidalia... tries to start a per-user Tor with system-wide settings || ''accepted, no progress'' || | #6207 | apt-get install tor vidalia results in defunct Vidalia | _duplicate_ |
|| #6209 || Add Vidalia to tpo precise repository || ''accepted, no progress'' || |-------|--------------------------------------------------------|-------------|
|| [https://tails.boum.org/todo/robust_and_strict_New_Identity_feature/ Tails] || Tails wants to push some things upstream || TODO || | #4716 | vidalia... tries to start a per-user Tor with system-wide settings | _accepted, no progress_ |
| #6209 | Add Vidalia to tpo precise repository | _accepted, no progress_ |
== obfsproxy == | [Tails](https://tails.boum.org/todo/robust_and_strict_New_Identity_feature/) | Tails wants to push some things upstream | TODO |
|| #6201 || Add obfsproxy to Tor stable repository || '''workaround, now using Debian package''' ||
## obfsproxy
== Analysis == | #6201 | Add obfsproxy to Tor stable repository | **workaround, now using Debian package** |
|| #5928 || Research: IP discovery through Tor behind isolated network || '''No time?''' || |-------|----------------------------------------|------------------------------------------|
== TorIM == ## Analysis
|| #5498 || Tor IM Bundle - use decentralized system (ex: cabels or TorChat) || '''No time?''' || | #5928 | Research: IP discovery through Tor behind isolated network | **No time?** |
|| #1676 || Audit jabber/XMPP support for pidgin || '''stalled''' || |-------|------------------------------------------------------------|--------------|
== Infrastructure == ## TorIM
|| #3592 || lack of web forums || '''accepted, in progress''' || | #5498 | Tor IM Bundle - use decentralized system (ex: cabels or TorChat) | **No time?** |
|| #2436 || Front Page of Wiki Not Editable || '''REJECTED''', there is now [https://trac.torproject.org/projects/tor/wiki/WikiStartAlternate WikiStartAlternate], but ignored. || |-------|------------------------------------------------------------------|--------------|
|| #5561 || introduce rules for Tor wiki, trac, irc; netiquette; policy || '''REJECTED''' || | #1676 | Audit jabber/XMPP support for pidgin | **stalled** |
|| #1039 || subdomain.torproject.org as www.torproject.org/subdomain (comment: for reaching Tor check through tpo's hidden service) || '''REJECTED''' ||
|| #6103 || Make a list of all torproject.org hidden services (and bring them back online) || '''implemented''', https://trac.torproject.org/projects/tor and https://www.torproject.org/docs/tor-hidden-service.html.en || ## Infrastructure
| #3592 | lack of web forums | **accepted, in progress** |
== GPG == |-------|--------------------|---------------------------|
|| #5606 || deb package with all torproject.org signing pgp keys || '''?''' || | #2436 | Front Page of Wiki Not Editable | **REJECTED**, there is now [WikiStartAlternate](https://trac.torproject.org/projects/tor/wiki/WikiStartAlternate), but ignored. |
|| #2617 || Add GPG keys to website, remove dependency on keyservers || '''REJECTED''' || | #5561 | introduce rules for Tor wiki, trac, irc; netiquette; policy | **REJECTED** |
| #1039 | subdomain.torproject.org as www.torproject.org/subdomain (comment: for reaching Tor check through tpo's hidden service) | **REJECTED** |
| #6103 | Make a list of all torproject.org hidden services (and bring them back online) | **implemented**, https://trac.torproject.org/projects/tor and https://www.torproject.org/docs/tor-hidden-service.html.en |
## GPG
| #5606 | deb package with all torproject.org signing pgp keys | **?** |
|-------|------------------------------------------------------|-------|
| #2617 | Add GPG keys to website, remove dependency on keyservers | **REJECTED** |
== Ubuntu == == Ubuntu ==
Ubuntu bugs do not matter so much anymore, since we switched to Debian. Ubuntu bugs do not matter so much anymore, since we switched to Debian.
|| [https://bugs.launchpad.net/launchpad/+bug/716535 716535] || apt-get freeze attack (Valid-Until) || '''importance: "low"(!)''' || | [716535](https://bugs.launchpad.net/launchpad/+bug/716535) | apt-get freeze attack (Valid-Until) | **importance: "low"(!)** |
|| [https://bugs.launchpad.net/ubuntu/+source/bash/+bug/1105645 1105645] || /etc/bash.d/ wishlist || - |------------------------------------------------------------|-------------------------------------|--------------------------|
| [1105645](https://bugs.launchpad.net/ubuntu/+source/bash/+bug/1105645) | /etc/bash.d/ wishlist | -
== Debian / Ubuntu ==
|| [https://bugs.launchpad.net/ubuntu/+source/ntp/+bug/1039420] || NTP security vulnerability because not using authentication by default || '''?''' || ## Debian / Ubuntu
|| [http://brainstorm.ubuntu.com/idea/30050/] || Idea #30050: Secure Network Time Synchronization || ''' Vote! || | [https://bugs.launchpad.net/ubuntu/+source/ntp/+bug/1039420] | NTP security vulnerability because not using authentication by default | **?** |
|| [http://brainstorm.ubuntu.com/idea/30076/] || Idea #30076: Enhancy Privacy/Security, Wipe RAM on shut down, reboot and trigger || ''' Vote! || |--------------------------------------------------------------|------------------------------------------------------------------------|-------|
| [http://brainstorm.ubuntu.com/idea/30050/] | Idea #30050: Secure Network Time Synchronization | ''' Vote! |
== Debian == | [http://brainstorm.ubuntu.com/idea/30076/] | Idea #30076: Enhancy Privacy/Security, Wipe RAM on shut down, reboot and trigger | ''' Vote! |
|| [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23687166 23687166] || ntp: NTP security vulnerability because not using authentication by default || stalled
|| [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700811 700811] || interface comes up even if a script in /etc/network/if-pre-up.d/ fails || - || ## Debian
|| [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=675008 675008] || bash: should handle /etc/bashrc.d (or similar) for non-login interactive shell || - || | [23687166](http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23687166) | ntp: NTP security vulnerability because not using authentication by default | stalled
|------------------------------------------------------------------------|-----------------------------------------------------------------------------|--------
== Tor Browser == | [700811](http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700811) | interface comes up even if a script in /etc/network/if-pre-up.d/ fails | - |
|| #5480 || can we get a link to "https://www.torproject.org/dist/torbrowser/latest-tor-browser" || '''REJECTED''' || | [675008](http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=675008) | bash: should handle /etc/bashrc.d (or similar) for non-login interactive shell | - |
|| #5322 || doesn't obey user.js? setting custom proxy settings || '''ANSWERED''' ||
|| #3455 || Tor Browser should set SOCKS username for a request based on referer || '''ACCEPTED, ASSIGNED''' || ## Tor Browser
|| #5236 || Make a deb of the Torbrowser and add to repository || '''very unlikely''' || | #5480 | can we get a link to "https://www.torproject.org/dist/torbrowser/latest-tor-browser" | **REJECTED** |
|| #3994 || Get TorBrowser in Debian || '''very unlikely''' || |-------|--------------------------------------------------------------------------------------|--------------|
|| #4522 || Add privilege separation for bundled browser || '''needs_information enhancement''' || | #5322 | doesn't obey user.js? setting custom proxy settings | **ANSWERED** |
|| #5791 || Gather apparmor/selinux/seatbelt profiles for each component of TBB || '''assigned project''' || | #3455 | Tor Browser should set SOCKS username for a request based on referer | **ACCEPTED, ASSIGNED** |
|| #5024 || compile time hardening of TBB (RELRO, canary, PIE) || '''(new enhancement)''' || | #5236 | Make a deb of the Torbrowser and add to repository | **very unlikely** |
|| #5611 || Enhance "Transparent Torification (Requires custom transproxy or Tor router)" in Tor Button. || '''?''' || | #3994 | Get TorBrowser in Debian | **very unlikely** |
|| #6025 || enable Bookmarks Toolbar by default || '''?''' || | #4522 | Add privilege separation for bundled browser | **needs_information enhancement** |
|| #6053 || TorButton breaks functionality to have multiple homepages (startpages) || '''?''' || | #5791 | Gather apparmor/selinux/seatbelt profiles for each component of TBB | **assigned project** |
|| #5273 || Update TBB design doc for 2.3.x-alpha (missing Tor Browser Update Check Technical Documentation) || '''new defect''' || | #5024 | compile time hardening of TBB (RELRO, canary, PIE) | **(new enhancement)** |
| #5611 | Enhance "Transparent Torification (Requires custom transproxy or Tor router)" in Tor Button. | **?** |
== torsocks == | #6025 | enable Bookmarks Toolbar by default | **?** |
|| #6155 || Import torsocks from google code to torproject.org trac || '''(assigned defect)''' || | #6053 | TorButton breaks functionality to have multiple homepages (startpages) | **?** |
|| #8137 || add option to allow connections to local addresses || new || | #5273 | Update TBB design doc for 2.3.x-alpha (missing Tor Browser Update Check Technical Documentation) | **new defect** |
== Tor Check == ## torsocks
|| #6098 || Add a hidden service to check.torproject.org || '''new enhancement''' || | #6155 | Import torsocks from google code to torproject.org trac | **(assigned defect)** |
|-------|---------------------------------------------------------|-----------------------|
== TorBirdy == | #8137 | add option to allow connections to local addresses | new |
|| [https://trac.torproject.org/projects/tor/query?status=accepted&status=assigned&status=needs_information&status=needs_review&status=needs_revision&status=new&status=reopened&component=TorBirdy&order=priority&col=id&col=summary&col=component&col=status&col=type&col=priority&col=milestone TorBirdy] || different topics || '''new''' ||
|| #6018 || Add TorBirdy to the torproject.org repository || '''new''' || ## Tor Check
| #6098 | Add a hidden service to check.torproject.org | **new enhancement** |
== Virtual Box == |-------|----------------------------------------------|---------------------|
|| [https://www.virtualbox.org/ticket/10828 #10828] || VBoxService --disable-timesync broken || '''Done. [https://sourceforge.net/p/whonix/wiki/TimeSync/ Workarround.]''' They say it's actually a feature, not a bug or a missing feature. ||
## TorBirdy
== Arm == | [TorBirdy](https://trac.torproject.org/projects/tor/query?status=accepted&status=assigned&status=needs_information&status=needs_review&status=needs_revision&status=new&status=reopened&component=TorBirdy&order=priority&col=id&col=summary&col=component&col=status&col=type&col=priority&col=milestone) | different topics | **new** |
|| [https://trac.torproject.org/projects/tor/ticket/7611 #7611] || Man page parser out of date || '''new defect''' || |------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|------------------|---------|
| #6018 | Add TorBirdy to the torproject.org repository | **new** |
== KDE ==
* [https://bugs.kde.org/show_bug.cgi?id=314224 KDE Bug 314224 - clock freezes after modifying layout.js] ## Virtual Box
| [#10828](https://www.virtualbox.org/ticket/10828) | VBoxService --disable-timesync broken | **Done. [Workarround.](https://sourceforge.net/p/whonix/wiki/TimeSync/)** They say it's actually a feature, not a bug or a missing feature. |
= wiki editing = |---------------------------------------------------|---------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------|
* [http://trac.edgewall.org/wiki/WikiFormatting list of all commands]
## Arm
| [#7611](https://trac.torproject.org/projects/tor/ticket/7611) | Man page parser out of date | **new defect** |
|---------------------------------------------------------------|-----------------------------|----------------|
## KDE
* [KDE Bug 314224 - clock freezes after modifying layout.js](https://bugs.kde.org/show_bug.cgi?id=314224)
# wiki editing
* [list of all commands](http://trac.edgewall.org/wiki/WikiFormatting)
* html supported! * html supported!
{{{ ```
#!html
<h1 style="text-align: left; color: blue"> <h1 style="text-align: left; color: blue">
HTML Test HTML Test
</h1> </h1>
}}} ```
* pictures supported! [[Image(https://www.torproject.org/images/icon-TorBrowser.jpg)]] * pictures supported! ![https://www.torproject.org/images/icon-TorBrowser.jpg](https://www.torproject.org/images/icon-TorBrowser.jpg)
* [http://trac-hacks.org/wiki/TocMacro trac wiki - TOC - Table of Contents] * [trac wiki - TOC - Table of Contents](http://trac-hacks.org/wiki/TocMacro)
= Similar Projects = # Similar Projects
https://sourceforge.net/p/whonix/wiki/Authorship/#similar-projects https://sourceforge.net/p/whonix/wiki/Authorship/#similar-projects
= people talking about Whonix = # people talking about Whonix
moved to https://sourceforge.net/p/whonix/wiki/Security/#security-reviews-and-feedback moved to https://sourceforge.net/p/whonix/wiki/Security/#security-reviews-and-feedback
= Our Shell scripts and Build Documentation = # Our Shell scripts and Build Documentation
Build Documentation [[BR]] Build Documentation
https://sourceforge.net/p/whonix/wiki/BuildDocumentation/ https://sourceforge.net/p/whonix/wiki/BuildDocumentation/
= Questions = # Questions
Archived: [https://trac.torproject.org/projects/tor/wiki/doc/TorBOX/Dev/ArchivedDiscussion/QUESTIONS Dev/ArchivedDiscussion/QUESTIONS] Archived: [Dev/ArchivedDiscussion/QUESTIONS](https://trac.torproject.org/projects/tor/wiki/doc/TorBOX/Dev/ArchivedDiscussion/QUESTIONS)
New questions: [http://sourceforge.net/p/whonix/wiki/Readme/#contacting-whonix-developers-feedback-questions Contacting Whonix developers / Feedback / Questions] New questions: [Contacting Whonix developers / Feedback / Questions](http://sourceforge.net/p/whonix/wiki/Readme/#contacting-whonix-developers-feedback-questions)
\ No newline at end of file \ No newline at end of file