Re: [tor-bugs] #26039 [Applications/Tor Browser]: /preferences/extension-overrides.js will not be loaded in ESR 60

2018-06-21 Thread Tor Bug Tracker & Wiki
#26039: /preferences/extension-overrides.js will not be loaded in 
ESR
60
+--
 Reporter:  mcs |  Owner:  pospeselr
 Type:  defect  | Status:
|  needs_revision
 Priority:  Very High   |  Milestone:
Component:  Applications/Tor Browser|Version:
 Severity:  Normal  | Resolution:
 Keywords:  ff60-esr, TorBrowserTeam201806  |  Actual Points:
Parent ID:  | Points:
 Reviewer:  |Sponsor:
+--

Comment (by gk):

 Okay, I took the patch as-is to get the tagging and building going (commit
 4f7417becede4e116eecade1dfad65f67ccbbe8d on `master`) but will leave this
 ticket open to check whether we need a follow-up patch.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #26458 [Applications/Tor Browser]: Even more locales for Tor Browser

2018-06-21 Thread Tor Bug Tracker & Wiki
#26458: Even more locales for Tor Browser
--+--
 Reporter:  arthuredelstein   |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal|   Keywords:
Actual Points:|  Parent ID:
   Points:|   Reviewer:
  Sponsor:|
--+--
 In #20628 we added bn-BD, da, he, sv, zh-TW. We have still more languages
 for which Tor Browser translations are complete:

 https://torpat.ch/locales

 Let's add some more when we feel satisfied that the first batch are
 working properly.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #21245 [Applications/Tor Browser]: Add danish (da) translation

2018-06-21 Thread Tor Bug Tracker & Wiki
#21245: Add danish (da) translation
--+--
 Reporter:  scootergrisen |  Owner:  tbb-team
 Type:  task  | Status:  closed
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Trivial   | Resolution:  fixed
 Keywords:  tbb-usability |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by gk):

 * status:  new => closed
 * resolution:   => fixed


Comment:

 Fixed by #20628.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #12927 [Applications/Tor Browser]: Include Hebrew translations into TorBrowserBundle

2018-06-21 Thread Tor Bug Tracker & Wiki
#12927: Include Hebrew translations into TorBrowserBundle
-+--
 Reporter:  fr33domlover |  Owner:  tbb-team
 Type:  enhancement  | Status:  closed
 Priority:  Medium   |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:  fixed
 Keywords:  l10n, translation, localization  |  Actual Points:
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+--
Changes (by gk):

 * status:  new => closed
 * resolution:   => fixed


Comment:

 Fixed by #20826.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #20628 [Applications/Tor Browser]: More locales for Tor Browser

2018-06-21 Thread Tor Bug Tracker & Wiki
#20628: More locales for Tor Browser
-+-
 Reporter:  arthuredelstein  |  Owner:  tbb-
 |  team
 Type:  defect   | Status:  closed
 Priority:  Medium   |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:  fixed
 Keywords:  tbb-torbutton, tbb-easy, ux-team,|  Actual Points:
  TorBrowserTeam201806   |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * status:  needs_revision => closed
 * resolution:   => fixed


Comment:

 `20628+1` looks good to me. I merged it to `master` (in our `tor-browser-
 build` repo) with commit b39dad476f870b60d7008c1e22e477dc80875c38 and
 we'll pick up the `webml` change once we update the website.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #11517 [Applications/Tor Browser]: Ukrainian Tor Browser Bundle

2018-06-21 Thread Tor Bug Tracker & Wiki
#11517: Ukrainian Tor Browser Bundle
--+--
 Reporter:  phoul |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by gk):

 * parent:  #20628 =>


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26456 [Applications/Tor Browser]: HTTP .onion sites inherit previous page's certificate information

2018-06-21 Thread Tor Bug Tracker & Wiki
#26456: HTTP .onion sites inherit previous page's certificate information
--+---
 Reporter:  pospeselr |  Owner:  pospeselr
 Type:  defect| Status:  assigned
 Priority:  High  |  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  TorBrowserTeam201806  |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---
Changes (by gk):

 * cc: tbb-team (added)


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26451 [HTTPS Everywhere/EFF-HTTPS Everywhere]: HTTPS-Everywhere freezes the browser when entering URLS like ./a.

2018-06-21 Thread Tor Bug Tracker & Wiki
#26451: HTTPS-Everywhere freezes the browser when entering URLS like ./a.
-+-
 Reporter:  gk   |  Owner:  legind
 Type:  defect   | Status:  closed
 Priority:  High |  Milestone:
Component:  HTTPS Everywhere/EFF-HTTPS   |Version:
  Everywhere |
 Severity:  Major| Resolution:  fixed
 Keywords:  TorBrowserTeam201806R|  Actual Points:
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * status:  needs_review => closed
 * resolution:   => fixed


Comment:

 Thanks all! I merged Arthur's patch to `maint-7.5` (commit
 1c472c7aeff5f81b1d8e8357e37168520d14a36a and
 74af3e0e1432b956c11ee95d32eb68dc968fe209) and created a -build4 tag.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26449 [Core Tor/Tor]: Add travis builders for Rust without fragile-hardening

2018-06-21 Thread Tor Bug Tracker & Wiki
#26449: Add travis builders for Rust without fragile-hardening
--+
 Reporter:  nickm |  Owner:  catalyst
 Type:  defect| Status:  needs_review
 Priority:  Medium|  Milestone:  Tor: 0.3.4.x-final
Component:  Core Tor/Tor  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ci rust rust-linking  |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+
Changes (by catalyst):

 * status:  assigned => needs_review


Comment:

 Patch in https://github.com/torproject/tor/pull/171

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26449 [Core Tor/Tor]: Add travis builders for Rust without fragile-hardening

2018-06-21 Thread Tor Bug Tracker & Wiki
#26449: Add travis builders for Rust without fragile-hardening
--+
 Reporter:  nickm |  Owner:  catalyst
 Type:  defect| Status:  assigned
 Priority:  Medium|  Milestone:  Tor: 0.3.4.x-final
Component:  Core Tor/Tor  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ci rust rust-linking  |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+

Comment (by catalyst):

 While working on this I discovered that distcheck doesn't work with rust
 in offline mode.  I'll work around it for now.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26449 [Core Tor/Tor]: Add travis builders for Rust without fragile-hardening

2018-06-21 Thread Tor Bug Tracker & Wiki
#26449: Add travis builders for Rust without fragile-hardening
--+
 Reporter:  nickm |  Owner:  catalyst
 Type:  defect| Status:  assigned
 Priority:  Medium|  Milestone:  Tor: 0.3.4.x-final
Component:  Core Tor/Tor  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ci rust rust-linking  |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+
Changes (by catalyst):

 * owner:  (none) => catalyst
 * status:  new => assigned


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #25040 [Internal Services/Tor Sysadmin Team]: Please refresh GPG key for irl

2018-06-21 Thread Tor Bug Tracker & Wiki
#25040: Please refresh GPG key for irl
-+
 Reporter:  irl  |  Owner:  tpa
 Type:  task | Status:  closed
 Priority:  Medium   |  Milestone:
Component:  Internal Services/Tor Sysadmin Team  |Version:
 Severity:  Normal   | Resolution:  fixed
 Keywords:   |  Actual Points:
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+

Comment (by AcidSoul):

 sasha golicin

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26441 [Internal Services/Tor Sysadmin Team]: Remove build-sunet-b.torproject.net host

2018-06-21 Thread Tor Bug Tracker & Wiki
#26441: Remove build-sunet-b.torproject.net host
-+-
 Reporter:  boklm|  Owner:  tpa
 Type:  task | Status:  new
 Priority:  Medium   |  Milestone:
Component:  Internal Services/Tor Sysadmin Team  |Version:
 Severity:  Normal   | Resolution:
 Keywords:   |  Actual Points:
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by arlolra):

 > arlo: can you confirm that there is no import data that you want to keep
 on `build-sunet-b`?

 Nothing to keep, you can remove

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26251 [Applications/Tor Browser]: Adapt macOS snowflake compilation to new toolchain

2018-06-21 Thread Tor Bug Tracker & Wiki
#26251: Adapt macOS snowflake compilation to new toolchain
--+---
 Reporter:  gk|  Owner:  tbb-team, sukhbir
 Type:  task  | Status:  needs_review
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-rbm   |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---

Comment (by dcf):

 Replying to [comment:9 sukhbir]:
 > dcf: This commit makes a change to your patch. Can you please go through
 it once and see if the change is fine with you before it's merged? Since I
 modified the patch in-place, I don't want it to attribute to you without
 your permission.

 I'll take a look but generally I don't worry about the attribution--set it
 to yourself or to me, it doesn't matter much. Thanks for checking.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26425 [Core Tor/Tor]: Add functionality to set SNI for client connections

2018-06-21 Thread Tor Bug Tracker & Wiki
#26425: Add functionality to set SNI for client connections
--+--
 Reporter:  twim  |  Owner:  (none)
 Type:  enhancement   | Status:  needs_review
 Priority:  Medium|  Milestone:
Component:  Core Tor/Tor  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by dmr):

 * cc: dmr (added)


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26251 [Applications/Tor Browser]: Adapt macOS snowflake compilation to new toolchain

2018-06-21 Thread Tor Bug Tracker & Wiki
#26251: Adapt macOS snowflake compilation to new toolchain
--+---
 Reporter:  gk|  Owner:  tbb-team, sukhbir
 Type:  task  | Status:  needs_review
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-rbm   |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---

Comment (by sukhbir):

 dcf: This commit makes a change to your patch. Can you please go through
 it once and see if the change is fine with you before it's merged? Since I
 modified the patch in-place, I don't want it to attribute to you without
 your permission.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26251 [Applications/Tor Browser]: Adapt macOS snowflake compilation to new toolchain

2018-06-21 Thread Tor Bug Tracker & Wiki
#26251: Adapt macOS snowflake compilation to new toolchain
--+---
 Reporter:  gk|  Owner:  tbb-team, sukhbir
 Type:  task  | Status:  needs_review
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-rbm   |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---
Changes (by sukhbir):

 * status:  needs_revision => needs_review


Comment:

 For review:

 https://github.com/azadi/tor-browser-build-1/tree/bug-26073-rev1

 I removed `-mlinker-version=136` but the other stuff seems to be relevant.

 {{{
 $ git diff tor/maint-7.5...tor/master  -- projects/firefox/mozconfig-osx-
 x86_64

 -FLAGS="-target x86_64-apple-darwin10 -mlinker-version=136 -B
 $CROSS_CCTOOLS_PATH/bin -isysroot $CROSS_SYSROOT $HARDENING_FLAGS"
 +FLAGS="-target x86_64-apple-darwin11 -B $CROSS_CCTOOLS_PATH/bin -isysroot
 $CROSS_SYSROOT $HARDENING_FLAGS"

 -export TOOLCHAIN_PREFIX=$CROSS_CCTOOLS_PATH/bin/x86_64-apple-darwin10-
 -#TODO: bug 1184202 - would be nice if these could be detected with
 TOOLCHAIN_PREFIX automatically
 -export AR=${TOOLCHAIN_PREFIX}ar
 -export RANLIB=${TOOLCHAIN_PREFIX}ranlib
 -export STRIP=${TOOLCHAIN_PREFIX}strip
 -export OTOOL=${TOOLCHAIN_PREFIX}otool
 +export BINDGEN_CFLAGS="$FLAGS"
 +export TOOLCHAIN_PREFIX=$CROSS_CCTOOLS_PATH/bin/x86_64-apple-darwin11-
 }}}

 I tested with the same setup as in #comment:4. As for as `gclient`, I
 didn't need to do that since I did an in-place of the patch. (We will end
 up with the same thing since I replaced the linker line with the clang
 flag, so I didn't bother.)

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26455 [Core Tor/Tor]: use correct CARGO_HOME in test_rust.sh

2018-06-21 Thread Tor Bug Tracker & Wiki
#26455: use correct CARGO_HOME in test_rust.sh
--+
 Reporter:  catalyst  |  Owner:  catalyst
 Type:  defect| Status:
  |  needs_review
 Priority:  Medium|  Milestone:  Tor:
  |  0.3.3.x-final
Component:  Core Tor/Tor  |Version:
 Severity:  Normal| Resolution:
 Keywords:  rust, tor-ci, tor-test, fast-fix  |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+
Changes (by catalyst):

 * status:  assigned => needs_review


Comment:

 Patch in https://github.com/torproject/tor/pull/170

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26451 [HTTPS Everywhere/EFF-HTTPS Everywhere]: HTTPS-Everywhere freezes the browser when entering URLS like ./a.

2018-06-21 Thread Tor Bug Tracker & Wiki
#26451: HTTPS-Everywhere freezes the browser when entering URLS like ./a.
-+-
 Reporter:  gk   |  Owner:  legind
 Type:  defect   | Status:
 |  needs_review
 Priority:  High |  Milestone:
Component:  HTTPS Everywhere/EFF-HTTPS   |Version:
  Everywhere |
 Severity:  Major| Resolution:
 Keywords:  TorBrowserTeam201806R|  Actual Points:
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by arthuredelstein):

 * keywords:   => TorBrowserTeam201806R
 * status:  new => needs_review


Comment:

 Replying to [comment:2 legind]:
 > A new release, `2018.6.21` has been made.  Any Tor Browser which updates
 add-ons from within the browser will no longer be vulnerable.  A new tag
 has been pushed, `2018.6.21` which matches this release.

 Thanks! I have a patch updating the HTTPS-E hash in our build here:
 https://github.com/arthuredelstein/tor-browser-build/commits/26451

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26355 [Applications/Tor Browser]: Make sure only Windows users on Windows7+ are trying to use Tor Browser based on ESR60

2018-06-21 Thread Tor Bug Tracker & Wiki
#26355: Make sure only Windows users on Windows7+ are trying to use Tor Browser
based on ESR60
-+-
 Reporter:  gk   |  Owner:  pospeselr
 Type:  task | Status:
 |  needs_review
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  ff60-esr, TorBrowserTeam201806R  |  Actual Points:
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by pospeselr):

 * status:  assigned => needs_review
 * keywords:  ff60-esr, TorBrowserTeam201806 => ff60-esr,
 TorBrowserTeam201806R


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26355 [Applications/Tor Browser]: Make sure only Windows users on Windows7+ are trying to use Tor Browser based on ESR60

2018-06-21 Thread Tor Bug Tracker & Wiki
#26355: Make sure only Windows users on Windows7+ are trying to use Tor Browser
based on ESR60
+---
 Reporter:  gk  |  Owner:  pospeselr
 Type:  task| Status:  assigned
 Priority:  High|  Milestone:
Component:  Applications/Tor Browser|Version:
 Severity:  Normal  | Resolution:
 Keywords:  ff60-esr, TorBrowserTeam201806  |  Actual Points:
Parent ID:  | Points:
 Reviewer:  |Sponsor:
+---
Changes (by pospeselr):

 * Attachment "error_popup.png" added.


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26355 [Applications/Tor Browser]: Make sure only Windows users on Windows7+ are trying to use Tor Browser based on ESR60

2018-06-21 Thread Tor Bug Tracker & Wiki
#26355: Make sure only Windows users on Windows7+ are trying to use Tor Browser
based on ESR60
+---
 Reporter:  gk  |  Owner:  pospeselr
 Type:  task| Status:  assigned
 Priority:  High|  Milestone:
Component:  Applications/Tor Browser|Version:
 Severity:  Normal  | Resolution:
 Keywords:  ff60-esr, TorBrowserTeam201806  |  Actual Points:
Parent ID:  | Points:
 Reviewer:  |Sponsor:
+---

Comment (by pospeselr):

 Two small patches to fix this, one in the update_response config, adding
 "minSupportedOSVersion: 6.1" string for win32 and win64 builds.  The other
 is to the nsis build script which adds the following pop-up to the
 installer when it's detected to be running on a version of windows older
 than Windows 7 (verified in Vista and 7 VMs).

 [[Image(https://trac.torproject.org/projects/tor/raw-
 attachment/ticket/26355/error_popup.png)]]

 One other thing I noticed while looking at the nsis script is that we're
 providing the option to add Desktop and Start Menu shortcuts.  Since we
 don't provide an uninstaller to clean up the Start Menu, should that be
 removed, or at least put the Start Menu shortcut generation into a second
 not auto-selected option?  I would think most users probably wouldn't
 remember to delete the Start Menu shortcut if they delete Tor Browser.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26355 [Applications/Tor Browser]: Make sure only Windows users on Windows7+ are trying to use Tor Browser based on ESR60

2018-06-21 Thread Tor Bug Tracker & Wiki
#26355: Make sure only Windows users on Windows7+ are trying to use Tor Browser
based on ESR60
+---
 Reporter:  gk  |  Owner:  pospeselr
 Type:  task| Status:  assigned
 Priority:  High|  Milestone:
Component:  Applications/Tor Browser|Version:
 Severity:  Normal  | Resolution:
 Keywords:  ff60-esr, TorBrowserTeam201806  |  Actual Points:
Parent ID:  | Points:
 Reviewer:  |Sponsor:
+---
Changes (by pospeselr):

 * Attachment "0001-Bug-26355-Make-sure-only-Windows-users-on-Windows7-a
 (tor-browser-build).patch" added.


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26355 [Applications/Tor Browser]: Make sure only Windows users on Windows7+ are trying to use Tor Browser based on ESR60

2018-06-21 Thread Tor Bug Tracker & Wiki
#26355: Make sure only Windows users on Windows7+ are trying to use Tor Browser
based on ESR60
+---
 Reporter:  gk  |  Owner:  pospeselr
 Type:  task| Status:  assigned
 Priority:  High|  Milestone:
Component:  Applications/Tor Browser|Version:
 Severity:  Normal  | Resolution:
 Keywords:  ff60-esr, TorBrowserTeam201806  |  Actual Points:
Parent ID:  | Points:
 Reviewer:  |Sponsor:
+---
Changes (by pospeselr):

 * Attachment "0001-Bug-26355-Make-sure-only-Windows-users-on-Windows7-a
 (tbb-windows-installer).patch" added.


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26457 [Core Tor/Tor]: Rewrite the UTF-8 conformity section of prop#285

2018-06-21 Thread Tor Bug Tracker & Wiki
#26457: Rewrite the UTF-8 conformity section of prop#285
---+
 Reporter:  teor   |  Owner:  teor
 Type:  enhancement| Status:  needs_review
 Priority:  Medium |  Milestone:  Tor: 0.3.5.x-final
Component:  Core Tor/Tor   |Version:
 Severity:  Normal | Resolution:
 Keywords:  torspec, fast-fix  |  Actual Points:
Parent ID: | Points:
 Reviewer: |Sponsor:
---+
Changes (by teor):

 * status:  assigned => needs_review


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #26457 [Core Tor/Tor]: Rewrite the UTF-8 conformity section of prop#285

2018-06-21 Thread Tor Bug Tracker & Wiki
#26457: Rewrite the UTF-8 conformity section of prop#285
--+
 Reporter:  teor  |  Owner:  teor
 Type:  enhancement   | Status:  assigned
 Priority:  Medium|  Milestone:  Tor: 0.3.5.x-final
Component:  Core Tor/Tor  |Version:
 Severity:  Normal|   Keywords:  torspec, fast-fix
Actual Points:|  Parent ID:
   Points:|   Reviewer:
  Sponsor:|
--+
 I rewrote the UTF-8 conformity section of prop#285 to be more specific,
 use terminology from The Unicode Standard, and ban byte-swapped byte order
 marks.

 Please see my branch utf-8-extra on
 https://github.com/teor2345/torspec.git

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #26456 [Applications/Tor Browser]: HTTP .onion sites inherit previous page's certificate information

2018-06-21 Thread Tor Bug Tracker & Wiki
#26456: HTTP .onion sites inherit previous page's certificate information
--+
 Reporter:  pospeselr |  Owner:  pospeselr
 Type:  defect| Status:  assigned
 Priority:  High  |  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal|   Keywords:
  |  TorBrowserTeam201806
Actual Points:|  Parent ID:
   Points:|   Reviewer:
  Sponsor:|
--+
 Seems to be an edge case from the #23247 patch.  To reproduce:

  - Navigate to a vanilla or .onion HTTPS site
  - From same tab, navigate to a .onion HTTP site

 The HTTP .onion will have the onion+lock icon, and the Page Info pane will
 be full of the previous HTTPS site's certificate information.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26428 [Applications/Tor Browser]: Starting a stable Tor Browser build fails with `git submodule` error

2018-06-21 Thread Tor Bug Tracker & Wiki
#26428: Starting a stable Tor Browser build fails with `git submodule` error
+--
 Reporter:  gk  |  Owner:  tbb-team
 Type:  defect  | Status:  closed
 Priority:  Immediate   |  Milestone:
Component:  Applications/Tor Browser|Version:
 Severity:  Blocker | Resolution:  fixed
 Keywords:  tbb-rbm, TorBrowserTeam201806R  |  Actual Points:
Parent ID:  | Points:
 Reviewer:  |Sponsor:
+--

Comment (by boklm):

 There is a new tag `2018.6.21`, so it looks like we can revert
 b3cc97d4e4adb4709c1e367d82bd1e389bba60f0 and use the new tag.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #26455 [Core Tor/Tor]: use correct CARGO_HOME in test_rust.sh

2018-06-21 Thread Tor Bug Tracker & Wiki
#26455: use correct CARGO_HOME in test_rust.sh
+--
 Reporter:  catalyst|  Owner:  catalyst
 Type:  defect  | Status:  assigned
 Priority:  Medium  |  Milestone:  Tor: 0.3.3.x-final
Component:  Core|Version:
  Tor/Tor   |
 Severity:  Normal  |   Keywords:  rust, tor-ci, tor-test, fast-fix
Actual Points:  |  Parent ID:
   Points:  |   Reviewer:
  Sponsor:  |
+--
 `make check` currently doesn't seem to work with `--enable-rust` without
 `--enable-cargo-online-mode`.

 It looks like cargo expects `CARGO_HOME` to point to the `.cargo`
 directory itself, not the directory containing it.  Builds seem to work
 anyway because we `cd` to a directory where cargo can find a `.cargo`
 directory, even though we set `CARGO_HOME` incorrectly.

 This might be making Jenkins builds fail too:

 https://jenkins.torproject.org/job/tor-ci-linux-master-
 rust/ARCHITECTURE=i386,SUITE=sid/lastBuild/console

 {{{
 20:04:05 FAIL: src/test/test_rust.sh
 20:04:05 ===
 20:04:05
 20:04:05 error: attempting to make an HTTP request, but --frozen was
 specified
 20:04:05 error: attempting to make an HTTP request, but --frozen was
 specified
 }}}

 This incarnation of this bug seems to be in the fix for #26258, but
 similar problems seem to exist in releases as far back as 0.3.1.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26450 [Applications/Tor Browser]: Build components for which dependencies are already available

2018-06-21 Thread Tor Bug Tracker & Wiki
#26450: Build components for which dependencies are already available
+--
 Reporter:  gk  |  Owner:  tbb-team
 Type:  enhancement | Status:  needs_review
 Priority:  Medium  |  Milestone:
Component:  Applications/Tor Browser|Version:
 Severity:  Normal  | Resolution:
 Keywords:  tbb-rbm, TorBrowserTeam201806R  |  Actual Points:
Parent ID:  | Points:
 Reviewer:  |Sponsor:
+--
Changes (by boklm):

 * keywords:  tbb-rbm => tbb-rbm, TorBrowserTeam201806R
 * status:  new => needs_review


Comment:

 So the goal would be to be able build almost everything while the
 langpacks are not yet available, and then be able to do the final builds
 quickly once the langpacks are available?

 I think we could remove the dependency on `firefox-langpacks` during
 testbuilds, where we don't build any locale. This should allow us to run
 `make testbuild` (after editing `rbm.local.conf` to select `alpha` or
 `release` in `torbrowser-testbuild`. Or maybe we could think about adding
 `testbuild-alpha`, `testbuild-release`, `testbuild-nightly` targets if
 that's easier) to start the initial building while the langpacks are not
 yet available.

 In branch `bug_26450` I made a patch that should disable the dependency on
 `firefox-langpacks` when the list of locales is empty (which should be the
 case in `testbuild`):
 https://gitweb.torproject.org/user/boklm/tor-browser-
 build.git/commit/?h=bug_26450=88ff6003f2d8b45aca111e2f7cfcce3837fe5414

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #26454 [Internal Services/Services Admin Team]: Please create email alias/forwarding and LDAP for Shane

2018-06-21 Thread Tor Bug Tracker & Wiki
#26454: Please create email alias/forwarding and LDAP for Shane
-+-
 Reporter:  ewyatt   |  Owner:  (none)
 Type:  task | Status:  new
 Priority:  High |  Milestone:
Component:  Internal Services/Services   |Version:
  Admin Team |
 Severity:  Normal   |   Keywords:
Actual Points:   |  Parent ID:
   Points:   |   Reviewer:
  Sponsor:   |
-+-
 {{{
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA512


 Please create email alias and LDAP for our new Android OS Developer:

 First: Shane
 Last: Isbell
 Desired uid: sisbell
 Forwarding address: sisb...@mailfence.com
 PGP: EF39 4169 D97F 8C4D 3737  7028 A317 3A15 99ED B04C

 -BEGIN PGP SIGNATURE-
 Comment: GPGTools - https://gpgtools.org

 iQIzBAEBCgAdFiEENecqn2ZVRfkstmYkugyUAPgPkc4FAlssJSMACgkQugyUAPgP
 kc4tLg//ULjfl3BR88ePYLOE+NOXG55ZQewBP0Bul1wnljgDlGz0Nl7NQU7RkWHe
 2xx+k6G1TxuP0cV3qDpMER1be2bGg41Zk3fvDu8N2hroH4LnhbZ+zbXbAkMgTQNx
 5+JV3vcGYSDkKedsBbh28WcsWMlYRy49Y8HT60pHZjwEIqiNLM9tj0r2HdhIZ58j
 G5qGGpp77F25/yOYU5ZNnxq0ELSNIr8FKgOkOdJsewN+tGr8I6FyuXOw7zsLySHi
 2ygxM2d3ZfaavEyBiFZZF7wZPPE55qwIRcE82ShPQE6uxg6DFLGaZtHK4FSuOkQm
 K/3kOVPvG3QMftqTNTus7wVKi6TYM62EhnsNPJjVu0nRIczu4KEyJcpMXOYVlIB7
 MQNHLzuCxlCKh59AKZr2PMtvd3yO71Nowpk3lV+9PeYkX9Lnvzm5QXPkegCozFrv
 slAIRST/t4DOCCEbHjXxHDe7dxzvixeeBK1THOPbVFXO0v4UYNXumLReHSpICVoN
 v6HRocv1jZjLAJcXTIE5ljDxxpyrzxrxYL5VKoTlXKp4xphNyffCbBGWLLTxuHR6
 o0EwoxgtQ/gQuzDslheNUzzXgG1TJavjECFap/6T4ydqo36eDvUwQfMggBdC5+9F
 aG0R9hH88s+4mwZoaFVeg2h4JGhnWmi58AC6D/rwacbAvvi4X00=
 =o9AP
 -END PGP SIGNATURE-
 }}}

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #26453 [Internal Services/Tor Sysadmin Team]: Please create email alias/forwarding and LDAP for emma

2018-06-21 Thread Tor Bug Tracker & Wiki
#26453: Please create email alias/forwarding and LDAP for emma
-+-
 Reporter:  ewyatt   |  Owner:  tpa
 Type:  task | Status:  new
 Priority:  High |  Milestone:
Component:  Internal Services/Tor Sysadmin Team  |Version:
 Severity:  Normal   |   Keywords:
Actual Points:   |  Parent ID:
   Points:   |   Reviewer:
  Sponsor:   |
-+-
 {{{
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA512


 Please create email alias and LDAP for our new Localization Coordinator:

 First: emma
 Last: peel
 Desired uid: emmapeel
 Forwarding address: emma.p...@riseup.net
 PGP: B885 D8DC E017 3B42 A402  021F 364E 1DEA 2C4F 8835

 -BEGIN PGP SIGNATURE-
 Comment: GPGTools - https://gpgtools.org

 iQIzBAEBCgAdFiEENecqn2ZVRfkstmYkugyUAPgPkc4FAlssIuIACgkQugyUAPgP
 kc7ECg/8CMBQhJHP7A5ZpblZKeUY6SUjuFHHkm8DJBHUghaGi5U1mGnVGsLKQgxP
 2lJ3HXX8/K8NjY1ZXF192BeXqTtPLy5Eqo7mfCcwWe8CE4/4RJrIcLmvUwuUcFfI
 D5sVA/d+klshEGPotPBIlZ7WUXhuTTZfnq/WAmvLmK4TrDCPjt6fQv6zsLl0gZJt
 pWt4t5UzWG9i6UBWby/6TJ5NTL+oFcjSYWOMHbL1zaB6BbHbXujPPrFLOX5cH8J3
 /6M3jR2xQIlgRczBpLstCzXWrwo17hUEeGMDIYdORtVrg+44JhlfRk7/FIcyUVpK
 kX+COXlN8R6DlNOc/cRN0Nh7jAQlGCJwmpujN6eebRwySs6emZ18IZuo8V/I8sAb
 MKAtcCBMZWb1pkcec6eTFEQaVuZGAI3jkUN73N3Ty78GeokEC7ayAT+WRX4d4EUc
 TDp5StaeUSjyQrrDhCEgcCN7pUaWw7Co7NBooOFhaBeu1rxpDGSXmg9zd/p/hp2+
 TPCZfTvmPgL9wWU7ePt1Yfd5ut8pOLE6AbkrjK7S8+bTeNF3SPEJXTFGJtzSPsts
 W2yu71HlT3VA+ukcfCGNP2O8zE1uE96DEHg/ntEbWTT+5xRTHOvghjg3ns6fbTpO
 qHj+kqzrLYJNIJ7nRZuX6Md86rLDKYW/pAveU0mxati9BwZaOSQ=
 =3gyS
 -END PGP SIGNATURE-
 }}}

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26452 [Internal Services/Tor Sysadmin Team]: Please create email alias/forwarding for Helen

2018-06-21 Thread Tor Bug Tracker & Wiki
#26452: Please create email alias/forwarding for Helen
-+-
 Reporter:  ewyatt   |  Owner:  tpa
 Type:  task | Status:  new
 Priority:  High |  Milestone:
Component:  Internal Services/Tor Sysadmin Team  |Version:
 Severity:  Normal   | Resolution:
 Keywords:   |  Actual Points:
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by ewyatt):

 I have verified Helen's key, but I'm not able to send it to the key
 server. Will ask others to help Helen adjust her settings to be able to
 upload it herself.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #25386 [Core Tor/Tor]: Link Rust Tests to C Dependencies in Tor (allow integration testing from Rust to C)

2018-06-21 Thread Tor Bug Tracker & Wiki
#25386: Link Rust Tests to C Dependencies in Tor (allow integration testing from
Rust to C)
-+-
 Reporter:  Hello71  |  Owner:  nickm
 Type:  defect   | Status:
 |  accepted
 Priority:  High |  Milestone:  Tor:
 |  0.3.4.x-final
Component:  Core Tor/Tor |Version:  Tor:
 |  0.3.3.1-alpha
 Severity:  Normal   | Resolution:
 Keywords:  rust, tor-test, 033-backport,|  Actual Points:
  review-group-34, 034-triage-20180328,  |
  034-included-20180401  |
Parent ID:   | Points:  3
 Reviewer:  isis |Sponsor:
 |  SponsorQ
-+-

Comment (by teor):

 Replying to [comment:69 nickm]:
 > Replying to [comment:67 Hello71]:
 > > Replying to [comment:64 nickm]:
 > > > Merged "additional_rust_fixes" to 0.3.4 and forward.
 > > >
 > > > > For the doctests, should we just have a policy of "if you call C
 and also have doctests for your code, then you have to put ignore on the
 doctests or otherwise disable them"?
 > > >
 > > > I think that's the best we can do, until rustdoc starts passing the
 right options to rustc.  (Perhaps it is doing so already, and my desktop
 rust is just too old.)
 > >
 > > I guess you missed it on IRC, rustdoc already accepts -C on nightly:
 https://github.com/rust-lang/rust/pull/49956. I assume this will be in
 1.27, to be released today.
 >
 > Okay; we'd have either wait a while to use this, until we can rely on
 folks having this. (Alternatively, we could make it optional.)

 Can we make it optional?

 I wrote extensive rustdoc tests for the PrivCount random double code. I
 was using OSRng as a workaround until #24660, but I'd like to use our
 wrapped Rng instead.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #26452 [Internal Services/Tor Sysadmin Team]: Please create email alias/forwarding for Helen

2018-06-21 Thread Tor Bug Tracker & Wiki
#26452: Please create email alias/forwarding for Helen
-+-
 Reporter:  ewyatt   |  Owner:  tpa
 Type:  task | Status:  new
 Priority:  High |  Milestone:
Component:  Internal Services/Tor Sysadmin Team  |Version:
 Severity:  Normal   |   Keywords:
Actual Points:   |  Parent ID:
   Points:   |   Reviewer:
  Sponsor:   |
-+-
 {{{
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA512


 Please create email alias/forwarding (no LDAP) for our new User Research
 Coordinator:

 First: Helen
 Last: Nyinakiiza
 Desired uid: nyinz
 Forwarding address: helenny...@gmail.com
 PGP: A42C A822 09F5 A976 9E85  33A7 D2AC 41AE 8186 85AE

 -BEGIN PGP SIGNATURE-
 Comment: GPGTools - https://gpgtools.org

 iQIzBAEBCgAdFiEENecqn2ZVRfkstmYkugyUAPgPkc4FAlssIHcACgkQugyUAPgP
 kc4CWw//c4OpiUkL7BfJBe+Uvky3upWeDnEWBPf1I2bGp34+1GGQcQ5uxZRx71TO
 P/C/lNbM4Wtw+KhgSe/fP0Hh/xvYLGzrMKowoGJ4Yy6BJQB1B8+4SxnFmJI31W9p
 0p9wYdsZ9BF22mujoqZON/MLvDODZ1QZaygrZa1QiGYiUw9/IiPZ/DMjkdJuDdkR
 rUHXBlkue1vj+qkvOZBJNO7S1M4N56slsRFS0lvAElhwae/1rmLZgplbTSmDzlZl
 RXm6udK0ofvrubvC0WLwZKAldW6n0Inv8Rlx9AZeFrNoKFci9MXLkeEjTM7+SpcE
 miaabTl0jcBFeqKkq3GX+wFSboy9VMQy7LG+VCzGD1cHF1SDtMxCuVB6qp69vIjH
 qmEcZMXALVlDCNtJ6gQFqsOoJkN5ez/7ZI8bE+imCXoYDHvJkDGOcmE6qy+FAOtZ
 eS1X/4WKZnljTJAYXeRDOV4SbLx6Nx0xT7PaIdD8uqo80PZnt/USLFqtn1ownR0y
 GyqCb4ZrnMJajmNfFnH85VO4hhr5h3IwwpE39tkLVxXML9korFuQzrkWA1opLWCL
 3OLsfbKFF/IuNjIhH1oKLjT0qFktvpSN7SjxEGVqT/z+6Z8JfRwKgp597b7LklEL
 GVIC8/yxd6pB55lJyem/5RZsdKrTvZ4oLfxEgIA19sgWOHHNEIE=
 =rn06
 -END PGP SIGNATURE-
 }}}

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26451 [HTTPS Everywhere/EFF-HTTPS Everywhere]: HTTPS-Everywhere freezes the browser when entering URLS like ./a.

2018-06-21 Thread Tor Bug Tracker & Wiki
#26451: HTTPS-Everywhere freezes the browser when entering URLS like ./a.
-+-
 Reporter:  gk   |  Owner:  legind
 Type:  defect   | Status:  new
 Priority:  High |  Milestone:
Component:  HTTPS Everywhere/EFF-HTTPS   |Version:
  Everywhere |
 Severity:  Major| Resolution:
 Keywords:   |  Actual Points:
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by legind):

 A new release, `2018.6.21` has been made.  Any Tor Browser which updates
 add-ons from within the browser will no longer be vulnerable.  A new tag
 has been pushed, `2018.6.21` which matches this release.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26429 [Applications/Tor Browser]: Add native OnionShare support

2018-06-21 Thread Tor Bug Tracker & Wiki
#26429: Add native OnionShare support
--+--
 Reporter:  sysrqb|  Owner:  tbb-team
 Type:  enhancement   | Status:  reopened
 Priority:  Low   |  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by cypherpunks):

 Replying to [comment:6 cypherpunks]:
 > Yes, let's increase the TorBrowser attack surface

 It will only be launched when the user wants to share some files, it's
 unclear how an attacker has much advantage here vs with classic OnionShare
 (they're the same I think).

 > and include OnionShare with it's ADD_ONION backdoor. /s

 What? Do you know what all those words, i.e. "include", "it", "is",
 "ADD_ONION", "backdoor"...etc mean? I can teach right now if you don't.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24658 [Core Tor/Tor]: Split/refactor crypto.h into smaller separate modules

2018-06-21 Thread Tor Bug Tracker & Wiki
#24658: Split/refactor crypto.h into smaller separate modules
-+-
 Reporter:  isis |  Owner:  nickm
 Type:  enhancement  | Status:
 |  needs_revision
 Priority:  Medium   |  Milestone:  Tor:
 |  0.3.5.x-final
Component:  Core Tor/Tor |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tor-crypto, refactor, review-|  Actual Points:
  group-32, review-group-34, |
  033-triage-20180320, 033-included-20180320 |
Parent ID:   | Points:
 Reviewer:  nickm, isis  |Sponsor:
 |  Sponsor8-can
-+-

Comment (by bc348):

 Replying to [comment:56 nickm]:
 > Does 599b53f0469e47 solve that for you?

 Yes. compiles ok, but after today's bunch of commits some tests do not
 pass


 {{{
 geoip/load_file: [forking]
   FAIL src/test/test_geoip.c:445: assert(dhex OP_EQ
 geoip_db_digest(AF_INET)): <9350CC266D3467466AB28C354DFAD7FB7706A5D7> vs
 
   [load_file FAILED]
 geoip/load_file6: [forking]
   FAIL src/test/test_geoip.c:520: assert(dhex OP_EQ
 geoip_db_digest(AF_INET6)):  vs
 <9181B66BD1932D195B50713C6EA4762AF0498BCB>
   [load_file6 FAILED]
 }}}

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26451 [HTTPS Everywhere/EFF-HTTPS Everywhere]: HTTPS-Everywhere freezes the browser when entering URLS like ./a.

2018-06-21 Thread Tor Bug Tracker & Wiki
#26451: HTTPS-Everywhere freezes the browser when entering URLS like ./a.
-+-
 Reporter:  gk   |  Owner:  legind
 Type:  defect   | Status:  new
 Priority:  High |  Milestone:
Component:  HTTPS Everywhere/EFF-HTTPS   |Version:
  Everywhere |
 Severity:  Major| Resolution:
 Keywords:   |  Actual Points:
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by legind):

 This should be fixed in `master` now, see https://github.com/EFForg/https-
 
everywhere/compare/a778bc5be14605280f3abd86c1fc3d910d95e88d...5b93c6ab7329c7a9080b9bbce413137ca2c43439.
 I will make a release now.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26058 [Applications/Tor Browser]: Revert fix for #18743

2018-06-21 Thread Tor Bug Tracker & Wiki
#26058: Revert fix for #18743
-+-
 Reporter:  gk   |  Owner:  tbb-
 |  team
 Type:  enhancement  | Status:  closed
 Priority:  Medium   |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:  fixed
 Keywords:  tbb-torbutton, ff60-esr, |  Actual Points:
  TorBrowserTeam201806R  |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * status:  needs_review => closed
 * resolution:   => fixed


Comment:

 Thanks. Merged to `master` (commit
 824e6df6e8177fabcb33dac06142332add64a7dd).

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26429 [Applications/Tor Browser]: Add native OnionShare support

2018-06-21 Thread Tor Bug Tracker & Wiki
#26429: Add native OnionShare support
--+--
 Reporter:  sysrqb|  Owner:  tbb-team
 Type:  enhancement   | Status:  reopened
 Priority:  Low   |  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by cypherpunks):

 Yes, let's increase the TorBrowser attack surface and include OnionShare
 with it's ADD_ONION backdoor. /s

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #20628 [Applications/Tor Browser]: More locales for Tor Browser

2018-06-21 Thread Tor Bug Tracker & Wiki
#20628: More locales for Tor Browser
-+-
 Reporter:  arthuredelstein  |  Owner:  tbb-
 |  team
 Type:  defect   | Status:
 |  needs_revision
 Priority:  Medium   |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-torbutton, tbb-easy, ux-team,|  Actual Points:
  TorBrowserTeam201806   |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * status:  needs_review => needs_revision
 * keywords:  tbb-torbutton, tbb-easy, ux-team, TorBrowserTeam201806R =>
 tbb-torbutton, tbb-easy, ux-team, TorBrowserTeam201806


Comment:

 The first two patches look good. I merged them to `master` (in Torbutton's
 case commit 46c71b6a528e70386fb8165f7d1507615d1a2a47 and in Tor Launcher's
 case commit f34580ab7e70487e5c97c67969326111ac00d074)

 I think the other two need revision because there is no `sv` lang pack
 Mozilla ships, rather `sv-SE`. The bundle name should match that I think.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26058 [Applications/Tor Browser]: Revert fix for #18743

2018-06-21 Thread Tor Bug Tracker & Wiki
#26058: Revert fix for #18743
-+-
 Reporter:  gk   |  Owner:  tbb-
 |  team
 Type:  enhancement  | Status:
 |  needs_review
 Priority:  Medium   |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-torbutton, ff60-esr, |  Actual Points:
  TorBrowserTeam201806R  |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by arthuredelstein):

 Looks good to me!

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #26451 [HTTPS Everywhere/EFF-HTTPS Everywhere]: HTTPS-Everywhere freezes the browser when entering URLS like ./a.

2018-06-21 Thread Tor Bug Tracker & Wiki
#26451: HTTPS-Everywhere freezes the browser when entering URLS like ./a.
-+-
 Reporter:  gk   |  Owner:  legind
 Type:  defect   | Status:  new
 Priority:  High |  Milestone:
Component:  HTTPS Everywhere/EFF-HTTPS   |Version:
  Everywhere |
 Severity:  Major|   Keywords:
Actual Points:   |  Parent ID:
   Points:   |   Reviewer:
  Sponsor:   |
-+-
 Starting with the latest HTTPS-Everywhere update (2018.6.13) the browser
 freezes when URLs like `./a.` are entered into the URL bar. davtur19
 reported this bug via our HackerOne bug bounty program to us and suggested
 that this is even exploitable by web content doing things like `http://./a.;>`

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26450 [Applications/Tor Browser]: Build components for which dependencies are already available

2018-06-21 Thread Tor Bug Tracker & Wiki
#26450: Build components for which dependencies are already available
--+--
 Reporter:  gk|  Owner:  tbb-team
 Type:  enhancement   | Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-rbm   |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by arthuredelstein):

 One option might be to create a project that does everything but the lang-
 packs. (call it say, tor-browser-en-US). Then tor-browser would depend on
 that project. No change to rbm needed in that case.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #26450 [Applications/Tor Browser]: Build components for which dependencies are already available

2018-06-21 Thread Tor Bug Tracker & Wiki
#26450: Build components for which dependencies are already available
--+--
 Reporter:  gk|  Owner:  tbb-team
 Type:  enhancement   | Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal|   Keywords:  tbb-rbm
Actual Points:|  Parent ID:
   Points:|   Reviewer:
  Sponsor:|
--+--
 We are downloading the SHA5125UMS file right in the beginning of the Tor
 Browser build but actually need that file only at the end for verifying
 the lang packs. Arthur had the idea to download it at the end as well. The
 rationale is that we can save time building because the lang packs is the
 last thing that shows up on Mozilla's servers while the build tag is way
 earlier available that would allow us to deliver an update faster and/or
 have more time for QA.

 The general idea Arthur had is building intelligently only those
 components that can already be built and once there are none left but not
 everything got build we should fail.

 Not sure whether that is worth the effort, though, given that it in
 practice should only affect the Mozilla lang pack situation we landed in
 right now (and previously a bunch of times)

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #22716 [Community/Relays]: Write a blog post advocating for getting more relays

2018-06-21 Thread Tor Bug Tracker & Wiki
#22716: Write a blog post advocating for getting more relays
--+--
 Reporter:  cypherpunks   |  Owner:  phoul
 Type:  project   | Status:  assigned
 Priority:  Medium|  Milestone:
Component:  Community/Relays  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by phoul):

 * component:  Community/Outreach => Community/Relays


Comment:

 Switching component to relays, just to keep it together with similar
 tasks.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #10890 [Community/Tor Support]: Redirect “get bridges” messages automatically

2018-06-21 Thread Tor Bug Tracker & Wiki
#10890: Redirect “get bridges” messages automatically
---+
 Reporter:  lunar  |  Owner:  phoul
 Type:  task   | Status:  closed
 Priority:  Medium |  Milestone:
Component:  Community/Tor Support  |Version:
 Severity:  Normal | Resolution:  fixed
 Keywords:  bridgedb-email |  Actual Points:
Parent ID: | Points:
 Reviewer: |Sponsor:
---+
Changes (by phoul):

 * status:  assigned => closed
 * resolution:   => fixed


Comment:

 I believe this is solved, as the generic autoresponse includes a pointer
 to the correct bridge email / website.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #21835 [Community/Tor Support]: Add information about hostingcompany that offers Tor Relays / Exit node hosting

2018-06-21 Thread Tor Bug Tracker & Wiki
#21835: Add information about hostingcompany that offers Tor Relays / Exit node
hosting
---+--
 Reporter:  sweg   |  Owner:  phoul
 Type:  enhancement| Status:  closed
 Priority:  Low|  Milestone:
Component:  Community/Tor Support  |Version:  Tor: unspecified
 Severity:  Trivial| Resolution:  user disappeared
 Keywords:  Hosting|  Actual Points:
Parent ID: | Points:
 Reviewer: |Sponsor:
---+--
Changes (by phoul):

 * status:  needs_information => closed
 * resolution:   => user disappeared


Comment:

 I think this user was looking for the GoodBadISPs list provided by ahf,
 closing for now.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #26449 [Core Tor/Tor]: Add travis builders for Rust without fragile-hardening

2018-06-21 Thread Tor Bug Tracker & Wiki
#26449: Add travis builders for Rust without fragile-hardening
--+
 Reporter:  nickm |  Owner:  (none)
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:  Tor: 0.3.4.x-final
Component:  Core Tor/Tor  |Version:
 Severity:  Normal|   Keywords:  ci
Actual Points:|  Parent ID:
   Points:|   Reviewer:
  Sponsor:|
--+
 We're having problems getting fragile hardening to link reliably with
 Rust's tests.  Until we get them solved, we should have some travis
 builders to make sure that Rust still works when the C hardening is not
 turned on.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26449 [Core Tor/Tor]: Add travis builders for Rust without fragile-hardening

2018-06-21 Thread Tor Bug Tracker & Wiki
#26449: Add travis builders for Rust without fragile-hardening
--+
 Reporter:  nickm |  Owner:  (none)
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:  Tor: 0.3.4.x-final
Component:  Core Tor/Tor  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ci rust rust-linking  |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+
Changes (by nickm):

 * keywords:  ci => ci rust rust-linking


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26242 [Applications/Tor Browser]: Implement update strategy for TBA

2018-06-21 Thread Tor Bug Tracker & Wiki
#26242: Implement update strategy for TBA
--+--
 Reporter:  igt0  |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-mobile|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by igt0):

 I have been testing the Fennec UpdateService to download and update TBA,
 my finds:

 1. It downloads a new apk(updated version) and saves it to an external
 storage. So the user must have the WRITE_EXTERNAL_STORAGE permission
 enabled.

 2. We should not allow the user to use the UpdateService when the app was
 installed using any app store(google play, f-droid).

 3. After downloading the apk, there are two methods to install it. Fennec
 can install it for you, or it sends a notification asking the user to
 click on it to install the apk. For us, I think that the second one has a
 better user experience.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26445 [Applications/Tor Browser]: Firefox still crashes like a trash

2018-06-21 Thread Tor Bug Tracker & Wiki
#26445: Firefox still crashes like a trash
--+--
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-crash |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by cypherpunks):

 
https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Hacking/DebuggingOnWindows
 Good Luck

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26439 [Core Tor/Tor]: Use the "commands" element of AC_CONFIG_FILES to make generated scripts executable

2018-06-21 Thread Tor Bug Tracker & Wiki
#26439: Use the "commands" element of AC_CONFIG_FILES to make generated scripts
executable
--+
 Reporter:  nickm |  Owner:  nickm
 Type:  defect| Status:  needs_review
 Priority:  Medium|  Milestone:  Tor: 0.3.5.x-final
Component:  Core Tor/Tor  |Version:
 Severity:  Normal| Resolution:
 Keywords:  fast-fix  |  Actual Points:
Parent ID:| Points:
 Reviewer:  dgoulet   |Sponsor:
--+
Changes (by nickm):

 * status:  needs_revision => needs_review


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26439 [Core Tor/Tor]: Use the "commands" element of AC_CONFIG_FILES to make generated scripts executable

2018-06-21 Thread Tor Bug Tracker & Wiki
#26439: Use the "commands" element of AC_CONFIG_FILES to make generated scripts
executable
--+
 Reporter:  nickm |  Owner:  nickm
 Type:  defect| Status:  needs_revision
 Priority:  Medium|  Milestone:  Tor: 0.3.5.x-final
Component:  Core Tor/Tor  |Version:
 Severity:  Normal| Resolution:
 Keywords:  fast-fix  |  Actual Points:
Parent ID:| Points:
 Reviewer:  dgoulet   |Sponsor:
--+

Comment (by nickm):

 I think it was based on a bad master.  Hang on a second... I just force-
 pushed a replacement.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #26448 [Core Tor/Tor]: Document check-includes in coding standards or helpful tools

2018-06-21 Thread Tor Bug Tracker & Wiki
#26448: Document check-includes in coding standards or helpful tools
--+
 Reporter:  nickm |  Owner:  (none)
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:  Tor: 0.3.5.x-final
Component:  Core Tor/Tor  |Version:
 Severity:  Normal|   Keywords:
Actual Points:|  Parent ID:
   Points:|   Reviewer:
  Sponsor:|
--+


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #26447 [Core Tor/Tor]: Add check-includes to check-local?

2018-06-21 Thread Tor Bug Tracker & Wiki
#26447: Add check-includes to check-local?
--+
 Reporter:  nickm |  Owner:  (none)
 Type:  enhancement   | Status:  new
 Priority:  Medium|  Milestone:  Tor: 0.3.5.x-final
Component:  Core Tor/Tor  |Version:
 Severity:  Normal|   Keywords:  easy ci modularity
Actual Points:|  Parent ID:
   Points:|   Reviewer:
  Sponsor:|
--+
 We now have a handy tool that lets us check our includes for modularity
 violations.  We could make it part of "make check", and have our CI
 enforce it for us!

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26446 [Core Tor/Tor]: Split out the easier libraries from lib/common

2018-06-21 Thread Tor Bug Tracker & Wiki
#26446: Split out the easier libraries from lib/common
--+
 Reporter:  nickm |  Owner:  nickm
 Type:  task  | Status:  closed
 Priority:  Medium|  Milestone:  Tor: 0.3.5.x-final
Component:  Core Tor/Tor  |Version:
 Severity:  Normal| Resolution:  implemented
 Keywords:  refactoring   |  Actual Points:
Parent ID:| Points:
 Reviewer:  dgoulet   |Sponsor:
--+
Changes (by nickm):

 * status:  merge_ready => closed
 * resolution:   => implemented


Comment:

 Merging after discussion.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #18375 [Applications/Tor Browser]: HTTPSEverywhere/NoScript becomes disabled and not shown in about:addons after some launches. (was: HTTPSEverywhere becomes disabled and not shown in a

2018-06-21 Thread Tor Bug Tracker & Wiki
#18375: HTTPSEverywhere/NoScript becomes disabled and not shown in about:addons
after some launches.
--+---
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-security  |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---
Changes (by cypherpunks):

 * keywords:   => tbb-security


Comment:

 How it works with TBB 7.5.5 (NoScript 5.1.8.6):
 {{{
 Tor NOTICE: Heartbeat: Tor's uptime is 4 days 6:20 hours, with 0 circuits
 open. I've sent 22.72 MB and received 100.46 MB.
 Tor WARN: comparing times on millisecond detail too far apart: 31581236
 seconds
 Tor NOTICE: Your system clock just jumped 31581238 seconds forward;
 assuming established circuits no longer work.
 Tor NOTICE: Heartbeat: Tor's uptime is 4 days 8:12 hours, with 0 circuits
 open. I've sent 22.98 MB and received 101.07 MB.
 Tor WARN: Received a bad CERTS cell: At least one certificate expired.
 Tor NOTICE: Tried for 120 seconds to get a connection to [scrubbed]:443.
 Giving up. (waiting for circuit)
 addons.update-checker   WARNRequest for
 https://secure.informaction.com/download/classic/?v=5.1.8.5 timed out
 addons.xpi  WARNAdd-on {73a6fe31-595d-460b-a920-fcc0f8843232} is
 not correctly signed.
 No matching message handler for the given recipient.
 MessageChannel.jsm:621
 }}}
 i.e. with clock skew (1y forward), auto update of add-ons disables
 NoScript.
 After setting the time correctly, NoScript is still disabled and:
 {{{
 addons.update-checker   WARNonUpdateCheckComplete failed to parse
 update manifest: [Exception... "Update manifest is missing a required
 addons property."  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location:
 "JS frame :: resource://gre/modules/addons/AddonUpdateChecker.jsm ::
 getRequiredProperty :: line 473"  data: no] Stack trace:
 getRequiredProperty()@resource://gre/modules/addons/AddonUpdateChecker.jsm:473
 <
 parseJSONManifest()@resource://gre/modules/addons/AddonUpdateChecker.jsm:483
 <
 
UpdateParser.prototype.onLoad/parser()@resource://gre/modules/addons/AddonUpdateChecker.jsm:655
 <
 
UpdateParser.prototype.onLoad()@resource://gre/modules/addons/AddonUpdateChecker.jsm:675
 <
 UpdateParser/<()@resource://gre/modules/addons/AddonUpdateChecker.jsm:593
 < onStopRequest()@resource://gre/modules/WebRequest.jsm:347
 addons.xpi  WARNAdd-on {73a6fe31-595d-460b-a920-fcc0f8843232} is
 not correctly signed.
 }}}
 Only after updating and parsing add-ons blocklist, and then updating add-
 ons, NoScript is enabled again.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26446 [Core Tor/Tor]: Split out the easier libraries from lib/common

2018-06-21 Thread Tor Bug Tracker & Wiki
#26446: Split out the easier libraries from lib/common
--+
 Reporter:  nickm |  Owner:  nickm
 Type:  task  | Status:  merge_ready
 Priority:  Medium|  Milestone:  Tor: 0.3.5.x-final
Component:  Core Tor/Tor  |Version:
 Severity:  Normal| Resolution:
 Keywords:  refactoring   |  Actual Points:
Parent ID:| Points:
 Reviewer:  dgoulet   |Sponsor:
--+
Changes (by dgoulet):

 * cc: dgoulet (removed)
 * status:  needs_review => merge_ready
 * keywords:   => refactoring
 * reviewer:   => dgoulet


Comment:

 Left a single comment about naming one of the library. Apart from that,
 LOVE IT! ACK.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #11511 [Applications/Tor Browser]: Investigate why TorLauncher is sometimes not loaded when starting TBB

2018-06-21 Thread Tor Bug Tracker & Wiki
#11511: Investigate why TorLauncher is sometimes not loaded when starting TBB
--+--
 Reporter:  gk|  Owner:  tbb-team
 Type:  task  | Status:  assigned
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-security  |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by cypherpunks):

 * owner:  erinn => tbb-team
 * status:  needs_information => assigned
 * keywords:  needs-triage => tbb-security


Comment:

 Looks like a particular case of running out of disk space.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #25198 [Community/Tor Browser Manual]: User manual should explain Tor Browser features more

2018-06-21 Thread Tor Bug Tracker & Wiki
#25198: User manual should explain Tor Browser features more
--+--
 Reporter:  arthuredelstein   |  Owner:  t0mmy
 Type:  defect| Status:  assigned
 Priority:  Medium|  Milestone:
Component:  Community/Tor Browser Manual  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by phoul):

 * owner:  phoul => t0mmy
 * status:  new => assigned


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26443 [Community/Outreach]: Tor not working for certain hosts!

2018-06-21 Thread Tor Bug Tracker & Wiki
#26443: Tor not working for certain hosts!
+
 Reporter:  shark.fin   |  Owner:  alison
 Type:  defect  | Status:  new
 Priority:  Medium  |  Milestone:
Component:  Community/Outreach  |Version:
 Severity:  Major   | Resolution:
 Keywords:  |  Actual Points:
Parent ID:  | Points:
 Reviewer:  |Sponsor:
+

Comment (by cypherpunks):

 Just tried, they all load up without captchas except for one. Also it's a
 problem with them, not with us.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #20538 [Community/Tor Browser Manual]: TB manual single page

2018-06-21 Thread Tor Bug Tracker & Wiki
#20538: TB manual single page
--+--
 Reporter:  weasel|  Owner:  t0mmy
 Type:  defect| Status:  assigned
 Priority:  Medium|  Milestone:
Component:  Community/Tor Browser Manual  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by phoul):

 * owner:  phoul => t0mmy
 * status:  accepted => assigned


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #1620 [Applications/Tor Browser]: Cross-site HTTPS links cause errors when TorButton is used with NoScript.

2018-06-21 Thread Tor Bug Tracker & Wiki
#1620: Cross-site HTTPS links cause errors when TorButton is used with NoScript.
--+--
 Reporter:  katmagic  |  Owner:  tbb-team
 Type:  defect| Status:  assigned
 Priority:  High  |  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by cypherpunks):

 * owner:  (none) => tbb-team
 * status:  new => assigned


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #21603 [Community/Tor Browser Manual]: Add an example of "Map Address"

2018-06-21 Thread Tor Bug Tracker & Wiki
#21603: Add an example of "Map Address"
--+-
 Reporter:  cypherpunks   |  Owner:  phoul
 Type:  task  | Status:  closed
 Priority:  Medium|  Milestone:
Component:  Community/Tor Browser Manual  |Version:
 Severity:  Normal| Resolution:  wontfix
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+-
Changes (by phoul):

 * status:  new => closed
 * resolution:   => wontfix


Comment:

 I believe this to be out-of-scope for the Tor Browser User Manual.

 This may fit in with the website FAQ, however I don't think this would
 make sense in the user manual as manually editing your torrc is generally
 not encouraged / can break things for unfamiliar Tor Browser users.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26439 [Core Tor/Tor]: Use the "commands" element of AC_CONFIG_FILES to make generated scripts executable

2018-06-21 Thread Tor Bug Tracker & Wiki
#26439: Use the "commands" element of AC_CONFIG_FILES to make generated scripts
executable
--+
 Reporter:  nickm |  Owner:  nickm
 Type:  defect| Status:  needs_revision
 Priority:  Medium|  Milestone:  Tor: 0.3.5.x-final
Component:  Core Tor/Tor  |Version:
 Severity:  Normal| Resolution:
 Keywords:  fast-fix  |  Actual Points:
Parent ID:| Points:
 Reviewer:  dgoulet   |Sponsor:
--+
Changes (by dgoulet):

 * status:  needs_review => needs_revision
 * reviewer:   => dgoulet


Comment:

 This branch is failing to build on Travis. Also there are merge commit in
 it?...

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #13951 [Community/Translations]: Add EFF technologists as maintainers for the HTTPS Everywhere transifex strings

2018-06-21 Thread Tor Bug Tracker & Wiki
#13951: Add EFF technologists as maintainers for the HTTPS Everywhere transifex
strings
+--
 Reporter:  pde |  Owner:  phoul
 Type:  defect  | Status:  assigned
 Priority:  High|  Milestone:
Component:  Community/Translations  |Version:
 Severity:  Normal  | Resolution:
 Keywords:  |  Actual Points:
Parent ID:  | Points:
 Reviewer:  |Sponsor:
+--
Changes (by phoul):

 * status:  accepted => assigned


Comment:

 This has been discussed various places off list since this ticket, however
 just to update:

 1. Transifex does not allow maintainers per-resource, and only for the
 entire hub
 2. The EFF developers have been contacting the localization coordinator
 (me until recently) to fix string issues, and this process seems to be
 working for the people involved.

 Please re-open if anything is incorrect.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26372 [Core Tor/Tor]: Search for python3 with a better list of names.

2018-06-21 Thread Tor Bug Tracker & Wiki
#26372: Search for python3 with a better list of names.
--+
 Reporter:  nickm |  Owner:  nickm
 Type:  defect| Status:  merge_ready
 Priority:  Medium|  Milestone:  Tor: 0.3.4.x-final
Component:  Core Tor/Tor  |Version:
 Severity:  Normal| Resolution:
 Keywords:  fast-fix  |  Actual Points:
Parent ID:| Points:
 Reviewer:  dgoulet   |Sponsor:
--+
Changes (by dgoulet):

 * status:  needs_review => merge_ready
 * reviewer:   => dgoulet


Comment:

 ack.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24872 [Community/Tor Support]: remove outdated tor relay security recommendations and update these wiki pages

2018-06-21 Thread Tor Bug Tracker & Wiki
#24872: remove outdated tor relay security recommendations and update these wiki
pages
---+--
 Reporter:  cypherpunks|  Owner:  Jaruga
 Type:  defect | Status:  accepted
 Priority:  Medium |  Milestone:
Component:  Community/Tor Support  |Version:
 Severity:  Normal | Resolution:
 Keywords: |  Actual Points:
Parent ID: | Points:
 Reviewer: |Sponsor:
---+--

Comment (by nusenu):

 Replying to [comment:4 alison]:
 > Maybe check those old pages for any salvageable info, then add it to the
 relays ops wiki, then remove the old pages? Here's the relay ops wiki:
 https://trac.torproject.org/projects/tor/wiki/TorRelayGuide

 I'd prefer if a security section would be on a separate page since the
 relay guide is already a long and ugly single-pager.

 And I'm happy to review security recommendations.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26446 [Core Tor/Tor]: Split out the easier libraries from lib/common

2018-06-21 Thread Tor Bug Tracker & Wiki
#26446: Split out the easier libraries from lib/common
--+
 Reporter:  nickm |  Owner:  nickm
 Type:  task  | Status:  needs_review
 Priority:  Medium|  Milestone:  Tor: 0.3.5.x-final
Component:  Core Tor/Tor  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+
Changes (by nickm):

 * cc: dgoulet (added)
 * status:  assigned => needs_review


Comment:

 The branch is `extract_easy_common_libs`.  The PR is
 https://github.com/torproject/tor/pull/169

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #18344 [Community/Translations]: Broken languages for HTTPSE in Transifex

2018-06-21 Thread Tor Bug Tracker & Wiki
#18344: Broken languages for HTTPSE in Transifex
+
 Reporter:  cooperq |  Owner:  phoul
 Type:  task| Status:  closed
 Priority:  Medium  |  Milestone:
Component:  Community/Translations  |Version:
 Severity:  Normal  | Resolution:  fixed
 Keywords:  |  Actual Points:
Parent ID:  | Points:
 Reviewer:  |Sponsor:
+
Changes (by phoul):

 * status:  new => closed
 * resolution:   => fixed


Comment:

 These locales should no longer be present.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26041 [Core Tor/Tor]: Set Default version to 3 for new onion; V2 onion can be cracked easily

2018-06-21 Thread Tor Bug Tracker & Wiki
#26041: Set Default version to 3 for new onion; V2 onion can be cracked easily
--+---
 Reporter:  cypherpunks   |  Owner:  (none)
 Type:  project   | Status:  closed
 Priority:  Medium|  Milestone:
Component:  Core Tor/Tor  |Version:
 Severity:  Normal| Resolution:  duplicate
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---
Changes (by dgoulet):

 * status:  new => closed
 * resolution:   => duplicate


Comment:

 This is on the roadmap as soon as we are able to bring v2 feature parity
 with v3.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #26446 [Core Tor/Tor]: Split out the easier libraries from lib/common

2018-06-21 Thread Tor Bug Tracker & Wiki
#26446: Split out the easier libraries from lib/common
--+
 Reporter:  nickm |  Owner:  nickm
 Type:  task  | Status:  assigned
 Priority:  Medium|  Milestone:  Tor: 0.3.5.x-final
Component:  Core Tor/Tor  |Version:
 Severity:  Normal|   Keywords:
Actual Points:|  Parent ID:
   Points:|   Reviewer:
  Sponsor:|
--+
 Now that I've made a start (see #26442) it's time to split the rest of the
 common directory.

 Some of the splitting will require disentangling individual files, but
 some is fairly easy.  I'll do the easy part first.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24872 [Community/Tor Support]: remove outdated tor relay security recommendations and update these wiki pages

2018-06-21 Thread Tor Bug Tracker & Wiki
#24872: remove outdated tor relay security recommendations and update these wiki
pages
---+--
 Reporter:  cypherpunks|  Owner:  Jaruga
 Type:  defect | Status:  accepted
 Priority:  Medium |  Milestone:
Component:  Community/Tor Support  |Version:
 Severity:  Normal | Resolution:
 Keywords: |  Actual Points:
Parent ID: | Points:
 Reviewer: |Sponsor:
---+--

Comment (by Jaruga):

 Replying to [comment:4 alison]:

 Can do, and thanks for the reminder on this ticket! I'll add this to my
 todo list.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #10936 [Community/Tor Support]: Document support policy about “rejected” tickets

2018-06-21 Thread Tor Bug Tracker & Wiki
#10936: Document support policy about “rejected” tickets
---+
 Reporter:  lunar  |  Owner:  phoul
 Type:  task   | Status:  closed
 Priority:  Medium |  Milestone:
Component:  Community/Tor Support  |Version:
 Severity:  Normal | Resolution:  fixed
 Keywords: |  Actual Points:
Parent ID: | Points:
 Reviewer: |Sponsor:
---+
Changes (by phoul):

 * status:  assigned => closed
 * resolution:   => fixed


Comment:

 This ticket is quite old, and we no longer do this style of stats
 reporting for sponsors. Illegal requests were always rejected. Closing.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #20602 [Community/Tor Support]: Configuration or Certificate error

2018-06-21 Thread Tor Bug Tracker & Wiki
#20602: Configuration or Certificate error
---+-
 Reporter:  RogerRoo   |  Owner:  phoul
 Type:  defect | Status:  closed
 Priority:  Medium |  Milestone:
Component:  Community/Tor Support  |Version:  Tor: 0.2.7.3-rc
 Severity:  Normal | Resolution:  fixed
 Keywords:  TOR  6.0.5 |  Actual Points:
Parent ID: | Points:
 Reviewer: |Sponsor:  SponsorZ
---+-
Changes (by phoul):

 * status:  new => closed
 * resolution:   => fixed


Comment:

 This sounds like an issue with a specific onion service being
 misconfigured. As a test, please try connecting to
 http://yjuwkcxlgo7f7o6s.onion/ (the onion service for
 archive.torproject.org).

 If you are unable to connect, please re-open this ticket with the specific
 version of Tor Browser you are currently running and the error you
 receive.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24565 [Community/Tor Support]: User queries and issues

2018-06-21 Thread Tor Bug Tracker & Wiki
#24565: User queries and issues
---+
 Reporter:  Pari   |  Owner:  phoul
 Type:  project| Status:  closed
 Priority:  Medium |  Milestone:
Component:  Community/Tor Support  |Version:
 Severity:  Normal | Resolution:  fixed
 Keywords: |  Actual Points:
Parent ID: | Points:
 Reviewer: |Sponsor:
---+
Changes (by phoul):

 * status:  new => closed
 * resolution:   => fixed


Comment:

 This task has now been handed off to Cy (one of our current outreachy
 interns), and they are publishing this information on the tor-project
 mailing list monthly:

 https://lists.torproject.org/pipermail/tor-project/2018-June/001829.html
 (June)

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #20665 [Community/Tor Browser Manual]: Create alpha Tor Browser Manual

2018-06-21 Thread Tor Bug Tracker & Wiki
#20665: Create alpha Tor Browser Manual
--+
 Reporter:  phoul |  Owner:  phoul
 Type:  defect| Status:  closed
 Priority:  Medium|  Milestone:
Component:  Community/Tor Browser Manual  |Version:
 Severity:  Normal| Resolution:  fixed
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+
Changes (by phoul):

 * status:  accepted => closed
 * resolution:   => fixed


Comment:

 This exists at https://gitweb.torproject.org/tor-browser/user-
 manual.git/log/?h=alpha and builds to https://tb-
 manual.torproject.org/alpha/

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #22974 [Applications/Tor Browser]: NoScript (and Tor Browser) vulnerable to Mozilla Add-On Code Execution

2018-06-21 Thread Tor Bug Tracker & Wiki
#22974: NoScript (and Tor Browser) vulnerable to Mozilla Add-On Code Execution
--+--
 Reporter:  tom   |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-security  |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by cypherpunks):

 * keywords:   => tbb-security


Comment:

 Replying to [comment:3 gk]:
 > we want to get rid of extension update pinging and extension updating
 via AMO
 Done with NoScript Classic.
 > in our default Tor Browser configuration as a result of the HPKP fiasco
 (see #20146).
 But check what happens now, heh...

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #19655 [Community/Tor Support]: Consensus Network Status Document error

2018-06-21 Thread Tor Bug Tracker & Wiki
#19655: Consensus Network Status Document error
---+--
 Reporter:  foxcraft   |  Owner:  phoul
 Type:  defect | Status:  closed
 Priority:  Medium |  Milestone:
Component:  Community/Tor Support  |Version:  Tor: unspecified
 Severity:  Major  | Resolution:  fixed
 Keywords:  Tor|  Actual Points:
Parent ID: | Points:
 Reviewer: |Sponsor:
---+--
Changes (by phoul):

 * status:  new => closed
 * resolution:   => fixed


Comment:

 Hi!

 This sounds like your system is not syncing with an NTP server.

 I'd suggest looking at the Debian NTP docs (https://wiki.debian.org/NTP),
 and being sure you have this set up. The tzdata command will set your
 timezone, but will not make sure your system is synced with a known-good
 time source.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24019 [Community/Tor Support]: Create a shortened URL for the support wiki

2018-06-21 Thread Tor Bug Tracker & Wiki
#24019: Create a shortened URL for the support wiki
---+
 Reporter:  sukhbir|  Owner:  phoul
 Type:  defect | Status:  closed
 Priority:  Medium |  Milestone:
Component:  Community/Tor Support  |Version:
 Severity:  Normal | Resolution:  fixed
 Keywords: |  Actual Points:
Parent ID: | Points:
 Reviewer: |Sponsor:
---+
Changes (by phoul):

 * status:  new => closed
 * resolution:   => fixed


Comment:

 I think this can be closed now that the support portal is migrating to
 https://support-staging.torproject.org/  and once ready
 https://support.torproject.org/.

 Please re-open if creating a shortened URL for the wiki is still desired.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #20265 [Community/Translations]: Remove Tor Messenger resources from Transifex

2018-06-21 Thread Tor Bug Tracker & Wiki
#20265: Remove Tor Messenger resources from Transifex
+
 Reporter:  sukhbir |  Owner:  phoul
 Type:  defect  | Status:  closed
 Priority:  Medium  |  Milestone:
Component:  Community/Translations  |Version:
 Severity:  Normal  | Resolution:  fixed
 Keywords:  |  Actual Points:
Parent ID:  | Points:
 Reviewer:  |Sponsor:
+
Changes (by phoul):

 * status:  new => closed
 * resolution:   => fixed


Comment:

 All Tor Messenger strings have been dropped from Transifex after
 deprecation, closing.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #11309 [Community/Tor Support]: Improve how support statistics are reported

2018-06-21 Thread Tor Bug Tracker & Wiki
#11309: Improve how support statistics are reported
---+
 Reporter:  Sherief|  Owner:  phoul
 Type:  task   | Status:  closed
 Priority:  Medium |  Milestone:
Component:  Community/Tor Support  |Version:
 Severity:  Normal | Resolution:  fixed
 Keywords:  pups   |  Actual Points:
Parent ID: | Points:
 Reviewer: |Sponsor:
---+
Changes (by phoul):

 * status:  assigned => closed
 * resolution:   => fixed


Comment:

 Closing this ticket as its specifically related to the PUPS system no
 longer in use.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #10755 [Community/Tor Support]: Provide support through webchat

2018-06-21 Thread Tor Bug Tracker & Wiki
#10755: Provide support through webchat
---+
 Reporter:  Sherief|  Owner:  phoul
 Type:  task   | Status:  closed
 Priority:  Medium |  Milestone:
Component:  Community/Tor Support  |Version:
 Severity:  Normal | Resolution:  fixed
 Keywords:  SponsorO   |  Actual Points:
Parent ID: | Points:
 Reviewer: |Sponsor:
---+
Changes (by phoul):

 * status:  assigned => closed
 * resolution:   => fixed


Comment:

 Closing this ticket.

 Webchat was offered for a period of time while under Sponsor O, Sherief
 wrote the PUPS system for this.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #11177 [Community/Tor Support]: Extract “time to reply” from the RT database

2018-06-21 Thread Tor Bug Tracker & Wiki
#11177: Extract “time to reply” from the RT database
---+
 Reporter:  lunar  |  Owner:  phoul
 Type:  task   | Status:  closed
 Priority:  Medium |  Milestone:
Component:  Community/Tor Support  |Version:
 Severity:  Normal | Resolution:  fixed
 Keywords:  SponsorO   |  Actual Points:
Parent ID: | Points:
 Reviewer: |Sponsor:
---+
Changes (by phoul):

 * status:  assigned => closed
 * resolution:   => fixed


Comment:

 Closing ticket, no longer a sponsor request.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #26445 [Applications/Tor Browser]: Firefox still crashes like a trash

2018-06-21 Thread Tor Bug Tracker & Wiki
#26445: Firefox still crashes like a trash
--+---
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal|   Keywords:  tbb-crash
Actual Points:|  Parent ID:
   Points:|   Reviewer:
  Sponsor:|
--+---
 Access violation when clicking through `about:addons` menu, huh.
 {{{
 Faulting application firefox.exe, version 52.8.1.6607, faulting module
 xul.dll, version 52.8.1.6607, fault address 0x00c1e6b8.
 }}}

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #22716 [Community/Outreach]: Write a blog post advocating for getting more relays

2018-06-21 Thread Tor Bug Tracker & Wiki
#22716: Write a blog post advocating for getting more relays
+--
 Reporter:  cypherpunks |  Owner:  phoul
 Type:  project | Status:  assigned
 Priority:  Medium  |  Milestone:
Component:  Community/Outreach  |Version:
 Severity:  Normal  | Resolution:
 Keywords:  |  Actual Points:
Parent ID:  | Points:
 Reviewer:  |Sponsor:
+--
Changes (by phoul):

 * owner:  mrphs, ailanthus => phoul
 * status:  new => assigned


Comment:

 2 blog posts relating to relaying / growing the operator community /
 showing off the current operator community are being worked on, taking
 ownership of this ticket.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #17172 [Community/Relays]: A fast guide to run a Win32 tor relay

2018-06-21 Thread Tor Bug Tracker & Wiki
#17172: A fast guide to run a Win32 tor relay
--+--
 Reporter:  TORques   |  Owner:  phoul
 Type:  enhancement   | Status:  assigned
 Priority:  Medium|  Milestone:
Component:  Community/Relays  |Version:
 Severity:  Normal| Resolution:
 Keywords:  Win32 relay tor-docs windows  |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by phoul):

 * owner:  (none) => phoul
 * status:  new => assigned


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #8494 [Core Tor/Tor]: Does MaxAdvertisedBandwidth do anything useful and if not, can we deprecate it?

2018-06-21 Thread Tor Bug Tracker & Wiki
#8494: Does MaxAdvertisedBandwidth do anything useful and if not, can we 
deprecate
it?
-+-
 Reporter:  alphawolf|  Owner:  tom
 Type:  defect   | Status:  new
 Priority:  Low  |  Milestone:  Tor:
 |  0.3.5.x-final
Component:  Core Tor/Tor |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tor-spec, consensus, bandwidth,  |  Actual Points:
  MaxAdvertisedBandwidth tor-relay tor-dirauth   |
  needs-insight tor-bwauth   |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by juga):

 ACK, will do this weekend

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #25168 [Community/Relays]: create relay troubleshooting page and link to it from the TorRelayGuide

2018-06-21 Thread Tor Bug Tracker & Wiki
#25168: create relay troubleshooting page and link to it from the TorRelayGuide
--+--
 Reporter:  nusenu|  Owner:  nusenu
 Type:  enhancement   | Status:  assigned
 Priority:  Medium|  Milestone:
Component:  Community/Relays  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by phoul):

 * cc: phoul (added)


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24872 [Community/Tor Support]: remove outdated tor relay security recommendations and update these wiki pages

2018-06-21 Thread Tor Bug Tracker & Wiki
#24872: remove outdated tor relay security recommendations and update these wiki
pages
---+--
 Reporter:  cypherpunks|  Owner:  Jaruga
 Type:  defect | Status:  accepted
 Priority:  Medium |  Milestone:
Component:  Community/Tor Support  |Version:
 Severity:  Normal | Resolution:
 Keywords: |  Actual Points:
Parent ID: | Points:
 Reviewer: |Sponsor:
---+--
Changes (by phoul):

 * cc: phoul (added)


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26300 [Core Tor/Tor]: Attempt by … to open a stream on first hop of circuit. Closing.

2018-06-21 Thread Tor Bug Tracker & Wiki
#26300: Attempt by … to open a stream on first hop of circuit. Closing.
--+
 Reporter:  teor  |  Owner:  dgoulet
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:  Tor: 0.3.4.x-final
Component:  Core Tor/Tor  |Version:  Tor: 0.3.3.6
 Severity:  Normal| Resolution:
 Keywords:  fast-fix  |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+

Comment (by dgoulet):

 So relay operator responded. The gist is that they had a normal relay.
 They stopped it, then changed the configuration to become a bridge and
 start it again.

 Somehow, my Guard node (who saw the warning) still had a channel object
 for that relay or some state that made it think it is a relay which
 triggered that warning...

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #26444 [Applications/Tor Browser]: OSX 10.14 adds persisted-to-disk permission prompts for WebCam/Mic access

2018-06-21 Thread Tor Bug Tracker & Wiki
#26444: OSX 10.14 adds persisted-to-disk permission prompts for WebCam/Mic 
access
--+--
 Reporter:  tom   |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal|   Keywords:
Actual Points:|  Parent ID:
   Points:|   Reviewer:
  Sponsor:|
--+--
 OSX 10.14 Beta has added OS-level permission prompts for Mic/Camera
 access. According to Mozilla's prelimimary testing the behavior was:

 > The description I found said the OS should cache the results of the
 prompt. Did a quick test - 1st try: get the the Firefox dialog then two OS
 dialogs for the "Firefox" process (camera and mic), 2nd try: get OS dialog
 for "plugin-container", 3rd try: no OS dialogs

 I requested we file a bug about persisting this to disk in Private
 Browsing mode (and what, if anything we could do about that...) but I
 wanted to get this bug on file for Tor Browser.

 It seems like a user who uses Tor Browser and uses the mic or camera will
 create a disk persistence that they had done so, with timestamp.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26443 [Community/Outreach]: Tor not working for certain hosts!

2018-06-21 Thread Tor Bug Tracker & Wiki
#26443: Tor not working for certain hosts!
+
 Reporter:  shark.fin   |  Owner:  alison
 Type:  defect  | Status:  new
 Priority:  Medium  |  Milestone:
Component:  Community/Outreach  |Version:
 Severity:  Major   | Resolution:
 Keywords:  |  Actual Points:
Parent ID:  | Points:
 Reviewer:  |Sponsor:
+
Changes (by rl1987):

 * owner:  (none) => alison
 * component:  Core Tor => Community/Outreach


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26442 [Core Tor/Tor]: Start extracting libraries from src/common

2018-06-21 Thread Tor Bug Tracker & Wiki
#26442: Start extracting libraries from src/common
--+
 Reporter:  nickm |  Owner:  nickm
 Type:  enhancement   | Status:  closed
 Priority:  Medium|  Milestone:  Tor: 0.3.5.x-final
Component:  Core Tor/Tor  |Version:
 Severity:  Normal| Resolution:  implemented
 Keywords:  refactoring   |  Actual Points:
Parent ID:| Points:
 Reviewer:  dgoulet   |Sponsor:
--+
Changes (by nickm):

 * status:  merge_ready => closed
 * resolution:   => implemented


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26442 [Core Tor/Tor]: Start extracting libraries from src/common

2018-06-21 Thread Tor Bug Tracker & Wiki
#26442: Start extracting libraries from src/common
--+
 Reporter:  nickm |  Owner:  nickm
 Type:  enhancement   | Status:  merge_ready
 Priority:  Medium|  Milestone:  Tor: 0.3.5.x-final
Component:  Core Tor/Tor  |Version:
 Severity:  Normal| Resolution:
 Keywords:  refactoring   |  Actual Points:
Parent ID:| Points:
 Reviewer:  dgoulet   |Sponsor:
--+

Comment (by nickm):

 Travis seems happy enough too; merging.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #26443 [Core Tor]: Tor not working for certain hosts!

2018-06-21 Thread Tor Bug Tracker & Wiki
#26443: Tor not working for certain hosts!
---+
 Reporter:  shark.fin  |  Owner:  (none)
 Type:  defect | Status:  new
 Priority:  Medium |  Milestone:
Component:  Core Tor   |Version:
 Severity:  Major  |   Keywords:
Actual Points: |  Parent ID:
   Points: |   Reviewer:
  Sponsor: |
---+
 Hello,
 **To begin with, my heartfelt, boatloads of "Thank you" for having this
 wonderful solution for browsing safely & anonymously on the internet!!! It
 is such a blessing!!!**

 Coming to the issue I've been facing: It's related to downloading files
 from certain hosts. I'm listing the major ones below. The trouble is these
 hosts keep giving errors like "Invalid IP", "Wrong IP", "error 404", etc.
 while I try to download a file from there.
 Firstly, they have multiple captcha rounds and after passing through them
 (takes multiple attempts) when I finally get to the download, I keep
 getting one of the above errors. This happens even when I change the IP
 multiple times. Also, there is no way I can avoid these hosts as they are
 very popular and many files are hosted only there.

 Hosts with which I almost always face issues while downloading a file:
 https://userscloud.com
 https://uploadocean.com
 https://douploads.com
 https://upload4earn.org
 https://www.file-upload.com
 https://rapidgator.net

 Regarding my Tor browser setting, I use the default settings. No changes
 made by me at all.
 My OS is Windows 7.

 Other hosts like zippyshare etc. work very well on Tor. It's only with the
 above hosts that I find a problem.

 Please help resolve this issue of download from the above listed hosts. It
 will be a BIG help!

 Thank you again for everything!!!

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26442 [Core Tor/Tor]: Start extracting libraries from src/common

2018-06-21 Thread Tor Bug Tracker & Wiki
#26442: Start extracting libraries from src/common
--+
 Reporter:  nickm |  Owner:  nickm
 Type:  enhancement   | Status:  merge_ready
 Priority:  Medium|  Milestone:  Tor: 0.3.5.x-final
Component:  Core Tor/Tor  |Version:
 Severity:  Normal| Resolution:
 Keywords:  refactoring   |  Actual Points:
Parent ID:| Points:
 Reviewer:  dgoulet   |Sponsor:
--+
Changes (by dgoulet):

 * status:  needs_review => merge_ready
 * reviewer:   => dgoulet
 * keywords:   => refactoring


Comment:

 Love it. Lgtm;

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26442 [Core Tor/Tor]: Start extracting libraries from src/common

2018-06-21 Thread Tor Bug Tracker & Wiki
#26442: Start extracting libraries from src/common
--+
 Reporter:  nickm |  Owner:  nickm
 Type:  enhancement   | Status:  needs_review
 Priority:  Medium|  Milestone:  Tor: 0.3.5.x-final
Component:  Core Tor/Tor  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+
Changes (by nickm):

 * status:  assigned => needs_review


Comment:

 https://github.com/torproject/tor/pull/168 is a PR for my branch
 `extract_liberr` .  The branch in question also reorganizes our
 Makefile.am stuff a bit, to avoid losing track of libraries.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

  1   2   >