Re: [tor-dev] [FWD: Re: Apple developer account + codesigning]

2015-10-27 Thread Lunar
Mike Perry: > We want to do this for MacOSX as well. Does anyone happen to know if we can > use otool in some way to remove these LC_CODE_SIGNATURE sections easily, > and get the same exact binary as before signing? I don't know if it helps in the case but problem can also be approached the other

Re: [tor-dev] [FWD: Re: Apple developer account + codesigning]

2015-10-27 Thread Mike Perry
teor: > > On 27 Oct 2015, at 05:41, Conrad Kramer wrote: > > >> On Oct 26, 2015, at 11:22 AM, Spencer wrote: > >> > >> Hi, > >> > >>> Conrad Kramer: > >>> All resources in a bundle (e.g. an app or framework) are > >>> signed and the

Re: [tor-dev] [FWD: Re: Apple developer account + codesigning]

2015-10-27 Thread Nima Fatemi
Ian Goldberg: > On Mon, Oct 26, 2015 at 06:06:36AM -0700, Mike Perry wrote: >> Essentially, codesign only touches executable binaries in the .app (see >> that second link for info on how the binary's segments get moved around) >> and also adds an SC_Info directory for codesign/DRM metadata. > >

Re: [tor-dev] [FWD: Re: Apple developer account + codesigning]

2015-10-27 Thread Tim Wilson-Brown - teor
> On 27 Oct 2015, at 20:27, Nima Fatemi wrote: > > Ian Goldberg: >> On Mon, Oct 26, 2015 at 06:06:36AM -0700, Mike Perry wrote: >>> Essentially, codesign only touches executable binaries in the .app (see >>> that second link for info on how the binary's segments get moved

Re: [tor-dev] Tor browser for other Projects

2015-10-27 Thread sajolida
salutarydiacritica...@ruggedinbox.com: > Hello good people of Tor. As you know, your client side applications > like Tor browser are unmatched by anything out there. They are the > natural choice for other anonymous networks. Freenet is considering ways > to interface with Tor browser for better

Re: [tor-dev] Status of remaining SVN repositories

2015-10-27 Thread Roger Dingledine
On Tue, Oct 27, 2015 at 12:48:11PM +0100, Jens Kubieziel wrote: > Tor has a SVN with several repositories in it. The ticket #4929 deals > with migrating them to git > (). I made a > table within the ticket to track the current status. Most

Re: [tor-dev] [FWD: Re: Apple developer account + codesigning]

2015-10-27 Thread Tim Wilson-Brown - teor
> On 27 Oct 2015, at 21:13, Lunar wrote: > > Mike Perry: >> We want to do this for MacOSX as well. Does anyone happen to know if we can >> use otool in some way to remove these LC_CODE_SIGNATURE sections easily, >> and get the same exact binary as before signing? > > I

Re: [tor-dev] [FWD: Re: Apple developer account + codesigning]

2015-10-27 Thread Mike Perry
Tim Wilson-Brown - teor: > > > On 27 Oct 2015, at 20:06, Mike Perry wrote: > > > > teor: > >> > >> On 27 Oct 2015, at 05:41, Conrad Kramer wrote: > >> > On Oct 26, 2015, at 11:22 AM, Spencer wrote: > >

[tor-dev] Status of remaining SVN repositories

2015-10-27 Thread Jens Kubieziel
Hi, Tor has a SVN with several repositories in it. The ticket #4929 deals with migrating them to git (). I made a table within the ticket to track the current status. Most of the repositories are in git right now. However some remain where

[tor-dev] Proposal 256: Key revocation for relays and authorities

2015-10-27 Thread Nick Mathewson
Filename: 256-key-revocation.txt Title: Key revocation for relays and authorities Authors: Nick Mathewson Created: 27 October 2015 Status: Open 1. Introduction This document examines the different kinds of long-lived public keys in Tor, and discusses a way to revoke each. The kind of

[tor-dev] Proposal 257: Refactoring authorities and taking parts offline

2015-10-27 Thread Nick Mathewson
Filename: 257-hiding-authorities.txt Title: Refactoring authorities and taking parts offline Authors: Nick Mathewson, Andrea Shepard Created: 2015-10-27 Status: Draft 1. Introduction Directory authorities are critical to the Tor network, and represent a DoS target to anybody trying to

[tor-dev] TB 5.0.3 for OpenBSD released

2015-10-27 Thread attila
The Tor BSD Diversity Project (TDP) is proud to announce the release of Tor Browser (TB) version 5.0.3 for OpenBSD. TDP (https://torbsd.github.io) is an effort to extend the use of the BSD Unixes into the Tor ecosystem, from the desktop to the network. The 5.0.3 release is the sixth release of

Re: [tor-dev] Proposal 257: Refactoring authorities and taking parts offline

2015-10-27 Thread Tim Wilson-Brown - teor
> On 28 Oct 2015, at 04:38, Nick Mathewson wrote: > > * Authorities serve as a location for distributing consensus > documents, descriptors, extrainfo documents, and > microdescriptors... > > * To directory mirrors. (BW?, PUB?, LOC?) > >

Re: [tor-dev] [FWD: Re: Apple developer account + codesigning]

2015-10-27 Thread Conrad Kramer
> On Oct 27, 2015, at 5:32 AM, Mike Perry wrote: > > Tim Wilson-Brown - teor: >> >>> On 27 Oct 2015, at 20:06, Mike Perry wrote: >>> >>> teor: On 27 Oct 2015, at 05:41, Conrad Kramer wrote: >> On

Re: [tor-dev] [FWD: Re: Apple developer account + codesigning]

2015-10-27 Thread Conrad Kramer
> On Oct 27, 2015, at 3:03 PM, Conrad Kramer wrote: > >> >> On Oct 27, 2015, at 5:32 AM, Mike Perry wrote: >> >> Tim Wilson-Brown - teor: >>> On 27 Oct 2015, at 20:06, Mike Perry wrote: teor: >

Re: [tor-dev] Desired exit node diversity

2015-10-27 Thread Virgil Griffith
Instead of WOT, it seems more desirable, and better fit diversity, to have both your best friends and worst enemies on the same circuit. Ergo, minimizing chance of collaboration. -V On Mon, 26 Oct 2015 at 01:30 grarpamp wrote: > On Wed, Sep 23, 2015 at 8:44 AM, tor-dev had:

Re: [tor-dev] Desired exit node diversity

2015-10-27 Thread Tim Wilson-Brown - teor
> On 28 Oct 2015, at 14:31, Virgil Griffith wrote: > > Instead of WOT, it seems more desirable, and better fit diversity, to have > both your best friends and worst enemies on the same circuit. Ergo, > minimizing chance of collaboration. Like Tails' friends, foes, and neutral

Re: [tor-dev] [tor-talk] Desired exit node diversity

2015-10-27 Thread Virgil Griffith
> Like Tails' friends, foes, and neutral HTP pools… > "any member in a one pool should be unlikely to share logs (or other identifying data), > or to agree to send fake time information, with a member from the the other pools" This may be heretical, but I always thought this motivation above is a