Re: [tor-dev] next globe update feedback
On 11/8/13 2:59 AM, Matthew Finkel wrote: On Thu, Nov 07, 2013 at 03:33:23PM -0500, m...@rndm.de wrote: I also added relay family links. While working on this feature I noticed that the onionoo family field can return fingerprints of bridges. I modified the way the relay details route works and now it checks if the api returns a valid relay. If this isn't the case it checks for a bridge and redirects to its detail page. (for example TorLand2 has a bridge in its family members field and clicking on the fingerprint throws an error on atlas) If this behavior is wrong or something is missing just tell me. Well, that's one place I didn't think to look for leaking bridge fingerprints. At this point there is no way to retrieve a bridge's IP address and port number using its fingerprint, right? And, considering the default torrc does say: However, you should never include a bridge's fingerprint here, as it would break its concealability and potentionally reveal its IP/TCP address. I really don't know how else to prevent this. Onionoo could do extra processing to prevent leaking these bridges, but I'm not sure that's a good way to do it. Onionoo does not sanitize any information from relay or bridge descriptors. Onionoo processes publicly available information from metrics, so whatever is sensitive in there is already available to whoever wants to use it. Onionoo only makes it more convenient for people to use this information. Metrics does not sanitize relay descriptors, only bridge descriptors. Whatever people put in their relay configuration and that goes into relay descriptors will be made public. On another note, globe looks awesome! Thanks you! Very true. Thanks, Christian! All the best, Karsten ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev
Re: [tor-dev] next globe update feedback
On Thu, Nov 07, 2013 at 03:33:23PM -0500, m...@rndm.de wrote: If there isn't anything wrong, I will release it to the regular globe url. I deployed the latest globe version on http://globe.rndm.de/ . The jshint code quality check was replaced with latest eslint version that works without jshint. Aside from the already mentioned changes I fixed the bridge/relay detail page if no detail document was found. I also added relay family links. While working on this feature I noticed that the onionoo family field can return fingerprints of bridges. I modified the way the relay details route works and now it checks if the api returns a valid relay. If this isn't the case it checks for a bridge and redirects to its detail page. (for example TorLand2 has a bridge in its family members field and clicking on the fingerprint throws an error on atlas) If this behavior is wrong or something is missing just tell me. Well, that's one place I didn't think to look for leaking bridge fingerprints. At this point there is no way to retrieve a bridge's IP address and port number using its fingerprint, right? And, considering the default torrc does say: However, you should never include a bridge's fingerprint here, as it would break its concealability and potentionally reveal its IP/TCP address. I really don't know how else to prevent this. Onionoo could do extra processing to prevent leaking these bridges, but I'm not sure that's a good way to do it. On another note, globe looks awesome! Thanks you! ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev
Re: [tor-dev] next globe update feedback
Philipp Winter: On Sun, Nov 03, 2013 at 11:23:18AM -0800, Damian Johnson wrote: I worked on a new update for globe... Damn this is awesome! I'm tempted to link to this from our front page (replacing Tor Browser in the project matrix on www.torproject.org, since TBB is already the featured item on the download page). Actually, it should rather replace Atlas. It no longer has an active maintainer (Karsten and I are just trying to keep it alive and fix small bugs) and is still not able to display bridge information. Maybe it's time to retire Atlas in favour of Globe? Quoting Karsten last July: “However, I don't have plans to retire Atlas just yet. I think it's fine to have more than one website providing access to Onionoo data. Yay, diversity.” https://lists.torproject.org/pipermail/tor-dev/2013-July/005122.html But the situation might have changed since then. -- Lunar lu...@torproject.org signature.asc Description: Digital signature ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev
Re: [tor-dev] next globe update feedback
On Sun, Nov 03, 2013 at 11:23:18AM -0800, Damian Johnson wrote: I worked on a new update for globe... Damn this is awesome! I'm tempted to link to this from our front page (replacing Tor Browser in the project matrix on www.torproject.org, since TBB is already the featured item on the download page). Actually, it should rather replace Atlas. It no longer has an active maintainer (Karsten and I are just trying to keep it alive and fix small bugs) and is still not able to display bridge information. Maybe it's time to retire Atlas in favour of Globe? Cheers, Philipp ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev
[tor-dev] next globe update feedback
Hi there, I worked on a new update for globe. This update addresses some features that were missing or not possible in the current version of globe ( http://globe.rndm.de/ ). These changes include: - fixed minification process to allow usage of the ember production build - removed unnecessary whitespace on top of the page - modified loading indicator - added subpages Because this update includes some major ui changes, I would like to get some feedback on it. You find the latest version on http://globe.rndm.de/lab/ Cheers, Christian ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev
Re: [tor-dev] next globe update feedback
On 2013-11-03, at 1:47 PM, m...@rndm.de wrote: Changed it and it should work now. This may be more nit-pickery, but for each view: Top 10 relays, Help, and Code, have them apply an `.active` class of the same style as `:hover` when you're presently viewing it. In other words, it shows the tab in purple when its corresponding page is being displayed. Feel free to ignore :-) Justin Bull m...@justinbull.ca E09D 38DE 8FB7 5745 2044 A0F4 1A2B DEAA 68FD B34C signature.asc Description: Message signed with OpenPGP using GPGMail ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev
Re: [tor-dev] next globe update feedback
I worked on a new update for globe... Damn this is awesome! I'm tempted to link to this from our front page (replacing Tor Browser in the project matrix on www.torproject.org, since TBB is already the featured item on the download page). Mike, Roger, etc: Any objections? Christian: Pity it doesn't have a valid cert. It would be nice if it defaulted to SSL. Cheers! -Damian ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev
Re: [tor-dev] next globe update feedback
: Damn this is awesome! I'm tempted to link to this from our front page : (replacing Tor Browser in the project matrix on www.torproject.org, : since TBB is already the featured item on the download page). : : Mike, Roger, etc: Any objections? TBB should stay where it is. Maybe feature this globe app from the metrics page. Metrics is a site for researchers. Globe is a client application akin to Atlas. They're different audiences. I still like the idea of replacing TBB on the front page because, of the things we list, including it there offers no value to visitors (it's already the primary thing we vend). That said, this might be a moot discussion until we sort out the second bit... : Christian: Pity it doesn't have a valid cert. It would be nice if it : defaulted to SSL. Can we run the code somewhere rather than on a 3rd party server? Christian suggested hosting it on TPO infrastructure elsewhere on this thread too. Sounds like a discussion that should move onto a ticket. ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev
