Re: [tor-dev] Obfsproxy support for Tor Browser Launcher

2013-04-18 Thread Lunar
-- Lunar lu...@torproject.org signature.asc Description: Digital signature ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] Tor Launcher UI feedback follow up

2013-05-09 Thread Lunar
. :) -- Lunar lu...@torproject.org signature.asc Description: Digital signature ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] Haskell packages?

2013-06-06 Thread Lunar
want/need some reviews. :) -- Lunar lu...@torproject.org signature.asc Description: Digital signature ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman

Re: [tor-dev] Memorable onion addresses (was Discussion on the crypto migration plan of the identity keys of Hidden Services)

2013-06-19 Thread Lunar
implement some kind of web links that could quickly add a new name in the local address book (after user confirmation). -- Lunar lu...@torproject.org signature.asc Description: Digital signature ___ tor-dev mailing

Re: [tor-dev] PRELIMINARY: [PATCH 3/3] Replace 'TorDNSEL.System.Timeout' with 'System.Timeout'.

2013-07-25 Thread Lunar
the change was actually needed! :) GHC was recently changed to not allow you to use newtypes in FFI imports unless the constructor of the newtype is in scope. [1] [1] http://ghc.haskell.org/trac/ghc/ticket/5610 I am looking forward to the moment you'll have a patch set that builds. -- Lunar

Re: [tor-dev] PRELIMINARY: [PATCH 3/3] Replace 'TorDNSEL.System.Timeout' with 'System.Timeout'.

2013-07-26 Thread Lunar
-history/ This is quite thorough: https://wiki.openstack.org/wiki/GitCommitMessages -- Lunar lu...@torproject.org signature.asc Description: Digital signature ___ tor-dev mailing list tor-dev

Re: [tor-dev] High load even with 0.2.4.17-rc

2013-09-06 Thread Lunar
special i have to do in the config to benefit from the new changes mad to quicker peerform the handshakes between the circuits? Tor 0.2.4.17-rc will prioritize ntor handshakes over TAP handshakes. But TAP handshakes are still processed, and they are not scarce at the moment. -- Lunar

Re: [tor-dev] First draft of Requirements and Software Design for a Better Tor Performance Measurement Tool

2013-09-06 Thread Lunar
Karsten Loesing: Feedback in the form of patches to the LaTeX sources is most preferred, though email replies are of course fine, too. See attachments. -- Lunar lu...@torproject.org From 22fed7b7155481904cb92136f9d04777fad72fde Mon Sep 17 00:00:00

Re: [tor-dev] Pluggable transport weekly meeting

2013-09-08 Thread Lunar
-” would not really be appropriate then. -- Lunar lu...@torproject.org signature.asc Description: Digital signature ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman

Re: [tor-dev] File verification GUI tool

2013-09-24 Thread Lunar
not have the problem and seems like a good idea. At least, shipping it through addons.mozilla.org give the user some basic trust path. -- Lunar lu...@torproject.org signature.asc Description: Digital signature

Re: [tor-dev] Sponsor F: update; next meeting [in *two weeks*]

2013-10-01 Thread Lunar
is not great to follow, that's why I stopped the effort of trying to write a fix once Mikkel Krautz acknowledged the issue. -- Lunar lu...@torproject.org signature.asc Description: Digital signature ___ tor-dev

Re: [tor-dev] Attentive Otter: Analysis of Instantbird/Thunderbird

2013-10-08 Thread Lunar
#TorBirdywithTorandTorLauncher I'd like to add that we can probably also leverage the work done on using Mozilla's updater in TBB to perform automatic updates of an Instantbird bundle. -- Lunar lu...@torproject.org signature.asc Description: Digital signature

Re: [tor-dev] CPAProxy - a thin Objective-C wrapper around Tor

2013-10-08 Thread Lunar
. This opens the door to more traffic correlation attacks. See the relevant FAQ for more details about entry guards: https://www.torproject.org/docs/faq.html.en#EntryGuards -- Lunar lu...@torproject.org signature.asc Description: Digital signature

Re: [tor-dev] Torsocks 2.x issue - Need eyes on that

2013-10-29 Thread Lunar
://stackoverflow.com/a/10008252 -- Lunar lu...@torproject.org signature.asc Description: Digital signature ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo

Re: [tor-dev] Torsocks 2.x issue - Need eyes on that

2013-10-30 Thread Lunar
Lunar: David Goulet: Now the issue was detected with firefox which uses a custom malloc hook meaning that it handles its own memory allocation. This hook uses mmap() that firefox redefines to be a direct syscall(__NR_mmap, ...) and remember that this symbol is hijacked by torsocks

Re: [tor-dev] next globe update feedback

2013-11-05 Thread Lunar
then. -- Lunar lu...@torproject.org signature.asc Description: Digital signature ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] Bug 9665

2013-11-05 Thread Lunar
with the attached (trivial) solution. Could someone please check if it's ok? Best course of action is probably to attach the patch to the ticket, and set the status to “needs_review”. Andrea or Nick are likely to take a look the next time they'll scan open tickets, if not earlier. -- Lunar

Re: [tor-dev] recreated website png diagrams as svg

2013-11-11 Thread Lunar
flows through high capacity servers, hosted in datacenters behind high capacity links. So I think picturing a laptop might be misleading… -- Lunar lu...@torproject.org signature.asc Description: Digital signature

Re: [tor-dev] Design for an exit relay scanner: feedback appreciated

2013-11-26 Thread Lunar
wrapper object, actually) to the scanning module, and have the scanning module pass that to the stream attacher when it has a stream ready? (Feel free to ignore me if that sounds like non-sense. I only had a quick look at the code.) -- Lunar lu

Re: [tor-dev] Tor project automation work

2013-12-10 Thread Lunar
at: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=719845#39 -- Lunar lu...@torproject.org signature.asc Description: Digital signature ___ tor-dev mailing list tor-dev@lists.torproject.org https

Re: [tor-dev] obfsproxy dns transport

2014-02-19 Thread Lunar
to augment pyptlib? I guess Extended ORPort is probably something that all Python pluggable transport implementations might want. -- Lunar lu...@torproject.org signature.asc Description: Digital signature

Re: [tor-dev] Patch to remove goto from sandbox.c

2014-03-01 Thread Lunar
Hartmut Prochaska: I changed a function in sandbox.c to not use a goto statement. I didn't understood what use it had. Attached the patch file. See https://www.kernel.org/doc/Documentation/CodingStyle, Chapter 7, “Centralized exiting of functions” for a rationale. -- Lunar

Re: [tor-dev] [RELEASE] Torsocks 2.0.0-rc4

2014-03-04 Thread Lunar
to tunnel TCP connections to a remote system through SSH over Tor. I am not sure what is the right move here. Perhaps allowing listen on Unix sockets and localhost? Or maybe allowing listen() entirely? -- Lunar lu...@torproject.org signature.asc Description

Re: [tor-dev] Mockup for a hidden services publishing tool

2014-03-10 Thread Lunar
, you don't care about ports. You don't care about internal IP addresses. You just want to say: “I want to make a blog available”; and have the software reply: “Done, it's at: idnxcnkne4qt76tg.onion. Spread the address around.” I should not need to know anything else. -- Lunar

Re: [tor-dev] GoSC - Website Fingerprinting project

2014-03-11 Thread Lunar
It outlines future research work in evaluating the efficiency of fingerprinting attacks, and also mention a couple of promising defenses. -- Lunar lu...@torproject.org signature.asc Description: Digital signature

Re: [tor-dev] [RELEASE] Torsocks 2.0.0-rc5/6

2014-03-17 Thread Lunar
://packages.qa.debian.org/t/torsocks/news/20140317T212304Z.html -- Lunar lu...@torproject.org signature.asc Description: Digital signature ___ tor-dev mailing list tor-dev@lists.torproject.org https

Re: [tor-dev] Tor Specs

2014-05-01 Thread Lunar
Ahmed: Is this the latest version of Tor specification protocol? https://gitweb.torproject.org/torspec.git?a=blob_plain;hb=HEAD;f=tor-spec.txt You will find the latest specifications in that Git repository, yes. -- Lunar lu...@torproject.org

Re: [tor-dev] Installing obfsproxy from wheezy-backports

2014-05-13 Thread Lunar
system next time. -- Lunar lu...@torproject.org signature.asc Description: Digital signature ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] A Child's Garden of Pluggable Transports

2014-05-21 Thread Lunar
that is visible to a censor. This is a beautiful and helpful piece of work. Thank you! -- Lunar lu...@torproject.org signature.asc Description: Digital signature ___ tor-dev mailing list tor-dev@lists.torproject.org

Re: [tor-dev] PrivEX - Privacy

2014-06-16 Thread Lunar
the privacy of users be respected if a website contains a link to a per-visitor generated hostname (using DNS wildcards)? -- Lunar lu...@torproject.org signature.asc Description: Digital signature ___ tor-dev mailing

Re: [tor-dev] PrivEX - Privacy

2014-06-16 Thread Lunar
Lunar: Tariq Elahi: What we would really like in order of importance is 1) a design review of our proposal, […] Maybe it's a non-issue but “better ask than sorry”. If I get it, the idea is to publish a list of visited domain names and how frequently they have been visited (with noise

[tor-dev] [PATCH] Add some words about meek in proposal 203

2014-06-25 Thread Lunar
This is mostly David Fifield's words from an email exchange. --- I re-read proposal 203 the other day and wondered how it was related to the meek pluggable transport. As I might not be the only one, I thought it could be worthwhile to share David's answer. Feel free to improve!

Re: [tor-dev] I have a group at internet archive that are interested in buying a lot of OnionPi's

2014-06-29 Thread Lunar
]: https://github.com/rustybird/corridor -- Lunar lu...@torproject.org signature.asc Description: Digital signature ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin

Re: [tor-dev] Typos in 224-rend-spec-ng.txt

2014-07-21 Thread Lunar
Tim: I've found a few typos in the first few sections of 224-rend-spec-ng.txt at https://gitweb.torproject.org/torspec.git/blob/HEAD:/proposals/224-rend-spec-ng.txt Feel free to provide your fixes in the form of a patch. `git format-patch` can help crafting an email. -- Lunar

Re: [tor-dev] Email Bridge Distributor Interactive Commands

2014-07-25 Thread Lunar
accepting obfs2 because some people are using obfs2 bridges right now. But we shouldn't add more people to the set of users of a broken protocol. -- Lunar lu...@torproject.org signature.asc Description: Digital signature

Re: [tor-dev] Email Bridge Distributor Interactive Commands

2014-07-25 Thread Lunar
. Any pointers? -- Lunar lu...@torproject.org signature.asc Description: Digital signature ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] Email Bridge Distributor Interactive Commands

2014-07-25 Thread Lunar
hand out the holy grail, I'm never going to hand anything out. The holy grail will never exist, indeed. I fail too see why this would be a reason to continue giving out solutions that are known to be bad when they have suitable replacement. -- Lunar

Re: [tor-dev] Email Bridge Distributor Interactive Commands

2014-07-28 Thread Lunar
addresses of insecure bridge still be distributed when we can just avoid them? What do users get out of retrieving obfs2 bridge addresses that they can't get when retrieving obfs3? What does the Tor Project get when misleading users? [1]: https://bugs.debian.org/725779 -- Lunar

Re: [tor-dev] Email Bridge Distributor Interactive Commands

2014-07-29 Thread Lunar
isis: Lunar transcribed 2.9K bytes: Matthew Finkel: I agree, and I think it's safe to assume that some nation-state adversaries do not have these capabilities yet. Users should choose obfs3 over obfs2, but if a user has a reason for requesting obfs2 then I don't think we should deny

Re: [tor-dev] [android dev] probably a stupid noob question… but

2014-07-31 Thread Lunar
subscribers. Maybe the Guardian Project's mailing list is more appropriate? https://lists.mayfirst.org/mailman/listinfo/guardian-dev -- Lunar lu...@torproject.org signature.asc Description: Digital signature

Re: [tor-dev] Decentralized VOIP over Tor

2014-08-17 Thread Lunar
. -- Lunar lu...@torproject.org signature.asc Description: Digital signature ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] DNSSEC

2014-08-30 Thread Lunar
-expanded-dns.txt Please contribute if you can! -- Lunar lu...@torproject.org signature.asc Description: Digital signature ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org

Re: [tor-dev] DNSSEC

2014-09-01 Thread Lunar
design is available: https://gitweb.torproject.org/torspec.git -- Lunar lu...@torproject.org signature.asc Description: Digital signature ___ tor-dev mailing list tor-dev@lists.torproject.org https

Re: [tor-dev] Orbot Fails to Transparent Proxy on lge-e739

2014-09-04 Thread Lunar
on a developer's mailing list: https://lists.mayfirst.org/mailman/listinfo/guardian-dev -- Lunar lu...@torproject.org signature.asc Description: Digital signature ___ tor-dev mailing list tor-dev@lists.torproject.org

Re: [tor-dev] CGI and Hidden Services

2014-09-10 Thread Lunar
your question to tor-talk. That's fine, be patient. -- Lunar lu...@torproject.org signature.asc Description: Digital signature ___ tor-dev mailing list tor-dev@lists.torproject.org https

Re: [tor-dev] Building TOR using Visual Studio

2014-10-18 Thread Lunar
version of the Tor Browser (run on GNU/Linux). -- Lunar lu...@torproject.org signature.asc Description: Digital signature ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi

Re: [tor-dev] obfs4proxy package in deb.tp.o

2014-10-26 Thread Lunar
for Debian You should now be able to get obfs4proxy by using: deb http://deb.torproject.org/torproject.org obfs4proxy main The package should work on most Ubuntu and Debian versions. It is available for amd64 and i386. -- Lunar lu...@torproject.org

Re: [tor-dev] obfs4proxy package in deb.tp.o

2014-10-26 Thread Lunar
is in Go and statically linked. The same package can be used on many distributions. It could not be built on every suite though, as they don't have the needed build dependencies. -- Lunar lu...@torproject.org signature.asc Description: Digital signature

Re: [tor-dev] Producing automated screencasts for Tor Browser

2015-03-19 Thread Lunar
Hi! Karsten Loesing: 2. Install Sikuli (http://www.sikuli.org/; thanks for Lunar for the suggestion!) either directly on these machines or on the virtual machine host or on a separate host in the same network. 3. Write a Sikuli script for each operating system and language, probably re

Re: [tor-dev] [FWD: Re: Apple developer account + codesigning]

2015-10-27 Thread Lunar
the other way around: if Tor distributes the signatures, is there I way to stick them in the binaries I just built so that the signature is valid and the bytes are the same as the ones distributed by Tor. -- Lunar <lu...@torproject.org>

Re: [tor-dev] UX tag

2015-10-31 Thread Lunar
I want to humbly ask you to use > the tag regardless of the help you may or may not need for that ticket. Tor Browser folks have been tagging tickets with tbb-usability: https://trac.torproject.org/projects/tor/tags/tbb-usability Do you want an extra tag for those? -- Lunar

Re: [tor-dev] TUF Repository for Tor Browser

2016-06-10 Thread Lunar
kage should not be very hard. Hope that helps, -- Lunar <lu...@torproject.org> signature.asc Description: Digital signature ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] TUF Repository for Tor Browser

2016-06-11 Thread Lunar
ban...@openmailbox.org: > Thanks Lunar for the update. I thought the effort to upstream TBB had > completely stalled because there was no activity on #3994. Good to know its > still alive. > > Is there somewhere I could look to track progress besides that ticket? Don't m

Re: [tor-dev] Proposals should have reviews. Let's make sure that happens. Here's a schedule.

2016-01-18 Thread Lunar
ec.git/tree/proposals Once in a while Nick updates the status document giving a general overview: https://gitweb.torproject.org/torspec.git/plain/proposals/proposal-status.txt -- Lunar <lu...@torproject.org> signature.a

Re: [tor-dev] GSoC'16 proposal: the Torprinter project (a Panopticlick-like website)

2016-03-22 Thread Lunar
ered hardcoded strings through different HTML files. Great! :) As long as it's properly i18nized, localizations can come later. Although doing a first localization while i18ning might help you spot missing strings. -- Lunar <lu...@torproject.org

Re: [tor-dev] prop224: Ditching key blinding for shorter onion addresses

2016-07-30 Thread Lunar
who type “riseup” in the Google search bar of their browser to access their mailbox… They don't even want to/can't remember an URL. Hardly a chance they will remember an onion address, whatever its size.) Maybe it would be worthwhile to ask the UX team for input on the topic?

Re: [tor-dev] "old style" hidden services after Prop224

2016-09-13 Thread Lunar
work for having a discussion. (Should we move this to -project? Not sure.) [1]: https://blog.torproject.org/blog/tor-social-contract [2]: https://blog.torproject.org/blog/hidden-services-need-some-love See “Attacks by Hidden Service Directory Servers” - -- Lunar

Re: [tor-dev] Tor Browser downloads and updates graphs

2016-09-20 Thread Lunar
hs running as a way to measure the amount of Tor Browser users, I wonder if we should not also try to work with Tails' people to add their boot statistics, and maybe other projects who include Tor Browser without using the automated update mechanism. - -- Lunar

Re: [tor-dev] Tor Browser downloads and updates graphs

2016-09-17 Thread Lunar
ating systems if you consider it a reasonable thing to do. Seeing these graphs really made my day, I had been hoping for them for a long time (#10675 which maybe should be closed). Thanks a lot! Thanks, -- Lunar <lu...@to

Re: [tor-dev] sketch: An alternative prop224 authentication mechanism based on curve25519

2016-12-06 Thread Lunar
dees so they can access the minutes and write up reports together in the future. You really don't want to have all attendees bring their computer or require them to meet with Elena at a later time. Hope that helps, -- Lunar <lu...