commit 6af10981f643f6ff6d4142a7e2526539fe605dd0
Author: hiro <[email protected]>
Date: Thu Jul 30 14:43:14 2020 +0200
Add july newsletter
---
.../tor-bug-smash-fund-year-two/contents.lr | 184 +++++++++++++++++++++
.../tor-bug-smash-fund-year-two/text/contents.lr | 142 ++++++++++++++++
2 files changed, 326 insertions(+)
diff --git a/content/archive/tor-bug-smash-fund-year-two/contents.lr
b/content/archive/tor-bug-smash-fund-year-two/contents.lr
new file mode 100644
index 0000000..f98aa39
--- /dev/null
+++ b/content/archive/tor-bug-smash-fund-year-two/contents.lr
@@ -0,0 +1,184 @@
+_model: post
+---
+_template: newsletter.html
+---
+author: [email protected]
+---
+pub_date: 2020-07-31
+---
+title: Tor's Bug Smash Fund: Year Two!
+---
+html_body:
+
+<table align="center" border="0" cellpadding="0" cellspacing="0"
class="devicewidth" width="650">
+ <tbody>
+ <tr>
+ <td width="100%">
+ <table align="center" bgcolor="#ffffff" border="0"
cellpadding="0" cellspacing="0" class="devicewidth" width="650">
+ <tbody><!-- Spacing -->
+ <tr>
+ <td height="20" width="100%"><a
href="https://torproject.org"><img alt="tor-news-logo"
src="https://blog.torproject.org/sites/default/files/inline-images/tor-news-logo-560.png"
style="width: 250px; height: 75px;" /></a></td>
+ </tr>
+ <tr>
+ <td>
+ <table align="center"
border="0" cellpadding="0" cellspacing="0" class="devicewidth" width="650">
+ <tbody>
+ <tr>
+ <td
width="100%">
+ <table
align="center" bgcolor="#ffffff" border="0" cellpadding="0" cellspacing="0"
class="devicewidth" width="650">
+
<tbody><!-- /Spacing --><!-- Spacing --><!-- /Spacing --><!-- content -->
+
<tr>
+
<td style="padding:0 15px 15px 15px;">
+
<hr />
+
<h1>Tor's Bug Smash Fund: Year Two!</h1>
+
+
<p><a
href="https://blog.torproject.org/tor-bug-smash-fund-2020"><img alt=""
src="https://blog.torproject.org/sites/default/files/styles/full_width/public/image/tor-bug-smash-blog_4.png?itok=3jebgvhz"
style="width: 640px; height: 320px;" /></a></p>
+
+
<p>The Bug Smash Fund is back for its second year. In 2019, <a
href="https://blog.torproject.org/tors-bug-smash-fund-help-tor-smash-all-bugs">we
launched Tor’s Bug Smash Fund</a> to find and fix bugs in our software
and conduct routine maintenance. Maintenance isn’t a flashy new feature,
and that makes it less interesting to many traditional funders, but it’s
what keeps the reliable stuff working--and with your support, we were able to
close 77 tickets as a result.</p>
+
+
<p>These bugs and issues ranged from maintenance on mechanisms
for sending bridges via email and collecting metrics data to improving tor
padding, testing, onion services, documentation, Tor Browser UX, and tooling
for development. This work keeps Tor Browser, the Tor network, and the <a
href="https://blog.torproject.org/strength-numbers-entire-ecosystem-relies-tor">many
tools that rely on Tor</a> strong, safe, and running smoothly.</p>
+
+
<p>And there’s so much more we can accomplish. Nineteen
tickets tagged <a
href="https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues?label_name%5B%5D=BugSmashFund&scope=all&state=all">BugSmashFund</a>
are still open, and as you know, a big part of building software is ensuring
that you can address issues when you find them. As such, <strong>starting
August 1, every donation we receive during the month of August will count
towards the Bug Smash Fund 2020.</strong></p>
+
+
<p><a
href="https://blog.torproject.org/tor-bug-smash-fund-2020">Learn more about the
Bug Smash Fund and how to contribute</a>.</p>
+
+
<hr />
+
<h1 class="title"><a
href="https://blog.torproject.org/more-onions-porfavor" rel="bookmark"><span
property="schema:name">#MoreOnionsPorfavor: Onionize your website and take back
the internet</span></a></h1>
+
+
<p><a
href="https://blog.torproject.org/more-onions-porfavor"><img alt=""
src="https://blog.torproject.org/sites/default/files/styles/full_width/public/image/onion-location-campaign.png?itok=TjFtjnxZ"
style="width: 640px; height: 320px;" /></a></p>
+
+
<p>Starting July 8th through August 10th, the Tor Project is
running a campaign called #MoreOnionsPorfavor to raise awareness about onion
sites, that is, websites available over onion services. We recently released a
feature called Onion-Location in Tor Browser that announces to users if a
website has an onion site available.</p>
+
+
<p><span>Many web administrators</span><span
class="author-a-pz78zz75z4z70zz81zz85zz81zmz78zz69zwz66z5z90zz77z">
have</span><span> already joined us and made their websites available over
onion services and Onion-Location. For example, ProPublica, DEF CON, Privacy
International, Riseup.net, Systemli.org,</span><span
class="author-a-z65zz80zmez87zz77zz83zz72zgz73zz70zz79ztc5z71z">
and</span><span> Write.as.</span></p>
+
+
<p>Join us to make a more secure web! To participate, enable
Onion-Location, share your onion site using the hashtag #MoreOnionsPorFavor on
your favorite social media, and we'll select some onion service operators
to receive a Tor swag. <span><a
href="https://blog.torproject.org/more-onions-porfavor">Find out how to launch
your onion service and set up Onion-Location</a>.</span></p>
+
+
<div class="field field--name-body
field--type-text-with-summary field--label-hidden field--item"
property="schema:text">
+
<hr /></div>
+
+
<h1>Onion Service version 2 deprecation timeline</h1>
+
+
<p class="ace-line"><a
href="https://blog.torproject.org/v2-deprecation-timeline"><img alt=""
src="https://blog.torproject.org/sites/default/files/styles/tablet_full_width/public/image/onion-v2-deprecation.png?itok=wwEE8jmi"
style="width: 600px; height: 349px;" /></a></p>
+
+
<p class="ace-line" id="magicdomid8"><span>More than 15 years
ago, Onion Service (at the time named Hidden Service) saw the light of day. It
was initially an experiment in order to learn more on what the Tor Network
could offer. The protocol reached its version 2 soon after
deployment.</span></p>
+
+
<p class="ace-line" id="magicdomid10"><span>Version 2 developed
into a strong stable product that has been used for over a decade. Since then,
onion service adoption has increased drastically, from the .onion tld being
standarized by ICANN, to SSL certificates being issued to .onion addresses.
Today, onion services support an ecosystem of client applications: from web
browsing to file sharing and private messaging.</span></p>
+
+
<p class="ace-line" id="magicdomid16"><span>In 2015, a large
scale development effort spanning over 3 years resulted in onion services
version 3. On January 9th 2018, Tor version 0.3.2.9 was released which was the
first tor supporting onion service version 3. Every single relay on the Tor
network now supports version 3. It is also today's</span><span
class="author-a-8z74zz76zez74zmz85zjfjz81zz65zz76zynv"> </span><span>default
version when creating an onion service.</span></p>
+
+
<p class="ace-line" id="magicdomid18"><span>With onions v3
standing strong, we are at a good position to retire v2. It has completed its
course and provided security and privacy to countless people around the world.
But more importantly, v2 has created and propulsed a new era of private and
secure communication.</span> <a
href="https://blog.torproject.org/v2-deprecation-timeline">Prepare for v2
retirement with our planned deprecation timeline</a>.</p>
+
+
<hr />
+
<h1>New Releases</h1>
+
+
<h2 class="title"><a
href="https://blog.torproject.org/new-release-tor-03511-0428-0436-security-fixes">Tor
0.3.5.11, 0.4.2.8, and 0.4.3.6 (with security fixes)</a></h2>
+
+
<p>These releases fix TROVE-2020-001, a medium-severity denial
of service vulnerability affecting all versions of Tor when compiled with the
NSS encryption library. (This is not the default configuration.) <a
href="https://blog.torproject.org/new-release-tor-03511-0428-0436-security-fixes">Full
changelog</a>.</p>
+
+
<h2 class="title"><a
href="https://blog.torproject.org/node/1899" rel="bookmark"><span
property="schema:name">Tor 0.4.4.2-alpha</span></a></h2>
+
+
<p>This is the second alpha release in the 0.4.4.x series. It
fixes a few bugs in the previous release, and solves a few usability,
compatibility, and portability issues. <a
href="https://blog.torproject.org/node/1899" target="_blank">Full
changelog.</a></p>
+
+
<h2 class="title"><a
href="https://blog.torproject.org/new-release-tor-0441-alpha"
rel="bookmark"><span property="schema:name">Tor Browser 10.0a3</span></a></h2>
+
+
<p>This is an Android-only release. It updates Firefox
to 68.10.1esr and features important security updates to Firefox. <a
href="https://blog.torproject.org/new-release-tor-browser-100a3"
target="_blank">Full changelog.</a></p>
+
+
<h2><a
href="https://blog.torproject.org/new-release-tor-browser-952"
rel="bookmark"><span property="schema:name">Tor Browser 9.5.2</span></a></h2>
+
+
<p>This release updates Firefox to 68.10.1esr. It also includes
important security updates to Firefox. <a
href="https://blog.torproject.org/new-release-tor-browser-952">Full
changelog</a>.</p>
+
+
<h2 class="title"><a
href="https://blog.torproject.org/new-release-tor-browser-100a2">Tor Browser
10.0a2</a></h2>
+
+
<p>This release update Firefox to 68.10.0esr, Tor to
0.4.4.1-alpha, and NoScript to 11.0.32. This release also includes important
security updates to Firefox. <a
href="https://blog.torproject.org/new-release-tor-browser-100a2">Full
changelog</a>.</p>
+
+
<hr />
+
<h1>What We're Reading</h1>
+
+
<p>"Homeland Security worries COVID-19 masks are breaking
facial recognition, leaked document shows," <a
href="https://theintercept.com/2020/07/16/face-masks-facial-recognition-dhs-blueleaks/">The
Intercept</a>.</p>
+
+
<p>"Appeals court blocks Trump appointee's takeover of
web nonprofit," <a
href="https://www.politico.com/news/2020/07/21/appeals-court-trump-appointees-web-nonprofit-375753">Politico</a>.</p>
+
+
<p>"A New Map Shows the Inescapable Creep of
Surveillance," <a
href="https://www.wired.com/story/atlas-of-surveillance-eff-law-enforcement-map/">WIRED</a>.<br
/>
+
<br />
+
"The Trump Administration is Attacking Critical Internet
Privacy Tools," <a
href="https://www.vice.com/en_us/article/v7gz4d/the-trump-administration-is-attacking-critical-internet-privacy-tools">Vice</a>.</p>
+
+
<p>"How to Check Your Devices for Stalkerware," <a
href="https://www.wired.com/story/how-to-check-for-stalkerware/">WIRED</a>.</p>
+
+
<p>"EFF to Court: Trump Appointee’s Removal of Open
Technology Fund Leadership Is Unlawful," <a
href="https://www.eff.org/press/releases/eff-court-trump-appointees-removal-open-technology-fund-leadership-unlawfu">EFF</a>.</p>
+
+
<hr />
+
<h1>Events with Tor</h1>
+
+
<div class="views-row">
+
<div class="views-row">
+
<p>(ICYMI) <a href="https://blog.torproject.org/pets-2020">
Privacy Enhancing Technologies Symposium (recorded virtual event)</a>, July
13-17, 2020.</p>
+
+
<p>(ICYMI) <a
href="https://blog.torproject.org/rightscon-2020">Tor Project @ Rightscon: The
Case for Privacy By Design</a>, June 27, 2020.</p>
+
+
<p><time datetime="2020-05-08T12:00:00Z"><a
href="https://blog.torproject.org/bornhack-2020">Bornhack (DK)</a>, August
11-18, 2020.</time></p>
+
+
<p><a
href="https://blog.torproject.org/usenix-security-2020">Walking Onions @ USENIX
Security Symposium (virtual event)</a>, August 12-14, 2020.</p>
+
</div>
+
</div>
+
+
<hr />
+
<h1>Join Our Community</h1>
+
+
<p>Getting involved with Tor is easy. <a
href="https://community.torproject.org/relay/">Run a relay</a> to make the
network faster and more decentralized. <a
href="https://blog.torproject.org/run-tor-bridges-defend-open-internet">Run a
bridge</a> to help censored users access Tor.</p>
+
+
<p>Learn about each of our <a
href="https://trac.torproject.org/projects/tor/wiki/WikiStart#Teams">teams
</a>and start collaborating.</p>
+
+
<p><a href="https://donate.torproject.org">Donate</a> to help
keep Tor fast, strong, and secure.</p>
+
+
<div style="background-color: #7d4698; padding: 6px 8px 6px 8px;
+-webkit-border-radius:3px; border-radius:3px; margin: 0 auto; width:200px;
text-align: center;"><em><a href="https://donate.torproject.org"
style="font-size: 24px; font-family: Source sans pro, Helvetica, Arial,
sans-serif; font-weight: bold; color: #ffffff; text-decoration: none;
display:inline-block;" target="_blank">DONATE</a></em></div>
+
</td>
+
</tr>
+
<tr>
+
<td style="padding:0 15px;">
+
<p>The Tor Project is a US 501(c)(3) non-profit organization
advancing human rights and freedoms by creating and deploying free and
open-source anonymity and privacy technologies, supporting their unrestricted
availability and use, and furthering their scientific and popular
understanding.</p>
+
+
<hr />
+
<p><a href="https://facebook.com/torproject"><img alt=""
src="https://blog.torproject.org/sites/default/files/inline-images/tor-facebook.png"
style="width: 25px; height: 25px; margin: 3px;" /></a><a
href="https://twitter.com/torproject"> <img alt="tor-twitter"
src="https://blog.torproject.org/sites/default/files/inline-images/tor-twitter.png"
style="width: 25px; height: 25px; margin: 3px;" /></a><a
href="https://instagram.com/torproject"> <img alt="tor-insta"
src="https://blog.torproject.org/sites/default/files/inline-images/instagram-tor-icon_0.jpg"
style="width: 25px; height: 25px; margin: 3px;" /></a></p>
+
+
</td>
+
</tr>
+
</tbody>
+ </table>
+ </td>
+ </tr>
+ </tbody>
+ </table>
+ </td>
+ </tr>
+ </tbody>
+ </table>
+ </td>
+ </tr>
+ </tbody>
+</table>
+
+<table bgcolor="#ffffff" border="0" cellpadding="0" cellspacing="0"
id="backgroundTable" st-sortable="left-image" width="100%">
+ <tbody>
+ <tr>
+ <td>
+ <table align="center" border="0" cellpadding="0"
cellspacing="0" class="devicewidth" width="650">
+ <tbody>
+ <tr>
+ <td width="100%">
+ <table align="center"
bgcolor="#ffffff" border="0" cellpadding="0" cellspacing="0"
class="devicewidth" width="650">
+ <tbody><!-- Spacing -->
+ <tr>
+
<td> </td>
+ </tr>
+ </tbody>
+ </table>
+ </td>
+ </tr>
+ </tbody>
+ </table>
+ </td>
+ </tr>
+ </tbody>
+</table>
+<!-- Spacing -->
diff --git a/content/archive/tor-bug-smash-fund-year-two/text/contents.lr
b/content/archive/tor-bug-smash-fund-year-two/text/contents.lr
new file mode 100644
index 0000000..721128d
--- /dev/null
+++ b/content/archive/tor-bug-smash-fund-year-two/text/contents.lr
@@ -0,0 +1,142 @@
+_model: post
+---
+_template: post.html
+---
+author: [email protected]
+---
+pub_date: 2020-07-31
+---
+title: Tor's Bug Smash Fund: Year Two!
+---
+body:
+
+## Tor's Bug Smash Fund: Year Two! ##
+
+https://blog.torproject.org/tor-bug-smash-fund-2020
+
+The Bug Smash Fund is back for its second year. In 2019, we launched Torâs
Bug Smash Fund
(https://blog.torproject.org/tors-bug-smash-fund-help-tor-smash-all-bugs) to
find and fix bugs in our software and conduct routine maintenance. Maintenance
isnât a flashy new feature, and that makes it less interesting to many
traditional funders, but itâs what keeps the reliable stuff working--and with
your support, we were able to close 77 tickets as a result.
+
+These bugs and issues ranged from maintenance on mechanisms for sending
bridges via email and collecting metrics data to improving tor padding,
testing, onion services, documentation, Tor Browser UX, and tooling for
development. This work keeps Tor Browser, the Tor network, and the many tools
that rely on Tor
(https://blog.torproject.org/strength-numbers-entire-ecosystem-relies-tor)
strong, safe, and running smoothly.
+
+And thereâs so much more we can accomplish. Nineteen tickets tagged
BugSmashFund
(https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues?label_name%5B%5D=BugSmashFund&scope=all&state=all)
are still open, and as you know, a big part of building software is ensuring
that you can address issues when you find them. As such, *starting August 1,
every donation we receive during the month of August will count towards the Bug
Smash Fund 2020.*
+
+Learn more about the Bug Smash Fund and how to contribute:
https://blog.torproject.org/tor-bug-smash-fund-2020
+
+## #MoreOnionsPorfavor: Onionize your website and take back the internet ##
+https://blog.torproject.org/more-onions-porfavor
+
+Starting July 8th through August 10th, the Tor Project is running a campaign
called #MoreOnionsPorfavor to raise awareness about onion sites, that is,
websites available over onion services. We recently released a feature called
Onion-Location in Tor Browser that announces to users if a website has an onion
site available.
+
+Many web administrators have already joined us and made their websites
available over onion services and Onion-Location. For example, ProPublica, DEF
CON, Privacy International, Riseup.net, Systemli.org, and Write.as.
+
+Join us to make a more secure web! To participate, enable Onion-Location,
share your onion site using the hashtag #MoreOnionsPorFavor on your favorite
social media, and we'll select some onion service operators to receive a Tor
swag. Find out how to launch your onion service and set up Onion-Location:
https://blog.torproject.org/more-onions-porfavor
+
+## Onion Service version 2 deprecation timeline ##
+
+https://blog.torproject.org/v2-deprecation-timeline
+
+More than 15 years ago, Onion Service (at the time named Hidden Service) saw
the light of day. It was initially an experiment in order to learn more on what
the Tor Network could offer. The protocol reached its version 2 soon after
deployment.
+
+Version 2 developed into a strong stable product that has been used for over a
decade. Since then, onion service adoption has increased drastically, from the
.onion tld being standarized by ICANN, to SSL certificates being issued to
.onion addresses. Today, onion services support an ecosystem of client
applications: from web browsing to file sharing and private messaging.
+
+In 2015, a large scale development effort spanning over 3 years resulted in
onion services version 3. On January 9th 2018, Tor version 0.3.2.9 was released
which was the first tor supporting onion service version 3. Every single relay
on the Tor network now supports version 3. It is also today's default version
when creating an onion service.
+
+With onions v3 standing strong, we are at a good position to retire v2. It has
completed its course and provided security and privacy to countless people
around the world. But more importantly, v2 has created and propulsed a new era
of private and secure communication. Prepare for v2 retirement with our planned
deprecation timeline: https://blog.torproject.org/v2-deprecation-timeline.
+
+## New Releases ##
+
+Tor 0.3.5.11, 0.4.2.8, and 0.4.3.6 (with security fixes)
+
+https://blog.torproject.org/new-release-tor-03511-0428-0436-security-fixes
+
+These releases fix TROVE-2020-001, a medium-severity denial of service
vulnerability affecting all versions of Tor when compiled with the NSS
encryption library. (This is not the default configuration.)
+
+Tor 0.4.4.2-alpha
+
+https://blog.torproject.org/node/1899
+
+This is the second alpha release in the 0.4.4.x series. It fixes a few bugs in
the previous release, and solves a few usability, compatibility, and
portability issues.
+
+Tor Browser 10.0a3
+
+https://blog.torproject.org/new-release-tor-0441-alpha
+
+This is an Android-only release. It updates Firefox to 68.10.1esr and features
important security updates to Firefox.
+
+Tor Browser 9.5.2
+
+https://blog.torproject.org/new-release-tor-browser-952
+
+This release updates Firefox to 68.10.1esr. It also includes important
security updates to Firefox.
+
+Tor Browser 10.0a2
+
+https://blog.torproject.org/new-release-tor-browser-100a2
+
+This release update Firefox to 68.10.0esr, Tor to 0.4.4.1-alpha, and NoScript
to 11.0.32. This release also includes important security updates to Firefox.
+
+## What We're Reading ##
+
+"Homeland Security worries COVID-19 masks are breaking facial recognition,
leaked document shows," The Intercept.
+
+https://theintercept.com/2020/07/16/face-masks-facial-recognition-dhs-blueleaks/
+
+"Appeals court blocks Trump appointee's takeover of web nonprofit," Politico.
+
+https://www.politico.com/news/2020/07/21/appeals-court-trump-appointees-web-nonprofit-375753
+
+"A New Map Shows the Inescapable Creep of Surveillance," WIRED.
+
+https://www.wired.com/story/atlas-of-surveillance-eff-law-enforcement-map/
+
+"The Trump Administration is Attacking Critical Internet Privacy Tools," Vice.
+
+https://www.vice.com/en_us/article/v7gz4d/the-trump-administration-is-attacking-critical-internet-privacy-tools
+
+"How to Check Your Devices for Stalkerware," WIRED.
+
+https://www.wired.com/story/how-to-check-for-stalkerware/
+
+"EFF to Court: Trump Appointeeâs Removal of Open Technology Fund Leadership
Is Unlawful," EFF.
+
+https://www.eff.org/press/releases/eff-court-trump-appointees-removal-open-technology-fund-leadership-unlawfu
+
+## Upcoming Events with Tor ##
+
+(ICYMI) Privacy Enhancing Technologies Symposium (recorded virtual event),
July 13-17, 2020.
+
+https://blog.torproject.org/pets-2020
+
+(ICYMI) Tor Project @ Rightscon: The Case for Privacy By Design, June 27, 2020.
+
+https://blog.torproject.org/rightscon-2020
+
+Bornhack (DK), August 11-18, 2020.
+
+https://blog.torproject.org/bornhack-2020
+
+Walking Onions @ USENIX Security Symposium (virtual event), August 12-14, 2020.
+
+https://blog.torproject.org/usenix-security-2020
+
+## Join Our Community ##
+
+Getting involved with Tor is easy. Run a relay to make the network faster and
more decentralized: https://community.torproject.org/relay/
+
+Run a bridge to help censored users access Tor:
https://blog.torproject.org/run-tor-bridges-defend-open-internet
+
+Learn about each of our teams and start collaborating:
https://trac.torproject.org/projects/tor/wiki/WikiStart#Teams
+
+Donate to help keep Tor fast, strong, and secure. https://donate.torproject.org
+
+--
+
+The Tor Project is a US 501(c)(3) non-profit organization advancing human
rights and freedoms by creating and deploying free and open-source anonymity
and privacy technologies, supporting their unrestricted availability and use,
and furthering their scientific and popular understanding.
+
+Twitter: https://twitter.com/torproject
+
+Facebook: https://facebook.com/torproject
+
+Instagram: https://instagram.com/torproject
+
+Mastodon: http://mastodon.social/@torproject
_______________________________________________
tor-commits mailing list
[email protected]
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-commits