[tor-dev] Damian's Status Report - February 2014

2014-03-01 Thread Damian Johnson
It was great meeting everyone in Reykjavík! February largely went toward GSoC prep. Thanks to everybody that sent me project ideas! https://blog.torproject.org/blog/tor-google-summer-code-2014 This left a lot less time than I'd like for coding. The only noteworthy changes this month were... *

Re: [tor-dev] Call for testing/review: obfsclient-0.0.1rc2

2014-03-01 Thread Yawning Angel
Hello all, I have a new release candidate of obfsclient available now. Notable changes since 0.0.1rc1: * Use OpenSSL's CSPRNG instead of arc4random rng from libevent * Use a CTR_DRBG instead of WELL512 * ScrambleSuit session tickets saved to disk also include a timestamp * ScrambleSuit is bet

[tor-dev] HOWTO use Lantern as a pluggable transport

2014-03-01 Thread David Fifield
I met today with some developers of Lantern (https://getlantern.org/, https://github.com/getlantern/lantern). Lantern acts as an HTTP proxy and proxies your traffic through trusted friends. We found that we had the pieces necessary to make Lantern a pluggable transport of Tor; that is, use Lantern

Re: [tor-dev] [weather-rewrite] Update on hourly-script

2014-03-01 Thread Oliver Baumann
Hi, I second Abhiram's opinion, let's see if this comes in handy. Thanks for the tip, anyway! Lukas, if you're interested, we generally meet in #tor-dev Wednesdays, 18:00 UTC. Come join in if you want to, we generally talk about what we worked on and what the next steps are. Feel free to contribut

Re: [tor-dev] Patch to remove goto from sandbox.c

2014-03-01 Thread Hartmut Prochaska
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Hi, > See , Chapter 7, > “Centralized exiting of functions” for a rationale. I saw some functions where the idea above seems fitting. But there had also been some code parts, like this from

Re: [tor-dev] Patch to remove goto from sandbox.c

2014-03-01 Thread Lunar
Hartmut Prochaska: > I changed a function in sandbox.c to not use a goto statement. I didn't > understood what use it had. Attached the patch file. See , Chapter 7, “Centralized exiting of functions” for a rationale. -- Lunar

[tor-dev] Patch to remove goto from sandbox.c

2014-03-01 Thread Hartmut Prochaska
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Hi, I changed a function in sandbox.c to not use a goto statement. I didn't understood what use it had. Attached the patch file. I did the usual tests and didn't found any error at first and second glance. Please consider to test it yourself and

Re: [tor-dev] Request to expunge project 'torsocks' on Google Code

2014-03-01 Thread David Goulet
On 28 Feb (22:19:39), Roger Dingledine wrote: > On Wed, Feb 26, 2014 at 02:06:25PM +0100, Jeroen Massar wrote: > > On 2014-02-26 13:46, Jacob Appelbaum wrote: > > > I think this is a fine idea - if no one objects, I'll purge it. > > > > No objection per-se, but a recommendation/check-up: > > Soun

Re: [tor-dev] Proposal 228: Cross-certifying identity keys with onion keys

2014-03-01 Thread Sebastian G.
25.02.2014 17:22, Nick Mathewson: > You _could_ do something weird in the TAP protocol where you . do something I don't tell you. ;) (I saw that this one was caught already) It should be something like this, in case anyone wonders. > (You _could_ do something weird in the TAP protocol where

Re: [tor-dev] Proposal xxx: Further SOCKS5 extensions (Was Pluggable transport SOCKS5 extensions)

2014-03-01 Thread Sebastian G.
28.02.2014 09:53, Yawning Angel: > 2.2. Tor Extended SOCKS5 Reply Codes > > We introduce the following additional SOCKS5 reply codes to be sent > in the REP field of a SOCKS5 message. Implementations MUST NOT > send any of the extended codes unless the initiator has indicated > that it understand

Re: [tor-dev] tor2web proposal: comments appreciated before I commit this

2014-03-01 Thread Roger Dingledine
On Fri, Feb 28, 2014 at 12:03:10PM -0800, Virgil Griffith wrote: > 2. Tor2web optimizations > 2.1) self-rendezvous >In the current tor2web mode, the client establishes a 0-hop circuit > (direct connection) to a chosen rendezvous point. We actually call that a 1-hop circuit, because it has one

Re: [tor-dev] [weather-rewrite] Update on hourly-script

2014-03-01 Thread Abhiram Chintangal
Lukas, Thanks for the suggestion. Celery sounds like good option, I will try to look into it once I find time. About the coding part, in the coming days we are planning on integrating these hourly and daily scripts with the existing web-application. If you are interested you can take a look at t