Re: [tor-dev] Suggestions for Projects

2014-12-17 Thread grarpamp
>> Are there any projects that are in need of a volunteer? I am well versed >> in C, Python and Java (Android). Go here and pick random interesting tickets to complete... https://trac.torproject.org/ ___ tor-dev mailing list tor-dev@lists.torproject.org

Re: [tor-dev] Internet-wide scanning for bridges

2014-12-17 Thread David Fifield
On Fri, Dec 12, 2014 at 04:33:05PM -0800, Vlad Tsyrklevich wrote: > Hello, while taking a looking at TorCloud I it used static OR and obfs2+obfs3 > ports making them trivial to discover by scanning EC2's IP address space. This > led me to consider the more general attack of internet-wide scanning t

[tor-dev] Hidden service performance

2014-12-17 Thread David Goulet
Hello tor-dev, This email is to detail the work being done on a framework to do performance measurements for hidden service. I'm looking to get some feedback on the whole idea, improvement and help on possible analysis. If this work is not thrown out the window, I'll definitely do a Wiki page for

Re: [tor-dev] basket: More eggs in the Guard basket.

2014-12-17 Thread Yawning Angel
On Wed, 17 Dec 2014 13:51:02 -0500 Nick Mathewson wrote: [snipity] > Should the handshake also a signature by Bob of (X|N), and should > maybe the shared secret also include a digest of all the other parts > of the communication? Hmm, maybe I shouldn't have left bits out, and I really do need to

Re: [tor-dev] Internet-wide scanning for bridges

2014-12-17 Thread Vlad Tsyrklevich
I totally agree with you, the ideal solution is for bridges to be security to by default: Either by getting rid of the ORPort for bridges and requiring the use of PTs, or changing the behavior of 'auto' for ports and having ORPort be set to auto by default. However, these changes don't appear trivi

Re: [tor-dev] Internet-wide scanning for bridges

2014-12-17 Thread Sebastian Hahn
Hi there, On 14 Dec 2014, at 20:06, Vlad Tsyrklevich wrote: > I'm not against keeping some around, but this warning is unlikely to turn > around the thousands that currently match this configuration--hopefully it'll > just encourage future bridge operators to use a 'safer' configuration. The >

Re: [tor-dev] basket: More eggs in the Guard basket.

2014-12-17 Thread Nick Mathewson
On Tue, Dec 16, 2014 at 9:53 AM, Yawning Angel wrote: > Hi all, > > For several reasons I've been working on a bit of code that I named > "basket". It's almost at the point where the brave members of the > general public should be aware that it exists as a potential option in > the privacy toolbo

Re: [tor-dev] Suggestions for Projects

2014-12-17 Thread Virgil Griffith
If you're into android Orbot always comes to mind. On Tuesday, December 16, 2014, Abhiram Chintangal < abhiram.chintan...@gmail.com> wrote: > Hello, > > I am a student and I am thinking of getting myself more involved in the > tor project over the winter break. > > Previously, I worked briefly o

Re: [tor-dev] TOR C# application

2014-12-17 Thread Michael Rogers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, I don't know if it's possible to use Tor as a library, but there are a few Java apps that communicate over Tor by launching a Tor process and using it as a SOCKS proxy. Does that sound like what you're aiming to do? Here's a quick rundown of wh