Re: [tor-dev] Should popularity-hiding be a security property of hidden services?

2015-04-15 Thread Paul Syverson
Hi George, Thanks for taking up the challenge I raised to you of coming up with use cases where leaking popularity is a threat. Perhaps others have suggested that we don't worry about popularity at all, but for the arguments I had been trying to make these are straw men. I don't suggest that we c

Re: [tor-dev] Draft of proposal "Direct Onion Services: Fast-but-not-hidden services"

2015-04-15 Thread Tom Ritter
On 10 April 2015 at 07:58, George Kadianakis wrote: > One negative aspect of the above suggestions, is that if hidden > services only listen for connections, then they lose their > NAT-punching abilities. But I bet that this is not a problem for some > use cases that would appreciate the correspon

Re: [tor-dev] Summer of Privacy application, Censorship Analyzer

2015-04-15 Thread Miquel Llobet
On Wed, Apr 15, 2015 at 6:01 PM, Philipp Winter wrote: > You could find an interesting bug under the "OONI" component [0]. I'm > also copying Arturo, OONI's maintainer, who might have a better tip. > Great thanks, I'll pick something from the list, hopefully Arturo can offer some guidance. Als

[tor-dev] Release: obfs4proxy-0.0.5

2015-04-15 Thread Yawning Angel
Hello all, I just tagged obfs4proxy-0.0.5, this time with improvements for both clients and servers. All users are recommended to upgrade. Special thanks to mvdan for various code cleanups. Tarball/Signature: https://people.torproject.org/~yawning/releases/obfs4proxy/obfs4proxy-0.0.5.tar.xz htt

Re: [tor-dev] TOR SoP proposal: extending and improving TOR network anomaly detection

2015-04-15 Thread Kibo Schaffer
Hi Philipp, Thanks for your reply. I mean Tor the network. Not integrated into the protocol itself. Sorry for the poor wording. So it would work as exitmap, HonerConnector, and TorDoctor. > And do you already have some concrete ideas about detecting > anomalies? It's an interesting topic, but als

[tor-dev] Relay Database: Existing Schemas?

2015-04-15 Thread nusenu
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, I'm planing to store relay data in a database for analysis. I assume others have done so as well, so before going ahead and designing a db schema I'd like to make sure I didn't miss pre-existing db schemas one could build on. Data to be stored:

Re: [tor-dev] onionoo: historic details.json data

2015-04-15 Thread nusenu
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 > By the way, are you aware of Philipp Winter's work on a better > Sybil attack detector? If you mean http://notebooks.nymity.ch/detecting_sybils.html then yes, I've seen it. -BEGIN PGP SIGNATURE- iQIcBAEBCgAGBQJVLrcMAAoJEFv7XvVCELh0Q5UQAIV

[tor-dev] Tor Summer of Privacy deadline is soon!

2015-04-15 Thread Damian Johnson
Hi all, just a quick friendly heads up that the deadline is coming up soon. If you've been thinking of making an application then now is the time! Application deadline for students is April 17th (end-of-day everywhere [1]). NO LATE APPLICATIONS WILL BE CONSIDERED. We're sorry about needing to be s

Re: [tor-dev] TSOP proposal

2015-04-15 Thread Alden Page
Hey Remi, It's great to see someone else interested in adversarial stylometry! I have been working on a project quite similar to your proposal since January as my undergraduate thesis. I am considering applying for TSoP in order to fund the continued development of the project, but I think the men

Re: [tor-dev] Summer of Privacy application, Censorship Analyzer

2015-04-15 Thread Philipp Winter
On Tue, Apr 14, 2015 at 11:56:12AM +0200, Miquel Llobet wrote: > As far as coding goes, I played a bit with OONI (did a scan, turns out I'm > clean :-) ). and built it from source. What bugs to you recommend to work > on as a start? Ideally I can write a patch before the submission is due to > atte

Re: [tor-dev] TOR SoP proposal: extending and improving TOR network anomaly detection

2015-04-15 Thread Philipp Winter
On Tue, Apr 14, 2015 at 01:38:54AM -0400, Kibo Schaffer wrote: > I want to improve TOR's ability to detect anomalies such as sybil > attacks, and make it easy to include other heuristics for other > potential attacks. When a potential attack is detected, users and > maintainers are notified (as nec

[tor-dev] Summer of Privacy applicant, Multi-threading

2015-04-15 Thread Kim Reece
Hello, I see several folks doing brief intros here so I'll do so as well. Most of my application is in already, just finishing up the patch. I'm a Mathematics undergrad, 3rd year come Fall. I've used multi-threading in coursework and in an internship I did at JPL/NASA. I want to expand the multi-t