[tor-dev] GSoC proposal Review

2016-03-23 Thread Pushkar Pathak
Hi, Please review my proposal to Improve Ahmia-Hidden Search Service https://docs.google.com/document/d/1VylEqQBdFPe-ev_naT9qA4ycNM1_U5j8OhMLATDZj4s/edit?usp=sharing Thanks, Pushkar. ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.to

Re: [tor-dev] Request for feedback/victims: cfc

2016-03-23 Thread Arthur D. Edelstein
On Wed, Mar 23, 2016 at 2:15 AM, Yawning Angel wrote: > My "proof of concept" tech demo is what I consider good enough for > use by brave people that aren't me, so I have put up an XPI package > at: https://people.torproject.org/~yawning/volatile/cfc-20160323/ Very cool

Re: [tor-dev] [GSoC] CONIKS implementation for Tor Messenger

2016-03-23 Thread Huy Vu Quoc
Hi Arlo, > It may be prudent to consider a memory-managed language (I'll suggest golang > here as popular choice) for the server component. It is good to know that I can use golang to develop the server component. I am going to rewrite this part. > Wherever possible, we'd like to avoid modals a

[tor-dev] (no subject)

2016-03-23 Thread Huy Vu Quoc
Hi Arlo, > It may be prudent to consider a memory-managed language (I'll suggest golang > here as popular choice) for the server component. It is good to know that I can use golang to develop the server component. I am going to rewrite this part. > Wherever possible, we'd like to avoid modals a

Re: [tor-dev] Query regarding GSOC '16 - txtorcon

2016-03-23 Thread meejah
Akash Mishra writes: > Also, I submitted a minor PR for the same branch. But the travis build > failed for it. Upon checking on the details, I saw that it used > python 2.7. However, that shouldn't have made any difference to the > tests since the PR was for compatibility on both the python vers

Re: [tor-dev] Query regarding GSOC '16 - txtorcon

2016-03-23 Thread Akash Mishra
On Monday 21 March 2016 08:31 AM, meejah wrote: Hmm, it looks like I haven't actually merged the "python3" branch into master which is why a bunch of this looks like I changed it already I guess ;) So, see the branch "python3" for fixes to several of the issues you pointed to. However, there sti

Re: [tor-dev] Query regarding GSOC '16 - txtorcon

2016-03-23 Thread Akash Mishra
Hi meejah, Coming up with a task list and schedule would be a good thing to include in your GSoC application -- they are due by no later than March 25th! The tasks you've included are certainly relevant, but including more detail than that would probably be a good idea. With reference to ticke

[tor-dev] Notes from network team meeting Wed 3/23/2016

2016-03-23 Thread Isabela
tl;dr; important updates related to triage process and important discussion topics related to release guidelines draft. Also, help needed to get 0.2.8 out. Pay attention to next meeting time! It's new! == Notes from little t Tor team - Wed March 23rd @ #tor-dev == Participants + updates:

Re: [tor-dev] [GSoC] CONIKS implementation for Tor Messenger

2016-03-23 Thread Arlo Breault
Thanks Vu, looking good. > One challenge of keyserver is efficiency and scalability for large volumes of > users, concurrent traffic. According to this requirement, the keyserver will > be implemented using libuv library and OpenSSL as cryptography library. libuv > is a multi-platform support

Re: [tor-dev] Request for feedback/victims: cfc

2016-03-23 Thread Paul Syverson
On Wed, Mar 23, 2016 at 12:33:15PM -0400, Adam Shostack wrote: > Nice! > > Random thought: rather than "unreachable from Tor", "unreachable when > using the internet safely." This is really about people wanting > security, and these companies not wanting to grapple with what their > customers wan

Re: [tor-dev] Request for feedback/victims: cfc

2016-03-23 Thread Griffin Boyce
Yawning Angel wrote: Inspired by https://trac.torproject.org/projects/tor/ticket/18361 I've been working on way to improve the situation. Neat. In the thread someone mentions that it's possible to derive the answer for the old-style street number captchas using tesseract [1]. Interestingly,

Re: [tor-dev] Request for feedback/victims: cfc

2016-03-23 Thread Adam Shostack
| > | > On Wed, 23 Mar 2016 09:15:36 + | > Yawning Angel wrote: | > > My "proof of concept" tech demo is what I consider good enough for | > > use by brave people that aren't me, so I have put up an XPI package | > > at: https://people.torproject.org/~yaw

Re: [tor-dev] Request for feedback/victims: cfc

2016-03-23 Thread Jeff Burdges
; My "proof of concept" tech demo is what I consider good enough for > > use by brave people that aren't me, so I have put up an XPI package > > at: https://people.torproject.org/~yawning/volatile/cfc-20160323/ > > I noticed some dumb bugs and UI issues in the version

Re: [tor-dev] Request for feedback/victims: cfc

2016-03-23 Thread David Fifield
During the OONI survey to find instances of server-side Tor blocking, we found a few variations on CloudFlare captcha pages. They don't all say "Attention Required!". Apparently there is an option to customize the page, but few sites make use of it. Here are the regexes we used (excerpted from http

Re: [tor-dev] GSoC proposal: Panopticlick

2016-03-23 Thread Akito Ono
Hi Georg, Thank you for your advice, always! >1) What does "Improve a peripheral test suite and design" mean? Where >does this peripheral one come from? It meant measuring fingerprint's uniqueness and I rewrote it. >2) Looking at the screenshot of your panopticlick-poc: I am wondering >what you

Re: [tor-dev] tor-dev Digest, Vol 62, Issue 38

2016-03-23 Thread Hugo Maxwell Connery
Hi, Hats off to Yawning Angel for doing work to address this "CAPTCHA" challenge. The idea of using archive.somewhere to fetch cached versions of walled garden internet zones seems sensible. More points to YA with the ALL CAPS warning about "big nasty adversary in you threat model dont go here"

Re: [tor-dev] Request for feedback/victims: cfc

2016-03-23 Thread Yawning Angel
[I hate replying to myself.] On Wed, 23 Mar 2016 09:15:36 + Yawning Angel wrote: > My "proof of concept" tech demo is what I consider good enough for > use by brave people that aren't me, so I have put up an XPI package > at: https://people.torproject.org/~yawning/v

[tor-dev] Request for feedback/victims: cfc

2016-03-23 Thread Yawning Angel
eople.torproject.org/~yawning/volatile/cfc-20160323/ The source: https://git.schwanenlied.me/yawning/cfc (Requires the Firefox SDK aka Jetpack to package). By default the addon will: * Rewrite the CloudFlare captcha error page with messages that reflect my perception of reality[0]. * Rewrite im