[tor-dev] Request for feedback/victims: cfc-0.0.2

2016-03-26 Thread Yawning Angel
Hello, Thanks for the feedback so far. [ PEOPLE THAT HAVE BIG SCARY ADVERSARIES IN THEIR THREAT MODEL STILL SHOULD NOT USE THIS. ] New version with changes some that add functionality, some code of quality stuff, hence a version bump to 0.0.2, especially since it'll probably be a bit befor

Re: [tor-dev] iObfs: obfs4proxy on iOS

2016-03-26 Thread Yawning Angel
On Sat, 26 Mar 2016 21:44:54 + Mike Tigas wrote: > iObfs is an effort to build obfs4proxy for iOS and to also build out > some techniques for actually making it usable within other > Tor-enabled iOS apps. You may have heard me or n8fr8 discuss the idea > at the dev meeting a few weeks ago. I'

Re: [tor-dev] Sibyls: introducing AS-level sign-up rate limits, per relay caps, family-level caps

2016-03-26 Thread nusenu
> denial of service risk > > To prevent trivial dos attacks where an attacker with a single IP > generates several new relay fingerprints until the entire AS is blocked > from adding new relays for a few hours these relays should come from > distinct IP addresses. That actually opens a possibilit

[tor-dev] iObfs: obfs4proxy on iOS

2016-03-26 Thread Mike Tigas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 [Cross-posted to guardian-dev and tor-dev.] Hey, friends. I suppose this serves as a project announcement of sorts, and also as a progress report regarding the current status of this thing. iObfs is an effort to build obfs4proxy for iOS and to als

[tor-dev] Sibyls: introducing AS-level sign-up rate limits, per relay caps, family-level caps

2016-03-26 Thread nusenu
Hi, there is a strict limit on the number of relays that one can run on a single IP address to make Sybil attacks harder, but there are no limits on sign-up rates. Such sign-up rate limits would prevent many of the known and simple Sibyls of the past months and probably reduce the manual actions

Re: [tor-dev] Proposal 259: New Guard Selection Behaviour

2016-03-26 Thread s7r
Hello, teor, asn, see comments inline. On 3/24/2016 5:00 PM, Tim Wilson-Brown - teor wrote: [snip] >>> The number of directory guards will increase when 0.2.8-stable is >>> released and relays and clients upgrade. >>> In 0.2.8, relays accept tunnelled directory connections even if they >>> do not

[tor-dev] putting 'Nuke MyFamily' to vote (#6676)

2016-03-26 Thread nusenu
One year after my last thread on that topic [0] I'd like to move forward on the question whether tor should have a MyFamily functionality or not, because it seems to be a blocker of prop242 (#5565) and it is clear that the current MyFamily design is not practical for many - given the amount of impr

[tor-dev] [GSoC 2016] Roster - Gamification for Tor Operators (Sean Saito)

2016-03-26 Thread Sean Saito
Hi! I have finished and submitted my final proposal for GSoC yesterday. This summer I would like to complete Roster, a Tor Project initiative I’ve been working on since last year. It is basically a social incentivization scheme to gamify operating a Tor relay. All the details are included in t

Re: [tor-dev] Tor 0.2.8 and Fallback Directory Mirrors

2016-03-26 Thread Tim Wilson-Brown - teor
> On 26 Mar 2016, at 21:36, intrigeri wrote: > > Hi, > > Tim Wilson-Brown - teor wrote (21 Mar 2016 18:16:46 GMT) : >> If this feature does cause problems, or if your app needs to bootstrap only >> from the >> authorities (Tails time syncing? [2]), the fallback directory mirrors >> feature ca

Re: [tor-dev] Tor 0.2.8 and Fallback Directory Mirrors

2016-03-26 Thread intrigeri
Hi, Tim Wilson-Brown - teor wrote (21 Mar 2016 18:16:46 GMT) : > If this feature does cause problems, or if your app needs to bootstrap only > from the > authorities (Tails time syncing? [2]), the fallback directory mirrors feature > can be > disabled using the tor config option "UseDefaultFallb