Re: [tor-dev] Ready to Integrate/Review New Marionette Version into Tor

2018-07-23 Thread David Fifield
On Fri, Jul 20, 2018 at 04:12:21PM -0400, John Helmsen wrote: > We are in the process of writing the documentation for Marionette, but the > documentation on the web page should be sufficient for at least getting a full > evaluation started.  We'd like to have the evaluation complete by the end of

Re: [tor-dev] Sandboxed Tor Browser should be officially developed

2018-07-23 Thread Matthew Finkel
On Mon, Jul 16, 2018 at 01:32:19AM +, Matthew Finkel wrote: > Hi Everyone, > > We'll discuss this at a meeting next Tuesday, 24 July at 15:00 UTC in > #tor-meeting on OTFC. Reminder! > > There was some discussion on the tbb-dev@ mailing list, but this meeting > will cover the details, imple

Re: [tor-dev] Could tor drop privileges even earlier? (before trying to access anything on the filesystem beyond its torrc files)

2018-07-23 Thread nusenu
I pasted that email to trac as https://trac.torproject.org/projects/tor/ticket/26910 -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu signature.asc Description: OpenPGP digital signature ___ tor-dev mailing list tor-dev@lists.torproject

[tor-dev] Could tor drop privileges even earlier? (before trying to access anything on the filesystem beyond its torrc files)

2018-07-23 Thread nusenu
Fedora/CentOS starts the tor service as root and drops privileges to user 'toranon' due to the torrc 'User' parameter by default. Also by default the tor service runs in a SELinux confined domain (tor_t). That means root in that domain can NOT access just any files regardless of DAC filesystem p

Re: [tor-dev] restoring 'cypherpunks' trac account with more anti-automation?

2018-07-23 Thread teor
> On 23 Jul 2018, at 17:12, nusenu wrote: > >>> is there any timeline when the cypherpunks trac account will be restored? > > does the tor project plan to restore it or work on this problem? It might help to ask: Is there anyone who wants to work on this issue? Hiro is the services admin, she

Re: [tor-dev] Entreaty for spreading awareness about ProxAllium, a useful frontend for Tor

2018-07-23 Thread grarpamp
> I am not sure where I should start with getting feedback as it is quite hard > to find users of ProxAllium. People can't be forced to use or comment. Yet if it's a tool that interacts with tor or the ecosystem of tor tools, post up an announce and feedback request to tor-talk and see. When yo

Re: [tor-dev] restoring 'cypherpunks' trac account with more anti-automation?

2018-07-23 Thread nusenu
>> is there any timeline when the cypherpunks trac account will be restored? does the tor project plan to restore it or work on this problem? I believe it is important that the tor project keeps anonymous submissions open otherwise others can point to the tor project itself as a reference "if n