[tor-dev] Scaling tor for a global population

2014-09-26 Thread Andrew Lewman
I had a conversation with a vendor yesterday. They are interested in including Tor as their "private browsing mode" and basically shipping a re-branded tor browser which lets people toggle the connectivity to the Tor network on and off. They very much like Tor Browser and would like to ship it to

Re: [tor-dev] Tor Geolocating exit nodes.

2014-06-18 Thread Andrew Lewman
On 06/18/2014 04:38 AM, JP Wulf wrote: > This geolocation could perhaps be used to validate the integrity of the > nodes (how I dont know, maybe by establishing TOR honeypots that can only > be compromised through traffic through a compromised (owned) exit node). The Tor client does not trust the

Re: [tor-dev] Proposal for improving social incentives for relay operators

2014-06-10 Thread Andrew Lewman
On 06/09/2014 08:26 PM, Virgil Griffith wrote: > For a while I've been seeking to grow the Tor network in both size and > goodput. Towards this end, I've explored various avenues such as > increasing user-awareness via tor2web. More recently, I've been exploring > financial incentives like TorCoi

Re: [tor-dev] Tor Cloud - Issues/Maintainer/Next Steps

2014-04-20 Thread Andrew Lewman
On Sun, Apr 20, 2014 at 06:54:54AM -0700, s...@redteam.net wrote 0.6K bytes in 0 lines about: : I have created a ticket for Tor Cloud, I think I need access to the Which ticket number? -- Andrew pgp 0x6B4D6475 ___ tor-dev mailing list tor-dev@lists.to

Re: [tor-dev] Retiring old user number estimates

2013-09-16 Thread Andrew Lewman
On Mon, 16 Sep 2013 20:28:21 +0200 Karsten Loesing wrote: > Why do I tell you this? > > Because the old approach uses resources on our poor, already > overloaded metrics machine, and I'm planning to shut down the old > approach in the very near future. Here's the plan: > > - Compute user numb

Re: [tor-dev] Trac upgraded to 0.12.3

2013-08-26 Thread Andrew Lewman
On Mon, 26 Aug 2013 22:45:20 +0200 Erinn Clark wrote: > Hello everyone! > > Weasel and I have upgraded https://trac.torproject.org to a newer > version. Thank you Erinn and weasel! -- Andrew http://tpo.is/contact pgp 0x6B4D6475 ___ tor-dev mailing

Re: [tor-dev] how much havoc can a compromised baseband do to a Guardian ROM device?

2013-07-29 Thread Andrew Lewman
On Mon, 29 Jul 2013 15:00:05 +0200 Eugen Leitl wrote: > Anyone knows whether a Nexus 4 baseband processor has r/w > access to system memory? How does this relate to tor development? -- Andrew http://tpo.is/contact pgp 0x6B4D6475 ___ tor-dev mailing

Re: [tor-dev] Problems. Flash plugin works by default! I can see youtube video with Tor Browser Bundle

2013-07-17 Thread Andrew Lewman
On Wed, 17 Jul 2013 22:10:26 +0400 User of Tor wrote: > I've installed Tor Browser Bundle for Windows > (tor-browser-2.3.25-2_ru) I didn't change any settings. When I visit > any html-page on which there is a flash video i can see it, flash > works! Why? It must not work! > > In settings(plugins

Re: [tor-dev] License of TorDNSEL (was: Haskell packages?)

2013-06-08 Thread Andrew Lewman
On Sat, 08 Jun 2013 19:58:06 +0400 Nikita Karetnikov wrote: > I've found out that TorDNSEL is in the public domain (see [1]). The official Tordnsel will remain in the public domain. You're welcome for fork it of course. However, if you want to commit back to us, please don't change the licensin

Re: [tor-dev] Chrome browser and sand boxing.

2013-05-23 Thread Andrew Lewman
On Thu, 23 May 2013 15:35:28 + Andrew F wrote: > I have Googled and searched the Tor website, but I have not found any > information on chrome's sandbox feature and Tor. Specifically with > flash. Is there any information out their on this? https://trac.torproject.org/projects/tor/wiki/doc/

Re: [tor-dev] Tor Launcher settings UI feedback request

2013-05-03 Thread Andrew Lewman
On Fri, 3 May 2013 16:05:15 -0400 "Runa A. Sandvik" wrote: > I disagree. The Tor help desk sees a ton of requests from users saying > that Tor is unable to connect, and the simple fix is to give them a > bridge or two. Not all users know what they need to connect, and not > all users will know th

Re: [tor-dev] Moving our website to git and splitting it in two

2013-04-06 Thread Andrew Lewman
On Fri, 5 Apr 2013 15:53:57 +0200 Peter Palfrader wrote: > Tom asked what was needed to get our website moved to git. > Probably not much. And while we're at it we could split the > repository into two parts: > - things that are copied over verbatim, and > - things that build stuff that make o

Re: [tor-dev] Obfs Links on dist are Suddenly Gone

2013-03-15 Thread Andrew Lewman
On Thu, 14 Mar 2013 20:39:51 -0400 Roger Dingledine wr > (We currently believe that phobos deleted them because they include > older versions of Tor (aallai and dcf are working on updated versions, > but those aren't ready quite yet), and because our dist/torbrowser/ > directory is huge and its si

Re: [tor-dev] Improving the HTTP interface of BridgeDB: bridges.torproject.org

2013-03-12 Thread Andrew Lewman
On Tue, 12 Mar 2013 16:14:41 +0100 Moritz Bartl wrote: > > 2. The correct email address is brid...@bridges.torproject.org > > Huh? Why is that? I think it's a bad idea. Why would you need > "bridges" in there two times? You can set up bridges@tpo to forward > to the bridges host, done. > > Same

Re: [tor-dev] Improving the HTTP interface of BridgeDB: bridges.torproject.org

2013-03-11 Thread Andrew Lewman
On Mon, 11 Mar 2013 11:08:36 +0530 Sathyanarayanan Gunasekaran wrote: In general, these look great. Some nitpicking items: > Here are the .htmls - > https://people.torproject.org/~gsathya/html/index.html 1. The majority of users aren't going to know which obfsproxy browser they're using. I und

Re: [tor-dev] Fwd: [Wikitech-l] Can we help Tor users make legitimate edits?

2012-12-31 Thread Andrew Lewman
On Fri, 28 Dec 2012 15:26:25 -0800 Zack Weinberg wrote: > 3) Look at Nymble - > http://freehaven.net/anonbib/#oakland11-formalizing and > http://cgi.soic.indiana.edu/~kapadia/nymble/overview.php . It would > allow Wikimedia to distance itself from knowing people's identities, > but still allow a

Re: [tor-dev] Xeronet's torrc

2012-12-31 Thread Andrew Lewman
On Thu, 27 Dec 2012 09:22:00 +0545 Nathan Freitas wrote: > How does it work ? Well, Tor works just great 'out-of-the-box', > however, by tweaking settings and controlling how Tor connects to its > own network we can improve on privacy and security. ...based on what evidence? > (1) Block 'Bad' E

[tor-dev] More TBB usability challenges

2012-11-28 Thread Andrew Lewman
I was asked to meet with some people doing work in dangerous areas of Latin America. In general, these people can get around and work with Microsoft Windows competently. They are all fluent in English, Spanish, and various dialects found in Latin American countries. Most of them had Spanish-langua

Re: [tor-dev] RIAA v Verizon: 404

2012-11-26 Thread Andrew Lewman
On Mon, 26 Nov 2012 12:05:59 -0800 (PST) Christian Kujau wrote: > the Tor DMCA response[0] has a link inside for the RIAA v. Verizon > case: > >https://www.eff.org/legal/cases/RIAA_v_Verizon/opinion-20031219.pdf > > But this document is no longer available at this address, thus > producing a

Re: [tor-dev] resistance to rubberhose and UDP questions

2012-10-05 Thread Andrew Lewman
On Fri, 05 Oct 2012 12:07:39 + Jacob Appelbaum wrote: > Huh. Wow. I just... Excuse me? Who suggests that no Tor developers > haven't already had their arm twisted and stood their ground? Who > suggests that those who run a Tor Directory Authority would comply > with the "man" and what "they"

Re: [tor-dev] IRC meeting to plan sponsor L milestones on Wed July 18, 15:00 UTC in #tor-dev

2012-08-14 Thread Andrew Lewman
On Tue, 14 Aug 2012 10:09:39 +0200 Karsten Loesing wrote: > Mike, Andrew, Roger, Runa: please update the wiki page with your > feedback in this thread. Please keep the developer feedback per > deliverable as short as possible, ideally in a single paragraph. We need a better way to have a convers

Re: [tor-dev] IRC meeting to plan sponsor L milestones on Wed July 18, 15:00 UTC in #tor-dev

2012-07-19 Thread Andrew Lewman
On Thu, 19 Jul 2012 19:55:52 -0400 Roger Dingledine wrote: First off, let me welcome tor-dev and the world to the sausage factory of open source projects. > You should definitely put them somewhere. But be sure to retain the > original text too, so we can go back and compare if we need to later

Re: [tor-dev] IRC meeting to plan sponsor L milestones on Wed July 18, 15:00 UTC in #tor-dev

2012-07-19 Thread Andrew Lewman
On Thu, 19 Jul 2012 12:08:28 -0700 Mike Perry wrote: > Here's the job announcement page that needs to be updated to reflect a > possible October start date: > https://www.torproject.org/about/jobs-browserhacker.html.en > > Action item 0 is to figure out how and where to announce that. Action it

Re: [tor-dev] Thandy and what's next

2012-05-01 Thread Andrew Lewman
On Mon, 20 Jun 2011 21:40:07 + Tomas Touceda wrote: > A couple of months ago, nickm and erinn worked in writing the package > format spec (see [2] for more details), and now I'm going to start > working as fast as I can (which may be slow) in implementing this last > spec and get a working Tha

Re: [tor-dev] First-time tails/tor user feedback

2012-04-21 Thread Andrew Lewman
On Sat, 21 Apr 2012 16:21:09 + Robert Ransom wrote: > > # Third issue: green onion > What should they have wanted to do with Vidalia? Perhaps seeing the progress bar as tor bootstraps would have been helpful. Perhaps knowing they do have some control over this blackbox thing called tor brow

[tor-dev] First-time tails/tor user feedback

2012-04-21 Thread Andrew Lewman
I spent the past week in Sweden, attending the Stockholm Internet Forum, http://www.stockholminternetforum.se/, for part of it. I made a number of tails 0.10.2 usb sticks for people on request. I also asked a lot of people their impressions of Tor and Tails. I received a plethora of feedback. All 8

Re: [tor-dev] Alternatives to Tor Exit Enclaves

2012-04-19 Thread Andrew Lewman
On Wed, 18 Apr 2012 17:28:42 -0400 Arturo Filastò wrote: > The current stable version of Tor (0.2.2.x) still supports Exit > enclaves. The new versions of Tor > (> 0.2.3.x) use a new descriptor format (microdescriptors) allow > relays to specify an Exit Enclave > policy, but clients will not use

Re: [tor-dev] Tor for iOS via official channels

2012-03-18 Thread Andrew Lewman
On Sun, 18 Mar 2012 15:42:33 +0200 Linas Valiukas wrote: > I was thinking about a GSoC 2012 project I could propose, and I came > to the question of why there's no Tor iOS (iPhone / iPad / iPod > touch) application distributed on the official iTunes App Store? People have tried in the past and be

Re: [tor-dev] Sanitizing and publishing our web server logs

2011-09-14 Thread Andrew Lewman
On Friday, September 02, 2011 10:08:37 Brian Szymanski wrote: > What exactly are we hoping to gain from the analysis of the (hopefully > correctly) stripped logs? Overall, all of our data collected can be analyzed to see if any of it can be used to discover users, sets of users, or other personal

Re: [tor-dev] Survey on Tor Trac usage and how you manage your tasks

2011-09-14 Thread Andrew Lewman
On Monday, September 12, 2011 11:27:51 Karsten Loesing wrote: > Well, I don't know what to do here. I think changing the component of > 500+ tickets and adding, say, keywords for the category is a lot of work > and will generate a lot of mail for people on tor-bugs. Is it worth it? Is there any

Re: [tor-dev] Survey on Tor Trac usage and how you manage your tasks

2011-09-01 Thread Andrew Lewman
On Monday, August 22, 2011 08:29:09 Karsten Loesing wrote: > 1 Using Trac features > > 1.1 Which of the reports (stored ticket queries) do you use most often? All tickets, mine first > 1.4 Are you subscribed to tor-bugs and/or tor-wiki-changes, and how do > you use the mails sent to these lists

Re: [tor-dev] Sanitizing and publishing our web server logs

2011-09-01 Thread Andrew Lewman
On Thursday, August 25, 2011 04:08:00 Karsten Loesing wrote: > we have been discussing sanitizing and publishing our web server logs > for quite a while now. The idea is to remove all potentially sensitive > parts from the logs, publish them in monthly tarballs on the metrics > website, and analyz

Re: [tor-dev] Instructions for building the Vidalia-bundle?

2011-08-10 Thread Andrew Lewman
On Tuesday, August 09, 2011 06:07:13 Robert Ransom wrote: > On 2011-08-06, Andrew Lewman wrote: > > On Friday, August 05, 2011 13:02:46 Steve Snyder wrote: > >> Is there documentation anywhere on how to build the Vidalia-bundle for > >> Windows? If so, where can I find

Re: [tor-dev] Instructions for building the Vidalia-bundle?

2011-08-05 Thread Andrew Lewman
On Friday, August 05, 2011 13:02:46 Steve Snyder wrote: > Is there documentation anywhere on how to build the Vidalia-bundle for > Windows? If so, where can I find it? Build vidalia first, https://svn.torproject.org/vidalia/vidalia/trunk/pkg/win32/build-vidalia- installer.txt then build the bun

Re: [tor-dev] [PATCH] Allow tordnsel to build on Squeeze

2011-06-20 Thread Andrew Lewman
On Sun, 19 Jun 2011 23:35:42 +0200 Jérémy Bobbio wrote: >I give up on tordnsel, I'm unable to get git head to > compile in squeeze > > Attached are 3 patches that allow tordnsel to build on a Squeeze > system. I unfortunately lack a test environment to ensure that the > resulting binary works

[tor-dev] Thoughts on simplified packaging

2011-06-14 Thread Andrew Lewman
As I talk to more and more people, they are confused by all of the different software packages we offer. From the simple, "I just want to be a relay, why is this so hard?" to "I just want to safely get to the BBC, I don't care about configuration and such. Can't you just make it a simple down

Re: [tor-dev] The Torouter and the DreamPlug

2011-06-08 Thread Andrew Lewman
On Tue, 7 Jun 2011 15:36:45 -0700 Jacob Appelbaum wrote: > > We would also need a way for users to easily change the hashed > > password. I can't remember if this is a feature that is already > > present in Vidalia. > Yes, we do need a way to change the password. We will also need a way > to rese

Re: [tor-dev] The Torouter and the DreamPlug

2011-06-07 Thread Andrew Lewman
On Tue, 7 Jun 2011 21:08:48 +0100 "Runa A. Sandvik" wrote: > > Vidalia is not designed to control or configure a Tor process that > > it did not start. > > I have tested this, and it works just fine. The question is; are we > happy with something that works, even if it's being used in a way that

Re: [tor-dev] Tor meets real users

2011-05-18 Thread Andrew Lewman
On Fri, 13 May 2011 18:09:04 -0400 katmagic wrote: > As Torbutton has taught us, browsers send quite a bit of information > with them. It seems like it would be helpful to automatically detect > the user's language and operating system, via the User-Agent and > Accept-Language headers. For a long

Re: [tor-dev] Tor meets real users

2011-05-18 Thread Andrew Lewman
On Wed, 18 May 2011 00:39:03 -0700 Mike Perry wrote: > We should definitely translate Andrew's report and this commentary > into tickets in the bug tracker, otherwise it will be forgotten.. On my todo list. -- Andrew pgp 0x74ED336B ___ tor-dev mailin

Re: [tor-dev] Tor meets real users

2011-05-18 Thread Andrew Lewman
On Fri, 13 May 2011 00:25:00 -0700 Lucky Green wrote: > Easily solved. A download page should be workflow based. You can lay > it out as columns or successive pages. Example: We have this, sort of, at https://www.torproject.org/download/download-easy > The first issue is the UE problem, meaning

[tor-dev] Tor meets real users

2011-05-12 Thread Andrew Lewman
A short while ago, I did a training for some activists from a country that is hostile to the Internet. These people were some of the more technical people from their community. There was a mix of Windows and OS X laptops in the session. English was their third language, for added fun. I walked

Re: [tor-dev] The Torouter project - where are we now?

2011-04-19 Thread Andrew Lewman
On Tue, 19 Apr 2011 11:17:17 +0100 "Runa A. Sandvik" wrote: > I am trying to figure out how we can move the Torouter project > forward. In this email, I will try to summarize the current status of > this project. My general thoughts are that we figure out the web ui, a config that is a bridge by

Re: [tor-dev] or-dev mailing list migration February 19, 2011

2011-02-19 Thread Andrew Lewman
And this is complete. Mail archive migration is coming soon. On Sun, 13 Feb 2011 21:37:20 -0500 Andrew Lewman wrote: > A reminder that this migration occurs this weekend. > > On Mon, 24 Jan 2011 15:28:30 -0500 > Andrew Lewman wrote: > > > Hello or-dev subscribers, &g