Re: [tor-dev] bridge:// URI and QR codes

2022-07-20 Thread Nathan Freitas
On Wed, Jul 20, 2022, at 1:15 PM, Nathan Freitas wrote: > I believe in Orbot today we do promote the user after they scan a code > or click on a bridge link. Definitely agree there should be that step. I meant *prompt* the user. ___ tor-dev m

Re: [tor-dev] bridge:// URI and QR codes

2022-07-20 Thread Nathan Freitas
On Wed, Jul 20, 2022, at 8:01 AM, meskio wrote: > Quoting Torsten Grote (2022-07-19 14:54:01) >> On Monday, 18 July 2022 13:47:21 -03 meskio wrote: >> > What do you think of the proposal? How can we improve it? >> >> A slightly unrelated question: >> >> Was there any consideration about deanon

[tor-dev] Fwd: Orbot 16.2.0 RC-1 (tor-0.4.2.7)

2020-05-04 Thread Nathan Freitas
Now with integrated MOTE bridge request support, just like on Onion Browser iOS, courtesy of Benjamin Erhart (aka tla). Forwarded Message Subject:Orbot 16.2.0 RC-1 (tor-0.4.2.7) Date: Mon, 4 May 2020 12:03:13 -0400 From: Nathan of Guardian Organization: Guardian

Re: [tor-dev] reproducible builds for Android tor daemon

2019-09-17 Thread Nathan Freitas
On 9/13/19 3:51 AM, Hans-Christoph Steiner wrote: > > teor: >> >> It's not always safe to have apps share Tor: a malicious website in one app >> can use various caches to discover activity in other apps. And there may >> be similar data leaks in other shared data structures or network >> connectio

Re: [tor-dev] New Orbot, tor-android and AndroidPluggableTransport updates

2019-09-17 Thread Nathan Freitas
On 9/13/19 6:25 AM, Georg Koppen wrote: > Nathan Freitas: >> A new Orbot is out, with a bug fix related to obfs4proxy installation, >> and a new tor! > Good stuff! Is it intended that I only see an x86_64, x86, and arm64-v8a > version but no armv7 one available? It seems

[tor-dev] New Orbot, tor-android and AndroidPluggableTransport updates

2019-09-10 Thread Nathan Freitas
A new Orbot is out, with a bug fix related to obfs4proxy installation, and a new tor! We've also updated the tor-android library, with the latest 0.4.1.5 release, and all is working well. https://github.com/guardianproject/tor-android/releases/tag/tor-android-binary-tor-0.4.1.5 and we updated ou

[tor-dev] Orbot 16.1.1... now with 64-bit tor

2019-09-05 Thread Nathan Freitas
Orbot 16.1.1 was just pushed out publicly to everyone on Google Play after a long multiple RC and beta period. YES, Orbot is still going to exist, with a really exciting roadmap ahead. More on that soon! Thanks to @bitmold @sisbell @pgerber and @eighthave for all the great work, not to mention the

[tor-dev] Fwd: Orbot 16.1.0-BETA-1-tor-0.4.0.4-rc

2019-05-31 Thread Nathan Freitas
Tor 0.4.0.4 working well on Android. We've updated the tor-android library to 0.4.0.4-rc, and included it in the latest Orbot beta. It is available via Gradle at the usual spot (see below): https://github.com/guardianproject/tor-android/releases/tag/tor-android-binary-tor-0.4.0.4-rc maven { url "

[tor-dev] Orbot and Tor on Android Q

2019-03-22 Thread Nathan Freitas
Orbot 16.0.6-BETA-1-tor-0.3.5.8 https://github.com/n8fr8/orbot/releases/tag/16.0.6-BETA-1-tor-0.3.5.8 is out (binaries on Github for now) for testing, specifically on Android Q. It is built on a new release of: tor-android-b

Re: [tor-dev] Anti-censorship discussion with Briar devs

2019-02-27 Thread Nathan Freitas
On 2/27/19 4:54 AM, Georg Koppen wrote: > Torsten Grote: >> On 2/26/19 11:19 AM, Georg Koppen wrote: >>> I think we should be able to provide that with our Tor Browser builds >>> once we have all the PT pieces sorted out (which is rather soon). >> That would be nice! >> >>> So, probably the easies

[tor-dev] Orbot 16.0.3-BETA-2 (tor-0.3.4.8) release for testing

2018-10-12 Thread Nathan Freitas
Highlights - Tor 0.3.4.8 / OpenSSL 1.0.2p with dirauth module disabled (not used for client devices) - Updated Obfs4/Meek pluggable transport support and built-in bridges - Simplified (less memory, network & battery intensive) notification with "New Identity" button APKs up here: https://github.c

Re: [tor-dev] Tor browser for Chrome OS

2018-07-13 Thread Nathan Freitas
On 07/13/2018 02:02 PM, Keifer Bly wrote: > So I am wondering, are there plans to develop a version of tor browser that > will run on Chromebooks? I though that might be a good idea as those are > getting somewhat popular in the US. Thanks. Orfox browser for Android (and Orbot along with it) run

[tor-dev] Running Tor with a 15MB memory limit

2017-11-30 Thread Nathan Freitas
I am currently supporting the iCepa project, an effort to get Tor to run as a Network Extension VPN on iOS. https://github.com/iCepa/iCepa The good news is that, after a long time, we have the whole thing somewhat working. The bad news is that after browsing a few pages through Tor, the extensio

[tor-dev] Fwd: Fennec now builds with clang instead of gcc

2017-10-29 Thread Nathan Freitas
For those working on Tor Browser for Android... - Original message - From: Nathan Froyd To: "dev-platform" , mobile-firefox-...@mozilla.org Subject: Fennec now builds with clang instead of gcc Date: Sun, 29 Oct 2017 19:15:50 -0400 Hi all, Bug 1163171 has been merged to mozilla-central,

Re: [tor-dev] Alternative Implementations of Tor

2016-08-17 Thread Nathan Freitas
On Wed, Aug 17, 2016, at 11:01 AM, Alexander Færøy wrote: > There is, to my knowledge, currently only one implementation of Tor that > is actively in use on the production network, which is the C > implementation. I'm aware of a Haskell implementation made by Galois, Not sure how widely implemente

Re: [tor-dev] Using Tor Stealth HS with a home automation server

2016-07-09 Thread Nathan Freitas
On Fri, Jul 8, 2016, at 10:38 PM, ban...@openmailbox.org wrote: > On 2016-07-08 18:53, Nathan Freitas wrote: > > I've been working on some ideas about using Tor to secure "internet of > > things", smart devices other than phones, and other home / industrial

Re: [tor-dev] Using Tor Stealth HS with a home automation server

2016-07-08 Thread Nathan Freitas
Now published here: https://home-assistant.io/cookbook/tor_configuration/ On Fri, Jul 8, 2016, at 12:53 PM, Nathan Freitas wrote: > I've been working on some ideas about using Tor to secure "internet of > things", smart devices other than phones, and other home / in

[tor-dev] Using Tor Stealth HS with a home automation server

2016-07-08 Thread Nathan Freitas
I've been working on some ideas about using Tor to secure "internet of things", smart devices other than phones, and other home / industrial automation infrastructure. Specifically, I think this could be a huge application for Tor Hidden Services and Onion sites configured with Hidden Service Authe

Re: [tor-dev] [GSoC 2016] Orfox - Report 3

2016-06-30 Thread Nathan Freitas
On Thu, Jun 30, 2016, at 03:49 PM, Spencer wrote: > > Amogh Pradeep: > > we have a new logo for Orfox :D > Is there a reason for the malalignment of the stroke? ... because perfection is boring? ... because I had five minutes to do it? ... because there is a secret hidden meaning? You choose! :)

Re: [tor-dev] [GSoC 2016] Orfox - Report 2

2016-06-17 Thread Nathan Freitas
On Thu, Jun 16, 2016, at 10:37 PM, Tom Ritter wrote: > On 16 June 2016 at 18:45, Amogh Pradeep wrote: > Is a code audit the most efficient and reliable way to look for proxy > leaks? (At least at this stage?) I think he means a few things by this, or at least we have a few tasks underway: - men

Re: [tor-dev] Tor 0.2.8 and Fallback Directory Mirrors

2016-03-22 Thread Nathan Freitas
On Mon, Mar 21, 2016, at 02:16 PM, Tim Wilson-Brown - teor wrote: > Just a heads' up that tor 0.2.8 includes a fallback directory mirrors > feature, where tor clients bootstrap from a set of hard-coded long-lived > directory mirrors. This makes bootstrap more reliable, and makes it > harder to bl

Re: [tor-dev] Leif's important piece on update golden keys

2016-03-07 Thread Nathan Freitas
On Mon, Mar 7, 2016, at 11:11 AM, Spencer wrote: > Hi, > > >> > >> Holger Levsen: > >> https://reproducible-builds.org and > >> https://reproducible.debian.net > >> > > Thanks! > > > > > Nathan Freitas: > > htt

Re: [tor-dev] [valencia2016] Leif's important piece on update golden keys

2016-03-07 Thread Nathan Freitas
On Sun, Mar 6, 2016, at 11:44 AM, Holger Levsen wrote: > Hi, > > On Montag, 29. Februar 2016, Spencer wrote: > > > [auto update] a threat model we must > > > take more seriously. > > > we are making real progress. > > Like what? > > https://reproducible-builds.org has the very long answer and

[tor-dev] Leif's important piece on update golden keys

2016-02-28 Thread Nathan Freitas
The issues in this timely story came up a number of times today at Tor Dev as a threat model we must take more seriously. Fortunately, thanks to Tor Browser, Lunar, Holger, Hans, Fdroid and others, we are making real progress. http://arstechnica.com/security/2016/02/most-software-already-has-a

[tor-dev] Fwd: Downloadable content: Fonts!

2016-02-19 Thread Nathan Freitas
Mozilla is adding some new runtime installation features to reduce the size of the mobile Firefox APK. Is this happening at all on desktop? It makes me nervous as the "default" config could very much more greatly, not to mention having a new centralized attack channel. - Original message -

Re: [tor-dev] Fwd: [guardian-dev] RC-7 is out - try to repro? Re: towards reproducible Orbot

2016-01-29 Thread Nathan Freitas
On Thu, Jan 28, 2016, at 02:27 PM, Ximin Luo wrote: > Hey, thanks for this! > > I'd like to ask please upload this (or 15.1) to F-Droid soon. The version > currently in F-Droid is RC-4 and is broken with orwall - > orwall-allowed/redirected apps see no internet, but tor is connected and > orfox ca

[tor-dev] Fwd: [guardian-dev] RC-7 is out - try to repro? Re: towards reproducible Orbot

2016-01-28 Thread Nathan Freitas
With this release and updates to our build process, we are close to having Orbot be reproducible. Otherwise, this should be the last RC for v15.1, and it now includes built-in Obfs4, Obfs3, Scramblesuit bridges from TBB, plus a few new ones from Nima. This will make it much easier for users in pla

[tor-dev] Fwd: Orbot v15.1.0-RC-4

2016-01-25 Thread Nathan Freitas
Orbot update with new built-in bridges (currently using the TBB default list, randomly shuffled!) and some other small fixes for the user interface, reproducible builds, and VPN feature. - Original message - From: Nathan of Guardian To: guardian-...@lists.mayfirst.org Subject: Orbot v15.

Re: [tor-dev] Release: obfs4proxy-0.0.6

2016-01-25 Thread Nathan Freitas
On Mon, Jan 25, 2016, at 09:38 AM, Yawning Angel wrote: >benefit is that it is a lot easier to package than meek-client + the >external helper, and this can probably save binary size on things >like Android. Yes, I've been waiting for this. It is especially useful since we will be incl

Re: [tor-dev] Does Orbot use default obfs4 bridges?

2016-01-19 Thread Nathan Freitas
On Tue, Jan 19, 2016, at 03:33 PM, David Fifield wrote: > On Tue, Jan 19, 2016 at 03:29:38PM -0500, Nathan Freitas wrote: > > > > On Tue, Jan 19, 2016, at 02:52 PM, David Fifield wrote: > > > Does Orbot have a list of default built-in obfs4 bridges? Or do users > &g

Re: [tor-dev] Does Orbot use default obfs4 bridges?

2016-01-19 Thread Nathan Freitas
On Tue, Jan 19, 2016, at 02:52 PM, David Fifield wrote: > Does Orbot have a list of default built-in obfs4 bridges? Or do users > fetch them dynamically? I looked in the source code and found default > meek bridges but not default obfs4. No we have no default Obfs4 bridges built-in. It has been o

[tor-dev] Fwd: Orbot 15.1.0-RC-1

2016-01-15 Thread Nathan Freitas
- Original message - From: Nathan of Guardian To: guardian-...@lists.mayfirst.org Subject: Orbot 15.1.0-RC-1 Date: Fri, 15 Jan 2016 15:34:20 -0500 -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Orbot v15.1 is out as a release candidate. It includes Tor 0.2.7.6, a very reliable VPN mod

Re: [tor-dev] Fwd: Orbot roadmap feedback

2016-01-13 Thread Nathan Freitas
On Tue, Jan 12, 2016, at 11:52 AM, Michael Rogers wrote: > On 12/01/16 16:16, Nathan Freitas wrote: > > The broader idea is to determine which Tor torrc settings are relevant > > to the mobile environment, and that could use a more intuitive user > > interface than th

Re: [tor-dev] Fwd: Orbot roadmap feedback

2016-01-12 Thread Nathan Freitas
On Tue, Jan 12, 2016, at 10:48 AM, Georg Koppen wrote: > Nathan Freitas: > > - Overall improved configuration / settings UI to make tuning Orbot a > > better, simpler experience... this is an expansion of the new exit > > country selector in Orbot v15.1, but also includes

[tor-dev] Fwd: Orbot roadmap feedback

2016-01-12 Thread Nathan Freitas
I've got big plans for Orbot in 2016... any thoughts on the roadmap below, particularly how it aligns with Tor core roadmap, would be appreciated. - Original message - From: Nathan of Guardian To: guardian-...@lists.mayfirst.org Subject: Orbot roadmap feedback Date: Mon, 11 Jan 2016 22:58

Re: [tor-dev] Pluggable Transports v1 spec rewrite.

2015-10-29 Thread Nathan Freitas
On Thu, Oct 29, 2015, at 09:19 AM, Yawning Angel wrote: > Hello all, > > In an attempt to make Pluggable Transports more accessible to other > people, and to have a spec that is more applicable and useful to other > projects that seek to use Pluggable Transports for circumvention, I have > drafted

Re: [tor-dev] Onion Services and NAT Punching

2015-10-01 Thread Nathan Freitas
On Thu, Oct 1, 2015, at 01:15 AM, Andreas Krey wrote: > On Wed, 30 Sep 2015 17:12:53 +, Tim Wilson-Brown - teor wrote: > ... > > Are there any use cases that: > > * need NAT punching, > > * don???t need service location anonymity, and > > * would benefit from lower latency? > > Of course. All

[tor-dev] Fwd: Orbot v15.0.1 beta 3 and NetCipher update

2015-06-26 Thread Nathan Freitas
- Original message - From: Nathan of Guardian To: guardian-...@lists.mayfirst.org Subject: Orbot v15.0.1 beta 3 and NetCipher update Date: Fri, 26 Jun 2015 10:19:49 -0400 *** Orbot v15.0.1 beta 3 released *** From: https://dev.guardianproject.info/news/233 See our previous news update (

Re: [tor-dev] Hidden Services and IP address changes

2015-05-21 Thread Nathan Freitas
On Thu, May 21, 2015, at 07:16 AM, Martin Florian wrote: > I think I've found one or more bugs that appear when Tor clients > hosting HSes change their IP address during operation. I'm slightly > overwhelmed from reading the Tor source code and not sure how to best > fix them. Thanks for bringing

Re: [tor-dev] Fwd: Orbot v15 RC3... now with x86/ATOM-power!

2015-04-13 Thread Nathan Freitas
On Mon, Apr 13, 2015, at 02:05 PM, Daniel Martí wrote: > Possibly stupid question, but wouldn't a static linux/x86 binary work > just fine as long as you're executing it directly? As far as I know the > Android port is just for all the bindings involved in e.g. writing a > game in Go that does Open

Re: [tor-dev] Fwd: Orbot v15 RC3... now with x86/ATOM-power!

2015-04-13 Thread Nathan Freitas
On Mon, Apr 13, 2015, at 12:57 PM, Yawning Angel wrote: > On Mon, 13 Apr 2015 10:14:43 -0400 > Nathan Freitas wrote: > > One interesting issue is that GoLang 1.4.1, which we are using to > > cross-compile the Meek and Obfs4 pluggable transports to Android, only > > suppor

[tor-dev] Fwd: Orbot v15 RC3... now with x86/ATOM-power!

2015-04-13 Thread Nathan Freitas
- Original message - From: Nathan of Guardian To: guardian-...@lists.mayfirst.org Subject: Orbot v15 RC3... now with x86/ATOM-power! Date: Mon, 13 Apr 2015 09:55:44 -0400 Making some tiny changes to external/Makefile and jni/Application.mk means we can now build the tor, polipo and xtable

[tor-dev] Fwd: [guardian-dev] Orbot v15 RC 2

2015-04-09 Thread Nathan Freitas
- Original message - From: Nathan of Guardian To: guardian-...@lists.mayfirst.org Subject: [guardian-dev] Orbot v15 RC 2 Date: Thu, 09 Apr 2015 13:24:46 -0400 Orbot v15 RC2 is out addressing some critical and *odd* issues with copy and paste of bridges, VPN refresh on network switching, d

Re: [tor-dev] Fwd: [guardian-dev] Orbot v15 alpha 5 is out: MeekObfs4VPNQRCodez!

2015-03-20 Thread Nathan Freitas
On Fri, Mar 20, 2015, at 04:05 AM, isis wrote: > Nathan Freitas transcribed 0.8K bytes: > > On Thu, Mar 19, 2015, at 06:58 PM, David Fifield wrote: > > > What would it take to get some screenshots that show how to turn on > > > pluggable transports? I would like to

Re: [tor-dev] Fwd: [guardian-dev] Orbot v15 alpha 5 is out: MeekObfs4VPNQRCodez!

2015-03-19 Thread Nathan Freitas
On Thu, Mar 19, 2015, at 06:58 PM, David Fifield wrote: > What would it take to get some screenshots that show how to turn on > pluggable transports? I would like to add a guide to > https://trac.torproject.org/projects/tor/wiki/doc/meek#Quickstart and > instructions to > https://trac.torproject.or

[tor-dev] Fwd: [guardian-dev] Orbot v15 alpha 5 is out: MeekObfs4VPNQRCodez!

2015-03-19 Thread Nathan Freitas
- Original message - From: Nathan of Guardian To: guardian-...@lists.mayfirst.org Subject: [guardian-dev] Orbot v15 alpha 5 is out: MeekObfs4VPNQRCodez! Date: Thu, 19 Mar 2015 11:12:59 -0400 Orbot v15 alpha work is nearly done... APK: https://guardianproject.info/releases/Orbot-v15.0.0

[tor-dev] Fwd: Intent to Ship: 3rd Party Install Tracking

2015-03-18 Thread Nathan Freitas
Another thing to remove/disable from Tor Browser "Mini" (aka Orfox)... - Original message - From: Mark Finkle To: "mobile-firefox-...@mozilla.org" , "dev-platform" Subject: Intent to Ship: 3rd Party Install Tracking Date: Wed, 18 Mar 2015 14:28:57 -0400 We wanted to start some transpar

Re: [tor-dev] TBB for Ubuntu Touch?

2015-03-05 Thread Nathan Freitas
On Thu, Mar 5, 2015, at 12:54 AM, CJ wrote: > Hello, > > I just saw Ubuntu Touch might be installed on some devices, for example > a nexus7, or nexus4, or nexus10. > > Is there anything to do in order to get TBB on Ubuntu Touch, knowing > it's a more or less standard Linux system? Did anyone trie

Re: [tor-dev] Fwd: Orbot v15-alpha-3 with VPN and Meek!

2015-02-14 Thread Nathan Freitas
On Sat, Feb 14, 2015, at 03:04 AM, CJ wrote: > > > On 14/02/15 08:58, Nathan Freitas wrote: > > > > > > - Original message - > > From: Nathan of Guardian > > To: guardian-...@lists.mayfirst.org > > Subject: Orbot v15-alpha-3 with VPN

[tor-dev] Fwd: Orbot v15-alpha-3 with VPN and Meek!

2015-02-13 Thread Nathan Freitas
- Original message - From: Nathan of Guardian To: guardian-...@lists.mayfirst.org Subject: Orbot v15-alpha-3 with VPN and Meek! Date: Sat, 14 Feb 2015 02:57:34 -0500 More progress on Orbot VPN support, and now, thanks to our new PLUTO library (https://github.com/guardianproject/pluto),

Re: [tor-dev] RFC: Ephemeral Hidden Services via the Control Port

2015-02-13 Thread Nathan Freitas
On Fri, Feb 13, 2015, at 07:45 PM, Yawning Angel wrote: > Yes, this means that if you run "kittensomgmewmew.onion" and are scared > of the NSA's persistent attempts to extract your hidden service key, > via ultrasonic laser beamed from their satellites, you could run your > tor instance entirely in

Re: [tor-dev] A proposal to change hidden service terminology

2015-02-10 Thread Nathan Freitas
On Tue, Feb 10, 2015, at 01:13 PM, A. Johnson wrote: > Hello all, > > Several of us [0] working on hidden services have been talking about > adopting better terminology. I agree 100% with the term list and am eager to start using it. Some of the problems with current terms areh > 1. '''Hi

Re: [tor-dev] Hidden Service authorization UI

2014-11-10 Thread Nathan Freitas
On Sun, Nov 9, 2014, at 07:50 AM, George Kadianakis wrote: > Hidden Service authorization is a pretty obscure feature of HSes, that > can be quite useful for small-to-medium HSes. ... > For example, it would be interesting if TBB would allow people to > input a password/pubkey upon visiting a prot

Re: [tor-dev] Fwd: [guardian-dev] Orfox: New Firefox-based Android Private/Secure Browser

2014-08-21 Thread Nathan Freitas
On 08/21/2014 06:18 AM, isis wrote: > Nathan Freitas transcribed 3.5K bytes: >> >> Nice outcome from GSoC! I think the primary discussion here is whether >> Tor Browser's existing build system can be extended for Android, and >> whether "Orfox" s

Re: [tor-dev] Fwd: [guardian-dev] Orfox: New Firefox-based Android Private/Secure Browser

2014-08-20 Thread Nathan Freitas
On 08/20/2014 01:58 PM, Jordan wrote: > > I, for one, can't use Firefox, though I'd love to. FF eats up too much memory > on my device to the point where my device becomes unusable. I'm not sure if > anyone else has that experience. It is a big app, and since it doesn't rely on the built-in W

[tor-dev] Fwd: [guardian-dev] Orfox: New Firefox-based Android Private/Secure Browser

2014-08-20 Thread Nathan Freitas
Nice outcome from GSoC! I think the primary discussion here is whether Tor Browser's existing build system can be extended for Android, and whether "Orfox" should exist at all as separate app/project. Forwarded Message Subject: [guardian-dev] Orfox: New Firefox-based Android Pri

Re: [tor-dev] Orbot & Orfox - GSoC bi-weekly report 6

2014-08-17 Thread Nathan Freitas
Working on the build server again tonight, so fingers crossed! Thanks, Amogh. On August 17, 2014 9:23:59 AM EDT, Amogh Pradeep wrote: >-BEGIN PGP SIGNED MESSAGE- >Hash: SHA1 > >Status Report 6 >August 17th, 2014. > >So the past couple of weeks have been a little more hectic than usual, >b

Re: [tor-dev] [android dev] probably a stupid noob question… but

2014-07-31 Thread Nathan Freitas
On 07/31/2014 12:18 PM, CJ wrote: >> > I'm not sure there is much knowledge about Android apps amongst tor-dev >> > subscribers. Maybe the Guardian Project's mailing list is more >> > appropriate? >> > https://lists.mayfirst.org/mailman/listinfo/guardian-dev >> > > Hello Lunar, > > thanks for th

Re: [tor-dev] orbot: get its ports from another app

2014-07-29 Thread Nathan Freitas
On 07/29/2014 03:03 PM, CJ wrote: > > I'm currently developping orwall, a UI over iptables allowing to block > all IP traffic and forcing selected apps through Orbot (while blocking > the others), among other things. > > I'm wondering if there's a way to ask Orbot, if installed, its SOCKS and >

Re: [tor-dev] Orbot & Orfox - GSoC bi-weekly report 4

2014-07-18 Thread Nathan Freitas
On July 18, 2014 9:21:04 AM EDT, Georg Koppen wrote: >Amogh Pradeep: >> Status Report 4 >> July 18th, 2014. >> >> Things I am working on: >> >> 1)Setting up repos and building: >> After having built fennec, we have now started to try to get it built >> on the jenkins server. Hopefully we will

Re: [tor-dev] jtorctl

2014-04-04 Thread Nathan Freitas
On 04/04/2014 11:34 AM, Damian Johnson wrote: > Nathan, should Michael go ahead and file his pull request with the > Orbot component then? Sure! We can keep the JtorCtl repo on its own, and perhaps move it out of the attic. I will review patches, test and merge.

Re: [tor-dev] jtorctl

2014-04-04 Thread Nathan Freitas
On 04/04/2014 02:54 AM, Karsten Loesing wrote: > Wow, JTorCtl is probably not just unmaintained, but also probably > doesn't have a single application using it since 2009. There's a reason > why it's sorted into the "Attic" group on https://gitweb.torproject.org/. *ahem* Orbot represents 2 millio

Re: [tor-dev] [Orbot patch] Properly skip tests when building libevent

2014-03-27 Thread Nathan Freitas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/27/2014 12:30 PM, Daniel Martí wrote: > This fixes the remaining $(top_srcdir) errors and properly > generates event2/event-config.h Thanks. Will review and integrate shortly. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (GNU/Linux) Comm

Re: [tor-dev] Novel distribution mechanisms (was: "s3 alternatives" on libtech)

2014-03-07 Thread Nathan Freitas
On 03/07/2014 02:33 AM, Griffin Boyce wrote: > I've been working with users who have networks in censored countries > to expand access to specific software bundles (not just Tor). My two > approaches right now are Google Web Store and torrents attached to a > stable offsite seedbox. Have you lo

[tor-dev] Fwd: [guardian-dev] Building OpenSSL and Xtables for Orbot

2013-12-28 Thread Nathan Freitas
Original Message Subject: [guardian-dev] Building OpenSSL and Xtables for Orbot Date: Sat, 28 Dec 2013 09:28:57 -0500 From: Nathan of Guardian To: Guardian Dev For a long time, building an up-to-date OpenSSL and iptables binary was a challenge for apps like Orbot which need

[tor-dev] Orbot+Orchid redesign

2013-11-30 Thread Nathan Freitas
Now that Orchid is released at a v1 stage, I have been thinking about having Orbot use it by default, and then offering ARM and x86 binaries as add-on enhancements. This would make the core Tor on Android experience more lightweight for client only use. If people want to run relays, need a highe

[tor-dev] Fwd: [guardian-dev] Orfox: first step towards Tor Browser on Android

2013-11-23 Thread Nathan Freitas
First small step towards a true Tor Browser on Android. Original Message Subject: [guardian-dev] Orfox: first step towards Tor Browser on Android Date: Sat, 23 Nov 2013 23:18:30 -0500 From: Nathan of Guardian To: Guardian Dev Since Android 4.4 replaced the guts of the WebView

Re: [tor-dev] Apple App Store Redux

2013-11-18 Thread Nathan Freitas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/18/2013 02:07 PM, Nathan Freitas wrote: > Now, mobile is different, because the behaviors of users looking > to find and install software is quite different than on the > web/desktop. As a side note, for those interested, we a

Re: [tor-dev] Apple App Store Redux

2013-11-18 Thread Nathan Freitas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/18/2013 01:39 PM, Erinn Clark wrote: > * Ralf-Philipp Weinmann [2013:11:17 10:25 > +0100]: >>> Getting TBB into the App Store would definitely help increase >>> its visibility on the OSX side. However, I am not really in >>> favour of giving a U

Re: [tor-dev] IRC meeting to discuss sponsor F progress on Tue September 3, 18:00 to 19:00 UTC in #tor-dev

2013-09-04 Thread Nathan Freitas
Sorry to have missed the chat. Just dealing with the +1 in my family :) Update below: >#16 Make push-to-talk VoIP work >August: >- Unclear. Asked Nathan in private mail on September 4. - ChatSecure OTR-Data feature is complete, enabling arbitrary data stream with mime-type sharing within OTR T

Re: [tor-dev] how much havoc can a compromised baseband do to a Guardian ROM device?

2013-07-29 Thread Nathan Freitas
On 07/29/2013 09:44 AM, Andrew Lewman wrote: > On Mon, 29 Jul 2013 15:00:05 +0200 > Eugen Leitl wrote: > >> > Anyone knows whether a Nexus 4 baseband processor has r/w >> > access to system memory? > How does this relate to tor development? It is a bit of a tangent, but understanding new ways i

Re: [tor-dev] how much havoc can a compromised baseband do to a Guardian ROM device?

2013-07-29 Thread Nathan Freitas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/29/2013 09:00 AM, Eugen Leitl wrote: > Anyone knows whether a Nexus 4 baseband processor has r/w access to > system memory? The firmware doesn't seem to be loaded at boot, so I > presume it's entirely out of reach/ reversing? - From what I know,

Re: [tor-dev] obfs3 and Android

2013-05-26 Thread Nathan Freitas
On 05/26/2013 12:48 AM, Abel Luck wrote: I have experience getting python code working in android using SL4A. It's relatively straightforward, the main problem is the IPC between a python script and android app. There is no real way to do the IPC, you have to roll your own. There really isn't muc

Re: [tor-dev] obfs3 and Android

2013-05-25 Thread Nathan Freitas
On 05/25/2013 08:47 AM, Michele Orrù wrote: In order to run some python code on Android for APAF, I have used SL4A[1], which is a little tricky, but seems more actively developed and ports a few external libraries which could be useful - i.e. pyCrypto. Yes, I think this might be the route. The pl

Re: [tor-dev] Fwd: Fwd: Orbot feature for GSoC 2013

2013-04-11 Thread Nathan Freitas
On 04/11/2013 01:38 PM, Roger Dingledine wrote: > But as Damian says, if you show up with a worthwhile project, a student, > and no mentor in mind, this will not end well. I understand. Good to know the window is still open. I will work with the student some more to assess their viability. Abel on

[tor-dev] Fwd: Fwd: Orbot feature for GSoC 2013

2013-04-11 Thread Nathan Freitas
Is there room for an Orbot developer under Tor's GSoC? I know that I was completely awol during this process, and not a mentor, but this is a worthwhile effort! Original Message Subject:Fwd: Orbot feature for GSoC 2013 Date: Thu, 11 Apr 2013 17:50:26 +0200 From: Pav

Re: [tor-dev] Using Tor as a library

2013-03-28 Thread Nathan Freitas
Christopher Schmidt wrote: >"Fabio Pietrosanti (naif)" > writes: >> That's the future of Tor, to be integrated as a library just like an >> encryption library into application. > >No, it's not. Embedding a Tor client in another application cripples >auditability, configurability, updateability

Re: [tor-dev] [tor-talk] Mobile Anonymity and Circumvention seems not working

2013-03-28 Thread Nathan Freitas
Does the "check.torproject.org" site return a connected message in the default browser? chandra mohan wrote: >Hi, > > I tried Trasparent proying of Orbot as mentioned >https://guardianproject.info/apps/orbot/->OTHER >*APPS* and observed all web (traffic built-in Browser, Gmail, YouTu

Re: [tor-dev] Switch from Obfsproxy to Pyobfspoxy

2013-02-15 Thread Nathan Freitas
(moved to tor-dev) Sorry I really haven't commented on this until now, but I have a lot of balls in the air, and sometimes minor, but very important details, like this slip by. George Kadianakis: > My current plan is to keep maintaining the C-Obfsproxy code, if it > keeps being as stable as it is

Re: [tor-dev] Orbot: request hidden service from other app

2013-01-09 Thread Nathan Freitas
On 01/09/2013 10:35 PM, Bernd wrote: > I'm going to write an Android app that needs a hidden service, specifically > I want to implement a client for the TorChat protocol on Android. TorChat This is great to hear. I had hoped someone would tackle this. One idea is that you could implement this as

[tor-dev] Xeronet's torrc

2012-12-26 Thread Nathan Freitas
I was just made aware of this "advanced" torrc configuration below. Any comments on it, from a client-only/mobile device perspective? I can understand how it might deanonymize you, but it might be a trade-off that users seeking fast circumvention only may want to make. http://xeronet.primeoptic.n

Re: [tor-dev] Tor proposals implemented in Tor 0.2.3.x

2012-06-18 Thread Nathan Freitas
Nick Mathewson wrote: > 180 Pluggable transports for circumvention Happy to say that the trunk/master branch of Orbot supports obfsproxy bridges in the version we will push out this week to all .pf our users. > 171 Separate streams across circuits by connection metadata Gibberbot v9, wh

Re: [tor-dev] Orbot makefile / build update

2012-05-09 Thread Nathan Freitas
On 05/07/2012 11:55 AM, Fabian Keil wrote: > Privoxy 3.0.12 was released in 2009, so I wouldn't call it a recent > release. Did you run into problems with more recent versions? At least > in theory they should work better. Fabian I think this time around, I was trying to change as little as possibl

[tor-dev] Orbot makefile / build update

2012-05-04 Thread Nathan Freitas
Since the dawn of Orbot, way back in 2009, the onion routing robot app has been built using an unwieldy combination of tools, based on an extremely out of date method for cross-compiling C code for Android/ARM. In the 1.x era of Android, there was no Native Development Kit as their is now, but than

Re: [tor-dev] Tor for iOS via official channels

2012-03-18 Thread Nathan Freitas
Afaik, there are no long running background processes available to run a standalone tor process. Covert Browser works because it is integrated in one app/process. Maybe the VPN service model would work though. Otherwise, I agree something should be done, even if it is only an open-source versio

Re: [tor-dev] Obfsproxy client for Android

2012-02-12 Thread Nathan Freitas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/12/2012 01:57 AM, Nathan Freitas wrote: > I am going to sleep on this now a bit, do some more testing > tomorrow, post a public build, then ideally about 18 hours from > now, put a build up for release for Iranian users. I've p

Re: [tor-dev] Obfsproxy client for Android

2012-02-11 Thread Nathan Freitas
On 02/11/2012 03:55 AM, Nathan Freitas wrote: > sleep now, but should have a new Orbot proper build in 24 hours (with > the help of Gsathya and Kensen from GP). Quick update - good progress on Orbot. obfsproxy binary is fully integrated into the Orbot Android app, and all the updates to

Re: [tor-dev] Obfsproxy client for Android

2012-02-11 Thread Nathan Freitas
On 02/10/2012 08:11 AM, Roger Dingledine wrote: > On Fri, Feb 10, 2012 at 07:56:04AM -0500, Nathan Freitas wrote: >> > Thoughts on attempting to port and ship Obfsproxy client functionality >> > to Android? >> > Where should we begin? Any details on exactly what

[tor-dev] Obfsproxy client for Android

2012-02-10 Thread Nathan Freitas
Thoughts on attempting to port and ship Obfsproxy client functionality to Android? We have a good number of Iranian users it seems, and I think we can pull it off in a few days, if it isn't insanely complex. Where should we begin? Any details on exactly what was done for the new TBB? +n

Re: [tor-dev] Using Tor w/o GeoIP

2012-01-22 Thread Nathan Freitas
On 01/22/2012 08:14 PM, Sebastian Hahn wrote: > As a client, the geoipdb is only required for specification of nodes by > country code, yes. On relays/bridges, we also use it for statistics. One Thanks for the clarification. > idea for you might be to not include the geoip thing by default at all

[tor-dev] Using Tor w/o GeoIP

2012-01-19 Thread Nathan Freitas
Is it the geoip database only required if you are specifying Exit/Entrances nodes by country code? I am thinking about not fully unpacking it into Android storage, unless the user activates those option in Orbot. This will save quite a bit of internal storage space. Thanks! +n8fr8 __

Re: [tor-dev] Size issues with Orbot statically linking OpenSSL

2012-01-16 Thread Nathan Freitas
On 01/15/2012 07:30 PM, Steven Murdoch wrote: > Although post suggests that the Android NKD may have the relevant > options on by default: > http://stackoverflow.com/questions/7216543/does-android-ndk-build-with-gc-sections-and-how-to-disable We are still actually building with our pre-NDK "droid

Re: [tor-dev] Size issues with Orbot statically linking OpenSSL

2012-01-16 Thread Nathan Freitas
On 01/15/2012 03:47 PM, Nick Mathewson wrote: > Some stuff to try: openssl has lots of optional features and ciphers; > you could probably disable a lot of them. There are configuration > options to do so. If you're not sure what, I could try to take a look > at the list some time this week. Th

Re: [tor-dev] Size issues with Orbot statically linking OpenSSL

2012-01-16 Thread Nathan Freitas
On 01/16/2012 01:11 AM, Eitan Adler wrote: > clang does something similar with -O4 (link time optimization). See > http://llvm.org/docs/LinkTimeOptimization.html near "In this > example, the linker recognizes that foo2() " for more details Will check it out. Thx!

[tor-dev] Size issues with Orbot statically linking OpenSSL

2012-01-15 Thread Nathan Freitas
With the recent problems related to SSLv3 with versions of OpenSSL less than 1.0.0f, we have been investigating how to deal with this on Android for Orbot. Historically, we have used the version of OpenSSL provided by the Android device itself, which has ranged from 0.9.8 to 1.0.0e (the latest on I

Re: [tor-dev] DuckDuckGo, iOS and other stuff.

2012-01-03 Thread Nathan Freitas
On 01/02/2012 02:39 PM, caine tighe wrote: > there is serious value in ensuring Tor is an option for both Android > and iOS. Currently we support Tor via Orbot on Android via the HTTP/S > proxy method since the SOCKS method is known to have DNS leaks. I agree! As a side note, in Orweb v2, when yo

Re: [tor-dev] Uploading video over Orbot

2011-12-11 Thread Nathan Freitas
On 12/11/2011 11:54 AM, Nathan Freitas wrote: > Some progress to share on Tor-related efforts with our Secure Smart Cam > project with WITNESS. (More here: > https://guardianproject.info/apps/securecam/ ) oops, and the specific repo and test APK app download are here: https://g

[tor-dev] Uploading video over Orbot

2011-12-11 Thread Nathan Freitas
Some progress to share on Tor-related efforts with our Secure Smart Cam project with WITNESS. (More here: https://guardianproject.info/apps/securecam/ ) I know that "uploading HD video over a mobile network on Tor" has long been one of these cringe-inducing requests from NGOs, but at least for sho

Re: [tor-dev] Tor on TV (hemm, on WDTV!)

2011-11-28 Thread Nathan Freitas
On 11/28/2011 05:06 AM, Jacob Appelbaum wrote: > I have one I meant civilians. Good to know though... if someone can get one donated to Guardian Project, we'll be happy to do the port! :) ___ tor-dev mailing list tor-dev@lists.torproject.org https://list

Re: [tor-dev] Tor on TV (hemm, on WDTV!)

2011-11-27 Thread Nathan Freitas
On 11/23/2011 02:57 AM, Fabio Pietrosanti (naif) wrote: > What's about making a "promotional" campaign like for the Tor Cloud to > have people running Tor Relay "right on their TV" ? Great hacking on the WDTV! I have been looking at getting Orbot (Tor on Android) running on Google TV flavor of An

  1   2   >