Re: [tor-dev] Tor and IP2Location LITE

On Wed, Aug 23, 2017 at 9:36 PM, KL Liew wrote: > >> It is possible that this address is used by North Korea, they don't have >> a massive IP allocation and I would expect that perhaps there are some >> tunnels, but I can't figure out where MaxMind have got this idea from. > > We aware of a small

Re: [tor-dev] When to exit 0 on error

On Sat, Jun 24, 2017 at 12:38 AM, wrote: > On Fri, Jun 23, 2017 at 10:29:32AM -0400, Zack Weinberg wrote: >> >> My expectation would be that exit(0) on fatal error is presumptively a >> minor bug, it should be exit(1), and if there is some compelling >> reaso

Re: [tor-dev] When to exit 0 on error

On Fri, Jun 23, 2017 at 9:29 AM, Nick Mathewson wrote: > On Thu, Jun 22, 2017 at 10:49 PM, wrote: >> I noticed tor sometimes exits 0 on error >> [...] >> When to exit 0 on error? > > When the error is unrecoverable, and continuing would be worse then exiting. I don't think the question was "whe

Re: [tor-dev] ./configure in 0.2.9.9 is ~broken?

On Thu, Jan 26, 2017 at 2:36 PM, loki der quaeler wrote: > > Attached is a .tar.gz which has the config.log from the 0.2.8.12 configure > and one from the 0.2.9.9 configure. Thanks. Both configure scripts failed to find libevent headers (event2/event.h, event2/dns.h, event2/bufferevent.h) -- bu

Re: [tor-dev] ./configure in 0.2.9.9 is ~broken?

On Thu, Jan 26, 2017 at 2:15 PM, loki der quaeler wrote: > Hi - > > Trying to configure 0.2.9.9’s build with this command: > ./configure --with-libevent-dir=/usr/local/lib > --with-openssl-dir=/usr/local/openssl/ > > fails with: > checking for libevent directory... configure: WARNING: We found the

Re: [tor-dev] exitmap modules that make *lots* of connections

On 05/08/2016 03:49 AM, Roger Dingledine wrote: > On Fri, Apr 22, 2016 at 04:22:48PM -0400, Zack Weinberg wrote: >> I'm working on an exitmap module that wants to feed order of 5000 >> short-lived streams through each exit relay. I think this is running >> foul of so

[tor-dev] exitmap modules that make *lots* of connections

I'm working on an exitmap module that wants to feed order of 5000 short-lived streams through each exit relay. I think this is running foul of some sort of upper limit (in STEM, or in Tor itself, not sure) on the number of streams a circuit can be used for, or how long, or something. What I see i

[tor-dev] Latency measurement from exits

Before I go reinventing wheels, has anyone got code to measure network latency (either RTT or one-way packet travel time will do) from a chosen Tor exit to an arbitrary destination? Latency from client to exit would also be useful. Thanks, zw ___ tor-de

Re: [tor-dev] Remove NULL checks for *_free() calls

On Sun, Aug 30, 2015 at 10:37 PM, Mansour Moufid wrote: > On Sun, Aug 30, 2015 at 8:13 PM, Michael McConville > wrote: > >> free() is specified to be NULL-safe, and I don't know of any >> implementations that violate this. > > I think those NULL checks are meant to avoid double-free bugs. If you

Re: [tor-dev] OpenWrt cross compile build error in 0.2.6.8

On Sun, May 24, 2015 at 6:32 PM, Lars Boegild Thomsen wrote: > On Sunday 24 May 2015 20:32:41 Ondrej Mikle wrote: >> There is also patchless way by adding "-std=gnu99" to CFLAGS (aside from C99 >> it >> enables GNU extensions needed for compiling against uClibc on OpenWrt). > > Read my first mess

Re: [tor-dev] tor not starting with NoNewPrivileges = yes (systemd)

On Tue, Mar 17, 2015 at 12:55 PM, Nusenu wrote: > I had: >>> Log debug file /var/log/tor/log > but it is not being written to. This is *probably* because one of the missing privileges is the ability to write to files in /var/log/tor. Try `Log debug stderr` instead -- you'll have to fish the logs

Re: [tor-dev] tor not starting with NoNewPrivileges = yes (systemd)

Could you please put Log debug /tmp/tor-startup.log in your torrc, try to start the daemon with NoNewPrivileges=yes, and then post the contents of /tmp/tor-startup.log ? We need to know exactly how it's failing. (We might actually need you to run it under `strace`, even.) zw ___

Re: [tor-dev] Best way to client-side detect Tor user without using check.tpo ?

I don't think you can reliably tell without information from the network; indeed, to the extent that you can tell *at all* without information from the network, I would expect that to be considered a bug. The tactic that occurs to me is, have the investigative media website's server stick a marker

Re: [tor-dev] Revisiting exit node notification page

On Sat, Jan 17, 2015 at 3:18 PM, CJ wrote: > Heya! > > While I re-built my server and my exit node, I took some time in order > to get a fancier notification page for the exit node: > https://tor.tengu.ch/ This page isn't loading for me right now, just fyi. > Would you, the dev team, be interest

Re: [tor-dev] 5-hop hidden service circuits (was: Potential projects for SponsorR (Hidden Services))

On Tue, Oct 21, 2014 at 8:23 AM, Michael Rogers wrote: > On 20/10/14 14:37, George Kadianakis wrote: >> On an even more researchy tone, Qingping Hou et al wrote a >> proposal to reduce the length of HS circuits to 5 hops (down from >> 6). You can find their proposal here: >> https://lists.torproje

Re: [tor-dev] Preferred OpenSSL config for Tor?

On Tue, Sep 16, 2014 at 11:08 AM, Steve Snyder wrote: > What are the recommended build options for OpenSSL 1.0.1x when building it > for use with Tor v0.2.5.x? Assuming you're on an x86-64 machine and have a reasonably recent GCC (4.6 should do), as a starting point, this is how I build OpenSSL

Re: [tor-dev] Tor API doc?

Also, https://stem.torproject.org/ is a client library for the API (that is, a library for writing programs that use the control port). On Mon, Aug 11, 2014 at 6:07 AM, CJ wrote: > > > On 08/11/2014 11:21 AM, Nusenu wrote: >>> I've searched, but didn't find anything regarding how we can >>> inter

Re: [tor-dev] Proposal 236 and the guardiness of a guard

If a node is an exit, maybe it shouldn't *ever* be used as a guard? This is just off the top of my head, but it seems like there might be some abuse possibilities in a node that sees both entering and exiting traffic, even if they're never for the same circuit (which I believe is the current behavi

Re: [tor-dev] Running Tor with static path

On Mon, Jun 16, 2014 at 11:38 AM, mahdi wrote: > Hi all, > I want to execute an experiment on Tor in which i need to fix the ip address > of entry,relay and exit onion router. > For that i need to determine the IPs and keys of ORs in OP permanently. > Is there any idea of what function of Tor's co

Re: [tor-dev] How to run a headless second Firefox instance?

On Wed, Apr 9, 2014 at 12:17 PM, David Fifield wrote: > On Wed, Apr 09, 2014 at 04:31:57PM +0100, Ximin Luo wrote: >> On 09/04/14 07:29, David Fifield wrote: >> > It gets the job done, but it sucks because the first thing you see is >> > the dialog and you have to know not to close it. Is there a

Re: [tor-dev] Moving ownership to TheTorProject

On 04/01/2014 11:23 AM, Griffin Boyce wrote: > In your git config, you can define a pushurl that is different from > url. Which effectively means that you can pull from github but push > to tor. That's not the issue; the issue is that I am unaware of any good way to tell git to pull or push *al

Re: [tor-dev] Moving ownership to TheTorProject

On 02/20/2014 10:48 AM, vmonmoonsh...@gmail.com wrote: > Hey Zack, > > I want to put up Stegotorus up for GSoC this summer. I was wondering if > you mind transfering the ownership of your Stegotorus repo: > > https://github.com/zackw/stegotorus > > To "TheTorProject" on github: > > https://gith

Re: [tor-dev] GSOC14 Idea

On 02/27/2014 03:14 AM, Roger Dingledine wrote: > On Sun, Feb 23, 2014 at 05:38:23PM +0530, Devang Thakkar wrote: >> Its Devang here, a coding enthusiast studying at IIT Bombay. I am >> looking forward to contribute to Tor for the upcoming Google Summer of Code >> 2014 as a prospective studen

Re: [tor-dev] Feasibility of using a Tor Browser plugin as a PT component?

On 02/22/2014 08:54 PM, Ximin Luo wrote: > On 22/02/14 04:08, David Fifield wrote: >> 2. Run a second browser, apart from Tor Browser, that receives >> commands from a client PT program and makes the HTTPS requests it >> is commanded to. > > You might want to look at MozRepl. More summary here: >

Re: [tor-dev] [Discussion] 5 ^H 3 hops rendezvous circuit design

On 02/11/2014 11:53 PM, Paul Syverson wrote: > The biggest concern is that no matter how you handle the commitment > and the size of the flexible set, you make it fairly easy for a HS > simply following this protocol precisely and with just the resource of > a handful of other nodes (n) in the netw

Re: [tor-dev] [Discussion] 5 ^H 3 hops rendezvous circuit design

On 02/11/2014 10:42 PM, Nicholas Hopper wrote: > On Tue, Feb 11, 2014 at 9:07 PM, Zack Weinberg wrote: >> (3) Service transmits to Client: >> >> { E_b(Fs), E_b(Fg), E_b(F1), ..., E_b(Fn), F1, ..., Fn }_s >> >> where Fs is the fingerprint of the service its

Re: [tor-dev] [Discussion] 5 ^H 3 hops rendezvous circuit design

On 02/11/2014 11:55 AM, Qingping Hou wrote: > Hi all, > > We are a university research group and following is a proposal for > possible optimization on Tor's rendezvous circuit design. It's not > written as a formal Tor proposal yet because I want to have a > discussion with the community first, ge

Re: [tor-dev] Does TLS round-trip optimization apply do Tor?

On Tue, Dec 24, 2013 at 3:46 AM, Benedikt Gollatz wrote: > Tor uses TLS only for node-to-node transport encryption. Any > improvements to Tor's TLS behaviour would therefore only result in > occasionally faster circuit building times. This may be nice to have, > but because Tor builds circuits pre

Re: [tor-dev] obfsproxy buffering

On Mon, Nov 18, 2013 at 10:47 AM, David Stainton wrote: >> Super-simple framing protocols often fall victim to attacks in which the >> adversary messes with the length in the frame header. See, for example, >> "Plaintext Recovery Attacks Against SSH": >> http://www.isg.rhul.ac.uk/~kp/SandPfinal.p

Re: [tor-dev] Proposal 204 and next-gen HS addresses (was: Proposal status changes the last 17 months)

On Fri, Nov 15, 2013 at 9:31 AM, Nick Mathewson wrote: > Individual blogs might be at: > technology.cmktn5wni9uinp1niixoh8gzf2oqkcwckcexwe8zutfn5uu7zbb.onion, > lemurs.cmktn5wni9uinp1niixoh8gzf2oqkcwckcexwe8zutfn5uu7zbb.onion, > drama.cmktn5wni9uinp1niixoh8gzf2oqkcwckcexwe8zutfn5uu7zbb.onion > > M

Re: [tor-dev] dynamic changes to ORPort set (via controller)

On Mon, Sep 9, 2013 at 1:58 PM, Nick Mathewson wrote: > On Mon, Sep 9, 2013 at 1:53 PM, Zack Weinberg wrote: >> Suppose I have a relay (not a client) which starts out with one open >> ORPort and a local controller. >> >> 1) Is there a better way (read "suppor

[tor-dev] dynamic changes to ORPort set (via controller)

Suppose I have a relay (not a client) which starts out with one open ORPort and a local controller. 1) Is there a better way (read "supported in STEM") than using SETCONF to add ORPort lines, to direct this relay to open additional ORPorts? 2) Will adding or removing ORPorts at runtime affect est

Re: [tor-dev] First draft of Requirements and Software Design for a Better Tor Performance Measurement Tool

> An experiment making these more realistic measurements should use > -something like Selenium/Firefox to control an actual browser to make > +something like Selenium to control an actual Tor Browser to make > requests. FYI, I have written code that downloads the present Tor Browser alpha and Pyth

Re: [tor-dev] Problems. Flash plugin works by default! I can see youtube video with Tor Browser Bundle

[This question is off-topic for tor-dev, which is for development *of* tor. Please take future usage questions to tor-talk@ instead.] Are you certain that the video in question is using Flash? Browsers have native video support nowadays. It's difficult to tell for certain without breaking out t

[tor-dev] TBB without Vidalia

How technically difficult would it be to remove Vidalia from an already-packaged TBB? (Ideally something that could be put into a shell script.) Basically what I want is a more-current-than-ESR10 browser that uses a system-installed & -configured Tor instance. I wouldn't miss the Torbutton UI, ei

Re: [tor-dev] Building better pluggable transports - GSoC 2013 project

I've been thinking about writing a lessons-learned document about StegoTorus; I'll bump that up a little on the todo queue. For right now I want to mention that any greenfields design should take a hard look at MinimaLT as its cryptographic layer. It

Re: [tor-dev] [Fwd: Welcome to the "tor-dev" mailing list]

tor-dev is a public and publicly archived mailing list. You should not send secret information to this list. A new method of distributing bridge addresses is likely to be fatally flawed if it relies on the adversary not knowing what it is. In general, Word documents are not terribly convenient f

Re: [tor-dev] building from source in a 64-bit windows environment..

On Mon, May 20, 2013 at 11:40 AM, Andrea Shepard wrote: > There are plenty of archs where the virtual address space is larger than > any single object can be; lots and lots of old real-mode x86 compilers, > for example. This is why I keep saying "(provided that the address space is flat)". Pleas

Re: [tor-dev] building from source in a 64-bit windows environment..

I don't think this conversation is going anywhere constructive, but I wish to correct a factual error before I drop the subject. > Really? where? It doesn't seem to be in the C89 standard I just flipped > through. You are quoting C99, not C89. The thing we are arguing about was changed in the 1

Re: [tor-dev] building from source in a 64-bit windows environment..

On Sat, May 18, 2013 at 12:44 AM, not me wrote: > > IMNSHO, its dense to even want to use pointers in this way. Why the > hell are you converting pointers in this way in the first place, its > just asking for a horrible mess. This is actually a normal and useful thing to do in C. (I think you're

Re: [tor-dev] building from source in a 64-bit windows environment..

On Sat, May 18, 2013 at 12:50 AM, not me wrote: >> Look more closely at those libevent headers: this is only the case on >> Windows. Yeah, it's at least arguably wrong, but it's not interfering with >> anyone else. > > why on earth anyone thought this was a good idea ever is beyond me. > Even if

Re: [tor-dev] building from source in a 64-bit windows environment..

On Sat, May 18, 2013 at 11:19 AM, Anthony Martin wrote: > Zack Weinberg once said: >> * Win64 is the *only* flat-memory-space ABI ever promulgated in >> which pointers cannot safely be converted to 'unsigned long' >> and back without loss of information. This

Re: [tor-dev] building from source in a 64-bit windows environment..

On 2013-05-17 11:32 PM, not me wrote: ... using intptr_t as a return value for socket() ... Look more closely at those libevent headers: this is only the case on Windows. Yeah, it's at least arguably wrong, but it's not interfering with anyone else. (This is on my list of things to fix in

Re: [tor-dev] building from source in a 64-bit windows environment..

On 2013-05-17 11:04 PM, Blibbet wrote: On the positive side, it seems like many Win32 projects get about 15% faster (when run on NT64 systems, removing the overhead of the Win32 subsystem) Just one point of information: this is almost certainly due to the larger register set and newer, more e

Re: [tor-dev] building from source in a 64-bit windows environment..

On 2013-05-17 10:07 PM, not me wrote: Hi, It seems fairly self-evident that tor hasn't been build for 64-bit windows and questionable whether it's ever been built in an environment that doesn't utilize mingw. There are literally hundreds of thousands of warnings about integer truncation, at leas

Re: [tor-dev] Discussion on the crypto migration plan of the identity keys of Hidden Services

On Fri, May 17, 2013 at 11:29 AM, David Vorick wrote: > Why are so many bits necessary? Isn't 128bits technically safe against brute > force? Not for RSA keys. A 1024-bit RSA key is considered approximately as strong as an 80-bit symmetric key; 2048-bit keys are approximately as strong as a 112-

[tor-dev] [possibly OT] Updated giant inventory of headers available on various OSes

A while ago I posted a call for help (only to autoconf@) taking inventories of which C headers are provided by which OSes. It rapidly became clear that my methodology was far too crude, and I've spent much of the past six weeks coding up something much more sophisticated. The project is now at th

Re: [tor-dev] [Stegotorus] Fundamental problem with ack/retransmission mechanism

On Thu, Apr 18, 2013 at 5:08 PM, wrote: > Zack Weinberg writes: >>and the retransmit of packet 1 ought to be happening on a >>*different* connection, if we have one. (Which steg are you using?) > I'm using nosteg steg. I thought if something is going to work, bett

Re: [tor-dev] [Stegotorus] Fundamental problem with ack/retransmission mechanism

On Thu, Apr 18, 2013 at 3:49 PM, wrote: > > In testing the retransmission algorithm, I encounter situations that > the ack/retransmission algorithm is unable to resolve by design. It > happens when the header of a packet gets deliver but the middle part > gets dropped. For example in the followin

Re: [tor-dev] Proposal: Capturing Traffic Statistics from Exit Relays

On Monday, March 18, 2013, Moritz Bartl wrote: > > On 18.03.2013 12:05, Zack Weinberg wrote: > > * TCP port > > * "Public suffix" + 1 domain component of destination > >(example.com, example.co.uk) > > I am not sure I like this. Maybe we might wa

[tor-dev] Proposal: Capturing Traffic Statistics from Exit Relays

[This draft proposal is also available at git.torproject.org:users/zwol/torspec.git/proposals/ideas/xxx-exit-statistics.txt.] Filename: xxx-exit-statistics.txt Title: Capturing Traffic Statistics from Exit Relays Author: Zack Weinberg Created: 04-Feb-2013 Status: Draft 1. Motivation We propose

Re: [tor-dev] All the problems about Stegotorous

On Thu, Jan 10, 2013 at 2:18 PM, wrote: > > I was talking to Roger yesterday on the IRC, and he mentioned that > "[S]tegotorus ... has a whole lot of problems". I have heard this many > times in different forms by now (in Florence, The sponsor F discussion, > etc). But I never saw these "lot of p

[tor-dev] Fwd: [Wikitech-l] Can we help Tor users make legitimate edits?

The author asked me to forward this message to tor-dev. I can vouch for their personal interest in making something happen here and their being in a position of ability to do so from Wikimedia's end. Replies should go to wikitech-l and/or the author as well as here. It looks like there was quite

Re: [tor-dev] [GSoC] [Stegotorus] Code submission and more curl

On Mon, Sep 10, 2012 at 9:10 AM, Ian Goldberg wrote: > On Mon, Sep 10, 2012 at 02:33:30AM -0600, vmon wrote: >> 3) Thank you for telling me about fts. I'm going to replace boost code with >> fts soon. > > What is fts? This sounds potentially useful. It's a C API for directory tree walking. Sim

Re: [tor-dev] [GSoC] [Stegotorus] Code submission and more curl

On Mon, Sep 10, 2012 at 4:33 AM, vmon wrote: > Hello Zack, > > 1) I would like to ask your permission to submit the whole code for > code submission. First because my task in the summer wasn't only to > write the parts that I wrote but also to read the code and debug it as > well. Secondly because

Re: [tor-dev] [GSoC] [Stegotorus] Pencil down

On Mon, Aug 20, 2012 at 12:00 PM, vmon wrote: > Hey Zack, > > I just did my last pushes before putting my pencil down for the final > evaluations. They take care of the followings: > > - The remaining of all your comments on the > github. Except for "always use xalloc instead of new". I have used

Re: [tor-dev] [GSoC] [Stegotorus] Recent activities

On Sun, Aug 19, 2012 at 8:25 PM, vmon wrote: > Hey Zack, > > I know you are super busy packing for your big move, but I thought as > tomorrow is > the hard deadline for GSoC, is not a bad ideas to give you some final update. I appreciate it. I am still in the middle of moving and don't have the

Re: [tor-dev] [Stegotorus] Strange comparison in chop_circuit_t::send_targeted(conn, blocksize)

On 2012-08-10 8:11 AM, vmon wrote: Hey Zack, Please take a look at this comparison in chop_circuit_t::send_targeted(conn, blocksize): if (avail > blocksize - lo) avail = blocksize - lo; else if (avail > SECTION_LEN) avail = SECTION_LEN; else if (upstream_eof && !sent_fin)

Re: [tor-dev] [Stegotorus] chop server to client handshake and the url dictionary

On Tue, Jul 31, 2012 at 9:35 AM, vmon wrote: > I'm working on changing how client sends info to the server for > ApachePayloadServer, according to our discussion. This is how > it's going to be for now. The server sends a list of file in some > order to the client at the begining of the conversati

Re: [tor-dev] [tor-assistants] Protocol grammars as probabilistic channels

[I'm moving this from a giant cc: list to tor-dev, I hope that's okay. I *think* everyone involved is already on that list.] [I apologize for not picking up this ball for so long, I have been ill and mostly without the brain.] On Sun, Jul 22, 2012 at 2:26 AM, Robert Ransom wrote: > > Specifical

Re: [tor-dev] Brainstorming about steganographic transports

On Wed, Jul 25, 2012 at 11:56 PM, Robert Ransom wrote: > On 7/26/12, David Fifield wrote: > >> We can use appid-like signatures to make steganographic channels, if we >> assume that the signatures are a realistic reflection of actual use of >> the protocols. But: this relies critically on the acc

Re: [tor-dev] ApachePayloadServer pushed

On Tue, Jul 24, 2012 at 2:17 AM, wrote: > On another note, your pgen_pcap.cc and pgen_fake.cc don't compile on g++ > 4.7.0 on linux, because it doesn't like the fact that you don't care > about the return value of fwrite. You can tell I wrote it on my laptop, eh? I'll fix that as soon as I get

[tor-dev] stegotorus.git has been rebased

[ I was told to send this to tor-commits but I seem to be unable to send email there. ] In order to remove some inconveniently large and also potentially copyright-infringing files from the revision history, https://gitweb.torproject.org/stegotorus.git has been rebased. If you pulled from that re

Re: [tor-dev] First five Tor tech reports

On Wed, Jul 18, 2012 at 10:05 AM, Karsten Loesing wrote: > On 7/18/12 5:12 PM, Zack Weinberg wrote: >> On Thu, Jul 12, 2012 at 6:12 AM, Karsten Loesing >> wrote: >>> here are the first five metrics tech reports that I'd like to turn into >>> Tor tech repor

Re: [tor-dev] First five Tor tech reports

On Thu, Jul 12, 2012 at 6:12 AM, Karsten Loesing wrote: > here are the first five metrics tech reports that I'd like to turn into > Tor tech reports (see #5405 for the idea behind this). I'd like to offer some typographical improvements -- it looks like these are being generated with mostly defau

Re: [tor-dev] start_daemon and finish_daemon

On Wed, Jun 13, 2012 at 9:52 PM, Nick Mathewson wrote: > >  * The parent process can learn about and report some common kinds of > initialization failure, and >  * The parent process doesn't exit until the child is well and truly launched. Thanks, that makes a lot of sense. I ask because I was u

[tor-dev] start_daemon and finish_daemon

Why is the process of going into daemon mode (on Unix) split into two functions, start_daemon and finish_daemon? zw ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] Stegotorus now available from gitweb.torproject.org

On 2012-06-04 8:13 PM, David Fifield wrote: $ git clone https://git.torproject.org/stegotorus.git $ cd stegotorus $ autoreconf -i $ ./configure&& make $ ./stegotorus null socks 127.0.0.1:5000 [info] ./stegotorus process 28359 now initialized $ tor ClientTransportPlugin "stegotorus socks4 127.0.

[tor-dev] Stegotorus now available from gitweb.torproject.org

On Mon, Jun 4, 2012 at 8:21 AM, Zack Weinberg wrote: > For the moment, the source tree is visible on Github: > <https://github.com/zackw/stegotorus>.  It is likely to move to > gitweb.torproject.org hosting in the near future. You can now clone {git,https}://git.torproject.org

Re: [tor-dev] GSoC Intro: Stegotorus

On Mon, Jun 4, 2012 at 6:29 AM, Roger Dingledine wrote: > On Mon, Jun 04, 2012 at 03:02:12PM +0200, Philipp Winter wrote: >> Is there any technical documentation or paper regarding Stegotorus >> available? I >> failed to find something on the Internet. > > There is a paper, but it's stuck in "und