Re: [tor-dev] Visualization of the lizard Sybil attack

2015-01-09 Thread David Fifield
the vertical white lines periods where a consensus wasn’t reached? Yes, there are some missing hours in the input files. David Fifield ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] Is it time to drop support for the v1/v2 protos?

2015-01-12 Thread David Fifield
"That's crazily non-compliant. Closing connection."); connection_or_close_for_error(chan->conn, 0); return; } David Fifield ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] Is it time to drop support for the v1/v2 protos?

2015-01-12 Thread David Fifield
* 2; connection_or_write_var_cell_to_buf(cell, conn); conn->handshake_state->sent_versions_at = time(NULL); var_cell_free(cell); return 0; } > Are you sure you are deduplicating correctly? That's a lot of hosts. Even if it were only GFW probing, GFW rarely uses duplicate IPs, excep

[tor-dev] Pluggable transports meeting tomorrow (16:00 UTC Wednesday 14th of January 2015)

2015-01-13 Thread David Fifield
Just wanted to remind you that the regular biweekly pluggable transports meeting is going to occur tomorrow at 16:00 UTC. Place is the #tor-dev IRC channel in the OFTC network. https://trac.torproject.org/projects/tor/wiki/doc/PluggableTransports#PluggableTransportIRCmeetings David Fifield

Re: [tor-dev] Is it time to drop support for the v1/v2 protos?

2015-01-15 Thread David Fifield
On Thu, Jan 15, 2015 at 02:29:28PM +0100, Philipp Winter wrote: > On Mon, Jan 12, 2015 at 08:24:58PM +0100, Tom van der Woerdt wrote: > > Interestingly, that paints a completely different picture. I added > > that line to two machines (guard+exit) and after a few minutes : > > > > # cat /var/lib/t

[tor-dev] meek works again in 4.5-alpha-3

2015-01-19 Thread David Fifield
On Sat, Dec 06, 2014 at 02:57:19PM -0800, David Fifield wrote: > What's a good way to inform support of issues that users might run into? > Should I just send email to h...@rt.torproject.org, or is there a better > way? > > I was thinking about this today because meek is bro

[tor-dev] Estimating censorship lag by obfs4 blocking

2015-02-02 Thread David Fifield
: between 2 and 10 weeks. Does anyone know information that could tighten up the bounds, a date between December 2 and February 1 when obfs4 bridges were known to be either accessible or inaccessible? David Fifield ___ tor-dev mailing list tor-dev

Re: [tor-dev] Bridge users by transport is broken

2015-02-04 Thread David Fifield
e EC2 instance that crunches numbers for > user stats. But thanks for asking! Karsten, could I ask you to manually update the graph once more? I would like to include the numbers in the next monthly meek report. David Fifield ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

[tor-dev] How to set up meek on a cooperating web server

2015-02-07 Thread David Fifield
. Setting up meek-server on your own bridge is more involved, but not more than other pluggable transports. David Fifield ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] Fwd: Orbot v15-alpha-3 with VPN and Meek!

2015-02-14 Thread David Fifield
ptable: https://gitweb.torproject.org/pluggable-transports/meek.git/tree/meek-client/meek-client.go?id=0.15#n321 David Fifield ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] Fwd: Orbot v15-alpha-3 with VPN and Meek!

2015-02-14 Thread David Fifield
On Sat, Feb 14, 2015 at 03:22:38AM -0500, Roger Dingledine wrote: > On Sat, Feb 14, 2015 at 12:08:10AM -0800, David Fifield wrote: > > An upstream HTTP proxy should work, either through torrc HTTPProxy or > > the --proxy option. > > Careful! The torrc "HTTPProxy"

Re: [tor-dev] bittorrent based pluggable transport

2015-03-02 Thread David Fifield
would have to reconstruct a stream in order to detect anomalies. Could a censor acting as an ordinary peer detect them more easily, just by participating in the file transfer? (I'm thinking of how the movie studios would run their own BitTorrent clients in order to find other downloaders.)

Re: [tor-dev] bittorrent based pluggable transport

2015-03-02 Thread David Fifield
weird, but not entirely dissimilar to obfs3. https://wiki.vuze.com/w/Message_Stream_Encryption http://www.tcs.hut.fi/Publications/bbrumley/nordsec08_brumley_valkonen.pdf David Fifield ___ tor-dev mailing list tor-dev@lists.torproject.org https

Re: [tor-dev] bittorrent based pluggable transport

2015-03-03 Thread David Fifield
27;s useless. It's a question of motivation, and technical capability, and resources, all of which vary under different censors. BitTorrent is interesting because I would guess, at least in the U.S., that you're more likely to get blocked by your ISP than by a firewall further out. David Fifield

Re: [tor-dev] Tor Project proposal for GSoC 2015

2015-03-03 Thread David Fifield
it? (And if you have a bootstrapping step that cannot be easily blocked, why not use it for *all* your communication, not just bootstrapping?) David Fifield ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] Tor Browser sha256 checksums for old versions?

2015-03-07 Thread David Fifield
On Sat, Mar 07, 2015 at 06:30:09PM +0100, Griffin Boyce wrote: > Hey all, > > I was just wondering if it's possible to get a gpg-signed list of sha256 > checksums for the Tor Browser. The website only shows the current version's > list of hashes. Which is really useful, but it would be great t

Re: [tor-dev] Preliminary Debian packages for meek

2015-03-11 Thread David Fifield
a log. The xfvb idea is really clever. Someone asked this question on Tor Stack Exchange: https://tor.stackexchange.com/questions/3620/how-to-install-tor-with-meek-support-on-ubuntu-debian Seems like this package will soon be the answer? I'll suggest the meek-client-wrapper program from #

[tor-dev] Summary of meek's costs, February 2015

2015-03-12 Thread David Fifield
47 GB $5.53 2014-10 298 GB $35.04 2014-11 500 GB $58.80 2014-12 512 GB $60.21 2015-01 638 GB $75.03 2015-02 614 GB $72.21 https://globe.torproject.org/#/bridge/AA033EEB61601B2B7312D89B62AAA23DC3ED8A34 David Fifield ___ tor-dev mailing l

[tor-dev] What's the explanation for weekly cycles in user graphs?

2015-03-17 Thread David Fifield
ly model is our observation that some jurisdictions exhibit weekly patterns. A 'previous day' model would then raise alarms every time weekly patterns emerge" David Fifield ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] What's the explanation for weekly cycles in user graphs?

2015-03-18 Thread David Fifield
On Wed, Mar 18, 2015 at 12:41:55PM +0100, Philipp Winter wrote: > On Tue, Mar 17, 2015 at 06:09:00PM -0700, David Fifield wrote: > > You can eyeball more examples in the omni-graph: > > https://people.torproject.org/~dcf/graphs/relays-all.pdf > > That's a really use

[tor-dev] Remove "*" from pluggable transports spec?

2015-03-19 Thread David Fifield
ke sense to say, "activate all of them." https://lists.torproject.org/pipermail/tor-dev/2013-December/005966.html Let's just drop this part of the spec, and delete some underspecified and unused code? David Fifield ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] Fwd: [guardian-dev] Orbot v15 alpha 5 is out: MeekObfs4VPNQRCodez!

2015-03-19 Thread David Fifield
rts? I would like to add a guide to https://trac.torproject.org/projects/tor/wiki/doc/meek#Quickstart and instructions to https://trac.torproject.org/projects/tor/wiki/doc/PluggableTransports#Howtousepluggabletransports . Or do you have such a guide I can just link to? David F

Re: [tor-dev] Call for a big fast bridge (to be the meek backend)

2015-03-21 Thread David Fifield
On Thu, Sep 18, 2014 at 08:41:20AM -0700, David Fifield wrote: > On Thu, Sep 18, 2014 at 02:02:42PM +0100, Ximin Luo wrote: > > On 18/09/14 03:31, David Fifield wrote: > > > Currently in the bundles we're not setting a bridge fingerprint, so > > > rel

[tor-dev] What's going on with websocket user numbers?

2015-03-30 Thread David Fifield
15-03-14 or 2014-03-25, which fall roughly where the user increase is on the metrics graphs. Maybe they were recently rebooted with support for the websocket transport. David Fifield {"nickname":"ashrak","hashed_fingerprint":"F1C465D38F18091F6FED9CAC924DA50F2813C0AE

Re: [tor-dev] What's going on with websocket user numbers?

2015-03-31 Thread David Fifield
On Mon, Mar 30, 2015 at 11:01:31PM -0700, David Fifield wrote: > It's possible that the new websocket users are using one of these other > bridges. It's also possible, since the bridges run more than one > transport, that the users are actually using some other transport, and &g

[tor-dev] PT-themed stuffed animals: huggable transports

2015-04-01 Thread David Fifield
In an effort to improve pluggable transports' visual identity, we should introduce a line of stuffed animals. The only rule that the the animal's name has to be made out of the transport name. The meek meerkat! [1] The obfs blobfish! [2] The FTE eft! [3] The flash proxy banded quail (Philortyx fas

[tor-dev] Big performance improvement for meek-azure

2015-04-12 Thread David Fifield
David Fifield ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] Release: obfs4proxy-0.0.5

2015-04-16 Thread David Fifield
go build -ldflags '-s' https://gitweb.torproject.org/builders/tor-browser-bundle.git/tree/gitian/descriptors/linux/gitian-pluggable-transports.yml?id=d4e10e98af5237ed21796a4d48c3e09db6994959#n209 Check discussion here: https://trac.torproject.org/projects/tor/ticket/12649 David Fi

Re: [tor-dev] Fwd: Games Without Frontiers: Investigating Video Games as a Covert Channel

2015-04-18 Thread David Fifield
commands. I added a link to it in the Child's Garden of Pluggable Transports. https://trac.torproject.org/projects/tor/wiki/doc/AChildsGardenOfPluggableTransports#Castle Feel free to edit it and add what you like. I think it would be great to have an exampl

Re: [tor-dev] Urdu & Hindi translations of Tor browser ?

2015-04-18 Thread David Fifield
On Sun, Apr 19, 2015 at 12:50:52AM -0400, Griffin Boyce wrote: > Both populations also have a large number of speakers: ~300M for Hindi > and ~66M for Urdu. I was really surprised; Hindi is the third-most spoken language in the world, trailing only Mandarin and English. Of the top 10 languages i

Re: [tor-dev] Urdu & Hindi translations of Tor browser ?

2015-04-18 Thread David Fifield
file size of additional packages. But see: Support a multi-lingual TBB that can switch between localizations https://trac.torproject.org/projects/tor/ticket/12967 David Fifield ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torpro

[tor-dev] Possible anomaly in meek user graph circa April 15, 2015

2015-04-20 Thread David Fifield
The latest meek user graph shows two recent large increases. The first increase from 2000 to 3000 is around April 9. The second from 3000 to 5000 is all on April 15. The first increase makes sense; it corresponds with the removal of a bottleneck on meek-azure: https://lists.torproject.org/pipermail

Re: [tor-dev] Summary of meek's costs, April 2015

2015-05-06 Thread David Fifield
On Tue, May 05, 2015 at 06:22:47PM -0700, Mike Perry wrote: > David Fifield: > > Here's the summary of meek's CDN fees for April 2015. > > > > total by CDN $3292.25 + $3792.79 + $0.00 = $7085.04 grand total > > https://metrics.torproject.org/userstats-bridge-

Re: [tor-dev] Summary of meek's costs, April 2015

2015-05-06 Thread David Fifield
On Tue, May 05, 2015 at 11:04:58PM -0400, Griffin Boyce wrote: > Mike Perry wrote: > >David Fifield: > >>Here's the summary of meek's CDN fees for April 2015. > >> > >>total by CDN $3292.25 + $3792.79 + $0.00 = $7085.04 grand total >

Re: [tor-dev] Summary of meek's costs, April 2015

2015-05-06 Thread David Fifield
On Wed, May 06, 2015 at 04:36:48AM +, isis wrote: > But just to be clear — since it sounds like you've asked for several new > things in that last paragraph :) — which do you want: > > 1. Tor Browser users use meek to get to BridgeDB, to get non-meek bridges > by: >1.a. Retrieving a

Re: [tor-dev] Summary of meek's costs, April 2015

2015-05-06 Thread David Fifield
On Wed, May 06, 2015 at 11:56:36AM -0700, Arthur D. Edelstein wrote: > > Amazon sucks and they don't have any automatic way to shut down a > > service. I emailed them and they were very clear about that. The best > > you can do is set up an email alert at different cost threshold (which I > > have

Re: [tor-dev] Summary of meek's costs, April 2015

2015-05-06 Thread David Fifield
On Wed, May 06, 2015 at 12:56:04PM -0700, Arthur D. Edelstein wrote: > Maybe you could rig up something that shuts down the instance? Or does > Amazon charge you even then? That might work. I found some documentation on an API for CloudFront web distributions: https://docs.aws.amazon.com/AmazonClo

[tor-dev] Paper on domain fronting (meek)

2015-06-08 Thread David Fifield
I and my colleagues at Berkeley, Lantern, and Psiphon wrote a paper on domain fronting, the censorship circumvention technology that underlies the meek pluggable transport among other systems. It's going to appear at the PET Symposium on June 30, 2015. If you've been following along, you know most

[tor-dev] CollecTor data: mapping bridge-network-status to bridge-server-descriptor to bridge-extra-info

2015-07-08 Thread David Fifield
I'm trying to use CollecTor data to find out how much bandwidth is offered by different pluggable transports over time. I.e., I want to be able to say something like, "On July 1, bridges with obfs3 offered X MB/s, bridges with obfs4 offered Y MB/s," etc. To do this, I'm mapping through three types

Re: [tor-dev] CollecTor data: mapping bridge-network-status to bridge-server-descriptor to bridge-extra-info

2015-07-09 Thread David Fifield
On Wed, Jul 08, 2015 at 11:39:54PM -0400, Roger Dingledine wrote: > > It seems rare that the bridge-server-descriptor is missing. In the > > 2015-07 tarball, it happened for 5891/477496 relays (1.2%). > [snip] > > How do you handle cases like this? I had a browse through the Onionoo > > source code

[tor-dev] Per-transport bridge bandwidth and bridge counts

2015-07-11 Thread David Fifield
I made some graphs that show the count and total bandwidth of all bridges, broken down by transport. https://people.torproject.org/~dcf/graphs/pt-bandwidth-2015-07-11/pt-bandwidth.png https://people.torproject.org/~dcf/graphs/pt-bandwidth-2015-07-11/pt-count.png The top part of th

Re: [tor-dev] Per-transport bridge bandwidth and bridge counts

2015-07-20 Thread David Fifield
On Sat, Jul 11, 2015 at 12:18:07PM -0700, David Fifield wrote: > I made some graphs that show the count and total bandwidth of all > bridges, broken down by transport. > > https://people.torproject.org/~dcf/graphs/pt-bandwidth-2015-07-11/pt-bandwidth.png >

Re: [tor-dev] Two new Onionoo versions 2.4 and 2.5 add new "effective_family" and "measured" fields

2015-08-23 Thread David Fifield
On Wed, Aug 19, 2015 at 02:27:10PM +0200, Karsten Loesing wrote: > The new version 2.5 that I deployed this week adds the optional > "measured" field to details documents. The main idea behind this new > field is that relay operators and Tor network debuggers can now figure > out easily whether a

[tor-dev] Video of my presentation on domain fronting (PETS 2015)

2015-08-26 Thread David Fifield
My presentation on domain fronting (the meek pluggable transport in Tor), which I gave at PETS 2015 on June 30, 2015, is online. This page has the video and a copy of the slides. It is about 17 minutes long. https://www.bamsoftware.com/talks/fronting-pets2015/ Here is the paper on which the talk

Re: [tor-dev] patch to improve consensus download decompress performance

2015-08-27 Thread David Fifield
On Fri, Aug 28, 2015 at 11:52:22AM +1000, Tim Wilson-Brown - teor wrote: > To proceed with the patch, we need to know / decide: > > What is the range of compression ratios on recent microdescriptors and > microdescriptor consensuses? Do they vary much? > (Does someone have an archive somewhere?)

[tor-dev] Where are the GetTor downloads (e.g. GitHub)?

2015-08-31 Thread David Fifield
Someone IRL asked me about mirrored downloads of Tor Browser on services like GitHub. I know that such services are planned (or already implemented?) for GetTor, and I know about these tickets: Integrate cloud services that are not blocked in mainland China https://bugs.torproject.

Re: [tor-dev] Where are the GetTor downloads (e.g. GitHub)?

2015-08-31 Thread David Fifield
On Mon, Aug 31, 2015 at 10:07:17PM -0300, ilv wrote: > Hi David, > > > > > My question is, is there a static URL on GitHub or similar that has the > > latest downloads? That is, one that people can access even without > > having used GetTor? Such a URL would be more useful than a typical > > mirr

Re: [tor-dev] Reproducibility of Pluggable Transports python.msi

2015-09-06 Thread David Fifield
On Sun, Sep 06, 2015 at 11:26:16PM +, Jeremy Rand wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > I was looking at the Gitian descriptor for the pluggable transports at > https://gitweb.torproject.org/builders/tor-browser-bundle.git/tree/gitia > n/descriptors/windows/gitian-plug

Re: [tor-dev] Reproducibility of Pluggable Transports python.msi

2015-09-09 Thread David Fifield
On Wed, Sep 09, 2015 at 03:33:24PM -0400, Brandon Wiley wrote: > I am in favor of standardizing on the Go codebase for pluggable transports > that > ship with Tor. This is something we talked about at the last developer > meeting. > The reason I favor this is not for reproducible build reasons, b

Re: [tor-dev] Hello, I am a Tor Browser user in China. Currently, many obfs4 bridges are blocked by China's firewall.

2015-10-01 Thread David Fifield
On Thu, Oct 01, 2015 at 08:55:33PM +0800, Li Xiaodong wrote: > Hello, I am a Tor Browser user in China. Currently, many obfs4 bridges are > blocked by China's firewall. When will SkypeMorph Pluggable Transports and > Dust Pluggable Transports be deployed in Tor Browser? There are no directory > ser

Re: [tor-dev] Hello, thank you very much for your help. I really appreciate it.

2015-10-01 Thread David Fifield
On Fri, Oct 02, 2015 at 12:05:49AM +0800, Li Xiaodong wrote: > Hello, thank you very much for your help. I really appreciate it. In this > afternoon of China Time, I found a obfs4 bridge which is usable in China. The > speed of Tor Browser connecting with obfs4 bridge, and the speed of Tor > Brows

Re: [tor-dev] Networks Blocking Tor's SSL Connections

2015-10-06 Thread David Fifield
On Wed, Oct 07, 2015 at 10:06:00AM +1100, Tim Wilson-Brown - teor wrote: > Hi All, > > This morning I observed a “free wifi” network blocking tor’s SSL connections. > While other SSL connections from my machine went through, I observed multiple > network traces of tor completing a TCP 3-way handsh

Re: [tor-dev] Getting meek covered by a CDN for free

2015-10-12 Thread David Fifield
On Mon, Oct 12, 2015 at 07:06:05PM +, Virgil Griffith wrote: > I met with some CDNs today and they have expressed interest in doing meek for > us. > > Is there someone at Tor Project I can forward the CDNs to who are more serious > about hosting meek? Sending them to me (da...@bamsoftware.com

Re: [tor-dev] Feedback on CollecTor web redesign

2015-10-20 Thread David Fifield
On Tue, Oct 20, 2015 at 09:31:38PM +0200, Karsten Loesing wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Hi devs, > > I just finished a redesign of the CollecTor website and would > appreciate your feedback: > > https://metrics.torproject.org/index2.html This URL is 404 for me.

Re: [tor-dev] Hello, after about one hour since my Tor browser successfully connected to Tor network with a obfs4 bridge, I couldn't open any webpage through Tor proxy.

2015-10-22 Thread David Fifield
On Thu, Oct 22, 2015 at 11:53:15PM +0800, Li Xiaodong wrote: > Hello, after about one hour since my Tor browser successfully connected to Tor > network with a obfs4 bridge, I couldn't open any webpage through Tor proxy. > But > after I restarted my Tor browser, Tor browser can work normally again.

Re: [tor-dev] A layered transport

2015-10-26 Thread David Fifield
On Mon, Oct 26, 2015 at 03:44:59PM +0800, Da Feng wrote: > Hi: >I've discovered that the GFW normally doesn't block https > protocols. We can use a https front tier to distribute connections to > actual bridges. This is a good idea. HTTPS is a good cover protocol. > The front tier encrypts an

Re: [tor-dev] [tor-commits] [tor-messenger-build/master] Bug 17492: Include default bridges configuration

2015-11-06 Thread David Fifield
On Fri, Nov 06, 2015 at 08:29:19PM -0500, Roger Dingledine wrote: > On Sat, Nov 07, 2015 at 12:13:45AM +, bo...@torproject.org wrote: > > commit 7a1c6fd121dd001eb999ef03ebbbed264da37026 > > Author: Nicolas Vigier > > Date: Sat Nov 7 00:45:48 2015 +0100 > > > > Bug 17492: Include default

[tor-dev] Summary of meek's costs, October 2015

2015-11-18 Thread David Fifield
Here's the summary of meek's CDN fees for October 2015. App Engine + Amazon + Azure = total by month February 2014$0.09 + -- + -- = $0.09 March 2014 $0.00 + -- + -- = $0.00 April 2014 $0.73 + -- + -- = $0.73 May 2014

Re: [tor-dev] Summary of meek's costs, October 2015

2015-11-28 Thread David Fifield
On Fri, Nov 20, 2015 at 05:50:51PM -0600, Tom Ritter wrote: > On 18 November 2015 at 16:32, David Fifield wrote: > > There was an unfortunate outage of meek-amazon (not the result of > > censorship, just operations failure). Between 30 September and 9 October > > the bridge

Re: [tor-dev] Graphs - Estimated Traffic Capacity

2015-11-29 Thread David Fifield
On Fri, Nov 20, 2015 at 01:38:56PM -0500, David Goulet wrote: > Anyway, if you think this algorithm could be improved, please respond. If you > think this algorithm is wrong, please respond. If you can reproduce the result > on your own with this algo, omg please respond! :) The above could be tota

Re: [tor-dev] Better relay uptime visualisation

2015-12-07 Thread David Fifield
On Mon, Dec 07, 2015 at 02:51:23PM -0500, Philipp Winter wrote: > I spent some time improving the existing relay uptime visualisation [0]. > Inspired by a research paper [1], the new algorithm uses single-linkage > clustering with Pearson's correlation coefficient as distance function. > The idea i

Re: [tor-dev] Better relay uptime visualisation

2015-12-07 Thread David Fifield
On Tue, Dec 08, 2015 at 10:47:08AM +1100, Tim Wilson-Brown - teor wrote: > > On 8 Dec 2015, at 10:43, Tom Ritter <[1]t...@ritter.vg> wrote: > > On 7 December 2015 at 13:51, Philipp Winter <[2]p...@nymity.ch> wrote: > > I spent some time improving the existing relay uptime visuali

Re: [tor-dev] Bitcoin-paid hidden meek relays?

2015-12-10 Thread David Fifield
t > serices, so blocking them is not an option and having them behind TLS > makes it even more complicated. > > The problem I noticed though is that the costs of Meek go up and if I > read the reports from David Fifield (the maintainer of Meek), the > bandwidth has to be li

Re: [tor-dev] Go version in Gitian descriptors

2016-01-03 Thread David Fifield
On Sun, Jan 03, 2016 at 11:01:25PM -0600, Jeremy Rand wrote: > I noticed that it looks like Tor Project is using Go 1.4.2 to build > the pluggable transports in Gitian. I'm curious why a newer version > of Go isn't used. My understanding is that Go 1.4.2 (or earlier) is > needed to build Go 1.5 b

Re: [tor-dev] Summary of meek's costs, December 2015

2016-01-11 Thread David Fifield
On Mon, Jan 11, 2016 at 01:19:22PM -0900, Jesse V wrote: > On 01/11/2016 12:47 PM, David Fifield wrote: > > December 2015 $561.29 + $603.27 + $172.60 = $1337.16 > > ... > > The number of users increased by about 1,000 in December 2015. > > Thanks for the report

Re: [tor-dev] Summary of meek's costs, December 2015

2016-01-11 Thread David Fifield
On Mon, Jan 11, 2016 at 02:51:12PM -0900, Jesse V wrote: > On 01/11/2016 02:42 PM, David Fifield wrote: > > We still have support from > > Google, so that $561.29 actually costs about $61.29. > > Oh, I was not aware of this. When does the support expire, and how much > wo

[tor-dev] How many exits exit from an IP address different than their OR address? (10.7%)

2016-01-11 Thread David Fifield
I wanted to know how many exits exit from an address that is different from their OR address. The answer is about 10.7%, 109/1018 exits. The interesting part is that of those 109 mismatches, 87 have an exit address that differs from the OR address in all four octets; i.e., the IP addresses used by

Re: [tor-dev] Questions about censorship detection paper

2016-01-11 Thread David Fifield
On Tue, Jan 12, 2016 at 07:21:39AM +, John wrote: > I ran into the technical report from George Danezis about an > anomaly-based censorship-detection system for Tor. I have a few > questions that I hope you can help me with. > > Is there an implementation available of the approach described in

Re: [tor-dev] Questions about censorship detection paper

2016-01-12 Thread David Fifield
On Tue, Jan 12, 2016 at 11:49:19PM +, John wrote: > Hi David, > > Thank you, these pointers were very helpful. Do you know if there is > some kind of resource that lists known censorship events? I'd like to > see how good the approach from the paper does at identifying them. For Tor-specific

Re: [tor-dev] How many exits exit from an IP address different than their OR address? (10.7%)

2016-01-17 Thread David Fifield
On Sun, Jan 17, 2016 at 10:24:47PM +, cacahuatl wrote: > On Sun, Jan 17, 2016 at 01:01:03PM +0100, coderman wrote: > > misguided because it won't work as you expect, the right way to check > > is to build circuits and see where they exit from. you can do this > > yourself! > > Tor Project alrea

[tor-dev] Does Orbot use default obfs4 bridges?

2016-01-19 Thread David Fifield
Does Orbot have a list of default built-in obfs4 bridges? Or do users fetch them dynamically? I looked in the source code and found default meek bridges but not default obfs4. I'm asking because we recently added a few new high-capacity default obfs4 bridges. https://bugs.torproject.org/18

Re: [tor-dev] Does Orbot use default obfs4 bridges?

2016-01-19 Thread David Fifield
On Tue, Jan 19, 2016 at 03:29:38PM -0500, Nathan Freitas wrote: > > On Tue, Jan 19, 2016, at 02:52 PM, David Fifield wrote: > > Does Orbot have a list of default built-in obfs4 bridges? Or do users > > fetch them dynamically? I looked in the source code and found default > &

Re: [tor-dev] Introducing Snowflake (webrtc pt)

2016-01-25 Thread David Fifield
On Mon, Jan 25, 2016 at 02:34:42PM -0800, Serene wrote: > Snowflake is a webrtc pluggable transport inspired by flashproxy. > (https://gitweb.torproject.org/pluggable-transports/snowflake.git) > Arlo, David, and I have made lots of progress on it lately, and it now > appears to have reached minimum

Re: [tor-dev] Configuration of tor relay using setup files (use of API via Tor Expert Bundle)

2016-02-07 Thread David Fifield
On Sun, Feb 07, 2016 at 03:44:35PM +, Nathan Bliss wrote: > Is there a way to configure a bridge in tor (e.g. meek) via the config files > from the command line without having to use the GUI in the Tor browser? I've > been searching for documentation on this, so if I've missed it I would be > g

[tor-dev] Summary of meek's costs moved to tor-project list

2016-02-19 Thread David Fifield
I decided to move the meek cost emails to the tor-project list, because they are more project-y than dev-y. Here is the email for January 2016: https://lists.torproject.org/pipermail/tor-project/2016-February/000101.html There's a table of all previous summaries here: https://trac.torproject.org

Re: [tor-dev] Request for feedback/victims: cfc

2016-03-23 Thread David Fifield
During the OONI survey to find instances of server-side Tor blocking, we found a few variations on CloudFlare captcha pages. They don't all say "Attention Required!". Apparently there is an option to customize the page, but few sites make use of it. Here are the regexes we used (excerpted from http

[tor-dev] Using Let's Encrypt for meek bridges

2016-03-25 Thread David Fifield
I'm looking for ideas of good ways to handle TLS certificates and their renewal for meek bridges. I want to use Let's Encrypt for this process, and I hope that someone who knows Let's Encrypt well can contribute some ideas. All three of the meek bridges use HTTPS to receive connections from the CD

Re: [tor-dev] iObfs: obfs4proxy on iOS

2016-04-03 Thread David Fifield
On Mon, Apr 04, 2016 at 12:04:45AM -0400, Mike Tigas wrote: > [again, cross-posted to tor-dev and guardian-dev.] > > A quick status report on this: it works! Hit a big epiphany, figured out > how to get `gomobile` to emit the necessary bits, then went wild. > > Some example stdout from Onion Brow

Re: [tor-dev] Using Let's Encrypt for meek bridges

2016-04-08 Thread David Fifield
On Fri, Apr 08, 2016 at 05:28:45PM -0700, George Tankersley wrote: > > I'm looking for ideas of good ways to handle TLS certificates and their > > renewal for meek bridges. I want to use Let's Encrypt for this process, > > and I hope that someone who knows Let's Encrypt well can contribute some > >

[tor-dev] meek-server performance improvements?

2016-04-24 Thread David Fifield
I saw you say on IRC that you had an idea for improving the efficiency of meek-server. What's your idea? The server hosting meek-azure is passing 90% CPU at times. One idea I've seen is using one connection for upstream data (data-carrying POSTs, emptry responses), and one connection for downstrea

Re: [tor-dev] meek-server performance improvements?

2016-04-25 Thread David Fifield
On Mon, Apr 25, 2016 at 06:30:03AM +, Yawning Angel wrote: > On Sun, 24 Apr 2016 22:02:23 -0700 > David Fifield wrote: > > > I saw you say on IRC that you had an idea for improving the efficiency > > of meek-server. What's your idea? The server hosting meek-azure

Re: [tor-dev] [Proposal] Obfuscating the Tor Browser Bundle initial download

2016-05-09 Thread David Fifield
On Mon, May 09, 2016 at 09:23:20PM +, William Waites wrote: > > Blake Hadley writes: > > > > The environment requires an HTTPS proxy to reach the World Web Web. > > > > Do HTTP proxies inherently create a situation similar to MITM? > > Yes, that is exactly what they do. If your web browser i

Re: [tor-dev] Request for feedback/victims: cfc-0.0.2

2016-05-16 Thread David Fifield
On Fri, Apr 01, 2016 at 06:06:18PM +, Yawning Angel wrote: > I'll probably add support for other (user-configurable?) cached content > providers when I have time. The archive.is person doesn't seem to want > to respond to e-mail, so asking them to optionally not set X-F-F, seems > like it'll g

[tor-dev] GreatFire Circumvention Central: tests of speed and stability of circumvention tools in China

2016-07-12 Thread David Fifield
https://en.greatfire.org/blog/2016/jul/greatfireorg-now-testing-vpn-speed-and-stability-china https://cc.greatfire.org/en "Our newest website, Circumvention Central (CC), aims to provide real-time information and data about circumvention solutions that work in China. Since 2

Re: [tor-dev] Some information about Tor relays

2016-08-25 Thread David Fifield
On Fri, Aug 26, 2016 at 01:42:38AM +, Liu, Zhuotao wrote: > This is Sky from University of Illinois. Currently we are working on research > project related with Tor. > > To help us to better design and evaluation our proposal, we need some > information about the Tor relays that is currently

Re: [tor-dev] Some information about Tor relays

2016-08-25 Thread David Fifield
On Fri, Aug 26, 2016 at 04:46:45AM +, Liu, Zhuotao wrote: > Thanks for that info, David. That seems valuable to me. :) > > However, I am a bit confused about the definition > > "cell-circuits-per-decile": Mean number of circuits that are included in any > of the deciles, > rounded up to t

Re: [tor-dev] HTTPS Everywhere

2016-09-05 Thread David Fifield
On Mon, Sep 05, 2016 at 10:28:26PM +0530, AKASH DAS wrote: > Can I know the issues that are currently in https everywhere. I don't know if this is what you're looking for, but here are some open bug tracker tickets. https://trac.torproject.org/projects/tor/query?status=!closed&component=HTTPS+Eve

[tor-dev] Pluggable transport idea: TLS session resumption

2016-09-07 Thread David Fifield
Here's an idea for a new pluggable transport. It's just a TLS tunnel, but with a twist that allows the server's certificate to be omitted, depriving the censor of many classification features, such as whether the certificate is signed by a CA, the certificate's lifetime, and whether the commonName

Re: [tor-dev] Tor Browser downloads and updates graphs

2016-09-11 Thread David Fifield
On Sun, Sep 11, 2016 at 04:13:00PM +, Georg Koppen wrote: > Here are the graphs showing initial downloads, update pings and update > requests over time: > > https://people.torproject.org/~karsten/volatile/torbrowser-annotated-2016-09-11.pdf > > The update pings are made by Tor Browser instanc

Re: [tor-dev] Tor Browser downloads and updates graphs

2016-09-12 Thread David Fifield
On Mon, Sep 12, 2016 at 11:12:15AM -0400, Mark Smith wrote: > On 9/11/16 3:45 PM, David Fifield wrote: > >> * We don't know what (8) or (9) is but it seems to us we are losing > >> users over time and are only getting them back slowly if at all. A > >> weekday/

[tor-dev] uProxy adds Tor support

2016-09-30 Thread David Fifield
https://blog.uproxy.org/2016/09/uproxy-adds-tor-support.html This blog post says that uProxy gained support for proxying others' traffic through Tor. uProxy client → censor → uProxy server → Tor → destination In the classic uProxy deployment scenario, the client and server are people who know ea

Re: [tor-dev] Proposal 274: A Name System API for Tor Onion Services

2016-10-07 Thread David Fifield
On Fri, Oct 07, 2016 at 04:06:51PM -0400, George Kadianakis wrote: >In particular, onion addresses are currently composed of 16 random base32 >characters, and they look like this: > > 3g2upl4pq6kufc4m.onion > vwakviie2ienjx7t.onion >

Re: [tor-dev] Tor Relays on Whonix Gateway

2016-10-19 Thread David Fifield
On Wed, Oct 19, 2016 at 10:35:16PM +0200, ban...@openmailbox.org wrote: > On 2016-10-17 10:24, isis agora lovecruft wrote: > > > > You're planning to enable "ServerTransportPlugin snowflake" on Whonix > > Gateways > > by default? And then "ClientTransportPluging snowflake" on workstations > > beh

Re: [tor-dev] Call for help on testing core tor releases

2016-10-26 Thread David Fifield
On Thu, Oct 13, 2016 at 02:29:19PM -0400, isab...@riseup.net wrote: > Hello Tor community! > > The Core Tor Team would like to improve our release process by getting > it more tested so bugs are found earlier, so stable releases can get out > faster and without any big bugs. > > During Tor's Meet

[tor-dev] Using fingerprint of cached relay bypasses bridge?

2016-11-01 Thread David Fifield
Someone on #tor-project IRC reported that you can bypass your pluggable transport if you use the fingerprint of an ordinary relay already known to Tor in your bridge line. I would file a ticket but I haven't been able to reproduce it. The example the IRC user gave was this, meant to be pasted into

Re: [tor-dev] automatically detect many new identical/similar bridges

2016-12-14 Thread David Fifield
On Wed, Dec 14, 2016 at 10:09:00AM +, nusenu wrote: > in the context of [1] I'm wondering if it makes sense to add bridge > support to ornetradar. > > If there is any value to automatically detect multiple new bridges: > > - Do bridges publish ContactInfo in their descriptor? If not: Why not?

Re: [tor-dev] Flashproxy has been Deactivated by Stanford? Why?

2016-12-19 Thread David Fifield
On Tue, Dec 20, 2016 at 01:21:04AM +0800, to...@riseup.net wrote: > It turned out that the entire code has been commented out and apparently > Flashproxy became > out of service. Why? Has the project discontinued, or just down for > maintenance? Flash proxy is basically retired now. It was removed

Re: [tor-dev] GAEuploader

2017-01-22 Thread David Fifield
On Sun, Jan 22, 2017 at 03:53:16PM -0800, Katherine Li wrote: > I would really appreciate user testing on GAEuploader. You can download it > at:  > https://github.com/katherinelitor/GAEuploader/releases > README: https://github.com/katherinelitor/GAEuploader > Tor wiki page, containing step-by-ste

Re: [tor-dev] OnionGatherer: evaluating status of hidden services

2017-03-10 Thread David Fifield
On Fri, Mar 10, 2017 at 12:58:55PM +0100, Massimo La Morgia wrote: > we are a research group at Sapienza University, Rome, Italy. We do research on > distributed systems, Tor, and the Dark Web. As part of our work, we have > developed OnionGatherer, a service that gives up-to-date information about

Re: [tor-dev] Flag blocked websites

2017-03-10 Thread David Fifield
On Fri, Mar 10, 2017 at 08:27:01AM -0500, Boter42 wrote: > I think it would be important to have a way to flag/report those websites that > can't be access by the users while they're using the tor browser.  > > Is there already a solution to do this? Do you think it would be a good tool?  > > It

  1   2   3   >