GetTor needs official two-factor-enabled dropbox and google accounts

we need official, and two-factor-enabled dropbox and google accounts in order to finish what we've started on #8542 (moved).

we're already using dropbox links in gettor reply message. this dropbox account was not created using a secure email address and is for test purpose only.

This is very important as an attacker may find a way to reset the password of that dropbox account and replace legit bundles with malicious ones.

added component::applications/gettor ex-sponsor-19 ex-sponsor19 gettor-roadmap parent::28231 priority::high severity::normal status::reopened type::defect labels

Replying to mrphs:

we need official, and two-factor-enabled dropbox and google accounts in order to finish what we've started on #8542 (moved).

we're already using dropbox links in gettor reply message. this dropbox account was not created using a secure email address and is for test purpose only.

This is very important as an attacker may find a way to reset the password of that dropbox account and replace legit bundles with malicious ones.

We should also have account(s) for #12819 (moved)

We're now distributing links to download Tor Browser from github. Right now we're using this repo, but we should use an official one. Maybe under Tor Project organization? (I believe hellais owns it, but I'm not sure).

@mrphs: Can you please look at this? We should fix this ASAP.

Status update: Dropbox account has exceeded its quota. For now we're sending Google Drive links instead, using a personal account.

Replying to ilv:

We're now distributing links to download Tor Browser from github. Right now we're using this repo, but we should use an official one. Maybe under Tor Project organization? (I believe hellais owns it, but I'm not sure).

Yep, hellais is one of the owners.

---

Hey hellais and ioerror,

Could one of you set up a new team for GetTor under the TorProject github account and add ilv to it, please? Also I think you might need to make a gettor repo under that new team (I'm not sure how the team permissions work, e.g. who can create repos, etc.).

Trac:
Cc: sukhbir, arma, phobos to sukhbir, arma, hellais, ioerror

Replying to isis:

Hey hellais and ioerror,

Could one of you set up a new team for GetTor under the TorProject github account and add ilv to it, please? Also I think you might need to make a gettor repo under that new team (I'm not sure how the team permissions work, e.g. who can create repos, etc.).

Thanks for the support isis! And yes, these things would be very helpful.

I created a team called GetTor and invited ilv to it. In order to complete this transition you will have to transfer the ownership of the repo over to TheTorProject, then I will add that repo to the group GetTor and you will have admin capabilities on it (be able to do everything as well as add new people with any capability to the GetTor group).

I've accepted the invitation and transferred the ownership of the repo to TheTorProject. Thanks hellais!

Set all open tickets without a severity to "Normal"

Trac:
Severity: N/A to Normal

Closing this as WONTFIX since gettor files are now on github (#23703 (moved)).

Trac:
Reviewer: N/A to N/A
Sponsor: N/A to N/A
Resolution: N/A to wontfix
Status: new to closed

The idea of using cloud storage services to distribute Tor via GetTor is so if one of them is blocked there are other ways to download Tor. And sure enough github raw service which is being used for downloading files directly from github is blocked in various places. Google drive and dropbox remain as two of the main popular platforms with higher collateral, especially google drive.

Trac:
Resolution: wontfix to N/A
Status: closed to reopened

Trac:
Keywords: N/A deleted, gettor-roadmap added
Cc: sukhbir, arma, hellais, ioerror to sukhbir, arma, hellais
Sponsor: N/A to Sponsor19-can

Changin the parent to the other ticket (as they were duplicated).

Trac:
Parent: #8542 (moved) to #28231 (moved)

Trac:
Sponsor: Sponsor19-can to Sponsor19

Adding the keyword to mark everything that didn't fit into the time for sponsor 19.

Trac:
Keywords: N/A deleted, ex-sponsor-19 added

Remove sponsor 19 and add a keyword ex-sponsor19 to mark all the tickets that could have been in the scope of the sponsor.

Trac:
Sponsor: Sponsor19 to N/A
Keywords: N/A deleted, ex-sponsor19 added

cc'ing cohosh on open GetTor tickets.

Trac:
Cc: sukhbir, arma, hellais to sukhbir, arma, hellais, cohosh

moved to tpo/anti-censorship/gettor-project/trac#10692 (closed)