Changes between Version 5 and Version 6 of TorWeeklyNews/2015/7


Ignore:
Timestamp:
Feb 18, 2015, 5:48:23 PM (4 years ago)
Author:
harmony
Comment:

sent

Legend:

Unmodified
Added
Removed
Modified
  • TorWeeklyNews/2015/7

    v5 v6  
    55'''Subject:''' Tor Weekly News — February 18th, 2015
    66
    7 {{{
    8 ========================================================================
    9 Tor Weekly News                                      February 18th, 2015
    10 ========================================================================
    11 
    12 Welcome to the seventh issue in 2015 of Tor Weekly News, the weekly
    13 newsletter that covers what’s happening in the Tor community.
    14 
    15 Onion services
    16 --------------
    17 
    18 Anonymous web services hosted in the Tor network [1] have until now been
    19 referred to as “hidden services”. Although this name accurately
    20 describes one of their properties, it does not convey some of the other
    21 benefits that the system provides, like end-to-end encryption without a
    22 purchased SSL certificate, or self-authenticating domain names outside
    23 of the commercial DNS system. Furthermore, as Aaron Johnson points
    24 out [2], words like “hidden” and “dark” have an unnecessarily negative
    25 connotation.
    26 
    27 Aaron and other members of the SponsorR team declared themselves in
    28 favor of using the word “onion” (as in “onion routing” [3]) to
    29 characterize Tor-protected web services. “Hidden services” could be
    30 renamed “onion services”, while websites offered as onion services are
    31 “onionsites”; an onion service’s URL is its “onion address”, while the
    32 dreaded “Dark Web” becomes simply “onionspace”.
    33 
    34 A full list of new and more precise terminology is in Aaron’s message
    35 and on the Tor wiki [4]; please feel free to contribute to the
    36 discussion on the tor-dev mailing list with your thoughts.
    37 
    38   [1]: https://www.torproject.org/docs/hidden-services
    39   [2]: https://lists.torproject.org/pipermail/tor-dev/2015-February/008256.html
    40   [3]: https://en.wikipedia.org/wiki/Onion_routing
    41   [4]: https://trac.torproject.org/projects/tor/wiki/org/sponsors/SponsorR/Terminology
    42 
    43 Miscellaneous news
    44 ------------------
    45 
    46 Nathan Freitas of the Guardian Project announced [5] the release of
    47 version 15-alpha-3 of Orbot. This release includes more work on VPN
    48 support, and builds on last week’s early release of the PLUTO
    49 library [6] to offer support for meek [7], although it is not currently
    50 possible to use both at the same time. See Nathan’s announcement for
    51 usage instructions and download links.
    52 
    53   [5]: https://lists.mayfirst.org/pipermail/guardian-dev/2015-February/004243.html
    54   [6]: https://github.com/guardianproject/pluto
    55   [7]: https://trac.torproject.org/projects/tor/wiki/doc/meek
    56 
    57 Yawning Angel asked for comments [8] on an implementation of a
    58 proposal [9] to let Tor create “ephemeral” onion services, using key
    59 material that is supplied at runtime rather than stored on the disk. See
    60 Yawning’s post for a detailed explanation of the concept and a link to
    61 the new code; however, trying to run this untested and unreviewed new
    62 branch “WILL BROADCAST YOUR SECRETS TO THE NSA’S ORBITAL SPACE STATION”,
    63 so don’t do that.
    64 
    65   [8]: https://lists.torproject.org/pipermail/tor-dev/2015-February/008279.html
    66   [9]: https://bugs.torproject.org/6411
    67 
    68 Yawning also announced [10] version 0.0.4 of obfs4proxy, which “is more
    69 useful for the Tor Browser people than anyone else, since it means that
    70 the next build can remove the old go.crypto cruft from the build
    71 process, and the ScrambleSuit client provider can be switched over to
    72 obfs4proxy like obfs2 and obfs3 have been”.
    73 
    74  [10]: https://lists.torproject.org/pipermail/tor-dev/2015-February/008306.html
    75 
    76 SiNA Rabbani announced that Faravahar, the directory authority which he
    77 operates, will be moving to a new IP address on Friday [11].
    78 
    79  [11]: https://lists.torproject.org/pipermail/tor-dev/2015-February/008278.html
    80 
    81 Thanks to cuanto [12] for running a mirror of the Tor Project website
    82 and software!
    83 
    84  [12]: https://lists.torproject.org/pipermail/tor-mirrors/2015-February/000858.html
    85 
    86 Thomas White published [13] a guide [14] to configuring an Nginx
    87 webserver as a hidden service: “It isn’t intended to be a hardening
    88 guide or an ultra secure way of hosting, but it is for people who want
    89 to casually publish some static HTML files or with a little extra
    90 configuration to host some applications”.
    91 
    92  [13]: https://lists.torproject.org/pipermail/tor-talk/2015-February/036886.html
    93  [14]: https://www.thecthulhu.com/setting-up-a-hidden-service-with-nginx/
    94 
    95 Collin Anderson and the University of Toronto’s Citizen Lab made a joint
    96 submission [15] to the United Nations Special Rapporteur on the
    97 promotion and protection of the right to freedom of opinion and
    98 expression, examining the importance of digital security software such
    99 as Tor in upholding free expression and the right to privacy.
    100 
    101  [15]: https://citizenlab.org/wp-content/uploads/2015/02/SR-FOE-submission.pdf
    102 
    103 carlo von lynX wondered [16] about the truth of the statement that “it
    104 would take latencies in the order of hours to fully make communications
    105 impossible to shape and correlate”. Roger Dingledine clarified [17]:
    106 “It’s actually worse than that — we have no idea. I’d love to have a
    107 graph where the x axis is how much additional overhead (latency,
    108 bandwidth, whatever) we’re willing to add, and the y axis is how much
    109 additional security (anonymity, privacy, whatever) we can get. Currently
    110 we have zero data points for this graph.”
    111 
    112  [16]: https://lists.torproject.org/pipermail/tor-talk/2015-February/036911.html
    113  [17]: https://lists.torproject.org/pipermail/tor-talk/2015-February/036912.html
    114 
    115 Upcoming events
    116 ---------------
    117 
    118   Feb 18 13:30 UTC | little-t tor development meeting
    119                    | #tor-dev, irc.oftc.net
    120                    |
    121   Feb 23 18:00 UTC | Tor Browser online meeting
    122                    | #tor-dev, irc.oftc.net
    123                    |
    124   Feb 23 18:00 UTC | OONI development meeting
    125                    | #ooni, irc.oftc.net
    126                    |
    127   Feb 24 18:00 UTC | little-t tor patch workshop
    128                    | #tor-dev, irc.oftc.net
    129                    |
    130   Mar 01 - 06      | Tor Winter Dev Meeting 2015
    131                    | Valencia, Spain
    132                    | https://trac.torproject.org/projects/tor/wiki/org/meetings/2015WinterDevMeeting
    133                    |
    134   Mar 24 - 25      | Roger and Jake @ RightsCon 2015
    135                    | Manila, Philippines
    136                    | https://www.rightscon.org/manila/
    137 
    138 
    139 This issue of Tor Weekly News has been assembled by Harmony and Roger
    140 Dingledine.
    141 
    142 Want to continue reading TWN? Please help us create this newsletter.
    143 We still need more volunteers to watch the Tor community and report
    144 important news. Please see the project page [18], write down your
    145 name and subscribe to the team mailing list [19] if you want to
    146 get involved!
    147 
    148  [18]: https://trac.torproject.org/projects/tor/wiki/TorWeeklyNews
    149  [19]: https://lists.torproject.org/cgi-bin/mailman/listinfo/news-team
    150 }}}
     7'''Status:''' [https://lists.torproject.org/pipermail/tor-news/2015-February/000085.html Sent].