[TWN team] Recent changes to the wiki pages
Lunar
lunar at torproject.org
Mon Jan 20 19:40:09 UTC 2014
===========================================================================
==== https://trac.torproject.org/projects/tor/wiki/TorWeeklyNews/2014/3 ====
===========================================================================
version 27
Author: lunar
Date: 2014-01-20T18:59:34+00:00
cleanup cruft
--- version 26
+++ version 27
@@ -153,16 +153,6 @@
Summary of some questions sent to the Tor help desk.
-Vulnerabilities
----------------
-
-XXX: Reported vulnerabilities [XXX].
-
- [XXX] vulnerability report source
-
-Upcoming events
----------------
-
Upcoming events
---------------
version 26
Author: lunar
Date: 2014-01-20T18:58:35+00:00
add events
--- version 25
+++ version 26
@@ -163,13 +163,20 @@
Upcoming events
---------------
-Jul XX-XX | Event XXX brief description
- | Event City, Event Country
- | Event website URL
+Upcoming events
+---------------
+
+Feb 1-2 | Tor @ FOSDEM
+ | Brussels, Belgium
+ | https://fosdem.org/2014/
|
-Jul XX-XX | Event XXX brief description
- | Event City, Event Country
- | Event website URL
+Feb 8 | Aaron @ New Media Inspiration 2014
+ | Prague, Czech Republic
+ | http://www.tuesday.cz/akce/new-media-inspiration-2014/
+ |
+Feb 8 | Colin @ Winnipeg CryptoParty
+ | Winnipeg, Canada
+ | http://wiki.skullspace.ca/CryptoParty
This issue of Tor Weekly News has been assembled by XXX, XXX, and
version 25
Author: lunar
Date: 2014-01-20T18:52:22+00:00
write about website stuff
--- version 24
+++ version 25
@@ -84,7 +84,7 @@
participate in the “Trusted Tor Traceroutes” experiment. Paul Görgen
reported [XXX] having similar troubles, even with a lower packet per second
rate. Relay operators might want to warn their ISP before undertaking the
-experiment in the future to avoid similar misadventures.
+xperiment in the future to avoid similar misadventures.
[XXX] https://lists.torproject.org/pipermail/tor-relays/2014-January/003620.html
[XXX] https://web.engr.illinois.edu/~das17/tor-traceroute_v1.html
@@ -114,6 +114,13 @@
[XXX] https://lists.torproject.org/pipermail/tor-dev/2014-January/006039.html
[XXX] https://weather.torproject.org/
[XXX] https://lists.torproject.org/pipermail/tor-dev/2014-January/006102.html
+
+As part of the website redesign effort, Marck Al proposed [XXX] an updated
+visual identity. Lunar also highlighted a couple of tasks [XXX] that could be
+undertaken to move the website redesign forward.
+
+ [XXX] https://lists.torproject.org/pipermail/www-team/2014-January/000196.html
+ [XXX] https://lists.torproject.org/pipermail/www-team/2014-January/000216.html
Tails' release calendar [XXX] has been shifted by two weeks because of the
holiday break from Mozilla [XXX].
@@ -178,11 +185,6 @@
[XXX] https://lists.torproject.org/cgi-bin/mailman/listinfo/news-team
}}}
-Possible items:
-
- * graphical identity revamp proposal https://lists.torproject.org/pipermail/www-team/2014-January/000196.html
- * Concrete tasks for the website https://lists.torproject.org/pipermail/www-team/2014-January/000216.html
-
To mention when TBB 3.5.1 will be officially out:
* Accessibility support fixed, it can properly be used with a Screen Reader https://lists.torproject.org/pipermail/tor-talk/2014-January/031575.html
version 24
Author: lunar
Date: 2014-01-20T18:47:32+00:00
remove covered item
--- version 23
+++ version 24
@@ -182,7 +182,6 @@
* graphical identity revamp proposal https://lists.torproject.org/pipermail/www-team/2014-January/000196.html
* Concrete tasks for the website https://lists.torproject.org/pipermail/www-team/2014-January/000216.html
- * weather irc meeting https://lists.torproject.org/pipermail/tor-dev/2014-January/006102.html
To mention when TBB 3.5.1 will be officially out:
version 23
Author: lunar
Date: 2014-01-20T18:47:04+00:00
write about entropy and ramdisk distros
--- version 22
+++ version 23
@@ -44,6 +44,38 @@
[XXX] https://bugs.torprojet.org/6266
[XXX] http://blog.maxmind.com/2013/07/01/introducing-the-geoip2-beta/
[XXX] https://lists.torproject.org/pipermail/tor-dev/2014-January/006080.html
+
+Key generation on headless and diskless relays
+----------------------------------------------
+
+Following up on his work on Torride [XXX] — a live Linux distribution
+meant to run Tor relays — anarcat asked about key generation in low
+entropy situation. Lunar had raised [XXX] a similar question for the
+Tor-ramdisk distribution [XXX] a couple of months ago.
+
+“The concern here is what happens when Tor starts up the first time. I
+believe it creates a public/private key pair for its cryptographic
+routines. In Torride, this is done right on the start of the operating
+system, when the entropy of the system is low or inexistent” explained
+anarcat.
+
+Gerardus Hendricks has made a quick analysis [XXX] of Tor source code
+to determine that key were generated using entropy from /dev/urandom — an
+unsecure behaviour in low entropy situation.
+
+Nick Mathewson suggested [XXX] to change the initialization procedure
+in order to “try to read a byte from /dev/random before it starts Tor, and
+block until it actually can read that byte.“ This would “ensure that the kernel
+RNG has (by its own lights) reached full entropy at least once, which
+guarantees cryptographic quality of the rest of the /dev/urandom stream.”
+More general solutions are now discussed in a newly created ticket [XXX].
+
+ [XXX] https://redmine.koumbit.net/projects/torride
+ [XXX] http://opensource.dyc.edu/pipermail/tor-ramdisk/2013-January/000101.html
+ [XXX] http://opensource.dyc.edu/tor-ramdisk/
+ [XXX] https://lists.torproject.org/pipermail/tor-talk/2014-January/031725.html
+ [XXX] https://lists.torproject.org/pipermail/tor-talk/2014-January/031773.html
+ [XXX] https://bugs.torproject.org/10676
Miscellaneous news
------------------
@@ -148,7 +180,6 @@
Possible items:
- * Tor key generation and entropy on early boot https://lists.torproject.org/pipermail/tor-talk/2014-January/031720.html
* graphical identity revamp proposal https://lists.torproject.org/pipermail/www-team/2014-January/000196.html
* Concrete tasks for the website https://lists.torproject.org/pipermail/www-team/2014-January/000216.html
* weather irc meeting https://lists.torproject.org/pipermail/tor-dev/2014-January/006102.html
--
Your friendly TWN monitoring script
In case of malfunction, please reach out for lunar at torproject.org
or for the worst cases, tell weasel at torproject.org to kill me.
More information about the news-team
mailing list