[TWN team] Recent changes to the wiki pages
Lunar
lunar at torproject.org
Sun Jun 8 22:00:04 UTC 2014
===========================================================================
=== https://trac.torproject.org/projects/tor/wiki/TorWeeklyNews/2014/23 ===
===========================================================================
version 27
Author: harmony
Date: 2014-06-08T21:11:16+00:00
write about the openssl bug
--- version 26
+++ version 27
@@ -37,6 +37,26 @@
[XXX]: https://lists.torproject.org/pipermail/tor-talk/2014-June/033163.html
[XXX]: https://www.eff.org/torchallenge/
[XXX]: https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
+
+Tor and the “EarlyCCS” bug
+--------------------------
+
+Following last month’s much-loved “Heartbleed” bug, another OpenSSL
+vulnerability was discovered — nicknamed “EarlyCCS” [XXX] — that could
+have an impact on the security of many internet services, including Tor.
+Nick Mathewson explained [XXX] that although “Tor is comparatively
+resilient to having one layer of crypto removed”, it may be affected to
+the extent that “an adversary in the position to run a MITM attack on a
+Tor client or relay could cause a TLS connection to be negotiated
+without real encryption or authentication.”
+
+Tor users and relay operators should make sure to update their OpenSSL
+and Tor packages as soon as possible; those using a system tor (rather
+than or in addition to the Tor Browser) should ensure that they restart
+it once the updates are installed, otherwise they will not take effect.
+
+ [XXX]: http://ccsinjection.lepidum.co.jp/
+ [XXX]: https://lists.torproject.org/pipermail/tor-talk/2014-June/033161.html
More monthly status reports for May 2014
----------------------------------------
@@ -139,5 +159,4 @@
Possible items:
* CollecTor https://lists.torproject.org/pipermail/tor-dev/2014-June/006942.html
- * upgrade openssl https://lists.torproject.org/pipermail/tor-relays/2014-June/004651.html https://lists.torproject.org/pipermail/tor-talk/2014-June/033161.html
* bridgedb 0.2.2
version 26
Author: harmony
Date: 2014-06-08T20:49:56+00:00
write about tor challenge
--- version 25
+++ version 26
@@ -12,12 +12,31 @@
Welcome to the twenty-third issue of Tor Weekly News in 2014, the weekly
newsletter that covers what is happening in the XXX Tor community.
-Feature XXX
------------
+The EFF announce another Tor Challenge
+--------------------------------------
-Feature 1 with cited source [XXX]
+As part of the wider “Reset the Net” event [XXX], the Electronic
+Frontier Foundation has launched [XXX] another in its occasional series
+of Tor Challenges. The goal of the campaign is to increase the Tor
+network’s capacity and diversity by encouraging members of the public to
+run relays, and directing them to the legal and technical guidance
+necessary to do so.
- [XXX]:
+So far over 500 relays have been started (or had their capacity
+increased) as part of the campaign: you can see a running total of
+relays and bytes transferred on the campaign page [XXX]. Once you've set
+up your relay, you can register it on the page (anonymously or credited
+to your name); stickers and T-shirts are on offer for those who run
+relays of a certain size or for a certain period.
+
+If you run into trouble setting up your relay, you can also find expert
+advice and discussion on the tor-relays mailing list [XXX] or the #tor
+channel on irc.oftc.net.
+
+ [XXX]: http://resetthenet.tumblr.com/
+ [XXX]: https://lists.torproject.org/pipermail/tor-talk/2014-June/033163.html
+ [XXX]: https://www.eff.org/torchallenge/
+ [XXX]: https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
More monthly status reports for May 2014
----------------------------------------
@@ -120,6 +139,5 @@
Possible items:
* CollecTor https://lists.torproject.org/pipermail/tor-dev/2014-June/006942.html
- * Tor Challenge https://www.eff.org/torchallenge/
* upgrade openssl https://lists.torproject.org/pipermail/tor-relays/2014-June/004651.html https://lists.torproject.org/pipermail/tor-talk/2014-June/033161.html
* bridgedb 0.2.2
--
Your friendly TWN monitoring script
In case of malfunction, please reach out for lunar at torproject.org
or for the worst cases, tell weasel at torproject.org to kill me.
More information about the news-team
mailing list