[tor-talk] Upcoming security releases

2021-06-01 Thread Nick Mathewson
Hello! In around two weeks–likely on the 14th or 15th­– we plan to put out new stable Tor releases to fix issues in all currently released versions of Tor. There are three issues that will be fixed, with severity levels between "Medium" and "High" according to our classification system. The most

[tor-talk] Tor 0.4.6.2-alpha is released

2021-04-15 Thread Nick Mathewson
Hi, all! There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on gitlab.torproject.org. The source code is available from the download page at https://www.torproject.org/download/tor/ ; if you build Tor from s

Re: [tor-talk] Upcoming releases next week to fix denial-of-service bugs in Tor

2021-03-08 Thread Nick Mathewson
On Mon, Mar 8, 2021 at 12:12 PM Geoff Down wrote: > > Thanks Nick, > btw when I recently verified the sig on the Tor source download, it said > your key had expired. You might need to refresh it; I've updated the expiration dates. If the keyservers aren't working for you, try https://people.to

Re: [tor-talk] Upcoming releases next week to fix denial-of-service bugs in Tor

2021-03-08 Thread Nick Mathewson
On Mon, Mar 8, 2021 at 10:54 AM Nick Mathewson wrote: > To the best of our knowledge these vulnerabilities are not being > supported in the wild. Oops! I meant to say, "To the best of our knowledge these vulnerabilities are not being exploited in the wild". -- tor-talk mailing

[tor-talk] Upcoming releases next week to fix denial-of-service bugs in Tor

2021-03-08 Thread Nick Mathewson
Hello! Early next week -- around Tuesday -- we plan to put out new Tor releases to fix a pair of denial-of-service issues that we have found. We are tracking these issues as "High" and "Medium" severity respectively under our security policy at https://gitlab.torproject.org/tpo/core/team/-/wikis

[tor-talk] Tor 0.4.5.5-rc is released

2021-02-01 Thread Nick Mathewson
Hi, all! There's a new Tor release candidate! We think this will be the last one before 0.4.5.x is stable. The source code is available from the download page at https://www.torproject.org/download/tor/ ; if you build Tor from source, why not give it a try? And if you don't build Tor from source,

[tor-talk] New release candidate: Tor 0.4.5.4-rc

2021-01-22 Thread Nick Mathewson
Hi, all! There's a new release candidate! Unless we find significant new major bugs, this will probably be almost the same as the final 0.4.5.x stable release. Please test it if you can! The source code is available from the download page at https://www.torproject.org/download/tor/ ; if you bui

Re: [tor-talk] Connection padding set to 1 vs auto

2020-08-10 Thread Nick Mathewson
On Sat, Aug 8, 2020 at 3:59 PM proc...@riseup.net wrote: > > Hi. I was wondering if setting the connection padding setting in torrc > to 1 instead of auto has any benefit in protecting against a passive > adversary outside the Tor network. I don't think it'll have much effect? The "auto" option

[tor-talk] Tor 0.4.4.3-alpha is released

2020-07-27 Thread Nick Mathewson
Hi, all! There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the download page at https://www.torproject.org/download/tor/ ; if you build Tor from sou

[tor-talk] Tor 0.4.4.1-alpha is released

2020-06-16 Thread Nick Mathewson
Hi, all! There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on the bugtracker (or here, while we're getting the new bugtracker working). The source code is available from the download page on www.torproject.

Re: [tor-talk] Tor Post-Quantum Cryptography

2020-05-07 Thread Nick Mathewson
On Sun, May 3, 2020 at 6:42 PM bo0od wrote: > > I wonder if Tor has a roadmap for applying pqc into their design, great > to see that some projects trying to add it for experimental state: > Hi! There are several proposals for this: https://gitweb.torproject.org/torspec.git/tree/proposals/263-n

[tor-talk] New alpha release: 0.4.3.3-alpha (with security fix)

2020-03-18 Thread Nick Mathewson
Hello! There's a new alpha release available for download. If you build Tor from source, you can download the source code for 0.4.3.3-alpha from the download page on the website. Packages should be available over the coming days, including a new alpha Tor Browser release. Remember, this is an al

[tor-talk] Upcoming Tor security releases to fix a denial-of-service issue

2020-03-16 Thread Nick Mathewson
Hello! Some time this week, we currently plan to put out a set of security updates for all supported versions of Tor. These releases will fix a pair of denial-of-service bugs: one that we are classifying at "low" severity, and one that we are classifying at "high" severity. Our recommendation wi

[tor-talk] New alpha release: Tor 0.4.3.2-alpha

2020-02-10 Thread Nick Mathewson
Hi, all! There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the usual place on https://www.torproject.org/download/tor/ . If you build Tor from sourc

[tor-talk] Tor 0.4.2.4-rc is released

2019-11-15 Thread Nick Mathewson
Hi, all! There's a new Tor release candidate! Because it's a release candidate, we'd really like to know about any remaining bugs in it, so we can try to fix them before calling the series stable. As usual you can report bugs on trac.torproject.org. The source code is available from the usual pl

[tor-talk] Tor 0.4.2.3-alpha is released

2019-10-24 Thread Nick Mathewson
Hi, all! There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the usual place on www.torproject.org; if you build Tor from source, why not give it a tr

[tor-talk] Tor 0.4.2.2-alpha is released

2019-10-07 Thread Nick Mathewson
Hi, all! There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the usual place at https://www.torproject.org/download/tor/; if you build Tor from source

[tor-talk] Tor 0.4.1.4-rc is released

2019-07-25 Thread Nick Mathewson
Hi! There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available at https://www.torproject.org/download/tor/; if you build Tor from source, why not give it a try? A

[tor-talk] Tor 0.4.1.3-alpha is released

2019-06-25 Thread Nick Mathewson
Hi, all! There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the usual place at https://www.torproject.org/download/tor/ ; if you build Tor from sourc

[tor-talk] New release: Tor 0.4.1.2-alpha

2019-06-06 Thread Nick Mathewson
There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from https://www.torproject.org/download/tor/ ; if you build Tor from source, why not give it a try? An

[tor-talk] Tor 0.4.1.1-alpha is released

2019-05-22 Thread Nick Mathewson
Hi, all! There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the usual place at https://www.torproject.org/download/tor/; if you build Tor from source

[tor-talk] Reminder: 0.3.4 reaches end-of-life on June 10

2019-05-17 Thread Nick Mathewson
Hi! This is a reminder that we're going to stop supporting Tor 0.3.4 on June 10, per our policy and schedule at https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/CoreTorReleases . After this date, we won't do any more security fixes or bugfixes for 0.3.4. If you need the latest

[tor-talk] Tor 0.4.0.4-rc is released

2019-04-11 Thread Nick Mathewson
Hi, all! There's a new Tor release candidate! It's not a release yet, but if no serious bugs are found, the next stable release will be (almost) identical to it. The source code is available at https://dist.torproject.org/tor-0.4.0.4-rc.tar.gz . If you build Tor from source, why not give it a try

[tor-talk] Tor 0.4.0.3-alpha is released!

2019-03-22 Thread Nick Mathewson
Hi, all! There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the usual place on www.torproject.org; if you build Tor from source, why not give it a tr

[tor-talk] Tor 0.4.0.2-alpha is released

2019-02-21 Thread Nick Mathewson
Hello! There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the usual place on www.torproject.org; if you build Tor from source, why not give it a try?

[tor-talk] Upcoming stable releases to fix a medium-severity security issue

2019-02-20 Thread Nick Mathewson
Hi! I'm planning to put out new Tor source releases some time Thursday or Friday. They will be versions 0.3.3.12, 0.3.4.11, 0.3.5.8, and 0.4.0.2-alpha. These versions will, among the usual array of bugfixes, fix a medium-severity security issue: a remote denial-of-service attack vector against r

Re: [tor-talk] [tor-announce] Tor 0.3.5.7 is released

2019-01-21 Thread Nick Mathewson
On Sat, Jan 19, 2019 at 6:23 AM Jim wrote: > > Nick Mathewson wrote: > > You can download the source code from the usual place on the website. > > Packages should be available within the next several weeks, with a new > > Tor Browser some time in the next month or so. &

[tor-talk] Tor 0.4.0.1-alpha is released!

2019-01-18 Thread Nick Mathewson
Hi, all! There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the usual place on the www.torproject.org; if you build Tor from source, why not give it

[tor-talk] Tor 0.3.5.6-rc is released!

2018-12-18 Thread Nick Mathewson
Hi, all! There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the usual place on www.torproject.org; if you build Tor from source, why not give it a tr

[tor-talk] Tor 0.3.5.5-alpha is released

2018-11-16 Thread Nick Mathewson
Hi, all! There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the downlaod page on www.torproject.org; if you build Tor from source, why not give it a t

Re: [tor-talk] Fixing Orchid (again), need help!

2018-11-08 Thread Nick Mathewson
On Thu, Nov 8, 2018 at 6:12 AM Masayuki Hatta wrote: > > Hi! > > As I wrote here some time ago, I fixed Orchid the Java Tor, and it > worked for a while. > > https://lists.torproject.org/pipermail/tor-talk/2018-April/044133.html > > Recently (I think it was around July-Aug), Orchid became unworkab

[tor-talk] Tor 0.3.5.4-alpha is released.

2018-11-08 Thread Nick Mathewson
Hi, all! There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the Download page on www.torproject.org; if you build Tor from source, why not give it a

[tor-talk] Tor 0.3.5.3-alpha is released

2018-10-17 Thread Nick Mathewson
Hi! There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the usual place on www.torproject.org; if you build Tor from source, why not give it a try? An

Re: [tor-talk] bug in tor 0.3.4.8?

2018-10-05 Thread Nick Mathewson
On Sun, Sep 30, 2018 at 9:48 AM Udo van den Heuvel wrote: > > On 17/09/2018 17:46, David Goulet wrote: > > Quickly like that, I can't tell you why this is happening or any workaround > > you could do so keep an eye on the ticket. If this is an 0.3.4.x regression, > > we'll find it quickly. > > Iss

[tor-talk] Tor 0.3.5.2-alpha is released

2018-09-21 Thread Nick Mathewson
Hello! There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the usual place on www.torproject.org; if you build Tor from source, why not give it a try?

[tor-talk] Tor 0.3.5.1-alpha is released!

2018-09-18 Thread Nick Mathewson
Hi, all! There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the usual place on the download page of www.torproject.org; if you build Tor from source,

[tor-talk] Tor 0.3.4.7-rc is released!

2018-08-24 Thread Nick Mathewson
Hi, all! There's a new Tor release candidate! Because it's not an official release,, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the usual place on www.torproject.org; if you build Tor from source,

[tor-talk] Tor 0.3.4.6-rc is released

2018-08-07 Thread Nick Mathewson
Hi, all! There's a new Tor release candidate! Because it's not a stable release yet, you should only run it if you're ready to find bugs and report them on trac.torproject.org. The source code is available from the usual place on https://www.torproject.org/download/download.html; if you build To

Re: [tor-talk] The Onion Report at #hopeconf (video)

2018-08-03 Thread Nick Mathewson
On Tue, Jul 31, 2018 at 12:07 PM David Niklas wrote: > > On Sun, 29 Jul 2018 22:51:00 + > nusenu wrote: > > > https://twitter.com/torproject/status/1022840807374635009 > > > > > If you > > > missed The Onion Report at #hopeconf last week with Steph, Alison, > > > George, David, and Matt, you

[tor-talk] Tor 0.3.4.4-rc is released

2018-07-09 Thread Nick Mathewson
Hi, all! There's a new Tor release candidate! Because it's not a stable release yet, you should only run it if you're ready to find bugs and report them on trac.torproject.org. The source code is available from the usual place on www.torproject.org; if you build Tor from source, why not give it

[tor-talk] Tor 0.3.4.3-alpha is released

2018-06-26 Thread Nick Mathewson
Hi, all! There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the usual place on www.torproject.org; if you build Tor from source, why not give it a t

[tor-talk] Tor 0.3.4.2-alpha is released!

2018-06-12 Thread Nick Mathewson
Hi, all! There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the usual place on www.torproject.org; if you build Tor from source, why not give it a t

Re: [tor-talk] Post Quantum Tor

2018-05-27 Thread Nick Mathewson
For current work on postquantum handshake support in Tor, see proposals 263, 269, 270, and ticket #24985. A digression: Personally, I don't agree that the evidence is so convincing about the NSA being able to break 256-bit ECDSA today: if they have it, then they'd treat it as a big secret, and no

[tor-talk] Tor 0.3.4.1-alpha: source code now released

2018-05-17 Thread Nick Mathewson
Hi, all! There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the usual place on www.torproject.org; if you build Tor from source, why not give it a t

[tor-talk] Tor 0.3.3.5-rc: source code is released!

2018-04-15 Thread Nick Mathewson
Hi, all! There's a new Tor release candidate available as source code! Because it's an release candidate, you should only run it if you're ready to find bugs, and report them on trac.torproject.org. The source code is available from the usual place on www.torproject.org; if you build Tor from sou

[tor-talk] Tor 0.3.3.4-alpha source code is released

2018-03-29 Thread Nick Mathewson
Hi, all! There's a new alpha Tor release available as source code! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the usual place on www.torproject.org; if you build Tor from sou

[tor-talk] New releases today: relays, please consider upgrading.

2018-03-03 Thread Nick Mathewson
Hi! There are new security releases today. The official announcement just went to tor-announce, but I want to make sure that people on this list see it too. In brief: * Directory authorities should upgrade. * Relays running 0.3.2.1-alpha through 0.3.2.9 should upgrade. * Relays running 0.3

[tor-talk] Upcoming security releases for Tor 0.2.9 and up.

2018-02-21 Thread Nick Mathewson
Hi! This coming week, we'll be putting out new stable releases for 0.2.9 and later to fix a few security bugs. The highest-severity bug to be fixed is severity "medium". These releases will also backport the anti-DoS features from Tor 0.3.3. Relays and authorities should be sure to upgrade once

[tor-talk] Tor 0.3.3.2-alpha is released

2018-02-10 Thread Nick Mathewson
Hi, all! There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the usual place on www.torproject.org; if you build Tor from source, why not give it a t

[tor-talk] Tor 0.3.3.1-alpha is released!

2018-01-25 Thread Nick Mathewson
Hi, all! There's a new alpha Tor release! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the usual place on www.torproject.org; if you build Tor from source, why not give it a t

[tor-talk] Tor 0.3.2.8-rc is released

2017-12-21 Thread Nick Mathewson
Hi, all! Tor 0.3.2.8-rc is released. If you build Tor from source code, why not fetch it from our download page and try it out? If you use precompiled packages, then there should be releases soon. There probably won't be a Tor Browser release for this one; this issues fixed here are mainly (but

[tor-talk] Tor 0.3.2.7-rc is released!

2017-12-14 Thread Nick Mathewson
Hi, all! Tor 0.3.2.7-rc is released. If you build Tor from source code, why not fetch it from our download page and try it out? If you use precompiled packages, then there should be releases soon, including a Tor Browser alpha release likely next week. Here are the changes since 0.3.2.6-alpha:

[tor-talk] New Tor security releases: 0.2.5.16, 0.2.8.17, 0.2.9.14, 0.3.0.13, 0.3.1.9, and 0.3.2.6-alpha

2017-12-01 Thread Nick Mathewson
There are new releases of Tor to fix several security issues. If you build Tor from source code, you can download them from the download page on the website. If you need an older release series, go to https://dist.torproject.org/ . For users who do not build from source: packages should be availa

[tor-talk] Security releases tomorrow for Tor

2017-11-30 Thread Nick Mathewson
Hello! I'm sending this message to announce that we will be releasing new stable and versions of Tor tomorrow, to fix 5 security bugs. I apologise for the short notice; we've had to move up our intended release date in order to try to match with release deadlines for downstream projects. We have

[tor-talk] Tor 0.3.2.5-alpha is released

2017-11-22 Thread Nick Mathewson
Hello! There's a fun new alpha you can run! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the usual place on www.torproject.org ; if you build Tor from source, why not give it

[tor-talk] New alpha release: Tor 0.3.2.4-alpha

2017-11-08 Thread Nick Mathewson
Hello, everyone! There's a groovy new alpha you can run and look for bugs in! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the usual place on www.torproject.org ; if you build

[tor-talk] New alpha release: 0.3.2.3-alpha

2017-10-27 Thread Nick Mathewson
Hi, all! There's a fun new alpha you can run and look for bugs in! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the usual place on www.torproject.org ; if you build Tor from s

[tor-talk] New alpha release: 0.3.2.1-alpha (and new release series too!)

2017-09-18 Thread Nick Mathewson
Hi, everybody! After lots of work, we've got a tasty new alpha ready for you to find bugs in! Because it's an alpha, you should only run it if you're ready to find more bugs than usual, and report them on trac.torproject.org. The source code is available from the usual place on www.torproject.or

[tor-talk] Advisory: Stack disclosure in hidden services logs when SafeLogging disabled

2017-09-18 Thread Nick Mathewson
[TROVE-2017-008. CVE-2017-0380. Severity: medium] Hello! We have found a possible problem with the code that reports an error during the construction of an introduction point circuit. Because of this bug, it is possible that some hidden services will sometimes write sensitive informatio

[tor-talk] Tor 0.3.1.6-rc is released!

2017-09-05 Thread Nick Mathewson
Hi, all! There's a new Tor release candidate available! The source is available from the "download" page on the website on the website, and packages should be available before long. The Tor Browser team expects to get a release out later this month. This is a release candidate; please help find

[tor-talk] Tor 0.3.1.5-alpha is released!

2017-08-01 Thread Nick Mathewson
Hi, all! There's a new alpha Tor release available! The source is available from the "download" page on the website on the website, and packages should be available before long. The Tor Browser team expects to get a release out early next week. This is an alpha release: if you aren't up for find

[tor-talk] Reminder: Support for 0.2.4, 0.2.6, and 0.27 will end on 1 August 2017

2017-07-03 Thread Nick Mathewson
Hi! This is a reminder that we will not be making new releases for the 0.2.4, 0.2.6, or 0.2.7 release series after 1 August 2017. If you are running one of those series, please make a plan to upgrade some time before then! 0.2.5 will still be supported until 1 May 2018. 0.2.9 support will conti

Re: [tor-talk] 0.3.1.4-alpha is released (with guard-related security fix)

2017-06-29 Thread Nick Mathewson
On Thu, Jun 29, 2017 at 6:55 PM, Nick Mathewson wrote: > Hi, all! > > The latest alpha, 0.3.1.3-alpha, is now released. Argh. I knew I'd make a copy-and-paste error. The new release is 0.3.1.4-alpha, of course. -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubsc

[tor-talk] 0.3.1.4-alpha is released (with guard-related security fix)

2017-06-29 Thread Nick Mathewson
Hi, all! The latest alpha, 0.3.1.3-alpha, is now released. The source is available on the website, and packages should be available before long. The Tor Browser team expects to get a release out early next week. This release has a security fix for clients, so if you are running any 0.3.0.x or 0.3

[tor-talk] Tor 0.3.1.3-alpha is released (with security fix for hidden services)

2017-06-08 Thread Nick Mathewson
Hi! The latest alpha, 0.3.1.3-alpha, is now released. The source is available on the website, and packages should be available before too long. It has a security fix for hidden services, so if you are running a hidden service, you should upgrade to this version (or to one of the 7 other versions

Re: [tor-talk] Upcoming Tor releases tomorrow, to fix Hidden Service remote DoS bugs

2017-06-08 Thread Nick Mathewson
On Wed, Jun 7, 2017 at 11:15 AM, Nick Mathewson wrote: > Hi, all! > > Tomorrow we'll be putting out new releases in all supported series > (0.2.4 through 0.3.1) to fix two vulnerabilities that we have found in > the hidden service code. These vulnerabilities allow an attacker

[tor-talk] Upcoming Tor releases tomorrow, to fix Hidden Service remote DoS bugs

2017-06-07 Thread Nick Mathewson
Hi, all! Tomorrow we'll be putting out new releases in all supported series (0.2.4 through 0.3.1) to fix two vulnerabilities that we have found in the hidden service code. These vulnerabilities allow an attacker to cause a hidden service to crash with an assertion failure. We believe that is the

[tor-talk] Tor 0.3.1.2-alpha is released!

2017-05-26 Thread Nick Mathewson
(Also, 0.3.0.7 was released last week. If you didn't know, you should subscribe to tor-announcements.) Hi, all! You can find the source code for Tor 0.3.1.2-alpha at www.torrpoject.org at the usual place. It's an alpha, so please expect plenty of bugs, and be ready to report them. Packages sho

[tor-talk] Tor 0.3.1.1-alpha is released!

2017-05-22 Thread Nick Mathewson
(Also, 0.3.0.7 was released last week. If you didn't know, you should subscribe to tor-announcements.) Hi, all! You can find the source code for Tor 0.3.0.1-alpha www.torrpoject.org at the usual place. It's an alpha, so please expect plenty of bugs, and be ready to report them. Packages shoul

Re: [tor-talk] 0.3.0.6 on fedora 24: systemd?

2017-05-04 Thread Nick Mathewson
On Thu, Apr 27, 2017 at 7:43 AM, Udo van den Heuvel wrote: > Hello, > > I noticed that 0.3.0.6 was out so I started a build. > I noticed this popping up: > > checking pkg-config is at least version 0.9.0... yes > checking for SYSTEMD... no > configure: Okay, checking for systemd a different way...

[tor-talk] Tor 0.3.0.5-rc: almost stable!

2017-04-05 Thread Nick Mathewson
Hi all! Tor 0.3.0.5-rc is now tagged and released. It's in still "release candidate" status, which means we think it should be pretty stable, but we hope you'll find more bugs for us to fix. You can download the source code from the usual place on the website. Packages should be out over the nex

[tor-talk] Tor 0.3.0.4-rc

2017-03-01 Thread Nick Mathewson
Hi! We're making progress: Tor 0.3.0.4-rc is now "release candidate" status, which means we think we might be just about stable, but we hope you'll find some more bugs. You can download the source code from the usual place on the website. Packages should be out over the next several weeks, includ

Re: [tor-talk] Towards new stable releases (0.2.4 through 0.2.9)

2017-02-28 Thread Nick Mathewson
On Fri, Feb 17, 2017 at 5:19 PM, Nick Mathewson wrote: > Hi, all! > > As part of an effort to actually be predictable about supporting old > releases, I'm hoping to put out stable releases of 0.2.4 through 0.2.9 > some time early next month. (See [1] for our planned sche

[tor-talk] Towards new stable releases (0.2.4 through 0.2.9)

2017-02-17 Thread Nick Mathewson
Hi, all! As part of an effort to actually be predictable about supporting old releases, I'm hoping to put out stable releases of 0.2.4 through 0.2.9 some time early next month. (See [1] for our planned schedule of when we're dropping support for what.) This isn't an easy effort, though! Some of

[tor-talk] Tor 0.3.0.3-alpha is released!

2017-02-03 Thread Nick Mathewson
Hi! There's yet another new alpha release. I think we're closing in on stability for this series, which is a pretty nice feeling. You can download the source code from the usual place on the website. It's an alpha, so please expect bugs and be ready to report them. Packages should be out over th

[tor-talk] Tor 0.3.0.1-alpha is out!

2016-12-19 Thread Nick Mathewson
(Also, Tor 0.2.9.8 and Tor 0.2.8.12 are out. If you didn't know, you should subscribe to tor-announce an/or read the Tor blog!) You can find the Tor 0.3.0.1-alpha source on the website at the usual place. It's an alpha, so please expect plenty of bugs, and be ready to report them. Packages shou

[tor-talk] Tor 0.2.9.7-rc is released: small changes, nearly done!

2016-12-12 Thread Nick Mathewson
Hi, all! I just tagged and uploaded Tor 0.2.9.7-rc. The source is available at the usual place in the website. Other packages should be available soon. This Tor release will probably go into the hardened TB series coming out in the next couple of days. (I hear that 0.2.9.6-rc will be in the reg

[tor-talk] Tor 0.2.9.6-rc is released.

2016-12-02 Thread Nick Mathewson
Hi, all! There is a new release candidate for the Tor source code, with numerous bugfixes. You can download the source from the usual place on the website. Packages should be up in a few days. This should appear in an alpha TorBrowser release around December 14. (There is also a concurrent relea

[tor-talk] Tor 0.2.9.5-alpha is released

2016-11-08 Thread Nick Mathewson
Hi, all! There is a new alpha release of the Tor source code, with numerous bugfixes. We're getting closer to stable, but we still need testing! You can download the source from the usual place on the website. Packages should be up within a few days. Please remember to check the signature. Plea

Re: [tor-talk] Tor 0.2.9.4-alpha is released

2016-11-06 Thread Nick Mathewson
On Sun, Nov 6, 2016 at 7:35 AM, Dash Four wrote: > Hi Nick, > > > First time this happens (I have been compiling tor sources with this > compiler since around 2009). Not sure about using the -Wlogical-op warning > though. > > Here is what I get: > > == > gcc -std=gnu99 -DHA

Re: [tor-talk] Tor 0.2.9.4-alpha is released

2016-10-25 Thread Nick Mathewson
On Sat, Oct 22, 2016 at 10:27 PM, Dash Four wrote: > Nick Mathewson wrote: >> >> Hi, all! There is a new alpha release of the Tor source code, with >> fixes for a security bug. You should probably upgrade as packages >> become available. >> > I am having troub

Re: [tor-talk] Tor DNS Deanonymization

2016-10-19 Thread Nick Mathewson
On Tue, Oct 18, 2016 at 10:39 AM, Philipp Winter wrote: > On Sun, Oct 16, 2016 at 01:15:32AM -0400, Nick Mathewson wrote: >> On Fri, Oct 14, 2016 at 11:09 AM, Philipp Winter wrote: >> [...] >> > There are two ways to mitigate the issue. First, we need better >&

[tor-talk] Tor 0.2.9.4-alpha is released

2016-10-17 Thread Nick Mathewson
Hi, all! There is a new alpha release of the Tor source code, with fixes for a security bug. You should probably upgrade as packages become available. (If you are about to reply saying "please take me off this list", instead please follow these instructions: https://lists.torproject.org/cgi-bin/

Re: [tor-talk] Tor DNS Deanonymization

2016-10-15 Thread Nick Mathewson
On Fri, Oct 14, 2016 at 11:09 AM, Philipp Winter wrote: [...] > There are two ways to mitigate the issue. First, we need better > defences against website fingerprinting, so an attacker learns less by > observing the connection to your guard relay. Second, we need to > improve the DNS setup of

[tor-talk] Tor 0.2.9.3-alpha is released

2016-09-23 Thread Nick Mathewson
Hi, all! There is a new alpha release of the Tor source code, with fixes for several important bugs, and numerous other updates. (If you are about to reply saying "please take me off this list", instead please follow these instructions: https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-a

[tor-talk] Tor 0.2.9.2-alpha is released

2016-08-24 Thread Nick Mathewson
Hi, all! There is a new alpha release of the Tor source code, with fixes for several important bugs, and numerous other updates. (If you are about to reply saying "please take me off this list", instead please follow these instructions: https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-a

[tor-talk] Tor 0.2.9.1-alpha is released

2016-08-08 Thread Nick Mathewson
Hi, everybody! Tor 0.2.9.1-alpha is the first alpha release in the 0.2.9 development series. It improves our support for hardened builds and compiler warnings, deploys some critical infrastructure for improvements to hidden services, includes a new timing backend that we hope to use for

[tor-talk] Tor 0.2.8.5-rc is released

2016-07-07 Thread Nick Mathewson
Tor 0.2.8.5-rc is the second release candidate in the Tor 0.2.8 series. If we find no new bugs or regressions here, the first stable 0.2.8 release will be identical to it. It has a few small bugfixes against previous versions. You can download the source from the usual place on the website

[tor-talk] Tor 0.2.8.4-rc is released

2016-06-15 Thread Nick Mathewson
Tor 0.2.8.4-rc is the first release candidate in the Tor 0.2.8 series. If we find no new bugs or regressions here, the first stable 0.2.8 release will be identical to it. It has a few small bugfixes against previous versions. You can download the source from the usual place on the website.

[tor-talk] Tor 0.2.8.3-alpha is released.

2016-05-26 Thread Nick Mathewson
Tor 0.2.8.3-alpha resolves several bugs, most of them introduced over the course of the 0.2.8 development cycle. It improves the behavior of directory clients, fixes several crash bugs, fixes a gap in compiler hardening, and allows the full integration test suite to run on more platforms.

[tor-talk] Reminder: we have nightly builds!

2016-05-05 Thread Nick Mathewson
Hi, friends! Here's a reminder about one way you can help make sure that our releases are good and work well. If you like running software that might break all the time, and reporting bugs in it, you should check out our nightly builds! They live at https://people.torproject.org/~linus/b

[tor-talk] Tor 0.2.8.2-alpha is released

2016-03-28 Thread Nick Mathewson
Tor 0.2.8.2-alpha is the second alpha in its series. It fixes numerous bugs in earlier versions of Tor, including some that prevented authorities using Tor 0.2.7.x from running correctly. IPv6 and directory support should also be much improved. You can download the source from the usual pl

[tor-talk] The CVE-2015-7547 glibc getaddrinfo() vulnerability, and you.

2016-02-16 Thread Nick Mathewson
summary: New glibc bug. If you use glibc, install your vendor's patches as they become available. Tor is not an easy target for this attack, but you should upgrade anyway. Hello, all! There's apparently a new buffer overflow vulnerability in glibc, with a patch out today. If you are running some

[tor-talk] Tor 0.2.8.1-alpha is released.

2016-02-04 Thread Nick Mathewson
ticket 17576. Patch by "teor". o Minor features (geoip): - Update geoip and geoip6 to the January 5 2016 Maxmind GeoLite2 Country database. o Minor features (IPv6): - Add an argument 'ipv6=address:orport' to the DirAuthority and FallbackDir torrc options

Re: [tor-talk] Funding Tor Development trough Referral/Affiliate Marketing

2016-01-10 Thread Nick Mathewson
On Sun, Jan 10, 2016 at 10:29 AM, Moritz Bartl wrote: > On 01/10/2016 03:08 PM, Fabio Pietrosanti (naif) - lists wrote: >> I'm wondering if that couldn't be a very interesting model also for >> TorBrowser, whereby the TorBrowser would automatically inject a referral >> ID (in the HTTP header or UR

[tor-talk] Tor 0.2.7.5 is released!

2015-11-22 Thread Nick Mathewson
Hi, all! Tor 0.2.7.5 is the first stable release in the Tor 0.2.7 series. It makes no changes beyond those in 0.2.7.4-rc; the summary below lists all changes in the 0.2.7 series. You can download the source from the usual place on the website. Packages should be up in a few days. (Below is the 0

[tor-talk] Tor 0.2.7.4-rc is released

2015-10-22 Thread Nick Mathewson
Tor 0.2.7.4-rc is the second release candidate in the 0.2.7 series. It fixes some important memory leaks, and a scary-looking (but mostly harmless in practice) invalid-read bug. It also has a few small bugfixes, notably fixes for compilation and portability on different platforms. If no f

Re: [tor-talk] How the NSA breaks Diffie-Hellmann

2015-10-20 Thread Nick Mathewson
On Tue, Oct 20, 2015 at 4:52 AM, Lluís <2015@gmail.com> wrote: > I understand, from a post to this list, than tor is switching from RSA > to elliptic curve key generation. > > What would we expect from that update ? > For encryption, it already happened back in 0.2.4, with the introduction of

[tor-talk] Tor 0.2.7.3-rc is released

2015-09-25 Thread Nick Mathewson
This, the first release candidate in the 0.2.7 series, contains numerous usability fixes for Ed25519 keys, safeguards against several misconfiguration problems, significant simplifications to Tor's callgraph, and numerous bugfixes and small features. This is the most tested release of Tor to date.

Re: [tor-talk] New mailing list: tor-teachers

2015-09-06 Thread Nick Mathewson
On Sat, Sep 5, 2015 at 11:41 PM, Alison Macrina wrote: > Hi all, > > I'm writing to invite folks to a new Tor mailing list: tor-teachers. > This list is for all the awesome people around the world who are > teaching Tor to their communities, who want to work collectively with > other teachers of T

  1   2   3   >