On Tue, Oct 18, 2016 at 10:39 AM, Philipp Winter wrote:
> On Sun, Oct 16, 2016 at 01:15:32AM -0400, Nick Mathewson wrote:
>> On Fri, Oct 14, 2016 at 11:09 AM, Philipp Winter wrote:
>> [...]
>> > There are two ways to mitigate the issue. First, we need better
>&
On Sat, Oct 22, 2016 at 10:27 PM, Dash Four wrote:
> Nick Mathewson wrote:
>>
>> Hi, all! There is a new alpha release of the Tor source code, with
>> fixes for a security bug. You should probably upgrade as packages
>> become available.
>>
> I am having troub
On Sun, Nov 6, 2016 at 7:35 AM, Dash Four wrote:
> Hi Nick,
>
>
> First time this happens (I have been compiling tor sources with this
> compiler since around 2009). Not sure about using the -Wlogical-op warning
> though.
>
> Here is what I get:
>
> ==
> gcc -std=gnu99 -DHA
Hi, all! There is a new alpha release of the Tor source code, with
numerous bugfixes. We're getting closer to stable, but we still need
testing!
You can download the source from the usual place on the website.
Packages should be up within a few days.
Please remember to check the signature. Plea
Hi, all! There is a new release candidate for the Tor source code,
with numerous bugfixes.
You can download the source from the usual place on the website.
Packages should be up in a few days. This should appear in an alpha
TorBrowser release around December 14.
(There is also a concurrent relea
Hi, all! I just tagged and uploaded Tor 0.2.9.7-rc. The source is
available at the usual place in the website. Other packages should be
available soon. This Tor release will probably go into the hardened
TB series coming out in the next couple of days. (I hear that
0.2.9.6-rc will be in the reg
(Also, Tor 0.2.9.8 and Tor 0.2.8.12 are out. If you didn't know, you
should subscribe to tor-announce an/or read the Tor blog!)
You can find the Tor 0.3.0.1-alpha source on the website at the usual
place. It's an alpha, so please expect plenty of bugs, and be ready
to report them. Packages shou
Hi! There's yet another new alpha release. I think we're closing in
on stability for this series, which is a pretty nice feeling.
You can download the source code from the usual place on the website.
It's an alpha, so please expect bugs and be ready to report them.
Packages should be out over th
Hi, all!
As part of an effort to actually be predictable about supporting old
releases, I'm hoping to put out stable releases of 0.2.4 through 0.2.9
some time early next month. (See [1] for our planned schedule of when
we're dropping support for what.)
This isn't an easy effort, though! Some of
On Fri, Feb 17, 2017 at 5:19 PM, Nick Mathewson wrote:
> Hi, all!
>
> As part of an effort to actually be predictable about supporting old
> releases, I'm hoping to put out stable releases of 0.2.4 through 0.2.9
> some time early next month. (See [1] for our planned sche
Hi! We're making progress: Tor 0.3.0.4-rc is now "release candidate"
status, which means we think we might be just about stable, but we
hope you'll find some more bugs.
You can download the source code from the usual place on the website.
Packages should be out over the next several weeks, includ
Hi all!
Tor 0.3.0.5-rc is now tagged and released. It's in still "release
candidate" status, which means we think it should be pretty stable,
but we hope you'll find more bugs for us to fix.
You can download the source code from the usual place on the website.
Packages should be out over the nex
On Thu, Apr 27, 2017 at 7:43 AM, Udo van den Heuvel wrote:
> Hello,
>
> I noticed that 0.3.0.6 was out so I started a build.
> I noticed this popping up:
>
> checking pkg-config is at least version 0.9.0... yes
> checking for SYSTEMD... no
> configure: Okay, checking for systemd a different way...
(Also, 0.3.0.7 was released last week. If you didn't know, you should
subscribe to tor-announcements.)
Hi, all!
You can find the source code for Tor 0.3.0.1-alpha www.torrpoject.org
at the usual place. It's an alpha, so please expect plenty of bugs,
and be ready to report them. Packages shoul
(Also, 0.3.0.7 was released last week. If you didn't know, you should
subscribe to tor-announcements.)
Hi, all!
You can find the source code for Tor 0.3.1.2-alpha at
www.torrpoject.org at the usual place. It's an alpha, so please
expect plenty of bugs, and be ready to report them. Packages sho
Hi, all!
Tomorrow we'll be putting out new releases in all supported series
(0.2.4 through 0.3.1) to fix two vulnerabilities that we have found in
the hidden service code. These vulnerabilities allow an attacker to
cause a hidden service to crash with an assertion failure. We believe
that is the
On Wed, Jun 7, 2017 at 11:15 AM, Nick Mathewson wrote:
> Hi, all!
>
> Tomorrow we'll be putting out new releases in all supported series
> (0.2.4 through 0.3.1) to fix two vulnerabilities that we have found in
> the hidden service code. These vulnerabilities allow an attacker
Hi! The latest alpha, 0.3.1.3-alpha, is now released. The source is
available on the website, and packages should be available before too
long. It has a security fix for hidden services, so if you are
running a hidden service, you should upgrade to this version (or to
one of the 7 other versions
Hi, all!
The latest alpha, 0.3.1.3-alpha, is now released. The source is
available on the website, and packages should be available before
long. The Tor Browser team expects to get a release out early next
week. This release has a security fix for clients, so if you are
running any 0.3.0.x or 0.3
On Thu, Jun 29, 2017 at 6:55 PM, Nick Mathewson wrote:
> Hi, all!
>
> The latest alpha, 0.3.1.3-alpha, is now released.
Argh. I knew I'd make a copy-and-paste error.
The new release is 0.3.1.4-alpha, of course.
--
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubsc
Hi!
This is a reminder that we will not be making new releases for the
0.2.4, 0.2.6, or 0.2.7 release series after 1 August 2017. If you are
running one of those series, please make a plan to upgrade some time
before then!
0.2.5 will still be supported until 1 May 2018.
0.2.9 support will conti
Hi, all!
There's a new alpha Tor release available! The source is available
from the "download" page on the website on the website, and packages
should be available before long. The Tor Browser team expects to get a
release out early next week.
This is an alpha release: if you aren't up for find
Hi, all!
There's a new Tor release candidate available! The source is available
from the "download" page on the website on the website, and packages
should be available before long. The Tor Browser team expects to get a
release out later this month.
This is a release candidate; please help find
[TROVE-2017-008. CVE-2017-0380. Severity: medium]
Hello!
We have found a possible problem with the code that reports an error
during the construction of an introduction point circuit. Because
of this bug, it is possible that some hidden services will sometimes
write sensitive informatio
Hi, everybody!
After lots of work, we've got a tasty new alpha ready for you to find
bugs in! Because it's an alpha, you should only run it if you're
ready to find more bugs than usual, and report them on
trac.torproject.org.
The source code is available from the usual place on
www.torproject.or
Hi, all!
There's a fun new alpha you can run and look for bugs in! Because it's an
alpha, you should only run it if you're ready to find more bugs than usual,
and report them on trac.torproject.org.
The source code is available from the usual place on www.torproject.org ;
if you build Tor from s
Hello, everyone!
There's a groovy new alpha you can run and look for bugs in! Because it's
an alpha, you should only run it if you're ready to find more bugs than
usual, and report them on trac.torproject.org.
The source code is available from the usual place on www.torproject.org ;
if you build
Hello!
There's a fun new alpha you can run! Because it's an alpha, you
should only run it if you're ready to find more bugs than usual, and
report them on trac.torproject.org.
The source code is available from the usual place on
www.torproject.org ; if you build Tor from source, why not give it
Hello!
I'm sending this message to announce that we will be releasing new
stable and versions of Tor tomorrow, to fix 5 security bugs. I
apologise for the short notice; we've had to move up our intended
release date in order to try to match with release deadlines for
downstream projects.
We have
There are new releases of Tor to fix several security issues.
If you build Tor from source code, you can download them from the
download page on the website. If you need an older release series, go
to https://dist.torproject.org/ .
For users who do not build from source: packages should be availa
Hi, all!
Tor 0.3.2.7-rc is released. If you build Tor from source code, why
not fetch it from our download page and try it out? If you use
precompiled packages, then there should be releases soon, including a
Tor Browser alpha release likely next week.
Here are the changes since 0.3.2.6-alpha:
Hi, all!
Tor 0.3.2.8-rc is released. If you build Tor from source code, why
not fetch it from our download page and try it out? If you use
precompiled packages, then there should be releases soon. There
probably won't be a Tor Browser release for this one; this issues
fixed here are mainly (but
Hi, all!
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on trac.torproject.org.
The source code is available from the usual place on
www.torproject.org; if you build Tor from source, why not give it a
t
Hi, all!
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on trac.torproject.org.
The source code is available from the usual place on
www.torproject.org; if you build Tor from source, why not give it a
t
Hi!
This coming week, we'll be putting out new stable releases for 0.2.9
and later to fix a few security bugs. The highest-severity bug to be
fixed is severity "medium".
These releases will also backport the anti-DoS features from Tor 0.3.3.
Relays and authorities should be sure to upgrade once
Hi!
There are new security releases today. The official announcement just
went to tor-announce, but I want to make sure that people on this list
see it too.
In brief:
* Directory authorities should upgrade.
* Relays running 0.3.2.1-alpha through 0.3.2.9 should upgrade.
* Relays running 0.3
Hi, all!
There's a new alpha Tor release available as source code! Because it's
an alpha, you should only run it if you're ready to find more bugs
than usual, and report them on trac.torproject.org.
The source code is available from the usual place on
www.torproject.org; if you build Tor from sou
Hi, all!
There's a new Tor release candidate available as source code! Because it's
an release candidate, you should only run it if you're ready to find bugs,
and report them on trac.torproject.org.
The source code is available from the usual place on www.torproject.org; if
you build Tor from sou
Hi, all!
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on trac.torproject.org.
The source code is available from the usual place on
www.torproject.org; if you build Tor from source, why not give it a
t
For current work on postquantum handshake support in Tor, see
proposals 263, 269, 270, and ticket #24985.
A digression:
Personally, I don't agree that the evidence is so convincing about the
NSA being able to break 256-bit ECDSA today: if they have it, then
they'd treat it as a big secret, and no
Hi, all!
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on trac.torproject.org.
The source code is available from the usual place on
www.torproject.org; if you build Tor from source, why not give it a
t
Hi, all!
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on trac.torproject.org.
The source code is available from the usual place on
www.torproject.org; if you build Tor from source, why not give it a
t
Hi, all!
There's a new Tor release candidate! Because it's not a stable
release yet, you should only run it if you're ready to find bugs and
report them on trac.torproject.org.
The source code is available from the usual place on
www.torproject.org; if you build Tor from source, why not give it
On Tue, Jul 31, 2018 at 12:07 PM David Niklas wrote:
>
> On Sun, 29 Jul 2018 22:51:00 +
> nusenu wrote:
> > > https://twitter.com/torproject/status/1022840807374635009
> >
> > > If you
> > > missed The Onion Report at #hopeconf last week with Steph, Alison,
> > > George, David, and Matt, you
Hi, all!
There's a new Tor release candidate! Because it's not a stable
release yet, you should only run it if you're ready to find bugs and
report them on trac.torproject.org.
The source code is available from the usual place on
https://www.torproject.org/download/download.html; if you build To
Hi, all!
There's a new Tor release candidate! Because it's not an official
release,, you should only run it if you're ready to find more bugs
than usual, and report them on trac.torproject.org.
The source code is available from the usual place on
www.torproject.org; if you build Tor from source,
Hi, all!
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on trac.torproject.org.
The source code is available from the usual place on the download page
of www.torproject.org; if you build Tor from source,
Hello!
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on trac.torproject.org.
The source code is available from the usual place on
www.torproject.org; if you build Tor from source, why not give it a
try?
On Sun, Sep 30, 2018 at 9:48 AM Udo van den Heuvel wrote:
>
> On 17/09/2018 17:46, David Goulet wrote:
> > Quickly like that, I can't tell you why this is happening or any workaround
> > you could do so keep an eye on the ticket. If this is an 0.3.4.x regression,
> > we'll find it quickly.
>
> Iss
Hi!
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on trac.torproject.org.
The source code is available from the usual place on
www.torproject.org; if you build Tor from source, why not give it a
try? An
Hi, all!
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on trac.torproject.org.
The source code is available from the Download page on
www.torproject.org; if you build Tor from source, why not give it a
On Thu, Nov 8, 2018 at 6:12 AM Masayuki Hatta wrote:
>
> Hi!
>
> As I wrote here some time ago, I fixed Orchid the Java Tor, and it
> worked for a while.
>
> https://lists.torproject.org/pipermail/tor-talk/2018-April/044133.html
>
> Recently (I think it was around July-Aug), Orchid became unworkab
Hi, all!
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on trac.torproject.org.
The source code is available from the downlaod page on
www.torproject.org; if you build Tor from source, why not give it a
t
Hi, all!
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on trac.torproject.org.
The source code is available from the usual place on
www.torproject.org; if you build Tor from source, why not give it a
tr
Hi, all!
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on trac.torproject.org.
The source code is available from the usual place on the
www.torproject.org; if you build Tor from source, why not give it
On Sat, Jan 19, 2019 at 6:23 AM Jim wrote:
>
> Nick Mathewson wrote:
> > You can download the source code from the usual place on the website.
> > Packages should be available within the next several weeks, with a new
> > Tor Browser some time in the next month or so.
&
Hi!
I'm planning to put out new Tor source releases some time Thursday or
Friday. They will be versions 0.3.3.12, 0.3.4.11, 0.3.5.8, and
0.4.0.2-alpha.
These versions will, among the usual array of bugfixes, fix a
medium-severity security issue: a remote denial-of-service attack
vector against r
Hello!
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on trac.torproject.org.
The source code is available from the usual place on
www.torproject.org; if you build Tor from source, why not give it a
try?
Hi, all!
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on trac.torproject.org.
The source code is available from the usual place on
www.torproject.org; if you build Tor from source, why not give it a
tr
Hi, all!
There's a new Tor release candidate! It's not a release yet, but if no
serious bugs are found, the next stable release will be (almost)
identical to it.
The source code is available at
https://dist.torproject.org/tor-0.4.0.4-rc.tar.gz .
If you build Tor from source, why not give it a try
Hi!
This is a reminder that we're going to stop supporting Tor 0.3.4 on
June 10, per our policy and schedule at
https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/CoreTorReleases
. After this date, we won't do any more security fixes or bugfixes
for 0.3.4.
If you need the latest
Hi, all!
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on trac.torproject.org.
The source code is available from the usual place at
https://www.torproject.org/download/tor/; if you build Tor from
source
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on trac.torproject.org.
The source code is available from
https://www.torproject.org/download/tor/ ; if you build Tor from
source, why not give it a try? An
Hi, all!
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on trac.torproject.org.
The source code is available from the usual place at
https://www.torproject.org/download/tor/ ; if you build Tor from
sourc
Hi!
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on trac.torproject.org.
The source code is available at
https://www.torproject.org/download/tor/; if you build Tor from
source, why not give it a try? A
Hi, all!
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on trac.torproject.org.
The source code is available from the usual place at
https://www.torproject.org/download/tor/; if you build Tor from
source
Hi, all!
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on trac.torproject.org.
The source code is available from the usual place on
www.torproject.org; if you build Tor from source, why not give it a
tr
Hi, all!
There's a new Tor release candidate! Because it's a release candidate,
we'd really like to know about any remaining bugs in it, so we can try
to fix them before calling the series stable. As usual you can report
bugs on trac.torproject.org.
The source code is available from the usual pl
Hi, all!
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on trac.torproject.org.
The source code is available from the usual place on
https://www.torproject.org/download/tor/ . If you build Tor from
sourc
Hello!
Some time this week, we currently plan to put out a set of security
updates for all supported versions of Tor. These releases will fix a
pair of denial-of-service bugs: one that we are classifying at "low"
severity, and one that we are classifying at "high" severity.
Our recommendation wi
Hello!
There's a new alpha release available for download. If you build Tor
from source, you can download the source code for 0.4.3.3-alpha from
the download page on the website. Packages should be available over
the coming days, including a new alpha Tor Browser release.
Remember, this is an al
On Sun, May 3, 2020 at 6:42 PM bo0od wrote:
>
> I wonder if Tor has a roadmap for applying pqc into their design, great
> to see that some projects trying to add it for experimental state:
>
Hi! There are several proposals for this:
https://gitweb.torproject.org/torspec.git/tree/proposals/263-n
Hi, all!
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on the bugtracker (or here, while we're getting the new
bugtracker working).
The source code is available from the download page on
www.torproject.
Hi, all!
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on trac.torproject.org.
The source code is available from the download page at
https://www.torproject.org/download/tor/ ; if you build Tor from
sou
On Sat, Aug 8, 2020 at 3:59 PM proc...@riseup.net wrote:
>
> Hi. I was wondering if setting the connection padding setting in torrc
> to 1 instead of auto has any benefit in protecting against a passive
> adversary outside the Tor network.
I don't think it'll have much effect? The "auto" option
Hi, all!
There's a new release candidate! Unless we find significant new major
bugs, this will probably be almost the same as the final 0.4.5.x
stable release. Please test it if you can!
The source code is available from the download page at
https://www.torproject.org/download/tor/ ; if you bui
Hi, all!
There's a new Tor release candidate! We think this will be the last
one before 0.4.5.x is stable.
The source code is available from the download page at
https://www.torproject.org/download/tor/ ; if you build Tor from
source, why not give it a try? And if you don't build Tor from source,
Hello!
Early next week -- around Tuesday -- we plan to put out new Tor
releases to fix a pair of denial-of-service issues that we have found.
We are tracking these issues as "High" and "Medium" severity
respectively under our security policy at
https://gitlab.torproject.org/tpo/core/team/-/wikis
On Mon, Mar 8, 2021 at 10:54 AM Nick Mathewson wrote:
> To the best of our knowledge these vulnerabilities are not being
> supported in the wild.
Oops! I meant to say,
"To the best of our knowledge these vulnerabilities are not being
exploited in the wild".
--
tor-talk mailing
On Mon, Mar 8, 2021 at 12:12 PM Geoff Down wrote:
>
> Thanks Nick,
> btw when I recently verified the sig on the Tor source download, it said
> your key had expired.
You might need to refresh it; I've updated the expiration dates. If
the keyservers aren't working for you, try
https://people.to
Hi, all!
There's a new alpha Tor release! Because it's an alpha, you should
only run it if you're ready to find more bugs than usual, and report
them on gitlab.torproject.org.
The source code is available from the download page at
https://www.torproject.org/download/tor/ ; if you build Tor from
s
Hello!
In around two weeks–likely on the 14th or 15th– we plan to put out new
stable Tor releases to fix issues in all currently released versions of
Tor. There are three issues that will be fixed, with severity levels
between "Medium" and "High" according to our classification system. The
most
201 - 282 of 282 matches
Mail list logo
