volunteer.html (24dd6350e) - tor-webwml.git

24dd6350e5493ccd792c981b248f6283bc1d79ec

renamed contribute to volun... Andrew Lewman authored 18 years ago	`1) <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"> 2) 3) <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"> 4) <head>`
call it Volunteer in the na... Roger Dingledine authored 18 years ago	`5) <title>Tor: Volunteer</title>`
renamed contribute to volun... Andrew Lewman authored 18 years ago	`6) <meta name="Author" content="Roger Dingledine" /> 7) <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1" /> 8) <link rel="stylesheet" type="text/css" href="stylesheet.css" /> 9) <link rel="shortcut icon" type="image/x-icon" href="/favicon.ico" /> 10) </head> 11) <body> 12) 13) <!-- TITLE BAR & NAVIGATION --> 14)`
made a simple change to the... le@svn.torproject.org authored 18 years ago	`15) <div class="center"> 16)`
renamed contribute to volun... Andrew Lewman authored 18 years ago	`17) <table class="banner" border="0" cellpadding="0" cellspacing="0"> 18) <tr> 19) <td class="banner-left"></td> 20) <td class="banner-middle"> 21) <a href="index.html">Home</a> 22) \| <a href="howitworks.html">How It Works</a> 23) \| <a href="download.html">Download</a> 24) \| <a href="documentation.html">Docs</a> 25) \| <a href="users.html">Users</a> 26) \| <a href="faq.html">FAQs</a>`
call it Volunteer in the na... Roger Dingledine authored 18 years ago	`27) \| <a class="current">Volunteer</a>`
renamed contribute to volun... Andrew Lewman authored 18 years ago	`28) \| <a href="developers.html">Developers</a> 29) \| <a href="research.html">Research</a> 30) \| <a href="people.html">People</a> 31) </td>`
Updated the banner to inclu... Andrew Lewman authored 18 years ago	`32) <td class="banner-right"> 33) <a href="/"><img src="/images/en.png" border="0" alt="English"></a>`
fix links to translation pages Roger Dingledine authored 18 years ago	`34) <a href="/index.it.html"><img src="/images/it.png" border="0" alt="Italiano"></a> 35) <a href="/index.de.html"><img src="/images/de.png" border="0" alt="Deutsch"></a>`
Updated the banner to inclu... Andrew Lewman authored 18 years ago	`36) </td>`
renamed contribute to volun... Andrew Lewman authored 18 years ago	`37) </tr> 38) </table> 39) 40) <!-- END TITLE BAR & NAVIGATION --> 41) 42) <div class="main-column"> 43) 44) <!-- PUT CONTENT AFTER THIS TAG --> 45) <h2>Six things everyone can do now:</h2> 46) <ol> 47) <li> We need users like you to try Tor out, and let the Tor developers know about bugs you find or features you don't find.</li>`
link to the new docs, move... Roger Dingledine authored 18 years ago	`48) <li> Please consider <a href="/cvs/tor/doc/tor-doc-server.html">running a server</a> to help the Tor network grow.</li>`
renamed contribute to volun... Andrew Lewman authored 18 years ago	`49) <li> We especially need people with Windows programming skills to run an exit server on Windows, to help us debug.</li>`
and fix the website links too Roger Dingledine authored 18 years ago	`50) <li> Run a <a href="/cvs/tor/doc/tor-hidden-service.html">Tor hidden service</a> and put interesting content on it.</li>`
renamed contribute to volun... Andrew Lewman authored 18 years ago	`51) <li> Tell your friends! Get them to run servers. Get them to run hidden services. Get them to tell their friends.</li>`
add a few url's to volunteer Roger Dingledine authored 18 years ago	`52) <li> Consider joining the <a href="http://secure.eff.org/tor">Electronic Frontier Foundation</a>. More EFF donations means more freedom in the world, including more Tor development.</li>`
renamed contribute to volun... Andrew Lewman authored 18 years ago	`53) </ol> 54) 55) <h2>Coding Challenges</h2> 56) <ul>`
start to rewrite the volunt... Roger Dingledine authored 18 years ago	57) <li>Currently Tor ships with its own AES, since when we started OpenSSL 58) had missing/broken AES support. But now that it's gotten more mainstream, 59) we should change things so we only use our bundled AES if OpenSSL doesn't 60) support it natively.</li> 61) <li>Because Tor servers need to store-and-forward each cell they handle, 62) high-bandwidth Tor servers end up using dozens of megabytes of memory 63) just for buffers. We need better heuristics for when to shrink/expand 64) buffers. Maybe this should be modelled after the Linux kernel buffer 65) design, where you have many smaller buffers that link to each other, 66) rather than monolithic buffers?</li> 67) <li>How do ulimits work on Win32, anyway? We're having problems 68) especially on older Windowses with people running out of file 69) descriptors, connection buffer space, etc. (We should handle 70) WSAENOBUFS as needed, look at the MaxConnections registry entry, 71) look at the MaxUserPort entry, and look at the TcpTimedWaitDelay 72) entry. We may also want to provide a way to set them as needed. See <a 73) href="http://bugs.noreply.org/flyspray/index.php?do=details&id=98">bug 74) 98</a>.)</li> 75) <li>Encrypt identity keys on disk, and implement passphrase protection 76) for them. Right now they're just stored in plaintext.</li> 77)
renamed contribute to volun... Andrew Lewman authored 18 years ago	78) <li>Implement reverse DNS (already specified)</li> 79) <li>Make configure.in handle cross-compilation</li> 80) <li>Have NULL_REP_IS_ZERO_BYTES default to 1.</li> 81) <li>Make with-ssl-dir disable search for ssl.</li> 82) <li>Implement preservation of reputation through reboots for clients and dirservers. </li> 83) <li>Add in support egd or other non-OS-integrated strong entropy sources.</li> 84) <li>Implement a way to get autoconf to install things into ~/.tor.</li> 85) <li>Change server descriptors to declare log level.</li> 86) <li>Add in support for clients to avoid servers that are too loggy based upon user configuration of acceptable log level.</li> 87) <li>Separate node discovery from routing to allow neat extensions. [Goodell?]</li>
clean up volunteer page Roger Dingledine authored 18 years ago	`88) <ul>`
renamed contribute to volun... Andrew Lewman authored 18 years ago	`89) <li>Add SetServerStatus control event to adjust verified/running status of nodes.</li> 90) <li>Add NoDownload config option to prevent regular directory downloads from happening.</li>`
clean up volunteer page Roger Dingledine authored 18 years ago	`91) </ul>`
renamed contribute to volun... Andrew Lewman authored 18 years ago	`92) <li>Choosing exit node by meta-data, e.g. country.</li> 93) <li>Use cpuworker for more heavy lifting.</li>`
clean up volunteer page Roger Dingledine authored 18 years ago	`94) <ul>`
renamed contribute to volun... Andrew Lewman authored 18 years ago	`95) <li>Signing (and verifying) hidserv descriptors</li> 96) <li>Signing (and verifying) intro/rend requests</li> 97) <li>Signing (and verifying) router descriptors</li> 98) <li>Signing (and verifying) directories</li> 99) <li>Doing TLS handshake (this is very hard to separate out, though)</li>`
clean up volunteer page Roger Dingledine authored 18 years ago	`100) </ul>`
renamed contribute to volun... Andrew Lewman authored 18 years ago	`101) <li>Buffer size pool: allocate a maximum size for all buffers, not a maximum size for each buffer. So we don't have to give up as quickly (and kill the thickpipe!) when there's congestion.</li> 102) <li>Add alternative versions of crypto.c and tortls.c to use libnss or libgcrypt+gnutls.</li> 103) <li>Extend our NSIS-based windows installer to include FreeCap and/or Privoxy.</li> 104) <li>Develop a way to handle OS X installation and uninstallation.</li>`
make cvs/ links relative to... Roger Dingledine authored 18 years ago	`105) <li>Develop a GUI or other controller program, to do configuration, etc. See our <a href="/cvs/tor/doc/control-spec.txt">control specification</a> for details, and the rudimentary demonstration <a href="/cvs/tor/contrib/TorControl.py">Python control script</a>. </li>`
clean up volunteer page Roger Dingledine authored 18 years ago	`106) <ul>`
merged changes so far, stil... Andrew Lewman authored 18 years ago	`107) <li>Design an interface for the control program. You can use any license you want, but we'd recommend 3-clause BSD or maybe GPL; and we can only help out if your license conforms to the <a href="http://www.debian.org/social_contract.html#guidelines">DFSG</a>.</li>`
start to rewrite the volunt... Roger Dingledine authored 18 years ago	`108) <li>Periodically people running servers tell us they want to have one`
renamed contribute to volun... Andrew Lewman authored 18 years ago	`109) BandwidthRate during some part of the day, and a different 110) BandwidthRate at other parts of the day. Rather than coding this 111) inside Tor, we should have a little script that speaks via the Tor 112) Controller Interface, and does a setconf to change the bandwidth 113) rate. Perhaps it would run out of cron, or perhaps it would sleep 114) until appropriate times and then do its tweak (that's probably more`
start to rewrite the volunt... Roger Dingledine authored 18 years ago	`115) portable). Can somebody write one for us and we'll put it into`
make cvs/ links relative to... Roger Dingledine authored 18 years ago	`116) <a href="/cvs/tor/contrib/">tor/contrib/</a>?</li>`
clean up volunteer page Roger Dingledine authored 18 years ago	`117) </ul>`
renamed contribute to volun... Andrew Lewman authored 18 years ago	`118) <li>Integrate a good (portable, fast, clean, BSD-free) asynchronous DNS library so we don't have to keep forking DNS worker threads to do gethostbyname.</li> 119) </ul> 120) 121) <h2>Documentation Challenges</h2> 122) <ul> 123) <li>Write server instructions for OSX and Windows operators.</li>`
clean up volunteer page Roger Dingledine authored 18 years ago	`124) <li>Improve and clarify the wiki entry on <a href="http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#ServerForFirewalledClients">port forwarding</a>.</li>`
renamed contribute to volun... Andrew Lewman authored 18 years ago	`125) <li>Document how to do exit node caching: tie into squid or other caching web proxy.</li> 126) <li>Help maintain this website; code, content, css, overall layout,</li> 127) <li>Help with documentation </li> 128) <li>Help consolidate documentation. We may have too much documentation. It's spread out too far and duplicates itself in places. </li>`
merged changes so far, stil... Andrew Lewman authored 18 years ago	`129) <li>Help translate the web page and documentation into other languages. See the <a href="translation.html">translation guidelines</a> if you want to help out. (Examples: <a href="http://membres.lycos.fr/geolemalin/anonymat_garantit.htm">French</a> , <a href="http://tor.freesuperhost.com/">Persian</a> and <a href="http://www.gamevn.com/forum/showthread.php?t=103346">Vietnamese</a>.)</li>`
clean up volunteer page Roger Dingledine authored 18 years ago	`130) <li>If you know a question that should go on <a 131) href="http://wiki.noreply.org/wiki/TheOnionRouter/TorFAQ">the FAQ Wiki</a>, please 132) add it and answer it.</li>`
merged changes so far, stil... Andrew Lewman authored 18 years ago	`133) <li>If you know the answer to a <a href="http://wiki.noreply.org/wiki/TheOnionRouter/TorFAQ">Wiki question</a> in the "unanswered FAQs" list, please answer it. </li> 134) <li>Take a look at <a 135) href="http://wiki.noreply.org/wiki/TheOnionRouter/SquidProxy">Martin's 136) Squid and Tor page</a>, and update it to reflect Tor's <a 137) href="http://tor.eff.org/tor-manual.html">RedirectExit</a> config option. </li>`
Added country flag to do it... Andrew Lewman authored 18 years ago	`138) <li>Update website to include the country flags for each language into which the website has been translated.</li>`
renamed contribute to volun... Andrew Lewman authored 18 years ago	`139) </ul> 140) 141) <h2>Testing Challenges</h2> 142) <ul> 143) <li>Test out why some of our tor servers have dns resolvers that resolve 144) unknown addresses to 127.0.0.1.</li>`
clean up volunteer page Roger Dingledine authored 18 years ago	`145) <ul>`
renamed contribute to volun... Andrew Lewman authored 18 years ago	`146) <li>Identify the servers that experience this issue. </li> 147) <li>Identify how to cause and repair the issue in BIND, DJBDNS, or 148) whatever daemon the misconfigured servers use.</li>`
clean up volunteer page Roger Dingledine authored 18 years ago	`149) </ul>`
renamed contribute to volun... Andrew Lewman authored 18 years ago	`150) <li>Figure out how to setup web proxy gateways to let normal people 151) browse hidden services. (This has been done a few times, but nobody has 152) sent us code.)</li> 153) <li>Investigate privoxy vs. freecap for win32 clients</li>`
merged changes so far, stil... Andrew Lewman authored 18 years ago	`154) <li>Evaluate, create, and <a href="http://wiki.noreply.org/wiki/TheOnionRouter/TorifyHOWTO">document a list of programs</a> that work with Tor. </li>`
clean up volunteer page Roger Dingledine authored 18 years ago	`155) <li>Perform a security analysis of Tor with <a href="http://en.wikipedia.org/wiki/Fuzz_testing">"fuzz"</a>". Determine if there good libraries out there for what we want. Win fame by getting credit when we put out a new release because of you!</li>`
inserted all missing urls i... Andrew Lewman authored 18 years ago	`156) <li>Website volume fingerprinting attacks (<a href="http://freehaven.net/anonbib/#back01">Back et al</a>, <a href="http://freehaven.net/anonbib/#hintz02">Hintz</a>). Defenses include a large cell size, <a href="http://freehaven.net/anonbib/#timing-fc2004">defensive dropping</a>, etc. How well does each approach work?</li>`
renamed contribute to volun... Andrew Lewman authored 18 years ago	157) <li>The end-to-end traffic confirmation attack. We need to study 158) long-range dummies more, along with traffic shaping. How much traffic of 159) what sort of distribution is needed before the adversary is confident he 160) has won?</li> 161) <li>Determine what sensitive info squeaks by privoxy. </li> 162) <li>Deteremine if there are other html scrubbers that are better than 163) privoxy.</li> 164) </ul> 165) 166) <h2>Research Challenges</h2> 167) <ul> 168) <li>Arranging membership management for independence.</li>
clean up volunteer page Roger Dingledine authored 18 years ago	`169) <ul>`
renamed contribute to volun... Andrew Lewman authored 18 years ago	`170) <li>Sybil defenses without having a human bottleneck.</li> 171) <li>How to gather random sample of nodes.</li> 172) <li>How to handle nodelist recommendations.</li> 173) <li>Consider incremental switches: a p2p tor with only 50 users has 174) different anonymity properties than one with 10k users, and should be 175) treated differently.</li>`
clean up volunteer page Roger Dingledine authored 18 years ago	`176) </ul>`
renamed contribute to volun... Andrew Lewman authored 18 years ago	177) <li>Incentives to relay; incentives to exit.</li> 178) <li>Allowing dissidents to relay through Tor clients.</li> 179) <li>Experiment with mid-latency systems. How do they impact usability, 180) how do they impact safety?</li> 181) <li>Understand how powerful fingerprinting attacks are, and experiment 182) with ways to foil them (long-range padding?).</li> 183) <li>Come up with practical approximations to picking entry and exit in 184) different routing zones.</li> 185) <li>Find ideal churn rate for helper nodes; how safe is it?</li> 186) <li>Attacking freenet-gnunet/timing-delay-randomness-arguments.</li> 187) <li>Is exiting from the middle of the circuit always a bad idea?</li> 188) <li>IPv6 support (For exit addresses)</li>
clean up volunteer page Roger Dingledine authored 18 years ago	`189) <ul>`
renamed contribute to volun... Andrew Lewman authored 18 years ago	`190) <li>Spec issue: if a resolve returns an IP4 and an IP6 address, 191) which to use?</li> 192) <li>Add to exit policy code</li> 193) <li>Make tor_gethostbyname into tor_getaddrinfo</li> 194) <li>Make everything that uses uint32_t as an IP address change to use 195) a generalize address struct.</li> 196) <li>Change relay cell types to accept new addresses.</li> 197) <li>Add flag to serverdescs to tell whether IPv6 is supported.</li>`
clean up volunteer page Roger Dingledine authored 18 years ago	`198) </ul>`
renamed contribute to volun... Andrew Lewman authored 18 years ago	199) <li>patch tsocks with our current patches + gethostbyname, getpeername, 200) etc.</li> 201) <li>make freecap (or whichever) do what we want.</li> 202) <li>scrubbing proxies for protocols other than http.</li> 203) <li>We need better default privoxy configs to ship.</li> 204) <li>We need a good scrubbing HTTP proxy; privoxy is unmaintained and 205) sucky.</li> 206) <li>A DNS proxy would let unmodified socks4/socks5 apps to work 207) well.</li> 208) <li>Add SOCKS support to more applications</li> 209) <li>store hidden service information to disk: dirservers forget service 210) descriptors when they restart; nodes offering hidden services forget 211) their chosen intro points when they restart.</li> 212) <li>It's not that hard to DoS Tor servers or dirservers. Are puzzles the 213) right answer? What other practical approaches are there?</li> 214) <li>Server CPU load is high because clients keep asking to make new 215) circuits, which uses public key crypto. Possible defenses include: using 216) helper nodes (fixed entry nodes); rate limiting the number of create 217) cells handled per second; having clients retry failed extensions a few 218) times; implementing ssl sessions; and using hardware crypto when 219) available.</li> 220) <li>We fear we might not work very well when servers have asymmetric 221) bandwidth. Because Tor has separate TCP connections between each hop, if 222) the incoming bytes are arriving just fine and the outgoing bytes are all 223) getting dropped on the floor, the TCP push-back mechanisms don't really 224) transmit this information back to the incoming streams. Perhaps Tor 225) should detect when it's dropping a lot of outgoing packets, and 226) rate-limit incoming streams to regulate this itself? We need somebody 227) who's good with networks to simulate this and help design 228) solutions.</li> 229) <li>Right now the hidden service descriptors are being stored on the 230) dirservers, but any reliable distributed storage system would do (for 231) example, a DHT that allows authenticated updates). Can somebody figure 232) out our best options and decide if they're good enough?</li> 233) <li>How hard is it to patch bind or a DNS proxy to redirect requests to 234) Tor via our tor-resolve socks extension? What about to convert UDP DNS 235) requests to TCP requests and send them through Tor?</li> 236) <li>Tor provides anonymous connections, but if you want to keep multiple 237) pseudonyms in practice (say, in case you frequently go to two websites 238) and if anybody knew about both of them they would conclude it's you), we 239) don't support that well yet. We should find a good approach and
inserted all missing urls i... Andrew Lewman authored 18 years ago	`240) interface for handling pseudonymous profiles in Tor. See <a 241) href="http://archives.seul.org/or/talk/Dec-2004/msg00086.html">this 242) post</a> and <a href="http://archives.seul.org/or/talk/Jan-2005/msg00007.html">followup</a> for details.</li>`