Andrew Lewman commited on 2006-04-13 23:09:23
              Zeige 1 geänderte Dateien mit 0 Einfügungen und 209 Löschungen.
            
| ... | ... | 
                      @@ -1,209 +0,0 @@  | 
                  
| 1 | 
                        -<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"  | 
                    |
| 2 | 
                        -"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">  | 
                    |
| 3 | 
                        -  | 
                    |
| 4 | 
                        -<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en">  | 
                    |
| 5 | 
                        -<head>  | 
                    |
| 6 | 
                        - <title>Tor: Contribute</title>  | 
                    |
| 7 | 
                        - <meta name="Author" content="Roger Dingledine" />  | 
                    |
| 8 | 
                        - <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1" />  | 
                    |
| 9 | 
                        - <link rel="stylesheet" type="text/css" href="stylesheet.css" />  | 
                    |
| 10 | 
                        - <link rel="shortcut icon" type="image/x-icon" href="/favicon.ico" />  | 
                    |
| 11 | 
                        -</head>  | 
                    |
| 12 | 
                        -<body>  | 
                    |
| 13 | 
                        -  | 
                    |
| 14 | 
                        -<!-- TITLE BAR & NAVIGATION -->  | 
                    |
| 15 | 
                        -  | 
                    |
| 16 | 
                        -<table class="banner" border="0" cellpadding="0" cellspacing="0">  | 
                    |
| 17 | 
                        - <tr>  | 
                    |
| 18 | 
                        - <td class="banner-left"></td>  | 
                    |
| 19 | 
                        - <td class="banner-middle">  | 
                    |
| 20 | 
                        - <a href="index.html">Home</a>  | 
                    |
| 21 | 
                        - | <a href="overview.html">Overview</a>  | 
                    |
| 22 | 
                        - | <a href="download.html">Download</a>  | 
                    |
| 23 | 
                        - | <a href="documentation.html">Docs</a>  | 
                    |
| 24 | 
                        - | <a href="support.html">Support</a>  | 
                    |
| 25 | 
                        - | <a href="faq.html">FAQs</a>  | 
                    |
| 26 | 
                        - | <a class="current">Contribute</a>  | 
                    |
| 27 | 
                        - | <a href="developers.html">Developers</a>  | 
                    |
| 28 | 
                        - | <a href="research.html">Research</a>  | 
                    |
| 29 | 
                        - | <a href="people.html">People</a>  | 
                    |
| 30 | 
                        - </td>  | 
                    |
| 31 | 
                        - <td class="banner-right"></td>  | 
                    |
| 32 | 
                        - </tr>  | 
                    |
| 33 | 
                        -</table>  | 
                    |
| 34 | 
                        -  | 
                    |
| 35 | 
                        -<!-- END TITLE BAR & NAVIGATION -->  | 
                    |
| 36 | 
                        -  | 
                    |
| 37 | 
                        -<div class="center">  | 
                    |
| 38 | 
                        -  | 
                    |
| 39 | 
                        -<div class="main-column">  | 
                    |
| 40 | 
                        -  | 
                    |
| 41 | 
                        -<!-- PUT CONTENT AFTER THIS TAG -->  | 
                    |
| 42 | 
                        -  | 
                    |
| 43 | 
                        -<h2>Tor: Contribute</h2>  | 
                    |
| 44 | 
                        -<hr />  | 
                    |
| 45 | 
                        -  | 
                    |
| 46 | 
                        -<p>Ongoing needs:</p>  | 
                    |
| 47 | 
                        -<ul>  | 
                    |
| 48 | 
                        -<li>We need users like you to try Tor out, and let the Tor developers  | 
                    |
| 49 | 
                        -know about bugs you find or features you don't find.</li>  | 
                    |
| 50 | 
                        -<li>Please consider <a  | 
                    |
| 51 | 
                        -href="/cvs/tor/doc/tor-doc.html#server">running a  | 
                    |
| 52 | 
                        -server</a> to help the Tor network grow.</li>  | 
                    |
| 53 | 
                        -<li>We especially need people with Windows programming skills  | 
                    |
| 54 | 
                        -to run an exit server on Windows, to help us debug.</li>  | 
                    |
| 55 | 
                        -<li>Run a <a href="/cvs/tor/doc/tor-doc.html#hidden-service">Tor hidden  | 
                    |
| 56 | 
                        -service</a> and put interesting content on it.</li>  | 
                    |
| 57 | 
                        -<li>Tell your friends! Get them to run servers. Get them to run hidden  | 
                    |
| 58 | 
                        -services. Get them to tell <i>their</i> friends.</li>  | 
                    |
| 59 | 
                        -<li>What else needs to be documented? What is mis-documented?</li>  | 
                    |
| 60 | 
                        -<li>Consider joining the <a href="http://secure.eff.org/tor">Electronic  | 
                    |
| 61 | 
                        -Frontier Foundation</a>. More EFF donations means more freedom in the world,  | 
                    |
| 62 | 
                        -including more Tor development.</li>  | 
                    |
| 63 | 
                        -</ul>  | 
                    |
| 64 | 
                        -  | 
                    |
| 65 | 
                        -<p>We also have many project-lets: short-term or self-contained tasks  | 
                    |
| 66 | 
                        -that would be really helpful for somebody to tackle so we can keep  | 
                    |
| 67 | 
                        -focusing on Tor.</p>  | 
                    |
| 68 | 
                        -  | 
                    |
| 69 | 
                        -<p>Writing project-lets:</p>  | 
                    |
| 70 | 
                        -<ul>  | 
                    |
| 71 | 
                        -<li>Does somebody want to help maintain this website, or help with  | 
                    |
| 72 | 
                        -documentation, or help with managing our TODO and handling bug reports?</li>  | 
                    |
| 73 | 
                        -<li>We may have too <i>much</i> documentation. It's spread out too far  | 
                    |
| 74 | 
                        -and duplicates itself in places. Can you help us consolidate?</li>  | 
                    |
| 75 | 
                        -<li>Please help translate the web page and documentation  | 
                    |
| 76 | 
                        -into other languages. See the <a href="translation.html">translation guidelines</a>  | 
                    |
| 77 | 
                        -if you want to help out. (Examples:  | 
                    |
| 78 | 
                        -<a href="http://membres.lycos.fr/geolemalin/anonymat_garantit.htm">French</a>  | 
                    |
| 79 | 
                        -, <a href="http://tor.freesuperhost.com/">Persian</a> and  | 
                    |
| 80 | 
                        -<a href="http://www.gamevn.com/forum/showthread.php?t=103346">Vietnamese</a>.)</li>  | 
                    |
| 81 | 
                        -<li>Please fix up <a  | 
                    |
| 82 | 
                        -href="http://wiki.noreply.org/wiki/TheOnionRouter/TorFAQ">the FAQ Wiki</a>,  | 
                    |
| 83 | 
                        -and if you know the answer to a question in the "unanswered FAQs" list,  | 
                    |
| 84 | 
                        -please answer it.</li>  | 
                    |
| 85 | 
                        -</ul>  | 
                    |
| 86 | 
                        -  | 
                    |
| 87 | 
                        -<p>Packaging project-lets:</p>  | 
                    |
| 88 | 
                        -<ul>  | 
                    |
| 89 | 
                        -<li>We're always looking for better Windows installers. Specifically,  | 
                    |
| 90 | 
                        -it would be great if somebody were to extend our NSIS-based windows  | 
                    |
| 91 | 
                        -installer to include FreeCap and Privoxy.</li>  | 
                    |
| 92 | 
                        -<li>Our OS X installer can't be uninstalled. Are there non-sucky OS X  | 
                    |
| 93 | 
                        -packagers that have uninstall capabilities? This is becoming an  | 
                    |
| 94 | 
                        -increasing bother.</li>  | 
                    |
| 95 | 
                        -</ul>  | 
                    |
| 96 | 
                        -  | 
                    |
| 97 | 
                        -<p>Organizational and application testing project-lets:</p>  | 
                    |
| 98 | 
                        -<ul>  | 
                    |
| 99 | 
                        -<li>We've got a list of potentially useful programs you might  | 
                    |
| 100 | 
                        -run with Tor <a href="users.html">here</a>. We also have the <a  | 
                    |
| 101 | 
                        -href="http://wiki.noreply.org/wiki/TheOnionRouter/TorifyHOWTO">Torify  | 
                    |
| 102 | 
                        -howto</a>. Can somebody try them out, simplify the explanations, expand  | 
                    |
| 103 | 
                        -them where they need it, document them better, and make them all-around  | 
                    |
| 104 | 
                        -more useful?</li>  | 
                    |
| 105 | 
                        -</ul>  | 
                    |
| 106 | 
                        -  | 
                    |
| 107 | 
                        -<p>Programmer and developer project-lets:</p>  | 
                    |
| 108 | 
                        -<ul>  | 
                    |
| 109 | 
                        -<li>We need somebody to code up a GUI or other  | 
                    |
| 110 | 
                        -controller program, to do configuration, etc. See our <a  | 
                    |
| 111 | 
                        -href="/cvs/tor/doc/control-spec.txt">control specification</a> for details,  | 
                    |
| 112 | 
                        -and the <a href="/cvs/tor/contrib/TorControl.py">rudimentary demonstration  | 
                    |
| 113 | 
                        -Python control script</a>. No, we don't know what the interface should look  | 
                    |
| 114 | 
                        -like. You can use any license you want, but we'd recommend 3-clause BSD or  | 
                    |
| 115 | 
                        -maybe GPL; and we can only help out if your license conforms to the  | 
                    |
| 116 | 
                        -<a href="http://www.debian.org/social_contract.html#guidelines">DFSG</a>.</li>  | 
                    |
| 117 | 
                        -<li>Periodically people running servers tells us they want to have one  | 
                    |
| 118 | 
                        -BandwidthRate during some part of the day, and a different BandwidthRate  | 
                    |
| 119 | 
                        -at other parts of the day. Rather than coding this inside Tor, we should  | 
                    |
| 120 | 
                        -have a little script that speaks via the Tor Controller Interface, and does  | 
                    |
| 121 | 
                        -a setconf to change the bandwidth rate. Perhaps it would run out of cron,  | 
                    |
| 122 | 
                        -or perhaps it would sleep until appropriate times and then do its tweak  | 
                    |
| 123 | 
                        -(that's probably more portable). Can somebody write one for us and we'll  | 
                    |
| 124 | 
                        -put it inside <a href="/cvs/tor/contrib/">tor/contrib/</a>?</li>  | 
                    |
| 125 | 
                        -<li>Does somebody want to do up a patch so we can be an NT service? Or  | 
                    |
| 126 | 
                        -so we can go in the system tray?</li>  | 
                    |
| 127 | 
                        -<li>A good (portable, fast, clean, BSD-free) asynchronous DNS library  | 
                    |
| 128 | 
                        -would be really handy, so we don't have to keep forking DNS worker  | 
                    |
| 129 | 
                        -threads to do gethostbyname.</li>  | 
                    |
| 130 | 
                        -<li>Can somebody take a look at Martin's <a  | 
                    |
| 131 | 
                        -href="http://wiki.noreply.org/wiki/TheOnionRouter/SquidProxy">Squid  | 
                    |
| 132 | 
                        -and Tor</a> page, and update it to reflect Tor's  | 
                    |
| 133 | 
                        -<a href="http://tor.eff.org/tor-manual.html">RedirectExit</a> config  | 
                    |
| 134 | 
                        -option?</li>  | 
                    |
| 135 | 
                        -<li>See the <a href="/cvs/tor/doc/TODO">TODO</a> and  | 
                    |
| 136 | 
                        -<a href="/cvs/tor/doc/HACKING">HACKING</a> files in the Tor distribution  | 
                    |
| 137 | 
                        -for more ideas.</li>  | 
                    |
| 138 | 
                        -</ul>  | 
                    |
| 139 | 
                        -  | 
                    |
| 140 | 
                        -<p>Security project-lets: We need people to attack the implementation  | 
                    |
| 141 | 
                        -and clean it up, and also to attack the design and experiment with  | 
                    |
| 142 | 
                        -defenses.</p>  | 
                    |
| 143 | 
                        -<ul>  | 
                    |
| 144 | 
                        -<li>We need somebody to <a  | 
                    |
| 145 | 
                        -href="http://en.wikipedia.org/wiki/Fuzz_testing">fuzz</a> Tor. Are there  | 
                    |
| 146 | 
                        -good libraries out there for what we want? What are the first steps? Win  | 
                    |
| 147 | 
                        -fame by getting credit when we put out a new release because of you!</li>  | 
                    |
| 148 | 
                        -<li>Website volume fingerprinting attacks (<a  | 
                    |
| 149 | 
                        -href="http://freehaven.net/anonbib/#back01">Back et al</a>, <a  | 
                    |
| 150 | 
                        -href="http://freehaven.net/anonbib/#hintz02">Hintz</a>).  | 
                    |
| 151 | 
                        -Defenses include a large cell size, <a  | 
                    |
| 152 | 
                        -href="http://freehaven.net/anonbib/#timing-fc2004">defensive dropping</a>,  | 
                    |
| 153 | 
                        -etc. How well does each approach work?</li>  | 
                    |
| 154 | 
                        -<li>The end-to-end traffic confirmation attack. We need to study  | 
                    |
| 155 | 
                        -long-range dummies more, along with traffic shaping. How much traffic  | 
                    |
| 156 | 
                        -of what sort of distribution is needed before the adversary is confident  | 
                    |
| 157 | 
                        -he has won?</li>  | 
                    |
| 158 | 
                        -<li>It's not that hard to DoS Tor servers or dirservers. Are puzzles  | 
                    |
| 159 | 
                        -the right answer? What other practical approaches are there?</li>  | 
                    |
| 160 | 
                        -<li>What sensitive info squeaks by privoxy? Are other html scrubbers  | 
                    |
| 161 | 
                        -better?</li>  | 
                    |
| 162 | 
                        -</ul>  | 
                    |
| 163 | 
                        -  | 
                    |
| 164 | 
                        -<p>Designer project-lets:</p>  | 
                    |
| 165 | 
                        -<ul>  | 
                    |
| 166 | 
                        -<li>Server CPU load is high because clients keep asking to make new  | 
                    |
| 167 | 
                        -circuits, which uses public key crypto. Possible defenses include:  | 
                    |
| 168 | 
                        -using helper nodes (fixed entry nodes); rate limiting the number of  | 
                    |
| 169 | 
                        -create cells handled per second; having clients retry failed extensions  | 
                    |
| 170 | 
                        -a few times; implementing ssl sessions; and using hardware crypto when  | 
                    |
| 171 | 
                        -available.</li>  | 
                    |
| 172 | 
                        -<li>We fear we might not work very well when servers have asymmetric  | 
                    |
| 173 | 
                        -bandwidth. Because Tor has separate TCP connections between each hop,  | 
                    |
| 174 | 
                        -if the incoming bytes are arriving just fine and the outgoing bytes  | 
                    |
| 175 | 
                        -are all getting dropped on the floor, the TCP push-back mechanisms  | 
                    |
| 176 | 
                        -don't really transmit this information back to the incoming streams.  | 
                    |
| 177 | 
                        -Perhaps Tor should detect when it's dropping a lot of outgoing packets,  | 
                    |
| 178 | 
                        -and rate-limit incoming streams to regulate this itself? We need somebody  | 
                    |
| 179 | 
                        -who's good with networks to simulate this and help design solutions.</li>  | 
                    |
| 180 | 
                        -<li>Right now the hidden service descriptors are being stored on the  | 
                    |
| 181 | 
                        -dirservers, but any reliable distributed storage system would do (for  | 
                    |
| 182 | 
                        -example, a DHT that allows authenticated updates). Can somebody figure  | 
                    |
| 183 | 
                        -out our best options and decide if they're good enough?</li>  | 
                    |
| 184 | 
                        -<li>How hard is it to patch bind or a DNS proxy to redirect requests  | 
                    |
| 185 | 
                        -to Tor via our tor-resolve socks extension? What about to convert UDP  | 
                    |
| 186 | 
                        -DNS requests to TCP requests and send them through Tor?</li>  | 
                    |
| 187 | 
                        -<li>Tor provides anonymous connections, but if you want to keep multiple  | 
                    |
| 188 | 
                        -pseudonyms in practice (say, in case you frequently go to two websites  | 
                    |
| 189 | 
                        -and if anybody knew about both of them they would conclude it's you),  | 
                    |
| 190 | 
                        -we don't support that well yet. We should find a good approach and  | 
                    |
| 191 | 
                        -interface for handling pseudonymous profiles in Tor. See <a  | 
                    |
| 192 | 
                        -href="http://archives.seul.org/or/talk/Dec-2004/msg00086.html">this  | 
                    |
| 193 | 
                        -post</a> and <a  | 
                    |
| 194 | 
                        -href="http://archives.seul.org/or/talk/Jan-2005/msg00007.html">followup</a>  | 
                    |
| 195 | 
                        -for details.</li>  | 
                    |
| 196 | 
                        -</ul>  | 
                    |
| 197 | 
                        -  | 
                    |
| 198 | 
                        -<p>Drop by <a href="irc://irc.oftc.net/tor">the #tor IRC channel at irc.oftc.net</a> or  | 
                    |
| 199 | 
                        -<a href="mailto:tor-volunteer@freehaven.net">email  | 
                    |
| 200 | 
                        -tor-volunteer@freehaven.net</a> if you want to help out!</p>  | 
                    |
| 201 | 
                        -  | 
                    |
| 202 | 
                        -</div><!-- #main -->  | 
                    |
| 203 | 
                        -</div>  | 
                    |
| 204 | 
                        - <div class="bottom" id="bottom">  | 
                    |
| 205 | 
                        - <i><a href="mailto:tor-webmaster@freehaven.net" class="smalllink">Webmaster</a></i> -  | 
                    |
| 206 | 
                        - $Id$  | 
                    |
| 207 | 
                        - </div>  | 
                    |
| 208 | 
                        -</body>  | 
                    |
| 209 | 
                        -</html>  | 
                    |
| 210 | 0 |