Jens Kubieziel commited on 2008-09-04 17:45:00
Zeige 1 geänderte Dateien mit 26 Einfügungen und 362 Löschungen.
... | ... |
@@ -1,5 +1,5 @@ |
1 | 1 |
## translation metadata |
2 |
-# Based-On-Revision: 15882 |
|
2 |
+# Based-On-Revision: 16742 |
|
3 | 3 |
# Last-Translator: jens@kubieziel.de, peter@palfrader.org |
4 | 4 |
|
5 | 5 |
#include "head.wmi" TITLE="Tor: Mithelfen" |
... | ... |
@@ -135,73 +135,17 @@ |
135 | 135 |
<h2><a class="anchor" href="#Projects">Good Coding Projects</a></h2> |
136 | 136 |
|
137 | 137 |
<p> |
138 |
-You may find some of these projects to be good <a href="<page |
|
139 |
-gsoc>">Google Summer of Code 2008</a> ideas. We have labelled each idea |
|
140 |
-with how useful it would be to the overall Tor project |
|
141 |
-(priority), how much work we expect it would be (effort level), how much |
|
142 |
-clue you should start with (skill level), and which of our <a href="<page |
|
143 |
-people>#Core">core developers</a> would be good mentors. There are plenty |
|
144 |
-of other good ideas to work on too — see for example the <a |
|
145 |
-href="<svnsandbox>doc/spec/proposals/">current proposals</a> list, or |
|
146 |
-just make up your own ideas. |
|
138 |
+Here is a list of ideas that were proposed for the <a href="<page gsoc>">Google Summer of Code 2008</a> |
|
139 |
+but have not been put into practice. Some of the <a href="<svnsandbox>doc/spec/proposals/">current proposals</a> |
|
140 |
+might also be short on developers. If you think you can help out, <a href="<page contact>"> let us know!</a> |
|
147 | 141 |
</p> |
148 | 142 |
|
149 | 143 |
<ol> |
150 | 144 |
|
151 |
-<li> |
|
152 |
-<b>Tor Exit Scanner improvements</b> |
|
153 |
-<br /> |
|
154 |
-Priority: <i>High</i> |
|
155 |
-<br /> |
|
156 |
-Effort Level: <i>High</i> |
|
157 |
-<br /> |
|
158 |
-Skill Level: <i>High</i> |
|
159 |
-<br /> |
|
160 |
-Likely Mentors: <i>Mike</i> |
|
161 |
-<br /> |
|
162 |
-Applications as of 1 Apr 00:00 UTC: <i>5</i> |
|
163 |
-<br /> |
|
164 |
-The Tor exit node scanner 'SoaT', part of the <a |
|
165 |
-href="<svnsandbox>torflow/">Torflow project</a>, makes connections out |
|
166 |
-of each Tor exit node and compares the content it gets back with what it |
|
167 |
-"should" get back. The goal is to notice misconfigured, broken, and even |
|
168 |
-malicious exit relays. Alas, the code is |
|
169 |
-currently written in rather rickety perl and relies on MD5sums of |
|
170 |
-entire documents in order to determine if exit nodes are modifying |
|
171 |
-content. The problem with this is threefold: 1) Perl sucks at life. |
|
172 |
-2) The scanner can't verify pages that are dynamic, and attackers can |
|
173 |
-focus malicious content injection on only those dynamic pages. 3) |
|
174 |
-Pages change after a while (or based on GeoIP) and begin generating |
|
175 |
-false positives. |
|
176 |
-<br /> |
|
177 |
-Ideally, soat.pl would be reimplemented in a sane language with a |
|
178 |
-robust html parser library (since the rest of Torflow is in Python |
|
179 |
-that would be nice, but it is not required), and calculate signatures only for |
|
180 |
-tags and content likely to be targeted by a malicious attacker (script |
|
181 |
-tags, object links, images, css). It should also be robust in the face of |
|
182 |
-changes to content outside of Tor, and ultimately even GeoIP localized |
|
183 |
-content. |
|
184 |
-<br /> |
|
185 |
-This scanner would likely be run by the Directory Authorities and |
|
186 |
-report its results to the control port via the AuthDirBadExit config |
|
187 |
-setting. |
|
188 |
-<br /> |
|
189 |
-</li> |
|
190 |
- |
|
191 | 145 |
<li> |
192 | 146 |
<b>Tor Node Scanner improvements</b> |
193 | 147 |
<br /> |
194 |
-Priority: <i>High</i> |
|
195 |
-<br /> |
|
196 |
-Effort Level: <i>Medium to High</i> |
|
197 |
-<br /> |
|
198 |
-Skill Level: <i>Medium to High</i> |
|
199 |
-<br /> |
|
200 |
-Likely Mentors: <i>Mike</i> |
|
201 |
-<br /> |
|
202 |
-Applications as of 1 Apr 00:00 UTC: <i>1</i> |
|
203 |
-<br /> |
|
204 |
-Similar to the exit scanner (or perhaps even during exit scanning), |
|
148 |
+Similar to the SoaT exit scanner (or perhaps even during exit scanning), |
|
205 | 149 |
statistics can be gathered about the reliability of nodes. Nodes that |
206 | 150 |
fail too high a percentage of their circuits should not be given |
207 | 151 |
Guard status. Perhaps they should have their reported bandwidth |
... | ... |
@@ -228,14 +172,6 @@ currently does not exist and would need to be developed as well. |
228 | 172 |
<li> |
229 | 173 |
<b>Help track the overall Tor Network status</b> |
230 | 174 |
<br /> |
231 |
-Priority: <i>High</i> |
|
232 |
-<br /> |
|
233 |
-Effort Level: <i>Medium</i> |
|
234 |
-<br /> |
|
235 |
-Skill Level: <i>Medium</i> |
|
236 |
-<br /> |
|
237 |
-Likely Mentors: <i>Roger, Nick, Mike</i> |
|
238 |
-<br /> |
|
239 | 175 |
It would be great to set up an automated system for tracking network |
240 | 176 |
health over time, graphing it, etc. Part of this project would involve |
241 | 177 |
inventing better metrics for assessing network health and growth. Is the |
... | ... |
@@ -254,87 +190,9 @@ kept separate. Speaking of the Tor Status pages, take a look at Roger's |
254 | 190 |
Status wish list</a>. |
255 | 191 |
</li> |
256 | 192 |
|
257 |
-<li> |
|
258 |
-<b>Tor path selection improvements</b> |
|
259 |
-<br /> |
|
260 |
-Priority: <i>High</i> |
|
261 |
-<br /> |
|
262 |
-Effort Level: <i>Low to Medium</i> |
|
263 |
-<br /> |
|
264 |
-Skill Level: <i>High</i> |
|
265 |
-<br /> |
|
266 |
-Likely Mentors: <i>Roger, Nick, Mike</i> |
|
267 |
-<br /> |
|
268 |
-Applications as of 1 Apr 00:00 UTC: <i>3</i> |
|
269 |
-<br /> |
|
270 |
-Some simple improvements can be made to Tor's path selection to vastly |
|
271 |
-improve Tor speed. For instance, some of the (unofficial) <a |
|
272 |
-href="http://wiki.noreply.org/noreply/TheOnionRouter/FireFoxTorPerf">Tor |
|
273 |
-Performance Recommendations</a> on the wiki are to increase the number of |
|
274 |
-guards and decrease the CircuitBuildTimeout. Ideally, the client would |
|
275 |
-<a href="http://archives.seul.org/or/talk/Feb-2008/msg00012.html">learn |
|
276 |
-these values by gathering statistics on circuit construction |
|
277 |
-time</a> (and/or using values gained from Torflow), and set the timeouts |
|
278 |
-low enough such that some high percentile (75%, 90%, 1-stddev?) of |
|
279 |
-circuits succeed, yet extremely slow nodes are avoided. This would |
|
280 |
-involve some statistics gathering+basic research, and some changes to |
|
281 |
-Tor path selection code. |
|
282 |
-<br /> |
|
283 |
-In addition, to improve path security, some elements from the <a |
|
284 |
-href="http://www.torproject.org/svn/trunk/doc/spec/proposals/115-two-hop-paths.txt">Two |
|
285 |
-Hop Paths proposal</a> could be done as part of this (since it will |
|
286 |
-likely touch the same code anyways), regardless of the adoption of |
|
287 |
-that proposal. In particular, clients probably should avoid guards that |
|
288 |
-seem to fail an excessive percentage of their circuits through them, |
|
289 |
-and non-firewalled clients should issue a warning if they are only able |
|
290 |
-to connect to a limited set of guard nodes. See also |
|
291 |
-<a href="http://archives.seul.org/or/dev/Feb-2008/msg00003.html">this |
|
292 |
-or-dev post</a>. |
|
293 |
-</li> |
|
294 |
- |
|
295 |
-<li> |
|
296 |
-<b>Translation Wiki</b> |
|
297 |
-<br /> |
|
298 |
-Priority: <i>High</i> |
|
299 |
-<br /> |
|
300 |
-Effort Level: <i>Medium</i> |
|
301 |
-<br /> |
|
302 |
-Skill Level: <i>Medium</i> |
|
303 |
-<br /> |
|
304 |
-Likely Mentors: <i>Jacob</i> |
|
305 |
-<br /> |
|
306 |
-We need a way to edit and translate sections of the website. Currently |
|
307 |
-the website is made up of a bunch of <a href="<svnwebsite>en/">wml |
|
308 |
-files</a>, and <a href="<page translation>">translators</a> fetch these |
|
309 |
-wml files, translate them in an editor, and either send us the translation |
|
310 |
-or use svn to commit them back. The current "cost" of publication of |
|
311 |
-website changes is quite high even for English language users. For a |
|
312 |
-single word change or any type of |
|
313 |
-minor change, the page may never be corrected or translated. It would |
|
314 |
-be nice to have a wiki that was specifically geared towards translation |
|
315 |
-and would somehow track the upstream (English) versions to indicate when |
|
316 |
-a fresh translation is needed, like our current |
|
317 |
-<a href="<page translation-status>">translation status page</a>. This |
|
318 |
-seems mostly like a job for a wiki |
|
319 |
-integrator or wiki software author. Certainly the person would need to |
|
320 |
-be interested in human languages and translation. They should at least |
|
321 |
-be minimally familiar with what Tor is; but they would not have to interact |
|
322 |
-with the software, only the documentation and the website. |
|
323 |
-</li> |
|
324 |
- |
|
325 | 193 |
<li> |
326 | 194 |
<b>Better Debian/Ubuntu Packaging for Tor+Vidalia</b> |
327 | 195 |
<br /> |
328 |
-Priority: <i>High</i> |
|
329 |
-<br /> |
|
330 |
-Effort Level: <i>Medium</i> |
|
331 |
-<br /> |
|
332 |
-Skill Level: <i>Medium</i> |
|
333 |
-<br /> |
|
334 |
-Likely Mentors: <i>Peter, Matt</i> |
|
335 |
-<br /> |
|
336 |
-Applications as of 1 Apr 00:00 UTC: <i>1</i> |
|
337 |
-<br /> |
|
338 | 196 |
Vidalia currently doesn't play nicely on Debian and Ubuntu with the |
339 | 197 |
default Tor packages. The current Tor packages automatically start Tor |
340 | 198 |
as a daemon running as the debian-tor user and (sensibly) do not have a |
... | ... |
@@ -371,7 +229,7 @@ we've come up with is for Vidalia to write out a temporary torrc file |
371 | 229 |
and ask the user to manually move it to <code>/etc/tor/torrc</code>, |
372 | 230 |
but that's bad because users shouldn't have to mess with files directly. |
373 | 231 |
<br /> |
374 |
-A student undertaking this project should have prior knowledge of |
|
232 |
+A person undertaking this project should have prior knowledge of |
|
375 | 233 |
Debian package management and some C++ development experience. Previous |
376 | 234 |
experience with Qt is helpful, but not required. |
377 | 235 |
</li> |
... | ... |
@@ -379,14 +237,6 @@ experience with Qt is helpful, but not required. |
379 | 237 |
<li> |
380 | 238 |
<b>Improving Tor's ability to resist censorship</b> |
381 | 239 |
<br /> |
382 |
-Priority: <i>High</i> |
|
383 |
-<br /> |
|
384 |
-Effort Level: <i>High</i> |
|
385 |
-<br /> |
|
386 |
-Skill Level: <i>High</i> |
|
387 |
-<br /> |
|
388 |
-Likely Mentors: <i>Nick</i> |
|
389 |
-<br /> |
|
390 | 240 |
The Tor 0.2.0.x series makes <a |
391 | 241 |
href="<svnsandbox>doc/design-paper/blocking.html">significant |
392 | 242 |
improvements</a> in resisting national and organizational censorship. |
... | ... |
@@ -414,14 +264,6 @@ then trading off censorship resistance with usability and robustness. |
414 | 264 |
<li> |
415 | 265 |
<b>Tor/Polipo/Vidalia Auto-Update Framework</b> |
416 | 266 |
<br /> |
417 |
-Priority: <i>Medium</i> |
|
418 |
-<br /> |
|
419 |
-Effort Level: <i>High</i> |
|
420 |
-<br /> |
|
421 |
-Skill Level: <i>High</i> |
|
422 |
-<br /> |
|
423 |
-Likely Mentors: <i>Matt, Jacob</i> |
|
424 |
-<br /> |
|
425 | 267 |
We're in need of a good authenticated-update framework. |
426 | 268 |
Vidalia already has the ability to notice when the user is running an |
427 | 269 |
outdated or unrecommended version of Tor, using signed statements inside |
... | ... |
@@ -444,26 +286,18 @@ then discuss the design with other developers to assess any security |
444 | 286 |
issues. The student will then implement their framework (or integrate |
445 | 287 |
an existing one) and test it. |
446 | 288 |
<br /> |
447 |
-A student undertaking this project should have good C++ development |
|
448 |
-experience. Previous experience with Qt is helpful, but not required. The |
|
449 |
-student should also have a good understanding of common security |
|
289 |
+A person undertaking this project should have good C++ development |
|
290 |
+experience. Previous experience with Qt is helpful, but not required. One |
|
291 |
+should also have a good understanding of common security |
|
450 | 292 |
practices, such as package signature verification. Good writing ability |
451 | 293 |
is also important for this project, since a vital step of the project |
452 |
-will be producing a design document for others to review and discuss |
|
453 |
-with the student prior to implementation. |
|
294 |
+will be producing a design document to review and discuss |
|
295 |
+with others prior to implementation. |
|
454 | 296 |
</li> |
455 | 297 |
|
456 | 298 |
<li> |
457 | 299 |
<b>An Improved and More Usable Network Map in Vidalia</b> |
458 | 300 |
<br /> |
459 |
-Priority: <i>Medium</i> |
|
460 |
-<br /> |
|
461 |
-Effort Level: <i>Medium</i> |
|
462 |
-<br /> |
|
463 |
-Skill Level: <i>Medium to High</i> |
|
464 |
-<br /> |
|
465 |
-Likely Mentors: <i>Matt</i> |
|
466 |
-<br /> |
|
467 | 301 |
One of Vidalia's existing features is a network map that shows the user |
468 | 302 |
the approximate geographic location of relays in the Tor network and |
469 | 303 |
plots the paths the user's traffic takes as it is tunneled through the |
... | ... |
@@ -476,13 +310,13 @@ for users to click on a particular relay or a country containing one or |
476 | 310 |
more Tor exit relays and say, "I want my connections to foo.com to exit |
477 | 311 |
from here." |
478 | 312 |
<br /> |
479 |
-This project will first involve the student getting familiar with Vidalia |
|
480 |
-and the Marble widget's API. The student will then integrate the widget |
|
313 |
+This project will first involve getting familiar with Vidalia |
|
314 |
+and the Marble widget's API. One will then integrate the widget |
|
481 | 315 |
into Vidalia and customize Marble to be better suited for our application, |
482 | 316 |
such as making circuits clickable, storing cached map data in Vidalia's |
483 | 317 |
own data directory, and customizing some of the widget's dialogs. |
484 | 318 |
<br /> |
485 |
-A student undertaking this project should have good C++ development |
|
319 |
+A person undertaking this project should have good C++ development |
|
486 | 320 |
experience. Previous experience with Qt and CMake is helpful, but not |
487 | 321 |
required. |
488 | 322 |
</li> |
... | ... |
@@ -490,14 +324,6 @@ required. |
490 | 324 |
<li> |
491 | 325 |
<b>Tor Controller Status Event Interface</b> |
492 | 326 |
<br /> |
493 |
-Priority: <i>Medium</i> |
|
494 |
-<br /> |
|
495 |
-Effort Level: <i>Medium</i> |
|
496 |
-<br /> |
|
497 |
-Skill Level: <i>Medium</i> |
|
498 |
-<br /> |
|
499 |
-Likely Mentors: <i>Matt, Roger</i> |
|
500 |
-<br /> |
|
501 | 327 |
There are a number of status changes inside Tor of which the user may need |
502 | 328 |
to be informed. For example, if the user is trying to set up his Tor as a |
503 | 329 |
relay and Tor decides that its ports are not reachable from outside |
... | ... |
@@ -518,10 +344,10 @@ little badge on Vidalia's tray icon that alerts the user to new status |
518 | 344 |
events they should look at. Double-clicking the icon could bring up a |
519 | 345 |
dialog that summarizes recent status events in simple terms and maybe |
520 | 346 |
suggests a remedy for any negative events if they can be corrected by |
521 |
-the user. Of course, this is just an example and the student is free to |
|
347 |
+the user. Of course, this is just an example and one is free to |
|
522 | 348 |
suggest another approach. |
523 | 349 |
<br /> |
524 |
-A student undertaking this project should have good UI design and layout |
|
350 |
+A person undertaking this project should have good UI design and layout |
|
525 | 351 |
and some C++ development experience. Previous experience with Qt and |
526 | 352 |
Qt's Designer will be very helpful, but are not required. Some |
527 | 353 |
English writing ability will also be useful, since this project will |
... | ... |
@@ -534,16 +360,6 @@ design/Photoshop fu, since we might want/need some shiny new icons too. |
534 | 360 |
<b>Improvements on our active browser configuration tester</b> - |
535 | 361 |
<a href="https://check.torproject.org/">https://check.torproject.org/</a> |
536 | 362 |
<br /> |
537 |
-Priority: <i>Medium</i> |
|
538 |
-<br /> |
|
539 |
-Effort Level: <i>Low</i> |
|
540 |
-<br /> |
|
541 |
-Skill Level: <i>Low to Medium</i> |
|
542 |
-<br /> |
|
543 |
-Likely Mentors: <i>Jacob, Steven</i> |
|
544 |
-<br /> |
|
545 |
-Applications as of 1 Apr 00:00 UTC: <i>1</i> |
|
546 |
-<br /> |
|
547 | 363 |
We currently have a functional web page to detect if Tor is working. It |
548 | 364 |
has a few places where it falls short. It requires improvements with |
549 | 365 |
regard to default languages and functionality. It currently only responds |
... | ... |
@@ -567,14 +383,6 @@ href="<svnsandbox>doc/spec/proposals/131-verify-tor-usage.txt">proposal |
567 | 383 |
<b>Improvements on our DNS Exit List service</b> - |
568 | 384 |
<a href="http://exitlist.torproject.org/">http://exitlist.torproject.org/</a> |
569 | 385 |
<br /> |
570 |
-Priority: <i>Medium</i> |
|
571 |
-<br /> |
|
572 |
-Effort Level: <i>Low</i> |
|
573 |
-<br /> |
|
574 |
-Skill Level: <i>Low</i> |
|
575 |
-<br /> |
|
576 |
-Likely Mentors: <i>Jacob, Tup</i> |
|
577 |
-<br /> |
|
578 | 386 |
The <a href="http://p56soo2ibjkx23xo.onion/">exitlist software</a> |
579 | 387 |
is written by our fabulous anonymous |
580 | 388 |
contributer Tup. It's a DNS server written in Haskell that supports part of our <a |
... | ... |
@@ -595,16 +403,6 @@ torel-design.txt suggestions. |
595 | 403 |
<li> |
596 | 404 |
<b>Testing integration of Tor with web browsers for our end users</b> |
597 | 405 |
<br /> |
598 |
-Priority: <i>Medium</i> |
|
599 |
-<br /> |
|
600 |
-Effort Level: <i>Medium</i> |
|
601 |
-<br /> |
|
602 |
-Skill Level: <i>Medium</i> |
|
603 |
-<br /> |
|
604 |
-Likely Mentors: <i>Jacob, Mike, Greg</i> |
|
605 |
-<br /> |
|
606 |
-Applications as of 1 Apr 00:00 UTC: <i>1</i> |
|
607 |
-<br /> |
|
608 | 406 |
The Tor project currently lacks a solid test suite to ensure that a |
609 | 407 |
user has a properly and safely configured web browser. It should test for as |
610 | 408 |
many known issues as possible. It should attempt to decloak the |
... | ... |
@@ -613,29 +411,20 @@ kinds of issues are run by Greg Fleischer and HD Moore. Greg keeps a nice <a |
613 | 411 |
href="http://pseudo-flaw.net/tor/torbutton/">list of issues along |
614 | 412 |
with their proof of concept code, bug issues, etc</a>. HD Moore runs |
615 | 413 |
the <a href="http://metasploit.com/research/projects/decloak/">metasploit |
616 |
-decloak website</a>. A student interested in defending Tor could start |
|
414 |
+decloak website</a>. A person interested in defending Tor could start |
|
617 | 415 |
by collecting as many workable and known methods for decloaking a |
618 | 416 |
Tor user. (<a href="https://torcheck.xenobite.eu/">This page</a> may |
619 |
-be helpful as a start.) The student should be familiar with the common |
|
620 |
-pitfalls but |
|
417 |
+be helpful as a start.) One should be familiar with the common pitfalls but |
|
621 | 418 |
possibly have new methods in mind for implementing decloaking issues. The |
622 | 419 |
website should ensure that it tells a user what their problem is. It |
623 | 420 |
should help them to fix the problem or direct them to the proper support |
624 |
-channels. The student should be closely familiar with using Tor and how |
|
421 |
+channels. The person should also be closely familiar with using Tor and how |
|
625 | 422 |
to prevent Tor information leakage. |
626 | 423 |
</li> |
627 | 424 |
|
628 | 425 |
<li> |
629 | 426 |
<b>Libevent and Tor integration improvements</b> |
630 | 427 |
<br /> |
631 |
-Priority: <i>Medium</i> |
|
632 |
-<br /> |
|
633 |
-Effort Level: <i>High</i> |
|
634 |
-<br /> |
|
635 |
-Skill Level: <i>Medium to High</i> |
|
636 |
-<br /> |
|
637 |
-Likely Mentors: <i>Nick</i> |
|
638 |
-<br /> |
|
639 | 428 |
Tor should make better use of the more recent features of Niels |
640 | 429 |
Provos's <a href="http://monkey.org/~provos/libevent/">Libevent</a> |
641 | 430 |
library. Tor already uses Libevent for its low-level asynchronous IO |
... | ... |
@@ -652,14 +441,6 @@ Also tricky will be adding rate-limiting to Libevent. |
652 | 441 |
<li> |
653 | 442 |
<b>Tuneup Tor!</b> |
654 | 443 |
<br /> |
655 |
-Priority: <i>Medium</i> |
|
656 |
-<br /> |
|
657 |
-Effort Level: <i>Medium</i> |
|
658 |
-<br /> |
|
659 |
-Skill Level: <i>Medium to High</i> |
|
660 |
-<br /> |
|
661 |
-Likely Mentors: <i>Nick, Roger, Mike</i> |
|
662 |
-<br /> |
|
663 | 444 |
Right now, Tor relays measure and report their own bandwidth, and Tor |
664 | 445 |
clients choose which relays to use in part based on that bandwidth. |
665 | 446 |
This approach is vulnerable to |
... | ... |
@@ -672,7 +453,7 @@ Tor should possibly measure bandwidth in a more distributed way, perhaps |
672 | 453 |
as described in the |
673 | 454 |
<a href="http://freehaven.net/anonbib/author.html#snader08">"A Tune-up for |
674 | 455 |
Tor"</a> paper |
675 |
-by Snader and Borisov. A student could use current testing code to |
|
456 |
+by Snader and Borisov. One could use current testing code to |
|
676 | 457 |
double-check this paper's findings and verify the extent to which they |
677 | 458 |
dovetail with Tor as deployed in the wild, and determine good ways to |
678 | 459 |
incorporate them into their suggestions Tor network without adding too |
... | ... |
@@ -684,14 +465,6 @@ authorities. |
684 | 465 |
<li> |
685 | 466 |
<b>Improving the Tor QA process: Continuous Integration for Windows builds</b> |
686 | 467 |
<br /> |
687 |
-Priority: <i>High</i> |
|
688 |
-<br /> |
|
689 |
-Effort Level: <i>Medium</i> |
|
690 |
-<br /> |
|
691 |
-Skill Level: <i>Medium</i> |
|
692 |
-<br /> |
|
693 |
-Likely Mentors: <i>Jacob, Andrew</i> |
|
694 |
-<br /> |
|
695 | 468 |
It would be useful to have automated build processes for Windows and |
696 | 469 |
probably other platforms. The purpose of having a continuous integration |
697 | 470 |
build environment is to ensure that Windows isn't left behind for any of |
... | ... |
@@ -721,14 +494,6 @@ changes in performance on machines in different roles automatically. |
721 | 494 |
<li> |
722 | 495 |
<b>Improve our unit testing process</b> |
723 | 496 |
<br /> |
724 |
-Priority: <i>Medium</i> |
|
725 |
-<br /> |
|
726 |
-Effort Level: <i>Medium</i> |
|
727 |
-<br /> |
|
728 |
-Skill Level: <i>Medium</i> |
|
729 |
-<br /> |
|
730 |
-Likely Mentors: <i>Nick</i> |
|
731 |
-<br /> |
|
732 | 497 |
Tor needs to be far more tested. This is a multi-part effort. To start |
733 | 498 |
with, our unit test coverage should rise substantially, especially in |
734 | 499 |
the areas outside the utility functions. This will require significant |
... | ... |
@@ -748,16 +513,6 @@ changes in performance on machines in different roles automatically. |
748 | 513 |
<li> |
749 | 514 |
<b>Help revive an independent Tor client implementation</b> |
750 | 515 |
<br /> |
751 |
-Priority: <i>Medium</i> |
|
752 |
-<br /> |
|
753 |
-Effort Level: <i>High</i> |
|
754 |
-<br /> |
|
755 |
-Skill Level: <i>Medium to High</i> |
|
756 |
-<br /> |
|
757 |
-Likely Mentors: <i>Karsten, Nick</i> |
|
758 |
-<br /> |
|
759 |
-Applications as of 1 Apr 00::00 UTC: <i>4</i> |
|
760 |
-<br /> |
|
761 | 516 |
Reanimate one of the approaches to implement a Tor client in Java, |
762 | 517 |
e.g. the <a href="http://onioncoffee.sourceforge.net/">OnionCoffee |
763 | 518 |
project</a>, and make it run on <a |
... | ... |
@@ -768,59 +523,17 @@ protocol versions like the <a href="<svnsandbox>doc/spec/dir-spec.txt">v3 |
768 | 523 |
directory protocol</a>. Further, support for requesting or even |
769 | 524 |
providing Tor hidden services would be neat, but not required. |
770 | 525 |
<br /> |
771 |
-The student should be able to understand and write new Java code, including |
|
526 |
+A perspective developer should be able to understand and write new Java code, including |
|
772 | 527 |
a Java cryptography API. Being able to read C code would be helpful, |
773 |
-too. The student should be willing to read the existing documentation, |
|
528 |
+too. One should be willing to read the existing documentation, |
|
774 | 529 |
implement code based on it, and refine the documentation |
775 | 530 |
when things are underdocumented. This project is mostly about coding and |
776 | 531 |
to a small degree about design. |
777 | 532 |
</li> |
778 | 533 |
|
779 |
-<li> |
|
780 |
-<b>Automatic system tests and automatically starting private Tor networks</b> |
|
781 |
-<br /> |
|
782 |
-Priority: <i>Medium</i> |
|
783 |
-<br /> |
|
784 |
-Effort Level: <i>Medium</i> |
|
785 |
-<br /> |
|
786 |
-Skill Level: <i>Medium</i> |
|
787 |
-<br /> |
|
788 |
-Likely Mentors: <i>Karsten, Nick, Roger</i> |
|
789 |
-<br /> |
|
790 |
-Applications as of 1 Apr 00:00 UTC: <i>2</i> |
|
791 |
-<br /> |
|
792 |
-Write a tool that runs automatic system tests in addition |
|
793 |
-to the existing unit tests. The Java-based Tor simulator <a |
|
794 |
-href="https://svn.torproject.org/svn/puppetor/trunk/">PuppeTor</a> |
|
795 |
-might be a good start for starting up a private Tor network, using it |
|
796 |
-for a while, and verifying that at least parts of it are working. This |
|
797 |
-project requires to conceive a blueprint for performing system tests |
|
798 |
-of private Tor networks, before starting to code. Typical types of |
|
799 |
-tests range from performing single requests over the private network to |
|
800 |
-manipulating exchanged messages and see if nodes handle corrupt messages |
|
801 |
-appropriately. |
|
802 |
-<br /> |
|
803 |
-The student should be able to obtain a good understanding |
|
804 |
-of how Tor works and what problems and bugs could arise to design good |
|
805 |
-test cases. Understanding the existing Tor code structure and documentation is |
|
806 |
-vital. If PuppeTor is used, the student should also be able to understand |
|
807 |
-and possibly extend an existing Java application. This project is partly |
|
808 |
-about design and partly about coding. |
|
809 |
-</li> |
|
810 |
- |
|
811 | 534 |
<li> |
812 | 535 |
<b>Bring moniTor to life</b> |
813 | 536 |
<br /> |
814 |
-Priority: <i>Medium</i> |
|
815 |
-<br /> |
|
816 |
-Effort Level: <i>Medium</i> |
|
817 |
-<br /> |
|
818 |
-Skill Level: <i>Low to Medium</i> |
|
819 |
-<br /> |
|
820 |
-Likely Mentors: <i>Karsten, Jacob</i> |
|
821 |
-<br /> |
|
822 |
-Applications as of 1 Apr 00::00 UTC: <i>2</i> |
|
823 |
-<br /> |
|
824 | 537 |
Implement a <a href="http://www.ss64.com/bash/top.html">top-like</a> |
825 | 538 |
management tool for Tor relays. The purpose of such a tool would be |
826 | 539 |
to monitor a local Tor relay via its control port and include useful |
... | ... |
@@ -829,7 +542,7 @@ would dynamically update its content like top does for Linux processes. |
829 | 542 |
<a href="http://archives.seul.org/or/dev/Jan-2008/msg00005.html">This |
830 | 543 |
or-dev post</a> might be a good first read. |
831 | 544 |
<br /> |
832 |
-The student should be familiar |
|
545 |
+A person interested in this should be familiar |
|
833 | 546 |
with or willing to learn about administering a Tor relay and configuring |
834 | 547 |
it via its control port. As an initial prototype is written in Python, |
835 | 548 |
some knowledge about writing Python code would be helpful, too. This |
... | ... |
@@ -840,14 +553,6 @@ tool and designing its interface, and one part lots of coding. |
840 | 553 |
<li> |
841 | 554 |
<b>Torbutton improvements</b> |
842 | 555 |
<br /> |
843 |
-Priority: <i>Medium</i> |
|
844 |
-<br /> |
|
845 |
-Effort Level: <i>High</i> |
|
846 |
-<br /> |
|
847 |
-Skill Level: <i>High</i> |
|
848 |
-<br /> |
|
849 |
-Likely Mentors: <i>Mike</i> |
|
850 |
-<br/> |
|
851 | 556 |
Torbutton has a number of improvements that can be made in the post-1.2 |
852 | 557 |
timeframe. Most of these are documented as feature requests in the <a |
853 | 558 |
href="https://bugs.torproject.org/flyspray/index.php?tasks=all&project=5">Torbutton |
... | ... |
@@ -867,14 +572,6 @@ with not too much involvement in the Tor internals. |
867 | 572 |
<li> |
868 | 573 |
<b>Porting Polipo to Windows</b> |
869 | 574 |
<br /> |
870 |
-Priority: <i>Medium</i> |
|
871 |
-<br /> |
|
872 |
-Effort Level: <i>Medium</i> |
|
873 |
-<br /> |
|
874 |
-Skill Level: <i>Medium to High</i> |
|
875 |
-<br /> |
|
876 |
-Likely Mentors: <i>Andrew, Steven, Roger</i> |
|
877 |
-<br /> |
|
878 | 575 |
Help port <a |
879 | 576 |
href="http://www.pps.jussieu.fr/~jch/software/polipo/">Polipo</a> to |
880 | 577 |
Windows. Example topics to tackle include: |
... | ... |
@@ -894,34 +591,17 @@ menu options. Double bonus if it's cross-platform compatible. |
894 | 591 |
<li> |
895 | 592 |
<b>Make our diagrams beautiful and automated</b> |
896 | 593 |
<br /> |
897 |
-Priority: <i>Medium</i> |
|
898 |
-<br /> |
|
899 |
-Effort Level: <i>Low</i> |
|
900 |
-<br /> |
|
901 |
-Skill Level: <i>Low</i> |
|
902 |
-<br /> |
|
903 |
-Likely Mentors: <i>Andrew</i> |
|
904 |
-<br /> |
|
905 | 594 |
We need a way to generate the website diagrams (for example, the "How |
906 | 595 |
Tor Works" pictures on the <a href="<page overview>">overview page</a> |
907 | 596 |
from source, so we can translate them as UTF-8 text rather than edit |
908 | 597 |
them by hand with Gimp. We might want to |
909 | 598 |
integrate this as an wml file so translations are easy and images are |
910 |
-generated in multiple languages whenever we build the website. See the |
|
911 |
-"Translation Wiki" idea above. |
|
599 |
+generated in multiple languages whenever we build the website. |
|
912 | 600 |
</li> |
913 | 601 |
|
914 | 602 |
<li> |
915 | 603 |
<b>Improve the LiveCD offerings for the Tor community</b> |
916 | 604 |
<br /> |
917 |
-Priority: <i>Low</i> |
|
918 |
-<br /> |
|
919 |
-Effort Level: <i>Low</i> |
|
920 |
-<br /> |
|
921 |
-Skill Level: <i>Medium to High</i> |
|
922 |
-<br /> |
|
923 |
-Likely Mentors: <i>Anonym, Jacob, Roger</i> |
|
924 |
-<br /> |
|
925 | 605 |
How can we make the <a |
926 | 606 |
href="http://anonymityanywhere.com/incognito/">Incognito LiveCD</a> |
927 | 607 |
easier to maintain, improve, and document? |
... | ... |
@@ -930,14 +610,6 @@ easier to maintain, improve, and document? |
930 | 610 |
<li> |
931 | 611 |
<b>Rework and extend Blossom</b> |
932 | 612 |
<br /> |
933 |
-Priority: <i>Medium</i> |
|
934 |
-<br /> |
|
935 |
-Effort Level: <i>Medium to High</i> |
|
936 |
-<br /> |
|
937 |
-Skill Level: <i>Medium to High</i> |
|
938 |
-<br /> |
|
939 |
-Likely Mentors: <i>Goodell</i> |
|
940 |
-<br /> |
|
941 | 613 |
Rework and extend Blossom (a tool for monitoring and |
942 | 614 |
selecting appropriate Tor circuits based upon exit node requirements |
943 | 615 |
specified by the user) to gather data in a self-contained way, with |
... | ... |
@@ -962,14 +634,6 @@ the core of the Blossom effort. |
962 | 634 |
<li> |
963 | 635 |
<b>Improve Blossom: Allow users to qualitatively describe exit nodes they desire</b> |
964 | 636 |
<br /> |
965 |
-Priority: <i>Low</i> |
|
966 |
-<br /> |
|
967 |
-Effort Level: <i>Medium</i> |
|
968 |
-<br /> |
|
969 |
-Skill Level: <i>Medium</i> |
|
970 |
-<br /> |
|
971 |
-Likely Mentors: <i>Goodell</i> |
|
972 |
-<br /> |
|
973 | 637 |
Develop and implement a means of affording Blossom |
974 | 638 |
users the ability to qualitatively describe the exit node that they |
975 | 639 |
want. The Internet is an inconsistent place: some Tor exit nodes see |
... | ... |
@@ -1002,7 +666,7 @@ roadmap</a> for more ideas. |
1002 | 666 |
|
1003 | 667 |
</ol> |
1004 | 668 |
|
1005 |
-<h2><a class="anchor" href="#Coding">Programmierung und Design</a></h2> |
|
669 |
+<h2><a class="anchor" href="#Coding">Andere Ideen zu Programmierung und Design</a></h2> |
|
1006 | 670 |
|
1007 | 671 |
<ol> |
1008 | 672 |
<li>Torserver funktionieren unter Windows XP nicht sehr gut. Wir |
... | ... |
@@ -1201,7 +865,7 @@ roadmap</a> for more ideas. |
1201 | 865 |
Bonuspunkte, wenn diese mit dem aktuellen Tor-Protokoll abw�rtskompatibel |
1202 | 866 |
sind.</li> |
1203 | 867 |
<li>Programme, wie <a |
1204 |
- href="https://torbutton.torproject.org/dev/">Torbutton</a>, |
|
868 |
+ href="<page torbutton>">Torbutton</a>, |
|
1205 | 869 |
versuchen den User-Agent des Browsers zu verstecken, indem sie |
1206 | 870 |
diesen durch eine gew�hnliche Angabe ersetzen. Dadurch kann ein |
1207 | 871 |
Angreifer Tor-Nutzer nicht durch einen Blick auf die |
1208 | 872 |