tor-webwml.git

@@ -54,6 +54,8 @@ href="cvs/tor/doc/tor-doc.html#server">running a

 server</a> to help with development and scalability.</li>

 <li>Does somebody want to help maintain this website, or help with

 documentation, or help with managing our TODO and handling bug reports?</li>

+<li>It would be nice to translate the documentation and other web pages

+into other languages. (E.g. <a href="http://tor.freesuperhost.com/">Persian</a>)</li>

 <li>Please fix up <a

 href="http://wiki.noreply.org/wiki/TheOnionRouter/TorFAQ">the FAQ Wiki</a>,

 and if you know the answer to a question in the "unanswered FAQs" list,

@@ -109,8 +109,13 @@ more people volunteer to run servers.  Please consider <a

 href="cvs/tor/doc/tor-doc.html#installing">installing it</a> and then

 <a href="cvs/tor/doc/tor-doc.html#server">helping out</a>. You can also

 <a href="documentation.html">learn more about Tor here</a>.

-We also welcome research into the security of Tor and related anonymity

-systems, and want to hear about any vulnerabilities you find.

+</p>

+

+<p>

+Part of the goal of the Tor project is to deploy a public testbed for

+experimenting with design trade-offs, to teach us how best to provide

+privacy online. We welcome research into the security of Tor and related

+anonymity systems, and want to hear about any vulnerabilities you find.

 </p>

 <p>

@@ -47,7 +47,24 @@ href="http://freehaven.net/anonbib/topic.html#Anonymous_20communication">these

 papers</a> (especially the ones in boxes) to get up to speed on anonymous

 communication systems.</p>

-<p>More here coming soon.</p>

+<p>We need people to attack the system, quantify defenses, etc. For example:

+</p>

+<ul>

+<li>Website volume fingerprinting attacks (<a

+href="http://freehaven.net/anonbib/#back01">Back et al</a>, <a

+href="http://freehaven.net/anonbib/#hintz02">Hintz</a>).

+Defenses include a large cell size, <a

+href="http://freehaven.net/anonbib/#timing-fc2004">defensive dropping</a>,

+etc. How well does each approach work?</li>

+<li>The end-to-end traffic confirmation attack. We need to study

+long-range dummies more, along with traffic shaping. How much traffic

+of what sort of distribution is needed before the adversary is confident

+he has won?</li>

+<li>It's not that hard to DoS Tor servers or dirservers. Are puzzles

+the right answer? What other practical approaches are there?</li>

+<li>What sensitive info squeaks by privoxy? Are other html scrubbers

+better?</li>

+</ul>

   </div><!-- #main -->

 </div>