zerotracepen (5.1)

  • Upgrade to Thunderbird 91.9.0

    • Upgrade to Tor Browser 11.0.14 based on Firefox 91.10 (zerotracepen/zerotracepen!852)

    Closes issues:

    • Upgrade to Tor Browser 11.0.14 based on Firefox 91.10 (zerotracepen/zerotracepen#18979)

    Commits:

    • htpdate: replace tachanka.org with www.autistici.org
    • Mark security advisory against 5.0 as fixed
    • Fetch Tor Browser from our own archive
    • Upgrade Tor Browser to 11.0.14-build1
    • Resolve "displayed_time_str fails in test suite" (zerotracepen/zerotracepen!839)

    Closes issues:

    • displayed_time_str fails in test suite (zerotracepen/zerotracepen#18991)

    Commits:

    • Ignore advisories when looking for displayed time
    • help debug
    • FIX Clock disappearing when the user sets UTC as their local timezone
      (zerotracepen/zerotracepen!841)

    Closes issues:

    • Clock disappears from the GNOME top bar after "Fix the clock" and choosing UTC
      timezone (zerotracepen/zerotracepen#18993)

    Commits:

    • safety net for future problems
    • handle UTC special-case
    • Test suite: workaround lost and duplicate key presses by pasting long strings
      instead of typing them (zerotracepen/zerotracepen!821)

    Commits:

    • Test suite: merge step used only by another step into its caller
    • Test suite: paste long strings instead of typing them
    • Test suite: drop useless step
    • Test suite: refactor (extract code to method)
    • Test suite: Make opening GNOME menus more robust (zerotracepen/zerotracepen!816)

    Closes issues:

    • Opening GNOME menus in the test suite on Bullseye is very fragile
      (zerotracepen/zerotracepen#18930)

    Commits:

    • Test suite: try harder to open GNOME menus
    • Test suite: drop unnecessary delay
    • Test suite: use Dogtail to check presence of GNOME bookmarks
    • Test suite: use Dogtail to open the GNOME menus
    • Test suite: wait for the desktop to be visible before we interact with it after
      restoring a snapshot
    • Lint.
    • Upgrade to Linux 5.10.113-1 (DSA 5127-1) (zerotracepen/zerotracepen!813)

    Closes issues:

    • Upgrade Linux to 5.10.113-1 (DSA 5127-1) (zerotracepen/zerotracepen#18962)

    Commits:

    • Upgrade to Linux 5.10.113-1 (DSA 5127-1)
    • Make console-setup.service startup non-racy (zerotracepen/zerotracepen!811)

    Closes issues:

    • console-setup.service fails sometimes, which breaks "Tor is ready" in test
      suite (zerotracepen/zerotracepen#18636)

    Commits:

    • Make console-setup.service startup non-racy
    • Test suite: support running on Ruby 3.0 (zerotracepen/zerotracepen!810)

    Closes issues:

    • Test suite misbehaves on Ruby 3.0, e.g. "the Tor Connection Assistant connects
      to Tor" step always incorrectly fails (zerotracepen/zerotracepen#18904)

    Commits:

    • Test suite: ensure we don't try to click the "Restore Disk Image" button before
      it's visible
    • Test suite: support Bookworm host system's improved UEFI graphics
    • Test suite: enable Ruby deprecation warnings
    • Test suite: adjust to separation of positional and keyword arguments in Ruby
      3.0
    • Test suite: update button label for Bullseye
    • Remove duplicate word in comment
    • Test suite: drop workaround for Ruby < 2.7
    • Test suite: migrate from deprecated luks_open and luksclose to
      cryptsetup      {open,close}
    • test https-get-expired with sid's Go (zerotracepen/zerotracepen!849)

    Commits:

    • GitLab CI: only run https-get-expired-sid job when relevant
    • GitLab CI: factorize
    • GitLab CI: test https-get-expired with sid's Go on a sid image
    • also test https-get-expired with sid's golang
    • Vagrant: install ikiwiki that fixes #18992 (zerotracepen/zerotracepen!847)

    Closes issues:

    • ikiwiki generates buggy PO files with po4a 0.62 (zerotracepen/zerotracepen#18992)

    Commits:

    • Vagrant: stop using the obsolete builder-jessie APT suite
    • Vagrant: install ikiwiki that fixes #18992
    • tca-portal: stricter validation (zerotracepen/zerotracepen!846)

    Commits:

    • test: right length, valid for date(1), but invalid format
    • drop test case for "minutes" timespec
    • be more explicit about the format we want
    • seconds always included
    • stricter validation for SetTimeCommand
    • ignore advisories + better debug (zerotracepen/zerotracepen!845)

    Commits:

    • ignore advisory
    • FIX error message
    • Test suite: fix regression when testing Tor Connection in non-English locale
      (zerotracepen/zerotracepen!843)

    Commits:

    • Test suite: fix regression when testing Tor Connection in non-English locale
    • FIX sharing via onionshare from nautilus (zerotracepen/zerotracepen!840)

    Closes issues:

    • "Share via OnionShare" does nothing (zerotracepen/zerotracepen#18990)

    Commits:

    • FIX sharing via onionshare from nautilus
    • lint_po: ignore unknown-message-flag errors (zerotracepen/zerotracepen!836)

    Commits:

    • lint_po: ignore unknown-message-flag errors
    • Don't enable "configure a bridge" just because the user looked at the hide mode
      (zerotracepen/zerotracepen!835)

    Closes issues:

    • “Configure a Bridge” is enabled when rolling back from hiding Tor
      (zerotracepen/zerotracepen#18546)

    Commits:

    • regression test for #18546
    • enable easymode-bridges only in easy mode
    • Vagrant build box: upgrade to po4a 0.62-1 (zerotracepen/zerotracepen!834)

    Commits:

    • Vagrant build box: drop APT configuration for Buster
    • Vagrant build box: upgrade to po4a 0.62-1
    • Installer: create system partition 2 MiB from the beginning of the drive
      (zerotracepen/zerotracepen!832)

    Commits:

    • Installer: create system partition 2 MiB from the beginning of the drive
    • Various Tor Connection UX improvements (zerotracepen/zerotracepen!831)

    Closes issues:

    • Tor Connection: Give the same instructions on both bridge screens
      (zerotracepen/zerotracepen#18596)
    • Always tell whether bridges are used in the success screen (zerotracepen/zerotracepen#18547)

    Commits:

    • Clarify docstring
    • Test suite: update expected images
    • Make phrasing consistent
    • Test suite: DRY
    • refactor: properties allow our code to be clearer
    • bridges: same instructions on both screens
    • Success message conditional to bridges
    • Rewrite the home pages of the Unsafe Browser + Have different homes for the
      Unsafe Browser depending on whether we're connected to Tor already
      (zerotracepen/zerotracepen!829)

    Closes issues:

    • Have different homes for the Unsafe Browser depending on whether we're
      connected to Tor already (zerotracepen/zerotracepen#18601)
    • Rewrite the home pages of the Unsafe Browser (zerotracepen/zerotracepen#18602)

    Commits:

    • Apply style guide
    • Improve sentence
    • Improve grammar
    • Improve grammar
    • Improve grammar
    • Be more clear
    • Add illustration by Andrés
    • Test suite: remove obsolete localized images
    • Test suite: update expected image
    • Test suite: add missing @doc tag
    • FIX wrong path was checked
    • Clarify that the image is an example
    • Clarify use of CSS (Take 2)
    • Unsafe browser: home page if non connected to Tor
    • Clarify use of CSS
    • Rework CSS
    • Improve structure
    • Write a dedicated page for captive portals
    • Improve instructions
    • Give examples of websites to use
    • Use our own image and remove the login and password
    • Shorten
    • Test suite: misc. robustness improvements (zerotracepen/zerotracepen!827)

    Closes issues:

    • Tests for backup are fragile (zerotracepen/zerotracepen#18727)

    Commits:

    • Test suite: add localized expected image for Unsafe Browser start page in pt_BR
    • Test suite: enable debug logging for Screen#wait
    • Test suite: Fix frequent "cannot find Zero Trace PenGreeterLoginButton.png" failures
    • Test suite: update expected image for Bullseye
    • Test suite: give the XMPP server some time to create the room
    • Test suite: update expected Pidgin images
    • Test suite: fix error message
    • Test suite: Improve error reporting
    • Test suite: Fix clock upper bound calculation
    • Test suite: refactoring (save value to variable)
    • Test suite: Drop most debugging info for issue that does not happen anymore
    • Test suite: Drop spurious verb in debug log
    • Revert "Mark test scenario as fragile"
    • Test suite (backup): Wait for Zenity to have filled its widgets with the
      expected text
    • Upgrade apt-cacher-ng to bullseye-backports - fixes issue #18931
      (zerotracepen/zerotracepen!825)

    Closes issues:

    • rake build fails - apt-get works erratically ( 502 connection closed
      [IP:127.0.0.1:3142] ) - No build artifacts were found! (zerotracepen/zerotracepen#18931)

    Commits:

    • Upgrade apt-cacher-ng to bullseye-backports.
    • Disable search providers in the Activities Overview: Calculator, Nautilus,
      Terminal (zerotracepen/zerotracepen!824)

    Closes issues:

    • Disable some GNOME Overview search providers (zerotracepen/zerotracepen#18952)

    Commits:

    • Disable search providers in the Activities Overview: Calculator, Contacts,
      Documents, Nautilus, Terminal
    • Test suite: ignore failures to destroy a stopped domain (zerotracepen/zerotracepen!822)

    Closes issues:

    • Scenario: "Upgrading an old Zero Trace Pen USB installation from another Zero Trace Pen USB
      drive" after-hook is racy (zerotracepen/zerotracepen#18972)

    Commits:

    • Test suite: ignore failures to destroy a stopped domain
    • Associate OpenPGP-encrypted files with Kleopatra (zerotracepen/zerotracepen!820)

    Closes issues:

    • Zero Trace Pen 5 does not decrypt .gpg files when double-clicking them
      (zerotracepen/zerotracepen#18967)

    Commits:

    • Associate OpenPGP-encrypted files with Kleopatra
    • safely get gnome_env_vars (zerotracepen/zerotracepen!819)

    Commits:

    • clarify about which environment is being dumped
    • Clarify comment
    • Fix typo in comment
    • comments clarify why we think we are safe
    • fix systemd path
    • gnome_env_vars look at the gnome-shell env dump
    • gnome-shell dumps its conf in a root-owned file
    • Avoid user confusion wrt. name of the default KeePassXC database
      (zerotracepen/zerotracepen!818)

    Closes issues:

    • KeePassXC offers to rename the default database on non-English locales
      (zerotracepen/zerotracepen#18966)

    Commits:

    • Silence false positive
    • Drop obsolete reason
    • Don't allow translating Passwords.kdbx
    • Use Bullseye debootstrap configuration (zerotracepen/zerotracepen!817)

    Commits:

    • Use Bullseye debootstrap configuration
    • FIX IUK verification when we have 2 series at the same time (zerotracepen/zerotracepen!815)

    Closes issues:

    • bin/copy-iuks-to-rsync-server-and-verify failing because of old releases
      (zerotracepen/zerotracepen#18959)

    Commits:

    • Apply 1 suggestion(s) to 1 file(s)
    • document how the RM should use this command
    • don't fail when 404s have been ignored
    • proper exit code on failure
    • refactor --ignore-404
    • refactor run()
    • fix leftover
    • 404s found -> non-zero exit code
    • --ignore-404 and --dry-run
    • Fix FTBFS with uBlock 1.42 (zerotracepen/zerotracepen!814)

    Commits:

    • Unfuzzy patch
    • Upgrade to tor 0.4.7.7 (zerotracepen/zerotracepen!812)

    Closes issues:

    • Upgrade to tor 0.4.7.x (zerotracepen/zerotracepen#18932)

    Commits:

    • Upgrade to tor 0.4.7.7
    • Add translation files for Qt5 (#18958) (zerotracepen/zerotracepen!808)

    Closes issues:

    • Translations of basic Qt5 strings are missing (zerotracepen/zerotracepen#18958)

    Commits:

    • Add translation files for Qt
    • Make news/version_3* non-translatable (#16758) (zerotracepen/zerotracepen!805)

    Commits:

    • Make news/version_3* non-translatable (#16758)
    • Add Kleopatra to the Favorites (zerotracepen/zerotracepen!802)

    Commits:

    • Test suite: make expected image a tiny bit smaller
    • Add Kleopatra to the Favorites submenu
    • Test suite: drop pre-Bullseye compatibility (zerotracepen/zerotracepen!789)

    Commits:

    • Test suite: drop workaround for Ruby < 2.7
    • Test suite: migrate from deprecated luks_open and luksclose to
      cryptsetup      {open,close}
    • Add to confirm before restarting (#18912) (zerotracepen/zerotracepen!782)

    Closes issues:

    • New dialog when Unsafe Browser is not enabled makes it too easy to lose work
      (zerotracepen/zerotracepen#18912)

    Commits:

    • Make code more readable
    • Make function's responsibility tighter to simplify its code
    • Handle new code branch that was forgotten
    • Fix local variables declaration
    • Use 'Cancel' as default button (#18912)
    • 'Cancel' is more standard
    • Add to confirm before restarting (#18912)
    • Display time in the timezone that the user has chosen in Tor Connection
      (zerotracepen/zerotracepen!751)

    Closes issues:

    • Display time in the timezone that the user has chosen in Tor Connection
      (zerotracepen/zerotracepen#6284)

    Commits:

    • Design doc: Explain security trade-off
    • Test suite: Explain that Asia/Shanghai == +08:00
    • zerotracepen-get-date: use Python instead of date(1)
    • Fix typo in error message
    • Test suite: ensure the displayed clock is in the user's timezone
    • Test suite: remove workaround
    • Test suite: refactor (extract code do method)
    • Test suite: be more defensive to give better error output
    • Test suite: send debug info to the debug log
    • Test suite: make step name clearer
    • Design doc: mention timezone status and plans
    • Apply 1 suggestion(s) to 1 file(s)
    • Fix typo in comment
    • Improve grammar
    • Improve grammar
    • Remove unnecessary comma
    • try to fix the vertical misalignment
    • Update to #6284
    • Link back to main page
    • https://www.merriam-webster.com/dictionary/time%20zone
    • Move FAQ to a dedicated page
    • Shorten path
    • Don't potentially overwrite TZ key in dict with environment's value.
    • Cleanup dead code, fix formatting.
    • Consistently display GMT instead of UTC.
    • Use the same time format as GNOME's clock.
    • use date to format the date
    • date@ extension does The Right Thing
    • DRAFT: display time in local timezone
    • Follow-up on "Audit tca-portal" (zerotracepen/zerotracepen!723)

    Commits:

    • useless shellcheck directive
    • Apply 2 suggestion(s) to 2 file(s)
    • Fix typo in comment
    • clarify how we believe pgrep --ns 1 will help us
    • PersistenceSetupCommand: gnome_env_vars not needed
    • export_gnome_env hardening
    • some more validation when setting system time
    • gnome.py executes later; required for testing
    • add some doctests to tca-portal
    • more tuples, less lists
    • clarify: we are fine with the TOCTOU
    • --systemd-socket is exclusive with --listen
    • be more explicit about stdout/stderr handling
    • clarify handle_* comments
    • clarify what is the role of handle_line
    • anchor SetTimeCommand regexp
    • clarify comment about validate_args
    • use full path to commands whenever possible
    • Automatic time sync before connecting to Tor in automatic mode
      (zerotracepen/zerotracepen!681)

    Closes issues:

    • Mitigate attack by active network adversary on automated time sync + replayed
      Tor consensus (zerotracepen/zerotracepen#18830)
    • Automatic time sync before connecting to Tor in automatic mode
      (zerotracepen/zerotracepen#18717)

    Commits:

    • Test suite: rename step to make it closer to what a user would do
    • use the non-deprecated version of "Tor is ready"
    • Use less jargon
    • Add missing word in comment
    • Update comment: this now build reproducibly
    • Clarify comment
    • fix undefined local variable
    • zerotracepen-get-network-time better syslog
    • zerotracepen-get-network-time has timeout
    • refactor old test case based on new functions
    • new test: time sync times out
    • tor connection runs even if timesync fails
    • python style
    • some info is shown during network time sync
    • comments
    • wait for time to be retrieved before starting Tor
    • use APT preferences, not --target-release
    • gitlab tests run with the correct Go version
    • public key type check
    • Explain why these if statements don't apply to us
    • Fix typo
    • Design doc: 2 out of 3 is enough since we're using the median
    • ignore redirects
    • test all urls in htpdate.pools
    • https-get-expired gets more testing
    • https-get-expired: explain how this compares to Go implementation
    • Test suite: explain why scenarios pass in a somewhat surprisingly manner
    • Lint
    • Lint
    • Design doc: explain why we accept a risk
    • Design doc: improve phrasing
    • Design doc: drop conditional
    • Design doc: explain why we're protected
    • Design doc: clarify phrasing
    • Update design doc: this is not a problem anymore
    • reproducibility: clean cache after compiling
    • fix spelling
    • htpdate performs the median
    • design doc: explain https-get-expired
    • Lint: gofmt
    • Pick Go from buster-backports
    • try to make go build reproducible: -trimpath
    • Test suite: mark fragile scenario as such
    • https-get-expired: CI tests now
    • test https-get-expired building
    • https-get-expired gains -proxy option
    • port htpdate to https-get-expired
    • https-get-expired: more similar to htpdate's curl
    • https-get-expired output headers, not body
    • fix go compilation
    • add https-get-expired: will need for time sync
    • "date in past" check is more robust
    • sanity check: the new date cannot be in the past
    • unsafe browser is checked for tor leaks
    • UnsafeBrowser correctly detects if we're online
    • checking DisableNetowrk is #18293-aware
    • Merge the new scenario with the old one
    • FIX restore: some snapshot has network but no Tor
    • UnsafeBrowser tests don't need Tor; scenarios--
    • FIX we don't even need to check Tor
    • Test suite: clarify what we're actually testing
    • Improve grammar
    • Fix typo
    • Fix typo
    • Update doc to automatic time sync (#18717)
    • Improve structure of design doc
    • Avoid jargon
    • Design doc: copy more detailed explanation from the blueprint
    • Design doc: improve structure
    • Design doc: document new automatic time sync mechanism
    • Remove very old explanation
    • wording: we're looking for unneeded exceptions
    • Apply 5 suggestion(s) to 2 file(s)
    • FIX test case: allow it to use time sync
    • "flow through" supports fake connectivity check
    • FIX globally setting allowed DNS queries
    • refactor check for leaks
    • debugging leaks is easier
    • fix DNS query for easy mode
    • test suite self-correction warning
    • dns queries are allowed only when needed
    • +debug "traffic has only flowed through"
    • break the "Tor is ready" step in two
    • rubocop
    • easy-mode allowed_hosts are set in tca_configure
    • explicitly allow connectivity check in many tests
    • fix time sync error simulation
    • fix exception wording
    • use DNS inspection to check for leaks
    • the FirewallHelper is DNS-aware
    • one more check
    • test "traffic only flows through" supports timesync
    • Add tests for time sync before Tor connects
    • Improve TCA test suite code
    • add vm script to upload/download files
    • zerotracepen-get-network-time: don't assume anything about body encoding
    • Raise exception instance, not class
    • Clean up code
    • zerotracepen-get-network-time: emulate NetworkManager's behavior more closely
    • Move hard-coded string to constant
    • Blacken
    • zerotracepen-get-network-time: refactor
    • Add more typing
    • zerotracepen-get-network-time: migrate to pycurl, to make our fingerprint closer to
      NetworkManager's
    • Store the network time server in a configuration file
    • Move code to main() function
    • Test suite: adjust to new automatic time sync feature
    • Test suite: drop workaround
    • Tor Connection: in automatic mode, set the system time from the network
    • tca-portal: implement a new get-network-time command
    • tca-portal: include stdout in responses
Made with ProductLift