A few things everyone can do now:
- Please consider running a relay to help the Tor network grow.
- Tell your friends! Get them to run relays. Get them to run hidden services. Get them to tell their friends.
- If you like Tor's goals, please take a moment to donate to support further Tor development. We're also looking for more sponsors — if you know any companies, NGOs, agencies, or other organizations that want anonymity / privacy / communications security, let them know about us.
- We're looking for more good examples of Tor users and Tor use cases. If you use Tor for a scenario or purpose not yet described on that page, and you're comfortable sharing it with us, we'd love to hear from you.
- Help translate the documentation into other languages. See the translation guidelines if you want to help out. We especially need Arabic or Farsi translations, for the many Tor users in censored areas.
- Evaluate and document our list of programs that can be configured to use Tor.
- We have a huge list of potentially useful programs that interface with Tor. Which ones are useful in which situations? Please help us test them out and document your results.
- Monitor some of our public mailing lists, like tor-talk, tor-relays, tor-dev, or tbb-dev, and summarize noteworthy exchanges into articles for Tor Weekly News.
- Create a presentation that can be used for various user group meetings around the world.
- Create a video about the positive uses of Tor, what Tor is, or how to use it. Some have already started on Tor's Media server, Howcast, and YouTube.
- Create a poster around a theme, such as "Tor for Freedom!"
- Create a t-shirt design that incorporates "Congratulations! You are using Tor!" in any language.
- Spread the word about Tor at a symposium or conference and use these Tor brochures in PDF and ODG format and translated to at least ten different languages as conversation starter.
Below are a list of Tor related projects we're developing and/or maintaining. Most discussions happen on IRC so if you're interested in any of these (or you have a project idea of your own), then please join us in #tor-dev. Don't be shy to ask questions, and don't hesitate to ask even if the main contributors aren't active at that moment.
For a presentation summarizing many of these projects see...
|Tor||Core||C||Heavy||nickm, athena, arma, dgoulet, asn, teor|
|Nyx||User Interface||Python, Curses||Moderate||atagar|
|Tails||OS image||Sys Admin||Heavy||#tails|
|tor-ramdisk||OS image||Sys Admin||Light||blueness|
|Metrics||Client Service||Java||Heavy||karsten, iwakeh|
|Onionoo||Backend Service||Java||Heavy||karsten, iwakeh|
|Ooni Probe||Scanner||Python||Heavy||hellais, aagbsn|
|TorPS||Backend Service||Python||None||Aaron Johnson|
|Tor2web||Client Service||Python||Heavy||evilaliv3, hellais|
|CollecTor||Backend Service||Java||Moderate||karsten, iwakeh|
|ExoneraTor||Client Service||Java||Light||karsten, iwakeh|
Tor (code, bug tracker)
Central project, providing the core software for using and participating in the Tor network. Numerous people contribute to the project to varying extents, but the chief architects are Nick Mathewson and Roger Dingledine.
Help improve Tor hidden services
Tor Browser is an easy-to-use, portable package of Tor, HTTPS-Everywhere, NoScript, TorLauncher, Torbutton, and a Firefox fork, all preconfigured to work together out of the box. The modified copy of Firefox aims to resolve the privacy and security issues in mainline version.
HTTPS Everywhere is a Firefox and Chrome extension that encrypts your communications with many major websites, making your browsing more secure.
Nyx (code, bug tracker)
Nyx (previously arm) is a terminal status monitor for Tor intended for command-line aficionados, ssh connections, and anyone with a tty terminal. This works much like top does for system usage, providing real time statistics for bandwidth, resource usage, connections, and quite a bit more.
Orbot (code, bug tracker)
Provides Tor on the Android platform. The project is under active development, updates to latest Tor releases, and working to stay up to date with all changes in Android and mobile threats.
The Amnesic Incognito Live System is a live CD/USB distribution preconfigured so that everything is safely routed through Tor and leaves no trace on the local system. This is a merger of the Amnesia and Incognito projects, and still under very active development.
Tor-ramdisk is a uClibc-based micro Linux distribution whose sole purpose is to securely host a Tor server purely in RAM.
Torsocks (code, bug tracker)
Utility for adapting other applications to work with Tor. Development has slowed and compatibility issues remain with some platforms, but it's otherwise feature complete.
Tor Messenger is a cross-platform chat program that aims to be secure by default and sends all of its traffic over Tor.
TorBirdy (code, bug tracker)
TorBirdy is Torbutton for Thunderbird and related Mozilla mail clients.
Pluggable transport using proxies running in web browsers to defeat address-based blocking.
Shadow is a discrete-event network simulator that runs the real Tor software as a plug-in. Shadow is open-source software that enables accurate, efficient, controlled, and repeatable Tor experimentation. For another simulator, see ExperimenTor.
Chutney (code, bug tracker)
Integration test suite that spawns a local tor network, checking the interactions of its components.
Stem (code, bug tracker)
Python controller library for scripts and controller applications using Tor.
Twisted-based asynchronous Tor control protocol implementation. Includes unit-tests, examples, state-tracking code and configuration abstraction. Used by OONI and APAF.
metrics-lib (code, bug tracker)
metrics-lib is a Java library that processes Tor network data provided by CollecTor or from other sources.
Processing and analytics of consensus data, provided to users via the metrics portal. This has been under active development for several years by Karsten Loesing.
Atlas is a web application to discover Tor relays and bridges. It provides useful information on how relays are configured along with graphics about their past usage.
This is the spiritual successor to TorStatus, the original codebase for which was written in PHP, and rewritten by students from Wesleyan as Django. If you dig into this space then also check out Globe, another similar site that's since been discontinued.
Compass is a web and command line application that filters and aggregates the Tor relays based on various attributes.
Onionoo is a JSON based protocol to learn information about currently running Tor relays and bridges.
Scanner for the Tor network by Philipp Winter to detect malicious and misconfigured exits. For more information about how it works see his Spoiled Onions research paper.
DocTor (code, bug tracker)
DocTor is a notification service that monitors newly published descriptor information for issues. This is primarily a service to help the tor directory authority operators, but it also checks for a handful of other issues like sybil attacks.
Provides automatic notification to subscribed relay operators when their relay's unreachable. This underwent a rewrite by the Wesleyan HFOSS team, which went live in early 2011.
E-mail autoresponder providing Tor's packages over SMTP. This has been relatively unchanged for quite a while.
Site for determining if the visitor is using Tor or not.
Backend bridge distributor, handling the various pools they're distributed in. This was actively developed until Fall of 2010.
Censorship scanner, checking your local connection for blocked or modified content.
The Tor Path Simulator (TorPS) is a tool for efficiently simulating path selection in Tor. It chooses circuits and assigns user streams to those circuits in the same way that Tor does. TorPS is fast enough to perform thousands of simulations over periods of months.
Library and collection of services for actively monitoring the Tor network. These include the Bandwidth Scanners (measuring throughput of relays) and SoaT (scans for malicious or misconfigured exit nodes). SoaT was last actively developed in the Summer of 2010, and the Bandwidth Scanners a few months later. Both have been under active use since then, but development has stopped.
Tor2web allows Internet users to browse websites running in Tor hidden services. It trades user anonymity for usability by allowing anonymous content to be distributed to non-anonymous users.
ExoneraTor is a service that answers the question whether there was a Tor relay running on a given IP address on a given date.
Anonbib is a list of important papers in the field of anonymity. It's also a set of scripts to generate the website from Latex (bibtex). If we're missing any important papers, please let us know!
You may find some of these projects to be good ideas for Google Summer of Code. We have labelled each idea with which of our core developers would be good mentors. If one or more of these ideas looks promising to you, please contact us to discuss your plans rather than sending blind applications. You may also want to propose your own project idea — which often results in the best applications.
Help improve Tor hidden services
Likely Mentors: George (asn), David Goulet (dgoulet)
The hidden services team is busy implementing proposal 224 but we are always open to mentoring fun and exciting hidden service projects.
In the past, we've mentored a wide variety of projects related to hidden services, ranging from onion search engines, to scaling techniques for hidden services, and also various approaches of making onion services more usable by common people.
Let us know if you have a project you would like to work on, or check our proposals and technical documents for various ideas.
Feedback Extension for Tor Browser
Likely Mentors: Nima (mrphs), Sukhbir (sukhe)
Design and implement an extension for Tor Browser that can be used to gather end-user UI/UX feedback on an opt-in basis. While the design and implementation is left as an exercise for the applicant (and also serves as the qualification task), examples of the information we are looking to gather can include troubleshooting network connectivity issues, testing the various pluggable transports, or gathering information about the network of the users.
Please propose the extension design in a way that the information is strictly on an opt-in basis and scrubs any information that can be used to identify a user, and also come up with a way to send the gathered information to a central server, whether to an onion address (if the user has Tor running), or otherwise. To start with, we are looking to gather only text as part of the feedback process.
Crash Reporter for Tor Browser
Likely Mentors: Tom Ritter (tjr), Georg (GeKo)
Currently Tor Browser disables the Crash Reporter. We would like to build it reproducible, enable it, and configure it to report crashes containing non-detailed and impersonal information to Tor, on a .onion submission platform that would allow us to view and explore the crashes.
The project will entail enabling the Crash Report on Tor Browser and creating a backend to receive reports from it. Once created, the crash reporter data will be analyzed and modified to fit Tor's requirements for personal data collection. As time permits, we will update the build system to ensure the crash reporter is built reproducibly and add data analysis tools for the crash report database to visualize top crashers and similar statistics.
Make Tor Browser Faster
Likely Mentors: Tom Ritter (tjr), Georg (GeKo)
This project will enable and take advantage of HTTP/2, the Alt-Srv header, and tor's new single hop .onion mode to enable websites to transparently move their traffic to a .onion address. In addition to improvements in security, we will benchmark page load and paint times under normal HTTP/1.1, HTTP/2, and when taking advantage of features such as Server Push.
Likely Mentors: Damian Johnson (atagar), Philipp Winter (phw)
Stem is a Python library for working with tor. With it you can build applications on tor as well as learn information about the relay network. This project concerns this second capability.
Information about relays are published hourly in documents called descriptors. With Stem you can download, parse, and validate all kinds of descriptor documents.
Ideas welcome! You're encouraged to brainstorm improvements we can make to this space but here's a few to get you started...
Validate signatures in the consensus. Stem has the ability to validate cryptographic signatures in several descriptor types but not the consensus.
Migrate from pycrypto to a supported library. Stem presently uses pycrypto for signature validation but it's no longer maintained. We should evaluate options and move to whatever whavever the cool kids are using nowadays.
Retrieve descriptors over tor's ORPort. Tor relays commonly provide two ports, an ORPort which is used by clients and a DirPort which is obsolete nowadays but in the past was used by tor to download descriptors. Stem still uses tor's DirPort to retrieve descriptors, but it would be neat if we could download from the ORPort instead.
This requires implementing part of tor's communication protocol. Depending how complicated this is it might be neat to expand this task to allow the full construction of circuits, allowing client usage of tor without the C executable. Keep in mind though that this later bit hasn't been investigated and might be a pipe dream. ;P
Improve performance of reading descriptors. Stem isn't the only descriptor parsing library and sadly is the slowest. Tricks like lazy loading have substantially improved our performance but no doubt a dedicated effort to profile Stem would find more low hanging fruit.
As part of applying for this project please get your hands wet with the codebase by contributing some patches for Stem!
Ahmia - Hidden Service Search
Language: Python, Django
Likely Mentors: Juha Nurmi (numes), George (asn)
Ahmia is open-source search engine software for Tor hidden service deep dark web sites. You can test the running search engine at ahmia.fi. For more information see our blog post about Ahmia's GSoC2014 development.
Ahmia is a working search engine that indexes, searches, and catalogs content published on Tor Hidden Services. Furthermore, it is an environment to share meaningful insights, statistics, insights, and news about the Tor network itself. In this context, there is a lot of work to do.
There are several possible directions for this project, including...
- Automate blacklisting (very important)
- Fetch a list of child abuse media sites
- Remove these sites from the search results
- Add hidden services funtion (very important)
- You can add onions using HTML form
- Call the crawler immidiately when a new site is added
- Must be updated to 5.X.X sooner or later
- Adjust the settings
- Automatically remove data older than, for instance, 90 days
- Update all software dependencies
- Automate crash recovery for Tor, Elasticsearch and crawler
- Automate blacklisting (very important)
Bring up new ideas!
Don't like any of these? Look at the Tor development roadmap for more ideas, or just try out Tor and Tor Browser, and find out what you think needs fixing. Some of the current proposals might also be short on developers.