-
Notifications
You must be signed in to change notification settings - Fork 8
/
Copy pathresources.html.bak
141 lines (108 loc) · 12.4 KB
/
resources.html.bak
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8"/>
<title>Tor BSD Diversity Project Resources</title>
<link type="text/css" rel="stylesheet" href="torbsd.css"/>
<meta name="author" content="gman"/>
<meta name="editors" content="attila"/>
<meta name="date" content="20150509"/>
<meta name="note" content="These lines at the top are multimarkdown metadata; leave them."/>
<meta name="sep" content="&#8916;"/>
</head>
<body>
<h1 id="thetorbsddiversityprojecttdp"><a href="index.html">The Tor BSD Diversity Project (TDP)</a></h1>
<p>&#8916; <a href="blog.html">Blog</a> &#8916; <a href="faq.html">FAQ</a> &#8916; <a href="resources.html">Resources</a> &#8916; <a href="https://github.com/torbsd/">GitHub</a> &#8916; <a href="contact.html">Contact</a> &#8916; <a href="http://bptfp7py2wclht26.onion/">TDP Onion</a> &#8916;</p>
<p><strong><a href="projects.html">The TDP Projects</a>:</strong><br/>
&#8916; <a href="https://github.com/torbsd/openbsd-ports/">Tor Browser for OpenBSD</a> &#8916; <a href="relay-guides.html">BSD Relay Guides</a> &#8916; <a href="corp-relays.html">Corporate Relays</a> &#8916; <a href="porting-pets.html">Ports for PETs</a> &#8916; <a href="oostats.html">Statistics</a> &#8916;</p>
<h2 id="resources">Resources</h2>
<p>This page collects links and information relevant to <strong>TDP</strong>.
We welcome relevant submissions from others.</p>
<h3 id="thebsdsandrelatedprojects">The BSDs and Related Projects</h3>
<ul>
<li><p><a href="https://www.freebsd.org/">FreeBSD</a>: performance, cutting-edge networking and filesystem features</p></li>
<li><p><a href="https://www.netbsd.org/">NetBSD</a>: portability, stability, support for many devices</p></li>
<li><p><a href="https://www.openbsd.org/">OpenBSD</a>: security, correctness, standards-compliance, leadership in addressing serious issues confronting the computing ecosystem</p></li>
<li><p><a href="https://www.dragonflybsd.org/">DragonFly BSD</a>: multiprocessing, alternative approaches to filesystem design</p></li>
<li><p><a href="https://www.openssh.com/">OpenSSH</a>: the defacto standard on the Internet for secure command-line access, portable and lightweight VPN features, constant advances in crypto, security</p></li>
<li><p><a href="https://www.libressl.org/">LibreSSL</a>: a renewed focus on simplicity, correctness and sustainability/maintainability for TLS</p></li>
<li><p><a href="https://www.freenas.org/">FreeNAS</a>: FreeBSD-based networked-attached storage system</p></li>
<li><p><a href="https://opnsense.org/">OPNSense firewall</a>: easy-to-use web interface to OpenBSD’s packet filter (pf) on a FreeBSD base</p></li>
</ul>
<h3 id="bsdsandtor">BSDs and Tor</h3>
<ul>
<li><p><a href="http://lists.nycbug.org/mailman/listinfo/tor-bsd/">Tor-BSD Mailing List</a> hosted by the <a href="http://www.nycbug.org/">New York City *BSD User Group</a></p></li>
<li><p><a href="https://buildbot.pixelminers.net/">An Unofficial BSD Buildbot for the Tor Project</a>
A distributed test build system for finding problems with BSD Tor builds.</p></li>
<li><p>Christian Bruffer at <a href="https://www.youtube.com/watch?v=OwBh8ro7xHQ">MeetBSD 2007 presentation on FreeBSD, Protecting Privacy with Tor</a></p></li>
<li><p><a href="https://torstatus.rueckgr.at/">Tor Network Status</a>
A useful overview of the current public Tor relays, with a filtering ability to check relay numbers by operating system, and other attributes.</p></li>
<li><p><a href="https://metrics.torproject.org/">Tor Metrics</a>
More useful graphs about the Tor network, including <a href="https://metrics.torproject.org/platforms.html">platform usage</a>.</p></li>
<li><p><a href="http://www.stalphonsos.com/">attila’s blog</a></p></li>
</ul>
<h3 id="relevantbsdbits">Relevant BSD Bits</h3>
<ul>
<li><p>Theo de Raadt <a href="https://www.openbsd.org/papers/hackfest2014-arc4random/index.html">slides on arc4random</a></p></li>
<li><p>Kode Vicious’ <a href="https://queue.acm.org/listing.cfm?typefilter=Kodevicious&sort=publication_date&order=desc&qc_type=Kodevicious&article_type=&item_topic=all&filter_type=topic&page_title=Kode%20Vicious&filter=all">Column from ACM’s Queue Magazine</a></p></li>
<li><p>Poul-Henning Kamp <a href="https://queue.acm.org/detail.cfm?id=2349257">article on “A Generation Lost in the Bazaar”</a> from ACM’s Queue Magazine’s “The Bike Shed” column</p></li>
<li><p>Ted Unangst <a href="https://marc.info/?l=openbsd-misc&m=142523501726732/">post on OpenBSD-misc “Improving Browser Security”</a></p></li>
<li><p>Theo de Raadt <a href="https://www.openbsd.org/papers/ru13-deraadt/">slides on “Exploit Mitigation Techniques: An Update After 10 Years”</a></p></li>
<li><p>Ted Unangst <a href="https://www.openbsd.org/papers/eurobsdcon2014-libressl.html">slides on “LibreSSL: More than 30 Days Late”</a></p></li>
<li><p>Ted Unangst <a href="http://www.tedunangst.com/flak/post/reproducible-builds-are-a-waste-of-time">blog post on “Reproducible Builds are a Waste of Time”</a></p></li>
<li><p>Ted Unangst <a href="http://www.tedunangst.com/flak/post/random-in-the-wild">blog post on “random in the wild”</a> pointing to scary uses of <a href="https://man.openbsd.org/OpenBSD-current/man3/rand.3">rand 3</a> which are disturbingly common.</p></li>
</ul>
<h3 id="thedangeroftechnologymonocultures">The Danger of Technology Monocultures</h3>
<dl>
<dt>* <a href="https://cryptome.org/cyberinsecurity.htm">CyberInsecurity: The Cost of Monopoly. How the Dominance of Microsoft’s Products Pose a Risk to Security</a>. Note: the original PDF on the Computer and Communications Industry Association (CCIA) web site is no where to be found. Originally at https://www.ccianet.org/papers/cybersecurity.pdf.</dt>
<dd>An explosive paper arguing Microsoft’s desktop monopoly is a critical weakness in global infrastructure. The paper prompted the firing of one of the authors <a href="https://en.wikipedia.org/wiki/Dan_Geer/">Dan Geer</a> from @Stake (later acquired by Symantec) in 2003.</dd>
<dt>* <a href="https://www.usenix.org/legacy/publiccations/login/2005-12/openpds/geer.pdf">Monoculture on the Back of the Envelope</a></dt>
<dd>A short piece by Dan Geer from USENIX’s ;login magazine two years later.</dd>
<dt>* <a href="https://searchsecurity.techtarget.com/magazineContent/Schneier-Ranum-Face-Off-on-the-dangers-of-a-software-monoculture/">Schneier-Ranum Face-Off on the dangers of a software monoculture</a></dt>
<dd>In 2010, Bruce Schneier and Marcus Ranum debate the issue. Note that a login is necessary to access the piece.</dd>
<dt>* <a href="https://www.schneier.com/blog/archives/2010/12/software_monocu.html">Bruce Schneier’s blog entry on “Software Monoculture”</a></dt>
<dd>Bruce Schneier illustrates some of the weaknesses in the “monoculture is insecurity” argument. First, even seemingly identical computer hosts have some diversity in terms of networks, software, and so on. Second, there are significant costs to diversity. <a href="http://www.eweek.com/enterprise-apps/verisign-embraces-open-source-freebsd-for-diversity/">Verisign diversified its infrastructure</a> with three operating systems, including FreeBSD, and they incur significant costs in doing so. Finally, diversity does not mean two’s and three’s of each, but hundreds or thousands to robustly mitigate system-wide disasters.</dd>
<dt>* <a href="https://blogs.microsoft.com/cybertrust/2010/12/03/risks-of-monoculture-revisited/">Risks of Monoculture Revisited</a></dt>
<dd>After the followup debate, the Microsoft Principal Cybersecurity Strategist concludes that monocultures aren’t really that bad after all. Desktop diversity seems to have established with the advent of Android and Ubuntu, and the expansion of Apple products, so the relevance of the Windows desktop monoculture may have decreased.</dd>
</dl>
<h3 id="aboutbananas">About Bananas</h3>
<dl>
<dt>* <a href="https://www.economist.com/blogs/feastandfamine/">Bananas: We have no bananas today</a></dt>
<dd>The lack of diversity in cultivated bananas remains the best non-technical example of precarious monocultures</dd>
</dl>
<h3 id="relatedandusefulprojects">Related and Useful Projects</h3>
<ul>
<li><p><a href="http://www.nmedia.net/flashrd/">flashrd</a>
Building small OpenBSD i386 and amd64 embedded systems. An ideal platform for small Tor relays and bridges.</p></li>
<li><p><a href="https://github.com/freebsd/crochet/">FreeBSD’s Crochet</a>
A tool for building FreeBSD images for embedded systems on a variety of architectures, including contemporary armv6 and armv7 hardware such as Raspberry Pis and BeagleBones. </p></li>
</ul>
<h3 id="chatterabouttdp">Chatter About <strong>TDP</strong></h3>
<ul>
<li><p><a href="http://www.bsdnow.tv/episodes/2016_02_10-the_state_of_bsd/">BSDNow.tv News Item on TB 5.5 Release</a></p></li>
<li><p><a href="https://lists.torproject.org/pipermail/tor-talk/2015-April/037649.html"><strong>TDP</strong> announced on the Tor-talk mailing list</a></p></li>
<li><p><a href="http://www.bsdnow.tv/episodes/2015_05_06-below_the_clouds/">Followed up by a headline on BSDNow.tv</a></p></li>
<li><p><a href="https://www.reddit.com/r/linux/comments/356iyy/torbsd_diversity_project_help_move_tor_nodes_from/">Reddit on <strong>TDP</strong></a>:
Before we publicly announced, a <strong>TDP</strong> Reddit thread. Very appreciated, but one important point of clarification: we are not interested in having Linux relays moved to BSD. If someone runs a relay, they should use the operating system they are most comfortable with. <strong>TDP</strong> is about affecting the BSD community and not converting anyone <strong>to</strong> the BSDs. Another quick comment is that we strongly agree in the larger monoculture problem. Ideal diversity would encompass a variety of applications and hardware, and that applies to Tor as much as anything. But there’s a major issue to consider, and that’s interoperability. There needs to be some agreement on protocols before there can be any routing or communications in general. If one mail server only talks SMTP and the other only UUCP, email routing does not happen.</p></li>
</ul>
<h3 id="complementarytorlinks">Complementary Tor Links</h3>
<ul>
<li><p><a href="https://gitweb.torproject.org/">The Tor Project’s Git Repository</a>. The home of of most of the Tor Project’s code base and most of <strong>TDP’s</strong> upstream.</p></li>
<li><p><a href="https://gitweb.torproject.org/tor.git/tree/doc/TUNING/">Tor GitWeb Tuning Document</a>, including sections on FreeBSD and OpenBSD.</p></li>
<li><p><a href="https://svn.torproject.org/svn/projects/articles/circumvention-features.html">Ten Things to Look for in a Circumvention Tool</a>. A dated but timeless piece from 2010 for those who doubt the integrity of an open source anonymity network versus the array of VPN and proxy services.</p></li>
</ul>
<h3 id="fromtheattic">From the Attic</h3>
<ul>
<li><p>“Findings Report on the Tor Browser Bundle User Experience” <a href="http://l7plhliaaob6puqw.onion/">via hidden web site</a> or <a href="https://l7plhliaaob6puqw.tor2web.org/">via Tor2Web</a>. This report from 2012–2013, summed up research conducted on the user experience (UX) for the Tor Browser bundle.</p></li>
<li><p>“The LibTech Scene and the BSD Projects after Snowden” <a href="http://twvihadsu5oznuux.onion/">via hidden web site</a> and <a href="https://twvihadsu5oznuux.tor2web.org/">via Tor2Web</a> is the basis of a number of birds-of-feather and similar events taking place from 2012 through 2014, including vBSDCon in 2013 and NYCBSDCon 2014.</p></li>
<li><p>An older, incomplete how-to entitled “Simple Web Sites with Tor’s Hidden Services: Unrestricted and Impossible to Block” <a href="http://3vk2dyth3w4zxdba.onion/">via a hidden web site</a> or <a href="https://3vk2dyth3w4zxdba.tor2web.org/">via Tor2Web</a>.</p></li>
</ul>
<h3 id="materials">Materials</h3>
<ul>
<li>A one-page <a href="materials/flier-bsd.html">informational flier</a> providing an overview of <strong>TDP</strong> for a BSD audience. It’s a call for engagement in which the case for using the *BSDs is assumed. The flier should print out on a single page.</li>
</ul>
<p><hr></p>
<p><em>Copyright © 2018 by The Tor BSD Diversity Project (TDP). All Rights Reserved.</em></p>
<p><code>last updated: Wed Aug 9 17:31:51 2017 UTC</code></p>
</body>
</html>