ACTIVE TODO'S ============= For 0.32: --------- - Integrate modified pktstats - Replace torksocks with torsocks. - Add badexit icon - Add KB/s to traffic logs - implement bootstrap info - fix use of mapaddress New Features TODO sometime: --------------------------- - upnp bug - Message: Ports 80 and 443 on your router urn:schemas-upnp-org:device:WANConnectionDevice:1 successfully forwarded to the ports 9030 and 9001 used by your Tor server. - It would be nice if Tork integrates an option to make it possible to select and exclude Tor servers that are running older and possibly (hacked) versions of Tor, other then the current stable and some newer Alpha builds. Servers like nixnix and bettyboob are at least suspicious because they use the same ISP, old version, OS build,  and push a huge amount of traffic.Adding this option would make it easier to spot and add servers like these to the enemy server list. - Fix the controlport warnings when we don't lock the controlport quickly enough. - If you don't apply settings and have select server in the drop down menu, what are we supposed to do? - Don't apply server/upnp settings (obviously) - Just prevent server systray info from displaying? (And leave 'server' selected in drop-down?) - Leave 'server' grayed-out and unapplied until settings are applied? - tdesudo is fucked. need to use the API. - Add a 'monitor' option - tork does not do any setconf'ing. - Ability to import blocklists. - tdehotnewstuff? * customized pktstat to report all non-tor traffic - non-tor traffic osd - report kb/s in traffic log - report tor kb/s in traffic log too! * Separate profiles for separate tor servers. Add an argument (-profile profilename) specifying the profilename to use. Add a Tor->Create New Profile button Add a Tor->Save Profile button (only enabled when non-default profile in use). -Saves to desktop file for launching the profile. TorkConfig::instance(QString()); delete TorkConfig::self(); TorkConfig::instance(configurationFile); TorkConfig* config = TorkConfig::self(); //Make a copy of config for use in a profile TorkConfig::self()->config()->copyTo("profilename",TorkConfig::self()->config() ); //Load a profile TDEConfig *tmpconfig; tmpconfig = new TDEConfig("torkspecialrc", false, false); tmpconfig->copyTo("torkspecialrctmp",TorkConfig::self()->config()); now delete torkspecialrctmp - maybe I haven't noticed but vidalia gives other nodes time to re-route when disconnecting does Tork do that? - DONE * Add warning when tork is configured to expect privoxy to be running at startup but there is no sign of it - DONE - Fix: when selecting 'client' from start-up icon, ensure 'None is set in server dropdown - DONE - text alongside icons in toolbar - DONE - If firstrun wizard cancelled, then cancel out of TorK and re-run it next time Tor is run. - DONE For 0.32: - Use separate pidgin settings for anonymity. - I just managed to explain how to edit torc to a total non-tech person, but all that was about was simply adding "fascist firewall" parameter - maybe Tork could check if there is one in it's way and try using http port's if needed? (informing the user so that the firewall could be edited if possible) * [wish] the ability to choose to have the state "anonymized" or "non-anonymized" by default * investigate use of unix sockets a bit * circuitidletimeout - set to 4 or 5 hours to prevent lag when building circuits. * keep track of programs anonymized from Tork/torkify and warn heavily if they leak traffic. * merge torsocks patches * Shallot Integration. To be useful would have to be bundled. For 0.32: - Port to KDE4 - End 2008 Sometime: * use kpaaworddialog and tdesuclient for password requests - Re-tool kicker applet 1. 'Optimize' button to replace 'Change Identity': - 'For Speed' CircuitBuildTimeout 5 (or values as low as 2) KeepalivePeriod 60 NewCircuitPeriod 15 NumEntryGuards 8 CircuitIdleTimeout 600 - 'For Safety' Default values of above. Launches wizard that configures according to your requirements. 'Change ID' can remain in system tray. Add changeID to OSD. - DONE Add 'Optimize' to system tray. 3. Merge KB/s and onion progress display to a single column. 4. Integration with Firefox. - Prompt for installation of TorButton when first launched. - Ensure torbutton toggled on when launched. 6. A stacking OSD, i.e. no listview. - Crystal-effect black with white/grey border - Transparent - Upright rounded rectangle. - Each item represents an active stream. - Each item contains: - A 16x16 'cancel icon for killing the stream - A 22x22 icon representing the site/service. - The host name. - 7. An Anonymous Email Wizard. - Assist with download of mixminion. - Explain 'advanced' usage with KMail. - Explain 'simple' usage with plain interface. - Install sendmail-mixminion script A test tool: - Build circuits with selected routers - Fetch a specified resource with circuits - B/W Graphs etc. - Facility to distribute test specs to clients * Toggle javascript and cookies from control button in konqueror =============== PREVIOUS TODO'S =============== Done in 0.31: - fix version checking code for 'download stable' - temp orport rather than torkconfig::orport - Fix MapAddress Done in 0.29.2: * use a qvaluelist for the server list (speed up populating it). likewise for the streamlist. (ALREADY DONE) * add ability to reverse-resolve ip addresses in traffic log on-demand - DONE * make log entries copyable - DONE * add hidden service to 'run server' dropdown. - DONE * ability to drag urls to system tray - DONE. For 0.29: 1. Speed up pop-up windows - DONE 1. Disable padlock when performing updates. - CANTDO 1. RejectPlainTextPorts. Re-implement to block and warn. - DONE 8. Quick B/W Configuration in System Tray a la KTorrent. - DONE 1. Advise users on how to prevent privoxy running automatically. Attempt to update privoxy conf and sighup it. - DONE 1. Force users to re-boot before running first-run wizard, just in case they've installed tor/privoxy freshly, it isn't running, but will only run at start-up - DONE For 0.29: 1. - Redesign OSD. Make it more useful and less ugly. ------------------------------------------- using TorK with konqueror When switching konqueror's anonimity there are some problems: 1. Java and javascript uses same checkbox so you must use both of them or not use at all. 2 When you turn off anonimity tork turn on all of things in list (java/js, plugins, browser identification, etc) even they wasn't used before tork reconfigure konqueror to use tor. ------------------------------------------- > > - In the First-Run Wizard I think it should be possible to enter a > password for local Tor instances (it's already possible to do this for > remote instances) if the user already has set one. Or do you have some > kind of reason for the current absense of it? > TODO for 0.27: - Upnp * UPNP!! o make dirport configurable * Usability: o Remove 'connect'/disconnect from toolbar o Simple Mode: - Add 'Advanced' button that will reveal: - 'Launch/Server Filter' button - 'Citizen' button - 'Fail-Safe' button and 'Fail Safe' config - 'Change Identity' button - So in simple mode only 'server' and 'un-censor' remain - 'Usability' config section o 'My Tor Server', 'My Server BW', and 'Configure Server'remain hidden unless a server is actually running (and advanced mode is selected?). o 'My Hidden Services' remains hidden unless user elects to create a hidden service from main listing. o 'My Network View' remains hidden until user right-clicks on server list to select servers. * New Server wizard for UPNP and basic server info * Integrate shallot into hidden service wizard? * Get rid of libwhich for christ's sake * Use overlays for server icon QPixmap icon = DesktopIcon( m_iconName ); QPixmap overlay( locate ( "icon", KMimeType::favIconForURL( m_filterData->uri() ) + ".png" ) ); if ( !overlay.isNull() ) { int x = icon.width() - overlay.width(); int y = icon.height() - overlay.height(); if ( icon.mask() ) { QBitmap mask = *icon.mask(); bitBlt( &mask, x, y, overlay.mask() ? const_cast(overlay.mask()) : &overlay, 0, 0, overlay.width(), overlay.height(), overlay.mask() ? OrROP : SetROP ); icon.setMask(mask); } bitBlt( &icon, x, y, &overlay ); } * gnutls TODO FOR 0.23 --------------------- Major * Applet that displays full raw running config and allows you to set raw options manually and on the fly. * Copy ktorrent's bandwidth toggling in the systray menu * Review konqueror against threats in http://torbutton.torproject.org/dev/ * Check torkify installation when launching torkify Minor * use kpaaworddialog and tdesuclient for password requests * Toggle javascript and cookies from control button in konqueror * rename 'my network view' * Use RelayBandwidthRate * Use cookieauthfile and put in ~/.tork * When server toggled off, throttle bandwidth or something to genuinely stop it. * Fiddle with screen dimensions - make usable for smaller resolutions * Fix bridges * Authentication cookie - more granular help * Spiffify gpg refresh TODO FOR 0.24 --------------------- * A servers history tab, built on a sqlite table. This will accumulate server lifetime history. It will also collect user's usage history of each server. TODO SOMETIME ------------- * Keep lobbying for a friendlier tor landing-page with meaningful info. * use "GETINFO addr-mappings/control". * Fix installation paths - autoconf voodoo required. * Use getinfo desc/id/or instead of getinfo server/status/fp * Nested server list by subnet * Customise ifdefs for livecd? * reduce gcc warnings * Improve stream OSD * Re-write controller logic. * use kompile instead of arkollon * Split out tork.cpp a bit, at least a vagure gesture towards cleaner code * Find and squash as many bugs as possible in tdeconfig and elsewhere. * 'Configure KMail' wizard for Mixminion * filter log with right-click * Full-refresh-of-server-list button * Blogging wizard * Pre-configure hidden service irc on kopete WON'T DO -------- * universal sidebar (?) DONE ---- * if authentication isn't enabled, enable authentication for the duration of the session Options * for 'bw options' allow tork to always set values,even when greyed out. selecting 'default' should reset values to default. * for 'performance' do the same * for 'normal settings' do the same. * for 'server' do not store 'old' values if greyed out, but always apply values. this will work because 'never run as server' is tied to clientonly. * remove 'i'm special' * fix exitnode selection * fix the way some options were being applied while tor is running * make dynamic password setting the default authentication option In 0.22 ------- * ifdefs for livecd: Looking through the UI: 1. Remove options to download and install software X 2. Remove start/stop Tor since this really only connects/disconnects from Tor. 3. Remove anonymous browsing with {Konqueror, Firefox, Opera). x 4. Remove create anonymous services, though the search for hidden services is nice. x 5. Remove anonymous kopete, IRC, SSH, Telnet, GPG keys (I may add the hidden services to gpg.conf), shell. x 6. Remove fail-safe options, Incognito already has those. x 7. Remove run server options.x 8. Remove privoxy config options, the next version doesn't use privoxy. Maybe this could be determined at runtime depending on privoxy being installed. 9. Remove the "My Tor Client" config tab, I don't think there's anything useful for Incognito there. x 10. Remove the "My Tor Server", I think Incognito should be left as middle man. x 11. Remove "My Hidden Services", the next release has a different mechanism for configuring that based on a certain directory structure on the USB drive. x 12. remove konqueror plugin * Flush circuits for pseudonymity * Cope with new extra-info handling for servers * Resolve dns through tor * Fix stream bandwidth counting * add n/a icon * Privoxy config fix, see http://archives.seul.org/or/talk/Oct-2007/msg00291.html In 0.21: * Apply settings - make togglebox allow you to apply in future always * Make systray icon reflect client/server status rather than activity * Create manpages for all binaries * Make torkify installation easier to manage for packagers * Build patches from Patrick Matth�i * stop trying to connect if waiting more than 20 secs * copy control_auth_cookie to ~/.tor in first-run wizard * stop other passive popups when a showstopper popup has already been displayed * zeroise netstats on disconnect * Debug torkified mixminion * also, the fonts are wonky. in the wizard when it first started, it couldn't fit all the words it wanted to fit * under 'my server bandwidth', there's an option to 'don't reuse a connection if it is more than'. but that option is for clients, not servers. *also, under 'my server bandwidth', there's an option 'max number of simultaneous connections allowed'. my maxconn doesn't actually perform this function. nothing does. * remove ASSERT: "(mode & KFile::Files) == 0" in/tmp/buildd/tdelibs-3.5.5a.dfsg.1/./tdeio/tdefile/kurlrequester.cpp (311) In 0.19: * Name filter for server list * Fix 'My Client' bugs * Improve cookieauth attempts to find cookie, search multiple dirs. * Make passwords compulsory in firstrun wizard * Fix My Family * Add passive pop-up when hovering over system tray * Display server/client info (maybe number of running servers too?) in statusbar * Reflect server status in system tray * Complete Intro wizard - do's/dont's In 0.18: * Remove 'complete' server list from network view config. Speed up config page loading. * Use asynchronous dns * 'Failsafe' button * Add 'program' column to connection display * Implement general, server and client status events * Add country servers to exclude list if country blocked * Add TorK generated messages to Tor log and flag accordingly. * Implement entry-guards status events In 0.17: * Kicker applet * Konqueror plugin * Konqueror right-cliick actions * Add tor: io slave. * Reset filters when server list fully refreshed In 0.15: * If thttpd is installed, don't offer to download it. * Add 'Run Server' button * Alert user that KDE's non-anonymous settings have been restored when Tork is closed. * Beginnings of intro-wizard. * Speed up sliding notifications * Fix bug when stopping and restarting connection to tor. * Turn off extended selection of circuits when dragging to circuit pane In 0.14: * Pseudonymity button * Display servers by country * Combo select for tor session type (beneath onion on main page) * bw for streams * dynamically block exits with right-click * Fix browser settings for opera/firefox * count our own seconds for bw events * do not install libwhich and libgeoip * bandwidthrate at different times of the day Before 0.14: * tor traffic log. * log non-tor traffic * Replace privoxy templates with TorK ones that are a little more friendly * Add mixminion client * add privoxy configuration. * connect to tor (if it is running) during set-up wizard. this is to determine if the packaged installation has the controlport open or not. if it does not, then the set-up wizard will need to add the relevant conf line to every possible configuration file candidate it can think of. * SetUp Wizard should inspect your tor installation and recommend appropriate tork setup. Tor GUI Suggestions ------------------- X = Fully(!?) Done x = Sort of Done X Allow the user to fully configure Tor rather than manually searching for and opening text files. X Let users learn about the current state of their Tor connection (for example, how well the current Tor connection is working), and configure or find out whether any of their applications are using it. X Make alerts and error conditions visible to the user. X Run on at least one of Windows, Linux, and OS X, on a not-unusually-configured consumer-level machine. Provide detailed information about which applications, ports, or packets are (or are not!) passing through Tor, including accounting for both Tor- and non-Tor traffic. Provide additional statistics about the Tor connection. Give users more control over how their Tor behaves at certain times of day or in other contexts (like operating as a server). x How much bandwidth is Tor using? How does this compare to the overall network traffic to/from the computer? x Is there network traffic from ports or applications that the user intended to be anonymized? What Tor servers does the user know about on the network? Where are they? How available are they? An interface for displaying or controlling Tor paths: "show me the network from Africa by way of Asia". Think of the global satellite map from the movie Sneakers. Configure other running applications to use Tor (for example, by modifying or working through the network stack, and/or by altering application configurations). x Provide an elegant installer for Tor, your GUI submission, and other supporting applications. X Make your GUI manage the Tor process and other supporting applications -- start them, stop them, realize when they've died. X Provide meaningful defaults for a good Tor experience. Provide application-level anonymity -- that is, not just paying attention to transport anonymity on the level of Tor, but also paying attention to the anonymity of the http headers, cookies, etc. Let the user specify different Tor config option sets depending on time of day (e.g. daytime vs. nighttime). Provide useful controller functions for Tor servers too -- for example, walk the user through recommended bandwidth configurations and exit policies. X Have a "minimized view" of your GUI for common use, and then a more detailed view or set of windows when the user wants more detail. Provide a button or some automatically updating interface to let the user learn whether Tor is working currently, perhaps by accessing an external what's-my-IP site and seeing if it thinks you're a Tor server; and give useful messages and recommendations if it doesn't seem to be working. Provide a way to automatically configure local firewalls (ipchains, Windows firewalls, etc) to let Tor traffic out (and in, for Tor servers). As a bonus, configure it to prevent non-Tor traffic from leaving (and notify when it tries).