Alcune cose che puoi fare subito:

1. Puoi installare un relay per aiutare a far crescere la rete Tor.
2. Parla coi tuoi amici! Fagli realizzare un relay. Fagli aprire degli hidden services. Falli parlare di Tor coi loro amici.
3. Se condividi gli obiettivi di Tor, per favore fai una donazione e sostieni lo sviluppo futuro di Tor. Cerchiamo anche più sponsor — se conosci aziende, ONG, enti od altre organizzazioni interessate ad anonimato / privacy / sicurezza delle comunicazioni, fagli conoscere il nostro progetto.
4. Cerchiamo altri buoni esempi sull'uso di Tor e sui suoi utenti. Se usi Tor in una situazione o per scopi non ancora descritti su questa pagina e se sei disposto a condividere queste informazioni con noi, ci piacerebbe sentire la tua storia.

Applicazioni di supporto

1. Servono dei migliori e nuovi metodi per intercettare le richieste DNS in modo che non siano svelate a un osservatore locale mentre cerchiamo di essere anonimi. (Ciò succede se l'applicazione esegue la risoluzione DNS prima di rivolgersi al proxy SOCKS.)
2. Tsocks/dsocks:
   • Bisognerebbe applicate le patch al programma "dsocks" di Dug Song in modo che usi i comandi mapaddress di Tor dall'interfaccia di controllo, così da non sprecare un intero ciclo in Tor per fare la risoluzione prima di connettersi.
   • Dobbiamo fare in modo che il nostro script torify distingua se siano installati tsocks o dsocks, e li chiami di conseguenza. Ciò significa probabilemnte unificarne le interfacce e potrebbe essere necessario condividere del codice tra di essi o scartarne uno direttamente.
3. Chi gestisce un relay spesso vuole avere un BandwidthRate durante parte della giornata, e un altro BandwidthRate nell'altra parte del giorno. Invece di programmarlo dentro Tor, sarebbe bello avere un piccolo script che parla tramite la Tor Controller Interface e fa un setconf per modificare la banda disponibile. Ce n'è già uno per Unix e Mac (usa bash e cron), ma gli utenti Windows hanno ancora bisogno di una soluzione.
4. A proposito di geolocalizzazione, qualcuno potrebbe disegnare un mappamondo indicante tutti i relay Tor. Un premio se si aggiorna man mano che la rete cresce e cambia. Purtroppo la maniera più semplice per farlo implica inviare tutti i dati a Google che disegni la mappa per te. Che conseguenze ha per la privacy? Ci sono altre buone soluzioni?

Divulgazione

1. Creare un logotipo sotto licenza Creative Commons che tutti possano usare e modificare
2. Creare una presentazione utilizzabile nei vari incontri e convegni di utenti in giro per il mondo
3. Creare un video sugli usi positivi di Tor. Ce ne sono già alcuni iniziati su Seesmic.
4. Creare un poster, od una serie di posters, attorno ad un tema, come "Tor per la libertà!"

Documentazione

1. Aiuta Matt Edman con la documentazione e con le guide del suo Tor controller, Vidalia.
2. Analizzare e documentare la nostra lista di programmi configurabili per essere usati con Tor.
3. Abbiamo bisogno di una documentazione migliore per intercettare dinamicamente le connessioni e inviarle via Tor. tsocks (Linux), dsocks (BSD), e freecap (Windows) sembrano dei buoni candidati, come pure un miglior uso della nosta nuova funzione TransPort.
4. C'è una lista immensa di programmi potenzialmente utili che si interfacciano con Tor. In quali situazioni sono utili? Aiutaci a testarli e a documentare i risultati.
5. Aiuta a tradurre e migliorare le pagine web e la documentazione in altre lingue. Vedi le linee guida per la traduzione se vuoi dare una mano. Servono in particolare traduzioni in Arabo e Farsi, per i tanti utenti Tor in aree dove vige la censura. Serve anche aiuto per correggere e migliorare questa traduzione italiana.

Progetti di siluppo software

You may find some of these projects to be good Google Summer of Code 2009 ideas. We have labelled each idea with how useful it would be to the overall Tor project (priority), how much work we expect it would be (effort level), how much clue you should start with (skill level), and which of our core developers would be good mentors. If one or more of these ideas looks promising to you, please contact us to discuss your plans rather than sending blind applications. You may also want to propose your own project idea which often results in the best applications.

(NdT: Le schede di alcuni progetti sono in inglese e verranno tradotte man mano.)

1. Tor Browser Bundle for Linux/Mac OS X
   Priority: High
   Effort Level: High
   Skill Level: Medium
   Likely Mentors: Steven, Andrew
   The Tor Browser bundle incorporates Tor, Firefox, and the Vidalia user interface (and optionally Pidgin IM). Components are pre-configured to operate in a secure way, and it has very few dependencies on the installed operating system. It has therefore become one of the most easy to use, and popular, ways to use Tor on Windows.
   However, there is currently no comparable package for Linux and Mac OS X, so this project would be to implement Tor Browser Bundle for these platforms. This will involve modifications to Vidalia (C++), possibly Firefox (C) then creating and testing the launcher on a range of operating system versions and configurations to verify portability.
   Students should be familiar with application development on one or preferably both of Linux and Mac OS X, and be comfortable with C/C++ and shell scripting.
   Part of this project could be usability testing of Tor Browser Bundle, ideally amongst our target demographic. That would help a lot in knowing what needs to be done in terms of bug fixes or new features. We get this informally at the moment, but a more structured process would be better.
2. Translation wiki for our website
   Priority: High
   Effort Level: Medium
   Skill Level: Medium
   Likely Mentors: Jacob
   The Tor Project has been working over the past year to set up web-based tools to help volunteers translate our applications into other languages. We finally hit upon Pootle, and we have a fine web-based translation engine in place for Vidalia, Torbutton, and Torcheck. However, Pootle only translates strings that are in the "po" format, and our website uses wml files. This project is about finding a way to convert our wml files into po strings and back, so they can be handled by Pootle.
3. Help track the overall Tor Network status
   Priority: Medium to High
   Effort Level: Medium
   Skill Level: Medium
   Likely Mentors: Karsten, Roger
   It would be great to set up an automated system for tracking network health over time, graphing it, etc. Part of this project would involve inventing better metrics for assessing network health and growth. Is the average uptime of the network increasing? How many relays are qualifying for Guard status this month compared to last month? What's the turnover in terms of new relays showing up and relays shutting off? Periodically people collect brief snapshots, but where it gets really interesting is when we start tracking data points over time.
   Data could be collected from the Tor Network Scanners in TorFlow, from the server descriptors that each relay publishes, and from other sources. Results over time could be integrated into one of the Tor Status web pages, or be kept separate. Speaking of the Tor Status pages, take a look at Roger's Tor Status wish list.
4. Improving Tor's ability to resist censorship
   Priority: Medium to High
   Effort Level: Medium
   Skill Level: High
   Likely Mentors: Nick, Roger, Steven
   The Tor 0.2.0.x series makes significant improvements in resisting national and organizational censorship. But Tor still needs better mechanisms for some parts of its anti-censorship design. For example, current Tors can only listen on a single address/port combination at a time. There's a proposal to address this limitation and allow clients to connect to any given Tor on multiple addresses and ports, but it needs more work. Another anti-censorship project (far more difficult) is to try to make Tor more scanning-resistant. Right now, an adversary can identify Tor bridges just by trying to connect to them, following the Tor protocol, and seeing if they respond. To solve this, bridges could act like webservers (HTTP or HTTPS) when contacted by port-scanning tools, and not act like bridges until the user provides a bridge-specific key.
   This project involves a lot of research and design. One of the big challenges will be identifying and crafting approaches that can still resist an adversary even after the adversary knows the design, and then trading off censorship resistance with usability and robustness.
5. Tuneup Tor!
   Priority: Medium to High
   Effort Level: Medium to High
   Skill Level: High
   Likely Mentors: Nick, Roger, Mike, Karsten
   Right now, Tor relays measure and report their own bandwidth, and Tor clients choose which relays to use in part based on that bandwidth. This approach is vulnerable to attacks where relays lie about their bandwidth; to address this, Tor currently caps the maximum bandwidth it's willing to believe any relay provides. This is a limited fix, and a waste of bandwidth capacity to boot. Instead, Tor should possibly measure bandwidth in a more distributed way, perhaps as described in the "A Tune-up for Tor" paper by Snader and Borisov. One could use current testing code to double-check this paper's findings and verify the extent to which they dovetail with Tor as deployed in the wild, and determine good ways to incorporate them into their suggestions Tor network without adding too much communications overhead between relays and directory authorities.
6. Improving Polipo on Windows
   Priority: Medium to High
   Effort Level: Medium
   Skill Level: Medium
   Likely Mentors: Martin
   Help port Polipo to Windows. Example topics to tackle include: 1) the ability to asynchronously query name servers, find the system nameservers, and manage netbios and dns queries. 2) manage events and buffers natively (i.e. in Unix-like OSes, Polipo defaults to 25% of ram, in Windows it's whatever the config specifies). 3) some sort of GUI config and reporting tool, bonus if it has a systray icon with right clickable menu options. Double bonus if it's cross-platform compatible. 4) allow the software to use the Windows Registry and handle proper Windows directory locations, such as "C:\Program Files\Polipo"
7. Implement a torrent-based scheme for downloading Thandy packages
   Priority: Medium to High
   Effort Level: High
   Skill Level: Medium to High
   Likely Mentors: Martin, Nick
   Thandy is a relatively new software to allow assisted updates of Tor and related software. Currently, there are very few users, but we expect Thandy to be used by almost every Tor user in the future. To avoid crashing servers on the day of a Tor update, we need new ways to distribute new packages efficiently, and using libtorrent seems to be a possible solution. If you think of other good ideas, great - please do let us know!
   We also need to investigate how to include our mirrors better. If possible, there should be an easy way for them to help distributing the packages.
8. Tor Controller Status Event Interface
   Priority: Medium
   Effort Level: Medium
   Skill Level: Low to Medium
   Likely Mentors: Matt
   There are a number of status changes inside Tor of which the user may need to be informed. For example, if the user is trying to set up his Tor as a relay and Tor decides that its ports are not reachable from outside the user's network, we should alert the user. Currently, all the user gets is a couple log messages in Vidalia's 'message log' window, which they likely never see since they don't receive a notification that something has gone wrong. Even if the user does actually look at the message log, most of the messages make little sense to the novice user.
   Tor has the ability to inform Vidalia of many such status changes, and we recently implemented support for a couple of these events. Still, there are many more status events the user should be informed of and we need a better UI for actually displaying them to the user.
   The goal of this project then is to design and implement a UI for displaying Tor status events to the user. For example, we might put a little badge on Vidalia's tray icon that alerts the user to new status events they should look at. Double-clicking the icon could bring up a dialog that summarizes recent status events in simple terms and maybe suggests a remedy for any negative events if they can be corrected by the user. Of course, this is just an example and one is free to suggest another approach.
   A person undertaking this project should have good UI design and layout and some C++ development experience. Previous experience with Qt and Qt's Designer will be very helpful, but are not required. Some English writing ability will also be useful, since this project will likely involve writing small amounts of help documentation that should be understandable by non-technical users. Bonus points for some graphic design/Photoshop fu, since we might want/need some shiny new icons too.
9. Improve our unit testing process
   Priority: Medium
   Effort Level: Medium
   Skill Level: Medium
   Likely Mentors: Nick, Roger
   Tor needs to be far more tested. This is a multi-part effort. To start with, our unit test coverage should rise substantially, especially in the areas outside the utility functions. This will require significant refactoring of some parts of Tor, in order to dissociate as much logic as possible from globals.
   Additionally, we need to automate our performance testing. We've got buildbot to automate our regular integration and compile testing already (though we need somebody to set it up on Windows), but we need to get our network simulation tests (as built in TorFlow) updated for more recent versions of Tor, and designed to launch a test network either on a single machine, or across several, so we can test changes in performance on machines in different roles automatically.
10. Help revive an independent Tor client implementation
    Priority: Medium
    Effort Level: High
    Skill Level: Medium to High
    Likely Mentors: Karsten, Nick
    Reanimate one of the approaches to implement a Tor client in Java, e.g. the OnionCoffee project, and make it run on Android. The first step would be to port the existing code and execute it in an Android environment. Next, the code should be updated to support the newer Tor protocol versions like the v3 directory protocol. Further, support for requesting or even providing Tor hidden services would be neat, but not required.
    A prospective developer should be able to understand and write new Java code, including a Java cryptography API. Being able to read C code would be helpful, too. One should be willing to read the existing documentation, implement code based on it, and refine the documentation when things are underdocumented. This project is mostly about coding and to a small degree about design.
11. New Torbutton Features
    Priority: Medium
    Effort Level: High
    Skill Level: High
    Likely Mentors: Mike
    There are several good feature requests on the Torbutton Flyspray section. In particular, Integrating 'New Identity' with Vidalia, ways of managing multiple cookie jars/identities, preserving specific cookies when cookies are cleared, better referrer spoofing, correct Tor status reporting, and "tor://" and "tors://" urls are all interesting features that could be added.
    This work would be independent coding in Javascript and the fun world of XUL, with not too much involvement in the Tor internals.
12. New Thandy Features
    Priority: Medium
    Effort Level: Medium
    Skill Level: Medium to High
    Likely Mentors: Martin
    Additional capabilities are needed for assisted updates of all the Tor related software for Windows and other operating systems. Some of the features to consider include: 1) Integration of the MeTooCrypto Python library for authenticated HTTPS downloads. 2) Adding a level of indirection between the timestamp signatures and the package files included in an update. See the "Thandy attacks / suggestions" thread on or-dev. 3) Support locale specific installation and configuration of assisted updates based on preference, host, or user account language settings. Familiarity with Windows codepages, unicode, and other character sets is helpful in addition to general win32 and posix API experience and Python proficiency.
13. Simulator for slow Internet connections
    Priority: Medium
    Effort Level: Medium
    Skill Level: Medium
    Likely Mentors: Steven
    Many users of Tor have poor-quality Internet connections, giving low bandwidth, high latency, and high packet loss/re-ordering. User experience is that Tor reacts badly to these conditions, but it is difficult to improve the situation without being able to repeat the problems in the lab.
    This project would be to build a simulation environment which replicates the poor connectivity so that the effect on Tor performance can be measured. Other components would be a testing utility to establish what are the properties of connections available, and to measure the effect of performance-improving modifications to Tor.
    The tools used would be up to the student, but dummynet (for FreeBSD) and nistnet (for Linux) are two potential components on which this project could be built. Students should be experienced with network programming/debugging and TCP/IP, and preferably familiar with C and a scripting language.
14. An Improved and More Usable Network Map in Vidalia
    Priority: Low to Medium
    Effort Level: Medium
    Skill Level: Medium
    Likely Mentors: Matt
    One of Vidalia's existing features is a network map that shows the user the approximate geographic location of relays in the Tor network and plots the paths the user's traffic takes as it is tunneled through the Tor network. The map is currently not very interactive and has rather poor graphics. Instead, we implemented KDE's Marble widget such that it gives us a better quality map and enables improved interactivity, such as allowing the user to click on individual relays or circuits to display additional information. We want to add the ability for users to click on a particular relay or a country containing one or more Tor exit relays and say, "I want my connections to exit from here."
    This project will first involve getting familiar with Vidalia and the Marble widget's API. One will then integrate the widget into Vidalia and customize Marble to be better suited for our application, such as making circuits clickable, storing cached map data in Vidalia's own data directory, and customizing some of the widget's dialogs.
    A person undertaking this project should have good C++ development experience. Previous experience with Qt and CMake is helpful, but not required.
15. Bring moniTor to life
    Priority: Low
    Effort Level: Medium
    Skill Level: Low to Medium
    Likely Mentors: Karsten, Jacob
    Implement a top-like management tool for Tor relays. The purpose of such a tool would be to monitor a local Tor relay via its control port and include useful system information of the underlying machine. When running this tool, it would dynamically update its content like top does for Linux processes. This or-dev post might be a good first read.
    A person interested in this should be familiar with or willing to learn about administering a Tor relay and configuring it via its control port. As an initial prototype is written in Python, some knowledge about writing Python code would be helpful, too. This project is one part about identifying requirements to such a tool and designing its interface, and one part lots of coding.
16. Torbutton equivalent for Thunderbird
    Priority: Low
    Effort Level: High
    Skill Level: High
    Likely Mentors: Mike
    We're hearing from an increasing number of users that they want to use Thunderbird with Tor. However, there are plenty of application-level concerns, for example, by default Thunderbird will put your hostname in the outgoing mail that it sends. At some point we should start a new push to build a Thunderbird extension similar to Torbutton.
17. Intermediate Level Network Device Driver
    Priority: Low
    Effort Level: High
    Skill Level: High
    Likely Mentors: Martin
    The WinPCAP device driver used by Tor VM for bridged networking does not support a number of wireless and non-Ethernet network adapters. Implementation of a intermediate level network device driver for win32 and 64bit would provide a way to intercept and route traffic over such networks. This project will require knowledge of and experience with Windows kernel device driver development and testing. Familiarity with Winsock and Qemu would also be helpful.
18. Improve Tor Weather
    Priority: Medium
    Effort Level: Medium
    Skill Level: Medium
    Likely Mentors: Jake, Roger
    Tor weather is a tool that allows signing up to receive notifications via email when the tracked Tor relay is down. Currently, it isn't really useful for people who use the hibernation feature of Tor, or for those who have to shut down their relay regularly. During the project, Tor weather could be extended to allow more flexible configurations. Other enhancements are also possible: Weather could send out warnings when your relay runs an out-of-date version of Tor, or when its observed bandwith drops below a certain value. It might also be a nice tool that allows for checking whether your relay has earned you a T-Shirt, or sending reminders to directory authorities that their keys are about to expire. Be creative, and consider how the above project to track overall network status can help you get your job done more quickly! See also its README and TODO.
19. Bring up new ideas!
    Don't like any of these? Look at the Tor development roadmap for more ideas. Some of the current proposals might also be short on developers.

---