Tor: Open Positions

---

Tor is hiring! We're looking for self-motivated individuals who are able to work independently and want to help make Tor better.

In particular, we're looking for a few people:

• Systems Developer
• Microsoft Windows Developer

Working on Tor is rewarding because:

• You can work your own hours in your own locations. As long as you get the job done, we don't care about the process.
• We only write free (open source) software. The tools you make won't be locked down or rot on a shelf.
• You will work with a world-class team of anonymity experts and developers on what is already the largest and most active strong anonymity network ever.

We want you to have good communication and writing skills (in particular, you should know how to keep other project members informed of your progress), and we want you to know how to figure out what needs doing and then take the initiative to do it. Most project members play more than one role, so combination developer/activist are very welcome.

Systems Developer

• New Secure Updater Features:
  Additional capabilities are needed for assisted updates of all the Tor related software for Windows and other operating systems. Some of the features to consider include:
  1. Integration of the MeTooCrypto Python library for authenticated HTTPS downloads.
  2. Adding a level of indirection between the timestamp signatures and the package files included in an update. See the "Thandy attacks / suggestions" thread on or-dev.
  3. Support locale specific installation and configuration of assisted updates based on preference, host, or user account language settings. Familiarity with Windows codepages, unicode, and other character sets is helpful in addition to general win32 and posix API experience and Python proficiency.
• Extend the Tor Secure Auto-Update Framework:

  We've developed a secure auto-update framework, codenamed Thandy. It needs some design work to be finished, some security decisions to be made, and then code written to actually get the software and infrastructure running. The primary goal is to get this working on Microsoft Windows operating systems. Secondary goal is to have this work with Apple OS X. The TODO file explains more of the goals.

  A person undertaking this project should have good C/C++ development experience. Previous experience with Qt is helpful, but not required. One should also have a good understanding of common security practices, such as package signature verification. Good writing ability is also important for this project, since a vital step of the project will be producing a design document to review and discuss with others prior to implementation.

Microsoft Windows Developer

This person needs to be very familiar with Windows at a system and network level. We're looking or someone to do two projects:

• Improving Polipo on Windows:

  Help port Polipo to Windows. Example topics to tackle include:

  1. the ability to asynchronously query name servers, find the system nameservers, and manage netbios and dns queries.
  2. manage events and buffers natively (i.e. in Unix-like OSes, Polipo defaults to 25% of ram, in Windows it's whatever the config specifies).
  3. some sort of GUI config and reporting tool, bonus if it has a systray icon with right clickable menu options. Double bonus if it's cross-platform compatible.
  4. allow the software to use the Windows Registry and handle proper Windows directory locations, such as "C:\Program Files\Polipo"

• Intermediate Level Network Device Driver:
  The WinPCAP device driver used by Tor VM for bridged networking does not support a number of wireless and non-Ethernet network adapters. Implementation of a intermediate level network device driver for win32 and 64bit would provide a way to intercept and route traffic over such networks. This project will require knowledge of and experience with Windows kernel device driver development and testing. Familiarity with Winsock and Qemu would also be helpful.

The best way to get noticed as a good developer is to join the community and start helping out. We have a great core group of developers working on the Tor software itself as well as supporting software like Vidalia, Torbutton, etc.

Periodically we get new funding to work on more development projects. Your goal should be to get into the list of core project members so we think of you when new funding arrives. We're particularly looking for Qt developers and people to help maintain Vidalia.