December 2014 - tbb-dev - lists.torproject.org

New Guy Wants To Help With The TBB Experience
by spencerone＠openmailbox.org 18 Dec '14

18 Dec '14

Hey Georg! > Hi SpencerOne, > > that fits perfectly. We are currently in the process of incorporating a > security slider into Tor Browser which lets users choose between four > different security levels: on the one end the slider allows the most > features while on the other end promises you high security and is > therefore restricting a bunch of browser features which are known to be > risky security-wise. The big question now is: how do we get that idea > transported to the user in the best possible way? > > Ongoing discussion is happening in https://bugs.torproject.org/9387. > For > the current solution which still lacks some features (see the above > mentioned ticket in our bugtracker for details) see our recently > released 4.5-alpha-2: > https://www.torproject.org/projects/torbrowser.html.en#downloads-alpha. > You'll find our work-of-progress clicking on the green onion -> > Preferences... -> Privacy and Security Settings. > > Feedback and help is very much appreciated be it on this mailing list > on > the security slider ticket directly or on IRC in #tor-dev (I saw we > missed us there). Oh, and if you are not interested in this particular > issue, no worries we have plenty of other UX improvements we need. Just > ask. > > Georg Thanks! I jumped in on the discussion with some thoughts; I hope they provide some value. Awesome, SpencerOne

1 0

New Guy Wants To Help With The TBB Experience
by spencerone＠openmailbox.org 18 Dec '14

18 Dec '14

Hey Nima! > Hi SpencerOne, > > Have you heard of our 2015 UX Sprint[1]? Will you be able to join us? > > [1] > https://trac.torproject.org/projects/tor/wiki/org/meetings/2015UXsprint > > Bests, > -- > Nima > 0XC009DB191C92A77B | @mrphs > > "I disapprove of what you say, but I will defend to the death your > right > to say it" --Evelyn Beatrice Hall Perfect timing as I will be back in the area right then. Reading through everything is going well, however, being new to mailing lists and IRC, I am unsure of how to add myself to the attendee table for the sprint. As for the location, when it becomes definitive, is the link you shared the place to check? Awesome, SpencerOne

2 2

New Guy Wants To Help With The TBB Experience
by spencerone＠openmailbox.org 17 Dec '14

17 Dec '14

Hey! My name is SpencerOne and I am a HuX designer looking to help out with usability in any way that I can. My background is in experience design with formal, and informal, training in form development, materials, sustainability, social anthropology, and, in context to all of these, philosophy. I use, and spread the word about, TOR daily, so I figured I should get involved. If anybody needs help with usability or visualization, or anything that these apply to, please reach out, as I would love to give back. Awesome, SpencerOne

3 2

Are incremental updates working?
by Mike Perry 12 Dec '14

12 Dec '14

I just noticed that my 4.5-alpha-2 update from 4.5-alpha-1 on Linux was 50M instead of 2M, so presumably I did not get the incremental version of the MAR. I don't recall seeing any error messages about the incremental failing, but perhaps I blinked and missed it. Is this an implementation bug? Or did we just not properly deploy the incrementals for 4.5-alpha-2 on the website correctly in some way? It looks like https://dist.torproject.org/torbrowser/update_2/4.5-alpha-1-4.5-alpha-2-lin… exists and seems to have sane data in it, so perhaps this is actually a bug? Are incremental updates working for anyone else? -- Mike Perry

4 7

Might miss the meeting again..
by Mike Perry 08 Dec '14

08 Dec '14

Sorry everyone, something came up over the weekend that I need to take care of this morning. I probably won't be able to make the meeting as a result. I'll see if I can appear briefly at some point, though. Just in case, I wanted to say that everyone did a great job handling 4.0.2 and 4.5-alpha-2 mostly without me last week. I'm glad that we're finally reducing the single-person bottlenecks in our release process, and in development and code review in general. Last week, other than handling Tor meeting things, I wrote the team status report, and moved all our remaining November tickets to December: https://trac.torproject.org/projects/tor/query?keywords=~TorBrowserTeam2014…. I completely de-tagged a few that seemed to be stalling and also unlikely to be as important as the rest. You should take a look at this list and make sure you agree it captures the stuff we should be working on in December and beyond. Many things are ready for review in that list, so that seems like it should be the short-term priority for this week. We should have some conversation about if we want to have a non-security 4.5-alpha-3 release before the holdays with MAR signing and some of those other fixes that didn't make it into 4.5-alpha-2, or if we want to hold off and do nightly testing only. -- Mike Perry

1 0

localization question
by Arthur D. Edelstein 03 Dec '14

03 Dec '14

Hi All, What's the correct procedure for localizing strings in torbutton? Do I just need to add strings to src/chrome/locale/en/torbutton.dtd, update the references in the code, and then translators take care of the rest? And what about tor-browser.git? Thanks, Arthur

2 1

Missing the meeting tomorrow
by Mike Perry 01 Dec '14

01 Dec '14

I will also be traveling tomorrow, and will be occupied by a Tor meeting for the rest of this week. Last week I backported a few of the 4.5-alpha patches and rebased and prepared everything for 4.0.2. Unfortunately, as GeKo discovered, one of the Mozilla fixes broke our build system, so the builds are delayed. I think that GeKo has everything he needs to be able to wrap up 4.0.2, and also prepare 4.5-alpha-2. I should be available in short bursts to help with any issues that may arise and to provide matching builds and sigs, but otherwise most decisions will fall to him this week. -- Mike Perry

1 0

missing meeting on Monday
by Arthur D. Edelstein 01 Dec '14

01 Dec '14

Hi All, I'll be missing the tbb-dev IRC meeting on Monday because of travel, so I'll just post what I've been working on here: i. I posted a revised patch for #13671 ("Circuit display is broken if bridges are being used") [1]. I wanted to improve error handling in this patch, so I switched some API calls in tor-control-port.js from traditional async callbacks to Promise-based async. Then I enhanced tor-circuit-display.js to use the Firefox module Task.jsm [2], which turns out to be a very pleasant way to write simple async JS code. ii. I worked a bit more on #13749 ("Write tests for network.thirdparty.isolate") [3], but this still needs some polishing. I'll try to work on it this week as time allows. Arthur [1] https://trac.torproject.org/projects/tor/ticket/13671 [2] https://developer.mozilla.org/en-US/docs/Mozilla/JavaScript_code_modules/Ta… [3] https://trac.torproject.org/projects/tor/ticket/13749

1 0

Tor Messenger and Certificates
by Sukhbir Singh 01 Dec '14

01 Dec '14

Hi list, We are thinking of including certificates for OFTC, CCC, etc. with Tor Messenger, since some of these popular chat servers use self-signed certificates. Quick questions about this: - Is this a good idea -- including these certificates by default? Or should we let the users click on "add exception" and then add the certificates themselves? - What is a good way of achieving this (adding these certificates) as part of the build process? I can't seem to find a "proper" way and documentation seems to be lacking. I think we have to update cert8.db as part of the default profile, but I was wondering if there is some documentation or a preferred way of doing this. Thanks, -- Sukhbir

5 7