January 2017 - tor-project - lists.torproject.org

Re: [tor-project] meek-azure funding has run out
by Sina Rabbani 19 Apr '17

19 Apr '17

Dear Team, I have good news, Rabbi Rob Thomas (robt(a)cymru.com) is going to cover the costs associated with keeping meek alive. So far I have setup 2 new accounts with Amazon and Azure and working to confirm the functionality. https://d183ohpl22nq2f.cloudfront.net/ https://meek.azureedge.net/ Cloudfront is working fine and i'm trying to resolve issues with the Azure CDN. Is there a ticket I can update with these details? I think I should also bring up a backend server (bridge) and share the new config lines for the Tor Browser Bundle. I'm hoping to get all this done by Monday or sooner. Thank you David for keeping this service operational for so long and thank you Rob for keeping it alive! All the best, Sina "Be the change that you wish to see in the world." - Mahatma Gandhi ----- On Jan 19, 2017, at 2:17 AM, Yawning Angel yawning(a)schwanenlied.me wrote: > On Mon, 9 Jan 2017 20:08:03 -0800 > David Fifield <david(a)bamsoftware.com> wrote: > >> On Mon, Jan 09, 2017 at 03:06:17PM -0800, Shari Steele wrote: >> > Hey David. >> > How much money do we need for 2017? >> >> The total for meek-azure November 2015 to November 2016 was $6290.69, >> or about $525 a month on average. I believe it could go 2× or higher >> if we relaxed rate limits. meek-amazon is higher, $13756.30 or >> $1150/month over the same time period. > > Has there been any progress on finding alternative funding for this? > dcf's comments on trac indicate "no", which would be unfortunate. > > -- > Yawning Angel > > _______________________________________________ > tor-project mailing list > tor-project(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-project

7 12

meek-azure funding has run out
by David Fifield 05 Mar '17

05 Mar '17

The grant I was using to pay for meek-azure ran out at the end of 2016. It was for $10,000 and it paid for meek-azure and meek-google (until the latter was shut down) throughout 2016. I can support it personally for maybe one more month but after that I'll have to shut it down. >From these graphs you can see that meek continues to be very popular, with both backing bridges constant pushing against the rate limits we imposed to control costs. I had hoped that by now we would find a way to pay for sustained deployment, but it hasn't happened. https://atlas.torproject.org/#details/F4AD82B2032EDEF6C02C5A529C42CFAFE5165… https://atlas.torproject.org/#details/AA033EEB61601B2B7312D89B62AAA23DC3ED8… If someone wants to take over the service and raise funds I'm happy to let you. I've been able to manage keeping on top of monthly invoices and all that, but it's not my strong suit. I don't have any problem with continuing to run the bridge that the CDN forwards to, as that is much less expensive than the CDN, like $20/month rather than $600/month.

5 6

We need project ideas for GSoC 2017!
by Damian Johnson 27 Feb '17

27 Feb '17

Hi all! This week I'm getting our ducks in a row to apply for Google Summer of Code 2017... https://summerofcode.withgoogle.com/ I just trimmed our volunteer page of projects that were done last year and sadly that doesn't leave us with much. We need mentors and project ideas! Got anything you'd care to mentor this summer? If so please let me know! Just send me a description like the ones on the following and I'd be happy to add it to our site... https://www.torproject.org/getinvolved/volunteer.html.en#Coding Please note that all projects must have two mentors, one of which is an established tor person. If you're not part of our internal community that's fine, but please find a core developer to co-sponsor your project and act as a secondary mentor. Thanks! -Damian

7 13

Many bridges (22%) have nickname "ki"
by David Fifield 15 Feb '17

15 Feb '17

This is a bit of a followup to my earlier post on obfs4 bridges with formulaic nicknames: https://lists.torproject.org/pipermail/tor-project/2016-November/000809.html Those bridges are still there, but today I noticed a new weirdness: 756 bridges all having the nickname "ki". 756 is 21.8% of the total number, 3464. At the moment, "ki" far outnumbers every other nickname, apart from "Unnamed": $ wget -O bridges.json https://onionoo.torproject.org/details?type=bridge $ ./nodeinfo < bridges.json | awk '{print $2}' | sort | uniq -c | sort -rn | head 1519 Unnamed 756 ki 16 UbuntuCore133 6 anonymous 5 hacktheplanet 4 ididnteditheconfig 3 default 3 CoolComputers 2 UbuntuCore95 2 masterFluellen All the "ki" bridges have other things in common: they run no pluggable transports and they have platform "Tor 0.2.8.10 on Linux". Their last_restarted time ranges from 2016-12-05 17:51:45 to 2016-12-13 15:34:06. Here is a sample of 20 of them. $ ./nodeinfo < bridges.json | awk '$2 == "ki" {print}' | sort -k 7 | head -n 20 hashed_fingerprint nickname first_seen last_seen last_restarted platform transports F69BE147A7CB0A1EDAE8A5E9EFF70E672CF117DF ki 1970-01-01 00:00:00 2016-12-06 17:41:03 2016-12-05 17:51:45 Tor 0.2.8.10 on Linux FA0F7052B6BB5572960BB08BD44C58A143F9B227 ki 1970-01-01 00:00:00 2016-12-06 17:41:03 2016-12-05 18:07:00 Tor 0.2.8.10 on Linux 1431FFE68CFC0383456619D87431AF23FFA2E183 ki 2016-12-05 18:41:03 2016-12-06 17:41:03 2016-12-05 18:21:30 Tor 0.2.8.10 on Linux 945B0892CADA14722EA3D28354995D5907CFB3AB ki 2016-12-05 18:41:03 2016-12-06 17:41:03 2016-12-05 18:34:04 Tor 0.2.8.10 on Linux DDB025FD0BC51FE5391D8A4F80E773334D2E523C ki 1970-01-01 00:00:00 2016-12-06 18:41:03 2016-12-05 18:52:16 Tor 0.2.8.10 on Linux DB4245D09CC3C705CAD292C398DDA1ABFB40DB52 ki 1970-01-01 00:00:00 2016-12-06 18:41:03 2016-12-05 19:07:01 Tor 0.2.8.10 on Linux 772D118449E0F938657BBD5F472088270D742F39 ki 2016-12-05 19:41:03 2016-12-06 18:41:03 2016-12-05 19:21:27 Tor 0.2.8.10 on Linux F8DE4C2595715190D69732FBB47EAA17255FCF3A ki 2016-12-05 19:41:03 2016-12-06 18:41:03 2016-12-05 19:34:00 Tor 0.2.8.10 on Linux CA7ACBB15A80381BB216939AA3D6345D4E2A6CE5 ki 1970-01-01 00:00:00 2016-12-06 19:41:03 2016-12-05 19:51:51 Tor 0.2.8.10 on Linux 60AE31B0D81ABE763264D442E0A8A48161ADCBD6 ki 1970-01-01 00:00:00 2016-12-06 19:41:03 2016-12-05 20:07:42 Tor 0.2.8.10 on Linux 0522394400AA8425445742828C577A560159AAC3 ki 2016-12-05 20:41:03 2016-12-06 19:41:03 2016-12-05 20:21:31 Tor 0.2.8.10 on Linux 8A9BFB4DABD6D4F0AD692C414FB3E75DC33ED47E ki 2016-12-05 20:41:03 2016-12-06 19:41:03 2016-12-05 20:34:01 Tor 0.2.8.10 on Linux F9AE2B2E26EACE32A6BA697118F73AC20DAA0A01 ki 1970-01-01 00:00:00 2016-12-06 20:41:03 2016-12-05 20:52:33 Tor 0.2.8.10 on Linux DAFFEED5B1268C8B7BEEA3AD411690E7C74024EB ki 1970-01-01 00:00:00 2016-12-06 20:41:03 2016-12-05 21:06:31 Tor 0.2.8.10 on Linux 7690F311EE18901A2C2B0353DF868C31C43746C7 ki 2016-12-05 21:41:03 2016-12-06 20:41:03 2016-12-05 21:21:29 Tor 0.2.8.10 on Linux C51B3FA6A60D116C84C867F2DC2AE0BE33CB117F ki 2016-12-05 21:41:03 2016-12-06 20:41:03 2016-12-05 21:34:00 Tor 0.2.8.10 on Linux 8F6C3F388EDD6D9400B5743AE29DE3AAB88E43E9 ki 1970-01-01 00:00:00 2016-12-06 21:41:03 2016-12-05 21:51:56 Tor 0.2.8.10 on Linux 0547724D0F88377D5A0F01D90B8BF523B869326A ki 1970-01-01 00:00:00 2016-12-06 21:41:03 2016-12-05 22:07:16 Tor 0.2.8.10 on Linux EE969338212C905E0425394B658FEDE1CF3BDE4E ki 2016-12-05 22:41:03 2016-12-06 21:41:03 2016-12-05 22:21:28 Tor 0.2.8.10 on Linux EFCD5C5E5A608DC017980A4F67CCDB51BBA50FD4 ki 2016-12-05 22:41:03 2016-12-06 21:41:03 2016-12-05 22:34:15 Tor 0.2.8.10 on Linux

7 12

New Tor Metrics graph: Tor Browser downloads and updates
by Karsten Loesing 02 Feb '17

02 Feb '17

Hi everyone, we just put a new graph on Tor Metrics called "Tor Browser downloads and updates": https://metrics.torproject.org/webstats-tb.html This graph is the result of a joint effort of the metrics team (with a lot of input on the underlying code from iwakeh) together with Sebastian (who co-authored the original database schema and who operates the web log sanitizer), gk and boklm (who analyze an earlier graph and provided insights about Tor Browser internals), and others who discussed the graph and earlier prototypes. Please take a look at this graph, play a bit with the two inputs (start and end date), and give us feedback by raising questions about the data or giving answers to previously raised questions. The goal would be to write a blog post about this graph together with an early analysis. Currently open questions are: - gk asks on the ticket (https://trac.torproject.org/projects/tor/ticket/21236#comment:11) "The results still confuse me (like: We have 100,000 new downloads each day but that does not show up in the update pings which basically stay the same? We still have more than 120,000 update requests every day, even after almost 6 weeks after the last release?). But that is probably another story. :)" - hellais asked at yesterday's Vegas meeting: "how many times does a normal tor browser do an update ping every day?" which was answered by mikeperry and gk with "twice" "and on every start". This is probably something we should clarify in the graph description. - yawning asks on the ticket (https://trac.torproject.org/projects/tor/ticket/21236#comment:25) "Does it matter that the Linux sandbox behavior is totally different from everyone else, because it uses a different implementation to download, update check, and update? I suspect the user base isn't that big right now, but I'd hate to throw stats off..." Note that we're mostly hoping for feedback on the data, not on the presentation. We know that there's room for making the graph prettier or for providing more inputs to customize it. But we already spent way more time on this graph than we had planned, so we'd save any feedback on the presentation (except for typos or trivial tweaks) for later in the year. Thanks! All the best, Karsten

6 15

Notes from January 26 2017 Vegas team meeting
by Karsten Loesing 31 Jan '17

31 Jan '17

Notes for January 26 2017 meeting: Georg: 1) Tor Browser 6.5 got out 2) The Tor Browser team focuses on the switch to ESR 52 from now on 3) I helped with addressing questions from OTF regarding our last contract (SponsorU) isabela: 1) Finished complementary report for sponsorU / working on Q4 2016 report of sponsorS due 1-31/ 2nd milestone report for sponsor5 is looking good for 1-27 2) We got feedback from DRL mobile proposal 3) I plan on working at the Task Force plan proposal and share it soon - just prioritizing sponsors reports - 4) working on update on sponsors doc on trac - wiki pages/ticket form menu etc 5) met with Brad / will have weekly meetings with him till we feel is not necessary anymore 6) teams meeting calendar - will get things going with network and ux Alison: 1) Glossary is almost over the finish line! Phoul is adding it to Trac, which we will use to host the glossary in a similar way that Debian uses a wiki for theirs. 2) TB Manual is now is multiple languages including French, Spanish, and Brazilian Portuguese. 3) We are now connected with trainers in the Global South in multiple regions: South America, Middle East, South Asia, and East Africa. If all goes well our first sponsored training will be in another week. 4) LFP is just about ready to submit our IMLS proposal. We're asking for about 2/3 of our needed funding for two years, beginning December 2017, to create a more intensive train-the-trainer program for librarians. Ask me if you want more details! 5) I handed out Tor stickers at the DC Women's March and got a lot of positive feedback. Lots more name recognition than I expected. 6) Kat and Jon finished the relay operator tshirt backlog!!!!!! They're now taking requests AS THEY COME!!! Success!!!!!! 7) LFP has events upcoming at Pratt Institute and Drexel University. 8) Later today I'll send out the agenda engagement email for the Tor Meeting. Nick: 1) Job interviews continue this week. Hoping to be finished on Friday. Kudos to Erin, Mike, Asn, and David! 2) Feature freeze in progress Mike: 1) Also working on the interview process for tor-core 2) We may have a new blog! I meet with Kevin tomorrow to review it. Hopefully will be able to send a dev instance link around then for people to test out. 3) Meeting with FPF people to discuss tor network traffic fingerprinting. (they have a framework for attacks/tests). Arturo: 1) Finalised reviewed web UI and submitted for feedback from designer. Aiming to tag a release candidate this week. 2) ooniprobe mobile release: we are planning a small meeting in Rome the week of the 8th to do the launch together 3) Various infrastructure fires to extinguish: ooni-explorer database seems to be corrupt beyond repair, we have started rebuilding it and will take a week. 4) Planning for events in March: will be attending IFF with 2 OONI related sessions (one here: https://internetfreedomfestival.org/wiki/index.php/Investigating_internet_c…) Still waiting to hear back regarding the session at RightsCon. 5) Aiming to release at the end of today a new version of the ooni-backend and deploy an update after we found a critical bug in it leading to faulty collection of measurements. 6) Reviewing of all the OONI documentation based on the HLS legal consultation (risks documentation, install guide, data policy, etc.) Shari: 1) Many amazing candidates for Communications Director position. 2) Met with isis to talk about what she's up to. 3) Meetings this week with Gunner, Sue Gardner, Cindy Cohn and Mitchell Baker to talk about future planning. 4) Changed payment processors on new donation system. 5) Planning for Tor meeting in Amsterdam. Karsten: 1) Almost finished graph on Tor Browser downloads and updates (https://metrics.torproject.org/webstats-tb.html) not linked from homepage yet, planning to publish Fri/Sat with torproject@ post and/or possibly but not necessarily with blog post on Mon/Tue (before end of month). This will conclude Sponsor X task 6 (#2 out of 6). 2) Planning to put out another Onionoo release tomorrow and get Atlas usability fixes merged next week or the week after. That will conclude Sponsor X task 3 (#3 out of 6). 3) How much should we worry (and who should we bother) about legal disclaimers on metrics-related websites? a) ExoneraTor translations (https://trac.torproject.org/projects/tor/ticket/20867#comment:5) b) Metrics imprint. Answer: check with lawyers.

2 1

Fwd: [OTF-Announce] Announcement of Funding Opportunities
by isabela 26 Jan '17

26 Jan '17

-------- Forwarded Message -------- Subject: [OTF-Announce] Announcement of Funding Opportunities Date: Thu, 26 Jan 2017 12:50:45 -0800 (PST) From: dan <dan(a)opentechfund.org> Reply-To: otf-announce+managers(a)opentechfund.org To: OTF-Announce <otf-announce(a)opentechfund.org> --- OTF FUNDING ANNOUNCEMENTS --- ============================================== Please find below several upcoming internet freedom-relevant funding application deadlines. There are two sections, the first for OTF support and the second for all alternative support mechanisms. If you have any questions on the information below, please feel free to give a shout to us at OTF anytime. Thanks! 1. OTF FUNDING ============================================== OTF - Internet Freedom Fund Deadline: 2017-03-01 The Internet Freedom Fund is OTF's primary way to support projects and people working on open and accessible technology-centric projects that promote human rights, internet freedom, open societies, and help advance inclusive and safe access to global communications networks. Successful applicants are awarded monetary support up to $900,000 and no less than $10,000, with preference given to those projects and people who are new to the internet freedom community, helping those living within repressive environments, and are requesting less than $300,000 for a duration of less than 12 months. Apply: https://www.opentech.fund/requests/internet-freedom-fund OTF - Core Infrastructure Fund Deadline: 2017-03-01 The Core Infrastructure Fund supports building blocks of digital security and circumvention projects. This may include efforts focused on sustaining or improving PGP, SSL, SSH, Tor, OTR, pluggable transports, code libraries, and other technologies used within the core building blocks of everyday Internet Freedom technology used by people throughout the world to increase their access, privacy, and security online. Apply: https://www.opentech.fund/requests/core-infrastructure-fund OTF - Rapid Response Fund Deadline: Ongoing The Rapid Response Fund is part of a broader OTF initiative which aims to facilitate the development of a strong digital emergency response community that can work together to resolve threats in a timely and comprehensive manner. OTF offers both direct financial support as well as technical services from trusted partners to resolve digital emergencies experienced by high-risk Internet users and organizations, such as bloggers, cyber activists, journalists. and human rights defenders. Apply: https://www.opentech.fund/requests/rapid-response-fund OTF - Labs Deadline: Ongoing For more specific, one-off support needs and services, check out OTF's Labs: Localization, Community, Engineering, Usability, Red Team, and Legal. Learn more about the Labs at: https://www.opentech.fund/labs 2. ALTERNATIVE FUNDING ============================================== Department of State DRL - Internet Freedom Annual Program Statement Deadline: February 10, 2017 "DRL goal is to promote fundamental freedoms, human rights, and the free flow of information online through integrated support to civil society for technology, digital safety, policy and advocacy, and research programs. DRL invites organizations interested in potential funding to submit SOI applications outlining program concepts that reflect this goal." More information and apply here: https://www.grantsolutions.gov/gs/preaward/previewPublicAnnouncement.do?id=… Internews - Digital Security Content for Latin America Deadline: Open; projects must be completed by November 1, 2017 "Internews está entregando entre $1,000 y $3,000 dólares en becas para capacitadores/as latinoamericanos/as destinadas a producir contenido en seguridad digital. Queremos que nos digas cuáles son tus necesidades y cómo es que tu contenido responde a esas necesidades. Puede ser un manual para un grupo específico, un video en YouTube sobre contraseñas fuertes, una infografía que explique cómo funciona el Internet, una guía para otros capacitadores/as, etc. No hay límite." More information and apply here: https://docs.google.com/a/opentechfund.org/forms/d/e/1FAIpQLSdMRRDCR3JdctoU… Ford-Mozilla - Open Web Fellowship Deadline: January 31, 2017 "The Open Web Fellows program...is an international leadership initiative that brings together the best emerging technology talent and civil society organizations to advance and protect the open internet. Each year, fellows spend 10 months embedded at leading advocacy organizations to safeguard the open Internet as a global public resource." More information and apply here: https://mozilla.forms.fm/2017-ford-mozilla-open-web-fellowship New America/OTI - Education Data Privacy & Security Fellow Deadline: January 31, 2017 Seeking "...a two-year fellow to specialize in the intersection of technology, privacy, and post secondary education. As the fellow, you will research ways to protect student data privacy and security while preserving the ability to gather insights about higher education outcomes for particular schools, programs, and populations, as well as work with the education data community at large to develop and advocate for practices that fit that goal." More information and apply here: http://newamerica.applytojob.com/apply/0xBoFA/Education-Data-Privacy-Securi… Microsoft - Affordable Access Initiative Deadline: January 31, 2017 "The Microsoft Affordable Access Initiative GrantFund seeks to support, grow and scale innovative businesses that are developing technologies and business models that have the potential to help billions more people affordably get online. Areas of interest include last mile access technologies, off-grid renewable energy solutions, and alternative payment mechanisms, as well as verticals such as healthcare, education, and agriculture. We will consider eligible applicants covering these areas and more." More information and apply here: https://www.microsoft.com/en-us/affordable-access-initiative/home Rails Girls Summer of Code - Project Mentor Deadline: January 31, 2017 "You wish to support women working full-time on Open Source projects for three months, want to help newcomers get into Open Source and plan to submit your project?" More information and apply here: http://railsgirlssummerofcode.org/guide/projects/ Astrea - International Fund Deadline: January 31, 2017 (for June 2017 cycle) "Astraea's International Fund supports groups led by LGBTQI communities working for progressive social change, addressing oppression based on sexual orientation and/or gender identity and expression, and advancing work for racial, economic and gender justice." More information and apply here: http://www.astraeafoundation.org/apply-for-a-grant Reuters Institute for the Study of Journalism - Fellowships Deadline: January 31, 2017 Three fellowships are available: The Thomson Reuters Foundation Fellowship, Google Digital News Fellowship, and Mona Megalli Fellowship, each lasting 3-6 months. More information and apply here: https://reutersinstitute.politics.ox.ac.uk/page/deadline-applications Internet Policy Observatory (UPenn) - Internet Policy Research Methods Workshop Deadline: February 1, 2017; Workshop held April 10-14 Held at the National Law University in Delhi, India, this program "...will bring together young scholars and activists working in digital rights and the internet policy spaces in an intensive five day practicum that provides a survey of both qualitative and quantitative, online and offline research methods with the goal of enhancing and advancing their advocacy efforts." NOTE: Workshop costs include travel to Delhi and a program fee of $500 USD. More information and apply here: http://globalnetpolicy.org/event/internet-policy-in-south-and-southeast-asi… World Press Institute - WPI Fellowship Deadline: February 15, 2017 "The WPI fellowship is offered to 10 journalists from countries around the world. It provides immersion into the governance, politics, business, media, journalistic ethics and culture of the United States for experienced international journalists, through a demanding schedule of study, travel and interviews throughout the country." More information and apply here: http://www.worldpressinstitute.org/fellowship Ford Foundation - Technology Fellow Deadline: March 10, 2017 "Technology Fellows will enable the foundation to better serve the technical needs of grantees, identify emerging opportunities and threats related to technology, help develop networks and communities of social justice mission-driven technology experts, and enrich the diverse perspectives of the thematic areas program experts...Technology Fellows positions will be embedded in each of the following thematic areas of work for a two-year period: Creativity and Free Expression <http://www.fordfoundation.org/work/challenging-inequality/creativity-and-fr…>, Inclusive Economies <http://www.fordfoundation.org/work/challenging-inequality/inclusive-economi…>, and Youth Opportunity and Learning <http://www.fordfoundation.org/work/challenging-inequality/youth-opportunity…>; each will have its own Fellow." More information and apply here: https://ford-foundation.forms.fm/technology-fellow Federal Trade Commission - IoT Home Inspector Challenge Deadline: Submission window open March 1, 2017 - May 22, 2017 The FTC is looking for someone "...to create an innovative tool that will help protect consumers from security vulnerabilities in the software of home devices connected to the Internet of Things. The agency is offering a cash prize of up to $25,000 for the best technical solution, with up to $3,000 available for up to three honorable mention winner(s)." More information: https://www.ftc.gov/news-events/press-releases/2017/01/ftc-announces-intern… Department of State Consulate General in Ho Chi Minh City - NOFO: Public Affairs Annual Program Statement Deadline: August 30, 2017 Focusing on Public Diplomacy goals, proposals may address "Inclusiveness and support issues related to: women, disabled persons, LGBT rights, ethnic minorities, or religious minorities...Fundamental Freedoms: freedom of expression, press, association, religion...[and/or] Rule of Law," among other focus areas. More information and apply here: http://www.grants.gov/web/grants/view-opportunity.html?oppId=290352 --------- In addition to the open application windows listed above, you can always check our compiled list of alternative sources of support: https://www.opentech.fund/apply/alternative-sources-support -- This is the announce list for Open Technology Fund, https://www.opentechfund.org --- You received this message because you are subscribed to the Google Groups "OTF-Announce" group. To unsubscribe from this group and stop receiving emails from it, send an email to otf-announce+unsubscribe(a)opentechfund.org <mailto:otf-announce+unsubscribe@opentechfund.org>. For more options, visit https://groups.google.com/a/opentechfund.org/d/optout.

1 0

Notes from January 19 2017 Vegas team meeting
by Karsten Loesing 23 Jan '17

23 Jan '17

Notes for January 19 2017 meeting: Alison: 0) Global South outreach: lots of new connections 1) support portal progress: glossary finished and ready to be formatted onto support.torproject.org along with TB manuals. Phoul is setting up the glossary formatting on Trac. 2) Tor meeting: we need to make a list of all the team meetings that need to happen on Monday so we can figure out which ones need to happen at what time Nick: 1) Feature freeze next week 2) TB team: we need testing on the patch you wanted to help with unix sockets on the command line. Shari: 1) I'm meeting with Mitchell Baker of Mozilla next week. Any requests? 2) process for hiring Communications Director; on a fast track 3) Tor meeting planning; thoughts for strategic planning discussion Karsten: 1) Getting closer to putting Tor Browser downloads and updates graph on Tor Metrics (#21236). Input from applications team on https://trac.torproject.org/projects/tor/attachment/ticket/21236/webstats-t… greatly appreciated! 2) Trying out OTF cloud for 3 OnionPerf instances, with possible alternatives being Tor VMs (sysadmin overhead) or EC2 (~60-120 USD/mo). 3) Started thinking about funding after Sponsor X, where it seems like another year from the same sponsor is rather unlikely. One plan is to propose 8 mini projects on various metrics code bases. Another plan is to propose fewer projects all related to the Tor Metrics website, with project ideas coming from the recent redesign project. 4) Planning a small team meeting in Berlin in the first half of February. Isabela: 0) writing reports (OTF, DRL, ISC) 1) Created a calendar for teams meetings at Tor Meeting in Amsterdam -> https://storm.torproject.org/shared/ckZqpmf2SSPo5oNhwVkftX7f3Ci1JH1cHgyVQVS… 2) website redesign - Linda will share soon her google doc explaining the process we will take to tor-internal. 3) in feb me and linda will publish a blog post about the security slider work (example of evolution of a feature) 4) hiro is working on small website patches and with the metrics team - she is also working on a nice console script for you to query tickets on trac :) this is a request network team had for a while to make it easy to write scripts that give us intel on the state of things e.g. a release or the monthly work or team capacity -> https://github.com/hiromipaw/lightsaber Georg: 1) Spoke with Digicert to get a new code-signing certificate. I think we are on track with it. 2) Tor Browser 6.5 will be a thing next week (fingers crossed) Mike: 1) Things I'm dropping: - Tor Labs - I keep moving towards emailing a bunch of people, and then asking myself if it really is the best use of my time. I'm worried it is going to become a timesink and distract from other things I should do.. I think we need a community coordinator person for this - The Tor Blog - Kevin has a new job, and has become unresponsive. I'm getting worried we may have to give this to hiro or find someone else :/ - OTF proposals for Tor Labs? 2) Things I want to do: - Traffic analysis work for NSF: Roger previously told me not to use the Sponsor2 bucket, but I think i should be starting on this work Arturo: 1) Making progress on the mobile clients for ooniprobe. We have decided to push the release date to Feb 8th, but release it with the redesigned UI on iOS and Android. 2) Polishing and refining of the web UI component of ooniprobe with focus on the mobile related views. 3) Got pretty good feedback on the OPOS spec and integrating it into the document. Something that was suggested is that we outline and define somewhere a sort of governance for how access to scheduling measurements on ooniprobe is handled.

1 0

Summary of meek's costs, December 2016
by David Fifield 22 Jan '17

22 Jan '17

Here's the summary of meek's CDN fees for December 2016. App Engine + Amazon + Azure = total by period all 2014 $600.63 + $917.89 + $0.00 = $1518.52 January 2015 $464.37 + $669.02 + $0.00 = $1133.39 February 2015 $650.53 + $604.83 + $0.00 = $1255.36 March 2015 $690.29 + $815.68 + $0.00 = $1505.97 April 2015 $886.43 + $785.37 + $0.00 = $1671.80 May 2015 $871.64 + $896.39 + $0.00 = $1768.03 June 2015 $601.83 + $820.00 + $0.00 = $1421.83 July 2015 $732.01 + $837.08 + $0.00 = $1569.09 August 2015 $656.76 + $819.59 + $154.89 = $1631.24 September 2015 $617.08 + $710.75 + $490.58 = $1818.41 October 2015 $672.01 + $110.72 + $300.64 = $1083.37 November 2015 $602.35 + $474.13 + $174.18 = $1250.66 December 2015 $561.29 + $603.27 + $172.60 = $1337.16 January 2016 $771.17 + $1581.88 + $329.10 = $2682.15 February 2016 $986.39 + $977.85 + $445.83 = $2410.07 March 2016 $1079.49 + $865.06 + $534.71 = $2479.26 April 2016 $1169.23 + $1074.25 + $508.93 = $2752.41 May 2016 $525.46 + $1097.46 + $513.56 = $2136.48 June 2016 $0.00 + $1117.67 + $575.50 = $1693.17 July 2016 $0.00 + $1121.71 + $592.47 = $1714.18 August 2016 $0.00 + $1038.62 + $607.13 = $1645.75 September 2016 $0.00 + $932.22 + $592.92 = $1525.14 October 2016 $0.00 + $1259.19 + $646.00 = $1905.19 November 2016 $0.00 + $1613.00 + $597.76 = $2210.76 December 2016 $0.00 + $1569.84 + $1416.10 = $2985.94 -- total by CDN $13138.96 + $23340.47 + $8045.77 = $44525.20 grand total https://metrics.torproject.org/userstats-bridge-transport.html?start=2016-1… The number of users remained steady during December 2016 and the two bridges remained at capacity. The cost for Azure was unusually high, about double what it is normally. It seems to be caused by Azure splitting up its geographical regions and charging more for traffic from South America. == Amazon a.k.a. meek-amazon == EU (Ireland) 570M requests $684.72 2831 GB $222.80 Global 11M requests $11.32 40 GB $3.08 US East (Northern Virginia) 439M requests $439.74 2646 GB $207.66 -- total 1021M requests $1135.78 5518 GB $433.54 charge for alarms $0.50 https://atlas.torproject.org/#details/F4AD82B2032EDEF6C02C5A529C42CFAFE5165… == Azure a.k.a. meek-azure == https://atlas.torproject.org/#details/AA033EEB61601B2B7312D89B62AAA23DC3ED8… The Azure bill is about twice as high as usual. As you can see from the table below, it's attributable to a large amount of traffic going through "Zone 3", which is South America according to https://azure.microsoft.com/en-us/pricing/details/cdn/: Zone 1: $0.087/GB: North America, Europe, Middle East and Africa Zone 2: $0.138/GB: Asia Pacific (including Japan) Zone 3: $0.250/GB: South America Zone 4: $0.140/GB: Australia Zone 5: $0.170/GB: India The first time Zones 3 and 4 even appeared was just two months ago, in October of 2016. In October there was only 1 GB in Zone 3 and in November only 7 GB, so December's total of 4868 GB is a big shock. I searched but did not find a way to limit the zones that can be used to serve content on Azure. Zone 1 2029 GB $ 176.51 Zone 2 116 GB $ 15.98 Zone 3 4868 GB $1217.06 Zone 4 12 GB $ 1.68 Zone 5 29 GB $ 4.87 -- total 7053 GB $1416.10 Earlier reports in this series: https://trac.torproject.org/projects/tor/wiki/doc/meek#Costs

1 0

Fwd: [tor-relays] Proton now takes Tor
by teor 20 Jan '17

20 Jan '17

For those of us who aren't on tor-relays: > Begin forwarded message: > > From: Gumby <info(a)gumbyzee.torzone.net> > Subject: [tor-relays] Proton now takes Tor > Date: 20 January 2017 at 08:23:45 AEDT > To: tor-relays(a)lists.torproject.org > Reply-To: tor-relays(a)lists.torproject.org > > Nice to finally see this... > > "The encrypted email provider announced Thursday it will allow its users to access the site through the Tor anonymity service. > > The aim is to allow its more than 2 million users access the provider by taking "active measures to defend against state-sponsored censorship," such as government-mandated blocks at the internet provider level. > > Users of the Tor Browser can now access the site at https://protonirockerxow.onion. " > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays T -- Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B ricochet:ekmygaiu4rzgsk6n xmpp: teor at torproject dot org ------------------------------------------------------------------------

5 4