November 2018 - tor-project - lists.torproject.org

Tor Browser team meeting notes, Nov 5 2018
by Georg Koppen 06 Nov '18

06 Nov '18

Hi! We had our weekly Tor Browser meeting yesterday. Our IRC log can be found at http://meetbot.debian.net/tor-meeting/2018/tor-meeting.2018-11-05-18.58.log… Notes from our pad are Discussion: - status updates - timesheet deadline - tba-a2 release planning (GeKo: we plan to have everything ready for TBA-a2 in about two weeks) - We are embedding tor button within tor browser, should we ship it with all locales? (GeKo: I think for now let's just go with en-US and we can think about adding locales as we go) - OTF engineering lab - need a TBA volunteer to coordinate with Nathan and possibly gaba (for gettor stuff) on ways for users to get TBA initially e.g if it's censored on app stores (GeKo: we mull over this idea in the coming days to have something we can pursue after we have the TBA release out) mcs and brade: Last week: - Returned from vacation and caught up on email, recent bug activity, etc. This week: - Revisit #22074 (Review Firefox Developer Docs and Undocumented bugs since FF52esr). - Review for #28039 (Tor Browser log is not shown anymore in terminal since Tor Browser 8.5a2). - Review for #22343 (Save as... in the context menu results in using the catch-all circuit). GeKo: Last week: -helped with the Tor Browser for Android release -started to look into FPI of redirect write-up (#3600) -reviews, reviews, reviews (#28125, #22343, #28258, #27827, #28310, #25013) -started with begin of the month updates -finished first part of bisecting rust reproducibility issues (#26475) (as new fun thing for my spare time) -participated in the tor browser 8 retrospective meeting (tjr or anyone: do we have a link to the meeting notes? I lost it in my IRC backlog) - https://docs.google.com/document/d/1J3a4mzY3BjoIUw80LbUoA5180bAFCwB1DoaiKnN… -took two days off This week: -finish begin of the month updates -make significant progress on design doc update (#25021) -think more about our security settings redesign (#25658) -looking more into the single-locale repacks (#27466) sysrqb: Last week: TBA release (after needing only one re-signing by boklm, thanks!) Reviewed #25013 (integrating torbutton into tor-browser) Integrated Orbot into TBA (#28051) This week: TBA+Orbot - #28051 Rust audit - #27616 igt0: Last week: - Sent a new patch to #25013 (torbutton) - Updated #26690 (padlock for android) - Reviewed #28125 (Don't let Android leak DNS queries) This week: - Finish all the open tickets with patch (#25013, #26690, #28093, #27111) sisbell: Last week: - # 27443 Firefox for Android - fixed arch dependencies and updated mozconfig to align with tor-browser mozconfig (GeKo: could you remove the ccache related entries? we are building within containers from scratch and ccache should not help much in that scenario. However, it might do so in local builds which is why it is there.) This Week: - # 27977 - Look into orbot in tor-browser-build - # 28144 - TorButton investigate adding to projects (igt0: I think this ticket is affected by the #25013) - # 27609 - Evaluate Tor Onion Proxy Library pospeselr: Last week: - updated and minimal patch for #26540 (setting pdfjs range request first party domain) - wrote some words on arthur's #28259 (is not saving history hurting tbb retention rates) This week: - need to verify cookies are sent/stored correctly with #26540 following some concerns from arthur (GeKo: are those concerns documented somewhere? if not, could we add them to the ticket?) pospeselr: not documented, putting on the ticket - review feedback/changes on #3600 discussion doc, figure out what we should actually implement given the options tjr: - Worked on backporting mingw-clang patches to esr60 - Got a running build on -central with --enable-sandbox - Need to re-apply the __try / __except mappings, since mingw-clang cannot use them - Annoyingly, the test suite doesn't work in TC for an unknown reason =( - Fixed a fuzzyfox crash - arthuredelstein: Last week: - Finished patches for https://bugzilla.mozilla.org/1330467 Working on uploading branch, https://github.com/arthuredelstein/tor-browser/commits/1330467+7, to Mozilla's Phabricator instance for review - tjr: I do not recommend trying to use phabricator. Just attach patches. arthur: OK! Just one by one attachments? There's quit a few so I thought it would help keep things organized. - Opened https://trac.torproject.org/projects/tor/ticket/28259 (Is not saving history hurting Tor Browser retention rates?) - Also opened https://trac.torproject.org/projects/tor/ticket/28315, https://trac.torproject.org/projects/tor/ticket/28316 (New Identity for this Site, New Identity per Search) - Worked on revising #22343 (Save As) - Wrote patch for https://trac.torproject.org/projects/tor/ticket/28187 (Change Tor Circuit display icon to an onion) This week: - Optimistic SOCKS (https://trac.torproject.org/projects/tor/ticket/25555) - ff60-esr bugs pili: Last week: - Preparing Tor Visual Identity exercise to eventually choose illustrations for the website and product, e.g onboarding This week: - Roadmap formatting and review boklm: Last week: - made patch to fix obfs4 nightly build (#28310) - worked on #28260 (Tor nightly builds are broken on Linux with Rust enabled (since 10/31)) - worked on #27265 (In some cases, rbm will download files in the wrong project directory) and #27045 (Add option for firefox incremental builds) - fixed #28287 (es download-easy link broken) This week: - do more testing of patch for #27265 - follow-up on #26148 (binutils reproducibility issue) - continue looking at #28176 and how to bring back the testsuite - will be afk on thursday antonela Last Week: - worked on security settings (#25658) This Week - continue working on security settings (#25658) - Tor Browser Icon survey ends this week. I'll inform the results with the list. - testing Orbot free TBA, thinking about (#28329) Georg

2 2

35C3 Vouchers
by Jonathan Marquardt 05 Nov '18

05 Nov '18

Hello everyone! If anyone has any 35C3 vouchers left, please notify me! I'd like to attend the relay operators meetup. -- OpenPGP Key: 47BC7DE83D462E8BED18AA861224DBD299A4F5F3 https://www.parckwart.de/pgp_key

2 1

Damian's Status Report - October 2018
by Damian Johnson 05 Nov '18

05 Nov '18

Hi lovely onion enthusiasts! Here's my status report for the last couple months (I skipped Semptember's since August's was really late)... https://blog.atagar.com/october2018/ Cheers! -Damian

1 0

Notes from November 1 2018 Vegas team meeting
by Karsten Loesing 02 Nov '18

02 Nov '18

Notes for November 1 2018 meeting: Georg: 1) We got Tor Browser for Android 1.0a3 out Gaba: 1) attended sustainable open source software organized by gunner and open collective 2) attended OTF summit 3) going back into the roadmap and specially tickets that are marked as sponsor8 4) can we move the las vegas meeting for 30 minute later? Or I'm late for 30 min. The meeting starts just when I need to take kids to school. Alison: 1) writing outreach content for community portal 2) drafting LFI cohort two schedule 3) finalizing LFI cohort two recruitment materials and plans 4) writing some text for the DRL proposal 5) advising a high school student on a Tor research paper 6) writing a follow up email to the organizers of Tormenta 7) Maggie presented with Cybelle at Mozfest 8) Colin is onboarding Pili, Maggie, and Sarah on RT 9) coordinating meeting dates and locations for the next Tor Meeting 10) continuing work on the LFI wiki 11) wrote CFP for IFF and submitting today! Sarah: 1) YE campaign results - Bad news: we are $20,000 behind where we were at this point last year. - Good news: We’ve received 604 gifts for $35,612. 357 people have given for the first time. We’ve gained 24 new monthly donors and we are generating $3,000/month from all monthly donors. 2) Campaign next steps - Modifying some graphics - Writing more campaign-related blog posts - Boosting social media. Please encourage your networks to contribute. Help Steph and me identify and reach out to influential external validators who might be willing to amplify the campaign. Can LFI and OONI retweet? - Brainstorming the next set of TB banners. (Puppies!) - TBA banners - Postal mail letter going to people who have given though the mail before and for whom we don’t have an email address. - Still working on cryptocurrency issue. Several donors have asked to be able to send Bitcoin and Monero directly, but Sue: I think we need to check with the auditors about this process. 3) Grants - Al and many others are deep in DRL anti-censorship proposal writing - Modularization proposal is about to be complete - Letter to family foundations will be sent after the 11/8 DRL deadline 4) I'll be AFK 11/5 but available on Signal isabela: 1) done with sponsor8 Q3 report 2) catching up with modularization proposal and drl proposal 3) writing down the information for sue to build a grant forecast report for me 4) answered questions from the berkeley group for their research Mike: 1) Working on sponsor2 work sue: 1) done with reporting requirements for all 10/31/18 deadlines 2) working on budget for DRL proposal, getting the template ready for percentages from team leads for personnel 3) still training two new employees 4) catching up on all emails (way behind due to travel and deadlines) nick: 1) team working on timeline stuff for drl proposal 2) moving ahead with sponsor 8 things 3) jon and gaba and team are planning netteam hackfest 4) too much email, too many meetings. :) Shari: 1) finishing edits on DRL proposal 2) need to do expense reports for Yale and Mexico City 3) helping with end-of-year campaign as needed 4) general catch-up after too much travel Karsten: 1) Finished first version of metrics-web's ipv6servers module rewrite towards replacing large parts of the legacy module. 2) Helped write job posting for new metrics developer. To be distributed soon. Steph: 1) fundraising campaign sharing and planning 2) responded to a couple press inquiries 3) wrapping up website copy Antonela: 1) working on Tor Browser Security Settings 2) reviewing DRL Proposal 3) writing wiki docs for Circuit Display and Onion Security Indicator 4) Tor Browser Icon pool was sent 5) working on EOY iterations in Tor Browser and tpo.org 6) working on tpo.org and tpo.org/about redesign 7) working with Helen on usability research reporting

1 0