December 2018 - tor-project - lists.torproject.org

I posted our 2016 and 2017 financials
by Roger Dingledine 09 Dec '18

09 Dec '18

You can read much more here: https://blog.torproject.org/transparency-openness-and-our-2016-and-2017-fin… Yay transparency, --Roger

1 0

November 2018 report for the Tor Browser team
by Georg Koppen 07 Dec '18

07 Dec '18

Hi Tor people! November has passed and here comes an update on what happened in the Tor Browser world during this time. November was one of the rare months where no Tor Browser releases got out. We spent most of our time on getting the next major alpha release for Tor Browser on Android into shape. Highlights are including Orbot into Tor Browser directly[1], which makes installing a separate app unnecessary, and the full integration of the mobile build process into tor-browser-build[2], allowing us to finally tackle remaining reproducibility issues[3]. Additionally, we have worked on a bunch of UX improvements for mobile, e.g. own about:tor page[4] and .onion indicators in the URL bar, similar to those we already see on desktop platforms[5]. Apart from working on our mobile-only tasks we managed to land fixes for two long-term first-party isolation bugs: saving images etc. via the context menu is now isolated to the URL bar domain[6] as is loading PDF documents that issue range requests[7]. The full list of tickets closed by the Tor Browser team in November is accessible using the `TorBrowserTeam201811` keyword in our bug tracker.[8] For December we plan to work on further mobile improvements, including better localization support[9] and fixups to issues that come up after our alpha relases[10]. We might finally tackle transitioning Orfox users to Tor Browser for Android as well.[11] Furthermore, we hope to make significant progress in implementing our security control redesign[12] and to consolidate our testing and QA efforts[13]. All tickets on our radar for this month can be seen with the `TorBrowserTeam201812` keyword in our bug tracker.[14] Georg [1] https://trac.torproject.org/projects/tor/ticket/28051 [2] https://trac.torproject.org/projects/tor/ticket/26693 [3] https://trac.torproject.org/projects/tor/ticket/25164 [4] https://trac.torproject.org/projects/tor/ticket/27111 [5] https://trac.torproject.org/projects/tor/ticket/26690 [6] https://trac.torproject.org/projects/tor/ticket/22343 [7] https://trac.torproject.org/projects/tor/ticket/26540 [8] https://trac.torproject.org/projects/tor/query?status=closed&keywords=~TorB… [9] https://trac.torproject.org/projects/tor/ticket/26782 [10] For an important first one, see: https://trac.torproject.org/projects/tor/ticket/28705 [11] https://trac.torproject.org/projects/tor/ticket/27399 [12] https://trac.torproject.org/projects/tor/ticket/25658 [13] https://trac.torproject.org/projects/tor/ticket/27105 [14] https://trac.torproject.org/projects/tor/query?status=accepted&status=assig…

1 0

Notes from December 6 2018 Vegas team meeting
by Karsten Loesing 07 Dec '18

07 Dec '18

Notes for December 6 2018 meeting: Mike: 1) Continued work on wtf-pad/sponsor2 Karsten: 1) Found the bug that broke our bandwidth history graphs recently. 2) Discussed various graph improvements. Gaba: 1) Helped onion services proposal 2) Sponsor 8 wrapping up for network team. Starting Q4 report with Pili. 3) Snowflake kick off and getting people from the network team into snowflake issues from roadmap. Created a roadmap specifically for snowflake moving forward. [GeKo: Can I get a link to that one?] [Gaba: Please send me a msg if you have any comments/questions on it, I can add you to the roadmap for you to edit it if needed. The idea is for Pili and me to update that roadmap with input from teams] 4) Had metrics team retrospective. Will work on reports for sponsor 13. 5) OONI reading on processes. Alison: 1) I'm at Mozilla All-Hands 2) LFI recruitment begins Monday; still working on all other recruitment things 3) Gus and I are putting together a proposal for Rightscon 4) Gus is also planning sponsor9 travel 5) We all continue to work on the community portal planning 6) emma created a new IRC channel for localization, #tor-l10n 7) Gus is organizing work for the Sao Paolo University volunteers we will get next year 8) Colin worked with a large internet company on deploying relays Sue: 1) Worked on Financials for the Board 2) Working on finishing up the audit still hopefully done by the end of year 3) Got back from Seattle on Tuesday evening 4) Invoicing Grantors for October and November Arturo: 1) Simone is in Aberdeen doing a hackathon with irl on getting pathspider tests into OONI 2) Bugfixing for OONI Probe beta 3) Moving forward with OONI Explorer 4) Dealing with the eclipsis migration from Washington DC datacenter to Miami Georg: 1) Tor Browser 8.5a5 went out, 8.0.4 got built and 8.5a6 is getting prepared (the latter two with the update donation banners), planned release is 12/11. Steph: 1) At Mozilla All Hands 2) Editing and publishing EOY blog posts 3) TBG presented their final presentation 4) Coordinating LFI press with Alison, created a package 5) Planning RightsCon proposal with Sarah Antonela: 1) Mozilla All Hands 2) Ran UX/UI Meeting with Firefox team 3) Worked with Duncan on Security Settings Onboarding 4) Hiro presented Onions in Containers at DockerCon Barcelona 5) Did OONI Explorer design review with Elio

1 0

November 2018 in sysadmin land
by Linus Nordberg 06 Dec '18

06 Dec '18

Hi Tor, The sysadmin and services team will start sending monthly reports, starting right here. # What's been done - Moving our last three systems over to Debian Stretch; making good progress on most of them - Getting Linus up to speed; there's a fabulous amount of information to be absorbed - Hiring process moving along; we're still hiring a full time senior systems administrator - Finding a date and a place for a in-person meeting; we're meeting the days before FOSDEM [0] - Added dnsnode.net to the set of DNS servers for our zones; using widely anycasted servers for DNS should lower the distance that queries have to travel the internet - Taking part in discussions about a search function on some of our websites - Planning for how to make best use of a bunch of donated hardware - The ordinary resolving of requests, as can be followed better over at [1] [0] https://trac.torproject.org/projects/tor/wiki/org/meetings/2019Brussels [1] https://trac.torproject.org/projects/tor/report/44 # Upcoming new things - Expand the sysadmin team wiki [1] with more gory details on how things are being set up and run - Open up our puppet repository, for read access [1] https://help.torproject.org/tsa/ # Fact of the month We're currently listing 76 official torproject.org systems [2]. [2] https://db.torproject.org/machines.cgi

1 0

Decommissioning siv.sunet.se
by Linus Nordberg 05 Dec '18

05 Dec '18

Hi, Once upon a time, siv.sunet.se helped measuring the performance of the Tor network [0]. The hardware siv is running on was also hosting one of the bandwidth authoritites [1] for many years. Now that computer has grown old and tired so I thought I'd just take it offline and let it rest for a bit. However, judging from its web server logs, several systems on the internet are pulling bwauth files form siv. If you are running one of these systems, please let me know how badly you need to continue doing this and for how long. [0] https://metrics.torproject.org/torperf.html [1] https://metrics.torproject.org/totalcw.html

11 34

Tor Browser meeting Dec 3, 2018
by Georg Koppen 03 Dec '18

03 Dec '18

Hi everyone! Our weekly Tor Browser meeting just finished. The meeting log can be found at: http://meetbot.debian.net/tor-meeting/2018/tor-meeting.2018-12-03-19.01.log… and our notes on the pad are copied below: Monday December 3, 2018 Discussion: -release prep for 12/11 mcs and brade: Last week: - Fixed #28543 (about:tor has horizontal scroll bar between widths 900px and 1000px). - Created patch for #27828 ("Check for Tor Browser update" doesn't seem to do anything). - Helped with #28640 (System addon does not override app-profile addon). - Monitored Snowflake meeting. - Attended sandboxing meeting. This week: - Help with code reviews. - Look at catalyst's bootstrap phases proposal (see #28281 comment:3). - #25694 (Improve the user experience of updating Tor Browser). igt0: Last week: - Finished #26690(padlock) - Worked on - #28580 (tor circuit for tba) This week: - Finish #28580 - Work on #27762 (Implement better fix for Torbutton signing workaround) tjr: - Organized Orlando Meetings - Busy with other things mostly - NSS fixes finally landed in esr60, so I will work on landing build jobs there GeKo: Last week: -reviews (#28540, #28640, #28051, #27977, #28466 -started work on the security settings redesign (#25658) -worked on setting MOZILLA_OFFICIAL for Windows (#28618) and on backporting SSLstatus API (#27919) -fixed alpha build issue (no non-android bundles were copied to the final directory) (#28677) -begin-of-the-month admin stuff -release prep and build This week: -reviews -release preparations (picking all the patches for stable/alpha, build the releases, sign them) -work on the security settings redesign (#25658) -begin-of-the-month team admin stuff (adapting keywords, roadmap progress, further planning) -update Tor Browser design document (#25021) boklm: Last week: - helped build/publish new alpha release - worked on fixing testsuite issues This week: - review patch for #26843 (Adding multi-locale support for Tor Browser for Android) - help building the new releases - check if binutils reproducibility issue (#26148) is still present with latest binutils master, and try to debug the issue - work on testsuite: - enable emails for testsuite results - open tickets for all failing tests - temporarily disable tests that will require more work for fixing (so we can notice new failing tests) - afk on thursday sisbell: Last week: - #27977 - Integrated Orbot into build - Updated/Tested latest patches, feedback, fixes Test Browser APK This Week: - #27609 - Consider breaking out installer into Android library [GeKo: let's write up some pros/cons and why we would need it compared to the status quo] - #28704 - Compile Tor Android dependencies for Android pili: Last week: - Sponsor 9 report This week: - Start preparing sponsor 8 Q4 report Georg

1 0