January 2019 - tor-project - lists.torproject.org

Network team meeting notes, 8 Jan 2019
by Nick Mathewson 09 Jan '19

09 Jan '19

Hi! You can find our meeting logs here. http://meetbot.debian.net/tor-meeting/2019/tor-meeting.2019-01-08-22.58.html Below are the contents of the meeting pad = Network team meeting pad! = This week's team meeting is at Tuesday at 2300 UTC on #tor-meeting on OFTC. Welcome to our meeting! First meeting each month: Tuesday at 2300 UTC Other meetings each month: Mondays at 1800 UTC On #tor-meeting on OFTC. January schedule: * No meeting on 31 Dec or 1 Jan * Following meeting on 8 Jan 2019, 2300 UTC. * Meeting on 14 Jan, 1800 UTC * Meeting on 21 Jan, 1800 UTC * No meeting 28 Jan; (some of) the team will be at a face-to-face meeting. (This channel is logged while meetings are in progress.) (See https://lists.torproject.org/pipermail/tor-project/2017-September/001459.ht… for background.) Want to participate? Awesome! Here's what to do: 1. If you have updates, enter them below, under your name. 2. If you see anything you want to talk about in your updates, put them in boldface! 3. Show up to the IRC meeting and say hi! After each week's meetings, the contents of this pad will be sent to tor-project @ lists.torproject.org. After that is done, the pad can be used for the next week. == Previous notes == (Search the list archive for older notes.) 3 Dec: https://lists.torproject.org/pipermail/tor-project/2018-December/002117.html 10 Dec: https://lists.torproject.org/pipermail/tor-project/2018-December/002120.html 17 Dec: https://lists.torproject.org/pipermail/tor-project/2018-December/002127.html == Stuff to do every week = * Let's check and update the roadmap. What's done, and what's coming up? <-- Check who is doing what on s19 and s31 on January. url to roadmap: https://docs.google.com/spreadsheets/d/1Ufrun1khEo5Cwd6OwngERn829wU3W3eskdr… * Check reviewer assignments at https://docs.google.com/spreadsheets/d/1Ufrun1khEo5Cwd6OwngERn829wU3W3eskdr… Here are the outstanding reviews, oldest first: https://trac.torproject.org/projects/tor/query?status=needs_review&componen… Including sbws: https://trac.torproject.org/projects/tor/query?status=needs_review&componen… * Also, let's check for things we need update on our spreadsheet! Are there important documents we should link to? Things we should archive? * Check rotations at https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/TeamRot… Core Tor/sbws is now part of the bug triage, CI, and reviewer assignment roles * Let's try a different way of looking at proposed tickets: https://pad.riseup.net/p/network-team-triage-2018 0.3.5 (bugs only): https://trac.torproject.org/projects/tor/query?status=accepted&status=assig… 0.4.0: https://trac.torproject.org/projects/tor/query?status=accepted&status=assig… == General todo == Please don't edit this pad with trolly stuff; if you do, you will force us to use a private pad again, even though it will make us sad. == Reminders == * Remember to "/me status: foo" at least once daily. * Remember that our current code reviews should be done by end-of-week. * Make sure you are in touch with everybody with whom you are doing work for the next releases * Remember to fill up actual point when you finish a task (as well as "fix" the estimate when starting the issue). * Add planned PTO to the calendar https://storm.torproject.org/shared/ISA5L5nH0Xu88iqSCx9ZjCXYSMKOBTdbUeWarbd… * Check other's people call for help in their entries. ------------------------------- ---- 8 January 2019 ------------------------------- == Announcements == * Teor is bringing a proposal for proposed ticket (discussion during hackweek?). https://pad.riseup.net/p/network-team-triage-2018 * We are going to start weekly checkins on anti-censorship work starting next week. I will send a mail later about it <gaba> == Discussion == * Who needs help with reviews? Here are the outstanding reviews, oldest first: https://trac.torproject.org/projects/tor/query?status=needs_review&componen… * we need a sbws reviewer for January that is not teor. who? * Sponsor 31 in da house. Modularization proposal. We have the milestones [0] and need to add tickets and start them in January. It will be included in the roadmap creation in Brussels. [0] -> Sheet milestones of this document https://storm.torproject.org/shared/a-NKHPmkxDOuAGNaFpOrd3AIXJ4mDgIbL5sIjf4… - Who is going to be doing them? * Closing tickets. Let's briefly come to an agreement on this. (closing tickets and opening new ones if there is something remaining from the old one). * S8 tickets need to be move to some other place. Who can do it this week? * Drafting Hackweek agenda. Let's find a day to meet and create the agenda. * draft agenda https://pad.riseup.net/p/tor-netteam-agenda-hackweek-2019.1-keep * poll to decide on a date https://www.systemli.org/poll/#/poll/qm6aFNWRZP/participation?encryptionKey… * Retrospective for S8 work https://pad.riseup.net/p/14rdcvvjS5ue * Network team needs and Priorities pad for DRL funding opportunity https://storm.torproject.org/shared/cDDK_EyXoIZoiOzt3YSRo3cCme0C-JAZe5nCdvb… == Recommended links == 35c3 talk on internet history with an economics perspective https://media.ccc.de/v/35c3-10019-internet_the_business_side#t=3729 == Updates == NOTE NEW FORMAT! Name: Week of XYZ (planned): - What you planned for last week. Week of XYZ (actual): - What you did last week. Week of ABC (planned): - What you're planning to do this week. Help with: - Something you may need help with. PLEASE DO NOT BULK-DELETE THE OLD ENTRIES! Leave the "Planned" parts! Leave the parts for last week and this week! gaba: Week of 01/01 (actual): - read mails and organize work to be done by me Week of 01/07 (planned): - back into 1:1s - anti-censorship position follow up - S8 Q4 report - modularization proposal - s19 - hackweek agenda Needs help with: - getting all the tickets mark as sponsor8 out of it (close them or have them somewhere else). Some of them may go into s19. https://trac.torproject.org/projects/tor/query?status=!closed&sponsor=Spons… - please add points to the tickets you already have done (thanks dgoulet for doing it here https://trac.torproject.org/projects/tor/ticket/28020 and thanks people that added them to the spreadsheet) teor: Week of 21 Dec, 4-8 Jan (actual): High-Priority: - Sponsor 8 tasks - Ask metrics to monitor bootstrap speed - Tweak bootstrap settings to work when lots of fallbacks are down - And also on networks that drop packets Week of 7 Jan (planned): High-Priority: - PrivCount proof of concept (#29004 and related tickets) Medium-Priority: - (no sbws reviews, I need to focus on PrivCount before the hackfest) - Maybe some code reviews if I get time - Sponsor 8 tasks - are these important enough to do anyway? - Ask metrics to monitor bootstrap speed - Tweak bootstrap settings to work when lots of fallbacks are down - And also on networks that drop packets Help with: - Can anyone help with PrivCount before the hackfest? (There's some work in progress code in #29004 for review) - Who can take my code reviews if I run out of time to do them? Nick: Week of 1 Jan (planned): - ? Week of 1 Jan (actual): - Worked on stable releases, backporting, etc - Solve an android compilation issue - Merged and reviewed a bunch of code Week of 7 Jan (planned): - Stable releases 0.3.3.11, 0.3.4.10, 0.3.5.7 - 28142 review and merge wtfpad patch - Help on snowflake startup issues - revise pubsub branch, time permitting, for S31 - dgoulet: Week of 01/01 (actual): - Worked only Friday after coming back from holidays. Was all about bad-relays, emails and administrative tasks. Week of 01/07 (planned): - prop289: Authenticated SENDMEs. Working on #26840 to start with. - Discussion with arma/nickm about #26871 which lead to open #29023 that is a ticket to implement a fast PRNG. - Updated the spec for #28180, they are in needs_review. ahf (will be missing at the meeting): Since last time: Sponsor 8: - Got the big parts of s8 finished. Still missing a few spec changes. Misc: - Met with HC and Benjamin from TGP and went over what has happened since last we met that is relevant for mobile: dormant mode, memory usage, etc. Week of 1/17 (planned): Sponsor 8: - Review David's spec changes for the PT STATUS/LOG messages (#28181, #28182). - Fill out q4 report and points for s8 tickets we did in q4. Sponsor 19: - Working on a document to describe how the broker works and how the WebRTC protocol work at a high level to give people some idea about the API's used for the JS/Go proxy and the Snowflake client. - Debug an issue where the JS proxy will become idle and no data progress is made during bootstrap (and thus also after bootstrap). Misc: - Next step for sysadmin hire with Linus/Hiro. - See if there is S8 tickets that makes sense for S19(?) Mike: Since last time: - Wrote code to prevent circuitpadding from attempting to renegotiate after failure. - Did final triage of outstanding Sponsor2 padding issues. - Reviewed asn's circuitpadding tickets (#28780 and #28634) - Reviewed other tickets Week of 1/17 (planned): - Fix up issues from circuitpadding reviews - Help asn with #28780 and #28634 catalyst: week of 12/17 (2018-W51) (planned): - cleaning up orconn-tracker for review -- mostly it needs some commits detangled (mostly done, after much wrestling with interactive git rebase), and more documentation in commit messages and comments, also changelogs - assess testing situation on orconn-tracker; write new tests as needed - if there's time, work on reporting intermediate application circuit building progress during bootstrap (#27104) -- a lot of the work is already in orconn-tracker - adjusting sponsor8 tickets to better reflect reality - worked through the weekend so i might take some time off (but still reachable on Signal; IRC and email higher latency) week of 12/17 (2018-W51) (actual): - finished #27167 - opened new tickets to clean up after #27167 week of 12/24 (2018-W52) (actual): - TPI holiday week of 12/31 (2019-W01) (actual): - TPI holiday 12/31, 01/01 - reviewed some small tickets - made progress on cleaning up control-spec changes for new bootstrap phases - minor debugging on IRC of mysterious tor restarts - #28929 (typo fix for new bootstrap message) week of 01/07 (2019-W02) (planned): - finish up control-spec changes for new bootstrap phases - continue cleaning up sponsor8 bookkeeping - move relevant things from sponsor8 to sponsor19 - review more pubsub stuff as it comes up - think about more long-term stuff - ticket reviews

3 2

Tor Browser meeting, 7 Jan 2019
by Georg Koppen 08 Jan '19

08 Jan '19

Hi everyone! Yesterday we had our first Tor Browser meeting in 2019. The IRC log can be found at: http://meetbot.debian.net/tor-meeting/2019/tor-meeting.2019-01-07-18.58.log… and the notes from our pad are below: Discussion: -upcoming releases/Tor Browser 8.5 (GeKo: 1/29 and 3/19 are the next release dates; 8.5 stable could get out at the end of march then) -larger project planning: tor-launcher/torbutton -> webextensions -> inclusion in tor-browser directly (GeKo: we plan to nail down the final plan next week; mcs/brade will lead the tor launcher efforts, and igt0 and GeKo will look into Torbutton) tjr - We're going to nominate this for backport: Bug 1446472 - privacy.resistFingerprinting is true blocks QR code (canvas) on web.whatsapp.com without any notice - If Tor wants it earlier you could bring it in at your leisure - mingw-clang - Working on --enable-sandbox on esr: I thought I had this working already but I guess not. - To do this, I need to backport a bunch of build patches so I can backport pdb generation =( - Working on --enable-accessibility in -central - Hit a weird runtime failure jacek thought he fixed. - USENIX reviews taking time. But finding fun ideas to maybe do sometime in the future! - Determined a small path forward for rust code that uses networking APIs: https://bugzilla.mozilla.org/show_bug.cgi?id=1376621#c12 - I'm not certain how much different this is from Tor's current activity; but something to try... - Expected leave is end of month, could be earlier depending GeKo: -back from vacation -did stay away from my computer (mostly) -worked on the mingw-w64-clang toolchain (bug 28716) This Week: -finish up #28716 -test the mingw-w64-clang toolchain with Firefox code we ship and provide a proper patch for switching the nightly Firefox build part to it (#28238) -begin-of-the-month-admin dance -timesheets! -reviews -finally comment on the ideas in doc for #3600 -pospeselr: Can you take over the work on the security settings redesign (#25658)? I fear I will get again distracted while trying to help with TBA-a3 and other stuff and we should get the redesign into 8.5 if possible. - pospeselr: yes can do! (Great, thanks! GeKo) mcs and brade: Past three weeks: - More work on #28885 (notify users that update is downloading). - Responded to nickm's tor-dev message r.e. tor's new dormant mode. [Do we need a ticket for Tor Browser related work that needs to be done in the wake of it? - GeKo Yes. I will create a ticket. -mcs] - Provided some feedback on the Tor Browser developer job announcement draft. - Took some time off for Christmas / end of year. - Worked on end of quarter/end of year administrative tasks. - Helped a little with bug triage. This week: - Finish end of quarter/end of year administrative tasks. - Continue working on #28885 (notify users that update is downloading). pospeselr: Past N weeks: - knocked out sick for a lot of it :( - initial Tor Browser uplift sync w/ arthur, tjr, ethan, and steven - feedback from CRs: - #12885 (windows jumplists broken) - discovered we've a disk leak for all windows versions, put up a patch that will fix future clean installs and created a new issue for cleaning up upgrades - created ticket #28996 to find and delete jumplist storage files - basically to fix this on existing installs we need to scrape all the files in a particular user directory, look for 'Tor Browser' strings in them, and delete them is this sort of approach a good patch for Tor Browser or is this too 'hacky' ? (GeKo: if we can be sure just to deal with jumplist files, that's okay with me)V - #25702 (tb icon re-branding) - regarding general icon weirdness and cropping/scaling: on linux there seems to be a lot of weird window-manager specific issues surrounding how the 'Icon' entry is handled in the Tor Browser .desktop file - both gnome and cinnamon use a cropped and scaled-down version of the tb icon in some places (alt-tab, taskbar window list, window overviews) but the correct icon in others (in the file-browser) - seems to be a caching issue since the places where the icon is broken doesn't update when the source icon or the Icon entry is updated - only hypothesis around the various window-manager icon caching issues is that our self-modifying .desktop file might be fucking with things, but would need to dig deeper - general solution for the cropping issue in-browser and the installer (you can see the same cropping issue in the windows installer) is to just update the assets and give a bit of margin around the edges (Sounds good to me. I guess we should try to stay away from as many rabbit holes as we can here. :) - GeKo) #3600 (redirect cookie isolation) - synced with steven about work his team has done in this space, but disappointed to find out they don't have anything 'as well thought out as your doc' - best way forward for now seems to tjr's suggestion: "Allow Redirects, but Neuter Their Tracking Ability" This Week: - meetings meetings: uplift, release - #25702+#28546 (rebrand) : update patch to add some margin to icons to work-around the squashed circle edge issue - #25658 (security settings redesign) - look into back-porting 1446472 (Should be fair game for the next alpha due on 1/29 - GeKo) igt0: Past three weeks: - Started the UI side of Circuit display for mobile(#25764) - Vacations! This week: - Finish the UI side of the circuit display(#25764) - Integrate the circuit display UI (Java/Android) with the logic side(torbutton/javascript). (#25764) boklm: Since last meeting: - fixed some testsuite issues: #27115, #28876, #28904 - vacations This week: - continue work on testsuite (fixing all tests, or temporarily disabling them if they require more work), and binutils issue pili: - Happy new Year everyone! This week: - catching up with email - Sponsor 8 report - Looking ahead at funding proposals due in the next few months - Tor Browser Team Priorities and needs pad for DRL SOI due 2nd Feb: https://storm.torproject.org/shared/DWoSG7f1qUTdhXz1l9i7bL-SYxIe00fB_a16l44… - Starting to think about Sponsor 19 Browser related work - Tor Browser Release meeting this week - anyone we want input from that we should invite? (GeKo: maybe the fundraising folks to make sure what we should do with the banner and what should come afterwards) anto: Past N weeks: - #28329 TBA + Orbot - matt, could we sync about what is needed from me here now? - #23888 Snowflake web extension - someone in this team will/want to work/review it? (GeKo: Review should be possible; we'll coordinate what we can/should do here) sisbell: Last week: - #29003 - Investigated goptbundle integration into tor-browser-build. Did some initial work, (Pluto2/goptbundle about 1 week of work to fully integrate) - #27609 - Evaluate Tor Onion Proxy - have initial tor-browser-build project setup. - #28803 - Integrate building PT - Got patches done to build with tor-browser-builds. Created gradle downloads file. Still need goptbundle integration and packaging. This Week: - #29003, #28803 sysrqb: EOY and Last week: Worked on FastLane configuration Reviewed Google Play comments and reviews A little vacation and much family time This week: Write email about Google Play reviews and comment Open tickets for the comments, as needed Create patch for FastLane stuff At Real World Crypto (RWC) this week TBA onboarding stuff Georg

1 0

Damian's Status Report - December 2018
by Damian Johnson 07 Jan '19

07 Jan '19

Hi all! Unsurprisingly not much for December so tis a short one. https://blog.atagar.com/december2018/

1 0

Tor Browser Release Meeting: Wednesday 9th January @ 1900UTC
by Pili Guerra 07 Jan '19

07 Jan '19

Hi all, Happy new year! We will have our first Tor Browser Release meeting of the year this week: Wednesday 9th January @1900UTC over at #tor-meeting Our next release is planned for the end of January so this will be the last chance for us to consider any requests for inclusion in the release. We look forward to seeing you there :) Thanks! Pili — Project Manager: Tor Browser, UX and Community teams pili at torproject dot org gpg 3E7F A89E 2459 B6CC A62F 56B8 C6CB 772E F096 9C45

1 0

Roger missing some mail and some days next week
by Roger Dingledine 03 Jan '19

03 Jan '19

In lieu of the vegas meeting notes this week (there won't be any, as there was no vegas meeting) I'm posting two things that people might find useful about me: - I lost many of my arma(a)torproject.org mails from Dec 24 to Dec 27. So if there is something you are hoping I will read or answer, from those dates, please resend it. - I am packing up all my stuff and moving next week. I will be especially absent on Jan 8 and 9, but I will be noticeably absent on Jan 7 and 10 too. And maybe longer depending on whether Verizon screws us (that seems to be the thing that surprises every person who has moved recently :). So if there is something then that needs me, please feel free to work around me as best you can. --Roger

1 0