tor-project June 2021

tor-project@lists.torproject.org

11 participants
21 discussions

metrics-lib 2.17.0 released
by Iain R. Learmonth 15 Jun '21

15 Jun '21

Hi, I have released metrics-lib 2.17.0. metrics-lib, which also goes by the name DescripTor, is a Java API that fetches Tor descriptors from a variety of sources like cached descriptors and directory authorities/mirrors. The DescripTor API is useful to support statistical analysis of the Tor network data and for building services and applications. This release is the sum of over 9 years of development, with the latest changes: Medium changes * Detect GeoIP files automatically by filename. Minor changes * Update to Apache Commons Logging 1.1.3. You can find the release at: https://dist.torproject.org/metrics-lib/2.17.0/ You can find the sources at: https://gitlab.torproject.org/tpo/metrics/library/-/tree/metrics-lib-2.17.0 Thanks, Iain.

1 0

Updated Tor Browser Signing Key
by Matthew Finkel 14 Jun '21

14 Jun '21

Hello everyone, The Tor Browser OpenPGP signing key expired on 12 June. We extended the expiration of the subkey again, due to the pandemic. We hope this is the last time that will be necessary. The valid key should be available from keys.openpgp.org now. The key is attached, as well.

1 0

Anti-censorship meeting notes, 10 June 2021
by Cecylia Bocovich 10 Jun '21

10 Jun '21

Hi everyone, Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2021/tor-meeting.2021-06-10-16.00.html and our meeting pad: Anti-censorship work meeting pad -------------------------------- Next meeting: Thursday June 10th 16:00 UTC Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) == Goal of this meeting == Weekly checkin about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at Tor. == Announcements == No announcements this week == Discussion == - @meskio: you're working on gettor; are you in touch with the component that uploads to https://archive.org/details/@gettor ? dcf thinks the way files are organized in those uploads is unusual. - https://blog.archive.org/2011/03/31/how-archive-org-items-are-structured/ - https://gitlab.torproject.org/tpo/anti-censorship/gettor-project/gettor/-/b… - Currently there's one file per item; it could be multiple files in each item. - Could be one item per release: torbrowser-10.0.14 - Or one item per release-arch: torbrowser-10.0.14-win64 - Direct download links can point to the single files within the item that they need, e.g. https://archive.org/download/torbrowser-10.0.14/torbrowser-install-win64-10… - It would be good to get a second opinion from anarcat. == Actions == No actions this week == Updates == cecylia (cohosh): last updated 2020-06-10 Last week: - opened core/tor#40406 to discuss how we use the BridgeDistribution option in Tor - FOCI reviews and PC meeting - deployed a new version of the snowflake broker - made progress on implementing support for vanilla bridges in rdsys (rdsys#38) - following OONI's work on integrating snowflake and obfs4 - anti-censorship team roadmapping and issue triaging - working on a snowflake blog post for the 10.5 release - worked on making the moat-shim deployment more secure This week: - work on rdsys#38 as a prereq for rdsys#12 - work on bridgedb#32276 deployment - follow up on arlo's snowflake broker work Needs help with: arlolra: 2021-06-10 Last week: - More snowflake!39 Next week: - Maybe get back to snowflake-webext #10 Help with: - snowflake !39 dcf: 2021-06-10 Last week: - commented on broker components https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Next week: Help with: agix:2021-06-10 Last week: -Busy with university stuff Next week: -Work on bridgebox for rdsys -More research on httpt #4 Help with: - maxb: 2021-06-03 Last week: - Made some improvements to github.com/max-b/nat-testing for https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - Now have separate containers for each piece along w/ a reasonably simulated network topology - Got really good feedback from cohosh as always Next week: - Make config fixes cohosh suggested - Implement alternative NAT types - Add testing wrapper w/ "pass/fail" conditions meskio: 2021-06-10 Last week: - debian package snowflake included in the debian go-team (looking for a mentor) https://salsa.debian.org/go-team/packages/snowflake - getting to learn the insides of gettor - start rdsys email implementation Next week: - MVP of gettor rewrite in rdsys (rdsys#32) Help with: -

1 0

UX team monthly meeting notes, June 8th
by Antonela D 08 Jun '21

08 Jun '21

Hello, == Monthly User Experience Team Meeting == Open IRC meetings happen monthly on the first Tuesday of the month at 1400 UTC in #tor-meeting on OFTC. The next meeting will be held on Tuesday July 13th at 1400 UTC in #tor-meeting on OFTC. Here are the minutes for the meeting of June 8th: http://meetbot.debian.net/tor-meeting/2021/tor-meeting.2021-06-08-14.00.log… Here are the minutes for the meeting of May 11th: http://meetbot.debian.net/tor-meeting/2021/tor-meeting.2021-05-11-14.00.log… Here are the minutes for the meeting of April 6th: http://meetbot.debian.net/tor-meeting/2021/tor-meeting.2021-04-06-13.58.log… Here are the minutes for the meeting of March 2nd: http://meetbot.debian.net/tor-meeting/2021/tor-meeting.2021-03-02-13.58.log… *--------------------------* *Tuesday June 8th 14:00 UTC* *--------------------------* == What projects are we working on? == S9 - Usability and Community Intervention on Support for Democracy and Human Rights - https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… []=Sponsor%209&label_name[]=UX S28 – Survey reporting for "Get more alpha users of Snowflake" - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… S30 - Empowering Communities in the Global South to Bypass Censorship - https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… []=Sponsor%2030&label_name[]=UX S103 – Collaborative ResistancE to Web Surveillance (CREWS) - https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… []=Sponsor%20103 == Announcements == * Tor Browser 10.0.16 Release: - https://blog.torproject.org/new-release-tor-browser-10016 * Tor Browser Alpha 10.5.a15 for Release: - https://blog.torproject.org/new-release-tor-browser-105a15 * V2 Onion Services deprecation: - https://twitter.com/torproject/status/1388905624847757315 == Agenda == 1. Snowflake Report Published (duncan) https://gitlab.torproject.org/tpo/ux/research/-/raw/master/reports/2021/pub… 2. TB 10.5 Alpha release on June 7th week?, call for testing (antonela) https://gitlab.torproject.org/tpo/ux/research/-/issues/41 3. donate page? donate page! (duncan) https://gitlab.torproject.org/groups/tpo/-/milestones/22 4. UX team roadmapping (antonela) 5. Status update about Feedback Collection Fund (josernitos) == Open Call for User Research == Find out how to contribute to the UX team: https://community.torproject.org/user-research/how-to-volunteer/ Thanks! A -- Antonela Debiasi UX Team Lead torproject.org @antonela E2330A6D1EB5A0C8

1 0

Anti-censorship team monthly report: May 2021
by Cecylia Bocovich 08 Jun '21

08 Jun '21

Hi everyone! This is what we've been up to in May! May 2021 monthly report Snowflake ========= * Snowflake now implements the PTv2 Go API specification https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… * Fixed a goroutine leak causing memory problems in the Snowflake server https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… * Fixed a CPU issue with Snowflake on the probetest service https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… * Improved our standalone proxy setup documentation https://gitlab.torproject.org/tpo/web/community/-/issues/203 BridgeDB ======== * Send QR codes for bridges over email https://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/40008 * Have BridgeDB distribute obfs4 bridges by default https://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/40011 * Fix an HTML injection vulnerability in the HTTPS distributor https://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/40014 * Setup Gitlab CI https://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/40012 Other ===== * meskio has joined our team as a new full-time anti-censorship developer! * We posted a report on the censorship of Tor in Belarus: https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/blo… * We're starting work on a new Conjure PT for Tor! https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/9 https://censorbib.nymity.ch/pdf/Frolov2019b.pdf

1 0

Outreachy Intern Introduction
by Kulsoom Zahra 04 Jun '21

04 Jun '21

Greetings everyone! My name is Kulsoom Zahra (she/her). I'm from India. I'm happy to share that I've been selected as an Outreachy Intern for the May-Aug 2021 corhot! Project - Help Tor Project support our users Mentored by Gus I developed interest into privacy and digital security long back and heard of Tor. Being actually a part of the project is undoubtedly an overwhelming experience! I'm exicted to learn and grow with the community. My nickname on IRC is kulsoom_z. Regards, Kulsoom Zahra

2 1

Anti-censorship meeting notes, 03 June 2021
by Cecylia Bocovich 03 Jun '21

03 Jun '21

Hey everyone, Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2021/tor-meeting.2021-06-03-16.00.html and our meeting pad: Anti-censorship work meeting pad -------------------------------- Next meeting: Thursday June 3rd 16:00 UTC Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) == Goal of this meeting == Weekly checkin about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at Tor. == Links to Useful documents == Our anti-censorship roadmap: Roadmap: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards The anti-censorship team's wiki page: https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home Past meeting notes can be found at: https://lists.torproject.org/pipermail/tor-project/ Tickets that need reviews: from sponsors we are working on: All needs review tickets: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… Sponsor 30 https://gitlab.torproject.org/groups/tpo/-/milestones/4 https://gitlab.torproject.org/groups/tpo/-/milestones/7 https://gitlab.torproject.org/groups/tpo/-/milestones/5 https://gitlab.torproject.org/groups/tpo/-/milestones/6 Sponsor 28 must-do tickets: https://gitlab.torproject.org/groups/tpo/-/milestones/10 possible tickets: https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… Public bug-reporting pad: https://pad.riseup.net/p/tor-anti-censorship-bugs-keep <-- we have anonymous tickets handling now. Let's see which anti-censorship repos to include. == Announcements == we're starting to work on a Conjure PT for Tor == Discussion == produce snowflake releases need signed git tags (tags also useful for go modules) and a documented release process tarballs not necessary, for debian at least == Actions == add to the monthly report: https://pad.riseup.net/p/gzx2ELX_6sFoh_8Xsw77 == Interesting links == == Reading group == We will discuss "" on Questions to ask and goals to have: What aspects of the paper are questionable? Are there immediate actions we can take based on this work? Are there long-term actions we can take based on this work? Is there future work that we want to call out, in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. cecylia (cohosh): last updated 2020-06-03 Last week: - fix HTML injection issue with bridgedb (bridgedb#40014) - update version of snowflake in Tor Browser (tor-browser-build#40302) - worked on s28 deliverables - revised and merged snowflake!36 - reviewed snowflake!40 - wrote up a detailed plan on how to integrate bridgedb with rdsys (rdsys#12) - created some new issues for rdsys work - gave feedback to NAT testbed (snowflake#25595) This week: - more performance investigations for snowflake#40026 - work on rdsys#38 as a prereq for rdsys#12 - work on bridgedb#32276 deployment - follow up on arlo's snowflake broker work - work on a blog post for the snowflake release in TB stable Needs help with: arlolra: 2021-05-20 Last week: - Next week: - Maybe more !39 Help with: - !37 - !39 dcf: 2021-06-03 Last week: - main branch name change in goptlib and meek https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/6 - more review of Snowflake JSON rendezvous https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - made a ticket to upgrade snowflake bridge for tor security fix https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Next week: Help with: Antonela: 2020-08-27 This week: agix:2021-06-03 Last week: -Busy with university stuff Next week: -Work on bridgebox for rdsys -More research on httpt #4 Help with: - hanneloresx: 2021-3-4 Last week: - Submitted MR for bridgestrap issue #14 Next week: - Finish bridgestrap #14 - Find new issue to work on Help with: - maxb: 2021-06-03 Last week: - Made some improvements to github.com/max-b/nat-testing for https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - Now have separate containers for each piece along w/ a reasonably simulated network topology - Got really good feedback from cohosh as always Next week: - Make config fixes cohosh suggested - Implement alternative NAT types - Add testing wrapper w/ "pass/fail" conditions meskio: 2021-06-03 Last week: - debian package snowflake client and proxy (snowflake#19409) - getting acquaintanced with gettor and rdsys Next week: - gettor rewrite in rdsys (rdsys#32) Help with: - HashikD: 2021-01-22 This week: - Next week: - Help with: -

1 0

Monthly Status Report from irl
by Iain R. Learmonth 03 Jun '21

03 Jun '21

Hi All, This is my monthly status report for work complete during May 2021. This month saw the releases of metrics-lib 2.16.0 and CollecTor 1.17.0. The new CollecTor release includes the updated metrics-lib, and has now been deployed to both the Tor Metrics CollecTor instances. During the deployments, I took the opportunity to fully document the deployment and upgrade procedure, and document common error conditions that may appear in the log files. I refreshed my memory on how the GeoIP lookups are performed within Onionoo, and have also been reviewing patches that exist in the GitLab to be included in an updated Onionoo release. I am planning to upload the GeoIP data files to Maven Central, and use that JAR in Onionoo, rather than including the files directly as this will also support Orbot and other Android applications embedding Tor in using those files. Proposal 328's implementation (Make Relays Report When They Are Overloaded) has caused issues with bridge descriptor sanitisation. My first task this month is to get the patch to support the new relay descriptor lines into CollecTor and get that deployed so that we do not find ourselves discarding all bridge descriptors. (CollecTor will only archive those it knows it is safe to archive, which do not contain lines it does not know about). Towards the end of the month, CollecTor experienced disk space issues. These were resolved with the help of the sysadmin team and the system is now running smoothly again, with no data lost or corrupted. Finally, I have been around in Matrix/IRC to answer Metrics questions and on occasion to provide a little end-user support in #tor. I've been attending the weekly network health meetings and will continue to do so. If you've got any questions about anything I'm working on, just send me an email or chat on Matrix/IRC. Thanks, Iain.

1 0

minute details from the sysadmin
by Antoine Beaupré 02 Jun '21

02 Jun '21

There was no meeting this month, here's a short technical report. # Important announcements Those are important announcements you might have missed: * fpcentral will be [retired][] on October 20th 2021, you are encouraged to use EFF's [Cover Your Tracks][] or [TorZillaPrint][] instead, see [ticket 40009][] for background * if you have a precious wiki page from Trac that redirects to some place no one can edit, [we welcome proposals on proper places to redirect those pages][] * we have a reliable [procedure to rename Git branches][] (e.g. to rename from `master` to `main`) globally * we set up a new onionbalance server so we can provide also v3 onion (balanced) services for all of our static websites. See <https://onion.torproject.org/> / <http://xao2lxsmia2edq2n5zxg6uahx6xox2t7bfjw6b5vdzsxi7ezmqob6qid.onion/> for a full list [procedure to rename Git branches]: https://gitlab.torproject.org/tpo/tpa/team/-/wikis/howto/gitlab/#renaming-a… [we welcome proposals on proper places to redirect those pages]: https://gitlab.torproject.org/tpo/tpa/team/-/issues/40233 [ticket 40009]: https://gitlab.torproject.org/tpo/tpa/team/-/issues/40009 [TorZillaPrint]: https://arkenfox.github.io/TZP/ [Cover Your Tracks]: https://coveryourtracks.eff.org/, [retired]: https://lists.torproject.org/pipermail/tor-project/2021-April/003091.html # Metrics of the month * hosts in Puppet: 86, LDAP: 89, Prometheus exporters: 140 * number of Apache servers monitored: 28, hits per second: 162 * number of Nginx servers: 2, hits per second: 2, hit ratio: 0.86 * number of self-hosted nameservers: 6, mail servers: 7 * pending upgrades: 1, reboots: 0 * average load: 0.61, memory available: 1.94 TiB/2.77 TiB, running processes: 565 * bytes sent: 246.89 MB/s, received: 147.97 MB/s * [GitLab tickets][]: 132 tickets including... * open: 0 * icebox: 114 * backlog: 15 * next: 2 * doing: 1 * (closed: 2296) [Gitlab tickets]: https://gitlab.torproject.org/tpo/tpa/team/-/boards # Ticket analysis | date | open | icebox | backlog | next | doing | closed | delta | sum | new | spill | |------------|------|--------|---------|------|-------|--------|-------|------|------|-------| | 2020-11-18 | 1 | 84 | 32 | 5 | 4 | 2119 | NA | 2245 | NA | NA | | 2020-12-02 | 0 | 92 | 20 | 9 | 8 | 2130 | 11 | 2259 | 14 | -3 | | 2021-01-19 | 0 | 91 | 20 | 12 | 10 | 2165 | 35 | 2298 | 39 | -4 | | 2021-02-02 | 0 | 96 | 18 | 10 | 7 | 2182 | 17 | 2313 | 15 | 2 | | 2021-03-02 | 0 | 107 | 15 | 9 | 7 | 2213 | 31 | 2351 | 38 | -7 | | 2021-04-07 | 0 | 106 | 22 | 7 | 4 | 2225 | 12 | 2364 | 13 | -1 | | 2021-05-03 | 0 | 109 | 15 | 2 | 2 | 2266 | 41 | 2394 | 30 | 11 | | 2021-06-02 | 0 | 114 | 14 | 2 | 1 | 2297 | 31 | 2428 | 34 | -3 | |------------|------|--------|---------|------|-------|--------|-------|------|------|-------| | mean | 0.1 | 99.9 | 19.5 | 7.0 | 5.4 | NA | 22.2 | NA | 22.9 | -0.6 | Yes, the Icebox is still filling up. Hopefully this will get resolved soon-ish. Legend: * date: date of the report * open: untriaged tickets * icebox: tickets triaged in the "icebox" ("stalled") * backlog: triaged, planned work for the "next" iteration (e.g. "next month") * next: work to be done in the current iteration or "sprint" (e.g. currently a month, so "this month") * doing: work being done right now (generally during the day or week) * closed: completed work * delta: number of new closed tickets from last report * sum: total number of tickets * new: tickets created since the last report * spill: difference between "delta" and "new", whether we closed more or less tickets than were created -- Antoine Beaupré torproject.org system administration

1 0

Job Announcement - Fundraising Coordinator
by Erin Wyatt 02 Jun '21

02 Jun '21

Hi everyone! We have a new job opening for a Fundraising Coordinator: https://www.torproject.org/about/jobs/fundraising-coordinator/ <https://www.torproject.org/about/jobs/fundraising-coordinator/> The job description is pasted below. Please help us spread the word! Thank you! :) Best, Erin Wyatt Director of People Operations ewyatt(a)torproject.org <mailto:ewyatt@torproject.org> PGP: 35E7 2A9F 6655 45F9 2CB6 6624 BA0C 9400 F80F 91CE https://www.torproject.org <https://www.torproject.org/> http://expyuzz4wqqyqhjn.onion/ <http://expyuzz4wqqyqhjn.onion/> --------------------------------------------->8 # Fundraising Coordinator The Tor Project, Inc., a 501(c)(3) nonprofit organization advancing human rights and freedoms by creating and deploying free and open source anonymity and privacy technologies, is seeking a Fundraising Coordinator to join its Fundraising Team. The Tor Project’s Fundraising Team is responsible for creating and executing fundraising strategies in support of the Tor Project, a 501(c)(3) nonprofit. The Fundraising Coordinator is responsible for administrative support for all major fundraising initiatives, including individual and organizational giving, donor relationships, and gift/data management. We also envision this position having room for growth, expanding to include management of the grant writing process and other fundraising areas. This is a full-time, remote position. ## General Duties & Responsibilities Gift Entry & Acknowledgement: - Execute timely and accurate gift entry into donor database. - Send donation confirmation via email and postal mail. Record Keeping & Reporting: - Produce periodic financial reports (daily, weekly, monthly). - Maintain and improve accuracy of donor database, CiviCRM. - Keep meticulous records in other file structures, e.g. GrantHub, NextCloud, GitLab. - Create and maintain donor lists and reports. Donor Relations: - Act as first point of contact for questions regarding donations and gifts via ticketing system. Administrative Support: - Support the Fundraising Team with other administrative tasks related to organizational giving, grant writing, donor relationships, gift/data management, and annual/one-time fundraising campaigns. Grant Writing: - Support our grant writing work by helping to write and review grant proposals. - Research potential grant opportunities. ## Abilities & Experience - 2+ years of administrative experience in a fundraising or nonprofit setting. - Highly organized with superior attention to detail. - Excellent writing skills. - Strong commitment to donor privacy. - Experience working in a donor CRM. - Comfortable working remotely with a geographically distributed team. - Proficient understanding of and ability to use technology, and most importantly, a willingness and ability to learn and use new technologies. - Willingness to travel to semi-annual international meetings (when in-person gatherings resume). Preferred Qualifications - Experience with CiviCRM. - Experience with grant writing. - Experience working with geographically distributed teams across multiple time zones. - Genuinely be excited about Tor Project and its values! ## Salary & Benefits Salary range for this position is $50,000 USD - $60,000 USD and there is voluntary opt-in salary transparency for employees and contractors. The Tor Project has a competitive benefits package, including a generous PTO policy, 16 paid holidays per year (including the week between Christmas and New Year's, when the office is closed), and flexible work schedule. Insurance benefits vary by employment status and country of residence. ## How to Apply To apply, submit the following documents to job-fundraising at torproject dot org: - Cover letter. In your cover letter, please include the reason you want to work at the Tor Project. - One- to two-page writing sample (fundraising-related, ideally). - CV/resume. IMPORTANT: Please email application materials in plain text or PDF format, if possible, to job-fundraising at torproject dot org with “Fundraising Coordinator” in the subject line. ## About the Tor Project Tor is for everyone, and we are actively working to build a team that represents people from all over the world - people from diverse ethnic, national, and cultural backgrounds; people from all walks of life. We encourage people subject to systemic bias to apply, including people of color, indigenous people, LGBTQIA+ people, women, and any other person who is part of a group that is underrepresented in tech. The Tor Project's workforce is smart, committed, and hard working. We currently have a paid and contract staff of around 24 developers and operational support people, plus many thousands of volunteers who contribute to our work. The Tor Project is funded in part by government research and development grants, and in part by individual, foundation, and corporate donations. The Tor Project, Inc., is an equal opportunity, affirmative action employer.

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

tor-project June 2021