July 2021 - tor-project - lists.torproject.org

Monthly Status Report for irl
by Iain R. Learmonth 06 Jul '21

06 Jul '21

Hi All, This is my monthly status report for work complete during June 2021. This month saw the releases of metrics-lib 2.17.0 and Onionoo 8.0-1.26.1. The new Onionoo release includes a number of fixes that me and Karsten had previously been working on related to reliability, and now also uses the IP Fire database that is used by core Tor. This means that the GeoIP information on Relay Search is also now based on the IP Fire database. Work has begun on importing bridge reachability testing into the Tor Metrics pipeline to improve the UX situation for bridge operators regarding knowing if their bridge is online or not. Since this work has been delayed, it is now expected to be completed by August 31st. Support for parsing bridgestrap metrics has been merged to the development branch of metrics-lib although this has not yet been included in a release. I'm expecting that will happen early this month. Finally, I have been around in Matrix/IRC to answer Metrics questions and on occasion to provide a little end-user support in #tor. I've been attending the weekly network health meetings and will continue to do so. If you've got any questions about anything I'm working on, just send me an email or chat on Matrix/IRC. Thanks, Iain.

1 0

No network team meeting this Monday
by Nick Mathewson 02 Jul '21

02 Jul '21

This Monday is a company holiday (for the 4th of July ((on the 5th)). We won't be doing a network team meeting on Monday. best wishes, and see you on IRC! -- Nick

1 0

Anti-censorship meeting notes
by meskio 01 Jul '21

01 Jul '21

Hey everyone! Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2021/tor-meeting.2021-07-01-15.59.html and our meeting pad: Anti-censorship work meeting pad -------------------------------- Next meeting: Thursday July 1st 16:00 UTC Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) == Goal of this meeting == Weekly checkin about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at Tor. == Links to Useful documents == Our anti-censorship roadmap: Roadmap: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards The anti-censorship team's wiki page: https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home Past meeting notes can be found at: https://lists.torproject.org/pipermail/tor-project/ Tickets that need reviews: from sponsors we are working on: All needs review tickets: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… Sponsor 30 https://gitlab.torproject.org/groups/tpo/-/milestones/4 https://gitlab.torproject.org/groups/tpo/-/milestones/7 https://gitlab.torproject.org/groups/tpo/-/milestones/5 https://gitlab.torproject.org/groups/tpo/-/milestones/6 Sponsor 28 must-do tickets: https://gitlab.torproject.org/groups/tpo/-/milestones/10 possible tickets: https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… Public bug-reporting pad: https://pad.riseup.net/p/tor-anti-censorship-bugs-keep <-- we have anonymous tickets handling now. Let's see which anti-censorship repos to include. == Announcements == == Discussion == Potential to increase Snowflake performance by increasing buffer sizes. Any questions about this? https://lists.torproject.org/pipermail/anti-censorship-team/2021-July/00017… For what KCP and smux are and how they fit together, see a summary at https://github.com/net4people/bbs/issues/14 it will increase the memory consumption of the client, not the proxies. Not measured yet, not sure if it might affect on android devices. There was previos work modifying the KCP window size, but but smux buffer size should have a bigger effect https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… cohosh has scripts for snowflake performance testing somewhere golang TLS implementation fingerprinting: https://ooni.org/post/making-ooni-probe-android-more-resilient/#changing-ou… in some countries golang TLS fingerprint in android triggers a blocking, not sure if that could affect snowflake there is already an issue about DTLS fingerprinting https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… A list of snowflake detection research so far is at https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… a script for Zeek (then it was called Bro) for extracting DTLS fingerprints for research purposes. https://github.com/miagilepner/DTLS-fingerprint Another point, for TLS fingerprinting in general, see https://tlsfingerprint.io/ and https://tlsfingerprint.io/static/frolov2019.pdf there is a TLS fingerprinting tool called JA3: https://github.com/salesforce/ja3 dtls is not in the golang standard library, we get it from pion: https://github.com/pion/dtls == Actions == == Interesting links == https://www.vyprvpn.com/features/chameleon found linked from https://ntc.party/t/rkn-will-try-to-block-the-following-vpn-services/1022/30 == Reading group == We will discuss "" on Questions to ask and goals to have: What aspects of the paper are questionable? Are there immediate actions we can take based on this work? Are there long-term actions we can take based on this work? Is there future work that we want to call out, in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. cecylia (cohosh): last updated 2021-06-24 Last week: - wrote, deployed snowflake!43 to solve a stats bug - fixed up snowflake!42 and found a few more race conditions - commented on bridgestrap#15 - worked on debugging snowflake memory leak (snowflake#40052) - deployed some memory profiling tools - wrote a fix snowflake!45 - started reviewing rdsys!11 - s28 deadline work - planning for new s96 - reviewed bridgedb!20 This week: - finish reviewing rdsys!11 - review bridgstrap#15 when ready - work on bridgedb#32276 deployment - follow up on arlo's snowflake broker work - afk next week Needs help with: - review of snowflake!45 arlolra: 2021-06-10 Last week: - More snowflake!39 Next week: - Maybe get back to snowflake-webext #10 Help with: - snowflake !39 dcf: 2021-07-01 Last week: - posted about increasing performance by enlarging smux buffers in snowflake https://lists.torproject.org/pipermail/anti-censorship-team/2021-July/00017… - reviewed fix for snowflake server resource leak https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Next week: - AMP cache rendezvous for snowflake https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Help with: agix:2021-07-01 Last week: -Off till next week due to final exams Next week: -Work on bridgebox for rdsys -More research on httpt #4 Help with: - hanneloresx: 2021-3-4 Last week: - Submitted MR for bridgestrap issue #14 Next week: - Finish bridgestrap #14 - Find new issue to work on Help with: - maxb: 2021-06-03 Last week: - Made some improvements to github.com/max-b/nat-testing for https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - Now have separate containers for each piece along w/ a reasonably simulated network topology - Got really good feedback from cohosh as always Next week: - Make config fixes cohosh suggested - Implement alternative NAT types - Add testing wrapper w/ "pass/fail" conditions meskio: 2021-07-01 Last week: - OONI training - modify snowflake proxy to assign proxies based on self-reported client load (snowflake#40048) - add collector metricst to bridgestrap (bridgestrap#15) - brainstorm on bridgedb using the user location (bridgedb#31875) - act on snowflake!11 review Next week: - continue work on gettor in rdsys (rdsys!11 rdsys#32) Help with: - -- meskio | https://meskio.net/ -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- My contact info: https://meskio.net/crypto.txt -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Nos vamos a Croatan.

1 0