September 2022 - tor-project - lists.torproject.org

Cecylia's monthly status report, August 2022
by Cecylia Bocovich 05 Sep '22

05 Sep '22

Hi everyone, This is my status report for contract work in August 2022. 1. Help with Snowflake development * Helped prepare for the manifest v3 update in Chrome[0] 2. Conjure pluggable transport for Tor * Updated the deployed Conjure bridge[1] * Fixed a bug in the bridge's station allowlist[2] * Fixed an outdated repository key in the test environment[3] * Sent a public announcement to development mailing lists[4] Thanks! - Cecylia [0] https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… [1] https://metrics.torproject.org/rs.html#details/A84C946BF4E14E63A3C92E140532… [2] https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/conj… [3] https://gitlab.torproject.org/cohosh/phantombox/-/commit/3d3d48a0a5c9776209… [4] https://lists.torproject.org/pipermail/tor-dev/2022-August/014772.html

1 0

Applications Team Meeting Moved to Tuesday (2022-09-06)
by Richard Pospesel 05 Sep '22

05 Sep '22

Hi everyone, tomorrow is labour day in the US and elsewhere, so we'll be moving our regularly scheduled meeting back a day to 1500 UTC in #tor-meeting on OFTC irc. best, -Richard

1 0

Anti-censorship team meeting notes, 2022-09-01
by Shelikhoo 01 Sep '22

01 Sep '22

Hey everyone! Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-09-01-15.57.html And our meeting pad: Anti-censorship work meeting pad -------------------------------- Next meeting: Thursday Sept 8 16:00 UTC Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) == Goal of this meeting == Weekly check-in about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at Tor. == Links to Useful documents == * Our anti-censorship roadmap: * Roadmap: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards * The anti-censorship team's wiki page: * https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home * Past meeting notes can be found at: * https://lists.torproject.org/pipermail/tor-project/ * Tickets that need reviews: from sponsors we are working on: * All needs review tickets: * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… * Sponsor 28 * must-do tickets: https://gitlab.torproject.org/groups/tpo/-/milestones/10 * possible tickets: https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… * Sponsor 96 * https://gitlab.torproject.org/groups/tpo/-/milestones/24 == Announcements == * There will not be a meeting Sept 15th * Conjure PT ready to try out: https://lists.torproject.org/pipermail/anti-censorship-team/2022-August/000… == Discussion == * Snowflake in Turkmenistan: https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/iss… * we are providing a different snowflake bridgeline with specific port for stun servers and azure and domain front * the changes seems to work for AGTS (one ISP) but not for others, as they block port 3478 and 3479 * TorCloak Integration with BridgeDB * We are currently developing a new Tor Pluggable Transport called TorCloak. TorCloak's basic mechanism is to conceale Tor traffic on the video streams of WebRTC-based video conferencing services. * We are now coming to a stage on our project in which we are discussing solutions to disseminate our bridges. * Sent a draft of the solution via the mailing list. * https://lists.torproject.org/pipermail/anti-censorship-team/2022-August/000… * Get everyone's opinion and feedback on the solution (New) * Next Step for WebTunnel * https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/webt… == Actions == == Interesting links == == Reading group == * We will discuss "An Empirical Analysis of Plugin-Based Tor Traffic over SSH Tunnel" on Sept 8 * https://ieeexplore.ieee.org/document/9020938 * PDF available from Sci-Hub, DOI 10.1109/MILCOM47813.2019.9020938 * Questions to ask and goals to have: * What aspects of the paper are questionable? * Are there immediate actions we can take based on this work? * Are there long-term actions we can take based on this work? * Is there future work that we want to call out in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. cecylia (cohosh): last updated 2022-08-25 Last week: - Worked on reproducible builds of Conjure (conjure#14) - helped debug blocking of Snowflake in TM This week: - Snowflake web extension v3 manifest - polish the badge-helper extension more - email tor-dev and anti-censorship team about the current plan - a few quality of life conjure issues - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/conj… - draft an announcement of conjure for forum and development community mailing lists (are you in contact with comms@ about this? --gaba) Needs help with: dcf: 2022-09-01 Last week: - worked at understanding the nature of the changes in obfs4proxy-0.0.12 - identified the cause of the probabilistic (fails 3/4 of the time) failures in https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40804 - found a way to remotely detect old versions https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/91 - replied to question about TorCloak integration with Tor bridge distribution https://lists.torproject.org/pipermail/anti-censorship-team/2022-September/… Next week: - disable non-WireGuard SSH access to snowflake-02 - migrate goptlib to gitlab https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/86#note_282… - try Conjure PT development version https://forum.torproject.net/t/tor-dev-introducing-a-conjure-pt-for-tor/4429 Help with: meskio: 2022-09-01 Last week: - continue with rdsys-gettor deployment (distributor configured and working, fixes on TPA side, ...) - deploy BridgeDB css/svg fixes - review webtunnel implementation (webtunnel!1) - review webextension merge requests (webextension!39) - review new snowflake.torproject.org page - scann obfs4 bridges for pre-0.0.12 versions Next week: - deploy rdsys-gettor - fix language issues in BridgeDB (bridgedb#40056) Shelikhoo: 2022-09-01 Last Week: - [Merge Request Awaiting] Add SOCKS5 forward proxy support to snowflake (snowflake!64) - [Discussion & Deployment] Migrating Controlling git repo to Tor Gitlab Instance (shelikhoo/LogCollectorAncillary#5) - [Discussion & Deployment] Rollout of Distributed Snowflake Support - [Coding & Deployment] Proposal: Centralized Probe Result Collector (anti-censorship/team#54) - [Merged] Raw Probe Log Data Collection https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement/… - [Research] HTTPT Planning https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/http… - [Research] WebTunnel Planning(Continue) - [Coding] WebTunnel PT - [Deployment] WebTunnel PT(maybe https://bridges.torproject.org/status?id=CD050211692AED05885172BCA6ED4B9F56…) - [Deployment] Raw Probe Log Data Collection Next Week: - [Investigate] China "Anti-Fraud" Webpage Redirection Censorship (censorship-analysis#40026): update the research based on updated ooni - [Research+Coding] Raw Probe Log Data Collection https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement/… - [Research] WebTunnel Planning(Continue) - [Research] Log Collector Speed Measurement Itchy Onion: 2022-09-01 Last week: - RACE 2.2.x - RACE T&E meeting - Review !98 (https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow…) This week: - Researched and discussed the implication of disabling mdns with the team - Verify !98 - Will spend some time on RACE 2.2.x either today or tomorrow Next week:

1 0

Rhatto's Monthly Status Report, August 2022
by rhatto 01 Sep '22

01 Sep '22

Hi all :) This is my monthly status report for August 2022. Main activities during the period: 0. [Onionmine][] (a wrapper for Onion Service keys and certificates management): * Enhanced batch support: https://gitlab.torproject.org/tpo/onion-services/onionmine/-/issues/22 * Multiple fixes and enhancements. * Documentation update. 1. The Onion Plan (roadmapping for increasing usability and adoption of Onion Services): * Preparation for the upcoming session at the 2022 Tor Meeting: https://gitlab.torproject.org/tpo/team/-/wikis/2022SeptemberMeetingSchedule… 2. Other activities related to Sponsor 123 such as development, deployment, monitoring and support, including: * A simple EOTK + Onionprobe [survival guide][]. [Onionmine]: https://gitlab.torproject.org/tpo/onion-services/onionmine [survival guide]: https://gitlab.torproject.org/tpo/onion-services/onion-support/-/wikis/Docu… -- Silvio Rhatto pronouns he/him

1 0

PieroV's Monthly Status Report, August 2022
by Pier Angelo Vendrame 01 Sep '22

01 Sep '22

Hi everyone! Here is my status report for August 2022. This month I worked mainly on the Tor Browser switch from 91.x ESR to 102.x ESR. At the beginning of the month, I continued reviewing the rebase I started at the end of July [0]. Then, I focused on updating our toolchains, which took me two weeks. I first found some issues with rustc (the most problematic one was that it got stuck while compiling Firefox on Debian Jessie [1]; I resolved it by enabling jemalloc). I took the occasion to make rustc reuse the LLVM tools we have already been building instead of building them again to shorten the process [2]. Another massive change is that we use only Clang to build Windows binaries (almost: rustc needs to link libgcc, and NSIS has an assembly module that only GCC and MASM can compile) [3]. The next step was some maintenance on the existing code. I linted all our patches, thanks to which we found some minor fixes [4]. It was propedeutic to move tor-launcher and torbutton to the main Tor Browser patchset [5]. I have also started working on it but then stopped to fix the issues Richard found when auditing Firefox closed tickets. In particular, this week, I have been analyzing new problems related to fingerprinting through fonts [6]. We are finally close to building the first Tor Browser alpha based on 102.2 ESR (12.0a2) for desktop and Android, too! Please, consider testing it and sending us feedback! Thanks, Pier [0] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40730 [1] https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4… [2] https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4… [3] https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/2… and linked issues [4] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40012 [5] https://gitlab.torproject.org/tpo/applications/tor-browser/-/merge_requests… [6] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41116

1 0