tor-project November 2023

tor-project@lists.torproject.org

15 participants
19 discussions

Retirement of Gitolite and GitWeb started, please migrate by end of year
by Antoine Beaupré 26 Mar '24

26 Mar '24

Hi, Gitolite (`git.torproject.org` and `git-rw.torproject.org`) and GitWeb (<https://gitweb.torproject.org>) will be fully retired within 9 to 12 months (by the end of Q2 2024). TPA will implement redirections on the web interfaces to maintain limited backwards compatibility for the old URLs. Start migrating your repositories now by following the [migration procedure][], and please complete the migration by the end of year 2023. See the full discussion in [TPA-RFC-36][]. [migration procedure]: https://gitlab.torproject.org/tpo/tpa/team/-/wikis/howto/git#how-to-migrate… [TPA-RFC-36]: https://gitlab.torproject.org/tpo/tpa/team/-/wikis/policy/tpa-rfc-36-gitoli… A. -- Antoine Beaupré torproject.org system administration

1 2

The Tor Project Community Policies new website!
by gus 15 Dec '23

15 Dec '23

Hello Tor Community, I'm happy to announce that the Tor Project Community Policies have a new website! You can visit our Policies website here: <https://community.torproject.org/policies>. The website hosts the Tor Project Community governance policies, including our Code of Conduct, Social Contract, Relay Operators docs, and other important documents. The website was generated using Onion MkDocs[1] and was part of our project at Tor Hackweek[2]. We've also updated all links directing to the old repository (gitweb.tpo) to the new website. If you find any issue or have suggestions for improvements, please feel invited to open a ticket in the Community/Policies repository: <https://gitlab.torproject.org/tpo/community/policies>. A special thanks to Rhatto and Lavamind for their support and assistance with the deployment. I'm very happy to have a more accessible and user friendly page for the Tor Community. Best regards, Gus [1] Onion MkDocs: https://gitlab.torproject.org/tpo/web/onion-mkdocs [2] Tor Hackweek: https://gitlab.torproject.org/tpo/community/hackweek/-/issues/13 -- The Tor Project Community Team Lead

3 3

Anti-censorship team meeting notes, 2023-11-30
by meskio 30 Nov '23

30 Nov '23

Hey everyone! Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2023/tor-meeting.2023-11-30-15.57.html And our meeting pad: Anti-censorship -------------------------------- Next meeting: Thursday, Dec 7 16:00 UTC Facilitator: onyinyang Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) This week's Facilitator: meskio == Goal of this meeting == Weekly check-in about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at the Tor Project and Tor community. == Links to Useful documents == * Our anti-censorship roadmap: * Roadmap:https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards * The anti-censorship team's wiki page: * https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home * Past meeting notes can be found at: * https://lists.torproject.org/pipermail/tor-project/ * Tickets that need reviews: from sponsors, we are working on: * All needs review tickets: * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… * Sponsor 96 <-- meskio, shell, onyinyang, cohosh * https://gitlab.torproject.org/groups/tpo/-/milestones/24 * Sponsor 150 <-- meskio working on it * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/issues/?label_na… == Announcements == == Discussion == * as expected snowflake ampcache is not working in china * the domain used for domain front is blocked, maybe other domains will fix the problem * shelikhoo is running experiments on kcp performance with packet loss * https://jsfiddle.net/Sheilkhoo/s9kx4h8m/1/ * x=packetloss, y=delay, z=speed * tcp seems to be faster then udp here * wondering if there is some tunning possible to improve that * previous discussions on kcp tunning: * https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… * https://lists.torproject.org/pipermail/anti-censorship-team/2021-July/00017… will wait for cohosh to be around: * manifest v3 deprecation in browsers and snowflake webextension * https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… * https://developer.chrome.com/blog/resuming-the-transition-to-mv3/ * google chrome will stop supporting mv2 June 2024 * will the snowflake webextension stop working? do we want to do something? or just recommend firefox? == Actions == == Interesting links == * https://www.cs-pk.com/papers/3/ "NetShuffle: Circumventing Censorship with Shuffle Proxies at the Edge" S&P 2024 * https://petsymposium.org/popets/2024/popets-2024-0027.php "Communication Breakdown: Modularizing Application Tunneling for Signaling Around Censorship" PETS 2024 * https://splintercon.net/ "the first conference dedicated to identifying and beginning to challenge connectivity restrictions of the splinternet." * https://bitwarden.com/open-source-security-summit/ meskio giving a talk: "Bypassing Online Censorship: Open-Source Tools as a Critical Lifeline" == Reading group == * We will discuss "NetShuffle: Circumventing Censorship with Shuffle Proxies at the Edge" on December 14 * https://www.cs-pk.com/papers/3/ * Questions to ask and goals to have: * What aspects of the paper are questionable? * Are there immediate actions we can take based on this work? * Are there long-term actions we can take based on this work? * Is there future work that we want to call out in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. cecylia (cohosh): 2023-11-09 Last week: - conjure bridge maintenance - caught a bug in safelog library - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - caught problem with domain front in conjure - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/conj… This week: - lox tor browser UX integration - lox distributor testing - look into alternative domain fronting providers Needs help with: dcf: 2023-11-30 Last week: - did some review of SQS rendezvous merge request https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - answered a question about AMP cache rendezvous in China https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Next week: - open issue to have snowflake-client log whenever KCPInErrors is nonzero https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - parent: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - open issue to disable /debug endpoint on snowflake broker Before EOY 2023: - move snowflake-02 to new VM Help with: meskio: 2023-11-30 Last week: - deploy rdsys with secret config params separated (rdsys#92) - setup rdsys staging server (rdsys#170) - make rdsys release Next week: - prepare settings anti-listing logic to be reused by HTTP distributor (rdsys#181) - setup rdsys staging server (rdsys#170) Shelikhoo: 2023-11-30 Last Week: - Work on snowflake performance improvement (WIP): https://gitlab.torproject.org/shelikhoo/snowflake/-/tree/dev-speedwithudp?r… A first glance of what a performance comparsion would look like: https://jsfiddle.net/Sheilkhoo/s9kx4h8m/1/ is it not great and udp like transport looks like slower than tcp. Maybe KCP settings need to be updated? - Updated probeobserver to support both snowflake bridges and updated communication system between China's vantage point and log collector https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement/… - Merge request reviews Next Week/TODO: - Write Tor Spec for Armored URL (continue) - Work on snowflake performance improvement (WIP): https://gitlab.torproject.org/shelikhoo/snowflake/-/tree/dev-speedwithudp?r… - Merge request reviews onyinyang: 2023-11-30 Last week(s): - Finished up remaining docs tasks for crates.io publishing -published all relevant Lox crates to crates.io - SOTO anti-censorship team presentation preparation - looked into Telegram bot - attempted hyper upgrade, many breaking changes so this will take some work This week: - continue Telegram bot dev - attempt hyper upgrade again - Splintercon (long term things were discussed at the meeting!): https://pad.riseup.net/p/tor-ac-community-azaleas-room-keep - brainstorming grouping strategies for Lox buckets (of bridges) and gathering context on how types of bridges are distributed/use in practice Question: What makes a bridge usable for a given user, and how can we encode that to best ensure we're getting the most appropriate resources to people? 1. Are there some obvious grouping strategies that we can already consider? e.g., by PT, by bandwidth (lower bandwidth bridges sacrificed to open-invitation buckets?), by locale (to be matched with a requesting user's geoip or something?) 2. Does it make sense to group 3 bridges/bucket, so trusted users have access to 3 bridges (and untrusted users have access to 1)? More? Less? -- meskio | https://meskio.net/ -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- My contact info: https://meskio.net/crypto.txt -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Nos vamos a Croatan.

1 0

Friends of Tor match gift launched
by Al Smith 28 Nov '23

28 Nov '23

Hello Tor world, *I'm very happy to share that starting today through December 31, your donation to the Tor Project will be matched 1:1.* That means that every donation, up to $75,000, will be doubled. Please spread the word! :) Blog announcement: https://blog.torproject.org/friends-of-tor-match-2023/ Twitter post: https://x.com/torproject/status/1729238115263652330 Mastodon post: https://mastodon.social/@torproject/111484468818648276 Thank you, Al -- Al Smith (they/them) Fundraising Director The Tor Project My working hours may not be your working hours. If I message you outside of your working hours, know that I do not expect an immediate response and that I support your right to disconnect.

1 1

Anti-censorship team meeting notes, 2023-11-23
by Shelikhoo 23 Nov '23

23 Nov '23

Hey everyone! Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2023/tor-meeting.2023-11-23-15.58.html And our meeting pad: Anti-censorship work meeting pad -------------------------------- Anti-censorship -------------------------------- Next meeting: Thursday, Nov 30 16:00 UTC Facilitator: cohosh Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) This week's Facilitator: shelikhoo == Goal of this meeting == Weekly check-in about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at the Tor Project and Tor community. == Links to Useful documents == * Our anti-censorship roadmap: * Roadmap:https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards * The anti-censorship team's wiki page: * https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home * Past meeting notes can be found at: * https://lists.torproject.org/pipermail/tor-project/ * Tickets that need reviews: from sponsors, we are working on: * All needs review tickets: * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… * Sponsor 96 <-- meskio, shell, onyinyang, cohosh * https://gitlab.torproject.org/groups/tpo/-/milestones/24 * Sponsor 150 <-- meskio working on it * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/issues/?label_na… == Announcements == == Discussion == * manifest v3 deprecation in browsers and snowflake webextension * https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… * https://developer.chrome.com/blog/resuming-the-transition-to-mv3/ * google chrome will stop supporting mv2 June 2024 * will the snowflake webextension stop working? do we want to do something? or just reommend firefox? * BridgeStatus format change * Introduced in https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement/… * Example: https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement/… == Actions == == Interesting links == * https://www.rfc-editor.org/info/rfc9505 A Survey of Worldwide Censorship Techniques == Reading group == * We will discuss "" on * * Questions to ask and goals to have: * What aspects of the paper are questionable? * Are there immediate actions we can take based on this work? * Are there long-term actions we can take based on this work? * Is there future work that we want to call out in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. cecylia (cohosh): 2023-11-09 Last week: - conjure bridge maintenance - caught a bug in safelog library - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - caught problem with domain front in conjure - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/conj… This week: - lox tor browser UX integration - lox distributor testing - look into alternative domain fronting providers Needs help with: dcf: 2023-11-09 Last week: - revised encapsulation.ReadData redesign to return an error in the case of a short buffer https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - security upgrade to tor 0.4.8.8 on snowflake bridges https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - sent emails to make contacts for uTLS-like fingerprint obfuscation in pion/dtls Next week: - open issue to have snowflake-client log whenever KCPInErrors is nonzero https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - parent: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - open issue to disable /debug endpoint on snowflake broker Before EOY 2023: - move snowflake-02 to new VM Help with: meskio: 2023-11-23 Last week: - run som experiments on more frequent bridgestrap tests (bridgestrap#39) - investigate failure on rdsys integration tests (rdsys#180) - prepare a deployment of rdsys with secret config params separated (rdsys#92) - work on the rdsys staging server (rdsys#170) - organize work for Sponsor 150 Next week: - deploy rdsys with secret config params separated (rdsys#92) - setup rdsys staging server (rdsys#170) Shelikhoo: 2023-11-23 Last Week: - Work on snowflake performance improvement (WIP): https://gitlab.torproject.org/shelikhoo/snowflake/-/tree/dev-speedwithudp?r… - Updated probeobserver to support both snowflake bridges and updated communication system between China's vantage point and log collector https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement/… - Merge request reviews Next Week/TODO: - Write Tor Spec for Armored URL (continue) - Work on snowflake performance improvement (WIP): https://gitlab.torproject.org/shelikhoo/snowflake/-/tree/dev-speedwithudp?r… - Merge request reviews onyinyang: 2023-11-23 Last week(s): - Vacation! - Hackweek: Docs for Lox https://gitlab.torproject.org/tpo/community/hackweek/-/issues/20 - Preparation for publishing Lox crates to crates.io This week: - Finishing up on remaining docs tasks for crates.io publishing - SOTO anti-censorship team presentation preparation - (long term things were discussed at the meeting!): https://pad.riseup.net/p/tor-ac-community-azaleas-room-keep - brainstorming grouping strategies for Lox buckets (of bridges) and gathering context on how types of bridges are distributed/use in practice Question: What makes a bridge usable for a given user, and how can we encode that to best ensure we're getting the most appropriate resources to people? 1. Are there some obvious grouping strategies that we can already consider? e.g., by PT, by bandwidth (lower bandwidth bridges sacrificed to open-invitation buckets?), by locale (to be matched with a requesting user's geoip or something?) 2. Does it make sense to group 3 bridges/bucket, so trusted users have access to 3 bridges (and untrusted users have access to 1)? More? Less?

1 0

Anti-censorship team meeting notes, 2023-11-23
by Shelikhoo 23 Nov '23

23 Nov '23

1 0

Are you going to 37c3 in Hamburg?
by Roger Dingledine 17 Nov '23

17 Nov '23

Hi folks, A set of Tor people will be at CCC at the end of December this year, and we are organizing what Tor activities will happen. With luck, activities will include a maintrack talk from me on Tor and recent censorship, and a Tor relay operator meetup organized by our local CCC friends. Are you part of the broader Tor community and you plan to be there? If yes, please either note this on the gitlab ticket if it's convenient ( https://gitlab.torproject.org/tpo/community/outreach/-/issues/40051 ) or else mail me off-list if you like. (No need to turn this mailing list into a big 'me too' thread.) And if you are planning some other Tor-related activity (you want some Tor people at your assembly? you plan to talk about Tor in a talk submission? something else?) please let us know that too if you like. I'll plan to keep people updated as the plans emerge. Woo, --Roger

1 0

Anti-censorship team meeting notes, 2023-11-16
by meskio 17 Nov '23

17 Nov '23

Hey everyone! Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2023/tor-meeting.2023-11-09-16.00.html And our meeting pad: Anti-censorship -------------------------------- Next meeting: Thursday, Nov 16 16:00 UTC Facilitator: meskio Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) This week's Facilitator: onyinyang == Goal of this meeting == Weekly check-in about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at the Tor Project and Tor community. == Links to Useful documents == * Our anti-censorship roadmap: * Roadmap:https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards * The anti-censorship team's wiki page: * https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home * Past meeting notes can be found at: * https://lists.torproject.org/pipermail/tor-project/ * Tickets that need reviews: from sponsors, we are working on: * All needs review tickets: * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… * Sponsor 96 <-- meskio, shell, onyinyang, cohosh * https://gitlab.torproject.org/groups/tpo/-/milestones/24 * Sponsor 150 <-- meskio working on it * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/issues/?label_na… == Announcements == * changed to a read-only pad: * https://pad.riseup.net/p/r.9574e996bb9c0266213d38b91b56c469 == Discussion == * Dual stack (IPv4/6) bridges support * https://gitlab.torproject.org/tpo/core/tor/-/issues/40885 * the changes in cached-extrainfo work fine in rdsys * we'll need to wait for the patch to be ready in c-tor == Actions == == Interesting links == * == Reading group == * We will discuss "" on * * Questions to ask and goals to have: * What aspects of the paper are questionable? * Are there immediate actions we can take based on this work? * Are there long-term actions we can take based on this work? * Is there future work that we want to call out in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. cecylia (cohosh): 2023-11-09 Last week: - conjure bridge maintenance - caught a bug in safelog library - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - caught problem with domain front in conjure - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/conj… This week: - lox tor browser UX integration - lox distributor testing - look into alternative domain fronting providers Needs help with: dcf: 2023-11-09 Last week: - revised encapsulation.ReadData redesign to return an error in the case of a short buffer https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - security upgrade to tor 0.4.8.8 on snowflake bridges https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - sent emails to make contacts for uTLS-like fingerprint obfuscation in pion/dtls Next week: - open issue to have snowflake-client log whenever KCPInErrors is nonzero https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - parent: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - open issue to disable /debug endpoint on snowflake broker Before EOY 2023: - move snowflake-02 to new VM Help with: meskio: 2023-11-16 Last week: - experiment with testing bridges more frequently by bridgestrap (bridgestrap#39) - investigate why OSX TB installers didn't work in telegram (onionsproutsbot#57) - investigate why rdsys tests are failing for multiconfig (rdsys!196) - restart bridgedb to fix the email distributor that was not responding emails - test the whatsapp user in rdsys-frontend-01 (tpa/team#41370) - test the patch for dual stack (IPv4/6) bridges and if it works with current rdsys (tor#40885) - finish the pad archival for the hackweek (hackweek#16) Next week: - keep working on a frequent bridgestrap Shelikhoo: 2023-11-16 Last Week: - Work on snowflake performance improvement (WIP): https://gitlab.torproject.org/shelikhoo/snowflake/-/tree/dev-speedwithudp?r… - Merge request reviews Next Week/TODO: - Write Tor Spec for Armored URL (continue) - Work on snowflake performance improvement (WIP): https://gitlab.torproject.org/shelikhoo/snowflake/-/tree/dev-speedwithudp?r… - Merge request reviews onyinyang: 2023-11-09 Last week(s): - Continued work on Lox telegram bot - Hackweek: Docs for Lox https://gitlab.torproject.org/tpo/community/hackweek/-/issues/20 This week: - Hackweek: Docs for Lox https://gitlab.torproject.org/tpo/community/hackweek/-/issues/20 - Publish Lox crates to crates.io (long term things were discussed at the meeting!): https://pad.riseup.net/p/tor-ac-community-azaleas-room-keep - brainstorming grouping strategies for Lox buckets (of bridges) and gathering context on how types of bridges are distributed/use in practice Question: What makes a bridge usable for a given user, and how can we encode that to best ensure we're getting the most appropriate resources to people? 1. Are there some obvious grouping strategies that we can already consider? e.g., by PT, by bandwidth (lower bandwidth bridges sacrificed to open-invitation buckets?), by locale (to be matched with a requesting user's geoip or something?) 2. Does it make sense to group 3 bridges/bucket, so trusted users have access to 3 bridges (and untrusted users have access to 1)? More? Less? -- meskio | https://meskio.net/ -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- My contact info: https://meskio.net/crypto.txt -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Nos vamos a Croatan.

2 1

Tomorrow's All Hands Meeting - 16:00 UTC - Wednesday, November 15th
by Tyler Corn 14 Nov '23

14 Nov '23

Hi everyone! We have our Hackweek retrospective at tomorrow's All Hands meeting (Wednesday, November 15th). Each project's presenter(s) will have 5 minutes or so to talk about the work done and any next steps. Action items: (1) Re: projects that you worked on, presenters, please be prepared to discuss the work done and next steps, add comments about status of projects in Gitlab, and also close the issue; (2) Re: projects that weren't picked up/worked on last week, please go ahead and close those issues in Gitlab; and lastly (3) See the link for the Hackweek retrospective pad below. Please take a few moments to collect your thoughts about: (a) what went well with Hackweek?; (b) what didn't go so well and the challenges?; and (c) what could we try to do differently in the future? Got them gathered? Good! Now add them to the pad below :) https://pad.riseup.net/p/AWQ8DisjSVnu9leO90Xo-HackweekRetrospective-keep If we have time after presentations, we'll go through the retrospective pad comments. Thanks everyone! See you at the All Hands! Best, Tyler

1 0

Anti-censorship team meeting notes, 2023-11-09
by onyinyang 09 Nov '23

09 Nov '23

Hey everyone! Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2023/tor-meeting.2023-11-09-16.00.html And our meeting pad: Anti-censorship work meeting pad -------------------------------- Anti-censorship -------------------------------- Next meeting: Thursday, Nov 16 16:00 UTC Facilitator: meskio Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) This week's Facilitator: onyinyang == Goal of this meeting == Weekly check-in about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at the Tor Project and Tor community. == Links to Useful documents == * Our anti-censorship roadmap: * Roadmap:https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards * The anti-censorship team's wiki page: *https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home * Past meeting notes can be found at: * https://lists.torproject.org/pipermail/tor-project/ * Tickets that need reviews: from sponsors, we are working on: * All needs review tickets: *https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?scope=all&utf8=%E2%9C%93&state=opened&assignee_id=None * Sponsor 96 <-- meskio, shell, onyinyang, cohosh *https://gitlab.torproject.org/groups/tpo/-/milestones/24 * Sponsor 150 <-- meskio working on it *https://gitlab.torproject.org/groups/tpo/anti-censorship/-/issues/?label_name%5B%5D=Sponsor%20150 == Announcements == == Discussion == * azure will close domain fronting January 8 * https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/33#note_296… * Maybe, move to use a private pad? * we can use the 'read-only' link from the riseup pads as a public link and share the editing link with the people that participates on the meetings. * meskio will set up for next week. == Actions == == Interesting links == * https://forum.torproject.org/t/snowflake-daily-operations-october-2023-upda… * FOCI & PETS 2023 videos * Running a high-performance pluggable transports Tor bridge https://www.youtube.com/watch?v=UkUQsAJB-bg&list=PLWSQygNuIsPc8bOJ2szOblMK4… * Lox: Protecting the Social Graph in Bridge Distribution https://www.youtube.com/watch?v=hT2PkFs-61A&list=PLWSQygNuIsPeSo_mDoX9MPrVD… * others https://github.com/net4people/bbs/issues/307 == Reading group == * We will discuss "On Precisely Detecting Censorship Circumvention in Real-World Networks" on November 9 * https://www.robgjansen.com/publications/precisedetect-ndss2024.html * Questions to ask and goals to have: * What aspects of the paper are questionable? * Are there immediate actions we can take based on this work? * Are there long-term actions we can take based on this work? * Is there future work that we want to call out in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. cecylia (cohosh): 2023-11-09 Last week: - conjure bridge maintenance - caught a bug in safelog library - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - caught problem with domain front in conjure - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/conj… This week: - lox tor browser UX integration - lox distributor testing - look into alternative domain fronting providers Needs help with: dcf: 2023-11-09 Last week: - revised encapsulation.ReadData redesign to return an error in the case of a short buffer https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - security upgrade to tor 0.4.8.8 on snowflake bridges https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - sent emails to make contacts for uTLS-like fingerprint obfuscation in pion/dtls Next week: - open issue to have snowflake-client log whenever KCPInErrors is nonzero https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - parent: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - open issue to disable /debug endpoint on snowflake broker Before EOY 2023: - move snowflake-02 to new VM Help with: meskio: 2023-11-09 Last week: - update the teams wikis - explore pad backup options (hackweek#16) - rdsys accept multiple config files, to support separating secrets (rdsys#92) - fix onionsproutsbot after server upgrade (onionsproutsbot#55) - expore why polyanthum disk is filling up (tpa/team#41379) Next week: - experiment with testing bridges more frequently by bridgestrap (bridgestrap#39) Shelikhoo: 2023-11-09 Last Week: - Work on snowflake performance improvement (WIP): https://gitlab.torproject.org/shelikhoo/snowflake/-/tree/dev-speedwithudp?r… - Hackweek: wiki replacement considerations https://gitlab.torproject.org/tpo/community/hackweek/-/issues/26#note_29635… - Hackweek: Collaborative editing https://gitlab.torproject.org/tpo/community/hackweek/-/issues/16#note_29633… - Merge request reviews Next Week/TODO: - Write Tor Spec for Armored URL (continue) - Work on snowflake performance improvement (WIP): https://gitlab.torproject.org/shelikhoo/snowflake/-/tree/dev-speedwithudp?r… - Merge request reviews onyinyang: 2023-11-09 Last week(s): - Continued work on Lox telegram bot - Hackweek: Docs for Lox https://gitlab.torproject.org/tpo/community/hackweek/-/issues/20 This week: - Hackweek: Docs for Lox https://gitlab.torproject.org/tpo/community/hackweek/-/issues/20 - Publish Lox crates to crates.io (long term things were discussed at the meeting!):https://pad.riseup.net/p/tor-ac-community-azaleas-room-keep - brainstorming grouping strategies for Lox buckets (of bridges) and gathering context on how types of bridges are distributed/use in practice Question: What makes a bridge usable for a given user, and how can we encode that to best ensure we're getting the most appropriate resources to people? 1. Are there some obvious grouping strategies that we can already consider? e.g., by PT, by bandwidth (lower bandwidth bridges sacrificed to open-invitation buckets?), by locale (to be matched with a requesting user's geoip or something?) 2. Does it make sense to group 3 bridges/bucket, so trusted users have access to 3 bridges (and untrusted users have access to 1)? More? Less? -- --- onyinyang GPG Fingerprint 3CC3 F8CC E9D0 A92F A108 38EF 156A 6435 430C 2036

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

tor-project November 2023