tor-project December 2024

tor-project@lists.torproject.org

14 participants
15 discussions

intrigeri's report, November 2024
by intrigeri 03 Dec '24

03 Dec '24

Hi, I took 1.5 week off for personal reasons mid-November. The work time & energy I had left was barely enough to do most of the usual day-to-day work that's not worth reporting about, hence this slim report. User-visible ============ I prepared a short talk for the State of the Onion, then recorded it in highly challenging circumstances. I'm happy with the script, I think the slides are good ~enough, and the actual delivery has lots of margin for improvement. User-invisible ============== I did the usual amount of KTLO work; nothing worth highlighting this month. Team lead ========= I've been working, together with a number of other Tor folks from my team and other teams, on a large grant proposal. This was the opportunity for me to discover the workflows and tooling used by Tor in this area, and gain some familiarity with it. Accounting ========== We've been making some more progress on transitioning away from the former Tails fiscal sponsorship arrangements into Tails' new nest, the Tor project. Cheers, -- intrigeri

1 0

Rhatto's Monthly Status Report, November 2024
by rhatto 02 Dec '24

02 Dec '24

Hi all :) This is my monthly status report for November 2024 with the main relevant activities I have done, was involved or are related to my work during the period. ## SOTO 2024 * Did a presentation at Tor's State of the Onion 2024. Video available at https://www.youtube.com/watch?v=HjPdReNmf_g&t=596s ## Internet Archive * Support given for the Archive's new onionsite! It was released on SOTO: https://www.youtube.com/watch?v=EODNtLqD7f8&t=3196s ## Onionspray * Released Onionspray 1.6.2 (application to serve regular websites as onionsites): https://forum.torproject.org/t/onionspray-release-1-6-2/16014 ## Onionprobe * Released Onionprobe 1.2.1 (Onion Services monitoring application): https://forum.torproject.org/t/onionprobe-release-1-2-1/16015 * The Onionprobe role is not available at the Ansible Galaxy: https://galaxy.ansible.com/ui/standalone/roles/torproject/onionprobe/ ## Support Did the usual and ongoing sponsored work with deployment, maintenance and monitoring of Onion Services. -- Silvio Rhatto pronouns he/him

1 0

minutes from the sysadmin meeting
by Antoine Beaupré 02 Dec '24

02 Dec '24

# Roll call: who's there and emergencies anarcat, groente, lavamind, lelutin, zen # Dashboard review We did our normal weekly checkin. # Last minute December coordination We're going to prioritize the converging the email stuff, ganeti and puppet upgrades, and security policy, although that might get delayed to 2025. # Holidays planning Confirmed shifts discussed in the 1:1s. # 2025 roadmap validation No major change, pauli upgraded before 2025, and anarcat will unsubscribe from Tails nagios notifications. # Metrics of the month * hosts in Puppet: 90, LDAP: 90, Prometheus exporters: 505 * number of Apache servers monitored: 33, hits per second: 669 * number of self-hosted nameservers: 6, mail servers: 11 * pending upgrades: 20, reboots: 0 * average load: 1.02, memory available: 3.73 TiB/4.99 TiB, running processes: 380 * disk free/total: 65.44 TiB/139.91 TiB * bytes sent: 395.69 MB/s, received: 248.31 MB/s * planned bookworm upgrades completion date: 2024-10-23 * [GitLab tickets][]: 257 tickets including... * open: 0 * icebox: 157 * future: 39 * needs information: 10 * backlog: 21 * next: 12 * doing: 11 * needs review: 8 * (closed: 3804) [Gitlab tickets]: https://gitlab.torproject.org/tpo/tpa/team/-/boards Obviously, the completion date is incorrect here, as it's in the past. As mentioned above, we're hoping to complete the bookworm upgrade before 2025. Upgrade prediction graph lives at: https://gitlab.torproject.org/tpo/tpa/team/-/wikis/howto/upgrades/bookworm/ Note that the all-time graph was updated to be more readable, see the gorgeous result in: https://gitlab.torproject.org/tpo/tpa/team/-/wikis/howto/upgrades/#all-time… -- Antoine Beaupré torproject.org system administration

1 0

Felicia's Montly Status Report, November 2024
by Priscila 02 Dec '24

02 Dec '24

Hi everyone, My status report for November 2024 is entirely focused on this Moat issue: https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42605 Although I knew this task would be quite complex before starting, it proved to be more complex than I thought, as you can see from the numerous UI versions I made before realizing I’d need to step back to study things better: https://www.figma.com/design/4XiUaZPch3ejewlZO56lkR/Tor-Browser-14.5?node-i… Since Moat can be difficult to understand for non-tech people, comprehending how it works was the first step. For this, I used a CSD matrix based on information gathered in a meeting with the devs. Later on, it was necessary to understand the user flows where Moat calls are made so we know when we need to ask for the user’s consent. So with all that, I needed to answer some questions (e.g. what are we trying to tell users and why?) so I can summarize everything in a way to educate users on Moat calls and allow them to make an informed decision whether they consent to it or not - I’m actually in this point of the task. Besides that, I also worked on very small tasks of support to devs. Best, Priscila (aka Felicia) - UX Team

1 0

PieroV's Monthly Status Report, November 2024
by Pier Angelo Vendrame 02 Dec '24

02 Dec '24

Hi everyone! Here is my status report for November 2024. November was a short month for us, as we took a team break to rest a bit after the big 14.0 release and because of the holidays. For most of the month, I investigated how to remove Lox's WASM blob and instead integrate the Lox Rust crate in the browser build system [0]. Also, I checked the various options for exposing this integration crate to JavaScript, as the front end will remain in that language. This work will hopefully help us also when switching to Arti in the browser. We've also discussed the future changes for the Tor daemon integration in the browser, and I had to review a major refactor made by Henry [1], which took me some time. Apart from that, I rebased our 128-based channels (14.0 and 14.5), fixed the release preparation script to take the needs of the legacy channel into account [2], and made other similar fixes [3]. Also, I signed a release (13.5.10) for the first time. We decided to allow more people to sign to be more responsive under some circumstances and to spread the load on the team. Then, towards the end of the month, I resumed the work on anti-fingerprinting. I evaluated Thorin's proposal to abandon `font.system.whitelist` in favor of font visibility, which would bring us closer to Firefox [4]. While doing so, I found a problem with the changes I made to the FontConfig configuration file the previous month [5]. Finally, I proposed a fix for a conflict between the OpenSSL 3.0.x we ship with the tor daemon, and OpenSSL 3.2.x, required by a transitive dependency, which prevented the browser from starting in some systems [6]. If you have the same problem, deleting our libcrypto (form `TorBrowser/Tor`) should work, but we'll provide a proper fix in our next update. Best, Pier [0] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43096 [1] https://gitlab.torproject.org/tpo/applications/tor-browser/-/merge_requests… [2] https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4… [3] https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/merge_re… [4] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43322 [5] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43330 [6] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43326

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

tor-project December 2024