April 2025 - tor-project - lists.torproject.org

Rhatto's Public Monthly Status Report, March 2025
by rhatto 03 Apr '25

03 Apr '25

Hi all :) This is my monthly status report for March 2025 with the main relevant activities I have done, was involved or are related to my work during the period. March was a very busy month, with many releases. # Introducing Onimages: Onion Service container images Now there are fresh container images readily available and tuned for Onion Services usage. This was worked on during the last days of March and released today: * Repository: https://gitlab.torproject.org/tpo/onion-services/onimages/ * Documentation https://onionservices.torproject.org/apps/base/containers/ * Forum post: https://forum.torproject.org/t/announcing-onimages-onion-service-container-… # Onionprobe: monitoring tool for Onion Services Onionprobe got a new release, and then some additional improvements: * 1.3.0 release: https://forum.torproject.org/t/onionprobe-security-release-1-3-0/17864 * Improved Prometheus alerts (and wrote unit tests for that): https://gitlab.torproject.org/tpo/onion-services/onionprobe/-/issues/102 * Improved Debian package CI: https://gitlab.torproject.org/tpo/onion-services/onionprobe/-/issues/94 # Onionmine: Onion Services key and certs generator Onionmine had it's 1.0.0 release, and right after was refactored with many new features and enhancements resulting in the 1.1.0 version: * Highlights: * Tutorial page: https://onionservices.torproject.org/apps/web/onionmine/tutorial/ * Security page: https://onionservices.torproject.org/apps/web/onionmine/security/ * ChangeLog: https://onionservices.torproject.org/apps/web/onionmine/changelog/ # Other releases * The Onionspray Log Parser for onionsite metrics got it's 3.0.0 release: https://gitlab.torproject.org/tpo/onion-services/onionspray-log-parser/-/bl… * AnCIble (CI for Ansible) 0.0.2 release: https://gitlab.torproject.org/tpo/onion-services/ansible/ancible/-/blob/mai… * Onion Services Ecosystem docs 1.0.0 finally released: https://gitlab.torproject.org/tpo/onion-services/ecosystem/-/blob/main/Chan… # Other work * Found some issues with GitLab CI. One of them prevented lintian installation when running TPA base images: https://gitlab.torproject.org/tpo/tpa/base-images/-/issues/21 * Ongoing sponsored work with deployment, maintenance and monitoring of Onion Services. -- Silvio Rhatto pronouns he/him

1 0

sajolida's report for March 2025
by sajolida 01 Apr '25

01 Apr '25

Hi, Tails ===== Project 165 ----------- - Worked on navigation improvements for the Tails website (#20766) I have a draft branch for the following issues: (!2046) * Add a secondary navigation for the Documentation section of our website, with accordions that work without JavaScript. (#20393) * Add a hamburger menu for this navigation on mobile. (#20065) * Use a bigger font everywhere on our website. (#17665) See screenshots in attachment. - Evaluate GNOME Secrets as a replacement for KeePassXC. (#19136) The UX is decent and it would solve several integration and maintenance issues. - Tested anonym's branch that runs Tor Browser as flatpak and would solve several old usability issues. (!1933) - Tested 17 Wi-Fi adapters to debug Wi-Fi issues. (#20828) Misc ---- - Made a case to fund a backup feature based on prior user research. https://gitlab.torproject.org/tpo/operations/proposals/-/issues/98 - Fixed the changes that point the Donate page to Tor's. (!1968) Tor Browser =========== Project 163 ----------- - Ideated on how to display Conflux (aka. Multi Path Circuits) in Tor Browser together with felicia. (applications/tor-browser#41716) -- sajolida The Tor Project — UX Designer

1 0

ebanam's monthly status report and user support report for March 2025
by ebanam 01 Apr '25

01 Apr '25

Hello everyone, Much of my work last month focussed on helping users in regions where Tor is censored, which includes helping users with instructions to download Tor Browser binaries from GetTor and/or official mirrors, verifying Tor Browser's GPG signature, help with using censorship circumvention methods that works best for them and overall troubleshooting. I wrote (mostly small modifications)[0][1] and reviewed some changes to the user-facing documentation on the Support Portal and Tor Browser User Manual. Worked on a couple of post-campaign tasks as we wrapped up the WebTunnel Bridges Campaign[2]. Following is a more detailed report about the tickets our user support team worked on last month. # Frontdesk (email user support channel) * 596(↑) RT tickets created * 646(↑) RT tickets resolved Tickets by topics and numbers: 1. 411(↑) RT tickets: instructions to circumvent censorship for Chinese speaking users. 2. 102(↓) RT tickets: circumventing censorship in Russian speaking countries. 3. 37(↑) RT tickets: help with troubleshooting existing Tor Browser install on Desktop (Windows, macOS and Linux). 4. 22(↑) RT tickets: WebTunnel bridges campaign wrap-up.[2] 5. 10(↑) RT tickets: questions about how Tor and Tor Browser works - is my IP visible when using Tor? what application level protections I get when using Tor Browser? Why Tor Browser doesn't store my cookies, passwords and browsing history? etc. 6. 6(↑) RT tickets: Unable to login on X.com (formerly Twitter) when using Tor Browser.[3] 7. 5(↑) RT tickets: installing Tor Browser on Linux. 8. 3(↓) RT tickets: reports of fake apps on iOS AppStore masquerading as official Tor Browser. 9. 3(↑) RT ticket: reports of websites blocking Tor connections. 10. 3(↑) RT tickets: Bookmarks are failing to load on Tor Browser Alpha.[4] 11. 2(↑) RT tickets: circumventing censorship with Tor in Farsi. 12. 2(↑) RT tickets: questions about what "onionize" means on about:tor in Tor Browser[5] 13. 1(↑) RT ticket: installing Tor Browser on ChromeOS (Chromebooks).[6] 14. 1(-) RT ticket: questions about onion services and how to access them. 15. 1(↑) RT ticket: Websites display in other languages when using Tor Browser.[7] 16. 1(↑) RT ticket: Embedded snowflake client URL redirect is giving a 404[8] (Issue has been resolved.) 17. 1(↑) RT ticket: Email bridge distributor is not responding[9]. (Issue has been resolved.) 18. 1(-) RT ticket: instructions to download Tor Browser 13.5 legacy for legacy operating systems. 19. 1(-) RT ticket: static Captcha when requesting bridges in Tor Browser.[10] 20. 1(↓) RT ticket: help with installing Tor Browser on Windows. 21. 1(-) ticket: question about setting up a Tor relay. 22. 1(↑) ticket: Modify about:rights (on Tor Browser) with proper descriptions that apply to Tor Browser.[11] # Telegram, WhatsApp and Signal user support channels * 751(↑) tickets resolved Breakdown: * 734(↑) tickets on Telegram * 15(↑) tickets on WhatsApp * 2(↓) tickets on Signal Tickets by topics and numbers: 1. 511(↑) tickets: circumventing censorship in Russian speaking countries. 2. 56(↑) tickets: instructions to circumvent censorship for Chinese speaking users. 3. 17(↑) tickets: circumventing censorship with Tor in Farsi. 4. 17(↑) tickets: helping users on iOS, using Onion Browser or Orbot, to use censorship circumvention methods. 5. 12(↓) tickets: help with troubleshooting Tor Browser Desktop on Windows, macOS and Linux. 6. 10(↑) tickets: help with troubleshooting Tor Browser Android. 7. 7(↑) tickets: help with instructions to use bridges with Tails. 8. 6(↑) tickets: reports of our Telegram Tor bridges distributor (@GetBridgesBot) not responding. (Issue has been resolved.) 9. 4(↑) tickets: questions about onion services and how to access them. 10. 4(↑) tickets: instructions on how to get Tor Browser binaries from GetTor. 11. 4(↑) tickets: users seeing a "proxy refused" error when visiting websites on Tor Browser for Android using Samsung devices.[12] 12. 2(↑) tickets: help with using Snowflake with Tor to circumvent censorship. 13. 2(↑) tickets: instructions to download Tor Browser 13.5 legacy for legacy operating systems. 14. 2(↑) tickets: Unable to login on X.com (formerly Twitter) when using Tor Browser.[3] 15. 1(↑) ticket: report of a fake apps on iOS AppStore masquerading as official Tor Browser. 16. 1(↑) ticket: Bookmarks are failing to load on Tor Browser for Android Alpha.[4] # Highlights from the Tor Forum 1. X.com (formerly Twitter) issues with Tor Browser.[3] 2. Older Tor Browsers are breaking in functionality and pose a security risk, please update to the latest versions of Tor Browser.[13] 3. The Impact of Privacy Addons on Tor Browser Fingerprinting.[14] Note: (↑), (↓) and (-) are indicating if the number of tickets we received for these topics have been increasing, decreasing or have been the same from the previous month respectively. best, e. [0]: https://gitlab.torproject.org/tpo/web/support/-/commits/main?author=ebanam [1]: https://gitlab.torproject.org/tpo/web/manual/-/commits/main?author=ebanam [2]: https://blog.torproject.org/fighting-censorship-with-webtunnel/ [3]: https://forum.torproject.org/t/x-com-formerly-twitter-issues-with-tor-brows… [4]: https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43581 [5]: https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43549 [6]: https://support.torproject.org/tbb/tbb-15/ [7]: https://support.torproject.org/tbb/tbb-43/ [8]: https://gitlab.torproject.org/tpo/web/snowflake/-/issues/20 [9]: https://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/issues/260 [10]: https://forum.torproject.org/t/always-the-same-captcha-when-requesting-brig… [11]: https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43471 [12]: https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42714 [13]: https://forum.torproject.org/t/older-tor-browsers-breaking-update-now/17885 [14]: https://forum.torproject.org/t/the-impact-of-privacy-addons-on-tor-browser-…

1 0

Nina’s Monthly Status Report, March 2025
by Nina 01 Apr '25

01 Apr '25

Hi! Below is my March’25 report! In March, I resolved 676 (↑109) tickets: * On Telegram (@TorProjectSupportBot) - 571 (↑110); * On RT (frontdesk@tpo) - 102 (↓4); * On WhatsApp (+447421000612) - 3 (↑3); * And on Signal (+17787431312) - 0 (0). My main focus in March was helping Russian-speaking users to bypass internet censorship, which includes: - Sharing instructions, - Gathering users' feedback, - Help in troubleshooting any issues they were facing with Tor Browser. I also worked on providing feedback for Google Play Store users’ reviews. In March, I continued participating in translating the Tor Browser user survey to Russian[1] and monitored censorship events in Russia[2], Belarus [3], Kazakhstan [4], and in Türkiye. I also took part in investigating the issue of bookmarks failing in TBA Alpha [5] and collected user feedback on the issue with bridge distribution [6]. I created a new support template for Google Play reviews regarding the bookmark issue[5] and updated existing templates in Russian. *##**Google Play Reviews for Tor Browser**(TBA)**and Tor Browser Alpha**for Android* * Tor Browser for Android had a Google Play rating of *4.406*(↑0.009) stars in March, which is higher than in February’25. * Tor Browser for Android (TBA) got 694 (↑79) reviews out of 61,452 for the lifetime. * Tor Browser for Android Alpha (TBA-Alpha) app had a rating of 4.208 (↓0.011) which is lower than in February’25. * In March, Tor Browser for Android (TBA-Alpha) got 49 (↑7) reviews out of 8,514 for the lifetime. In March the most significant issue reported by users in the comments was the bookmark issue in Tor Browser Alpha [5]. [1] https://gitlab.torproject.org/tpo/community/l10n/-/issues/40152 [2] https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/iss… [3] https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/iss… [4] https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/iss… [5] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43581 [6] https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/156

1 0

PieroV's Monthly Status Report, March 2025
by Pier Angelo Vendrame 01 Apr '25

01 Apr '25

Hi everyone, Here is my status report for March 2025. At the beginning of the month, I continued from where I left last month. First, I finished my proposal about integrating the Lox crate in the browser [tor-browser!1300]. I don't think it'll be merged as it is, but it already contains a lot of new code, so I prefer getting feedback before continuing this task. Then, I continued the rebase on Firefox 132 [tor-browser#43413]. Over the month, I worked on several issues related to Go and pluggable transports. I started by updating Go to 1.23.6 on alpha [tor-browser-build#41386]. Previously, we were on 1.22, but it went EOL, so we decided to update. However, we had to keep the old version for macOS since we still want to support macOS 10.15. We used to bootstrap Go starting from 1.4, the last version written in C. However, 1.23 required an additional version in the bootstrap chain, so I took the occasion to investigate the toolchain reproducibility. It's amazing: the 1.23.6 built with our chain matches bit-by-bit the official release from Google. Therefore, we switched to the official binaries as bootstrappers [tor-browser-build#41121]. Also about PTs, I created an automation to keep their license files updated [tor-browser-build#41411], and, in general, I reworked the way we include licenses for Tor and its dependencies [tor-browser-build!1188] (however, this MR hasn't been merged yet). I also worked a little bit on fingerprinting and screen size protection. First, I finalized the patch to spoof screen size differently from what we're currently doing [tor-browser#41747]. Even though it doesn't reduce entropy, it should help with some basic fingerprinting scripts and bot detection. However, we preferred to push the fix to 15.0 since we would like it to be tested for some time before shipping it to stable, and 14.5 is too close according to our plans. Then, I fixed an issue about letterboxing visible albeit disabled in some cases [tor-browser#42670]. I also investigated the upstream patches for window.devicePixelRatio in RFP, as Thorin found a problem with them [tor-browser#43239]. Eventually, I opened an upstream Bug [Bug 1954493] and sent a patch there first. I also worked on a few smaller issues, like adding string files with branding on Android [tor-browser#43464], adding a "What's new" link to the About dialog [tor-browser#42720], and more. Best, Pier [tor-browser#41747] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41747 [tor-browser#42670] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42670 [tor-browser#42720] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42720 [tor-browser#43239] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43239 [tor-browser#43413] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43413 [tor-browser#43464] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43464 [tor-browser!1300] https://gitlab.torproject.org/tpo/applications/tor-browser/-/merge_requests… [tor-browser-build#41121] https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4… [tor-browser-build#41386] https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4… [tor-browser-build#41411] https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4… [tor-browser-build!1188] https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/merge_re… [Bug 1954493] https://bugzilla.mozilla.org/show_bug.cgi?id=1954493

1 0