- tor-project - lists.torproject.org

Anti-censorship team monthly report: December 2019
by Philipp Winter 03 Jan '20

03 Jan '20

Snowflake ========= * Published Snowflake WebExtension 0.2.0, enables metrics on different types of proxy implementation. * Fixed a data race in the Snowflake broker. <https://bugs.torproject.org/32576> * Started collecting metrics on Snowflake proxy types at the broker. <https://bugs.torproject.org/31157> * Continued investigations of Snowflake health and blocking in China. <https://bugs.torproject.org/32657> * Expanded Snowflake test coverage. <https://bugs.torproject.org/29259> GetTor ====== * Fixed distributor update script to prevent filling up disk space on the GetTor machine. <https://bugs.torproject.org/32712> Obfs4 and bridges ================= * Published obfs4 bridge docker image version 0.3: <https://community.torproject.org/relay/setup/bridge/docker/> * Added a new default bridges located at the University of Minnesota. <https://bugs.torproject.org/32547> * Added a cache to bridgestrap, so scan results can persist across restarts. BridgeDB ======== * Started porting BridgeDB to Python 3. Numerous unit tests now fail because strings and bytes are strictly separated in Python 3. This will require significantly more work. <https://bugs.torproject.org/30946> * Summarised an upcoming project deliverable in which we will build a feedback loop between BridgeDB and OONI. OONI wants bridges to test and BridgeDB wants to know where its bridges are blocked. We should get the two to talk to each other. <https://bugs.torproject.org/32740> * Worked with Karsten to have some of our BridgeDB metrics published on Tor Metrics. The graphs are now online at <https://metrics.torproject.org/bridgedb-transport.html> and <https://metrics.torproject.org/bridgedb-distributor.html>. <https://bugs.torproject.org/32135> Miscellaneous ============= * Continued talking to our admins to unify our monitoring infrastructure using both Nagios and Prometheus. <https://bugs.torproject.org/31159> * We discussed the idea of making our bridge authority more resistant to outages by setting up two physical instances behind a single, "virtual" IP address. <https://bugs.torproject.org/31878#comment:3> Outreach ======== * On January 9th, Philipp will give a talk on censorship resistance and Tor at FH Hagenberg in Austria: <https://twitter.com/torproject/status/1208102010832277504>

1 0

OONI Monthly Report: November 2019
by Maria Xynou 03 Jan '20

03 Jan '20

Hello Tor world, Happy new year! In this email I share OONI's status report for November 2019, and our December 2019 report will follow next week. Apologies for the delay! # OONI Monthly Report: November 2019 In November 2019, OONI started working on the DRL Anti-censorship grant in collaboration with The Tor Project. We also started using 2 week cycles to track progress, effort, and priority estimation in order to improve how we estimate and track the work we do on projects. In particular, the work related to the DRL Anti-censorship grant is being tracked on the following public GitHub project board: https://github.com/orgs/ooni/projects/18 ## OONI measurements are now near real-time We are very excited to announce that starting from November 2019, OONI measurements are getting published on OONI Explorer and in the API in near real-time! This means that from the moment an OONI Probe user runs a test to it appearing in OONI Explorer, the delay has gone down from a maximum of 24h to an order of minutes. ## Report on internet blackout in Iran In collaboration with IODA and Iranian community members (Kandoo), we co-published a research report examining the internet blackout in Iran: https://ooni.org/post/2019-iran-internet-blackout/ Community members translated the report to Persian: https://paskoocheh.com/blog/posts/2019-11-29-iran-internet-shutdown-ooni-re… ## Psiphon test integration The primary focus during November was the integration of the Psiphon test into probe-engine, probe-cli and consequently the OONI Probe Desktop app. We picked this as the first item as we had already done a bit of cursory research into the problem and had a clear idea of how we would go about integrating and supporting it. The integration work done for the Psiphon test is also very propaedeutic towards doing other golang based circumvention tests, such as obfs4proxy and other golang based Tor pluggable transports. Our goal is that of getting Psiphon integrated inside of probe-engine, so that we are able to run the test from probe-cli which is in turn run by the OONI Probe Desktop app. This issue is tracked as part of: https://github.com/ooni/probe-engine/issues/89 Throughout November 2019, we made a lot of progress and completed most of the items necessary to achieve this goal. In particular, we ensured we’re using the latest version of Psiphon dependencies (see: https://github.com/ooni/probe-engine/issues/141) made sure the data format of the test result matches the old implementation (see: https://github.com/ooni/probe-engine/issues/128) and re-enabled the ability to build the Psiphon test inside of probe-cli (see: https://github.com/ooni/probe-cli/issues/79) making it possible to build the Psiphon test from the command line interface used by the OONI Probe desktop app. Other completed issues relevant to Psiphon integration include: * httpx implement NewClientWithProxy (https://github.com/ooni/netx/issues/130) which allows us to test that Psiphon is working by using it * HTTPDoConfig: add support for proxy function (https://github.com/ooni/netx/issues/131) which enables using Psiphon as a proxy * porcelain: add proxy and byte counting support (https://github.com/ooni/netx/pull/134) which allows us to measure the amount of bytes sent and received over the Psiphon proxy * x/logger: mimic cURL logging (https://github.com/ooni/netx/issues/137) which has been useful for more easily debugging the new Psiphon test * psiphon: use netx so we fill the HTTP template (https://github.com/ooni/probe-engine/issues/129) which allows us to collect low-level events and generate the Psiphon test data format * orchestra: implement authenticated requests (https://github.com/ooni/probe-engine/issues/148) which allows us to fetch the Psiphon configuration from the OONI orchestra services On the OONI Probe desktop user interface front, with support from Antonela from the Tor UX team, we designed and implemented the Circumvention test card which will allow us to trigger the Psiphon test, but also all the circumvention tests we will be developing. For reference, see: * Add circumvention tool tests icon: https://github.com/ooni/design-system/issues/72 * Mockups for the Performance test card: https://github.com/ooni/probe/issues/804#issuecomment-559824046 Based on these mockups, we worked on adding support for triggering the circumvention tests inside of the OONI Probe Desktop app, see: https://github.com/ooni/probe-desktop/pull/88. ## OONI testing engine improvements We made a series of improvements related to the OONI Probe testing engine such as adding support for serialising binary header values in probe-engine (https://github.com/ooni/probe-engine/issues/110) and adding documentation for it in ooni/spec (https://github.com/ooni/spec/issues/164) When performing HTTP requests in the Telegram golang test rewrite, we are now sure to include the Accept and Accept-Language headers to look more similar to a real browser https://github.com/ooni/probe-engine/issues/113. We also dealt with several other low hanging fruit in the probe-engine and ooni-spec. See: * porcelain: confusing that two errors are returned https://github.com/ooni/netx/issues/141 * dash: write tests and reach 100% coverage https://github.com/ooni/probe-engine/issues/93 * Bump data format to v0.3.0: https://github.com/ooni/spec/issues/163 * Bump data format to v0.3.0: https://github.com/ooni/probe-engine/issues/111 * Update to ooni/probe-assets@20191129161951: https://github.com/ooni/probe-engine/issues/116 * Update well know OONI hosts we use: https://github.com/ooni/probe-engine/pull/117 ### OONI Probe Desktop app Beyond the Psiphon test specific improvements listed above, we also made several smaller improvements to the OONI Probe Desktop app, mostly related to UX and App stability. We added a link to the risks documentation in the onboarding screen (https://github.com/ooni/probe-desktop/issues/60) fixed a UI issue with some icons not being aligned (https://github.com/ooni/probe-desktop/issues/71) and made the macOS dmg disk image more pretty (https://github.com/ooni/probe-desktop/issues/31) We also did some brainstorming on how we could improve the usability of the card descriptions in the home page of the desktop app (https://github.com/ooni/probe-desktop/issues/63 & https://github.com/ooni/probe-desktop/issues/91) ### OONI Explorer and OONI API On the OONI Explorer front, our focus was on improving the application performancing by dealing with low hanging fruit we are sure is going to make improvements to it, while at the same time collecting more metrics to evaluate where we should be directing our other efforts related to app performance. In OONI Explorer, we fixed an issue with the OONI API requests being launched twice during search operations: https://github.com/ooni/explorer/issues/350. ## Infrastructure and backend improvements During this month we dealt with several improvements and incidents affecting our backend infrastructure, such as: * An incident related to the collector running out of disk space: https://github.com/ooni/pipeline/issues/265. * We implemented a pattern that allows us to deploy application using debian packages: https://github.com/ooni/pipeline/pull/264 * We resolved an issue with the input field missing from the fastpath: https://github.com/ooni/pipeline/pull/255 * We merged and deployed the event detector in production: https://github.com/ooni/pipeline/pull/228 ## Test list updates We collaborated with OutRight International on updating multiple test lists to include (more) LGBTQI websites: https://github.com/citizenlab/test-lists/pull/539 We also reviewed several test list updates by Netalitica researchers and opened pull requests for the following test lists: * Pakistan: https://github.com/citizenlab/test-lists/pull/541 * Tunisia: https://github.com/citizenlab/test-lists/pull/543 * Sudan: https://github.com/citizenlab/test-lists/pull/544 * United Arab Emirates: https://github.com/citizenlab/test-lists/pull/545 ## Community use of OONI data ### Freedom on the Net 2019 reports OONI data/reports were cited in the following Freedom on the Net 2019 reports: * Venezuela: https://www.freedomonthenet.org/country/venezuela/freedom-on-the-net/2019 * Zimbabwe: https://www.freedomonthenet.org/country/zimbabwe/freedom-on-the-net/2019 * Zambia: https://www.freedomonthenet.org/country/zambia/freedom-on-the-net/2019 * Nigeria: https://www.freedomonthenet.org/country/nigeria/freedom-on-the-net/2019 * Kenya: https://www.freedomonthenet.org/country/kenya/freedom-on-the-net/2019 * Jordan: https://www.freedomonthenet.org/country/jordan/freedom-on-the-net/2019 * Iran: https://www.freedomonthenet.org/country/iran/freedom-on-the-net/2019 * Indonesia: https://www.freedomonthenet.org/country/indonesia/freedom-on-the-net/2019 * Ethiopia: https://www.freedomonthenet.org/country/ethiopia/freedom-on-the-net/2019 * Egypt: https://www.freedomonthenet.org/country/egypt/freedom-on-the-net/2019 * Cuba: https://www.freedomonthenet.org/country/cuba/freedom-on-the-net/2019 OONI data is also indirectly cited via the following reports (which cite the reports of community members that use OONI data): * Ukraine: https://www.freedomonthenet.org/country/ukraine/freedom-on-the-net/2019 * Malaysia: https://www.freedomonthenet.org/country/malaysia/freedom-on-the-net/2019 ## Community activities ### OTF Summit OONI's Arturo and Maria traveled to Taiwan to attend the OTF Summit (4th & 5th November 2019) where they facilitated OONI workshops. They also participated in the Open Taiwan Day on 6th November 2019. ### Blog post by Karisma Foundation Our Colombian partners, Karisma Foundation, published a blog post where they encourage the use of OONI Probe during the November 21st strike: https://stats.karisma.org.co/ayudanos-a-establecer-y-documentar-posibles-bl… ### Community meeting We facilitated the monthly OONI Community Meeting on Tuesday, 26th November 2019, on the OONI Slack channel (https://slack.ooni.org/) As part of the meeting, we discussed: 1. Comprehensive testing of protocols 2. Testing the new OONI Probe Desktop apps: https://github.com/ooni/probe-desktop/releases/tag/v3.0.0-rc.3 3. Measuring internet blackouts from the edge of the network 4. Participating at the IGF 5. Request for feedback on OONI website re-design, FAQ, and glossary ## Userbase In November 2019, OONI Probe was run 406,846 times from 5,417 different vantage points in 205 countries around the world. This information can also be found through our stats on the OONI Explorer landing page: https://explorer.ooni.org/ ~ The OONI team -- Maria Xynou Research & Partnerships Director Open Observatory of Network Interference (OONI) https://ooni.torproject.org/ PGP Key Fingerprint: 2DC8 AFB6 CA11 B552 1081 FBDE 2131 B3BE 70CA 417E

1 0

Anti-censorship meeting notes, 2 Jan 2020
by Philipp Winter 02 Jan '20

02 Jan '20

We had a rather brief meeting today. Here's our log: http://meetbot.debian.net/tor-meeting/2020/tor-meeting.2020-01-02-17.59.html And here's the content of our new meeting pad, which now exists at: https://pad.riseup.net/p/tor-anti-censorship-keep Anti-censorship work meeting pad -------------------------------- Next meeting: Thursday January 2nd 18:00 UTC Weekly meetings, every Thursday at 18:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress). == Goal of this meeting == Weekly checkin about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at Tor. == Links to Useful documents == * Our anti-censorship roadmap: https://dip.torproject.org/torproject/anti-censorship/roadmap/boards * Our roadmap consists of a subset of trac tickets. * The anti-censorship team's wiki page: https://trac.torproject.org/projects/tor/wiki/org/teams/AntiCensorshipTeam * GetTor's roadmap: https://dip.torproject.org/groups/torproject/anti-censorship/gettor-project… * Tickets that need reviews: https://trac.torproject.org/projects/tor/query?status=needs_review&componen… * Projects from sponsors we are working on: * https://trac.torproject.org/projects/tor/wiki/org/sponsors/Sponsor30 * https://trac.torproject.org/projects/tor/wiki/org/sponsors/Sponsor28 ------------------------- --- January 2nd 2020 --- ------------------------- == Announcements == * == Discussion == * Anyone want to mentor a student developer during the summer? We have time to apply until early February. https://summerofcode.withgoogle.com/how-it-works/#timeline Ideas from last year: https://2019.www.torproject.org/getinvolved/volunteer.html.en#Coding == Actions == * Please add your December 2019 highlights to our monthly report pad * https://pad.riseup.net/p/UC0va7a6H_XeI5HSsO8H == Interesting links == * https://gfw.report/blog/gfw_shadowsocks/ == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week (related to anti-censorship work). Help with: - Something you may need help with. Hiro: Started restoring Twitter Responder. When retrieving tweets I need to check for new tweets only otherwise Gettor will end up responding to old back log and already answered messages. <-- is this #27330 ? Next Week: - Work on gettor specs <-- Is this #3781? - More with review of strings and website content and translation phw: This week (2020-01-02): * Catching up on emails. * Tried to write patch for #31009. Next week: * Helping with grant writing. Help with: * Gaba: () Last week (Dec 16th): * s30 tracking This week (planned): AFK until January 9th. I'm on signal if needed cecylia (cohosh): last updated 2019-01-02 Last week: - vacation This week: - finish debugging windows issues with snowflake (#31971) - update pion library version for Tor Browser (#32870) - update gettor distributors - look at snowflake backlog for sponsor 28 - finish up nsf grant draft - think about gsoc projects Help with: arlolra: 2019-12-12 Last week: - merged #32499 Next week: - read up on turbo tunnel - pick a new task (#31902, #31201, #19026, ?) Help with: - dcf: 2020-01-02 Last week: - copied logs and turned off the non-IPv6 broker (#32502) - published a meek turbotunnel branch https://github.com/net4people/bbs/issues/21 Next week: - delete the old broker (#32502) - turbo tunnel in Snowflake Help with: cjb: 2019-12-19 Next week: - was looking for a good first ticket and found https://trac.torproject.org/projects/tor/ticket/31011, I'll give it it a try this week if that seems reasonable? - it looks like it has a companion ticket of https://trac.torproject.org/projects/tor/ticket/31009 which just needs someone to take a patch from Trac and put it in a GitHub PR

1 0

December 2019 report for the UX team + 2019 Recap
by Antonela Debiasi 02 Jan '20

02 Jan '20

Hi Tor, Onion Services ============== As part of our UX improvements for Onion services, Onion Prioritization is about to reach the alpha series. We are reviewing the last user interface's details here https://trac.torproject.org/projects/tor/ticket/21952 We should consolidate the Onion identity presence in clients' URL Bar. We are working on it here https://trac.torproject.org/projects/tor/ticket/32645 WWW === We discussed the next iteration of the download page, specifically the privacy trade-offs between offering a one-click download experience vs. our current download flow. We created an improved version, and we are collecting feedback from users to inform our next iteration. https://lektor-staging.torproject.org/tpo/develop/download/ https://trac.torproject.org/projects/tor/ticket/32749 We worked in minor (but noticeable!) UI fixes in tpo.org. Thanks, c1e0! S9 == Pili submitted the Sponsor 9 Year 2 report relating our work with communities in the Global South. If you are interested in reading more about the work we have been doing in the field, email me, and I'll send you a copy. Nah coordinated the user research ran with Karisma in Colombia and with the Zaina Foundation in Tanzania. We will upload their reporting soon. S30 === We are working with OONI on S30 related tickets. During December, we worked on exposing the Circumvention test in end-users UI, both for desktop and mobile clients. https://github.com/orgs/ooni/projects/3 L10N ==== Community.torproject.org is getting in shape to be officially released in 2020. Emmapeel is coordinating the localization efforts for the vast amount of content the portal will hold. We are trying to define a better workflow for translations. Emmapeel suggested having translation-only branches here https://trac.torproject.org/projects/tor/ticket/32746 Outreach ======== We presented a few proposals for the next Internet Freedom Festival. We can't wait to meet old and new friends in Valencia this year! Open Team ========= The UX Team roadmap kanban breathes here: https://dip.torproject.org/groups/torproject/ux/-/boards If you missed those, December weekly meetings notes are here: https://lists.torproject.org/pipermail/ux/2019-December/000475.html https://lists.torproject.org/pipermail/ux/2019-December/000476.html https://lists.torproject.org/pipermail/ux/2019-December/000480.html 2019 Recap ========== For the records, 2019 was the year where we - launched the new torproject.org website. - continued working with local communities collecting user feedback and running user research in the Global South: thanks to folks from India, Uganda, Kenya, Indonesia, Colombia, Mexico, and Brazil for joining us!. This work allowed us to release and share our first Tor Personas tool. - made available Tor outreach material based on Tor Personas. - joined OONI on revamping and releasing the new explorer.ooni.org - opened a #tor-ux room - launched Tor Browser 8.5 and 9.0 with a new Tor Browser icon, an improved version of Security Settings, New Identity, Network Settings core features. We also released Tor Browser for Android on our stable channels. - started to define how the future of Onion services will look like - supported the anti-censorship team on releasing the Snowflake browser extension. - supported the fundraising team in our major donation campaigns. It was a pleasure to collaborate with designers, developers, researchers, and project advocates during 2019. I hope we can continue creating technology for liberation together in 2020, too. Thanks, peace and love A -- Antonela Debiasi UX Team Lead @antonela E2330A6D1EB5A0C8 https://torproject.org

1 0

Stem Release 1.8
by Damian Johnson 29 Dec '19

29 Dec '19

Hi all, I'm delighted to announce Stem 1.8! https://blog.atagar.com/stem-release-1-8/ This is the final release in Stem’s 1.x series and with it Python 2.x support [1]. Over a year in the making, this introduces CollecTor, bandwidth metric, and HSv3 descriptor support. For a list of everything that's changed please see... https://stem.torproject.org/change_log.html#version-1-8 Cheers! -Damian [1] https://www.python.org/doc/sunset-python-2/

1 0

Notes from Vegas Meeting DECEMBER 19 2019
by Erin Wyatt 20 Dec '19

20 Dec '19

Vegas Team Meeting Notes DECEMBER 19 2019 + NEW BUSINESS Anarcat - PSA: finished retirement of old IRC server (iranicum), everyone should now be using chives.torproject.org (AKA ircbouncer.tpo) instead. data will be deleted from server in 30 days, and from backup server in 60 days (#32281) only servers left on that host are "chiwui" (check.tpo, #29399) and gayi (svn.tpo, #17202) would love to retire the entire machine in january (#31686, 86EUR/mth!) - major server crashes this week [anarcat] + GENERAL NOTES isabela: 1. Met w/ Justin from NYU 2. Created onion-advisors list for a group of people that can give me support while I am talking with folks interested in using our technology 3. Reviewed answers to SIDA regarding our report, working on blog posts for YE campaign, looking at the new version of OTF proposal 4. taking care of all the things before holidays Steph: 1. Online a limited time this week 2. Covering EOY social media, prepping blog posts 3. Drafting next newsletter 4. Submitted first Outreachy feedback. Have been working with annalee_ on initial tasks Anarcat: 1. wrapping up everything before vacations 2. built test server for mail service, R&D postponed to january (#30608) 3. postponed DMARC mailing list fixes to january (#29770) 4. dealt with major downtime at moly, which mostly affected the translation server (majus), good contacts with cymru staff 5. gitlab meeting 6. untangled monitoring requirements for anti-censorship team (#32679) 7. PSA: finished retirement of old IRC server (iranicum), everyone should now be using chives.torproject.org (AKA ircbouncer.tpo) instead. data will be deleted from server in 30 days, and from backup server in 60 days (#32281) only servers left on that host are "chiwui" (check.tpo, #29399) and gayi (svn.tpo, #17202) would love to retire the entire machine in january (#31686) 8. major server crashes this week 9. usual churn (puppet merge work, email aliases, DNSSEC rotation, documentation, OONI DNS, NC DNS, etc) Roger: 1. My laptop's drive ate itself. If there's a thing I was going to do for you, remind me. 2. I'm going to say yes to talk invites for export control conference and for ISAT workshop Antonela: 1. working on IFF proposals 2. sent November report, writing December one which maybe will be a recap of 2019 3. S27 work, reviewed S9 public report, OTF TB proposal 4. reading other teams roadmaps and building the one for the ux team Pili: 1. Browser proposal reviews and revisions 2. S27 December report 3. Preliminary January roadmaps for teams 4. IFF proposal for State of the Onion 5. FOSDEM wrangling 6. Started Google Summer of Code wrangling 7. Redacted sensitive info from S9 report for wider sharing 8. AFK from 20th December - 6th January (at least) Gaba 1. Network team roadmapping meeting - https://nc.torproject.net/s/TGeW5CX4GqaagMN 2. Gitlab meeting 3. s30 & s28 tracking 4. Tor workshop at La Diaria's newsroom in Montevideo 5. Will be AFK from December 23rd until January 9th. You can reach out via signal if needed. 6. IPv6 project starts February 1st Sarah 1. Final push for EOY campaign. We are on track to raise at least $65K more than last year. 2. We've gained 250 new monthly donors since the start of the campaign who will generate $20K per year, if they stay on. 3. Will be online and available throughout the holiday, but Signal is the fastest way to reach me. 4. Setting up several meetings with large foundations in January. (Hewlett, Omidyar, Internet Society) Mike: 1. Submitted Sponsor2 report 2. Website Oracle Blog Post awaiting publish button Gus 1. Reviewing Cleo Frontdesk replies and working on tasks to the end of year. Submitted Outreachy feedback. 2. Answered Sponsor9 questions. 3. Online meetings with local trainers. 4. We had Global South IRC meeting this week. 6. Working on IFF proposal and waiting for more information about our Villa. Nick 1. Team has done some roadmapping for next couple of months, when we are in between grants. Thanks to ahf and gaba! 2. Preparing to go offline for vacation interval. Back in January. Please use signal if I'm needed; I will be putting all Tor email into an "AfterVacation" mailbox, starting this weekend. Philipp 1. Good progress on TTP grant, still on track \o/ 2. Business as usual with sponsor 28 and 30 Alex: 1. Roadmap session with the network team went really well. We now have a roadmap for the network team until our next dev meeting. Thanks a lot to Gaba for running that smoothly! 2. Been listening in on Georgetown interviews for the Shadow Developer hire. Progress is being made there as well. 3. FOSDEM devroom talk was approved. 4. Productive Gitlab meeting with Hiro, Anarcat, Catalyst, Pili, and Gaba. 5. Really looking forward to relax with family soon and then off to 36c3 on the 26th of December. I will check IRC in this period, but only socially and probably at weird times. Use Signal if there is anything urgent. Karsten: 1. Added two new graphs on BridgeDB requests to Tor Metrics. 2. Started analyzing Rob's relay flooding experiment.

1 0

Anti-censorship meeting notes, 19 Dec 2019
by Philipp Winter 19 Dec '19

19 Dec '19

Here is our meeting log: http://meetbot.debian.net/tor-meeting/2019/tor-meeting.2019-12-19-17.59.html And here is our meeting pad: Anti-censorship work meeting pad -------------------------------- Next meeting: Thursday December 19th 18:00 UTC Weekly meetings, every Thursday at 18:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress). == Goal of this meeting == Weekly checkin about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at Tor. == Links to Useful documents == * Our anti-censorship roadmap: https://dip.torproject.org/torproject/anti-censorship/roadmap/boards * Our roadmap consists of a subset of trac tickets. * The anti-censorship team's wiki page: https://trac.torproject.org/projects/tor/wiki/org/teams/AntiCensorshipTeam * GetTor's roadmap: https://dip.torproject.org/groups/torproject/anti-censorship/gettor-project… * Tickets that need reviews: https://trac.torproject.org/projects/tor/query?status=needs_review&componen… * Projects from sponsors we are working on: * https://trac.torproject.org/projects/tor/wiki/org/sponsors/Sponsor30 * https://trac.torproject.org/projects/tor/wiki/org/sponsors/Sponsor28 --------------------------- --- 19th December 2019 --- --------------------------- == Announcements == * We now have BridgeDB graphs on metrics! * https://metrics.torproject.org/bridgedb-transport.html * https://metrics.torproject.org/bridgedb-distributor.html == Discussion == * Sponsor 30: https://trac.torproject.org/projects/tor/wiki/org/sponsors/Sponsor30 * UX - O3 * A1 - Develop Tor user personas as a tool to understand users’ contexts and mental models. * A2 - Define which censorship scenarios we are going to address. * O2 en IFF : https://pad.riseup.net/p/iff-bridgedb-usability-2020-keep * A3 - Identify which bridge selection and distribution methods are most used in targeted regions. * Anyone want to mentor a student developer during the summer? We have time to apply until early February. https://summerofcode.withgoogle.com/how-it-works/#timeline Ideas from last year: https://2019.www.torproject.org/getinvolved/volunteer.html.en#Coding == Actions == * == Interesting links == * == Updates == FORMAT! Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week (related to anti-censorship work). Help with: - Something you may need help with. Hiro: Started restoring Twitter Responder. When retrieving tweets I need to check for new tweets only otherwise Gettor will end up responding to old back log and already answered messages. <-- is this #27330 ? Next Week: - Work on gettor specs <-- Is this #3781? - More with review of strings and website content and translation phw: This week (2019-12-19): * Filed #32740 to build a feedback loop between OONI and BridgeDB. * Followed up on old email conversation with two university contacts, asking if they can run default bridges. * Reviewed #32712. * Worked with karsten to add BridgeDB to Tor Metrics in #32135. * Wrote patches for new default bridge at UMN (#32547); already blocked by GFW. * Started thinking about anti-censorship presentation in Austria. * Lots of work (but little progress) on porting BridgeDB to Python 3. * Attended meeting about TTP grant and read draft beforehand. * Provided a bit of feedback for #31011 (bridge authority should reject bridges with private addresses). Next week: * Help with: * Gaba: () Last week (Dec 16th): * s30 tracking This week (planned): AFK until January 9th. I'm on signal if needed cecylia (cohosh): last updated 2019-12-12 Last week: - merged snowflake test coverage improvements (#29259, #32300) - worked on a fix for gettor update script filling up disk space (#32712) - thought about how to tackle gitlab provider for gettor (#32711) - filed a gettor ticket for keeping track of provider reachability (#32716) - reviewed #32499 and #30716 - ran some tests for #31971 - continue snowflake health checks and looked at censorship in china (#32657) - continued looking into Windows issue (#31971) - worked on grant This week: On vacation Dec 13 - Jan 1 (inclusive). Reachable by signal if it's urgent, will occassionally check email Help with: - review of #32712 arlolra: 2019-12-12 Last week: - merged #32499 Next week: - read up on turbo tunnel - pick a new task (#31902, #31201, #19026, ?) Help with: - dcf: 2019-12-19 Last week: - posted a branch of meek with turbo tunnel - https://github.com/net4people/bbs/issues/21 - wrote a summary of the upcoming research paper on censorship in Russia - https://github.com/net4people/bbs/issues/20 - merged a Snowflake pull request re the proxy build - https://github.com/keroserene/snowflake/pull/46 Next week: - decommission old broker (#32502) - turbo tunnel in Snowflake Help with: cjb: 2019-12-19 Next week: - was looking for a good first ticket and found https://trac.torproject.org/projects/tor/ticket/31011, I'll give it it a try this week if that seems reasonable? - it looks like it has a companion ticket of https://trac.torproject.org/projects/tor/ticket/31009 which just needs someone to take a patch from Trac and put it in a GitHub PR

1 0

Tor Browser team meeting notes, 16 September 2019
by Matthew Finkel 17 Dec '19

17 Dec '19

Hello! We held our weekly Tor Browser meeting on Monday in #tor-meeting2. Here is the IRC log: http://meetbot.debian.net/tor-meeting2/2019/tor-meeting2.2019-09-16-17.30.l… >From the weekly updates, we discussed and planned a Tor Browser Alpha release for Mac OS X due to the new notarization requirement. This will allow for additional testing before Tor Browser 9.0 becomes the stable version. We also discussed backporting a patch onto Tor Browser 8.5 for this and including it in the next stable release. >From the discussions, we decided on making about:blank the default New Tab page (instead of Firefox's new about:home page), and about:tor will be an alternative option. We are also beginning the triage of Tor Browser tickets for Bug Smashing and we are adding the keyword "BugSmashFund" on the applicable tickets. Finally, we are aiming at releasing the new Tor Network Settings UI in an upcoming alpha release. This moves the configuration settings menu from Tor Launcher into the browser's preferences screen (about:preferences#tor). Below are the notes from our meeting pad: Discussion: (acat) Should we allow users to change New Tab page to "Firefox Home" (Firefox default new tab page)? see https://trac.torproject.org/projects/tor/ticket/31575 (pili) BugSmashFund: if you see any bugs that are outside sponsor work and would be good to fix after ESR68 work is over please tag on trac with "BugSmashFund" keyword (pili) Gentle reminder to update tickets for September with points estimate and actual points once closed. (anto) could we have #31286 (Tor Network Settings on about:preferences#tor) on alpha channel? GeKo: Last week: - Bug 30126: Apple notarization - Bug 31538: Windows reproducibility - Bug 31584: Clean-up mingw-w64 project (currently testing a final patch) - fixed Windows nightly build failure (#31732) - wrote a patch for #31725 (mk localization did not work properly) - worked on missing pieces for #30429 - acat/sysrqb where are we with the reviews/fixups for #31010? Is there anything left from your side? - reviews (#24653, #26345, #30304, #31575) - double-checked our hardening flag situation for Windows and Linux bundles after toolchain updates; I think there a no surprises and unknown issues that popped up - caught up with blog comments (having 4 active blog posts to take care of in parallel is harder than thought :) ) This week: - stack smashing protection for Windows binaries (#29013) - #31597 (Mozilla bug review for bugs squashed between Firefox 61-68) - finish missing pieces for #30429 - maybe release for testing #30126 on alpha channel? we'd need #31702 for that which is supposed to apply cleanly for esr68 at least; apple is saying Catalina gets out in October so, we might have a bit more time here? - reviews mcs and brade: Last week: - Testing and research for #30126 (Make Tor Browser on macOS compatible with Apple's notarization). - Verified that #31464 is no longer an issue (meek and moat are broken on macOS 10.9). - Debugged #31607 (App menu items stop working). - On macOS, menu-related objects are being freed too soon or at the wrong time. - This is a strange issue that is proving to be difficult to debug. (GeKo: Do we know which patch is causing that? If not, could we track down this bug easier that way? mcs: We think it is not caused by a patch but by Tor Launcher opening a modal window during startup but we will confirm) This week/upcoming: - Continue work on #31607 (App menu items stop working). - #31491 (clean up the old meek http helper browser profiles). - Work on other tbb-9.0-must-alpha tickets if time permits. - Reminder: we will be on vacation next week. sysrqb: Last week: Mostly afk. Releases Began dog-fooding 9.0a6 This week: - Pick up #30943 again (only private tabs as the default) - Investigate auto-complete not working on 9.0a6 Android (#31720) - Maybe look at showing Tor Browser version number on Android (#30943) - Maybe help with getting x86_64 Android builds (#31192) _hc/eighthave: Last week: tor-android clean-up work, 64-bit builds and configure.ac --enable-android path tor-android reproducible build (given the same docker container) This week: Android-native TorService tjr: - Worked on the WASM patch but waiting on help: https://bugzilla.mozilla.org/show_bug.cgi?id=1576254 - Landed the alloc/dealloc patch in 68: https://bugzilla.mozilla.org/show_bug.cgi?id=1547519#c32 - There are a couple of concerning test failures for the MinGW build in the esr68 branch that might/are probably related to this. - I need to fix my IDA installation to be able to dig into these though... boklm: Last week: - Did some reviews: - #31450 (Still use GCC for 64bit Linux debug builds after switch to 68 ESR) - #31264 (tar.gz output files contain non-reproducible timestamps) - #31621 (Fix node bug that makes large writes to stdout fail) - #31641 (Provide link to Tor Browser for Android alpha on our alpha download page) - #31596 (Bump mingw-w64 version to pick up fix for #31567) - #31732 (Windows nightly build failure) - Made a patch for #31448 (gold and lld break linking 32bit Linux bundles we need to resort to bfd) - Opened #31755 (Separate update pings and update requests graphs for Tor Browser alpha and release users) - Looked at #31646 (Update abicheck to require newer libstdc++.so.6) This week: - Test patch for #31538 (Windows bundles based on ESR 68 are not built reproducibly) - Review #27493 ('mk_add_options' or 'export' MOZILLA_OFFICIAL) - Make patch for #31646 (Update abicheck to require newer libstdc++.so.6) - will be afk on Tuesday (tomorrow) acat: Last week: - #26345 - Finish Disable tracking protection UI in FF67-esr (in review) - Investigated if serviceworkers can still see localized msgs in #30683. - Investigated a bit RemoteSettings background requests: #31740 - Created Bugzilla ticket for #30683 (https://bugzilla.mozilla.org/show_bug.cgi?id=1581537) This week: - 31303: Browser Toolbox fails to open when tor-launcher is present V(is it fine if I take this one pospeselr?) - tbb-9.0-must-alpha tickets sisbell: Last Week: - #31564: Android bundles not reproducible - implemented solution using apktool. Need verification if it works across build machines with different OS. (GeKo: I'll do that while reviewing) - #31568: Gradle how-to. Found solution to remove missing resources that was causing double artifact entries. Documented this. This week: - open tickets for tor-android-service patches - 31564 (if additional changes needed) - 31192 - x86_64 support Pili: Last week: - mostly afk - Gave a talk on using onion services for APIs at API Days Barcelona This week: - Looking at our roadmap and capacity - Moving forward with team lead transition tasks Antonela: - #31660 - Investigating about ESR68 Onboarding > https://trac.torproject.org/projects/tor/ticket/31660 - #31286 - TB9 Network Settings is almost done. Shared with phw and the anti-censorship team to have them in the same page. > https://trac.torproject.org/projects/tor/ticket/31286 - #27511 - Working with TB New Identity > https://trac.torproject.org/projects/tor/ticket/27511 - Back to S27 Onion Services pospeselr: Last Week: got moat bridgedb requests mostly working with new about:preferences#tor page (#31286) CAPTCHA displayed, guesses can be made and submitted, bridge strings returned back but aren't displayed or saved anywhere This Week: rebase current patches to latest esr68 branch >:[ port over the read/write logic for the tor proxy settings, and integrate that into the bridgedb request logic Have a good week! Matt

1 13

gitlab next
by Gaba 17 Dec '19

17 Dec '19

Hi! Thanks everybody for the help on finding issues in the gitlab migration [0]. We are going to be meeting next week to check on what is the status of this migration and look at other issues that came up in the last couple of weeks [1][2]. Anybody interested in this is invited to participate. Meeting will be on December 17th, at 15UTC in #tor-meeting Agenda and notes will be on: https://pad.riseup.net/p/pKCLewB9RpyjJfRP6X26 cheers, gaba [0] https://pad.riseup.net/p/gitlab-migration-problems [1] https://trac.torproject.org/projects/tor/ticket/32197 [2] https://trac.torproject.org/projects/tor/ticket/32730 -- Project Manager: Network, Anti-Censorship and Metrics teams gaba at torproject.org she/her are my pronouns GPG Fingerprint EE3F DF5C AD91 643C 21BE 8370 180D B06C 59CA BD19

1 1

Tor Browser Release meeting this week: Wednesday 18th December @ 19UTC
by Pili Guerra 17 Dec '19

17 Dec '19

Hi everyone, This is your reminder of the Tor Browser release meeting this week. This will be our last meeting of the year ahead of our next release on January 7th 2020. It will be the last opportunity to discuss what will make it into this release. See you all then! Thanks, Pili — Project Manager: Tor Browser, UX and Community teams pili at torproject dot org gpg 3E7F A89E 2459 B6CC A62F 56B8 C6CB 772E F096 9C45

1 0