tor-project

tor-project@lists.torproject.org

17 participants
2326 discussions

Tor's Defenders of Privacy Program
by isabela 09 Jul '19

09 Jul '19

Hello Tor! Today we launched our Defenders of Privacy program, a monthly giving program designed to honor donors who make privacy a priority. We have so many people who support us with donations, and some folks has signed up to give a small amount every month. These steady contributions allow us to make long-term plans and to be agile with our development. Because this type of contribution is so important to us, and for privacy, we decided to honor these donors by giving them the ‘Defenders of Privacy’ title :) and we will also be sending them exclusive gifts to show our appreciation! We are looking forward to building a strong base of Defenders of Privacy to support Tor. Do you want to help us on this mission? Here is how you can do it: 1) Maybe you would like to become a Defender of Privacy yourself ;) here is the link for that: https://donate.torproject.org/monthly-giving; 2) You can invite a friend, a family member, or someone you know that cares about privacy to join our program; 3) And you can help us spread the word! Share the donate page link or our social media posts (https://twitter.com/torproject/status/1148581357502828545) We will be at some events this summer with some cool patches as well for folks who sign up as monthly donors. We will share more when we have the schedule defined. Cheers, isabela

1 0

May and June Communications Report
by Stephanie A. Whited 08 Jul '19

08 Jul '19

1 0

Tor Browser team meeting notes, 8 July
by Georg Koppen 08 Jul '19

08 Jul '19

Hi! Our weekly Tor Browser team meeting just finished. The IRC log can be found at: http://meetbot.debian.net/tor-meeting2/2019/tor-meeting2.2019-07-08-17.31.l… and the items from our pad below: Discussion: - dev meeting (from a tor browser team bird's eye view) GeKo: Last Week: - wrote patch for mk bundle inclusion (#30468) - wrote patch for default bridge removal on mobile (#31058) - wrote patch for enabling letterboxing by default in the alpha series (#31059) - reviewed a bunch of patches (#31055, #27503, #30577, #30573, #31079, #30549, #31086, #30429) - release preparation, building and signing - begin-of-the-month-team updates - start with dev meeting prep This week: - help more with getting releases out - dev meeting prep - finally finish #30429 review - finish begin-of-the-month-team updates sysrqb: Last Week: Mobile 68esr rebasing and testing (#31010) Reviewed patch for updating default bridges and deleting obfs3 from list (#31058) Wrote revised patch for #30573 (opening link for other app) for 9.0 Looked at F-Droid patch again This week: Release. Traveling, meeting prep, some touristy things More on #31010 F-Droid patch (#27539) tjr Sent some emails/comments on fingerprinting issues Disabled mingw builds because we were missing APIs, got them added and re-enabled it Disabled jemalloc due to the alloc/dealloc mismatch :( Making a minimal reproducer to ask Martin for help with a linker patch Learned we do not have anyone working on Uplift for the next... quarter? Unsure. :( mcs and brade: Last week: - Review for #30683 (Properties in dom/locales/$lang/chrome/ allow detecting user locale). - Review for #31059 (Enable Letterboxing by default). - Stockholm travel preparations. - Took a couple of days off for the U.S. Independence Day holiday. This week/upcoming: - Travel to Stockholm. - Respond to Antonela's comments in #30237 (Onion Services client auth prompt). - #30126 (Make Tor Browser on macOS compatible with Apple's notarization). - #29197 (Remove use of overlays from Tor Launcher). - #30429 (ESR 68 Rebase — updater patches). boklm: Last week: - Helped with building new releases - Made patches for: - #31079: Update Mozilla gpg key - #31086: Add instructions for adding new locales to the download page, in the ReleaseProcess documentation - #30548: Clean up keyring files - Fixed issue with the patch for #30549 (Add script to remove expired sub-keys from a keyring file) - Fixed #31054 (Add android aarch64 nightly builds) - Checked archive.tpo rsync scripts after migration to a new machine (#29697) - Reviewed #30468 (Ship macedonian Tor Browser in alpha series) This week: - Help with publishing new releases - Travel to Stockholm - Update patch for #28672 (Android reproducible build of Snowflake) after review - Look at how we can build 32bit mar-tools: https://trac.torproject.org/projects/tor/ticket/30321#comment:10 - Look at remaining failing testsuite tests pili: Last week: - Fundraising banner wrangling - general roadmap and project gardening This week: - dev meeting prep - Season of docs candidate evaluation acat: Last week: - Finished iteration of #28745 (torbutton cleanup/refactor) -> probably more to be done but will wait for review - Reviews (#30800, #30849) - Investigated how to upstream patch for #26353, opened #31075 for that. - Investigated local network proxy bypass in ESR68 -> opened #31065. - Checked whether patch for https://bugzilla.mozilla.org/show_bug.cgi?id=1396224 fixed #21830 - Copying large text from web console leaks to /tmp (nope) This week: - Ask bugzilla 1561636 for esr68 approval - Fix/upstream #21830 (with https://bugzilla.mozilla.org/show_bug.cgi?id=1396224 fixed it should be easy). - Finish revision of https://bugzilla.mozilla.org/show_bug.cgi?id=1561322 (l10n reviewer does not like the original patch...) - Fix #29563 (css line-height revisted [at least zoom and linux]) so that it can be upstreamed together with #23104 (bugzilla is shared). pospeselr: Last week: - submitted hopefully last widl revision to wine-devel This week: - travel prep, travel and Stockholm Next week(s): - on vacation and mostly AFK after Stockholm through the 28th of July sisbell: Last week: - Submit PR to TOPL for issues #130 - IPv6 config for socks port, #120 fix for KitKat, #121 SDK 28, #129 debug. Looks like TOPL is getting additional devs submitting patches last week so some good activity. Changes compatible with tor-android-service - Orbot PR merged into their master (I did fix to resolve merge conflict with most recent master) - #30199 finished responses -Ready for review: #31047, #31043 - Worked on solution so we don't have to add MAVEN_REPO patches in tor-browser-build This Week - get tor-browser-build working with latest TOPL changes. Get ready for review. - Update TOPL build to add deployment of artifacts to maven central Georg

1 0

Network team meeting notes, 8 July
by Nick Mathewson 08 Jul '19

08 Jul '19

Hi! Here are the logs from today's meeting: http://meetbot.debian.net/tor-meeting/2019/tor-meeting.2019-07-08-17.01.html Below you can find the contents of our meeting pad: = Network team meeting pad! = This week's team meeting is at Wednesday 3 July at 2300 UTC on #tor-meeting on OFTC. We have changed the day from Tuesday to Wednesday. July schedule: * Wednesday 3 July 2300 UTC - Changed Day! * Monday 8 July at 1700 UTC * (In-person meeting 12-14 July) * Monday 22 July 1700 UTC * Monday 29 July 1700 UTC Welcome to our meeting! First meeting each month: Wednesday at 2300 UTC Other meetings each month: Mondays at 1700 UTC until 3 November 2019, when daylight saving time changes On #tor-meeting on OFTC. (This channel is logged while meetings are in progress.) (See https://lists.torproject.org/pipermail/tor-project/2017-September/001459.ht… for background.) Want to participate? Awesome! Here's what to do: 1. If you have updates, enter them below, under your name. 2. If you see anything you want to talk about in your updates, put them in boldface! 3. Show up to the IRC meeting and say hi! After each week's meetings, the contents of this pad will be sent to tor-project @ lists.torproject.org. After that is done, the pad can be used for the next week. == Previous notes == (Search the list archive for older notes.) 3 June: https://lists.torproject.org/pipermail/tor-project/2019-June/002343.html 10 June: https://lists.torproject.org/pipermail/tor-project/2019-June/002354.html 17 June: https://lists.torproject.org/pipermail/tor-project/2019-June/002365.html 24 June: https://lists.torproject.org/pipermail/tor-project/2019-June/002373.html == Stuff to do every week = * Let's check the 0.4.1 release status page. See https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/CoreTor… (This page automatically shows the latest trac ticket status.) * Let's check and update the roadmap. What's done, and what's coming up? We're using a kanban board: https://storm.torproject.org/shared/_mx8PMGOHFBOximocl1gy3COvhLPr6k3Ja7JA1v… Click on 'all boards' and then the network team one. Filter by your name and check the 'in progress' column is correct. * Check reviewer assignments! How reviews from last week worked? Any blocker? Here are the outstanding reviews, oldest first, including sbws https://trac.torproject.org/projects/tor/query?status=needs_review&componen… Any blocker from last week? == Reminders == * Remember to "/me status: foo" at least once daily. * Remember that our current code reviews should be done by end-of-week. * Make sure you are in touch with everybody with whom you are doing work for the next releases. * Remember to fill up the 'actual point' field when you close a ticket. We need those to calculate velocity. * Check other's people call for help in their entries. When you are overloaded, it is ok to say "no" to things. And it is ok to reschedule things. [REMINDER] WIP Schedule for Tor meeting https://nc.riseup.net/s/FFkikRBmKDZyLw9 ------------------------------- ---- 8 July 2019 ------------------------------- == Announcements == [ADD] SESSIONS FOR THE NETWORK TEAM (1 day): https://trac.torproject.org/projects/tor/wiki/org/meetings/2019Stockholm/No… The master branch is now 0.4.2.x. 0.4.1.x development continues on maint-0.4.1 and release-0.4.1. 0.3.4.x is now end-of-life. == Discussion == Rotation updates: See https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/TeamRot… CI/coverity catalyst -> catalyst & teor coverity the defect browser was down last week; it seems to be back now (Waiting on update after merging coverity fixes: Coverity does not seem to have noticed 30150 yet.) Looking at coverity -- it seems our builds may have been stuck. I've cancelled the stuck builds. Also, they say they are going to have a planned outage to upgrade their backend, starting today and lasting about 3-4 days. Friday would be a good day to have another look. -nm stuff got unstuck on 28 Jun or maybe earlier? -catalyst Correct; we've been getting updates since then. I opened tickets for the first day's updates; there are more I hope to get to soon. jenkins some intermittent failures that could be network-related Travis teor did some work on stem failures, we need to add a control message trace to tor to diagnose (#30901) waiting for catalyst's advice, because they are refactoring this code Appveyor Bug triage ahf -> asn Things are looking OK asfaik. catalyst asks if we want to re-evaluate https://trac.torproject.org/projects/tor/ticket/31081 or stay with "make the spec match the code" Please give feedback on proposal 306: IPv6 "Happy Eyeballs" for Tor clients https://lists.torproject.org/pipermail/tor-dev/2019-June/013907.html Where are we with our open metaproposals? == Recommended links == == Updates == NOTE NEW FORMAT! Name: Week of XYZ (planned): - What you planned for last week. Week of XYZ (actual): - What you did last week. Week of ABC (planned): - What you're planning to do this week. Help with: - Something you may need help with. PLEASE DO NOT BULK-DELETE THE OLD ENTRIES! Leave the "Planned" parts! Leave the parts for last week and this week! gaba: Last week (actual): This week (planned): . tor meetup Help with: teor: (offline at the usual meeting time) Week of 8 July (actual): Urgent: - Taking time off before long-haul travel and Stockholm meeting - Travel preparation - Ticket triage - Proposal responses Backlog: - code reviews - add tor controller trace logging to diagnose stem hangs (#30901) - disown or quick fix the rest of my tickets: - I should only be owner on tickets I will work on in the next month - fix sponsor on tickets? - CI for pluggable transports (#29267) <-- this is priority over #29224 and 29227 in the roadmap --gaba - Update EndOfLifeTor.md with our latest end of life process (#30839) - document disabled CI (#30745) - triage remaining backport backlog Nick: Week of 24 June (planned): - Retrospective on Thursday - More 29211 work - 0413 release - attempt: Reply to proposals 303 through 305, maybe. - attempt: review 27801 api - attempt: 29817 -- try to re-load seccomp into my brain and resuscitate this ticket. Week of 24 June (actual): - A little more work on 29211 (config refactoring) - 0413 release - Fundraising - Finalizing and sending out feedback summaries Week of 1 July (planned and actual): - reviews and merges - meetings about peer feedback - more work on 29211 (config refactoring): figuring out best approach to API refactoring. - PETS review Week of 8 July (planned): - Filter S31 tickets - more meetings about peer feedback - Reviews and merges - 0.4.1-must tickets - Prepare for (and attend) meeting - time permitting, more 29211 refactoring. Mike: Week of 6/24 (planned): - Bitcoin conference - code reviews - Catch up on mail Week of 6/24 (actual): - Bitcoin conference - Mozilla all hands summary, followup, and Tor scaling planning for Stockholm - rettrospectives - Catch up on mail Week of 7/01 (planned): - code reviews - circpad bugs catalyst: week of 07/01 (2019-W27) (planned): - reviews - start permanent CI+Coverity role - more work on #30984 - Stockholm trip prep - take a closer look at dgoulet's "radical changes" email thread week of 07/01 (2019-W27) (actual): - reviews - 07/04 TPI holiday - more progress on #30984 -- control-refactor branch in my github repo - Stockholm trip prep - medical bureaucracy week of 07/08 (2019-W28) (planned): - travel prep - Stockholm meeting asn: Week of 07/01 (actual): - Pushed #26294 branch to needs_review. - Some more thoughts on the DoS thread. - Some more thoughts on scaling thread. - Lots of hackerone activity/triaging/rewarding (#31022, #31001, plus one more not yet filed) - Finished review/merge backlog. Week of 07/08 (planned): - Triaged a few wtf-pad related tickets but need more work: #30649, #31098. - Tor meeting in Stockholm. - Allhands expenses ahf Week of 1/7 (planned): - Follow up on feedback from Catalyst in #28930 - Follow up on feedback from dcf and teor on #5304 - Figure out the unknowns I have for the Stockholm meeting. - Print post-its for s28 and s30 for roadmapping in Stockholm. - Re-read up on some of the CC guidelines and other docs in that area. - See if I can help with #29267 and/or #29285 Week of 1/7 (actually): - Follow up on #28930, still missing a minor detail. - Made post-its for s28 and s30 from Gaba's pad. - Read up on all the CC material before Stockholm. - Learned a lot about funding, trying to establish contact to a possible funder in DK. Week of 8/7 (planned): - Work on new solution to #5304 - Figure out vacation schedule for August. - Travel to Stockholm! dgoulet: (offline) Week of 07/01 (actual): - s27 DoS work: #15516, #24963/#24964 - Tor-dev update on the DoS experimentation: https://lists.torproject.org/pipermail/tor-dev/2019-July/013923.html Week of 07/08 (planned): - Stocklholm. - Need to address urgently a series of pending bad-relays email.

1 0

Notes from 3 July network team meeting
by Nick Mathewson 08 Jul '19

08 Jul '19

Hi! Here are the logs from last week's meeting: http://meetbot.debian.net/tor-meeting/2019/tor-meeting.2019-07-03-23.00.html I forgot to capture the pad, unfortunately. yrs, -- Nick

1 0

Tor Browser Release meeting today @ 18:00UTC
by Pili Guerra 03 Jul '19

03 Jul '19

Hi everyone, This is a reminder of the Tor Browser release meeting today (Wednesday 3rd July) at 18:00UTC. We’re planning a release in the next few days so please come to get a sneak preview of what we have planned for this upcoming release. Thanks! Pili — Project Manager: Tor Browser, UX and Community teams pili at torproject dot org gpg 3E7F A89E 2459 B6CC A62F 56B8 C6CB 772E F096 9C45

1 0

Tor Browser team meeting notes, 1 July 2019
by Georg Koppen 02 Jul '19

02 Jul '19

Hello! Here come the notes from our first weekly Tor Browser meeting in July. The IRC log can be found at: http://meetbot.debian.net/tor-meeting2/2019/tor-meeting2.2019-07-01-17.32.l… The items from our pad are copied below: Discussion: - state of the onion at dev meeting, applications/browser part (GeKo: pospeselr stepped up and will present Tor Browser things; potential items are: mobile release, security settings, accessibility support for Windows, looking forward to S27 onion services and esr68 transition) Georg: Last week: - reviews (#30549, #31041, #28672, #30863, #30577, #30683) - gave #10760 a first review pass while working on reviews for #30429 - patch for #30849 (backport of two sec-moderate bugs) - finally finished aarch64 support patch for mobile (#28119) - spent some time thinking about integrating the snowflake pt for android (#30318) (GeKo: I'll ask the Guardian Project folks about a way forward here) - wrote patches for macOS toolchain update for with esr68 (#30323): I got everything built I think (there was just a packaging error in the firefox build step), we need to clean up things a bit, though - hackerone work - (mozilla all hands) backlog - filed https://bugzilla.mozilla.org/show_bug.cgi?id=1561589 for getting a mozilla-esr68 branch on gecko-dev This week: - release prep (including patch for #30468) - reviews (above all first full pass on #30429, hopefully mobile patches as well (#31010), and #27503 for the alpha) - begin of the month team admin stuff mcs and brade: Last week: - Worked on #30000 (Integrating client-side authorization to onion services v3). - Posted work-in-progress patches for the Onion Services client auth prompt (#30237). - Made some test builds available that include this feature. - Reviewed and tried to test the #18101 patch (IP leak from Windows/macOS UI dialog with URI). - Finally tested Snowflake on macOS 10.9 for #26251. This week: - Review for #30683 (Properties in dom/locales/$lang/chrome/ allow detecting user locale). - Prepare for travel to the Stockholm meeting. - Out of the office Thursday and Friday (U.S. Independence Day holiday). - Upcoming: #30126 (Make Tor Browser on macOS compatible with Apple's notarization). - Upcoming: #29197 (remove use of overlays from Tor Launcher) - Upcoming: #30429 (ESR 68 Rebase — updater patches). pospeselr: Last week: - rebasing and integrating review feedback - discovered and worked on a fix for a bug introduced in my widl patch-set where valid IDL would generate invalid headers This week: - hopefully finish fixing said issue today and then back on track for getting patchset ready for second round of reviews later this week sisbell: Last week: - Opened PR for Orbot Changes: https://github.com/guardianproject/orbot/pull/240 - #31047: Resources Should Match Orbot (Issue also raised in #30199) - #31042 - VPN Module - lots of fixes since we ignored this code previously/ (not needed for tor browser but need to keep in sync with Orbot) - Refactored tor android service and orbot code to make separation easier to maintain. This Week - Orbot has moved to using info.pluggabletransports libraries. I need to start looking into the code of this project. If we go this route, it will be done through TOPL, which contains the PT dependencies. (Do we want to build these ourselves or are these precompiled native libraries how we want to do it?) Also #31045 - JSocks now has prebuilt dependency in Orbot. - #31049 - Orbot Using Tor Service - we should start looking into this as soon as everything is in sync (Is this the direction we want?) - Work on Settings in TOPL. Orbot has introduced new settings that could be useful. I also need to incorporate the ipv6 settings currently in patch as part of this. - #30144 - Update tor binaries (What version do we target for next release?) (GeKo: The latest and greatest. :) In general I like to move as fast on mobile as desktop, to help the network team finding mobile specific bugs; but that requires our own tor. We are not there yet, though. :( ) boklm: Last week: - updated patch for #30549 (Add script to remove expired sub-keys from a keyring file) - fixed build reproducibility issues for #28672 (Android reproducible build of Snowflake) - reviewed #28119 (Provide Tor Browser for Android for arm64-v8a devices) - started looking at #30321 to try to build 32bit mar-tools This week: - Update patch for #28672 (Android reproducible build of Snowflake) after review - Add android aarch64 nightly builds (#31054) - look how we can build 32bit mar-tools: https://trac.torproject.org/projects/tor/ticket/30321#comment:10 - look at remaining failing testsuite tests - check that archive.tpo rsync scripts are working correctly on the new machine for #29697 - help with releases builds - Clean up keyring files (#30548), using the scripts added in #30549 sysrqb: Last week: Backlog and ticket triage Laptop recovery 68esr rebase (opened #31010) Looked into "interaction avec l'application Gmail sur Android" (#30584) - multiple reports of this This week: Continuing mobile patch rebase F-Droid More bug triage Preparing for travel AFK some parts of this week acat: Last week: - Filed bugzilla tickets for #26514 and #24056. #21830 will hopefully soon by fixed in https://bugzilla.mozilla.org/show_bug.cgi?id=1396224. - Add Fundraising Banner with next TBB security update (#30577). - Addressed review comments for #10760. - Small fix for #31041. This week: - Follow up bugzilla tickets, investigate/file tickets for #23104 and #26353. - Continue torbutton cleanup/refactor (#28745) tjr: - Learned that the alloc/dealloc mismatch on Windows with jemalloc also affects x64 too. Disabled jemalloc on -central :( We'll need to disable it on esr68 too, hasn't been landed yet. Going to go back to Jacek/Martin and see if we can figure things out here - Temporarily disabled mingwclang builds on -central due to missing APIs for a patch landing. Hopefully fixing that today/this week - Investigating AppContainer sandboxing. Seems possible to use this to disable access to networking from Windows content processes although it will not be trivial work. Also seems like using it may write registry values or something related to disk indicating the name of the profile. =/ - I noticed Gary has a patch for the fingerprinting ftp:// timezone issue \o/ [GeKo: Where? (https://bugzilla.mozilla.org/show_bug.cgi?id=1560574) Could we test that one in the upcoming 9.0a4 alpha?] Georg

1 0

Anti-censorship team monthly report: June 2019
by Philipp Winter 02 Jul '19

02 Jul '19

Hi everyone, Here's a summary of the anti-censorship team's progress in June: BridgeDB ======== * Blacklisted 53 bridges whose obfs4 port was unreachable. Most of these bridges had no contact info. Some did, but the operators did not respond to our emails. * Tried to understand why BridgeDB responded to many requests with no bridges: <https://bugs.torproject.org/30441> - Eventually, the problem seems to have fixed itself. - We'll keep a close eye on the logs. * After hearing back from Tor's research safety board, we implemented a new feature that lets BridgeDB export statistics: <https://bugs.torproject.org/9316> The feature is currently under review. * Removed support for Yahoo email accounts: <https://bugs.torproject.org/28496> * Published a blog post about BridgeDB's new 0.7.1 release: <https://blog.torproject.org/new-release-bridgedb-071> Snowflake ========= * We released a prototype for snowflake's webextension! For Firefox, you can get it here: <https://addons.mozilla.org/en-US/firefox/addon/torproject-snowflake/> We're still working on getting it published in Chrome's web store. By installing the addon, you turn your browser into a circumvention proxy for censored users. * Working on integrating pion/webrtc to ease builds and reduce dependencies: <https://bugs.torproject.org/28942> * We wrapped up a ticket to collect statistics on snowflake's broker: <https://bugs.torproject.org/21315> * Brainstormed mechanism for snowflake update versioning: <https://bugs.torproject.org/30704> Pluggable transports ==================== * Implemented a patch to reorder PT/proxy phases: <https://bugs.torproject.org/28930> The patch is currently under review. * Brainstormed ideas for obfs4's successor: <https://bugs.torproject.org/30716> - We decided to first study the "long tail" of network traffic because it will allow us to make better design decisions: <https://bugs.torproject.org/30986> * We made some progress on improving our PT spec: <https://bugs.torproject.org/29285> - For now, we have been collecting a list of issues with the v1 spec. * We made some progress with loading shared libraries for PTs into the Tor executable (on Linux for now). Miscellaneous ============= * Deployed <https://bridges.torproject.org/scan/>. The service allows obfs4 operators to test the reachability of their obfs4 port -- at least until we are done with the following ticket: <https://bugs.torproject.org/30477> * We wrapped up our "does the GFW block obfs4?" ticket: <https://bugs.torproject.org/29279> The answer is: no. * Published a blog post that introduces our anti-censorship team and our Sponsor 19 report: <https://blog.torproject.org/tors-new-anti-censorship-team-defending-open-in…> * Asked tor-relays@ to set up more obfs4 bridges: <https://lists.torproject.org/pipermail/tor-relays/2019-June/017419.html> * Worked with a handful operators whose obfs4 bridges were broken. Several operators believed that only a bridge's OR port must be externally reachable. Others forgot to configure port forwarding for their obfs4 port.

2 1

minutes from the sysadmin meetign
by Antoine Beaupré 01 Jul '19

01 Jul '19

Here are the minutes from today's sysadmin meeting. # Roll call: who's there and emergencies Anarcat, Hiro, Qbi and Weasel present. No emergencies. # What has everyone been up to ## anarcat * scraping collection patch was merged in prometheus puppet module, finally! still 3 pending patches that need unit tests, mostly * more vegas meeting and followup, in particular with email. discussions punted to stockholm for now * reviewed the hardware inventory survey results, not very effective, as people just put what we already know and didn't provide specs * more hiera migration, static sync stuff left * documented possible gitlab migration path and opened #30857 to discuss the next steps * expanded storage for prometheus to 30 days (from 15) landed at 80% disk usage (from 50%) so doubling up the retention only added 30% of disk usage, which is pretty good. * archive.tpo ran out of space, reached out to software heritage and archive.org to store our stuff, both which responded well, but requires more engineering to move our stuff off to IA. heritage are now crawling our git repos. and setup a new machine with larger disks (archive-01) to handle the service. tried to document install procedures in the hope to eventually automate this or at least get consistent setups for new machines * usbguard and secureboot on local setup to ensure slightly better security in my new office * started reading up on the PSNA (see below) * regular tickets and security upgrades work ## qbi Created a new list and other list admin stuff, also some trac tickets. ## hiro * continued documenting and developing websites. we now have a secondary repository with shared assets that can be imported at build time * almost done with setting up a second monitoring server * did some hiera migrations * finished torbrowser packages syncing on github and gitlab for gettor * went to rightscon ## weasel Was busy with work and work trips a lot. Haven't really gotten to any big projects. # What we're up to next ## anarcat * Vacation! Mostly unavailable all of july, but will work sporadically just to catchup, mostly around Stockholm. Will also be available for emergencies in the last week of july. Availabilities in the Nextcloud calendar. * Need to delegate bungei resize/space management (#31051) and security updates. archive-01 will need some oversight, as I haven't had time to make sure it behaves. * Will keep on reading the PSNA book and come up with recommendations. ## hiro * more website mainteinance * would like to finish setup this second monitoring server * documentation updates about setting up new machines * need to cleanup logging on dip * need to figure out how to manage guest users and a possibly anonymous shared account * following up the migration discussion, but unsure if we're still on the same goal as the three-year-old survey we did back then * need to post july/august vacations ## qbi Mostly traveling and on holidays in july and beginning of august ## weasel Maybe july will finally see ganeti stuff, now that we have funding. Will be in Stockholm. # Holidays and availability We've reviewed the various holidays and made sure we don't have overlap so we have people available to respond to emergencies if they come up. We're not sure if the vacations should be announced in pili's "Vacation tracker" calendar or in weasel's "TPA" calendar. # Stockholm meeting prep We managed to get a full roadmapping day set aside for us. We can make a spreadsheet to brainstorm what we'll talk about or we can just do it ad-hoc on the first day. There's also a "Email or not email" session that we should attend, hosted by anarcat and gaba. Finally, anarcat can present our work to the "State of the onion" session on the first day. # Other discussions Weasel noted the meeting was a bit long, with lots of time spent waiting for people to comment or respond, and asked if we could speed it up by reducing that latency. Hiro also proposed to dump our "previous/next" sections in a pad *before* the meeting so we don't have to waste synchronized time to collectively write those up. This is how vegas proceeds and it's very effective, so we'll try that next time. # Next meeting August 5th, 1400UTC. We will try to make the meeting faster and prepare the first two points in a pad beforehand. -- Antoine Beaupré torproject.org system administration

1 0

Notes from June 27 and 20 2019 Vegas team meeting
by Karsten Loesing 01 Jul '19

01 Jul '19

Notes for June 27 2019 meeting: Georg: 1) Back from All Hands keeping track of and doing all the follow-ups 2) We should decide about follow-up sessions we need for our dev meeting. I am fine waiting with that for the scaling meeting tomorrow, if we want. Pili and I agreed the Tor Browser vision session is not as important right now and we could fill it with one of those sessions. Maybe specific Tor Browser related performance/metrics items that came out of All Hands (as the more network team related ones would overlap with part of the network retrospective). [gaba_hijacking_space: sounds good. I'm removing the Tor browser vision session. Can we briefly discuss here the state of the onion if everybody agree on who is going to be there (sheet in https://nc.riseup.net/s/FFkikRBmKDZyLw9 ) ] [says file not found] [now it should work] 3) We finally got all chemspill releases out on all platforms. Big thanks to boklm for driving this and doing the bulk of the work. 4) started with preparations for network health session at dev meeting 5) HackerOne backlog Antonela: 1) UR - Coordinating with Nah the reporting of latest africa trip. 2) OONI - Met Maria before her vacs to sync about Explorer and Apps, working and reviewing related issues 3) TB - Banner for donations is done, waiting for approval (#30577) [I added a comment that I think it looks great and ask that we leave the newsletter sign-up] 4) S27 - reviewed #30024, put together https://nc.riseup.net/s/WH6HHZyjQjdwewF 5) S28 - worked with snowflake webextension UI 6) Asked pili to move forward with the Media folder organization. Steph: could you review the doc she made and tell us what do you think, if we can proceed, if you want to have some specific things there that we don't have right now (but exists), etc? [I checked it out, and it looks good to me! -steph] [cool! hiro, pili and I will work on it during the dev meeting - A] 7) Stockholm meeting - coordinating with dunqan for the Persona's session - planning a Tor Browser prioritizing user problems session - organizing S27 UX work to make sure we are making decisions on what is needed Sarah: 1) Getting caught up after vacation. 2) Getting some nice cryptocurrency donations - ~$25,000 total this month. Included in that is another large donation from privcoin.io. 3) Working on organizing fundraising brainstorm for dev meeting. Any thoughts can be added here: https://trac.torproject.org/projects/tor/wiki/org/meetings/2019Stockholm/No… 4) BTCPayServer will soon launch a campaign on our behalf. Just waiting on one more detail. 5) Patches for our monthly givers - Defenders of Privacy - are being produced now. Will begin sending to current monthly donors. 6) Planning for DEF CON. Steph: 1) newsletter going out today 2) community portal edits 3) edited anti-censorship team blog post 4) preparing for longer form media pitch 5) coordinating tv interview for isa Gaba: 1) blogpost on anti-censorship team with phw 2) s27 monthly report 3) feedbacks with nick 4) trac/roadmaps gardening 5) starting to prep sessions for Tor meeting 6) getting ready to travel to stockholm next week 7) schedule https://nc.riseup.net/s/WCk5xjAGcXgGSJY Anarcat: 1) getting ready for july vacations and stockholm meeting with the team 2) archive.tpo setup in progress to resolve the disk storage situation there 3) some mail issues resolved https://trac.torproject.org/projects/tor/ticket/30911 4) working on a broader, long-term analysis of our needs and requirements, using good reference material (Tom Limoncelli's Practice of Network and System Administration) might come up with a "what are our pain points, time sinks and bottlenecks" survey or discussion Nick: 1) Release 0.4.1.3-alpha 2) Working on feedback summaries; gaba is helping me. Planning to send them out rsn and try to schedule 1:1:1s to happen pre-Stockholm. Mike: 1) Tor-scaling planning for Stockholm - Thinking of changing the "Growing the Tor Network" meeting or adding more sessions 2) Working on summary email of Mozilla All Hands Roger: 1) asn can make it to the OTF summit. I'm talking to OTF to get the right invites. 2) I'm full-time on the NSF proposal revision for the next week. Karsten: 1) Catching up after All Hands. --- Notes for June 20 2019 meeting: Nick: 1) Work goes on; team is mostly working on 0.4.2 stuff 2) Looks like 0.4.1 is likely to become stable on-schedule!? - All teams: Please let us know if you have any bugs that really need to get fixed between 0.4.1.x-alpha and 0.4.1.x-stable. Gaba: 1) we have several options on what to do with email at the organization and a decision could be made soon https://nc.riseup.net/s/9iExsYaZC4mP8p8 (conversation will continue in Stockholm - options 2 and 4 are the one possible right now) 2) started collecting feedback about nextcloud migration https://nc.riseup.net/s/atdNpRScNiBfKrM 3) follow up on gitlab/trac migration https://trac.torproject.org/projects/tor/ticket/30857 4) follow up on CI role as permanent versus rotating at the network team. 5) small changes/follow up on draft Tor meeting schedule. https://nc.riseup.net/s/FFkikRBmKDZyLw9 6) RT/Frontdesks: pili created an account for me. 7) gettor is happening on https://dip.torproject.org/anti-censorship/gettor/boards (updating it from trac myself) 8) other tasks like roadmaps update/checking. 9) sponsor 19 report can be public now. Steph: we (phw, cohosh, kat, arma, karsten) are coordinating a blogpost for next week. pili: 1) Worked on feedback reviews 2) Working with more GSoD candidates 3) S9 Phase3 Work Plan responses 4) Community Portal 5) Finally looked into Frontdesk/rt - There's a lot of spam, most of it in polish, I cleaned up a lot of it and tried to remove the culprits from rt, hopefully that will help with ticket volume - I would say about 50% or more of the tickets on the first page are related to people requesting bridges or reporting issues with bridges. (Phw and me are in the loop about this here. --gaba) - around 25% of tickets on the first page have no subject and no content... - There's probably around 50 new legitimate tickets every week that are going unanswered - Still need to do more analysis but that's a quick summary of what I've seen so far 6) Working on a plan for re-organising media.tpo. Steph: we should sync about this when I have a clear plan [yes, let's! exciting :) lmk if you want any help with planning] 7) Working on plans for website maintenance in future 8) Organising work for monthly donors fundraising banner on TBB isa: 1) Met with Ford on Tuesday 2) Start the work with Beth Grupp consultation 3) Finalizing small things regarding the dev meeting (board meeting day, vegas leads meeting day, space logistics) 4) Will meet with Trevor Timm (tomorrow/friday) 5) Tea Time session on tor-internal 6) Working on reviewing working plan for sponsor9 Erin: 1) back from vacation; playing catch-up Karsten: 1) At All Hands. Steph: 1) Def Con preparation 2) Community portal copy 3) Bug campaign prep 4) Getting resettled after holiday Antoine: 1) partly resolved archive.tpo situation, with IA and Software Heritage and infrared contacts, latter might develop in more hosting options 2) worried about physical security in co-working space 3) finished email proposal (see gaba point) 4) working on evaluating our infrastructure using formal sysadmin methods (#30881) which will show where the flaws in our infra are and help with a long term map

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

tor-project