- tor-project - lists.torproject.org

OONI Monthly Report: July 2019
by Maria Xynou 13 Aug '19

13 Aug '19

Hello, In July 2019, the OONI team made progress on many fronts: fast-path pipeline, RSS feed generator, OONI Probe mobile and desktop apps, new OONI Explorer, OONI Probe Orchestration System, ndt7, and on making OONI Probe testing more resilient to network outages. We also held a team meeting to roadmap for the next 12 months, and we attended the Tor Meeting and the Citizen Lab Summer Institute (CLSI). Further details are provided below. ## Progress on fast-path pipeline Currently the OONI data processing pipeline takes ~24 hours to publish new measurements from around the world. Our aim is to reduce this latency to less than daily. To this end, we have been working on the implementation of a fast-path pipeline: https://github.com/ooni/spec/issues/145 As part of ingesting metadata from OONI Probe tests, the fast-path does feature extraction for Web Connectivity. As new OONI Probe tests are shipped, more logic can be added for the other tests. The fast-path also aims at increasing performance compared to the existing implementation and will eventually allow the reprocessing of previously collected data, including newer test types (such as instant messaging tests). The new pipeline adds more flexible heuristics and implements blocking event detection that will be used by the RSS Feed generator, OONI Explorer, and other projects. ## Progress on RSS Feed generator Progress was made on implementing an RSS feed generator for confirmed instances of blocking based on metrics calculated in the OONI data processing pipeline. This work can be found here: https://github.com/ooni/pipeline/pull/204 ## Progress on OONI Probe mobile apps In preparation for the OONI Probe Mobile 2.2.0 release, we implemented the following: On Android: * Faster measurement resubmission: https://github.com/ooni/probe-android/pull/247 * API to fetch measurement URL: https://github.com/ooni/probe-android/pull/246 * Tests with json: https://github.com/ooni/probe-android/pull/244 On iOS: * Faster measurement resubmission: https://github.com/ooni/probe-ios/pull/302 * Bug fixes: https://github.com/ooni/probe-ios/pull/301 * Call delete function: https://github.com/ooni/probe-ios/pull/300 * Log file removal: https://github.com/ooni/probe-ios/pull/299 * API to fetch measurement URL: https://github.com/ooni/probe-ios/pull/293 * Tests with json: https://github.com/ooni/probe-ios/pull/292 We released the 2.2.0-beta TestFlight for OONI Probe on iOS. ## Progress on OONI Probe desktop apps We continued to make progress on the OONI Probe desktop apps: https://github.com/ooni/probe-desktop/pull/32 & https://github.com/ooni/probe-desktop/pull/33 We started adding support for auto-update: https://github.com/ooni/probe-desktop/pull/37 We also released an updated version of the beta: https://github.com/ooni/probe-desktop/releases/tag/v3.0.0-beta.4 ## Progress on revamping OONI Explorer In preparation for the launch of the revamped OONI Explorer, we continued to make a series of improvements to the beta (https://explorer-beta.ooni.io/) throughout July 2019. More specifically, we merged the following pull requests: https://github.com/ooni/explorer/pull/238 https://github.com/ooni/explorer/pull/237 https://github.com/ooni/explorer/pull/233 https://github.com/ooni/explorer/pull/231 https://github.com/ooni/explorer/pull/230 https://github.com/ooni/explorer/pull/227 https://github.com/ooni/explorer/pull/226 https://github.com/ooni/explorer/pull/225 https://github.com/ooni/explorer/pull/224 https://github.com/ooni/explorer/pull/223 https://github.com/ooni/explorer/pull/221 https://github.com/ooni/explorer/pull/216 https://github.com/ooni/explorer/pull/211 https://github.com/ooni/explorer/pull/210 https://github.com/ooni/explorer/pull/209 https://github.com/ooni/explorer/pull/208 https://github.com/ooni/explorer/pull/206 https://github.com/ooni/explorer/pull/205 https://github.com/ooni/explorer/pull/203 https://github.com/ooni/explorer/pull/199 https://github.com/ooni/explorer/pull/196 During the Citizen Lab Summer Institute (CLSI), we facilitated a session where we provided a sneak peek to the beta version of the new OONI Explorer, during which participants shared very useful feedback. We will be incorporating most of the feedback before the stable release. ## Making OONI Probe testing more resilient to network outages As part of our goal to make OONI Probe testing more resilient to network outages (i.e. being able to run some OONI Probe tests even when there is limited or missing internet connectivity), we have been working on a series of activities (such as adding support for re-uploading (non-uploaded) measurements: https://github.com/ooni/probe/issues/838 & https://github.com/ooni/probe/issues/846) During July 2019, we made progress on the following: * Improving the manual measurement upload performance: https://github.com/ooni/probe/issues/861 * Ensuring that measurement-kit works during network outages: https://github.com/measurement-kit/measurement-kit/issues/1866 (MK v0.10.5: https://github.com/measurement-kit/measurement-kit/milestone/20) * Faster development cycles: https://github.com/measurement-kit/measurement-kit/issues/1867 ## Progress on ndt7 We continued to make progress on the development of ndt7 (next generation speed test): https://github.com/m-lab/ndt7-client-go/issues/16 & https://github.com/measurement-kit/libndt/milestone/4 ## Progress on Probe Orchestration We continued to make progress on the OONI Probe Orchestration System and we made a release with improvements: https://github.com/ooni/orchestra/releases/tag/v0.3.0 In 0.3.0 we added support for returning the full list of URLs by default, making it possible for clients to test the full URL list. ## Tor Meeting The OONI team traveled to Stockholm, Sweden, to attend the Tor Meeting between 12th-14th July 2019: https://trac.torproject.org/projects/tor/wiki/org/meetings/2019Stockholm As part of the Tor Meeting, we participated in the following sessions: * State of the Onion: We presented OONI's work over the last months (since the last Tor Meeting in Mexico) * Anti-censorship: Collaborating with Tor's new anti-censorship team on making Tor more resilient to censorship (for example, through the development on new OONI Probe tests for pluggable transports) * Responding faster to emergent censorship events * User research coordination with local communities ## OONI Team Meeting Given that the Tor Meeting was only hosted for 3 days this time and that the OONI team is quite distributed geographically, we used most of the Tor Meeting to facilitate OONI sessions as part of the OONI Team Meeting. The OONI Team Meeting consisted of the following sessions: * Roadmap for the next 12 months * OONI Probe Desktop: Next Steps * OONI Probe Mobile: Next Steps * OONI Explorer: Next Steps * OONI Pipeline Priorities * OONI Infrastructure: Next Steps * New OONI Probe nettests * OONI Needs * Fundraising The notes from the sessions of the OONI Team Meeting are available here: https://trac.torproject.org/projects/tor/wiki/org/meetings/2019Stockholm/No… ## Community activities ### Citizen Lab Summer Institute (CLSI) OONI's Sarath, Arturo, and Maria participated at the Citizen Lab Summer Institute (CLSI) in Toronto, Canada, between 31st July to 2nd August 2019 (https://citizenlab.ca/summerinstitute-2019/) At the CLSI, we facilitated the following sessions: 1. Presenting network measurements, the new OONI Explorer & beyond, https://docs.google.com/document/d/e/2PACX-1vQ9d__mLXzK3ngw-8YA3fvkMIQ3VMDY… 2. Censorship Measurement Campaigns: A decentralized approach to measuring and responding to internet censorship events, https://docs.google.com/document/d/e/2PACX-1vQ9d__mLXzK3ngw-8YA3fvkMIQ3VMDY… ### Blog post about OONI Redes Ayuda published a blog post (in Spanish) about OONI: https://redesayuda.org/2019/07/17/ooni-la-app-que-comprueba-en-tiempo-real-… ## Userbase In July 2019, OONI Probe was run 356,191 times from 5,090 different vantage points in 205 countries around the world. This information can also be found through our stats: https://api.ooni.io/stats ~ The OONI team. -- Maria Xynou Research & Partnerships Director Open Observatory of Network Interference (OONI) https://ooni.torproject.org/ PGP Key Fingerprint: 2DC8 AFB6 CA11 B552 1081 FBDE 2131 B3BE 70CA 417E

1 0

Anti-censorship meeting notes, 8 Aug 2019
by Philipp Winter 08 Aug '19

08 Aug '19

Are you wondering why a meeting would start with the words "just throw an ice cube in there"? You may not find an answer to this question, but you should still read our meeting logs! http://meetbot.debian.net/tor-meeting/2019/tor-meeting.2019-08-08-17.01.html ...and here's our meeting pad: Anti-censorship work meeting pad -------------------------------- Next meeting: Thursday August 8th 17:00 UTC Weekly meetings, every Thursday at 17:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress). == Goal of this meeting == Weekly checkin about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at Tor. == Links to Useful documents == * Our anti-censorship roadmap: https://storm.torproject.org/shared/knaG2lEzepdsCC21DYk4dD4hRtwcUGnXQvalH1s… * Our roadmap consists of a subset of trac tickets. * Note that there's a bug that causes the roadmap to load slowly. To work around it, first click on "All boards", and then on "ROADMAP Anti-censorship team" * The anti-censorship team's wiki page: https://trac.torproject.org/projects/tor/wiki/org/teams/AntiCensorshipTeam * GetTor's roadmap: https://dip.torproject.org/torproject/anti-censorship/gettor/boards * Tickets that need reviews: https://trac.torproject.org/projects/tor/query?status=needs_review&componen… --------------------------- ---- 8th August 2019 ---- --------------------------- == Announcements == * The ICLab folks started measuring the reachability of our default bridges from their VPN vantage points! * Psiphon expressed an interest in publishing data on their anti-censorship tool usage! == Discussion == * Sponsor 30 * timeline: https://nc.riseup.net/s/JQfpF2QY42ZxZgM * in trac: https://trac.torproject.org/projects/tor/ticket/31268 * Testing gitlab for managing roadmap https://dip.torproject.org/torproject/anti-censorship/roadmap/boards * Snowflake web extension https://trac.torproject.org/projects/tor/query?status=!closed&keywords=~sno… Anything from that list should be in our roadmap? * #31278 (checking after meeting) * #31285 (checking after meeting) * #31310 (checking after meeting) * What do we do with #31153 "Create a "tor-bridge" Debian meta package" ? * Sponsor 28 * do we resume monthly meetings? last one was June 27th. We can do one the last week of August. -> We bring updates on S28 to the weekly anti-censorshi meetings. * Do we need anything else from metrics team for #30777 - Run a "set up new bridges" campaign ? Not so far. * Snowflake migration to TPA: we can get a tp.net domain right away that points to dcf's hosts. do we want to push for TPA hosts for this soon or push it out? == Actions == * == Interesting links == * Proposed turning MASQUE into a pluggable transport: * https://mailarchive.ietf.org/arch/msg/masque/Cxh1phx6vFgn19jyANmt2YwLDqQ == Updates == FORMAT! Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week (related to anti-censorship work). Help with: - Something you may need help with. hiro: (gettor days are Thursday) - on leave This week: Next week: Past week: phw: This week (2019-08-08): * Created monthly anti-censorship team report and sent it to tor-project@ * Summarised what I learned from Nathan about censorship of Android play store and sent it to RACE list * Wrote fix to make BridgeDB distribute vanilla IPv6 bridges again * https://trac.torproject.org/projects/tor/ticket/26542 * Interacted with IETF MASQUE people, pointing them at pluggable transports * Emergency GetTor maintenance and bug fixes * Filed ticket to have TvdW's default bridge removed * His server contracting is ending with Aug 31st :( * https://trac.torproject.org/projects/tor/ticket/31357 * Improved our "set up an obfs4" bridge guide and made other guides point to it * Wasted time trying to understand odd MTU packets for a default bridge * Turns out it had a non-standard TCP MSS :( Next week: Help with: Gaba: (updated August 6th) Last week (): * s30 * roadmap This week (planned): * s28 ahf - on leave Last week: - Worked on #28930 This week: - Finished refactoring parts of #28930. Trying to figure out if we should begin the discussion on how PT's can report back on bootstrap info. - Continued to work on a tool to convert Trac tickets into Gitlab tickets. cecylia (cohosh): last updated 2019-08-08 Last week: - CLSI (31 July - 2 Aug) - PTO(5 Aug - 7 Aug) - merged #31100 (bug fix for loop in Firefox) - provided more information for #31232 (migrate snowflake infra to tpa machines) - updated snowflake webextension version - made ticket for adding a metrics collector handler to the snowflake broker (#31376) This week: - snowflake dogfood - finish windows build of pion branch (#28942 and #28942) - sequencing layer for snowflake (#29206) - /metrics handler for collector (#31376) - look at #30126 to see if there's an rbm/Golang issue we can help with Help with: catalyst: - on leave week of 07/11 (actual): - Stockholm meeting week of 07/18 (actual): - recovering from travel week of 07/25 (planned): - recovering from travel - mostly sponsor31 - preparing for extended leave starting 07/29 arlolra: 2019-08-08 Last week: - Next week: - revisions to #30310 - start looking at the suggestions in #31109 - add a build step / documentation for code reuse in cupcake - maybe more review of #31170 Help with: - dcf: 2019-08-08 Last week: - branch for Snowflake dark mode (#31170) Next week: - will be at FOCI/Usenix security Help with: - there is something wrong with Golang and the macOS SDK in #30126 that I haven't looked at yet antonela: 2019-08-08 Help with: let's sync on S30 work - what is needed on my side?

1 0

Notes from Vegas team meetings July 25th and August 1st
by Erin Wyatt 08 Aug '19

08 Aug '19

Hey Everyone, Apologies for the delay in getting Vegas meeting notes out — I just recently took over the responsibility from Karsten and I needed a minute to get up to speed. :) I have pasted the notes from two meetings below, July 25th and August 1st. Please note that starting with the August 1st notes, in response to feedback from readers of these emails who want a bit more information, we’re trying a new approach. The top of the notes will include the main topics discussed in the meeting, followed by a brief synopsis of each issue. The rest of the notes will be similar to past formats, with team leads' bullet point notes. We hope you find the new format helpful! Cheers, Erin Notes for July 25 2019 meeting: Roger: - Ola is still under essentially house arrest in Ecuador, and Chelsea is still in jail. - OFTC is getting our support requests because our contact page sends people there. Let's change the contact page to stop doing that. Gus: - State of Onion (2019) - Community Team - Going to CCC camp (August 16th - 26th) - Working in Community Portal and Sponsor9 phase 3 (remote training) Nick: - Many network team members are taking PTO in August; others are recovering from Stockholm. We've tried to roadmap accordingly. - Another alpha release should come out late this week or early next. - Continuing to try to increase my role in 1:1 fundraising isabela: - Working on giving feedback to everyone (already did with some of you) - if I don't have weekly 1:1 w/ you, Jon will contact you to schedule time for us to go over your feedback - Organizing upcoming meetings related to fundraising and preparing for the ones we had last week and are having this week - Getting Bug Smash Fund campaign organized (together with our presence at ccc-camp and defcon) - Will be in DC next week for training (30 and 31st, offline all of 31st for sure) anarcat: - post-stockholm scramble in progress, trying to figure out how to prioritize all the things on my plate that came out of the meeting - still struggling to find time to take a step back and do long term plans, considering prioritization through the "ops report card" as a stopgap http://opsreportcard.com/ <http://opsreportcard.com/> (also part of the sysadmin book - will be missing next meeting (and thu-friday this week and next week) Mike: - R&R after Tor and PETS marathon - Pondering Research Director roles list - Will complete Feedback by next week Sarah: - Working on mapping connections to major donor wishlist. - Preparing for DEF CON. Will be afk August 3 - through DEF CON (August 11) but will be checking in and reachable via email and Signal. - Preparing for fundraising meeting in DC next Wednesday. - Reseaching attendees of cryptocurrency dinner Isa will attend Friday. - BTCPayServer campaign has raised $17,663 and we should do a push to try to get to $20k in the last few days. Philipp - Anti-censorship team will attend OTF summit in Taipei (plus a pre and post event) and Citizen Lab Summer Institute - Moving forward with pluggable transport spec, BridgeDB metrics, and Snowflake + In sponsor-speak: trying to make good progress with sponsor 28 and preparing for a running start with sponsor 30 - Working with bridge operators who had troubles setting up obfs4 (refining setup guide in parallel) Steph - Preparing for the bug smash campaign. - Preparing for Def Con. Will be talking at the blockchain village on a panel about privacy. Getting printed materials ready. A volunteer is finalizing our badges. - Reviewing a post on vpns. - Preparing a pitch on Tor’s vision. - Responded to several inquiries about the FSB leak. - Finalizing the next newsletter. - Published a reflective Stockholm blog post. - Social media, social media, social media. - Will be in DC the 30 and 31, offline most of 31. Erin - Taking over Vegas meeting reminders and notes Karsten: - Handing over Vegas meeting reminders and notes. - Fighting with code dependencies related to Debian buster being declared stable. ------------>8------------>8------------>8------------>8------------>8 Notes for August 1: MAIN DISCUSSION ITEMS: Nick: +I need to offload responsibility for being our admin on the Apple development world. Logically that should go to Admin, or be shared between Browser and OONI. It will require an apple device for 2FA, which is why I would like to quit. It is tied to the execdir@ account. - Looking for trusted person to take over; trying to decide which team is best suited/most appropriate to take over or decide who will (OONI/Browser/Admin). TBD. Georg: + Our CCCamp presence in the About:freedom cluster is a thing and our talk got accepted. We need to organize that. - Hoping to get Tor shirts from Berlin, Sarah/Jon sending patches; Gus assisting with organizing; Geko organizing talk, will be asking what people want to talk about. Steph: + Where are we with Pierre's guest post? Should I get back to him or are you doing that? Anything else we need here? - GeKo is picking this up for now trying to move this forward + Getting someone from Tor to the browser vendor meetup in September - Need to put them in touch with Microsoft person and Arthur Antonela: + Arturo: how much UX capacity OONI needs the next semester? -To be determined/coordinated by Isa and Arturo Pili: + We're thinking of adapting OONI's partnership agreement for our training partners but would like some advice with regards to legal language -ewyatt will have a look and will see if we can have it reviewed by an attorney; Isa will run it by SIDA. + The blog comments layout has been broken for a while and we don't currently have Drupal expertise to fix. Should we consider moving to another blogging platform? Started writing a document on this. - It can wait until January; Gus might know some people who can fix the template in the meantime, will look into it; Pili will tt hiro when she's back from being afk. Antoine: + WIP: A how-to-get-help page (part of https://trac.torproject.org/projects/tor/ticket/30881) <https://trac.torproject.org/projects/tor/ticket/30881)> Notes: ------------>8 TEAM LEAD NOTES: Nick: 1) 0.4.1.4-rc released; waiting for any bug reports or feedback. Please let us know ASAP if something is broken! 2) Expect slow network team progress in August; many folks on vacation. isabela: 1) almost done w/ all feedback review 2) training in DC w/ coach and money machine team 3) getting ready for the bug smash fund campaign that we will launch on August 1st 4) still have some feedbacks to finished (folks were away) will ping everyone on that Sarah: 1) training in DC Wednesday 2) prepping for bug smash campaign to launch 8/1 3) prepping for DEF CON 4) BTCPayServer campaign finished and raised $18,892 5) meeting with board members and others to find connections to potential major donors 6) met with OTF to discuss next funding proposal 7) beginning to prep for YE campaign 8) afk from the 3-13th but will be checking email periodically and available on Signal Georg: 1) digging out of backlog 2) done with feedback review so far (good stuff!) 3) moving forward with getting esr68 into shape (we'll hopefully have first nightly builds early next week) Antoine: 1) weasel worked on creating a new virtual machine cluster to replacing our aging machinery 2) started working on reviewing our infrastructure, details in https://trac.torproject.org/projects/tor/ticket/30881see <https://trac.torproject.org/projects/tor/ticket/30881see> in particular https://help.torproject.org/tsa/doc/how-to-get-help/ <https://help.torproject.org/tsa/doc/how-to-get-help/> :) Antonela: 1) Back from vacs. Juggling with the backlog. 2) We ran a survey during the dev meeting about Tor Browser usage. We got 30 responses. Working on sharing the results with the lists. 3) Regular work with the anti-censorship, browser, OONI and community teams. Erin 1) Insurance renewals 2) handbook 3) HR stuff Gus: 1) Working on community portal - relay operations section 2) Joined rt this week (thanks Pili!), recruiting more volunteers to answer frontdesk and organizing an emergency plan (Cy is answering this week). 3) Helping Jon/Sarah/Steph on defcon preps 4) Writing Partnership Agreement based on OONI draft for S9 phase3 (remote training) 5) Following up with CCCamp and About:freedom cluster - https://events.ccc.de/camp/2019/wiki/Village:Tor_Project <https://events.ccc.de/camp/2019/wiki/Village:Tor_Project> Philipp: 1) Published 24 hours worth of BridgeDB metrics on tor-dev@ and got useful feedback 2) Cecylia is attending the Citizen Lab's Summer Institute in Toronto 3) Reviewed a Tor Research Safety Board submission 4) Trying to focus more on RACE (PT spec improvements and obfs5 brainstorming/experimenting) Pili: 1) S27: Monthly report and first work completion report 3) Playing with gitlab - created a number of repos and projects for UX and Community team 4) Community Portal 5) Hoping to help out with some funding proposals before the end of the week 6) Last week: Google Season of Docs candidate selection Steph: 1) Training in DC Wednesday 2) Preparing for bug smash campaign launch - tor-project announcement, press release, blog post, social media 3) Preparing for defcon next week - materials, security, coordination 4) Responding to press inquiries Gaba 1) training in DC w/ coach and money machine team 2) get up to speed from last week of being offline 3) getting the roadmap into gitlab and adjusting/testing how I think it should be used 4) we got a session about Tor accepted at the descentralized space at the mozilla festival in London at the end of October Karsten: 1) Added Tom's bandwidth file archive to CollecTor (#30219) which concludes our efforts to archive bandwidth files (#21378).

1 0

Network team meeting notes, 7 Aug 2019
by Nick Mathewson 08 Aug '19

08 Aug '19

We had our tor meeting at 2300 today, as is our custom in the first week of the month. You can read our logs here: http://meetbot.debian.net/tor-meeting/2019/tor-meeting.2019-08-07-22.59.html Here are the contents of our pad: = Network team meeting pad! = This week's team meeting is at Wednesday 7 August 2300 UTC on #tor-meeting on OFTC. We have changed the day from Tuesday to Wednesday. August schedule: * Wednesday 7 August 2300 UTC (!!!) * Monday 12 August 1700 UTC * Monday 19 August 1700 UTC * Monday 26 August 1700 UTC Welcome to our meeting! First meeting each month: Wednesday at 2300 UTC Other meetings each month: Mondays at 1700 UTC until 3 November 2019, when daylight saving time changes On #tor-meeting on OFTC. (This channel is logged while meetings are in progress.) (See https://lists.torproject.org/pipermail/tor-project/2017-September/001459.ht… for background.) Want to participate? Awesome! Here's what to do: 1. If you have updates, enter them below, under your name. 2. If you see anything you want to talk about in your updates, put them in boldface! 3. Show up to the IRC meeting and say hi! After each week's meetings, the contents of this pad will be sent to tor-project @ lists.torproject.org. After that is done, the pad can be used for the next week. == Previous notes == (Search the list archive for older notes.) 8 July: https://lists.torproject.org/pipermail/tor-project/2019-July/002390.html In-person meetings: https://trac.torproject.org/projects/tor/wiki/org/meetings/2019Stockholm/No… 22 July: https://lists.torproject.org/pipermail/tor-project/2019-July/002401.html 29 July: https://lists.torproject.org/pipermail/tor-project/2019-July/002408.html == Stuff to do every week = * Let's check the 0.4.1 release status page. See https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/CoreTor… (This page automatically shows the latest trac ticket status.) * Let's check and update the roadmap. What's done, and what's coming up? We're using a kanban board: https://dip.torproject.org/torproject/core/tor/boards * Check reviewer assignments! How reviews from last week worked? Any blocker? Here are the outstanding reviews, oldest first, including sbws https://trac.torproject.org/projects/tor/query?status=needs_review&componen… == Reminders == * Remember to "/me status: foo" at least once daily. * Remember that our current code reviews should be done by end-of-week. * Make sure you are in touch with everybody with whom you are doing work for the next releases. * Remember to fill up the 'actual point' field when you close a ticket. We need those to calculate velocity. * Check other's people call for help in their entries. * When you are overloaded, it is ok to say "no" to things. * And it is ok to reschedule things. ------------------------------- ---- 7 August 2019 ------------------------------- == Announcements == AFK reminder: catalyst will be AFK Jul 29 through Aug 18 nickm will be AFK August 12 through August 16 ahf will be AFK all of August for BornHack and CCC Camp, but will be on IRC every now and then On September there is a technical writer from Google Season of Docs starting to work with us on rewriting the Tor manual page. She will be participating in the network team meetings. Her project: https://developers.google.com/season-of-docs/docs/participants/project-tor We are moving the kanban board from storm into https://dip.torproject.org/torproject/core/tor/boards . This will help lead a plan for migration into dip.torproject.org. The release date for 0.4.1.x-stable is postponed to 20 August, so that it will come out _after_ Nick is back from vacation. Please get all 041 blockers fixed and merged if possible? == Discussion == - Technical writer: are you ok if she brings any of the issues of her project to tor-dev and the discussion is there? (the IRC channel or the mailing list? Both are fine) -ok Technical Writer man page rewrite feedback: << teor: I will copy this to some place for later. The project starts september 1st. --gaba >> https://developers.google.com/season-of-docs/docs/participants/project-tor * Tor is spelt "Tor" (the project) or "tor" (the program), not "TOR" * should we change the existing 9 categories of options in the man page? * tor command-line options belong in the man page, this is a man page convention * torrc options should have an explicit default value in the values subsection * torrc options should have an optional subsection that tells users if they can't be changed at runtime * some of the proposed changes might not be possible in nroff format (the markup format used by man pages) == Recommended links == Practical Concurrency https://www.markbernstein.org/Aug19/PracticalConcurrencySomeRu.html [OT] Remembering Toni Morrison https://www.democracynow.org/2019/8/7/remembering_toni_morrison == Updates == Name: Week of XYZ (planned): - What you planned for last week. Week of XYZ (actual): - What you did last week. Week of ABC (planned): - What you're planning to do this week. Help with: - Something you may need help with. PLEASE DO NOT BULK-DELETE THE OLD ENTRIES! Leave the "Planned" parts! Leave the parts for last week and this week! gaba: Last week (actual): . catching up . s30 . roadmap This week (planned): . s28 Help with: teor: (online first week of the month, offline at the usual meeting time) Week of 29 July (actual): - Leave until Tuesday Urgent: - travel reimbursements - backlogs: email, IRC (mostly skipped), tickets Roadmap: - add tor controller trace logging to diagnose stem hangs (#30901) - nickm suggested a simpler implementation today - bugs I found while writing the control trace code (need separate tickets) Other: - some code reviews - merged CI for pluggable transports (#29267) - other merges - IPv6 funding proposal - proposal 306 IPv6 happy eyeballs review - backport deciding - release 0.4.1 CI updates (#30835) - CI fixes Week of 5 August (planned): Urgent: - config.c refactor code review (#30914), because nickm is going away next week - triage remaining backport backlog Roadmap: - finish add tor controller trace logging to diagnose stem hangs (#30901) - try nickm's suggested a simpler implementation - split off bugs I found while writing the control trace code Other: - code reviews Week of 5 August (actual): Urgent: - config.c refactor meeting Roadmap: - worked on add tor controller trace logging to diagnose stem hangs (#30901) - found bugs in practracker, draft add files script, Other: - ticket triage - code reviews - IPv6 funding proposal - proposal 306 IPv6 happy eyeballs review Nick: Week of 29 July (planned): - More 29211 work (config.c): validation and subsystems integration. - Revise a bunch of earlier 29211 code - Revise a bunch of earlier practracker code - More practracker work - Help with any remaining roadmapping issues - Review and merge. - Backport things to 0.4.0.x? Week of 29 July (actual): - Review prop306 - Various review and merge - Revise practracker code, fix more practracker issues - Analysis for walking onions paper - Several proposal comments Week of 5 August (planned): - More review and merge - Finish august practracker work by getting may-include support - Fix several CI issues - Work on validation refactoring for #29211 (config.c). - Logs ot meetings - Try to end the week with inbox zero - Reschnedule 041-stable - Walking onions paper - Start on 0.4.1.x release notes - NOTE: I am on vacation next week! Week of 5 August (actual): - ... Week of 12 august (planned): - ON VACATION Mike (may have to leave early): Week of 7/29 (planned): - Peer reviews - Expense reports - Try to determine severity of wtf-pad log warn bugs - Define roles for Research Director position - Try not to work more than max hours for July Week of 7/29 (actual): - Peer reviews - Expense reports - Looked into wtf-pad log bugs: added more log messages; enumerated issues - Fixed a comment in https://trac.torproject.org/projects/tor/ticket/30942 - asn: plz verify my comment's claim that vanguards closing circuits for dropped cells in a testing framework is a reasonable plan week of 8/7 (planned): - Fix https://trac.torproject.org/projects/tor/ticket/30992 and/or https://trac.torproject.org/projects/tor/ticket/31343 - Clean up #30942 - Catch up on researcher and scalability related mail Need help with/at risk of dropping this month: - Need nickm and asn's input on directions for #30992 and #30942 - Teor/catalyst/dgoulet: Does our CI or test network stuff care if we have noisy protocol warns (#30942)? [It shouldn't. -nickm] - Scalability work (making tickets, running or attending meetings, proposals, etc) [don't worry about this for now. i can ping you in 1 or 2 weeks for reviewing stuff -gaba] - Deep-thought-required research project followup (masque, BGP, ECN, etc) - Private browsing meetings - Relay community drive/mgmt (and related LTS herding) - Circpad documentation + Sponsor 2 report - Firefox ESR network code review - Code reviews? catalyst: - on leave week of 07/08 (2019-W28) (planned): - travel prep - Stockholm meeting week of 07/08 (2019-W28) (actual): - travel prep - Stockholm meeting week of 07/15 (2019-W29) (actual): - travel - time off to recover from travel week of 07/22 (2019-W30) (planned): - Season of Docs selection due 07/23 - expense reports - follow up from Stockholm meeting - hand off some reviews to teor - working partial days this week asn: Week of 07/01 (actual): - Pushed #26294 branch to needs_review. - Some more thoughts on the DoS thread. - Some more thoughts on scaling thread. - Lots of hackerone activity/triaging/rewarding (#31022, #31001, plus one more not yet filed) - Finished review/merge backlog. Week of 07/08 (planned): - Triaged a few wtf-pad related tickets but need more work: #30649, #31098. - Tor meeting in Stockholm. - Allhands expenses ahf: - on leave Week of 22/7 (planned): - Do reimbursement - Go over all notes from Stockholm that seems relevant to me. - Follow up on pre-Stockholm items: - Continue figuring out some info on a potential Danish funder. - Continue with #5304 and #28930 Week of 22/7 (actually): - Did reimbursement - Went over all notes from Stockholm. - Followed up on pre-Stockholm items: - Continue figuring out some info on a potential Danish funder (postponed until they are back from vacation). - Continued work with #5304 and #28930 Week of 29/7 (planned): - Finish off #5304 and #28930 before going on vacation. - Review Roger's DEFCON slides. - Do you need any help from me before I leave? dgoulet: (offline) Week of 29 july: - Work on DoS tickets for sponsor 27. - Some scaling work as well. - Reproduce for Mike some circ padding issues on our HS DoS testbed. - Merges and review. Week of 5 august: - Did scaling work for #31340. Takes a lot of work and concentration so I rushed a lot of hours there so I can have 100% focus. - Got #15516 merged finally so I can finalize prop305 this week. - Planning to mostly finalize s27 things with the rest of the week.

1 0

service documentation refactored in wiki
by Antoine Beaupré 06 Aug '19

06 Aug '19

Hi, As part of an effort (ticket #31261) to consolidate and clarify our service documentation, I have merged the following two pages in the latter: https://trac.torproject.org/projects/tor/wiki/org/operations/Infrastructure https://trac.torproject.org/projects/tor/wiki/org/operations/services All pages previously under Infrastructure/ are now under services/. Please do not create pages under "Infrastructure" anymore and instead create them in "services". Also, help is very welcome in updating and maintaining documentation in those pages. If you see any inaccuracies or omissions, please *do* add and change things in the wiki. In particular, I suspect that the maintainers columns is seriously out of date for most services. I would also be grateful is someone could tell me what those pages are for: https://trac.torproject.org/projects/tor/wiki/org/operations/Infrastructure… https://trac.torproject.org/projects/tor/wiki/org/operations/ProductsandAss… .. and if they can be destroyed or merged into the services page. Thank you for your time, A. -- Antoine Beaupré torproject.org system administration

1 0

Tor Browser team meeting notes, 5 August 2019
by Georg Koppen 05 Aug '19

05 Aug '19

Hello! Our weekly Tor Browser meeting finished a couple of hours ago. Here comes the usual link to our IRC log: http://meetbot.debian.net/tor-meeting2/2019/tor-meeting2.2019-08-05-17.30.l… And the notes from the pads are below: Week of August 5, 2019 Discussion - OTF Browser Proposal: "Bringing Tor Browser into the mainstream" - https://pad.riseup.net/p/otf-tb-2019-2020 - brainstorm for esr migration work & its effort https://pad.riseup.net/p/otf-tb-esr-migration-brainstorm follow up meeting august 19 19:30 UTC - next browser meeting? tjr - FYI: the e10s pref has died in 68, you need to use an env var now: https://bugzilla.mozilla.org/show_bug.cgi?id=1548941 - Landed a HiDPI patch for pdfs in -central. Can anyone with hardware double check it works and I'll request backport? (pospeselr: tjr is there a linux build available with the patch applied? If not I can spin up a build locally but will take longer ;) ) (tjr: https://archive.mozilla.org/pub/firefox/nightly/2019/08/2019-08-02-09-48-35… ) (pospeselr: looks good to me: https://share.riseup.net/#fb7XRE1cWIfh-Xns08EDGQ latest stable on the left, alpha build on the right) (\o/) - For future reference: a) From the bug, look for a comment with a mozilla-central link like https://hg.mozilla.org/mozilla-central/rev/85385b4957e3 b) From there, there are lines containing 'first release with' and 'first release without' c) The 'files' link on that will take you to the Nightly build directory - https://bugzilla.mozilla.org/show_bug.cgi?id=1537955 - pospeselr: Last Week: - fixed #31251 (security level ux polish) - reviewed #18101 :( (proxy bypass in windows file dialogs) - submitted patch to mingw folks to add FOS_SUPPORTSTREAMABLEITEMS to their shobjidl.h (this got pushed to master on Thursday, though turns out it doesn't fix #18101 oh well) - began work on #31286 (network settings in about:preferences) This Week: - continue on #31286 - begin prep for sept browser workshop trip boklm (afk during meeting): Last week: - helped with building/publish 9.0a5 android release - Reviewed/improved esr 68 linux changes: latest version is in https://gitweb.torproject.org/user/boklm/tor-browser-build.git/log/?h=linux… This week: - Will be mostly afk during this week (still reading emails in case there is something important) sysrqb: Last week: Release 9.0a5 prep and testing Published Android release, 9.0a5 Rebasing and testing 68esr Android patches Began troubleshooting #31140 a little (crash on aarch64) This week: More debugging on #31140 - this seems like it is affecting many people More work on 68esr patches pili: Last week: - Meeting to divide up browser tasks - S27 Reporting (work completion and monthly report) - Helping with OTF Browser proposal - Tried to do some triage but failed - what's the best way to get a second opinion on a ticket without interrupting and forcing a context switch? This week: - Sponsor 44 admin - OTF Browser proposal - Started Sponsor 30 triage - marking things as sponsor30-can for now mainly, when I'm done I would like to review with the team to make sure they make sense under sponsor mcs and brade: Last week: - #30126 (Make Tor Browser on macOS compatible with Apple's notarization). - completed several rounds of testing. - #29197 (Remove use of overlays from Tor Launcher). - patch was submitted; reviewed by acat (thanks!) - #31300 (Modify Tor Launcher so it is compatible with ESR68). - patch and revisions were submitted; reviewed by acat (thanks!) - #30429 (ESR 68 Rebase) — rebase updater patches. - Participate in the “Georg tasks” transition effort. This week/upcoming: - #30429 (ESR 68 Rebase) — rebase updater patches. - Respond to Antonela's comments in #30237 (Onion Services client auth prompt). acat: Last week: - Pushed revised esr68 branch (#30429) - Reviewed #31300 - Reviewed #29197 - Reviewed some android patches (#31010) - Landed https://bugzilla.mozilla.org/show_bug.cgi?id=1561322 This week: (recovering from a stomach flu, hopefully should be 100% from tomorrow on, but let's see) - Finish reviewing Android patches (#31010) [sysrqb: i'm working on rebasing these commits on top of your recent branch] - Address possible review comments for #30429, and do one big style-fixing pass (eslint, clang-format). - Fix about:tor assertion failure in esr68 linux debug builds (#31322) - Backlog: upstreaming patches antonela Last week: - we ran a Tor Browser Usage survey during the dev meeting. This week: - Sharing Tor Browser Usage survey results. - Working with TB Network Settings https://www.notion.so/TB90-Network-Settings-13be33d9b7ef4a65b8039d88f29f404c GeKo: Last week: - dealt with backlog - spent some time on HackerOne bugs - tried to fix #30126 (prerequisites for macOS notarization) but there is still stuff left to do :( - reviews for esr68 nightlies: #30429, #10671, linux toolchain patches (#30736, #30376 etc.) - distracted by CCC camp submission - moved browser workshop participation in September forward - helped with 9.0a5 This week: - moar reviews - getting esr68 linux nightlies going (tentatively on Wed) - some begin of the month team admin stuff - hopefully fixing the macOS pre-notarization woes (#30126) sisbell: Last Week: - Orbot project made a lot of commits over the last week. Went through July/Aug commit and made updates to tor-android-service (branch 0801a) - Changes also include updates to include x86_64 and armv8 support for new version of tor browser. - Prepared (will submit shortly, needs a little more testing) PR to Orbot. These includes changes to keep project in sync - Updated tor-browser-build for new commit of tor-android-service This Week - Create gradle flavors to further isolate Orbot VPN code from the code we need (this deals with some firing of intents we don’t need for VPN). This will mean we shouldn’t require any patches in the future. - Start applying previous esr60 patches to esr68 Georg

1 0

Anti-censorship team monthly report: July 2019
by Philipp Winter 05 Aug '19

05 Aug '19

Tor dev meeting =============== * Many anti-censorship team members attended Tor's developer meeting. Here are the meeting notes of all censorship-related sessions: <https://trac.torproject.org/projects/tor/wiki/org/teams/AntiCensorshipTeam#…> * We talked to OONI and asked if they could measure the availability of STUN servers for us. This would help with learning where snowflake is blocked: <https://github.com/ooni/probe/issues/875> * Started working on a "censorship table" that encodes what's necessary to get Tor to work in a given country (or autonomous system). Ultimately, Tor Browser should to use this table to help its users connect to the network while minimising user interaction: <https://bugs.torproject.org/28531> * Created a ticket for an easy-to-use Tor bridge meta Debian package: <https://bugs.torproject.org/31153> We hope to be done with this before our "set up new bridges" outreach campaign. Snowflake ========= * Deployed a proxy-go instance that uses the pion WebRTC library: <https://bugs.torproject.org/28942> We're evaluating if pion could replace libwebrtc for us. * Started working on the web extension "infinite loop bug" that currently affects Firefox: <https://bugs.torproject.org/31100> * Google's "Safe" Browsing system blocked snowflake's infrastructure domains *.bamsoftware.com. This is a false positive that was apparently caused by an educational article: <https://www.bamsoftware.com/hacks/zipbomb/> We migrated to a new domain: <https://bugs.torproject.org/31250#comment:13> * Fixed <https://bugs.torproject.org/27385> (<https://snowflake.torproject.org/embed> is confusing). * Started adding localisation to user-facing snowflake components: <https://bugs.torproject.org/30310> * Progress on easier-to-see snowflake icons in Firefox's dark mode: <https://bugs.torproject.org/31170> * Revised snowflake's project page: <https://snowflake.torproject.org> Bridge operators ================ * Worked with bridge operators who had troubles getting obfs4 to work. Pluggable transports ==================== * Started fixing a number of issues in our PT 1.0 spec. Here is our canonical list of issues: <https://bugs.torproject.org/29285#comment:5> Hopefully, there will be a way to merge these fixes with the PT 2.0 spec. Here's the in-progress feature branch: <https://dip.torproject.org/phw/torspec/tree/feature/29285> * Added in-progress wiki page on retiring pluggable transports: <https://trac.torproject.org/projects/tor/wiki/doc/PluggableTransports/Guide…> BridgeDB ======== * Deployed in-progress BridgeDB metrics feature branch which will give us insight into how BridgeDB is used: <https://bugs.torproject.org/9316> Found and fixed numerous bugs and eventually published first insights into BridgeDB metrics: <https://lists.torproject.org/pipermail/tor-dev/2019-July/013953.html> * Resurrected an old ticket to expose BridgeDB's assignments file again. This would allow bridge operators to see what bucket their bridge is in: <https://bugs.torproject.org/29480> Miscellaneous ============= * Reviewed a Tor Research Safety Board submission. * Wrote a summary of the NDSS'17 paper "Dissecting Tor Bridges": <https://lists.torproject.org/pipermail/anti-censorship-team/2019-July/00002…> * Filed ticket to have a single Tor instance support, say, more than one obfs4 instance: <https://bugs.torproject.org/31228> * Summarised the MASQUE circumvention protocol: <https://lists.torproject.org/pipermail/anti-censorship-team/2019-July/00002…> * Cecylia attended the Citizen Lab's Summer Institute 2019 and PETS 2019. * Philipp will attend the OTF summit in Taiwan, and probably also potential pre and post events.

1 0

Anti-censorship meeting notes, 1 Aug 2019
by Philipp Winter 01 Aug '19

01 Aug '19

Here are our meeting notes: http://meetbot.debian.net/tor-meeting/2019/tor-meeting.2019-08-01-17.00.log… And here is our meeting pad: Anti-censorship work meeting pad -------------------------------- Next meeting: Thursday August 1st 17:00 UTC Weekly meetings, every Thursday at 17:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress). == Goal of this meeting == Weekly checkin about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at Tor. == Links to Useful documents == * Our anti-censorship roadmap: https://storm.torproject.org/shared/knaG2lEzepdsCC21DYk4dD4hRtwcUGnXQvalH1s… * Our roadmap consists of a subset of trac tickets. * Note that there's a bug that causes the roadmap to load slowly. To work around it, first click on "All boards", and then on "ROADMAP Anti-censorship team" * The anti-censorship team's wiki page: https://trac.torproject.org/projects/tor/wiki/org/teams/AntiCensorshipTeam * GetTor's roadmap: https://dip.torproject.org/anti-censorship/gettor/boards * Tickets that need reviews: https://trac.torproject.org/projects/tor/query?status=needs_review&componen… --------------------------- ---- 1st August 2019 ---- --------------------------- == Announcements == * == Discussion == * Gettor seems to be down #31307 * Roadmap: how are we doing? Is everybody ok for me to organize it in gitlab instead of storm? * trac updated it under keyword anti-censorship-roadmap: https://trac.torproject.org/projects/tor/query?status=accepted&status=assig… == Actions == * == Interesting links == * https://davidschinazi.github.io/masque-drafts/draft-schinazi-masque.html * We should at least follow the standardisation process. == Updates == FORMAT! Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week (related to anti-censorship work). Help with: - Something you may need help with. hiro: (gettor days are Thursday) This week: Next week: Past week: phw: This week (2019-08-01): * Filed #31250 for snowflake. * Filed #31252 for snowflake. * Reviewed Tor Research Safety Board submission. * Proof-read Roger's DEFCON slides. * Revised BridgeDB patch for #9316 and sent summary of preliminary results to tor-dev@. * Inspired by Karsten's feedback, thought about how to implement aggregate statistics. * Got the commit bit for the website and updated obfs4 setup guide. * Added a work-in-progress wiki page on retiring pluggable transports: * https://trac.torproject.org/projects/tor/wiki/doc/PluggableTransports/Guide… * Read new IETF MASQUE proposal and subscribed to their mailing list: * Here's a summary: https://lists.torproject.org/pipermail/anti-censorship-team/2019-July/00002… * Started working on improving flow obfuscation in obfs4: * Realised that obfs4's iat=1 mode sends 1350-byte (instead of 1500-byte) packets on both Linux and Windows? Trying to figure out why. * A little bit more work in improving PT spec based on the issues we collected: * https://trac.torproject.org/projects/tor/ticket/29285#comment:5 Next week: Help with: Gaba: (updated August 1st) Last week (): * off-line This week (planned): * hopefully will get into the roadmap * hopefully move forward organizing s30 ahf Last week: - Worked on #28930 This week: - Finished refactoring parts of #28930. Trying to figure out if we should begin the discussion on how PT's can report back on bootstrap info. - Continued to work on a tool to convert Trac tickets into Gitlab tickets. cecylia (cohosh): last updated 2019-08-01 (will try to attend, but at CLSI) Last week: - CLSI (31 July - 2 Aug) - talk preparation - checked on pion proxy and made progress towards windows build - review of #27385 and merges - review of some racecar reports/documents This week: - going to be on vacation Aug 5 - Aug 7 - snowflake dogfood - finish windows build of pion branch (#28942 and #28942) - sequencing layer for snowflake (#29206) Help with: catalyst: week of 07/11 (actual): - Stockholm meeting week of 07/18 (actual): - recovering from travel week of 07/25 (planned): - recovering from travel - mostly sponsor31 - preparing for extended leave starting 07/29 arlolra: 2019-08-01 Last week: - review of #31170 - deployed #27385 Next week: - revisions to #30310 - start looking at the suggestions in #31109 - add a build step / documentation for code reuse in cupcake - maybe more review of #31170 Help with: - dcf: 2019-08-01 Last week: - merged some refactoring for Snowflake dark mode (#31170) - reviewed proxy deadlock fix (#31100) Next week: - finish Snowflake dark mode (#31170) Help with:

1 0

June and July 2019 report for the UX team
by Antonela Debiasi 01 Aug '19

01 Aug '19

Hello Tor, S27 - Onion Services ================ - We continued working with onionsites authentication. https://trac.torproject.org/projects/tor/ticket/30237 - We shared working time with Tor Browser and Network developers during the dev meeting to discuss our next steps on this project. You can follow our design exploration by reading the relevant tickets or sneak peeking here https://trac.torproject.org/projects/tor/attachment/ticket/30281/O2.pdf S9 - User Research =============== - Gus and Narrira have been traveling through Uganda and Kenya during June and July. With these travels, we consolidated our relationship with partners in the global south community to follow our work on the next sponsor year. - We shared our first Persona work during the dev meeting. It is one of the first steps to introduce human-centered design practices on our workflow. If you didn't make the session, you could see our presentation and downloads here https://trac.torproject.org/projects/tor/attachment/wiki/org/meetings/2019S… https://trac.torproject.org/projects/tor/ticket/30430 - During the dev meeting, we distributed a survey to collect feedback about Tor Browser Usage. We will be sharing the results with the lists soonish. Also, we want to collect this kind of feedback from the broad community, so we are planning to extend this survey online. S30 - Snowflake ============ - The anti-censorship team is working on the Snowflake web extension. We worked the user interface and other design deliverables. https://trac.torproject.org/projects/tor/ticket/23888 OONI Explorer =========== - We were working on reach the stable release for the new OONI Explorer. We have been polishing UI and UX tickets. You can play with the beta here https://explorer-beta.ooni.io - All the tickets we have been working on are here https://github.com/ooni/explorer/issues?utf8=%E2%9C%93&q=is%3Aissue+label%3… Fundraising ========= - We gave support to the Fundraising team on the Bug Smash Fund and Defenders of Privacy campaigns. We provide visuals for the various platforms used for promoting them. - We published a fundraising banner at the latest Tor Browser release. https://trac.torproject.org/projects/tor/ticket/30577 Thanks, A -- Antonela Debiasi UX Team Lead @antonela E2330A6D1EB5A0C8 https://torproject.org

1 0

Smashing all the bugs
by Stephanie A. Whited 01 Aug '19

01 Aug '19

** *Hello Tor! * * Today we launched our Bug Smash Fund. Through the month of August, all donations the Tor Project receives will be marked to help us smash bugs and respond rapidly to critical security issues. Many of you have experienced why we need such a fund: this kind of work is not usually covered by sponsors or grants, so we have to divert time and funds when these kind of things happen. And we know that they will happen. So this month is an opportunity to help us prepare for smashing the bugs ahead. If you’re able to make a donation, you can do so at https://donate.torproject.org We’re reaching out to community members, press, and influencers to spread the word, and we could use your help spreading the word, too. If you are on Twitter, you can help by sharing the blog post[1], writing a tweet using one of the graphics Antonela made (which you can find on the blog and our tweets) and using the hashtag #TorBugSmash, or just by liking or RTing our posts[2] or any other positive mentions. Talking about the fund IRL with someone close to you works great, too. If you feel comfortable, writing a post that mentions your involvement can have more impact than one without. You could write something like: “Bugs happen. I’ve worked on fixing them with @torproject, and we know there will be more. You can help us be prepared for what bugs may come by making a donation this month. All donations will go towards smashing bugs. #TorBugSmash https://donate.torproject.org” As always, I’ll be watching for posts from the Tor community to engage with and support. If there’s anything related to this campaign or our work in general that I’ve missed or would be relevant for us to share, please let me know. I’m also happy to talk over something you’re considering posting if you want feedback. You can DM @torproject or me personally @walnutwordsalad, send me an email, or ping me on IRC (stephw). Cheers! Steph [1] https://blog.torproject.org/tors-bug-smash-fund-help-tor-smash-all-bugs [2] https://twitter.com/torproject/status/1156910864391262208 * -- Stephanie A. Whited Communications Director The Tor Project IRC: stephw PGP Fingerprint: E976 9771 7D46 2E63 9697 9F6D 6D6B 72C3 39A8 76AD <https://pgp.mit.edu/pks/lookup?op=get&search=0x6D6B72C339A876AD>

1 0