- tor-project - lists.torproject.org

Rhatto's Monthly Status Report, May 2025
by rhatto 04 Jun '25

04 Jun '25

Hi all :) This is my monthly status report for May 2025 with the main relevant activities I have done, was involved or are related to my work during the period: * Worked in porting a containerization and "k8sitization" patch from EOTK to Onionspray (still needs testing): https://gitlab.torproject.org/tpo/onion-services/onionspray/-/issues/68 * Onionbalance 0.2.4 uploaded to Debian trixie (thanks intrigeri and Hefee for the support!): https://gitlab.torproject.org/tpo/onion-services/onionbalance/-/issues/46 * Ongoing sponsored work with deployment, maintenance and monitoring of Onion Services. -- Silvio Rhatto pronouns he/him

1 0

sajolida's report for May 2025
by sajolida 02 Jun '25

02 Jun '25

Hi, May was short because I took 1 week off to hike volcanoes in Guatemala. Tails ===== User stories ------------ - Had a very interesting chat with John Del'Osso of PPLAAF, a whistleblowing platform in Africa, about them adopting Tails to manipulate hazardous documents received from their sources. Project 165 ----------- - Fixed the issues raised by intrigeri, jawlensky, and donuts on the upcoming improvements to the Tails website. It was really great to have complementary reviews by the 3 of them! (!2046) - Blogged about our recent audit by ROS on the previous OTF contract. https://tails.net/news/audit_by_ROS_2024/ - Clarified the design to save the language and keyboard layout on the USB stick but outside of the Persistent Storage. (#5501) https://gitlab.tails.boum.org/tails/tails/-/issues/5501 - Updated the versions of Rufus and Etcher that are served from our website for people to install Tails. (#20769) -- sajolida The Tor Project — UX Designer

1 0

PieroV's Monthly Status Report, May 2025
by Pier Angelo Vendrame 01 Jun '25

01 Jun '25

Hi everyone, Here is my status report for May 2025. It is a short one because, for half of the month, I was at an in-person meeting with the rest of the team. We will publish our notes in our wiki in the future [wiki]. Apart from that, I worked on rapid-release rebases [tor-browser#43512] for the ESR-140 transition. I rebased or reviewed several versions, which took most of my remaining time. I also prepared a first update for our toolchains in tor-browser-build [tor-browser-build!1212]. We should already be able to build reproducibly for all our desktop platforms (including Mullvad Browser for Windows, which has additional complications because of WebRTC). Android will arrive later, as Bea is working on the application-services update first. Best, Pier [wiki] https://gitlab.torproject.org/tpo/applications/wiki/-/wikis/Meetings/Gothen… [tor-browser#43512] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43512 [tor-browser-build!1212] https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/merge_re…

1 0

Anti-censorship team meeting notes, 2025-05-29
by Shelikhoo 29 May '25

29 May '25

Hey everyone! Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2025/tor-meeting.2025-05-29-16.03.html And our meeting pad: Anti-censorship work meeting pad -------------------------------- Anti-censorship -------------------------------- Next meeting: Thursday, June 5 16:00 UTC Facilitator: meskio ^^^(See Facilitator Queue at tail) Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) This week's Facilitator: shelikhoo == Goal of this meeting == Weekly check-in about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at the Tor Project and Tor community. == Links to Useful documents == * Our anti-censorship roadmap: * Roadmap:https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards * The anti-censorship team's wiki page: * https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home * Past meeting notes can be found at: * https://lists.torproject.org/pipermail/tor-project/ * Tickets that need reviews: from projects, we are working on: * All needs review tickets: * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… * Project 158 <-- meskio working on it * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/issues/?label_na… == Announcements == * == Discussion == * Happy Families https://blog.torproject.org/happy-families/ * does not solve the fundamental bridges + exits issue * there are 2 things going on * 1. Families currently ask operators to disclose the fingerprints of their other relays, that is solved by happy families * https://gitlab.torproject.org/tpo/core/tor/-/blob/36cd4a50fc9d861c6c35a0f6d… * 2. The other problem is how circuit selection works * https://gitlab.torproject.org/tpo/core/tor/-/issues/40935#note_3090023 * Tor picks exit relays first, and then picks a guard * With bridges like snowflake, conjure, and meek (i.e. publicly known bridges, where the concern about leaking fingerprints in MyFamily doesn't even apply), the client is very restricted in which entry point it can select * we have one conjure bridge and effectively one meek bridge * even though we have more than one snowflake bridge, the tor source code currently ignores family restrictions for bridges * This is a proposal for relaxed restrictions that has more recent thinking on threat models * https://spec.torproject.org/proposals/354-relaxed-restrictions.html * argues for why families and subject restrictions should not apply to circuits with bridges == Actions == == Interesting links == * == Reading group == * We will discuss "" on * Questions to ask and goals to have: * What aspects of the paper are questionable? * Are there immediate actions we can take based on this work? * Are there long-term actions we can take based on this work? * Is there future work that we want to call out in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. cecylia (cohosh): 2025-05-29 Last week: - added documentation for new snowflake timeout metric - reviewed Conjure staleness check (conjure!45) - wrote a draft call for a Conjure bridge operator (conjure#46) - worked on removing mutexes from Snowflake broker metrics (snowflake#40458) - tested and wrote feedback on unreliable transport mode (snowflake!315) This week: - support conjure work - finish testing and give feedback on unreliable transport mode for snowflake - follow up on snowflake rendezvous failures - reduce/remove use of mutexes for broker metrics (snowflake#40458) - take a look at potential snowflake orbot bug - https://github.com/guardianproject/orbot-android/issues/1183 dcf: 2025-05-29 Last week: - opined some more on a FEP design https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/lyre… Next week: - open issue to have snowflake-client log whenever KCPInErrors is nonzero https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - parent: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Help with: meskio: 2024-05-29 Last week: - test email service on the staging server (rdsys#219) - review and coordinate grants Next week: - steps towards a rdsys in containers (rdsys#219) - investigate why we don't distribute webtunnel bridges over https some days (rdsys#262) Shelikhoo: 2024-05-29 Last Week: - [Testing] Unreliable+unordered WebRTC data channel transport for Snowflake rev2 (cont.)( https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… ) testing environment setup/research - Snowfalke Staging Server Experiment - Support the Testing of domain fronting sites ( https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement/… ) (cont.) - [Merge Request] Add Domain Fronting Testing Support to logcollector ( https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement/… ) - Merge request reviews Next Week/TODO: - Merge request reviews (Away until June 10) onyinyang: 2025-05-29 Last week(s): - Attempted to get conjure DNS registrar working - encountering errors for both conjure and gotapdance cli with DNS registrar https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/conj… - hoping for an update: https://github.com/refraction-networking/conjure/issues/293 - Completed staleness check for conjure bufferedconn https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/conj… - phantombox improvement Next week: - Continue improvements for phantombox testing environment - Test DNS/Decoy registrar in phantombox Switch back to some of these: As time allows: - review Tor browser Lox integration https://gitlab.torproject.org/tpo/applications/tor-browser/-/merge_requests… - add TTL cache to lox MR for duplicate responses: https://gitlab.torproject.org/tpo/anti-censorship/lox/-/merge_requests/305 - Work on outstanding milestone issues: - key rotation automation Later: pending decision on abandoning lox wasm in favour of some kind of FFI? https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43096) - add pref to handle timing for pubkey checks in Tor browser - add trusted invitation logic to tor browser integration: https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42974 - improve metrics collection/think about how to show Lox is working/valuable - sketch out Lox blog post/usage notes for forum (long term things were discussed at the meeting!): - brainstorming grouping strategies for Lox buckets (of bridges) and gathering context on how types of bridges are distributed/use in practice Question: What makes a bridge usable for a given user, and how can we encode that to best ensure we're getting the most appropriate resources to people? 1. Are there some obvious grouping strategies that we can already consider? e.g., by PT, by bandwidth (lower bandwidth bridges sacrificed to open-invitation buckets?), by locale (to be matched with a requesting user's geoip or something?) 2. Does it make sense to group 3 bridges/bucket, so trusted users have access to 3 bridges (and untrusted users have access to 1)? More? Less? theodorsm: 2025-04-10 Last weeks: - fixing bugs in covert-dtls, only mimic DTLS 1.2 - Running proxy with covert-dtls - MR covert-dtls: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Next weeks: - Write instructions on how to configure covert-dtls with snowflake client (are we going to run a user test?) - Fix merge conflicts in MR (https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow…) - Condensing thesis into paper Help with: - Test stability of covert-dtls in snowflake Facilitator Queue: onyinyang meskio shelikhoo 1. First available staff in the Facilitator Queue will be the facilitator for the meeting 2. After facilitating the meeting, the facilitator will be moved to the tail of the queue

1 0

cve monthly status report -- May 2025
by Clara Engler 28 May '25

28 May '25

Hello tor-project@, the following contains the work I have done for The Tor Project, Inc. in May 2025. # Migration to Payroll Provider Starting on the 2nd of June, I will no longer be a contractor and instead be an employee. This also means that this will be the last status report of its kind from me, as it is a contractor thing. Besides this, nothing much will change though. I will continue to work for The Tor Project, Inc., only the way on how I get my salary will change. # oniux This month, the comms team and I wrote a blog post introducing oniux[1], which was well received across the internet. So far, it already made it into several distributions and the overall feedback has been very positive. Besides this, we released v0.4.0 and v0.5.0 of oniux, with v0.4.0 introducing a large change, namely implementing oniux in a capability free fashion by utilizing the concept of `user_namespaces(7)`. The v0.5.0 mostly contained bug fixes for some paper cuts that became evident after users reported them the moment the blog post became viral. # onionmasq This month, I finally merged a new integration test suite into onionmasq, which is no longer as flaky as it once was. Primarily, this change is of rather internal nature and probably not very interesting to users of the application. More interestingly however, I fixed a bug where onionmasq leaked resources on mobile devices, namely ticket #141. As always, I also performed various general maintainer tasks, such as fixing CI warnings and updating dependencies. # arti dircache Most of my work this month went into the technical design of the directory cache that will soon be implemented in arti. I did this with the help of Diziet and so far the progress is going great. Looking forward to start writing actual code very soon, as the database schema is more or less finished. Besides, this work also resulted in some changes within the specification, as reading them revealed some ambiguities which have been addressed appropriately. Thank You Clara [1]: https://blog.torproject.org/introducing-oniux-tor-isolation-using-linux-nam…

1 0

2nd batch of upgrades to Debian Trixie sarting on June 2nd
by Zen Fu 26 May '25

26 May '25

Hello, dear Tor folks! TPA plans to start the 2nd batch of system upgrades to Debian Trixie on June 2nd 2025, also known as "next week". This is the corresponding issue: https://gitlab.torproject.org/tpo/tpa/team/-/issues/42070 The 2nd batch is about systems with "moderate complexity", so we expect that each one may need more attention and take a bit longer than systems in the 1st batch. We're not sure about how long the whole batch will take, so please expect system reboots during the next weeks and kindly notify us if you detect that something is not right for a system that already has its checkbox marked. We will do the TPA machines first, and the Tails machines are scheduled a week later, but could be postponed further depnding on how things go. For your convenience, below there's a list of systems that will be upgraded in this batch. Thanks! ----------8<---------- 39 TPA machines: - anonticket-01.torproject.org - backup-storage-01.torproject.org - bacula-director-01.torproject.org - btcpayserver-02.torproject.org - bungei.torproject.org - carinatum.torproject.org - check-01.torproject.org - ci-runner-x86-02.torproject.org - ci-runner-x86-03.torproject.org - colchicifolium.torproject.org - collector-02.torproject.org - crm-int-01.torproject.org (blocked by #42169) - dangerzone-01.torproject.org - donate-01.torproject.org - donate-review-01.torproject.org - forum-01.torproject.org - gitlab-02.torproject.org (blocked by #42169) - henryi.torproject.org - materculae.torproject.org - meronense.torproject.org - metricsdb-02.torproject.org - metrics-store-01.torproject.org - onionbalance-02.torproject.org - onionoo-backend-03.torproject.org - polyanthum.torproject.org - probetelemetry-01.torproject.org - rdsys-frontend-01.torproject.org (blocked by #42169) - rdsys-test-01.torproject.org (blocked by #42169) - relay-01.torproject.org - rude.torproject.org (blocked by #42169) - survey-01.torproject.org - tbb-nightlies-master.torproject.org - tb-build-02.torproject.org - tb-build-03.torproject.org - tb-build-06.torproject.org - tb-pkgstage-01.torproject.org - tb-tester-01.torproject.org - telegram-bot-01.torproject.org - weather-01.torproject.org 17 tails servers: - apt-proxy.lizard - apt.lizard - bitcoin.lizard - bittorrent.lizard - bridge.lizard - dns.lizard - dragon.tails.net - gitlab-runner.iguana - iguana.tails.net - lizard.tails.net - mail.lizard - misc.lizard - puppet-git.lizard - rsync.lizard - teels.tails.net - whisperback.lizard - www.lizard -- Zen Fu

1 0

Anti-censorship team meeting notes, 2025-05-22
by onyinyang 22 May '25

22 May '25

Hey everyone! Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2025/tor-meeting.2025-05-22-16.00.html And our meeting pad: Anti-censorship work meeting pad -------------------------------- Anti-censorship -------------------------------- Next meeting: Thursday, May 29 16:00 UTC Facilitator: meskio ^^^(See Facilitator Queue at tail) Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) This week's Facilitator: onyinyang == Goal of this meeting == Weekly check-in about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at the Tor Project and Tor community. == Links to Useful documents == * Our anti-censorship roadmap: * Roadmap:https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards * The anti-censorship team's wiki page: * https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home * Past meeting notes can be found at: * https://lists.torproject.org/pipermail/tor-project/ * Tickets that need reviews: from projects, we are working on: * All needs review tickets: * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… * Project 158 <-- meskio working on it * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/issues/?label_na… == Announcements == * == Discussion == == Actions == == Interesting links == * https://www.financeuncovered.org/stories/british-norwegian-and-danish-gover… * Myanmar ISP Frontiir installed blocking equipment made by Chinese company Geedge Networks. * https://github.com/net4people/bbs/issues/369#issuecomment-2899187182 * https://blog.torproject.org/happy-families/ * happy families should allow bridges to be part of a family, so operators can run bridges and exit nodes == Reading group == * We will discuss "" on * Questions to ask and goals to have: * What aspects of the paper are questionable? * Are there immediate actions we can take based on this work? * Are there long-term actions we can take based on this work? * Is there future work that we want to call out in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. cecylia (cohosh): 2025-05-15 Last week: - submitted conjure station MR to get CDN77 domain fronting working - https://github.com/refraction-networking/conjure/pull/291 - did some pair debugging - read up on the snowflake staging environment - https://gitlab.torproject.org/shelikhoo/snowflakestaging/-/issues/1 - started testing unreliable transport mode for snowflake - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - resumed work on snowflake metrics improvements - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… This week: - support conjure work - finish testing and give feedback on unreliable transport mode for snowflake - follow up on snowflake rendezvous failures - reduce/remove use of mutexes for broker metrics (snowflake#40458) - take a look at potential snowflake orbot bug - https://github.com/guardianproject/orbot-android/issues/1183 dcf: 2025-05-22 Last week: Next week: - open issue to have snowflake-client log whenever KCPInErrors is nonzero https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - parent: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Help with: meskio: 2024-05-22 Last week: - get a test authority and bridges working for the rdsys staging (rdsys#219) - review and coordinate grants Next week: - steps towards a rdsys in containers (rdsys#219) - investigate why we don't distribute webtunnel bridges over https some days (rdsys#262) Shelikhoo: 2024-05-22 Last Week: - [Testing] Unreliable+unordered WebRTC data channel transport for Snowflake rev2 (cont.)( https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… ) testing environment setup/research - Snowfalke Staging Server Experiment - Support the Testing of domain fronting sites ( https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement/… ) (cont.) - Merge request reviews Next Week/TODO: - Merge request reviews - [Testing] Unreliable+unordered WebRTC data channel transport for Snowflake rev2 (cont.)( https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… ) improvements - Support the Testing of domain fronting sites ( https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement/… ) (cont.) - Snowfalke Staging Server Experiment(Almost Done ^~^) onyinyang: 2025-05-22 Last week(s): - Attempted to get conjure DNS registrar working - encountering errors for both conjure and gotapdance cli with DNS registrar https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/conj… - Implemented staleness check for conjure bufferedconn https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/conj… Next week: - Improve phantombox testing environment - Continue testing DNS/Decoy registrar in phantombox As time allows: - review Tor browser Lox integration https://gitlab.torproject.org/tpo/applications/tor-browser/-/merge_requests… - add TTL cache to lox MR for duplicate responses: https://gitlab.torproject.org/tpo/anti-censorship/lox/-/merge_requests/305 - Work on outstanding milestone issues: - key rotation automation Later: pending decision on abandoning lox wasm in favour of some kind of FFI? https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43096) - add pref to handle timing for pubkey checks in Tor browser - add trusted invitation logic to tor browser integration: https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42974 - improve metrics collection/think about how to show Lox is working/valuable - sketch out Lox blog post/usage notes for forum (long term things were discussed at the meeting!): - brainstorming grouping strategies for Lox buckets (of bridges) and gathering context on how types of bridges are distributed/use in practice Question: What makes a bridge usable for a given user, and how can we encode that to best ensure we're getting the most appropriate resources to people? 1. Are there some obvious grouping strategies that we can already consider? e.g., by PT, by bandwidth (lower bandwidth bridges sacrificed to open-invitation buckets?), by locale (to be matched with a requesting user's geoip or something?) 2. Does it make sense to group 3 bridges/bucket, so trusted users have access to 3 bridges (and untrusted users have access to 1)? More? Less? theodorsm: 2025-04-10 Last weeks: - fixing bugs in covert-dtls, only mimic DTLS 1.2 - Running proxy with covert-dtls - MR covert-dtls: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Next weeks: - Write instructions on how to configure covert-dtls with snowflake client (are we going to run a user test?) - Fix merge conflicts in MR (https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow…) - Condensing thesis into paper Help with: - Test stability of covert-dtls in snowflake Facilitator Queue: onyinyang meskio shelikhoo 1. First available staff in the Facilitator Queue will be the facilitator for the meeting 2. After facilitating the meeting, the facilitator will be moved to the tail of the queue -- --- onyinyang GPG Fingerprint 3CC3 F8CC E9D0 A92F A108 38EF 156A 6435 430C 2036

1 0

Applications Team IRC meeting cancelled until June 9th
by Morgan 19 May '25

19 May '25

Hi everyone, The apps team has a series of conflicts over the next few weeks, so the next regularly scheduled irc meeting will be on Monday June 19th at 1600 UTC as usual. best, -morgan

1 0

Anti-censorship team meeting notes, 2025-05-15
by Shelikhoo 15 May '25

15 May '25

Hey everyone! Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2025/tor-meeting.2025-05-15-15.59.html And our meeting pad: Anti-censorship work meeting pad -------------------------------- Anti-censorship -------------------------------- Next meeting: Thursday, May 22 16:00 UTC Facilitator: onyinyang ^^^(See Facilitator Queue at tail) Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) This week's Facilitator: shelikhoo == Goal of this meeting == Weekly check-in about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at the Tor Project and Tor community. == Links to Useful documents == * Our anti-censorship roadmap: * Roadmap:https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards * The anti-censorship team's wiki page: * https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home * Past meeting notes can be found at: * https://lists.torproject.org/pipermail/tor-project/ * Tickets that need reviews: from projects, we are working on: * All needs review tickets: * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… * Project 158 <-- meskio working on it * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/issues/?label_na… == Announcements == * == Discussion == * Testing plans for unreliable transport mode for snowflake * Requires a complex testing setup that asks for some study * k3s or kubernetes based * The testing setup is meant to be reusable beyond testing for the unreliable transport mode * It is not needed to understand the stanging environment just to deploy new branches * Use for automated deployment? It's not set up for that now, but could be. == Actions == == Interesting links == == Reading group == * We will discuss "" on * Questions to ask and goals to have: * What aspects of the paper are questionable? * Are there immediate actions we can take based on this work? * Are there long-term actions we can take based on this work? * Is there future work that we want to call out in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. cecylia (cohosh): 2025-05-15 Last week: - submitted conjure station MR to get CDN77 domain fronting working - https://github.com/refraction-networking/conjure/pull/291 - did some pair debugging - read up on the snowflake staging environment - https://gitlab.torproject.org/shelikhoo/snowflakestaging/-/issues/1 - started testing unreliable transport mode for snowflake - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - resumed work on snowflake metrics improvements - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… This week: - support conjure work - finish testing and give feedback on unreliable transport mode for snowflake - follow up on snowflake rendezvous failures - reduce/remove use of mutexes for broker metrics (snowflake#40458) - take a look at potential snowflake orbot bug - https://github.com/guardianproject/orbot-android/issues/1183 dcf: 2025-05-15 Last week: - opened issue for missing documentation for client-snowflake-timeout-count in snowflake broker-spec.txt https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - commented more on @luiz proposal for an updated FEP pluggable transport https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/lyre… Next week: - open issue to have snowflake-client log whenever KCPInErrors is nonzero https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - parent: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Help with: meskio: 2024-05-15 Last week: - learn about podman quadlets and try to make them work for rdsys (rdsys#219) - investigate (and fail to find) why some users in russia can't reach moat/circumvention settings (rdsys#264) Next week: - steps towards a rdsys in containers (rdsys#219) - investigate why we don't distribute webtunnel bridges over https some days (rdsys#262) Shelikhoo: 2024-05-15 Last Week: - [Testing] Unreliable+unordered WebRTC data channel transport for Snowflake rev2 (cont.)( https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… ) testing environment setup/research - Snowfalke Staging Server Experiment - Support the Testing of domain fronting sites ( https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement/… ) - Merge request reviews Next Week/TODO: - Merge request reviews - [Testing] Unreliable+unordered WebRTC data channel transport for Snowflake rev2 (cont.)( https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… ) improvements - Support the Testing of domain fronting sites ( https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement/… ) (cont.) - Snowfalke Staging Server Experiment(Almost Done ^~^) onyinyang: 2025-05-15 Last week(s): - Attempted to get gotapdance decoy routing working - decoy routing may be a less viable solution than we expected, waiting for more info from UC Boulder folks - Working on more straightforward improvements to bufferedconn for the time being Next week: - Continue on bufferedconn improvements and other conjure reliability improvments for Objective 2: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/conj… As time allows: - review Tor browser Lox integration https://gitlab.torproject.org/tpo/applications/tor-browser/-/merge_requests… - add TTL cache to lox MR for duplicate responses: https://gitlab.torproject.org/tpo/anti-censorship/lox/-/merge_requests/305 - Work on outstanding milestone issues: - key rotation automation Later: pending decision on abandoning lox wasm in favour of some kind of FFI? https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43096) - add pref to handle timing for pubkey checks in Tor browser - add trusted invitation logic to tor browser integration: https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42974 - improve metrics collection/think about how to show Lox is working/valuable - sketch out Lox blog post/usage notes for forum (long term things were discussed at the meeting!): - brainstorming grouping strategies for Lox buckets (of bridges) and gathering context on how types of bridges are distributed/use in practice Question: What makes a bridge usable for a given user, and how can we encode that to best ensure we're getting the most appropriate resources to people? 1. Are there some obvious grouping strategies that we can already consider? e.g., by PT, by bandwidth (lower bandwidth bridges sacrificed to open-invitation buckets?), by locale (to be matched with a requesting user's geoip or something?) 2. Does it make sense to group 3 bridges/bucket, so trusted users have access to 3 bridges (and untrusted users have access to 1)? More? Less? theodorsm: 2025-04-10 Last weeks: - fixing bugs in covert-dtls, only mimic DTLS 1.2 - Running proxy with covert-dtls - MR covert-dtls: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Next weeks: - Write instructions on how to configure covert-dtls with snowflake client (are we going to run a user test?) - Fix merge conflicts in MR (https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow…) - Condensing thesis into paper Help with: - Test stability of covert-dtls in snowflake Facilitator Queue: onyinyang meskio shelikhoo 1. First available staff in the Facilitator Queue will be the facilitator for the meeting 2. After facilitating the meeting, the facilitator will be moved to the tail of the queue

1 0

Are there countries where using Tor is illegal?
by Cristian Consonni 11 May '25

11 May '25

Hi, (Sorry if this question has already been asked in the past, feel free to point me to the relevant resources.) I know that the legal FAQs by the EFF state that: «we believe that running a Tor relay — including an exit relay that allows people to anonymously send and receive traffic — is legal under U.S. law.»[1] I also know there is a list of countries for which there is legislation that exclude communication service providers from liability. They are indicated in the Legal of the Tor Exit Guidelines page[2], they are USA, Germany, Netherlands, Austria, France, and Sweden. >From some articles in the press[3a][3b] it may be illegal - depending on how you interpret the wording[*] - to use Tor (and other technologies such as VPNs or proxies) in the UAE, with fines ranging in the millions of dirhams (hundreds of thousand of dollars). A couple of weeks ago it was discussed - on this list as well - that a law was introduced to the state parliament to ban Tor[4a][4b]. This follows a case of some months ago of a Russian Tor exit node operator being arrested for inciting mass riots and terrorism[4c][4d]. The idea of blocking VPNs or Tor seems to have already been considered in the past[4e]. This infographic about pluggable transports[5] suggests access to the Tor network is censored or limited in China, Uzbekistan, Iran, and Kazakhstan. Tor being censored orblocked may be different from it being illegal. What about other countries? Is there a place where I can find more about this topic? Cristian [1]: https://www.torproject.org/eff/tor-legal-faq.html.en [2]: https://trac.torproject.org/projects/tor/wiki/doc/TorExitGuidelines [3a]: http://www.emirates247.com/news/emirates/dh500-000-fine-if-you-use-fraud-ip… [3b]: http://news.softpedia.com/news/people-caught-using-vpns-tor-or-proxies-in-t… [*]: «Whoever uses a fraudulent computer network protocol address (IP address) by using a false address or a third-party address by any other means for the purpose of committing a crime or preventing its discovery» [4a]: https://lists.torproject.org/pipermail/tor-talk/2017-June/043293.html [4b]: https://trac.torproject.org/projects/tor/ticket/22055 [4c]: https://lists.torproject.org/pipermail/tor-talk/2017-April/043109.html [4d]: https://techcrunch.com/2017/04/24/dmitry-bogatov-tor-russia/ [4e]; https://torrentfreak.com/vpn-and-tor-ban-looming-on-the-horizon-for-russia-… [5]: https://www.torproject.org/images/PT/2016-07-how-to-use-PT.png

4 3