- tor-project - lists.torproject.org

Network team meeting notes, 8 Jan 2019
by Nick Mathewson 09 Jan '19

09 Jan '19

Hi! You can find our meeting logs here. http://meetbot.debian.net/tor-meeting/2019/tor-meeting.2019-01-08-22.58.html Below are the contents of the meeting pad = Network team meeting pad! = This week's team meeting is at Tuesday at 2300 UTC on #tor-meeting on OFTC. Welcome to our meeting! First meeting each month: Tuesday at 2300 UTC Other meetings each month: Mondays at 1800 UTC On #tor-meeting on OFTC. January schedule: * No meeting on 31 Dec or 1 Jan * Following meeting on 8 Jan 2019, 2300 UTC. * Meeting on 14 Jan, 1800 UTC * Meeting on 21 Jan, 1800 UTC * No meeting 28 Jan; (some of) the team will be at a face-to-face meeting. (This channel is logged while meetings are in progress.) (See https://lists.torproject.org/pipermail/tor-project/2017-September/001459.ht… for background.) Want to participate? Awesome! Here's what to do: 1. If you have updates, enter them below, under your name. 2. If you see anything you want to talk about in your updates, put them in boldface! 3. Show up to the IRC meeting and say hi! After each week's meetings, the contents of this pad will be sent to tor-project @ lists.torproject.org. After that is done, the pad can be used for the next week. == Previous notes == (Search the list archive for older notes.) 3 Dec: https://lists.torproject.org/pipermail/tor-project/2018-December/002117.html 10 Dec: https://lists.torproject.org/pipermail/tor-project/2018-December/002120.html 17 Dec: https://lists.torproject.org/pipermail/tor-project/2018-December/002127.html == Stuff to do every week = * Let's check and update the roadmap. What's done, and what's coming up? <-- Check who is doing what on s19 and s31 on January. url to roadmap: https://docs.google.com/spreadsheets/d/1Ufrun1khEo5Cwd6OwngERn829wU3W3eskdr… * Check reviewer assignments at https://docs.google.com/spreadsheets/d/1Ufrun1khEo5Cwd6OwngERn829wU3W3eskdr… Here are the outstanding reviews, oldest first: https://trac.torproject.org/projects/tor/query?status=needs_review&componen… Including sbws: https://trac.torproject.org/projects/tor/query?status=needs_review&componen… * Also, let's check for things we need update on our spreadsheet! Are there important documents we should link to? Things we should archive? * Check rotations at https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/TeamRot… Core Tor/sbws is now part of the bug triage, CI, and reviewer assignment roles * Let's try a different way of looking at proposed tickets: https://pad.riseup.net/p/network-team-triage-2018 0.3.5 (bugs only): https://trac.torproject.org/projects/tor/query?status=accepted&status=assig… 0.4.0: https://trac.torproject.org/projects/tor/query?status=accepted&status=assig… == General todo == Please don't edit this pad with trolly stuff; if you do, you will force us to use a private pad again, even though it will make us sad. == Reminders == * Remember to "/me status: foo" at least once daily. * Remember that our current code reviews should be done by end-of-week. * Make sure you are in touch with everybody with whom you are doing work for the next releases * Remember to fill up actual point when you finish a task (as well as "fix" the estimate when starting the issue). * Add planned PTO to the calendar https://storm.torproject.org/shared/ISA5L5nH0Xu88iqSCx9ZjCXYSMKOBTdbUeWarbd… * Check other's people call for help in their entries. ------------------------------- ---- 8 January 2019 ------------------------------- == Announcements == * Teor is bringing a proposal for proposed ticket (discussion during hackweek?). https://pad.riseup.net/p/network-team-triage-2018 * We are going to start weekly checkins on anti-censorship work starting next week. I will send a mail later about it <gaba> == Discussion == * Who needs help with reviews? Here are the outstanding reviews, oldest first: https://trac.torproject.org/projects/tor/query?status=needs_review&componen… * we need a sbws reviewer for January that is not teor. who? * Sponsor 31 in da house. Modularization proposal. We have the milestones [0] and need to add tickets and start them in January. It will be included in the roadmap creation in Brussels. [0] -> Sheet milestones of this document https://storm.torproject.org/shared/a-NKHPmkxDOuAGNaFpOrd3AIXJ4mDgIbL5sIjf4… - Who is going to be doing them? * Closing tickets. Let's briefly come to an agreement on this. (closing tickets and opening new ones if there is something remaining from the old one). * S8 tickets need to be move to some other place. Who can do it this week? * Drafting Hackweek agenda. Let's find a day to meet and create the agenda. * draft agenda https://pad.riseup.net/p/tor-netteam-agenda-hackweek-2019.1-keep * poll to decide on a date https://www.systemli.org/poll/#/poll/qm6aFNWRZP/participation?encryptionKey… * Retrospective for S8 work https://pad.riseup.net/p/14rdcvvjS5ue * Network team needs and Priorities pad for DRL funding opportunity https://storm.torproject.org/shared/cDDK_EyXoIZoiOzt3YSRo3cCme0C-JAZe5nCdvb… == Recommended links == 35c3 talk on internet history with an economics perspective https://media.ccc.de/v/35c3-10019-internet_the_business_side#t=3729 == Updates == NOTE NEW FORMAT! Name: Week of XYZ (planned): - What you planned for last week. Week of XYZ (actual): - What you did last week. Week of ABC (planned): - What you're planning to do this week. Help with: - Something you may need help with. PLEASE DO NOT BULK-DELETE THE OLD ENTRIES! Leave the "Planned" parts! Leave the parts for last week and this week! gaba: Week of 01/01 (actual): - read mails and organize work to be done by me Week of 01/07 (planned): - back into 1:1s - anti-censorship position follow up - S8 Q4 report - modularization proposal - s19 - hackweek agenda Needs help with: - getting all the tickets mark as sponsor8 out of it (close them or have them somewhere else). Some of them may go into s19. https://trac.torproject.org/projects/tor/query?status=!closed&sponsor=Spons… - please add points to the tickets you already have done (thanks dgoulet for doing it here https://trac.torproject.org/projects/tor/ticket/28020 and thanks people that added them to the spreadsheet) teor: Week of 21 Dec, 4-8 Jan (actual): High-Priority: - Sponsor 8 tasks - Ask metrics to monitor bootstrap speed - Tweak bootstrap settings to work when lots of fallbacks are down - And also on networks that drop packets Week of 7 Jan (planned): High-Priority: - PrivCount proof of concept (#29004 and related tickets) Medium-Priority: - (no sbws reviews, I need to focus on PrivCount before the hackfest) - Maybe some code reviews if I get time - Sponsor 8 tasks - are these important enough to do anyway? - Ask metrics to monitor bootstrap speed - Tweak bootstrap settings to work when lots of fallbacks are down - And also on networks that drop packets Help with: - Can anyone help with PrivCount before the hackfest? (There's some work in progress code in #29004 for review) - Who can take my code reviews if I run out of time to do them? Nick: Week of 1 Jan (planned): - ? Week of 1 Jan (actual): - Worked on stable releases, backporting, etc - Solve an android compilation issue - Merged and reviewed a bunch of code Week of 7 Jan (planned): - Stable releases 0.3.3.11, 0.3.4.10, 0.3.5.7 - 28142 review and merge wtfpad patch - Help on snowflake startup issues - revise pubsub branch, time permitting, for S31 - dgoulet: Week of 01/01 (actual): - Worked only Friday after coming back from holidays. Was all about bad-relays, emails and administrative tasks. Week of 01/07 (planned): - prop289: Authenticated SENDMEs. Working on #26840 to start with. - Discussion with arma/nickm about #26871 which lead to open #29023 that is a ticket to implement a fast PRNG. - Updated the spec for #28180, they are in needs_review. ahf (will be missing at the meeting): Since last time: Sponsor 8: - Got the big parts of s8 finished. Still missing a few spec changes. Misc: - Met with HC and Benjamin from TGP and went over what has happened since last we met that is relevant for mobile: dormant mode, memory usage, etc. Week of 1/17 (planned): Sponsor 8: - Review David's spec changes for the PT STATUS/LOG messages (#28181, #28182). - Fill out q4 report and points for s8 tickets we did in q4. Sponsor 19: - Working on a document to describe how the broker works and how the WebRTC protocol work at a high level to give people some idea about the API's used for the JS/Go proxy and the Snowflake client. - Debug an issue where the JS proxy will become idle and no data progress is made during bootstrap (and thus also after bootstrap). Misc: - Next step for sysadmin hire with Linus/Hiro. - See if there is S8 tickets that makes sense for S19(?) Mike: Since last time: - Wrote code to prevent circuitpadding from attempting to renegotiate after failure. - Did final triage of outstanding Sponsor2 padding issues. - Reviewed asn's circuitpadding tickets (#28780 and #28634) - Reviewed other tickets Week of 1/17 (planned): - Fix up issues from circuitpadding reviews - Help asn with #28780 and #28634 catalyst: week of 12/17 (2018-W51) (planned): - cleaning up orconn-tracker for review -- mostly it needs some commits detangled (mostly done, after much wrestling with interactive git rebase), and more documentation in commit messages and comments, also changelogs - assess testing situation on orconn-tracker; write new tests as needed - if there's time, work on reporting intermediate application circuit building progress during bootstrap (#27104) -- a lot of the work is already in orconn-tracker - adjusting sponsor8 tickets to better reflect reality - worked through the weekend so i might take some time off (but still reachable on Signal; IRC and email higher latency) week of 12/17 (2018-W51) (actual): - finished #27167 - opened new tickets to clean up after #27167 week of 12/24 (2018-W52) (actual): - TPI holiday week of 12/31 (2019-W01) (actual): - TPI holiday 12/31, 01/01 - reviewed some small tickets - made progress on cleaning up control-spec changes for new bootstrap phases - minor debugging on IRC of mysterious tor restarts - #28929 (typo fix for new bootstrap message) week of 01/07 (2019-W02) (planned): - finish up control-spec changes for new bootstrap phases - continue cleaning up sponsor8 bookkeeping - move relevant things from sponsor8 to sponsor19 - review more pubsub stuff as it comes up - think about more long-term stuff - ticket reviews

3 2

Tor Browser meeting, 7 Jan 2019
by Georg Koppen 08 Jan '19

08 Jan '19

Hi everyone! Yesterday we had our first Tor Browser meeting in 2019. The IRC log can be found at: http://meetbot.debian.net/tor-meeting/2019/tor-meeting.2019-01-07-18.58.log… and the notes from our pad are below: Discussion: -upcoming releases/Tor Browser 8.5 (GeKo: 1/29 and 3/19 are the next release dates; 8.5 stable could get out at the end of march then) -larger project planning: tor-launcher/torbutton -> webextensions -> inclusion in tor-browser directly (GeKo: we plan to nail down the final plan next week; mcs/brade will lead the tor launcher efforts, and igt0 and GeKo will look into Torbutton) tjr - We're going to nominate this for backport: Bug 1446472 - privacy.resistFingerprinting is true blocks QR code (canvas) on web.whatsapp.com without any notice - If Tor wants it earlier you could bring it in at your leisure - mingw-clang - Working on --enable-sandbox on esr: I thought I had this working already but I guess not. - To do this, I need to backport a bunch of build patches so I can backport pdb generation =( - Working on --enable-accessibility in -central - Hit a weird runtime failure jacek thought he fixed. - USENIX reviews taking time. But finding fun ideas to maybe do sometime in the future! - Determined a small path forward for rust code that uses networking APIs: https://bugzilla.mozilla.org/show_bug.cgi?id=1376621#c12 - I'm not certain how much different this is from Tor's current activity; but something to try... - Expected leave is end of month, could be earlier depending GeKo: -back from vacation -did stay away from my computer (mostly) -worked on the mingw-w64-clang toolchain (bug 28716) This Week: -finish up #28716 -test the mingw-w64-clang toolchain with Firefox code we ship and provide a proper patch for switching the nightly Firefox build part to it (#28238) -begin-of-the-month-admin dance -timesheets! -reviews -finally comment on the ideas in doc for #3600 -pospeselr: Can you take over the work on the security settings redesign (#25658)? I fear I will get again distracted while trying to help with TBA-a3 and other stuff and we should get the redesign into 8.5 if possible. - pospeselr: yes can do! (Great, thanks! GeKo) mcs and brade: Past three weeks: - More work on #28885 (notify users that update is downloading). - Responded to nickm's tor-dev message r.e. tor's new dormant mode. [Do we need a ticket for Tor Browser related work that needs to be done in the wake of it? - GeKo Yes. I will create a ticket. -mcs] - Provided some feedback on the Tor Browser developer job announcement draft. - Took some time off for Christmas / end of year. - Worked on end of quarter/end of year administrative tasks. - Helped a little with bug triage. This week: - Finish end of quarter/end of year administrative tasks. - Continue working on #28885 (notify users that update is downloading). pospeselr: Past N weeks: - knocked out sick for a lot of it :( - initial Tor Browser uplift sync w/ arthur, tjr, ethan, and steven - feedback from CRs: - #12885 (windows jumplists broken) - discovered we've a disk leak for all windows versions, put up a patch that will fix future clean installs and created a new issue for cleaning up upgrades - created ticket #28996 to find and delete jumplist storage files - basically to fix this on existing installs we need to scrape all the files in a particular user directory, look for 'Tor Browser' strings in them, and delete them is this sort of approach a good patch for Tor Browser or is this too 'hacky' ? (GeKo: if we can be sure just to deal with jumplist files, that's okay with me)V - #25702 (tb icon re-branding) - regarding general icon weirdness and cropping/scaling: on linux there seems to be a lot of weird window-manager specific issues surrounding how the 'Icon' entry is handled in the Tor Browser .desktop file - both gnome and cinnamon use a cropped and scaled-down version of the tb icon in some places (alt-tab, taskbar window list, window overviews) but the correct icon in others (in the file-browser) - seems to be a caching issue since the places where the icon is broken doesn't update when the source icon or the Icon entry is updated - only hypothesis around the various window-manager icon caching issues is that our self-modifying .desktop file might be fucking with things, but would need to dig deeper - general solution for the cropping issue in-browser and the installer (you can see the same cropping issue in the windows installer) is to just update the assets and give a bit of margin around the edges (Sounds good to me. I guess we should try to stay away from as many rabbit holes as we can here. :) - GeKo) #3600 (redirect cookie isolation) - synced with steven about work his team has done in this space, but disappointed to find out they don't have anything 'as well thought out as your doc' - best way forward for now seems to tjr's suggestion: "Allow Redirects, but Neuter Their Tracking Ability" This Week: - meetings meetings: uplift, release - #25702+#28546 (rebrand) : update patch to add some margin to icons to work-around the squashed circle edge issue - #25658 (security settings redesign) - look into back-porting 1446472 (Should be fair game for the next alpha due on 1/29 - GeKo) igt0: Past three weeks: - Started the UI side of Circuit display for mobile(#25764) - Vacations! This week: - Finish the UI side of the circuit display(#25764) - Integrate the circuit display UI (Java/Android) with the logic side(torbutton/javascript). (#25764) boklm: Since last meeting: - fixed some testsuite issues: #27115, #28876, #28904 - vacations This week: - continue work on testsuite (fixing all tests, or temporarily disabling them if they require more work), and binutils issue pili: - Happy new Year everyone! This week: - catching up with email - Sponsor 8 report - Looking ahead at funding proposals due in the next few months - Tor Browser Team Priorities and needs pad for DRL SOI due 2nd Feb: https://storm.torproject.org/shared/DWoSG7f1qUTdhXz1l9i7bL-SYxIe00fB_a16l44… - Starting to think about Sponsor 19 Browser related work - Tor Browser Release meeting this week - anyone we want input from that we should invite? (GeKo: maybe the fundraising folks to make sure what we should do with the banner and what should come afterwards) anto: Past N weeks: - #28329 TBA + Orbot - matt, could we sync about what is needed from me here now? - #23888 Snowflake web extension - someone in this team will/want to work/review it? (GeKo: Review should be possible; we'll coordinate what we can/should do here) sisbell: Last week: - #29003 - Investigated goptbundle integration into tor-browser-build. Did some initial work, (Pluto2/goptbundle about 1 week of work to fully integrate) - #27609 - Evaluate Tor Onion Proxy - have initial tor-browser-build project setup. - #28803 - Integrate building PT - Got patches done to build with tor-browser-builds. Created gradle downloads file. Still need goptbundle integration and packaging. This Week: - #29003, #28803 sysrqb: EOY and Last week: Worked on FastLane configuration Reviewed Google Play comments and reviews A little vacation and much family time This week: Write email about Google Play reviews and comment Open tickets for the comments, as needed Create patch for FastLane stuff At Real World Crypto (RWC) this week TBA onboarding stuff Georg

1 0

Damian's Status Report - December 2018
by Damian Johnson 07 Jan '19

07 Jan '19

Hi all! Unsurprisingly not much for December so tis a short one. https://blog.atagar.com/december2018/

1 0

Tor Browser Release Meeting: Wednesday 9th January @ 1900UTC
by Pili Guerra 07 Jan '19

07 Jan '19

Hi all, Happy new year! We will have our first Tor Browser Release meeting of the year this week: Wednesday 9th January @1900UTC over at #tor-meeting Our next release is planned for the end of January so this will be the last chance for us to consider any requests for inclusion in the release. We look forward to seeing you there :) Thanks! Pili — Project Manager: Tor Browser, UX and Community teams pili at torproject dot org gpg 3E7F A89E 2459 B6CC A62F 56B8 C6CB 772E F096 9C45

1 0

Roger missing some mail and some days next week
by Roger Dingledine 03 Jan '19

03 Jan '19

In lieu of the vegas meeting notes this week (there won't be any, as there was no vegas meeting) I'm posting two things that people might find useful about me: - I lost many of my arma(a)torproject.org mails from Dec 24 to Dec 27. So if there is something you are hoping I will read or answer, from those dates, please resend it. - I am packing up all my stuff and moving next week. I will be especially absent on Jan 8 and 9, but I will be noticeably absent on Jan 7 and 10 too. And maybe longer depending on whether Verizon screws us (that seems to be the thing that surprises every person who has moved recently :). So if there is something then that needs me, please feel free to work around me as best you can. --Roger

1 0

Fwd: [OTF-Talk] OTF is Hiring!
by isabela 22 Dec '18

22 Dec '18

-------- Forwarded Message -------- Subject: [OTF-Talk] OTF is Hiring! Date: Fri, 21 Dec 2018 09:31:15 -0700 From: Dan McDevitt <dan(a)opentech.fund> To: OTF-Talk <otf-talk(a)opentech.fund> Hey folks! OTF has an exciting job opportunity we just posted and wanted to share with you all. We’re looking for our team's next *Technology Manager / Director* to manage OTF's technical operations and be the go-to, point person for all things security. This will include managing the systems and infrastructure our team relies upon, conducting security and privacy assessments of OTF’s systems, and promoting security best practices within the OTF team, among other responsibilities. Read the full description here: https://www.opentech.fund/about/jobs/technology-manager-director/ Please feel free to help spread the word, and reach out if you have any questions. Thanks everyone and happy holidays! Dan -- Communications Coordinator Open Technology Fund | opentech.fund <https://www.opentech.fund/> Twitter: @opentechfund <https://twitter.com/OpenTechFund> *Subscribe *to OTF Today: Internet Freedom News <https://fund.us10.list-manage.com/subscribe?u=87f4d651661e6ca6ef558bce9&id=…> -- This is now the OTF-Talk mailing list (formally OTF-Projects), where past and current OTF supported projects can share information, ask questions, and more. Monthly reports should be sent to OTF-Active (the list for currently supported projects) https://groups.google.com/a/opentech.fund/d/forum/otf-active --- You received this message because you are subscribed to the Google Groups "OTF-Talk" group. To unsubscribe from this group and stop receiving emails from it, send an email to otf-talk+unsubscribe(a)opentech.fund <mailto:otf-talk+unsubscribe@opentech.fund>. To post to this group, send email to otf-talk(a)opentech.fund <mailto:otf-talk@opentech.fund>. To view this discussion on the web visit https://groups.google.com/a/opentech.fund/d/msgid/otf-talk/CAOGASDcoa3m_Rqc… <https://groups.google.com/a/opentech.fund/d/msgid/otf-talk/CAOGASDcoa3m_Rqc…>. For more options, visit https://groups.google.com/a/opentech.fund/d/optout.

1 0

Notes from December 20 2018 Vegas team meeting
by Karsten Loesing 21 Dec '18

21 Dec '18

Notes for December 20 2018 meeting: Pili: 1) Working on Counterpart International Proposal for User Testing Program in Zimbabwe 2) Sponsor 19: Started sharing tickets with the teams and doing some preliminary scheduling 3) Started organising work for gettor for early 2019 4) More updates to the Sida Phase 1 report Antonela: 1) reviewed OTF Proposal and S9 feedback docs 2) worked on snowflake 3) working on TBA + Orbot 4) wrapping november and december reports for the UX team 5) Hiro is still working on tpo.org or tpo.org/about on staging 6) working with Elio on the first iteration of wireframes for Country pages of the new OONI Explorer 7) made a draft of a PRD for Get Tor 8) my Open Source Design FOSDEM Devroom talk was accepted 9) made updates at donate.tpo.org and assets for the #oniontravels campaign Alison: 1) submitted Rightscon talk for me and Gus and others from different orgs 2) doing lots of LFI recruitment 3) Maggie is working on volunteer coordination plans 4) Maggie is also writing up what we hope will eventually become the canonical Tor vs VPN document 5) Kat is working on the second s19 report 6) Colin continued working with PIA on relay deployment and trying to resolve suspicious relay issues with OVH 7) emma helped onionshare with translations, got some more langs in the manual and on support.torproject.org staging 8) we worked on s9 follow ups Nick: 1) Scrambling to finish end-of-year stuff, including S8 and S3 reporting tasks, MOSS planning, S8 coding, and release. 2) AFAIK I have currently done everything others need for end of year, other than: * Opening tickets for initial MOSS milestones * Reviewing and responding to draft anticensorship roadmap * Code review for late-arriving code, as it arrives. * Please let me know asap if you need something not on that list. 3) I'll be storing email not addressed to me personally from Saturday through my return on Jan 2 or 3. If you need me for something from me then, please use signal or personal email. 4) Updated release plans: hoping to get 0.3.5.7 (stable) in January, along with new 0.3.3.x and 0.3.4.x releases, and the first 0.4.0.x alpha. Please make sure the network team knows if you consider any current bug to be a release blocker. 5) S8 looks to be finishing in a good state. Gaba: 1) S8 Q4 report - looked at what was done by network team and match it with objectives. 2) OONI: created tickets for one of the projects and map it to use github projects for it. 3) MOSS modularization: worked on milestones for the project with Nick and Al sent them. 4) Metrics: sent the report on collector to OTF. Before the end of the year: 1) Report on sponsor 3 2) Move s19 roadmap into something I can track. 3) Adjust the roles/responsabilites for the anti-censorship dev and lead to send to candidates. Shari: 1) Packing up my stuff from the Seattle office today. Today's my last day in the office. 2) Contacting potential major donors and asking them to give. 3) Reviewing grant proposals as needed. 4) Trying to be useful in all other ways. Karsten: 1) Published technical report "Towards modernising data collection and archive for the Tor network.": https://research.torproject.org/techreports/modern-collector-2018-12-19.pdf 2) Updated "Total consensus weights across bandwidth authorities" to only contain running relays and to also contain consensus numbers: https://metrics.torproject.org/totalcw.html 3) Updated 4 graphs containing OnionPerf data to show all sources separately rather than an aggregate number: https://metrics.torproject.org/torperf.html 4) Combined 3 graphs on consumed bandwidth into 1 graph: https://metrics.torproject.org/bandwidth-flags.html 5) Made a couple internal changes to the Tor Metrics website that will make it a lot easier to maintain in the future. Erin: 1) personnel stuff 2) tying up loose ends, getting our recruiting processes ready to be on hold for the holiday 3) office saying goodbye to Shari [sniffle, sniffle] Steph: 1) Preparing final posts and emails, planning for holiday comms. I will be online and available for much of the break. 2) I will be offline first week of Jan 3) Trying to raise $5k today through social media to reveal a surprise. 4) Working on the next newsletter so we can have it go out over the break 5) Working on 2019 comms strategy 6) Responding to press inquiries Mike: 1) Just sponsor2 dev work Sarah: 1) Reviewing grant proposals that have deadlines the first week of the year. 2) Met with DRL officers and Isa in DC yesterday. 3) Preparing a Christmas-themed blog and final YE emails. 4) Sat on a panel Monday for a Georgetown grad school class on fundraising. Drummed up interest about Tor. 5) Helping with YE campaign social media efforts. 6) Reaching out to potential major donors. 7) Preparing for a t-shirt promotion next week. 8) Working on 2019 fundraising roadmap. 9) Will be online most of next week, but might have spotty Wifi at times, so use Signal to reach me. isabela: 1) helping out with grant proposals and following up with Sida feedback on our report 2) reviewing blog posts for YE campaign 3) made the video for the challenge and also coordinated the motivation part 4) working with Sarah on fundraising roadmap 2019 5) organizing

1 0

November and December 2018 report for the UX team
by Antonela Debiasi 20 Dec '18

20 Dec '18

Hello tor, I wrapped the last two months here, so this is quite long. We joined Mozilla during All Hands in Orlando. We had insightful conversations about privacy, users and security and privacy settings. We reached a consensus about the next version of our Security Settings. With this iteration, we are trying to balance security and usability and a better understanding about what each security level trade-off is for users as well. The latest prototype allows clicks here: https://marvelapp.com/a66fg97/screen/50307815 Dunqan, an advocate designer, worked on the Onboardingto introduce our new Security Settings to users. This iteration will allow us to explain to users how security settings work and also to fix two bugs from the previous version. You can see it in action here: https://trac.torproject.org/projects/tor/ticket/28628 Tor Browser new icon implementation reached our alphas and will see the light during our stable release in TB85. Since you were part of this work, you can sneak peek how TB will look next: https://share.riseup.net/#cWuwkUMcV6fORQaj5EFYzA Wanda Arca, a designer from Argentina, made an animated version of the new TB icon, you can enjoy it here: https://share.riseup.net/#t6oppakZeK228VedKJyJTw The second alpha for Tor Browser for Android was released, and we are working towards next sprint, TBA-a3. We want to offer users a simple way to connect to the tor network and also enable censored users to decide to connect via bridges if it is needed. Some of this work is still in progress here: https://trac.torproject.org/projects/tor/ticket/28329 Elio and OONI folks are working on the new version of OONI Explorer. We iterated over the Measurement Result pages to match the concept and the layout with the recently release OONI Probe, and we are working on Country pages right now. You can see the work in progress here: https://xd.adobe.com/spec/2f585e0f-1a7e-4f6c-41f9-fa411520998e-5969/ We are planning to run usability testing in January for the new OONI Explorer Country pages. If you are a researcher or someone who use OONI Explorer a lot, we want to hear your feedback of what we are building! We joined forces with the network team to allow users to run Snowflake in more diverse ways. One of those ways will be a browser web extension. We are working on it and will be part of a huge 2019 milestone that aims to help censored users to reach the Internet. See the first intent here: https://trac.torproject.org/projects/tor/ticket/23888#comment:5 The new torproject.org is now ready for review on staging. Is still a work in progress and we aim to release it during Q119. http://lektor-staging.torproject.org/ Hiro presented Onions in Containers during DockerCon Europe 18. She talked about how .onion can grow using Docker containers and what are the benefits of doing it for end users. https://dockerconeurope18.smarteventscloud.com/connect/sessionDetail.ww?SES… And as a closure, in 2018 we released TB8 with several usability improvements, we worked on TBA to match the experience that users have in desktop, we launched support.torproject.org as the primary source for users to find answers to their questions. Also, we traveled over four countries in the global-south to raise the voices of our users and their experiences in local contexts, and we worked across teams to support them with visual, UI and UX design. As we look forward to 2019, I hope to continue offering solutions to users all over the world to reach the internet privately and safely. Happy holidays folks! A

1 0

November Communications Report
by Stephanie A. Whited 20 Dec '18

20 Dec '18

Hello Tor, Our end of year fundraising campaign was in full swing in November, and the number of posts increased across our channels. Thanks to everyone who has been helping with writing blog posts. We are trying to raise $5k today to release a surprise, so please share if you can. https://twitter.com/torproject/status/1075616816054091776 https://twitter.com/torproject/status/1075616816054091776 Nov in links and stats: Blog posts https://blog.torproject.org/strength-numbers-growing-our-board-directors https://blog.torproject.org/strength-numbers-onion-blooms https://blog.torproject.org/strength-numbers-internet-freedom-line https://blog.torproject.org/strength-numbers-community-key https://blog.torproject.org/strength-numbers-there-are-many-ways-give https://blog.torproject.org/strength-numbers-why-every-dollar-counts Twitter https://twitter.com/torproject New followers: 3,593 Top tweets https://twitter.com/torproject/status/1059523023466909697 https://twitter.com/torproject/status/1066011011772227587 https://twitter.com/torproject/status/1062712686876737536 Mastodon https://mastodon.social/@torproject New followers: 250 LinkedIn https://www.linkedin.com/company/tor-project/ New followers: 62 Facebook https://www.facebookcorewwwi.onion/TorProject New followers: 184 Instagram https://www.instagram.com/torproject/ New followers: 73 Newsletter https://newsletter.torproject.org/archive/2018-11-30-new-board-member-inter… Notable press https://motherboard.vice.com/en_us/article/zm9jd4/old-school-sniffing-attac… o/ -- Stephanie A. Whited Communications Director The Tor Project IRC: stephw PGP Key ID: 39A876AD <https://pgp.mit.edu/pks/lookup?op=get&search=0x6D6B72C339A876AD>

1 0

Network team meeting notes, 17 Dec 2018
by Nick Mathewson 18 Dec '18

18 Dec '18

Hi all! The logs of our last team meeting of 2018 are available from http://meetbot.debian.net/tor-meeting/2018/tor-meeting.2018-12-17-17.58.html Below is the state of our pad: = Network team meeting pad! = This week's team meeting is at Monday at 1800 UTC on #tor-meeting on OFTC. Welcome to our meeting! First meeting each month: Tuesday at 2300 UTC Other meetings each month: Mondays at 1800 UTC On #tor-meeting on OFTC. December-January schedule: * Next meeting on 17 Dec, 1800 UTC. * NO MEETING on 24 Dec or 31 Dec. * Following meeting on 8 Jan 2019, 2300 UTC. (This channel is logged while meetings are in progress.) (See https://lists.torproject.org/pipermail/tor-project/2017-September/001459.ht… for background.) Want to participate? Awesome! Here's what to do: 1. If you have updates, enter them below, under your name. 2. If you see anything you want to talk about in your updates, put them in boldface! 3. Show up to the IRC meeting and say hi! After each week's meetings, the contents of this pad will be sent to tor-project @ lists.torproject.org. After that is done, the pad can be used for the next week. == Previous notes == (Search the list archive for older notes.) 19 Nov: https://lists.torproject.org/pipermail/tor-project/2018-November/002074.html 26 Nov: https://lists.torproject.org/pipermail/tor-project/2018-November/002084.html 3 Dec: https://lists.torproject.org/pipermail/tor-project/2018-December/002117.html 10 Dec: https://lists.torproject.org/pipermail/tor-project/2018-December/002120.html == Stuff to do every week = * Let's check and update the roadmap. What's done, and what's coming up? url to roadmap: https://docs.google.com/spreadsheets/d/1Ufrun1khEo5Cwd6OwngERn829wU3W3eskdr… * Check reviewer assignments at https://docs.google.com/spreadsheets/d/1Ufrun1khEo5Cwd6OwngERn829wU3W3eskdr… Here are the outstanding reviews, oldest first: https://trac.torproject.org/projects/tor/query?status=needs_review&componen… Including sbws: https://trac.torproject.org/projects/tor/query?status=needs_review&componen… * Also, let's check for things we need update on our spreadsheet! Are there important documents we should link to? Things we should archive? * Check rotations at https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/TeamRot… Core Tor/sbws is now part of the bug triage, CI, and reviewer assignment roles * Let's try a different way of looking at proposed tickets: https://pad.riseup.net/p/network-team-triage-2018 0.3.5 (bugs only): https://trac.torproject.org/projects/tor/query?status=accepted&status=assig… 0.4.0: https://trac.torproject.org/projects/tor/query?status=accepted&status=assig… == Reminders == * Remember to "/me status: foo" at least once daily. * Remember that our current code reviews should be done by end-of-week. * Make sure you are in touch with everybody with whom you are doing work for the next releases * Remember to fill up actual point when you finish a task (as well as "fix" the estimate when starting the issue). * Add planned PTO to the calendar https://storm.torproject.org/shared/ISA5L5nH0Xu88iqSCx9ZjCXYSMKOBTdbUeWarbd… * Check other's people call for help in their entries. << Remember that priority is Sponsor 8 - roadmap is sort out by priority >> Activity O2.5 is the one we are missing and need to be done by the end of December 2018. ------------------------------- ---- 17 December 2018 ------------------------------- == Announcements == This week's meeting is on Monday at 1800 UTC. Please don't bulk-delete all the old entries from this pad any more. Instead, delete the "planned" and "actual" for the previous week, but leave the "planned" for this week in place. Please check the dates before deleting. Gaba> Sponsor 8 Q4 REPORT : review what you worked on in the last 3 months and add any comment on it or proposal. https://storm.torproject.org/shared/E8jZ6LwgMxa9zeyOgEye3eq6ytTaFZjCCetMYm8… Teor is bringing a proposal for proposed ticket. Please make comments in the pad and we can discuss it in the first meeting in January when Teor will be present https://pad.riseup.net/p/network-team-triage-2018 Reviewer role proposal is still open for comments. gaba> I will work on it when I have a little more time to discuss it with the team in January (we need to separte process from responsabilities). https://pad.riseup.net/p/q0s3rQxVzSeZ == Discussion == * Who needs help with reviews? Here are the outstanding reviews, oldest first: https://trac.torproject.org/projects/tor/query?status=needs_review&componen… * Sponsor 8 is wrapping up in December. Right now working on this: catalyst, ahf, dgoulet, teor, nick. Any of you need help with it? * Nick would like to do review & merge stuff this week. * Sponsor 31 in da house. Modularization proposal. We are creating activities for the milestones [0] and soon need to add tickets and incoporate some of them in January. It will be included in the roadmap creation in Brussels. [0] -> Sheet milestones of this document https://storm.torproject.org/shared/a-NKHPmkxDOuAGNaFpOrd3AIXJ4mDgIbL5sIjf4… * Start thinking about what we are going to do during hackweek. We can discuss in January https://pad.riseup.net/p/tor-netteam-agenda-hackweek-2019.1-keep * When are people taking end-of-year vacation? (When are you planning to get back?) * Nick: Dec 22 through Jan 1. Returning Jan 2 or Jan 3. * Gaba: Dec 24th through Jan 1st. Returning Jan 2nd. * ahf: Dec 24th to Jan 1st, returning Jan 2nd. * dgoulet: Sent on network-team list. == Recommended links == == Updates == NOTE NEW FORMAT! Name: Week of XYZ (planned): - What you planned for last week. Week of XYZ (actual): - What you did last week. Week of ABC (planned): - What you're planning to do this week. Help with: - Something you may need help with. PLEASE DO NOT BULK-DELETE THE OLD ENTRIES! Leave the "Planned" parts! Leave the parts for last week and this week! Nick: Week of 12/10 (planned): - Try to fix as many 035 and 040 bugs as possible - Fuzz #28755 et al via (#28808) - Reschedule 0.3.5 (and 0.4.0?) release plans. Week of 12/10 (actual): - Fuzzed and revised K=V implmentation (#28755) - Reviewed and released clusterfuzz non-issue - Opened subtickets for startup performance issue (#28481), wrote patches for most. - Final 035-rc-blocker triage - Review and merge a whole lot of stuff - Revised planned dates for releases on the wiki. Week of 12/17 (planned): - Release 0.3.5.6-rc - Brook travel to brussels. I have the dates right, yeah? Jan 29 through Feb 1? - Review and merge a whole lot of stuff - Prioritize remaining 035 issues. - Snowflake spec (begin) - Early planning on modularization stuff - Followup on the openssl tickets I opened last week (https://github.com/openssl/openssl/issues/7894, https://github.com/openssl/openssl/issues/7895 ) - End-of-year checkin with various folks - Help with S8 final reporting, if needed. - Fix scan-build warnings Want help with: Mike: Week of 12/10 (planned): - Custom 0.2.9 backport of #27049 fix? - wtf-pad unittests Week of 12/10 (actual): - Work on more tests for wtf-pad. 93.5% test coverage. Week of 12/17 (planned): - Finish up wtf-pad tests - Review wtf-pad type sizes - wtf-pad negotiation tweaks - wtf-pad mechanism to keep idle circuit open to pad Want help with: ahf: Week of 12/10 (planned): Sponsor 8: - Get some help with solving the dependency issue between src/lib/* code in patch for #28179. - Update specs for STATUS with example K/V pairs from currently deployed PT's. - Get #28179 reviewed again. Sponsor 19: - Continue to debug #28726 JS/Go proxy code. Misc: - Sysadmin interviews. Week of 12/10 (actually): Sponsor 8: - Got help with solving the dependency issue between src/lib/* code in patch for #28179 from David and Nick. - Pushed updates to #28179, pending review. Sponsor 19: - Updated my setup with lots of debug info for #28726. Misc: - Did some minor tweaks for the tor-win32 scripts (enabled CI for pushes+nightly, 64-bit builds and some fixes that asn needed to run his tests). - Sysadmin interviews. - Looked at code from some of the final anti-censorship candidates. Week of 17/10 (planned): Sponsor 8: 1. Fix whatever fixes are needed for #28179 2. Submit patches for #28846, and maybe #28849 3. Get back to #27100. - Q4 reporting. Sponsor 19: - Help if there is need with some of the spec work. - Look at the last candidates code sample. Discuss next steps. asn: Week of 12/10 (planned): - Continue doing fixups on #28142: - Currently 32-bit appveyor is failing on the stochastic prob distr tests. I'm not sure what's going on there and why it's failing only on 32-bits. I have informed Riastradh on this and see what he tells me. Other than that, maybe the tests are busted on 32-bits and we have to disable them. - I have more fixups to do based on past Nick's review on #28142. - Still need to check Mike' response on #28634. Week of 12/10 (actual): - Pushed branch with #28142 fixups!!! - Riastradh fixed the 32-bit appveyor issue. - I resolved the remaining nickm review comments on PR#461. - I pushed some spec fixes based on review comments. - Rebased and squashed the fixup branch and pushed updates on trac: https://trac.torproject.org/projects/tor/ticket/28142#comment:25 - Helped with anti-censorship hiring. - Did reviews. Week of 12/17 (planned): - Do the final steps to move #28142 to merge_ready. - Finish up with anti-censorship hiring. - Do reviews. - Maybe look at some hsv3 tasks I've been neglecting due to #28142. - Will be focusing on uni stuff on Thursday/Friday. Help with: - All good. dgoulet: Week of 12/10 (planned): - Finalize/review the STATUS notification work. Will require spec changes as well as code review. - Setup a Snowflake environment to start play with it more seriously. Week of 12/10 (actual): - Review #28755 (K/V parser library) needed for #28179. - Review a series of other tickets (see Timeline). - Patch work on couple tickets and make them ready for upstream - Busy week in the bad relay land. Week of 12/17 (planned): - Finalizing s8 work with ahf. - Do a pass over 035 tickets to see what remains after the -rc. - Memory profile of 040 so we can get some data on our improvements for sponsor 8: #28020 gaba: Week of 12/10 (actual): - S8 follow up with work that needs to be done. https://pad.riseup.net/p/qPH3xF4JaHOB - 1:1s - anti-censorship position follow up - s19: draft (with roger) of a possible roadmap for anti-censorship Week of 12/17 (planned): - S8 Q4 report - anti-censorship position follow up - move anti-censorship roadmap in some format we can use to track it & assess how much of this can be done for s19 - send mail to kickoff thinking about hackweek organizing - modularization proposal: - finish milestones/tasks to send to sponsor https://storm.torproject.org/shared/a-NKHPmkxDOuAGNaFpOrd3AIXJ4mDgIbL5sIjf4… - ping people to get proposal into track tickets help with: - what did we do in S8 tickets for Q4 2018? help me translate on what it means for what you did. catalyst: week of 12/10 (2018-W50) (planned): - CI + Coverity rotation <- nick is dong this one this week - reviews - travel request for Brussels - update detailed sponsor8 progress - more progress on orconn-tracker (#27167), specifically adding and combining circuit tracking with the work so far - get feedback on #28731 week of 12/10 (2018-W50) (actual): - made a lot of progress and have a working proof of concept for orconn-tracker (#27167) that already makes substantial improvements of behavior on what we have already - booked travel to Brussels - tried to clarify some communications of sponsor8 progress - thought a lot about existing and possible future bootstrap progress phases - figured out a way to have a single set number assignments for bootstrap phases for multiple tor configurations (for now?) week of 12/17 (2018-W51) (planned): - cleaning up orconn-tracker for review -- mostly it needs some commits detangled (mostly done, after much wrestling with interactive git rebase), and more documentation in commit messages and comments, also changelogs - assess testing situation on orconn-tracker; write new tests as needed - if there's time, work on reporting intermediate application circuit building progress during bootstrap (#27104) -- a lot of the work is already in orconn-tracker - adjusting sponsor8 tickets to better reflect reality - worked through the weekend so i might take some time off (but still reachable on Signal; IRC and email higher latency) help with: - early feedback on orconn-tracker is helpful, if you're willing to look at it before i finish commenting and documenting (code and behavior won't change very much at this point) teor (offline): Week of 10 Dec (planned): High-Priority: - Need to update the fallback directory mirrors, they are causing bootstrap issues - Ask metrics to monitor bootstrap speed - Tweak bootstrap settings to work when lots of fallbacks are down - And also on networks that drop packets - Continue to work on s8 bootstrap tickets - integration testing for clock skew? - chutney CI - earlier s8 bugfixes Medium-Priority: - up to 1 day of sbws reviews - Metrics job applications - Code reviews Week of 10 Dec (actual): High-Priority: - Sent network team meeting time email to tor-dev, because we're back to our regular schedule - Sent pad and meeting notes to tor-project - Need to update the fallback directory mirrors, they are causing bootstrap issues - Did the fallback list merge (thanks Phoul!) Medium-Priority: - 1.0 days of sbws reviews - Metrics job applications - Other code reviews - Took a few days off due to illness Week of 17 Dec (planned): High-Priority: - Sponsor 8 tasks - Ask metrics to monitor bootstrap speed - Tweak bootstrap settings to work when lots of fallbacks are down - And also on networks that drop packets - Continue to work on s8 bootstrap tickets - integration testing for clock skew? - chutney CI - earlier s8 bugfixes - Send reminder emails for team meetings at: 2300 UTC on Tuesday 8 January 2019, 1800 UTC on Mondays 14 and 21 January, miss 28 January and 4 February due to hackfest/FOSDEM our first February meeting 2300 UTC on Tuesday 11 February Medium-Priority: - up to 1 day of sbws reviews - Metrics job applications - Code reviews - I might need to take some more time off Week of 17 Dec (actual): Help with: - If there's anything I urgently need to do this week, please send me a Signal message or email juga (offline): - Week 12/10 (planned) - disable connection padding in sbws' Tor (#28692) - Try enabling predicted circuits (#28701) - Explain reasons why sbws might stall and find out more (#28663) - send scanner metadata as part of every HTTP request (#28741) - Week 12/10 (actual) - disable connection padding in sbws' Tor (#28692) - Try enabling predicted circuits (#28701) - Explain reasons why sbws might stall and find out more (#28663) - send scanner metadata as part of every HTTP request (#28741) - Make info level logs more clear and consistent (#28736) - Stop allowing destination serving files without tls (#28789) - Week 17/10 (plan) - continue working on why sbws stalls and all the related subtasks (#28663) - Help with: - sbws tickets needing review: https://trac.torproject.org/projects/tor/report/72

1 0