- tor-project - lists.torproject.org

Next Tor Browser Release meeting: Wednesday 27th February @ 19:00 UTC
by Pili Guerra 26 Feb '19

26 Feb '19

Hi everyone, Just an email to let you know that there’ll be NO Tor Browser Release meeting next week. Instead our next meeting will be on Wednesday 27th February @1900UTC over at #tor-meeting on OFTC. I will send a reminder email closer to the time. Thanks! Pili — Project Manager: Tor Browser, UX and Community teams pili at torproject dot org gpg 3E7F A89E 2459 B6CC A62F 56B8 C6CB 772E F096 9C45

1 1

User Feedback Report - January 2019
by Maggie 26 Feb '19

26 Feb '19

Hey, team! Welcome to the January 2019 user feedback report! I hope 2019 is treating you well so far. For more information on what users and community members were talking about this month, check out the December 2018/January 2019 User Feedback pad [1]. TL;DR: There were a bunch of releases this month, and a few user bug reports in the blog post comments. Reddit was about the same as always (with a focus on VPN and fingerprinting questions), and RT brought in a lot of questions about problems connecting with bridges. - The question I see most often across platforms is 'why can't I connect to Tor?'. I think we should provide more information to users when they run into problems connecting. Ideally, we would implement error messages that let users know exactly what's wrong, and what they can do to fix it. Until then, it would be very useful to have a guide to finding and understanding Tor logs. I've opened a trac task for this [2]. I will need some assistance from the browser/applications team, so if you're able/willing to help teach me how to read these logs better, please reach out! - Reddit is mostly full of the same questions we saw last month (i.e. 'will doing x allow me to be fingerprinted?' & 'my bridges aren't working - what do I do?'). Hopefully the second problem can be addressed by the Tor log document proposed above. - Tor is still broken for screen readers. I've been receiving some messages about this in RT from folks affected by the issue. They're having to use TB 7 instead of TB 8, since updating breaks screen reader compatibility. Now, on to the feedback! Scroll further down to see a summary of Reddit posts, some points from Google Play Store reviews, a list of the most common Stack Exchange tags from the month, and a collection of some notable issues and bugs mentioned by users in January. --- Most common questions on Reddit: - Will doing _____ allow me to be fingerprinted? - Why can't I connect/why aren't my bridges working? One Reddit user is having a lot of trouble connecting from Turkey [3]. --- TBA Reviews & Feedback on Google Play Store: The average review score is still at 4.2 stars. Some people are a bit confused about bridges - it seems they don't know what to do once they run into connection issues. We should provide some more guidance, perhaps in the form of links to information about bridges. Some users were still experiencing crashes in January when saving files, as well. --- Most common stack exchange tags: configuration: 20 this month tor-browser-bundle: 15 this month connection: 11 this month hidden-services: 7 this month relays: 7 this month --- Notable bugs, fixes, & issues: #27503 [4] - Disabling accessibility on Windows breaks screen readers - OPEN #29238 [5] - TBA: Prevent crash following upgrade - OPEN #28705 [6] - Tor Browser on Android is crashing on newer Android devices (>= Android N) by file download - CLOSED #29175 [7] - Tor 0.3.5.x mishandles empty socks5 auth - CLOSED #29327 [8] - TypeError: hostName is null on about:tor page - CLOSED --- Other user suggestions: - "I want to suggest making a personalized .iso distro for people that want to run relays...We should be able to download something that is already configured with everything you need software wise to run the relay. The only thing we should have to do is open up the correct ports for port forwarding in our router. If this was procedure, I think there would be many more relays and exit nodes than there are." - "I understand why you've rolled Orbot into TB, but can you add an option to use the "legacy", separate Orbot into the settings? I used to have TB as the default browser on my 'droid, but now that every time I open it I have to sign into a second instance of Orbot (as a big chunk of traffic from my phone is Torified, I have Orbot on all the time) - since this takes a long time, I've resorted to using Firefox Klar/Focus." - "I want to set Tor Android Alpha to clear all personal data on exit so I went to Privacy -> Clear private data on exit. It works except for Downloads, which get un-ticked every time I re-launch Tor. It's probably a minor issue as other things like history and cookies do get cleared and stay like that. Although to be honest it would be nice to just have a single setting for always-on Private Tab whenever I launch Tor." (notably, I have not been able to reproduce the issue they describe with Download privacy settings resetting after a restart.) --- That's it for the month of January! If you want to know more, please do check out the December 2018/January 2019 User Feedback pad [1] or reach out to me via email (waywardwyrd at riseup dot net) or IRC (wayward). Before signing off, I'll leave you with this gem of a post [9]. Thanks for reading! I'll see you all back here next month! - wayward/Maggie pronouns: she/they | twitter: @meochaidha <https://www.twitter.com/meochaidha> pgp: 0626 9C68 D0CC 1A5B E41B 72F2 615E B878 975C 4CDC ------ Annotations: 1. https://storm.torproject.org/shared/CsGcDVAvB32NeawrrziFcprx22gp9EjUscJ61hm… 2. https://trac.torproject.org/projects/tor/ticket/29584 3. https://www.reddit.com/r/TOR/comments/alecre/turkey_cannot_connect_to_tor_w… 4. https://trac.torproject.org/projects/tor/ticket/27503 5. https://trac.torproject.org/projects/tor/ticket/29238 6. https://trac.torproject.org/projects/tor/ticket/28705 7. https://trac.torproject.org/projects/tor/ticket/29175 8. https://trac.torproject.org/projects/tor/ticket/29327 9. https://www.reddit.com/r/TOR/comments/akqh58/when_i_think_of_tor/

1 0

Tor Browser meeting notes, 25 Feb 2019
by Georg Koppen 25 Feb '19

25 Feb '19

Hi everyone! Our weekly Tor Browser meeting just finished. Here come the link to the IRC log (http://meetbot.debian.net/tor-meeting2/2019/tor-meeting2.2019-02-25-18.29.l…) and, as usual, the contents of our meeting pad: Week of February 25, 2019 Discussion: - Brainstorming dev meeting invites - is there anyone that we're working with a lot that we want to make sure is invited? - Tor Browser dev hiring process - Tor Browser vision exercise part II scheduling (GeKo: presumably on Friday 3/1 1900 UTC; pili nails that down) boklm: Since last meeting: - helped with publishing of the new releases, signing of the alpha, and following blog comments - reported #29476 (Add RecommendedTBBVersions to the new website) - reported #29550 (Tor nightly fails to build for Windows) - reviewed #25849 (Ship tor in Tor Browser nightly builds for Windows with Rust enabled) - fixed #29556 (nightly builds and testsuite emails) - reviewed #27210 (TBA - Support i386 target) - made patch for #29579 (Fix typo in projects/tor/build) - made patch for #28685 (Tor Browser for Android needs a more dynamic Build ID) This week: - try to finsh patch for #26323 (Build 32bit Linux bundles on 64bit systems) - continue work on testsuite - some reviews - look at CVs of browser developer candidates mcs and brade: Last week: - Made progress on #28044 (Integrate Tor Launcher into tor-browser). - Finished #27486 (Onboarding: "Visit an Onion" creates an "about:blank" loading page) - Debugged #29497 (After tor crash, firefox.exe shoots up to 50+% cpu usage) - Provided feedback on the browser developer hiring criteria (brade) and on some of the candidates (mcs). - Helped with triage of incoming bugs. This week/soon: - Make patches available for #28044 (Integrate Tor Launcher into tor-browser). - #29430 (meek-lite support in TL) - Review the Firefox updater security audit report. sisbell: Last week(s): - 29080: PR for TOPL accepted and merged - 29312: Create tor-browser-build for TOPL (in review) - 29313: Create tor-browser-build for tor-android-service (in review). Involved additional changes to packaging and proguard use. Made tor-android-service gradle build more configurable. This replaces orbotservice - 29574: Modify Orbot project in tor-browser-build to use TOPL (in review) - 29575: Create tor-browser-build for Firefox with TOPL libraries (in progress). - Resolving some issues around duplicate classes in dependencies. This Week: - 29575 - complete this - Testing APK - Start looking at changes of new Orbot UI to see what changes may need to be made pospeselr: Last week(s): #seattle-snowmagedeon2019 - built snowman - fell on ice - snow in the eyes - made a custom build for pili and antonella with #25658 changes - filed #29554 (about:preferences links do not function properly, needed for #25658) - most of the way done with #25658 - built alpha builds; a bit of a shit-show as i686 linux refuses to build on my machines - boklm: I neglected this a bit to focus on getting pili's macos build out, but everything matches on my end apart from the macos mar-tools (which doesn't quite seem right, given that all the other macos builds match) This week: - tonight! upoad macos mar tools file for boklm diff - uplift #29120 (neglected this one last week) - get a patch up for #25658 - hopefully fix #29554 GeKo: Today: - started to cut down my backlog - reviewed #29759 - wrote patches for #27210 and #29467 This week: - more backlog cutting down - reviews and help with mobile work - release prep (hopefully) - new month team admin stuff pili: Last week: - Mainly security settings user testing in India! This week: - Tor Browser release meeting - Tor Browser vision exercise part II - Organising and sharing India user testing and workshop notes - Onion Services proposal got accepted by OTF! - NLNet proposal for ESR migration got through to the second round Antonela: Last week: - Testing TBA - Preparing TB usability research in India and Indonesia This week: - #29440 - Update about:tor when Tor Browser is updated - Could we have some of these bridge decisions in TBA? sysrqb, sisbell, igt0, geko? [GeKo: yes, this sounds like something we should consider and build upon Anto: Awesome] https://lists.torproject.org/pipermail/tor-dev/2019-February/013708.html - Start digesting user research from India sysrqb: Last weeks: Put #28329 in review (TBA bootstrapping) Reviewed (most) TOPL patches Nearly have a F-Droid build ready for submission Worked on fastlane integration and auto-generating screenshots This week: Finish F-Droid submission patch Continue work on fastlane integration Review other tba-a3 tickets Georg

1 0

Update on Tor Meeting - where & when
by isabela 23 Feb '19

23 Feb '19

Hello Tor, I just want to share that we will be partnering with KTH Royal Institute of Technology in Sweden for our first Tor Meeting in 2019. It will take place in Stockholm and dates are July 11 to 15, where: * July 11 - people arrive * July 12 - meeting day * July 13 - meeting day * July 14 - meeting day * July 15 - people leave This meeting will have 3 days, not 5. This is not a change that will affect other Tor meetings, we are doing this just for this one to keep ourselves on budget. I will be sharing more information about the meeting, and what we are hoping to do that is open for the public since there won't be open days. You might have notice that our meeting is ending right when PETS[1] starts (in the same place). I will be sharing more information as we get things organized. Cheers, isabela [1] https://petsymposium.org/2019/index.php

1 0

Problems fetching Debian package archive signing key (0xEE8CBC9E886DDD89)
by Matthew Finkel 22 Feb '19

22 Feb '19

Hi All, Someone reported difficulty with retrieving 0xEE8CBC9E886DDD89 from the key servers. It seems this is only affecting some of the keyservers (but I don't know which ones because load-balancing). I was able to reproduce it, but not consistently. $ gpg --recv-key A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 gpg: packet(13) too large gpg: read_block: read error: Invalid packet gpg: no valid OpenPGP data found. gpg: Total number processed: 0 This error seems suspiciously similar to this sks-keyserver bug[0]. If anyone has any ideas of how we should troubleshoot or fix this, that'd be helpful. - Matt [0] https://bitbucket.org/skskeyserver/sks-keyserver/issues/57

4 5

Notes from February 21 2019 Vegas team meeting
by Karsten Loesing 22 Feb '19

22 Feb '19

Notes for February 21 2019 meeting: Pili: 1) Travelling around India meeting lots of great people 2) Security Settings user testing 3) Organising Outreachy projects and mentors 4) Working on finalising illustration ideas for website Nick: 1) new Tor releases coming out today for 0.3.3.x and later. Fixing a medium-severity security issue. Probably no need for anybody to worry -- just upgrade to be safe. 2) 0.4.0.x is triaged. If there is a ticket not in the "Tor 0.4.0.x-final" milestone that you need fixed in 0.4.0, please let the network team know ASAP. Scheduled release date is April 15, so we need to aim for rc status around March 25. 3) Working on a draft proposal to make onionbalance workable with v3 onion services; getting feedback from dgoulet and asn 4) Trying to get Chutney into CI. Sarah: 1) Looking for donors to sponsor Outreachy interns. Will send an email to a segment of past donors. 2) Working on a welcome email for people who join the email list. 3) NLnet ESR migration proposal moving onto the next round of review. 4) NLnet metrics proposal not accepted so we are looking for other grant opportunities for this work. 5) Creating Fundraising Team Wiki with sections for past YE campaigns. 6) Helping with second phase of Handshake funding. Antonela: 1) Put Open Collective in touch with Sarah 2) Working with Pilar on the Outreachy call for a Frontend Dev intern, project Styleguide 3) Working with Hiro on tpo.org issues 4) Working with Caroline on Q1 user research 5) Coordinating user research in Indonesia with emmapeel and gus 6) Wrapping outreach material 7) Reviewing Country Pages with Elio. Planing next steps on the Explorer revamp. isabela: 1) organizing ED tea time for March 21st, Thursday, 1400 UTC time 2) working with fundraising team and comms team on different projects 3) working w/ sue on our answers to the auditing finding docs, budget for travel, budget for dev meeting 4) preparing FY budget for July2019/June2020 Steph: 1) Chatted with Mozilla about the internet health report. They’ll be sending over some questions for us to answer. 2) Planning possible DEF CON booth submission, going over details 3) Talk was accepted to LibrePlanet. Waiting to hear about more details about having a booth 4) Editing website copy and brainstorming/reviewing illustrations 5) Planning upcoming content 6) Working with Pili to apply for a comms intern through Outreachy 7) Press inquiry. Karsten: 1) Discussed OnionPerf failures and timeouts with network team folks and spotted a few starting points for fixing things towards improving user-perceived performance. Mike: 1) Circuitpadding work 2) QUIC and other performance+scalability discussions via email Sue: 1) Working on audit 2) Disbursements and Payroll Processing 3) General Accounting stuff Gaba: 1) metrics: sent report for jan for s13 2) network team: - reading processes - trying to calculate capacity per sponsor/release 3) anti-censorship team: commenting on report from kat 4) ooni: reviewing hiring process for backend dev

1 0

Network team meeting notes from 19 Feb 2019
by Nick Mathewson 21 Feb '19

21 Feb '19

Hi! Our logs are available at http://meetbot.debian.net/tor-meeting/2019/tor-meeting.2019-02-19-17.58.html Below are the contents of our pad: = Network team meeting pad! = This week's team meeting is at Tuesday 19 February at 1800 UTC on #tor-meeting on OFTC, because Monday is a US public holiday. Welcome to our meeting! First meeting each month: Tuesday at 2300 UTC Other meetings each month: Mondays at 1800 UTC On #tor-meeting on OFTC. February schedule: * Monday 11 February at 1800 UTC * Monday 18 February at 1800 UTC Tuesday 18 Feburary at 1800 UTC (moved because of holiday) * Monday 25 February at 1800 UTC March schedule: * Tuesday 5 March at 2300 UTC (This channel is logged while meetings are in progress.) (See https://lists.torproject.org/pipermail/tor-project/2017-September/001459.ht… for background.) Want to participate? Awesome! Here's what to do: 1. If you have updates, enter them below, under your name. 2. If you see anything you want to talk about in your updates, put them in boldface! 3. Show up to the IRC meeting and say hi! After each week's meetings, the contents of this pad will be sent to tor-project @ lists.torproject.org. After that is done, the pad can be used for the next week. == Previous notes == (Search the list archive for older notes.) 8 Jan: https://lists.torproject.org/pipermail/tor-project/2019-January/002155.html 14 Jan: https://lists.torproject.org/pipermail/tor-project/2019-January/002170.html 22 Jan: https://lists.torproject.org/pipermail/tor-project/2019-January/002184.html 11 Feb: https://lists.torproject.org/pipermail/tor-project/2019-February/002214.html == Stuff to do every week = * Let's check and update the roadmap. What's done, and what's coming up? We're using a kanban now: https://storm.torproject.org/shared/_mx8PMGOHFBOximocl1gy3COvhLPr6k3Ja7JA1v… * Check reviewer assignments! Here are the needs-review tickets, by reviewer: https://trac.torproject.org/projects/tor/query?status=needs_review&reviewer… Here are the outstanding reviews, oldest first: https://trac.torproject.org/projects/tor/query?status=needs_review&componen… Including sbws: https://trac.torproject.org/projects/tor/query?status=needs_review&componen… * Also, let's check for things we need update on our spreadsheet! Are there important documents we should link to? Things we should archive? * Check rotations at https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/TeamRot… Core Tor/sbws is now part of the bug triage, CI, and reviewer assignment roles == Reminders == * Remember to "/me status: foo" at least once daily. * Remember that our current code reviews should be done by end-of-week. * Make sure you are in touch with everybody with whom you are doing work for the next releases * Remember to fill up actual point when you finish a task (as well as update the estimate when starting the issue). * Add planned PTO to the calendar https://storm.torproject.org/shared/ISA5L5nH0Xu88iqSCx9ZjCXYSMKOBTdbUeWarbd… * Check other's people call for help in their entries. ------------------------------- ---- 19 February 2019 ------------------------------- == Announcements == - Onion Services proposal was accepted and we are starting with it on April. We will probably do only minimal work on it until S19 is done, though. - The master branch is now 0.4.1.x; 0.4.0 development will continue in maint-0.4.0. == Discussion == === Release Planning === * Teor wants the trac milestones to be smaller, so we can actually do most of the work in the milestones. How does everyone feel about that? << I think it would be useful to discuss Teor's thoughts when Teor is in the room >> [[+1 but if we're going to do that we should have a plan to schedule such a discussion]] << Yes >> Is it a useful goal? What can we do differently, so we have better milestones? What is one thing that we can change in the next month? Here are our release planning notes from Brussels: https://trac.torproject.org/projects/tor/wiki/org/meetings/2019BrusselsNetw… In December 2018, teor suggested a new process, but it didn't work out: https://pad.riseup.net/p/network-team-triage-2018 === Policy planning === * We don't have a great way to set and adopt development/support policies. How would we feel about this: Let's have policies start out as "draft". If we think a policy could maybe work out, let's call it "experimental", post it publicly, and try it out for a limited amount of time. And then let's see whether we need to amend it or adopt it or discard it entirely based on network-team rough consensus. == Recommended links == Signal uses fixed-size, overlapping range requests to hide the exact length of its previews: https://signal.org/blog/i-link-therefore-i-am/ Could we use a similar technique in Tor Browser to hide sizes from the network? (The application and the remote site know the real size. Everything else just sees fixed-size HTTPS.) How teams produce great outcomes (a long read, but a good one): https://the-composition.com/the-origins-of-opera-and-the-future-of-programm… == Updates == NOTE NEW FORMAT! Name: Week of XYZ (planned): - What you planned for last week. Week of XYZ (actual): - What you did last week. Week of ABC (planned): - What you're planning to do this week. Help with: - Something you may need help with. PLEASE DO NOT BULK-DELETE THE OLD ENTRIES! Leave the "Planned" parts! Leave the parts for last week and this week! gaba: Week of 02/11 (actual): - get roadmap into the wiki - gathering documentation on software development practices at the network team <-- if you have anything documented send it my way Week of 02/19 (planned: - look at releases estimation - look at processes and make a proposal on decision making (so far all documentes found here https://gitlab.com/gabelula/tor-documentation-processes) teor: (offline) Weeks since hackfest: - FOSDEM - Travel - Time off for extra hours during travel and hackfest - Answering some urgent emails Week of 18 Feb (planned): Roadmap Coding (3 days per week): - PrivCount proof of concept (#29004 and related tickets) - unit tests for extra-info documents (#29018) Other: - Reviews - Email, IRC, and ticket backlog - Finish travel reimbursements - Ask metrics to monitor bootstrap speed (from Sponsor 8, but worth doing anyway) - If we get bad results, tweak bootstrap settings to work: - when lots of fallbacks are down, and - on networks that drop packets (deferred from Sponsor 8, we'll only do it if it is necessary) Week of 18 Feb (actual): Roadmap Coding (3 days per week): - Finished #29017 - stats bug fix - Almost finished #29018 - stats bug fix, refactor, and unit tests for extra-info documents (PrivCount preparation) Other: - A little bit of post-travel admin Help with: These unit test errors are new in master: (I found them on macOS using clang) #29527 - Division by zero: undefined behaviour in circuitpadding/circuitpadding_sample_distribution test (mikeperry is on this one) #29529 - util/map_anon_nofork test fails on macOS (nickm is on this one) #29530 - Some address/get_if_addrs* tests fail when the network is unreachable [when did this start?] I still have 1 coding day left this week. I'd like to do #27162 (rust versions CI) next, but let me know if there's something urgent I could do. Nick: Week of 11 Feb (planned): - Identify remaining 040-must stuff - Fix some 040-must bugs; defer other 040 stuff. - Write a proposal about correct way to do onionbalance in v3 onion services - Maybe, write a proposal about "personalization" of the Tor network to prevent test network crossover. - Check OSS-Fuzz timeout issues to make sure they are false positives - "Evaluate" bridge statistics. (#29269) - Experiment with chutney & CI. Week of 11 Feb (actual): - Wrote a draft onionbalance-with-v3-onionservices proposal; asked asn and dgoulet for feedback - Started a draft proposal about network personalities based on suggestion from teor in Brussels - Looked at Chutney + Travis + CI status; learned tried to figure out what's broken - Revised fast_rng branch based on comments from asn (thanks asn) - Merged some pending 040 branches - Discussion with possible funders/collaborators - Read most session notes from brussels Week of 18 Feb (planned): - Write final onionbalance-with-v3-onionservices proposal (thanks, asn and dgoulet!) - Finish personalization proposal - Change master to 0.4.1; create maint-0.4.0 and release-0.4.0 branches (done) - Write proposed policy for merging stuff (done) - Discuss proposed merge policy; make public version. - Releases for 0.3.3 and later. - Merge and announce fix for TROVE-2019-001 (thanks dgoulet) - Discuss chutney+ci findings with teor. - Update pubsub branch as needed/useful. Check in with catalyst. - Start looking at bridge stats status for #29269 - meet with researchers about datagrams, performance, etc. Mike, please answer the scheduling email ASAP? - Reply to a large pile of emails - ADL discussion - Prop 300 - Consensus options proposal idea - and so much more... - Decide what is left in 0.4.0. I need help here. - CI / Coverity rotation: look at jenkins failures (like #29534), OSS-fuzz timeouts, etc dgoulet: Week of 11 Feb (actual): - Deploy a local BridgeDB so I can start using and testing it. - Many many discussions about how to address #29427. - I've (mistakenly!) merge #29023 (fast prng) so I can now use it for prop#289. - Some other ticket merging and review. - Updated #29391 with my merging scripts. - Opened a bunch of BridgeDB tickets for quick tasks. - Got my bridgedb.git and bridgedb-admin.git repositories! Week of 19 Feb (planned): - Follow up work on all the BridgeDB tickets. - Put prop#289 in review that will now use #29023 fast prng. - Follow up on many email thread I have opened. Mike: Week of 2/11 (actual) - Spend some time digging deep into KIST and EWMA; filed #29294 after - Looked at asn's branch for #29298 - looked good so far - Looked into #29174 - Worked on #29204; have a draft patch almost ready for dgoulet Week of 2/21 (planned): - Get #29204 branch ready for dgoulet - Hopefully start on #28780 - Vanguards package announcement Need Help With: - Running unittests under Wine to try to reproduce #29500 - Is https://github.com/ahf/tor-win32/ the best way to do this? catalyst: week of 02/11 (2019-W07) (planned): - expense reporting - more review of #28226 - other reviews - bug triage rotation week of 02/11 (2019-W07) (actual): - more review of #28226 (posted some comments on github) - bug triage (nothing much) - medical bureaucracy - talked with ahf et al re shellcheck, bash vs POSIX sh... (#29485) week of 02/18 (2019-W08) (planned): - expense reporting - #28226 review - other reviews juga (offline): Week 11 Feb (plannned): - Register for the Demoday to present the bandwidth scanner (https://prototypefund.de/demo-day/) - Continue with Include scanner country and Web server country in the bandwidth file header (#29299) - Continue with Write technical overview on how sbws works(#29149) - Continue with Adapt bandwidth file classes to be compatible with stem (descriptors, etc) documents (#29057) - Consider implementing When sbws stops making progress, log a warning (#28652) - Consider implementing other children tickets to solve Monitor relays that are not measured by each sbws instance (#28547) Week 11 Feb (actual): - Included scanner country and Web server country in the bandwidth file header (#29299) - Wrote technical overview on how sbws works(#29149) - Continued Report relays that sbws sees in the consensus, but never chooses to test (#28566) - Revised ResultDump.queue.put() can hang if the queue is full (#28866) Week 18 Feb (plan): - Continue with Adapt bandwidth file classes to be compatible with stem (descriptors, etc) documents (#29057) - Work out how long it takes sbws to measure the network (#28983) - When sbws stops making progress, log a warning (#28652) - Prepare presentation for the DemoDay - Revisions Need help with: - To release sbws 1.0.3 next week, reviewing #28897 is critical, to confirm whether sbws doesn't stall. If it doesn't, several tickets in milestone 1.0 can be closed and the remaining 1.0 milestone tickets are minor changes/easy. asn: [Did not know that meeting would be on Tuesday this week and arranged social stuff for the evening. Will try to attend if possible anyhow.] Week of 02/11 (planned): - Lots of review backlog. - Start looking at February's roadmap. - Start a tor-researchers thread about WTF-PAD projects. Week of 02/11 (actual): - Finished up reviews. - Start working on roadmap task #29298. I made a spec and code branch for Mike to check out. - Started WTF-PAD thread for researchers. - Read Karsten's scaling email. - Reviewed draft onionbalance v3 proposal. Week of 02/18 (planned): - Move towards finishing up #29298 after getting Mike's feedback. - Discuss more about WTF-PAD future. - Start looking into roadmap task #29221. - Do reviews. - If time permits, read Tim's response to "walking onions" thread wrt onion services. Help with: ahf: Week of 2/11 (planned) Sponsor 19: - Review dcf's uTLS changes to meek-lite. - Continue with architecture document in #28848 - Create the goptlibext library after discussing with dcf on #28940 - Make progress with NGO discussion with arma and cohosh. Misc (and might need some help with, but most likely from weasel): - Solve the Windows CI issue that I didn't finish before meeting. Week of 2/11 (actually) Sponsor 19: - Uploaded the goptlibext library to https://github.com/ahf/goptlibext/ (STATUS and LOG support) and said OK to DCF's Log matches for gotptlib in #28940. - Brainstorm with cohosh about the Snowflake protocol: https://github.com/ahf/snowflake-notes/blob/master/Protocol.markdown - Broker architecture draft document at https://github.com/ahf/snowflake-notes/blob/master/Broker.markdown (these two will move off GH as soon as we have the GL) - Looked at Kat's report #2. Need to write down some feedback. - Reviewed dcf's uTLS changes to meek-lite. - Read a lot of Go and webstandard documents about Go, modern JavaScript, and other things I haven't stayed up-to-date with over the years. Misc: - Lots of reviews in the network team backlog due to us being AFK to Brussels Week of 2/18 (planned) Sponsor 19: - Send feedback to Kat about Report #2. - Collect some feedback from arma & cohosh about Broker.markdown. - Begin the work on protocol changes in the Snowflake codebase together with cohosh.

1 0

January Communications Report
by Stephanie A. Whited 21 Feb '19

21 Feb '19

Hello Tor, In January, we worked with the UX and teams on our new website and outreach materials. We created a 2019 strategy and communications roadmap. We got a couple very high quality press bites linked below. Jan in links and stats: New blog posts https://blog.torproject.org/expect-more-tor-2019 https://blog.torproject.org/tor-browser-tpl-defending-intellectual-freedom-… https://blog.torproject.org/strength-numbers-final-count Twitter https://twitter.com/torproject New followers: 2,894 Top tweets https://twitter.com/torproject/status/1082286334302134273 https://twitter.com/torproject/status/1080911856364122112 https://twitter.com/torproject/status/1089886122036117504 Mastodon https://mastodon.social/@torproject New followers: 210 LinkedIn https://www.linkedin.com/company/tor-project/ New followers: 71 Facebook https://www.facebookcorewwwi.onion/TorProject New followers: 204 Instagram https://www.instagram.com/torproject/ New followers: 73 Newsletter https://newsletter.torproject.org/archive/2019-01-31-expect-more-from-tor/ Notable press https://www.wired.com/story/tor-anonymity-easier-than-ever/ https://techcrunch.com/2019/01/11/tor-lessens-reliance-us-grants/ o/ -comms -- Stephanie A. Whited Communications Director The Tor Project IRC: stephw PGP Key ID: 39A876AD <https://pgp.mit.edu/pks/lookup?op=get&search=0x6D6B72C339A876AD>

1 0

January Fundraising Report
by sstevenson＠torproject.org 21 Feb '19

21 Feb '19

January was a busy month for the Fundraising team. We developed a fundraising roadmap and have been making progress on several projects. ## Year-end campaign wrap-up We began by reporting back to and thanking donors who contributed to the year-end campaign <https://blog.torproject.org/strength-numbers-final-count>. We received $300,000 in matching funds from Mozilla and $20,000 from a donor who matched funds from new contributors. ## Cryptocurrency We are working to allow donors to support Tor with a wider variety of cryptocurrencies. This is in response to many requests to give coins other than Bitcoin and also many complaints we received about Bitpay, our current cryptocurrency processor. We have been working to set up the infrastructure to make this happen and build a new page that allows donors to notify us of their gift and access the wallet addresses. We will be sure to let you know when the new page is live and promote it on social media. ## Monthly Donors Another area we spent time on in January was monthly donors. We currently have over 300 people who make automatic payments to Tor and we needed to send each a receipt for their 2018 giving. We also had to communicate with those who give via Paypal about an error in our processing that is now fixed, but resulted in charging them twice for their initial gift. Donors were understanding about the mistake and grateful for the communication and transparency. We receive around $4,500 per month from this group, so it is important that they know how much we appreciate them. We are also laying the groundwork to expand the monthly donor program. We are working on a program name, special swag, and a page through which we can invite people to join. The existing group self-selected, so we are expecting to see a lot of growth once we begin monthly invitations to select groups of donors. ## Grants On the grants front, we submitted a final report to the Rose Foundation, two proposals to NLnet--one on ESR migration and another on improving transparency and trust for exit relays. We also wrote a concept note on UX improvements to OTF and submitted funder-requested edits on an OTF proposal for onion services. We met with Alison and OONI to discuss how we can can assist them in finding and applying to new funding sources. Finally, we assisted with content for the Sponsors page on the new website. Feel free to get in touch at any time with questions or suggestions! Sarah Stevenson Fundraising Director The Tor Project sstevenson(a)torproject.org Public Key: 93B3 AC08 4257 FA3D D4BB 8E95 CC08 5DBA C015 612A

1 0

OONI Monthly Report: January 2019
by Maria Xynou 20 Feb '19

20 Feb '19

Hello, The OONI team started the year by launching OONI Probe mobile 2.0 (revamped mobile app) for Android, iOS and F-Droid. We also established three new partnerships, published three research reports, and updated four test lists. We also published a job opening to hire a backend engineer. ## Stable release of OONI Probe mobile 2.0 We launched OONI Probe mobile 2.0! This is a major milestone in the OONI-verse, enabling community members to test the URLs of their choice (directly inside the app), have an overview of test results (thus the ability to compare measurements), a better user experience, and more. Information about the revamped app is available via our announcement blog post: https://ooni.torproject.org/post/revamped-ooni-probe-mobile-app/ You can also learn about OONI Probe mobile 2.0 via Sinar Project's great review: https://sinarproject.org/digital-rights/updates/ooni-2-0-review After the initial launch of OONI Probe mobile 2.0 on Android and iOS, we also released OONI Probe on F-Droid: https://f-droid.org/packages/org.openobservatory.ooniprobe/ Thanks to support from the Localization Lab and the translator community, OONI Probe mobile 2.0 was translated to the following 13 languages: Albanian, Arabic, Catalan, Chinese, French, German, Greek, Hindi, Italian, Portuguese, Russian, Spanish, Turkish. ## Established new partnerships We are excited to have established new partnerships with: * ASUTIC: Senegalese Association of ICT Users (Senegal) * Fundación Internet Bolivia.org (Bolivia) * Open Culture Foundation (Taiwan) ASUTIC released the following press statement (encouraging the use of OONI Probe leading up to Senegal's 2019 elections): http://jotali.com/asutic/fr/monitoring-citoyen-dinternet-et-des-r%C3%A9seau… ## Year in Review: OONI in 2018 To share an overview of what the OONI team worked on in 2018, we published a blog post titled "Year in Review: OONI in 2018", available here: https://ooni.torproject.org/post/ooni-in-2018/ This blog post also highlights some of the projects we expect to launch in 2019. ## Report on internet disruption in Gabon In collaboration with CAIDA's Philipp Winter, we published a report on the internet disruption that occurred in Gabon amid a coup attempt: https://ooni.torproject.org/post/gabon-internet-disruption/ In this report, we share IODA data and Google traffic data that corroborate local reports on the internet disruption. ## Report on internet censorship in Zimbabwe In collaboration with the Digital Society of Zimbabwe, we co-published a research report examining social media blocking and internet blackouts in Zimbabwe amid the fuel protests. Our joint report is available via the following links: * OONI site: https://ooni.torproject.org/post/zimbabwe-protests-social-media-blocking-20… * Digital Society of Zimbabwe site: http://www.dszim.org/2019/01/23/zimbabwe-protests-social-media-blocking-and… ## Report on internet censorship in Venezuela In collaboration with Venezuela Inteligente and IPYS Venezuela, we co-published a research report examining the blocking of Wikipedia and social media in Venezuela amid the country's political crisis. Our joint report is available via the following links: * OONI site: https://ooni.torproject.org/post/venezuela-blocking-wikipedia-and-social-me… * Venezuela Inteligente site: https://vesinfiltro.com/noticias/report-jan-2019/ * IPYS Venezuela site: https://ipysvenezuela.org/2019/01/29/from-the-blocking-of-wikipedia-to-soci… This research was possible thanks to OONI Probe measurement campaigns coordinated by Venezuela Inteligente and IPYS Venezuela. ## Updated test lists We carried out research to create and/or update the following test lists: * Senegal: https://github.com/citizenlab/test-lists/pull/424 * Bolivia: https://github.com/citizenlab/test-lists/pull/426 * Mexico: https://github.com/citizenlab/test-lists/pull/428 * Paraguay: https://github.com/citizenlab/test-lists/pull/427 ## Job opening We're looking for a Backend Engineer to join OONI to work on: * our data processing pipeline (& other backend components) * the improvement of our data analysis heuristics * the improvement of our network measurement methodologies Information about the job opening is available here: https://www.torproject.org/about/jobs-backenddeveloper.html.en ## Userbase In January 2019, OONI Probe was run 24,5660 times from 4,121 different vantage points in 211 countries around the world. ~ The OONI team. -- Maria Xynou Research & Partnerships Director Open Observatory of Network Interference (OONI) https://ooni.torproject.org/ PGP Key Fingerprint: 2DC8 AFB6 CA11 B552 1081 FBDE 2131 B3BE 70CA 417E

1 0