- tor-project - lists.torproject.org

Anti-censorship team meeting notes, 2024-06-13
by meskio 13 Jun '24

13 Jun '24

Hey everyone! Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2024/tor-meeting.2024-06-13-16.02.html And our meeting pad: Anti-censorship -------------------------------- Next meeting: Thursday, June 20 16:00 UTC Facilitator: onyinyang ^^^(See Facilitator Queue at tail) Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) This week's Facilitator: meskio == Goal of this meeting == Weekly check-in about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at the Tor Project and Tor community. == Links to Useful documents == * Our anti-censorship roadmap: * Roadmap:https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards * The anti-censorship team's wiki page: * https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home * Past meeting notes can be found at: * https://lists.torproject.org/pipermail/tor-project/ * Tickets that need reviews: from sponsors, we are working on: * All needs review tickets: * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… * Sponsor 96 <-- meskio, shell, onyinyang, cohosh * https://gitlab.torproject.org/groups/tpo/-/milestones/24 * Sponsor 150 <-- meskio working on it * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/issues/?label_na… == Announcements == * bridges running 0.4.7.x (EOL) were rejected by Serge: https://lists.torproject.org/pipermail/tor-relays/2024-June/021678.html == Discussion == * what's the plan for: https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/142 * we've lost a lot of webextension snowblake proxies, proably due to people not noticing the new consent page * luckily the rise in orbot proxies (probably from the v17 rollout) makes this not as urgent as it otherwise might be * cohosh is working on this issue == Actions == == Interesting links == * https://discourse.mozilla.org/t/the-censorship-circumvention-extension-has-… * https://ntc.party/t/several-proxy-firefox-extensions-are-blocked-in-russia-… * Myanmar: https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/iss… == Reading group == * We will discuss "" on * * Questions to ask and goals to have: * What aspects of the paper are questionable? * Are there immediate actions we can take based on this work? * Are there long-term actions we can take based on this work? * Is there future work that we want to call out in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. cecylia (cohosh): 2024-06-13 Last week: - looked into sharp decline of browser extension proxies - https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/142 - started experimenting with some fixes for the web extension consent prompt UX - FOCI stuff This week: - snowflake webextension consent prompt UX fixes - take a look at shell's mv3 changes - take a look at snowflake web and webext translations and best practices - make changes to Lox encrypted bridge table - https://gitlab.torproject.org/tpo/anti-censorship/lox/-/merge_requests/147 - follow up on reported SQS errors - update wasm-bindgen fork to fix some bugs and hopefully upstream changes Needs help with: dcf: 2024-06-13 Last week: - azure CDN bookkeeping https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/Snowflake-co… Next week: - review snowflake unreliable+unordered data channels rev2 https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - open issue to have snowflake-client log whenever KCPInErrors is nonzero https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - parent: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - open issue to disable /debug endpoint on snowflake broker - move snowflake-02 to new VM Help with: - tell me when to restart the brokers for https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… meskio: 2023-06-13 Last week: - create an rdsys requests metrics puller that produces metrics for collector (rdsys#188) - plan with TPA the BridgeDB deprecation (tpa/team#41613) - add the new prometheus exporters (tpa/prometheus-alerts!42) - in progress of investigate what builtin bridges are offline (team#141) - test tor implementation to the STATUS type=version command for PTs (tor!820) - fix a bug in ptutil/safeprom registering the metric (ptutil!2) Next week: - deploy https, moat and email distributors in rdsys - investigate what builtin bridges are offline (team#141) Shelikhoo: 2024-06-06 Last Week: - [Merge Request Waiting] Add Container Image Mirroring from Tor Gitlab to Docker Hub(https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/… - [Merge Request Waiting] Snowflake Performance Improvement rev2 (https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow…) - Chrome Manifest V3 transition: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - Upgrade snowflake broker machine from Debian 10 (https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow…) - Address TTP-03-001 WP1: Snowflake broker vulnerability(https://gitlab.torproject.org/tpo/anti-censorship/pluggable-t… - Vantage point maintaince - merge request processing - Merge request reviews Next Week/TODO: - Merge request reviews onyinyang: 2023-06-06 Last week(s): - Finished key rotation implementation - Working toward building tor-browser with lox-wasm binary to help out with integration work as needed - Preparation for MSR talk Next week: - MSR talk - Work on outstanding milestone issues: https://gitlab.torproject.org/tpo/anti-censorship/lox/-/milestones/1#tab-is… - prepare for end to end testing of the Lox system with browser integration Later: - begin implementing some preliminary user feedback mechanism to identify bridge blocking based on Vecna's work - improve metrics collection/think about how to show Lox is working/valuable - sketch out Lox blog post/usage notes for forum (long term things were discussed at the meeting!): https://pad.riseup.net/p/tor-ac-community-azaleas-room-keep - brainstorming grouping strategies for Lox buckets (of bridges) and gathering context on how types of bridges are distributed/use in practice Question: What makes a bridge usable for a given user, and how can we encode that to best ensure we're getting the most appropriate resources to people? 1. Are there some obvious grouping strategies that we can already consider? e.g., by PT, by bandwidth (lower bandwidth bridges sacrificed to open-invitation buckets?), by locale (to be matched with a requesting user's geoip or something?) 2. Does it make sense to group 3 bridges/bucket, so trusted users have access to 3 bridges (and untrusted users have access to 1)? More? Less? theodorsm: 2023-06-13 Last weeks: - Writing on my thesis Next weeks: - Add hook to pion/webrtc so it can be used in snowflake, currently waiting on new pion/dtls release - Add randomized fingerprints - Writing my thesis Help with: Facilitator Queue: onyinyang shelikhoo meskio 1. First available staff in the Facilitator Queue will be the facilitator for the meeting 2. After facilitating the meeting, the facilitator will be moved to the tail of the queue -- meskio | https://meskio.net/ -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- My contact info: https://meskio.net/crypto.txt -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Nos vamos a Croatan.

1 0

sysadmin meeting minutes
by Antoine Beaupré 10 Jun '24

10 Jun '24

(Editor's note: the minutes don't say so, but we've welcomed a new team member! It wasn't his first meeting, so we didn't formally say welcome here again, but be sure we're happy to have a new member onboard!) # Roll call: who's there and emergencies anarcat, gaba, lavamind, lelutin # Dashboard cleanup Normal per-user check-in: * https://gitlab.torproject.org/groups/tpo/-/boards?scope=all&utf8=%E2%9C%93&… * https://gitlab.torproject.org/groups/tpo/-/boards?scope=all&utf8=%E2%9C%93&… * https://gitlab.torproject.org/groups/tpo/-/boards?scope=all&utf8=%E2%9C%93&… General dashboards: * https://gitlab.torproject.org/tpo/tpa/team/-/boards/117 * https://gitlab.torproject.org/groups/tpo/web/-/boards * https://gitlab.torproject.org/groups/tpo/tpa/-/boards We dispatched more to lelutin! # Holidays plan and roadmapping https://gitlab.torproject.org/tpo/tpa/team/-/wikis/policy/tpa-rfc-61-roadma… We organized the rotation and meetings until September, shifts are documented in the "TPA team" Nextcloud calendar. This was our last roadmap meeting until September 9th. # metrics of the month * hosts in Puppet: 89, LDAP: 89, Prometheus exporters: 184 * number of Apache servers monitored: 34, hits per second: 687 * number of self-hosted nameservers: 6, mail servers: 10 * pending upgrades: 0, reboots: 0 * average load: 0.63, memory available: 3.57 TiB/4.96 TiB, running processes: 303 * disk free/total: 67.82 TiB/134.27 TiB * bytes sent: 416.70 MB/s, received: 278.77 MB/s * planned bookworm upgrades completion date: 2024-07-18 * [GitLab tickets][]: 205 tickets including... * open: 0 * icebox: 149 * future: 14 * backlog: 24 * next: 9 * doing: 4 * needs review: 5 * needs info: 4 * (closed: 3572) [Gitlab tickets]: https://gitlab.torproject.org/tpo/tpa/team/-/boards Upgrade prediction graph lives at https://gitlab.torproject.org/tpo/tpa/team/-/wikis/howto/upgrades/bookworm/ Now also available as the main Grafana dashboard. Head to <https://grafana.torproject.org/>, change the time period to 30 days, and wait a while for results to render. -- Antoine Beaupré torproject.org system administration

1 0

Anti-censorship team meeting notes, 2024-06-06
by Shelikhoo 06 Jun '24

06 Jun '24

Hey everyone! Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2024/tor-meeting.2024-06-06-16.00.html And our meeting pad: Anti-censorship work meeting pad -------------------------------- Anti-censorship -------------------------------- Next meeting: Thursday, June 13 16:00 UTC Facilitator: onyinyang ^^^(See Facilitator Queue at tail) Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) This week's Facilitator: shelikhoo == Goal of this meeting == Weekly check-in about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at the Tor Project and Tor community. == Links to Useful documents == * Our anti-censorship roadmap: * Roadmap:https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards * The anti-censorship team's wiki page: * https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home * Past meeting notes can be found at: * https://lists.torproject.org/pipermail/tor-project/ * Tickets that need reviews: from sponsors, we are working on: * All needs review tickets: * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… * Sponsor 96 <-- meskio, shell, onyinyang, cohosh * https://gitlab.torproject.org/groups/tpo/-/milestones/24 * Sponsor 150 <-- meskio working on it * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/issues/?label_na… == Announcements == * == Discussion == * can we retire monit in favor of prometheus? * https://gitlab.torproject.org/tpo/tpa/prometheus-alerts/-/merge_requests/41 * https://gitlab.torproject.org/tpo/anti-censorship/monit-configuration/-/com… * we agree it makes sense to retire the monit service * once the alerts are in place meskio will coordinate with philip to retire it * this work is making me notice that some builtin bridges are not reachable since a while, looks like the monit service was down * meskio will investigate the reachability of builtin bridges * do we wish to include snowflake into lyrebrid? * https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/lyre… * cohosh will start that work with the integration of conjure into lyrebird * snowflake will have two challenges * lyrebird is keeping an old version of uTLS to maintain a go version supported by windows 7 (the plan is to drop that mid-september) * udp proxy support might be triky to do in lyrebird * we decide that we are ok with adding snowflake client support to lyrebird, but we'll need to see when and how complex will be * lyrebird supports a bunch of PTs that are deprecated (obfs2-3 and scramblesuit) should we remove those to gain space? * https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/lyre… * once in a while there are reports of users still using those * meskio will explore if removing them will gain any space and if not will drop the idea == Actions == == Interesting links == * https://opencollective.com/censorship-circumvention/projects/snowflake-dail… == Reading group == * We will discuss "" on * * Questions to ask and goals to have: * What aspects of the paper are questionable? * Are there immediate actions we can take based on this work? * Are there long-term actions we can take based on this work? * Is there future work that we want to call out in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. cecylia (cohosh): 2024-06-06 Last week: - opened MR for lox db test fixup - https://gitlab.torproject.org/tpo/anti-censorship/lox/-/merge_requests/188 - reviewed Lox MRs - onboarded onyinyang on how to do reproducible builds and update the Lox module in Tor Browser This week: - take a look at shell's mv3 changes - take a look at snowflake web and webext translations and best practices - make changes to Lox encrypted bridge table - https://gitlab.torproject.org/tpo/anti-censorship/lox/-/merge_requests/147 - follow up on reported SQS errors - update wasm-bindgen fork to fix some bugs and hopefully upstream changes Needs help with: dcf: 2024-06-06 Last week: Next week: - review snowflake unreliable+unordered data channels rev2 https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - open issue to have snowflake-client log whenever KCPInErrors is nonzero https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - parent: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - open issue to disable /debug endpoint on snowflake broker - move snowflake-02 to new VM Help with: - tell me when to restart the brokers for https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… meskio: 2023-06-06 Last week: - use safeprom in rdsys (rdsys#203) - use safelog in rdsys - add prometheus metrics to replace bridgedb metrics in rdsys (rdsys#188) - add prometheus blackbox targets to replace monit targets (prometheus-alerts!41) - add webtunnel bridges to the settings distributor (rdsys-admin!31) - review lox key rotation MR (lox!183) - review STATUS version support in tor (tor!820) Next week: - create an rdsys requests metrics puller that produces metrics for collector (rdsys#188) Shelikhoo: 2024-06-06 Last Week: - [Merge Request Waiting] Add Container Image Mirroring from Tor Gitlab to Docker Hub(https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/… - [Merge Request Waiting] Snowflake Performance Improvement rev2 (https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow…) - Chrome Manifest V3 transition: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - Upgrade snowflake broker machine from Debian 10 (https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow…) - Address TTP-03-001 WP1: Snowflake broker vulnerability(https://gitlab.torproject.org/tpo/anti-censorship/pluggable-t… - Vantage point maintaince - merge request processing - Merge request reviews Next Week/TODO: - Merge request reviews onyinyang: 2023-06-06 Last week(s): - Finished key rotation implementation - Working toward building tor-browser with lox-wasm binary to help out with integration work as needed - Preparation for MSR talk Next week: - MSR talk - Work on outstanding milestone issues: https://gitlab.torproject.org/tpo/anti-censorship/lox/-/milestones/1#tab-is… - prepare for end to end testing of the Lox system with browser integration Later: - begin implementing some preliminary user feedback mechanism to identify bridge blocking based on Vecna's work - improve metrics collection/think about how to show Lox is working/valuable - sketch out Lox blog post/usage notes for forum (long term things were discussed at the meeting!): https://pad.riseup.net/p/tor-ac-community-azaleas-room-keep - brainstorming grouping strategies for Lox buckets (of bridges) and gathering context on how types of bridges are distributed/use in practice Question: What makes a bridge usable for a given user, and how can we encode that to best ensure we're getting the most appropriate resources to people? 1. Are there some obvious grouping strategies that we can already consider? e.g., by PT, by bandwidth (lower bandwidth bridges sacrificed to open-invitation buckets?), by locale (to be matched with a requesting user's geoip or something?) 2. Does it make sense to group 3 bridges/bucket, so trusted users have access to 3 bridges (and untrusted users have access to 1)? More? Less? theodorsm: 2023-06-06 Last weeks: - Writing for my thesis Next weeks: - Add hook to pion/webrtc so it can be used in snowflake, currently waiting on new pion/dtls release - Add randomized fingerprints - Writing my thesis Help with: - Finding conferences that are relevant for submitting paper on my work. (unfortunately too late for FOCI24) Facilitator Queue: onyinyang meskio shelikhoo 1. First available staff in the Facilitator Queue will be the facilitator for the meeting 2. After facilitating the meeting, the facilitator will be moved to the tail of the queue

1 0

cohosh's monthly status report, May 2024
by Cecylia Bocovich 06 Jun '24

06 Jun '24

Hi! This is my status report for contract work done in May 2024. It was a low output month, most of my contract work was focused on discussions and project maintenance. # Snowflake - Released version 0.8.2 of the Snowflake webextension - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - Project and dependency maintenance # Reputation-based bridge distribution - Fixups to Lox client integration tests - https://gitlab.torproject.org/tpo/anti-censorship/lox/-/merge_requests/170 - Project and dependency maintenance

1 0

Nina’s Monthly Status Report: May 2024
by Nina 05 Jun '24

05 Jun '24

Hi! Below is my May’24 report! In May, I resolved 790 tickets: * On Telegram (@TorProjectSupportBot) - 539 * On RT (frontdesk@tpo) - 242 * On WhatsApp (+447421000612) - 9 * and on Signal (+17787431312) - 0 The focus of my work remains the same - I help Russian-speaking users of Tor Browser to install the browser and bypass internet censorship. In May we got a lot of questions from iOS and macOS users from Russiaand more specificallywhichsoftware they should install and where they should get it. Also, I help with troubleshooting and keep an eye on issues and bugs to report themto Tor developers. There are several bugs/issues I reported in May: * Built-in bridges andsomebridges obtained by email do not work in Russia[1] * Error in Tor Browser "Unable to start Tor:java.io.lo" [2] * BridgeDB does not give ipv6 bridge [3] * BridgeDB gives one and only bridge [4] In May I also took part in theCommunity Teamdocumentation sprint, whose purpose was to fill the gap in the existing documentation. So I authored and added to the several articles in the Support portaland Tor Browser user manual. * I added a section "System requirements" to the "Installation" article [5] * Added "letterboxing" term to the glossary [6] * Updated NoScriptdescription for "PLUGINS, ADD-ONS AND JAVASCRIPT" article on the support portal [7] * Wrote an article "Why are modern onion service addresses so long?" [8] [1] https://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/40072 [2] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42598 [3] https://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/40071 [4] https://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/40070 [5] https://tb-manual.torproject.org/installation/ [6] https://support.torproject.org/glossary/letterboxing/ [7] https://tb-manual.torproject.org/plugins/ [8] https://gitlab.torproject.org/tpo/web/support/-/issues/211#note_3029489

1 0

Rhatto's Monthly Status Report, May 2024
by rhatto 03 Jun '24

03 Jun '24

Hi all :) This is my monthly status report for May 2024 with the main relevant activities I have done during the period. ## 0. Research * Onion Plan: * Lots of discussions during the Lisbon in-person meeting. Notes still being compiled. ## 1. Development * Oniongroove: * Released version 0.0.2: https://gitlab.torproject.org/tpo/onion-services/oniongroove/-/blob/main/do… * Onionspray Log Parser: * Released version v2.1.0: https://gitlab.torproject.org/tpo/onion-services/onionspray-log-parser/-/bl… ## 2. Support * Ongoing sponsored work with deployment, maintenance and monitoring of Onion Services. -- Silvio Rhatto pronouns he/him

1 0

PieroV's Monthly Status Report, May 2024
by Pier Angelo Vendrame 03 Jun '24

03 Jun '24

Hi everyone! Here is my status report for May 2024. This month, Firefox 128, which will be the base of our 14.0, reached nightly. Therefore, we're releasing 13.5 soon (with the 115.12 ESR update unless we find some last-minute problems) and then moving all our efforts to the ESR transition. So, in the past month, I partially worked on finishing some details for the 13.5. The rest of the time, I continued uplifting our patches and rebasing our patchset on Firefox's rapid release to ease the transition. For the 13.5, I finished the work on the Mullvad Browser Windows installer I started at the end of April [0]. We wanted to make the installation UX as short as possible. Only one click: you confirm you want to install the browser, and that's it 😄️. But if you want, you can still customize the installation options. When doing so, I discovered the welcome and the finish page of NSIS installers are written with the Modern UI 2 tools you would also use for custom pages. This made the task easier and less hacky, and the final result is identical to what users are familiar with. I also started implementing a localization pipeline that will be used by Tor Browser's installer as well. Then, I worked on Android localization. When we evaluated whether we needed to enable multi-lingual GeckoView builds [1], we didn't realize they were also required by the formatting APIs [2]. So, in practice, TBA supported only formatting in en-US. Enabling multi-lingual builds solved this issue. We also noticed that region data was still leaked. Therefore, I wrote a patch to make the Accepted-Language HTTP header match exactly the tag of the active translation (when not using spoof English) [3]. As for the uplifting work, I finally managed to land a patch [4] I wrote when we were moving from 91 to 102 🎉️. In addition, with the help of Firefox devtools developers, I implemented some tests and uplifted the patch not to persist the data about custom requests done in PBM [5]. This patch was initially developed by cypherpunks1, as well as the patch to add the missing origin attributes to the reader mode [6] that I also uplifted. The patch for the placeholders of the datetime-local input [7] hasn't landed yet, but at least I found why the tests were failing, and I provided a new revision. I'm waiting for another review from upstream. For the ESR rebases, I started a branch based on 127 and the branches based on 128, even though it's still nightly. I also started writing some reviewing guides (which gave me an opportunity for additional self-reviews). I found a very nice tool called "aha" [8] that converts ANSI escape sequences to HTML. I'm using it to create HTML versions of range-diff, on top of which I'm writing reports on why I needed to adapt our patches. Finally, I did some of the usual maintenance and help for this month's releases. Cheers, Pier [0] https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/issues/200 [1] https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4… [2] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42552 [3] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42562 [4] https://bugzilla.mozilla.org/show_bug.cgi?id=1787790 [5] https://bugzilla.mozilla.org/show_bug.cgi?id=1892052 [6] https://bugzilla.mozilla.org/show_bug.cgi?id=1892046 [7] https://bugzilla.mozilla.org/show_bug.cgi?id=1880108 [8] https://github.com/theZiz/aha

1 0

Anti-censorship team meeting notes, 2024-05-30
by meskio 31 May '24

31 May '24

Hey everyone! Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2024/tor-meeting.2024-05-30-16.00.html And our meeting pad: Anti-censorship -------------------------------- Next meeting: Thursday, June 6 16:00 UTC Facilitator: shelikhoo ^^^(See Facilitator Queue at tail) Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) This week's Facilitator: meskio == Goal of this meeting == Weekly check-in about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at the Tor Project and Tor community. == Links to Useful documents == * Our anti-censorship roadmap: * Roadmap:https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards * The anti-censorship team's wiki page: * https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home * Past meeting notes can be found at: * https://lists.torproject.org/pipermail/tor-project/ * Tickets that need reviews: from sponsors, we are working on: * All needs review tickets: * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… * Sponsor 96 <-- meskio, shell, onyinyang, cohosh * https://gitlab.torproject.org/groups/tpo/-/milestones/24 * Sponsor 150 <-- meskio working on it * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/issues/?label_na… == Announcements == * == Discussion == * Add nginx rate limiting to address "TTP-03-001 WP1: Snowflake broker vulnerability" * https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… * It will be applied once we move the broker https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… * shelikhoo will apply the changes into the nginx of the new broker, it will take effect as soon as we migrate to it * Is the broker migration ready to apply yet? https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… * dcf can change the VM memory configuration, then someone needs to contact TPA to ask them to change a DNS record * Example of asking for a DNS change: https://gitlab.torproject.org/tpo/tpa/team/-/issues/40716 * Caveat: we will have to use the same Let's Encrypt account as the old broker, because of CAA records: * https://gitlab.torproject.org/tpo/tpa/team/-/issues/41462 * https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… * https://gitlab.torproject.org/dcf/autocert-account-id == Actions == == Interesting links == * == Reading group == * We will discuss "Communication Breakdown: Modularizing Application Tunneling for Signaling Around Censorship" on May 30 * https://petsymposium.org/popets/2024/popets-2024-0027.php * Questions to ask and goals to have: * What aspects of the paper are questionable? * Are there immediate actions we can take based on this work? * Are there long-term actions we can take based on this work? * Is there future work that we want to call out in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. cecylia (cohosh): 2024-05-30 Last week: - tor meeting - s152 final and monthly reports - commented on mv3 migration issue This week: - take a look at snowflake web and webext translations and best practices - get around to backlog of MR reviews - make changes to Lox encrypted bridge table - https://gitlab.torproject.org/tpo/anti-censorship/lox/-/merge_requests/147 - follow up on reported SQS errors - update wasm-bindgen fork to fix some bugs and hopefully upstream changes Needs help with: dcf: 2024-05-30 Last week: Next week: - review snowflake unreliable+unordered data channels rev2 https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - open issue to have snowflake-client log whenever KCPInErrors is nonzero https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - parent: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - open issue to disable /debug endpoint on snowflake broker - move snowflake-02 to new VM Help with: - tell me when to restart the brokers for https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… meskio: 2023-05-30 Last week: - back from tormeeting and catching up - plan rdsys deployment to replace BridgeDB (tpa/team#41613) - look at onbasca issues failing to test bridges (onbasca#171) - map existing monit alerts into prometheus blackbox exporter (not pushed yet) Next week: - use safeprom in rdsys (rdsys#203) - add prometheus metrics to replace bridgedb metrics in rdsys (rdsys#188) Shelikhoo: 2024-05-30 Last Week: - [Merge Request Waiting] Add Container Image Mirroring from Tor Gitlab to Docker Hub(https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/… - [Merge Request Waiting] Snowflake Performance Improvement rev2 (https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow…) - Chrome Manifest V3 transition research - Vantage point maintaince - merge request processing - Merge request reviews Next Week/TODO: - Merge request reviews onyinyang: 2023-05-30 Last week(s): - continued key rotation implementation - Fixed bug in blockage_migration protocol Next week: - Work on outstanding milestone issues: https://gitlab.torproject.org/tpo/anti-censorship/lox/-/milestones/1#tab-is… - prepare for end to end testing of the Lox system with browser integration Later: - begin implementing some preliminary user feedback mechanism to identify bridge blocking based on Vecna's work - improve metrics collection/think about how to show Lox is working/valuable - sketch out Lox blog post/usage notes for forum (long term things were discussed at the meeting!): https://pad.riseup.net/p/tor-ac-community-azaleas-room-keep - brainstorming grouping strategies for Lox buckets (of bridges) and gathering context on how types of bridges are distributed/use in practice Question: What makes a bridge usable for a given user, and how can we encode that to best ensure we're getting the most appropriate resources to people? 1. Are there some obvious grouping strategies that we can already consider? e.g., by PT, by bandwidth (lower bandwidth bridges sacrificed to open-invitation buckets?), by locale (to be matched with a requesting user's geoip or something?) 2. Does it make sense to group 3 bridges/bucket, so trusted users have access to 3 bridges (and untrusted users have access to 1)? More? Less? theodorsm: 2023-05-16 Last weeks: - Pion dtls have merged my PR for hooking of client hellos, server hellos and certificate request (https://github.com/pion/dtls/pull/631) - Quick test with my mimicking library (https://github.com/theodorsm/covert-dtls) with snowflake: promising results - Writing for my thesis Next weeks: - Add hook to pion/webrtc so it can be used in snowflake. - Further test and validate mimicked client hello with snowflake. - Add randomized fingerprint - Writing my thesis - Might explore some stateful attacks/fingerprints Help with: Facilitator Queue: shelikhoo onyinyang meskio 1. First available staff in the Facilitator Queue will be the facilitator for the meeting 2. After facilitating the meeting, the facilitator will be moved to the tail of the queue -- meskio | https://meskio.net/ -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- My contact info: https://meskio.net/crypto.txt -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Nos vamos a Croatan.

1 0

Tor Browser Weekly Meeting Rescheduled to 2024-05-28
by Richard Pospesel 27 May '24

27 May '24

Hey everyone, The 27th is an official TPI holiday, so we'll reschedule the weekly browser meeting to tomorrow (Tuesday, 28th of May) at 1500 UTC in #tor-meeting. Have a good holiday o/ best, -richard

1 0

Applications meeting 2024-05-20 cancelled
by Richard Pospesel 19 May '24

19 May '24

Our weekly meeting tomorrow (2024-05-20) is cancelled. We will continue as normal the following week. best, -richard

1 0