- tor-project - lists.torproject.org

Notes from March 2 2017 Vegas team meeting
by Karsten Loesing 06 Mar '17

06 Mar '17

Notes for March 2 2017 meeting: Alison: 1) More work on the Tor Meeting: nearly finished the gunner-style session's scheduling, working on the strategic planning plenary 2) Tor Tea Time: thinking of creating a regular communication session for community trust. 3) Support portal progress is coming along! This afternoon we have a meeting about Linda's mockup design and the next steps. 4) Finishing up the community council guidelines proposal period. Next week will be the vote. After that I will run the social contract proposal/vote. 5) Support portal progress is coming along! This afternoon we have a meeting about Linda's mockup design and the next steps. Georg: 1) Ordered a new code-signing certificate for Windows 2) Release preparations and work on migration to Firefox ESR 52 Shari: 1) lots of meetings with people visiting Seattle and catching up after being out for a week 2) onboarding and offboarding communications folks 3) thinking about strategic planning Nick: 1) so many releases 2) trying to do OKR on Tor implementation future Mike: 1) Trying to put together a team to work on the research side of Sponsor2. Isabela: 1) At Tor office - meeting Brad, Cass, Roger, Linda and others on many topics 2) Finished milestone 3 of ISC orfox project 3) Working on sponsor S final report 4) Getting things organized to table at Libre Planet 5) hiro sent out a very important survey about Trac - please encourage everyone you work with to answer that :) Karsten: 1) Cass submitted our funding proposal for metrics work after Sponsor X. 2) Preparing for Iain's Atlas usability improvements blog post to be published on Monday. Arturo: 1) We had our first community meeting on slack. It went very well and bunch of people showed up. 2) Working on reports on south east asian countries. Lot's of very interesting findings. 3) Lot's of development related to data analysis and pipeline work. Josh: 1) I am working out my gameplan for relaunching Tor weekly news 2) I spent a long time trying to figure out a lot of the who, what, where, when, and why type things in the Tor community and now I am feeling more confident in my ability to communicate about Tor in general. 3) I am putting together a press kit and a publications kit. I think the publications kit can live on the trac wiki. 4) Introducing myself to the world (people in the press, bloggers, community members, and other good people).

1 0

meek-azure funding has run out
by David Fifield 05 Mar '17

05 Mar '17

The grant I was using to pay for meek-azure ran out at the end of 2016. It was for $10,000 and it paid for meek-azure and meek-google (until the latter was shut down) throughout 2016. I can support it personally for maybe one more month but after that I'll have to shut it down. >From these graphs you can see that meek continues to be very popular, with both backing bridges constant pushing against the rate limits we imposed to control costs. I had hoped that by now we would find a way to pay for sustained deployment, but it hasn't happened. https://atlas.torproject.org/#details/F4AD82B2032EDEF6C02C5A529C42CFAFE5165… https://atlas.torproject.org/#details/AA033EEB61601B2B7312D89B62AAA23DC3ED8… If someone wants to take over the service and raise funds I'm happy to let you. I've been able to manage keeping on top of monthly invoices and all that, but it's not my strong suit. I don't have any problem with continuing to run the bridge that the CDN forwards to, as that is much less expensive than the CDN, like $20/month rather than $600/month.

5 6

Re: [tor-project] meek-azure funding has run out
by Nathan Freitas 04 Mar '17

04 Mar '17

Yes, this is a critical capability of Tor for end-users, not only in Iran and China, but any network that is starting to deploy sophisticated DPI targeted at Tor. Thanks to David, Rob, Nima and others for finding a way forward for Meek. I hope we can continue finding ways to make domain fronting economical, as well, perhaps through a community crowd source hosting effort? I am working on updating Orbot to support these new endpoints. Are they ready for production yet? +n On Fri, Mar 3, 2017, at 08:54 PM, Nima Fatemi wrote: > David Fifield: > > I shut down the meek-azure CDN endpoints this morning, so meek-azure is > > going to stop working until the 6.5.1 release, which updates to Cymru's > > bridge. > > Hey David, > > I just wanted to take the opportunity and thank you for your continues > support to censored users. This is an important work that sometimes goes > under appreciated simply because it's not tangible for most people > active in the community. As someone who's experienced the struggle and > on behalf of those who do every day in this modern day, I take my hat > off to you. > > Same goes to all other Pluggable Transport developers. > > Thank you! > -- > Nima > 0X58C4B928A3E218F6 | @mrphs > > "I disapprove of what you say, but I will defend to the death your right > to say it" --Evelyn Beatrice Hall > _______________________________________________ > tor-project mailing list > tor-project(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-project

2 1

Summary of meek's costs, January 2017
by David Fifield 04 Mar '17

04 Mar '17

Here's the summary of meek's CDN fees for January 2017. App Engine + Amazon + Azure = total by period all 2014 $600.63 + $917.89 + $0.00 = $1518.52 all 2015 $8006.59 + $8146.83 + $1292.89 = $17446.31 January 2016 $771.17 + $1581.88 + $329.10 = $2682.15 February 2016 $986.39 + $977.85 + $445.83 = $2410.07 March 2016 $1079.49 + $865.06 + $534.71 = $2479.26 April 2016 $1169.23 + $1074.25 + $508.93 = $2752.41 May 2016 $525.46 + $1097.46 + $513.56 = $2136.48 June 2016 $0.00 + $1117.67 + $575.50 = $1693.17 July 2016 $0.00 + $1121.71 + $592.47 = $1714.18 August 2016 $0.00 + $1038.62 + $607.13 = $1645.75 September 2016 $0.00 + $932.22 + $592.92 = $1525.14 October 2016 $0.00 + $1259.19 + $646.00 = $1905.19 November 2016 $0.00 + $1613.00 + $597.76 = $2210.76 December 2016 $0.00 + $1569.84 + $1416.10 = $2985.94 January 2017 $0.00 + $1550.19 + $1196.28 = $2746.47 -- total by CDN $13138.96 + $24890.66 + $9242.05 = $44525.20+grand total https://metrics.torproject.org/userstats-bridge-transport.html?start=2016-1… == Amazon a.k.a. meek-amazon == EU (Ireland) 572M requests $687.30 2826 GB $222.64 Global 9M requests $9.96 31 GB $2.43 US East (Northern Virginia) 429M requests $429.20 2542 GB $198.16 -- total 1011M requests $1126.46 5400 GB $423.23 charge for alarms $0.50 https://atlas.torproject.org/#details/F4AD82B2032EDEF6C02C5A529C42CFAFE5165… == Azure a.k.a. meek-azure == https://atlas.torproject.org/#details/AA033EEB61601B2B7312D89B62AAA23DC3ED8… As in December 2016, Azure's new zone pricing costs more than in the past. Most of the traffic is from "Zone 3", which is South America according to https://azure.microsoft.com/en-us/pricing/details/cdn/: Zone 1: $0.087/GB: North America, Europe, Middle East and Africa Zone 2: $0.138/GB: Asia Pacific (including Japan) Zone 3: $0.250/GB: South America Zone 4: $0.140/GB: Australia Zone 5: $0.170/GB: India Zone 1 538 GB $ 46.77 Zone 2 75 GB $ 10.40 Zone 3 4538 GB $1134.51 Zone 4 9 GB $ 1.21 Zone 5 20 GB $ 3.39 -- total 5180 GB $1196.28 Earlier reports in this series: https://trac.torproject.org/projects/tor/wiki/doc/meek#Costs

1 0

Damian's Status Report - February 2017
by Damian Johnson 03 Mar '17

03 Mar '17

Jury duty this month, but that was more than made up for with tasty, tasty pizza - thank you Shari! February had lots of great stuff. ============================================================ Google Summer of Code ============================================================ We have been accepted! https://blog.torproject.org/blog/tor-google-summer-code-2017 Got a project to pitch? It's not too late! Students are already rolling into irc so if you want to mentor this summer the sooner you let me know the better. ============================================================ Community Council ============================================================ Tag teaming with Alison on a formal proposal for our community council. Initial council attempt hit some potholes but I'm glad for it since it's given us a much better idea of what we want the council to become. Fingers crossed that it's successful! ============================================================ Besides this just a handful of Stem changes... * Patrick migrated our cryptographic descriptor validation from pycrypto (which is unmaintained) to cryptography. (#21086) * Further sped up our tests. Unit and integ tests now run 15% faster, and @only_run_once is fixed so the 'RUN_ALL' target is dramatically faster. * Corrected unesacaping of controller responses. Thansk to this authentication cookies with non-English characters in their path now work. See ya all in Amsterdam! PS. Swapping from tor-reports@ to tor-project@ for this because we're likely gonna be merging the former into this list.

1 0

Increasing number of nodes and worrying about going past 6%
by John Ricketts 02 Mar '17

02 Mar '17

All, Long time no see since Seattle, it was a pleasure to meet those that were there! Ok, so I opened a second data center with Hurricane Electric and I just got a second peering feed from Level3 at that facility so I would have a full IPv6 table. Getting 10GE from HE and 1GE from Level 3. I'm going to add IPv6 to all of my current 30 nodes. I'm pushing approximately 2% of exit probability and growing. I intend to add another 30 nodes in the next two months, and add yet another datacenter in Dallas, TX. My target 6% will all coming from the same AS 62744, I have two /24 and a /22. If I reach 6% of global exit probability should I stop? I know we had those discussions with the others at the meeting in Seattle but I want to make sure my ability to get 6% or more will not hurt the integrity of Tor. Some told me to build it and some had some hesitation. Also, I am going to re-offer my facilities for experimental DirAuths or any other stuff that you all want to test. I'd like your advice and thoughts on my plans. I want to become the largest exit operator in North America without becoming a risk to Tor or others using it. Sincerely, John L. Ricketts, PhD Quintex Alliance Consulting (325) 262-3488

1 0

Fwd: Support computer-user freedom by exhibiting at LibrePlanet 2017 again
by Moritz Bartl 02 Mar '17

02 Mar '17

tl;dr: LibrePlanet wants us back with a booth. Since Tor was put on FSF's High Priority List (since Richard uses it now I hear?) very recently, this sounds like a good idea. https://www.fsf.org/news/fsf-announces-a-major-overhaul-of-free-software-hi… Anyone? -------- Forwarded Message -------- Subject: Support computer-user freedom by exhibiting at LibrePlanet 2017 again Date: Mon, 06 Feb 2017 15:05:48 -0500 Dear Moritz, Thank you very much for supporting us through the exhibit hall at LibrePlanet in 2014! Over the past 8 years, **LibrePlanet** (<https://www.libreplanet.org/2017>) has become a prominent free software conference for a vibrant, diverse community of developers, policy experts, activists, students, and users who care about the intersection of technology, education, and user freedom. With past keynote speakers including **Edward Snowden**, **Sue Gardner** (Wikimedia Foundation), and **Allison Randal** (Open Source Initiative), LibrePlanet is a banner event with 400 attendees and thousands more watching conference sessions online. It is also one of the only technology conferences to run its infrastructure entirely on free software. The Free Software Foundation (FSF) and Massachusetts Institute of Technology's (MIT) Student Information Processing Board are working hard organizing **LibrePlanet 2017: The Roots of Freedom -- Saturday and Sunday, March 25 and 26, 2017 at the MIT Stata Center**. This year will feature keynote speakers **Cory Doctorow** (author, activist, and co-editor of boingboing.net) **Kade Crockford** (ACLU Massachusetts), **Sumana Harihareswara** (Changeset Consulting), and **Richard Stallman** (FSF founder and president). The conference is funded and staffed by the Free Software Foundation, a 501(c)(3) nonprofit charity, and we need your support. **Will you join us at LibrePlanet 2017 as an exhibitor again?** Exhibiting at LibrePlanet will ensure Tor: - has an exhibitor table in our lively, centrally located hall, - is listed in the program book and on the event website as an exhibitor, - receives 2 registrations for all conference events. LibrePlanet could not happen without the contributions of donors, sponsors, and exhibitors. In addition to other logistics, sponsors and exhibitors fund gratis admission for all students and travel/lodging scholarships to help speakers and students who would not be able to make it otherwise. Last year, we received 37 applications for scholarships and were able to fulfill 10. This year, we hope to do even more with your support. You can be confident in our financial stewardship and responsible use of resources -- the FSF has been in operation for over 30 years, and we have the highest rating possible on Charity Navigator (4 stars). LibrePlanet offers tremendous visibility, allowing you to showcase your support of free software to users, developers, and potential employees. While everything you do may not be free software, it is likely that a substantial portion of your organization relies on it. Sponsoring is a great way to give back and support the community that continues to make and improve the pool of software available to you. Conference sponsors and exhibitors are able to engage all the attendees and organization representatives at the two-day event, thousands of viewers who watch online, the FSF's 4,000 members and 130,000+ subscribers, and nearly 20 million unique web visitors who visit fsf.org, libreplanet.org, and gnu.org each year. You can find more information on LibrePlanet sponsorship and exhibitor opportunities at <https://libreplanet.org/2017/sponsors/>. We would love for Tor to be part of the exhibit hall again. If you are interested, please let me know at <membership(a)fsf.org> by March 5th. Thank you again for supporting our work to promote, protect, and develop free software. Sincerely, j. -- Jeanne Rasata Program Assistant Free Software Foundation GnuPG Key: F24B 3F64 31A1 90D6 1CCC 0394 E8FD 48A0 DE0D C371 P.S.: Check out this short video about LibrePlanet, made with free software: <https://media.libreplanet.org/u/libreplanet/m/libreplanet-2016-fork-the-sys…>.

5 5

Notes from February 23 2017 Vegas team meeting
by Karsten Loesing 28 Feb '17

28 Feb '17

Notes for February 23 2017 meeting: Georg: 1) We need to coordinate the network audit for our switch to ESR 52 <- Mike has agreed to do this by April 1 Nick: 1) Has been doing measurements with AFL for Sponsor4 to reduce directory download size. Preliminary results are promising. 2) I'm doing the 024..030 release process and bugfix stuff on my own; it's gotten a bit gnarly. Hoping for the best. Alison: 1) Lots of planning for the Tor Meeting. Will be reaching out to folks individually about potential agenda items and intra-team meetings. 2) Tor glossary is up here for now (Colin is still working on internal linking): https://trac.torproject.org/projects/tor/wiki/doc/community/glossary next step is for it to go onto the support portal. 3) UX and community teams are working on the support portal together; Alison and Linda will continue this in Seattle next week. 4) New translations have been merged into the Tor Browser manual. 5) Trainings: planning a lot of both LFP and Global South workshops right now. 6) Community council guidelines are in the discussion phase right now and will go up for a vote after next week. When that's completed, we will vote to keep the existing social contract or modify it with some of the suggestions we received from our greater community. Mike: 1) Misc. Arturo: 1) ooniprobe now support 4 languages: English, Spanish, French and Italian. New mobile app will be released tomorrow or next week. 2) Began implementing the probe orchestration system. 3) People can now join the ooni IRC channels via a slack bridge: https://slack.openobservatory.org/ Karsten: 1) Worked with Cass and iwakeh on writing a funding proposal for metrics things. 2) Released metrics-lib 1.6.0 together with iwakeh. 3) Made plans with irl for a blog post on Atlas/Onionoo usability fixes, scheduled for Monday, March 6. 4) Worked with RaBe and iwakeh on more website redesigns of CollecTor and Onionoo based on what we did for Metrics. Josh: 1) Onboarding: paperwork, read/watched much of *.torproject.org, getting accounts, etc. 2) Merged my press contacts with existing lists 3) Spoke with reporter from Fast Company, Steven Melendez (@smelendez) for upcoming story related to OTF. He previously wrote a good story about Tor and SecureDrop. 4) Learning about UAE issue (uptick in connections) and deciding how to follow-up with reporter from The Intercept. Josh to email vegas-team list with notes. 5) Putting together ideas, goals, and strategies for Seattle meeting, focusing on social media, press, community, and web site. Isabela: 1) working on digging information from july - 2014 till nov - 2016 on sponsorS for the final report - fun times! Due feb 28 2) Looking good to finish next milestone of sponsor5 (orfox work) Due feb 28 3) Working with Hiro on a survey about moving away from Trac - is not an easy mission but we are on it!. Hiro also is working with metrics and made schleuder work! which was a big pain in the ass. 4) Linda is working with support team on their new site, and making sure it goes along with the big plan of building new portals as part of tpo redesign 5) Dealing with small personnel stuff (people who worked on orfox payments etc). Trying to get some stuff prepared for the meetings in Amsterdam. Preparing for trip next week to Seattle - while in seattle will try to set up the table stuff at planetlibre

1 0

Fwd: GSoC 2017: Tor has been accepted as a mentor organization!
by Damian Johnson 27 Feb '17

27 Feb '17

Woohoo! We've been accepted! ---------- Forwarded message ---------- From: Google Summer of Code <summerofcode-noreply(a)google.com> Date: Mon, Feb 27, 2017 at 9:01 AM Subject: GSoC 2017: Tor has been accepted as a mentor organization! To: atagar1(a)gmail.com [image: Google Summer of Code] Congratulations! Tor has been selected as a Google Summer of Code 2017 mentor organization. You can now invite mentors and update your organization profile. Please click here to visit your dashboard: https://summerofcode. withgoogle.com/dashboard/ This email was sent to atagar1(a)gmail.com. You are receiving this email because of your participation in Google Summer of Code 2017. https://summerofcode.withgoogle.com To leave the program and stop receiving all emails, you can go to your profile <https://summerofcode.withgoogle.com/dashboard/profile/> and request deletion of your program profile. For any questions, please contact gsoc-support(a)google.com. Replies to this message go to an unmonitored mailbox. © 2017 Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

3 2

Diversifying Bandwidth Measurement
by teor 27 Feb '17

27 Feb '17

Hi Rob and bandwidth authority operators, I've just been contacted by an Exit operator whose Exits have all seen a 60% drop in traffic over the last few weeks. This drop has been caused by a drop in bandwidth authority measurements, which seems to affect Exit connections that transit to bwauth.torproject.org (cymru) through Cogent. For example, from Australia, I get about 3 MB/s to bwauth.torproject.org [0]. A relay operator in France gets 500 KB/s. This affects at least Online S.a.ss, Feralhosting, and trabia. Do we want Exit traffic concentrating in the US? (It seems all the affected networks are UK/EU.) Is there any way that we can fix this? It also has a social impact: there are a number of disappointed exit operators out there. Can someone run another bwauth HTTPS download server on another (non-North American?) network? The required files are listed here[1]. If they did, would the bandwidth authority operators apply a patch to use it? Or could it go on 38.229.70.2 ? (That's the alternate bwauth address in the source code[2], but it's down.) [0]: https://bwauth.torproject.org/bwauth.torproject.org/64M [1]: https://gitweb.torproject.org/torflow.git/tree/NetworkScanners/BwAuthority/… [2]: https://gitweb.torproject.org/torflow.git/tree/NetworkScanners/BwAuthority/… T -- Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B ricochet:ekmygaiu4rzgsk6n xmpp: teor at torproject dot org ------------------------------------------------------------------------

6 7