tor-project

tor-project@lists.torproject.org

16 participants
2324 discussions

Notes from May 26 2016 Vegas team meeting
by Karsten Loesing 30 May '16

30 May '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 See this posting for context: https://lists.torproject.org/pipermail/tor-project/2016-April/000223.html Notes for May 26 2016 meeting: Georg: 1) Tor Browser 6.0 is ready for QA. Planned release day is May 30. 2) I worked on our search engine problem. Disconnect switched the fallback to DuckDuckGo. 3) I reviewed 2 papers Nick: 1) Tor 0.2.8.3-alpha is almost out. Which TorBrowser will get it? 2) Talked with some folks and Isabela about doing an audit on the Tor code. (Roger set this up; I think an existing funder would be paying?) Seems promising so far. 3) Had meeting with Isabela and team. Productive but team feels stretched. IMO we need: * A sense that everybody is doing their fair share * Nearly all people to be contractually 'allowed' to work on nearly all things. * To track non-coding tasks as well a coding tasks when planning time and allocating people * A better sense of how much volunteers would like to commit, and a way for us to be able to ask the paid people before the volunteers. We have planned to: * Get a working code review system * Add review-points to trac * chop 0.2.9 and future releases down to size * improve our workflow. * have another meeting in july Kate: 1) Rule 41 update —Need to stay with bipartisan talking point: DOJ is trying to get a major policy change enacted with a rule change in the Federal Rules of Criminal Procedure--DOJ is trying to circumvent Congress. Rep. Poe's office is introducing co-sponsors in two's-- one democrat for each republican. It's going well. 2) CloudFlare update: More allies are joining us; we are planning to track CloudFlare's promises and hold them accountable, probably via an email list. 3) A-Clinic Collaboration - probably not a formal collaboration with this foundation that wants to use onion services to do anonymous health surveys, etc. A letter describing our involvement is still being negotiated. 4) Recruited volunteers to help with HTML tagging so we can upload more things to the Tor website. 5) Press Kit: Volunteer David Stanton is working on user stories document and I am finishing onion services doc as well as document that describes myths about Tor and explains the realities. 6) US Mission in Uganda held an Internet freedom and human rights Twitter event - we participated (5/26) We received some media coverage about the onion services hackfest, including a nice SlashDot piece - BoingBoing: https://boingboing.net/2016/05/26/tor-project-is-working-on-a-we.html - The Register:http://www.theregister.co.uk/2016/05/25/nextgen_tor_to_use_distributed_rng_55character_addresses/ - Softpedia: http://news.softpedia.com/news/tor-to-use-never-seen-before-distributed-rng… - IBTimes: http://www.ibtimes.co.uk/tor-develops-its-own-random-number-generator-make-… - Hackread: https://www.hackread.com/tor-developers-next-gen-onion-service/ - Slashdot: https://yro.slashdot.org/story/16/05/25/2347238/tor-to-use-distributed-rng-… - Naked Security: https://nakedsecurity.sophos.com/2016/05/26/tor-takes-on-the-question-what-… FBI is being pressured by the judge to release Tor 0-day in Washington State case Shari: 1) board meeting on Friday; anything you want me to bring up? 2) Monday is a holiday in the U.S. How to handle holidays? 3) Personnel update. Isabela: 1) Organized retrospective meeting with the network team for the team to have a sense of how things are going and where are the pain points we need to improve. Went pretty good for my first irc retrospective :) 2) Working with Alison on updating the SIDA proposal. 3) Working on possible Mozilla grant - at first with TBB and Nathan because we were thinking of applying for mobile browser - now with Karsten because we probably will apply for metrics instead per Mozilla's feedback. 4) focus on making the release 0.2.9 smaller / pick up DRL work (M&E and F-indicators and extension) are the things for me starting next week Mike: 1) I'm wrapping up the last thing before I take a vacation: I'm going to help with the Mozilla proposal(s), and then start my vacation, ideally on June 1st. Karsten: 1) Continued writing a funding proposal for metrics work, together with Isabela and Cass who have been extremely helpful so far. Deadline is May 31st. 2) Just talked to weasel about the virtual machines at one of our hosters basically falling apart. We'll need to migrate them ASAP to a new hoster. Apparently, budget shouldn't be an issue there, because we're freeing up some money by reducing hosting elsewhere, but just in case there's overlap we might be paying a few hundred USD extra. -- Asked Shari for ~200 USD/mo, which she approved. Alison: 1) social contract draft is with Lunar and Matt for one more review before Vegas leads 2) the community council is writing our guidelines -- still in its very early stages 3) sent another update of the membership doc to this team for review - -- next it'll go to tor-internal@ 4) reworking SIDA proposal with Isa 5) OTF concept note for building community capacity within Torservers was invited for a full proposal! 6) Cloudflare meeting (Mike will probably update) 7) support team met yesterday. we hope to integrate this team more into the community team. phoul has done major updates to the support docs and we're now working on plans for distribution and translation and maintenance. -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBAgAGBQJXTAaJAAoJEC3ESO/4X7XBO5oH/3FH9ZW7O1aJwkIl0vByaPP9 JXDosBBm2FssksZn9z498qQ7o6HkSlfrO0oT3nnjvQlteYGZZQj+gdDuFpiQ8KTD tKlUk753iWDgPrsK0+WMszhKYpe/zNIOQ7GieY0Xx3Nkxmzvc/buMlxA+qHkF09/ NFv6WqJUTy3nZsf8N8JwD2pUiFafXLzthEmrGgLsHxNsIFN1BbdI4npZIueV0Cpw 1cQk01eZKZtoDi03/ilAsVtUoeBYRmjktUgdFIAh9vXputAfG7pgliJCbxj2j+Dw k8p7HfjJQsgistQJJrLVus9Tt1rYQULDqw0r2G9cn6dhuO/zBSNJNBJeqgWH+hE= =FVjF -----END PGP SIGNATURE-----

1 0

Fallback Directory Monitoring
by Damian Johnson 29 May '16

29 May '16

Hi Tim, hi Nick. As requested on ticket #18177 [1] we now have a new DocTor monitor [2] that checks the reachability of our fallback directories. A notification that looks like the following is sent to the three of us and #tor-bots if over 25% of the fallbacks are unreachable... ------------------------------------------------------------ 29/100 (29%) fallback directories have become slow or unresponsive... * 9504CB22EEB25D344DE63CB7A6F2C46F895C3686 => IPv6 ORPort is unreachable (2a03:b0c0:3:d0::2ed:7001:9050) * AEA43CB1E47BE5F8051711B2BF01683DB1568E05 => IPv6 ORPort is unreachable (2001:41d0:a:74a::1:443) * 8B7F47AE1A5D954A3E58ACDE0865D09DBA5B738D => DirPort is unreachable (178.217.184.32:9030) ... etc... ------------------------------------------------------------ A fallback is defined as unavailable if... * We can't connect to its ORPort. * We can't connect to its DirPort. * We can't connect to its IPv6 ORPort (if it has one). * It takes longer than 15 seconds to provide the consensus (download times are usually ~3s). The cron runs once per day. Happy to also send these to tor-consensus-health@ if anybody there wants the notices. Cheers! -Damian [1] https://trac.torproject.org/projects/tor/ticket/18177 [2] https://gitweb.torproject.org/doctor.git/tree/fallback_directories.py

1 0

Monday holiday in the U.S.
by Shari Steele 26 May '16

26 May '16

Hey all. Monday is Memorial Day in the United States: https://en.wikipedia.org/wiki/Memorial_Day The Tor office in Seattle will officially be closed on Monday. All other U.S. Tor people are invited to take a holiday. And those of you who live in other countries, please take off an appropriate holiday wherever you are. :) Our new human resources manager, Erin Wyatt, will be starting on June 6. Coming up with a good holiday policy will be one of the (many) things on her to-do list. Shari

1 0

Re: [tor-project] Onion sites vs onion services vs hidden services
by Nathan Freitas 26 May '16

26 May '16

On Wed, May 4, 2016, at 10:41 AM, Paul Syverson wrote: > On Wed, May 04, 2016 at 07:36:23AM +0000, Yawning Angel wrote: > > On Wed, 4 May 2016 01:30:13 +0000 > > Alison Macrina <alison(a)libraryfreedomproject.org> wrote: > > > So, I want to propose that we choose onion sites or onion services > > > once and for all (I'm in favor of the former because most users have > > > no idea what is meant by "services"; it sounds too vague). Then, > > > whenever we see somewhere on torproject.org or any of our > > > documentation or whatever that still reads hidden services or onion > > > services, that we kill it with fire. > > > > Disagree, because this further reinforces the idea that the internet is > > centered around port 80/443, and is nonsensical given some of our > > prominent use cases ("Ricochet is based around Tor onion services" vs > > "Ricochet is based around Tor onion sites". One of these statements is > > correct, and one is not). > > To further Yawning's point and provide an example of using both terms: > Ricochet is an onion service in which each Ricochet client > creates a local onionsite that others connect to. Actually, for me, the user of the word "service" is something that is a machine-readable endpoint, an API or protocol, while "site" is a meant to have some human-facing aspect that is able to be browsed or read through a web browser or something of that nature. I would say that Ricochet is only an onionservice, while something like SecureDrop or Globaleaks would be an onionsite that offers onionservices as part of the application. +n

8 7

Is there a mission statement / list of goals for Tor Project?
by Virgil Griffith 25 May '16

25 May '16

This seems like an obvious question, but https://www.torproject.org/about/overview.html gives me no clear answer. ----- I've gotten conflicting reports on the goals of Tor ranging among: * protecting Tor users and HSs * preventing linking of IP addresses to internet traffic regardless of whether someone is a Tor user * developing and enabling privacy-enhancing technologies * furthering human rights * furthering "internet freedom" * furthering "privacy" Each of these is a fine and good thing. However, the current ambiguity makes it unclear what to do when these individually good things conflict. For example, Tor2web enables linking of client IP addresses to internet traffic. Which is bad. However, it also "furthers human rights" as it's the largest whistleblowing platform. How to adjudicate? When are we, as agents of Tor Project, serving "the ideology of Tor" versus our own personal ideology? Clarifying this is a standard part of organizational maturity. For example, Greenpeace does a similar thing: * http://www.greenpeace.org/eastasia/about/mission/ * http://www.greenpeace.org/international/en/about/our-core-values/ While different people will have slightly different ideas of what constitutes the "Tor ideology", and we don't want to wantonly pick fights, it seems reasonable for management to triage these individually good things into different tiers. Because right now I see people claiming orthogonal things as Tor Project's ideology. -V

2 3

Fwd: Cambridge Offices Officially Closed
by Shari Steele 24 May '16

24 May '16

Begin forwarded message: > From: Susan Abt <sueabt(a)gmail.com> > Subject: Cambridge Offices Officially Closed > Date: May 24, 2016 at 3:07:08 PM PDT > To: Shari Steele <ssteele(a)torproject.org> > > Shari, > > The office are officially closed! > > Sue The Tor Project, Inc., administrative offices new contact information: Our mailing address is: 217 1st Ave S #4903 Seattle, WA 98194 Our physical address is: 80 S Washington #203 Seattle, Washington 98104

1 0

Fwd: [Festival] Job Opportunities Ahead!
by Shari Steele 24 May '16

24 May '16

Hey all. A couple of interesting employment opportunities. One for IFF, the other for Internews. Shari Begin forwarded message: > From: IFF Team <team(a)internetfreedomfestival.org> > Subject: [Festival] Job Opportunities Ahead! > Date: May 24, 2016 at 10:00:09 AM PDT > To: festival(a)ta3m.org > > Hi all, > > We have two interesting job opportunities to share with you today: > > *Creative Project Manager for the Internet Freedom Festival at IREX*: > https://www.irex.org/careers/all-positions?p=job%2FoYB82fwt > > *Technologist for the Human Rights team at Internews*: > http://chm.tbe.taleo.net/chm04/ats/careers/requisition.jsp?org=INTERNEWS&cw… > > Not for you? Pass the offers around! > > Are you also looking for talent? Let us know and we'll help you spread > the word. > > Have a great day, > The IFF Team > > -- > The Internet Freedom Festival Team > @InternetFF | www.internetfreedomfestival.org > > PGP: 2E1D CC33 A362 0BD6 236E 540A F60A 89AD 6FF9 7A2F > > _______________________________________________ > Festival mailing list > Festival(a)ta3m.org > https://lists.ghserv.net/mailman/listinfo/festival

1 0

Fwd: Save the Date - Berlin Privacy Lab and Pizza - May 25
by isis 24 May '16

24 May '16

----- Forwarded message from Dave Huseby <dhuseby(a)mozilla.com> ----- > From: Dave Huseby <dhuseby(a)mozilla.com> > Subject: Save the Date - Berlin Privacy Lab and Pizza - May 25 > Date: Mon, 23 May 2016 16:06:43 -0700 > Message-ID: <57438D03.9070002(a)mozilla.com> > User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.7.2 > To: undisclosed-recipients: ; > Delivered-To: <isis+torproject(a)patternsinthevoid.net> > > Hi Georg and Isis, > > I was asked to forward this announcement for the first Privacy Lab in > Berlin. Would you mind forwarding this on to the Tor Project people? > > Thanks! > > --dave > > > > > Join Mozilla on May 25 for a *workshop on the Internet of Things and > Privacy*. > > To start the workshop, we'll share some IoT and Privacy research; then > we'll work as a group on how to hack the research for a German audience. > > Detailed agenda will be coming soon. > > Did we mention pizza? Please RSVP here > <https://www.eventbrite.com/e/privacy-lab-berlin-iot-and-privacy-worksho > p-tickets-25517489498>. > > Capacity is limited to 40 people. > > For more information on Privacy Lab checkout ourwiki > <https://wiki.mozilla.org/Privacy/Privacy_Lab/Berlin>. > > When > Wednesday, May 25, 2016 from 6:00 PM to 8:00 PM > > Where > Mozilla Berlin Office > 6, Voltastraße 5, 13355 Germany, Treppe, Berlin, Germany > > > > -- > -- > Stacy Martin > Senior Manager, Privacy and Engagement > Mozilla > 2 Harrison Street, Suite 700, San Francisco, CA > 916-390-4845 (cell) > stacy(a)mozilla.com <mailto:stacy@mozilla.com> > > ----- End forwarded message ----- -- ♥Ⓐ isis agora lovecruft _________________________________________________________ OpenPGP: 4096R/0A6A58A14B5946ABDE18E207A3ADB67A2CDB8B35 Current Keys: https://fyb.patternsinthevoid.net/isis.txt

1 0

people.tpo down
by Peter Palfrader 23 May '16

23 May '16

Hi, just fwi. perdulce (aka people.tpo) has been down since Friday->Saturday night. The out-of-band management system is failing at stopping/starting it. We have opened a ticket with the hoster, but so far haven't heard back from them. Cheers, -- | .''`. ** Debian ** Peter Palfrader | : :' : The universal https://www.palfrader.org/ | `. `' Operating System | `- https://www.debian.org/

1 1

Notes from May 19 2016 Vegas team meeting
by Karsten Loesing 23 May '16

23 May '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 See this posting for context: https://lists.torproject.org/pipermail/tor-project/2016-April/000223.html Notes for May 19 2016 meeting: Kate: 1) Update on Rule 41 2) Negotiated with CNN lawyers to remove random, bad video that originally accompanied Isis interview (not a different weird but ok video dominates the page, and they have created a hilarious piece of art of Isis jumping from a US flag to a German flag) 3) Have attempted to talk down a CNBC reporter from Dark Web article; sent statement and referred her to Matt Blaze, Chris Soghoian and EFF 4) Fast.ly meeting 5) Scheduling the next CloudFlare meeting 6) Meeting with volunteer to work on Press Kit 7) Put out Asn’s blog post to reporters 8) We need headshots - photographer at dev meeting? 9) Crazy idea: Tor Security Day! Pick 5 security goals for the group (everyone can PGP easily, everyone has an encrypted hard drive, everyone is on Signal or knows how to use Tails) and then we choose a day where collectively up our infosec as an organization. Remember, the weakest link can affect the strongest links! Georg: 1) We are finalizing Tor Browser 6.0. Planned release date is next Friday (May 27). 2) I worked on our search engine situation (Disconnect is falling back to Bing see: https://trac.torproject.org/projects/tor/ticket/19115): We decided to make sure the fallback in Tor Browser 6.0 is not Bing but DuckDuckGo and that I am writing an email to Disconnect coordinating with them and asking about the search volume of Tor users per day and whether that dropped due to Google results being not available anymore. 3) I read and commented on a draft of the membership document 4) I spent some time thinking about the replacement for our e10s Y2 deliverable. We are planning to do browser independent sandboxing work instead and are currently defining its scope. Nick: 1) Isabela repeatedly saves my team from confusion. Go Isabela! 2) I don't have any banking set up on BoA yet. Should I ping them, or delegate it? 3) Has Shari now got the ability to read svn, decrypt passwords, and share them with Seattleites as appropriate? This is pretty important. I'm not policy-boss, so I shouldn't be password dispenser. Alison: 1) thanks for all your edits on the membership doc! I will incorporate them and send back another draft before it goes to tor-internal@. let's talk about it! 2) the rest of the community docs will follow -- that is, the social contract and the community council guidelines. it may make sense to send these all to tor-internal at the same time, since they refer to each other. 3) community team participation still continues to be an issue. I've been pinging a lot of folks to see if they might want to get involved. most people are pretty busy! 4) LFP has a bunch of cool events coming up -- international librarians conference, some UK dates, ALA, Toronto. thinking of how/if this might be valuable to share with tor-project@. this is why we really need TWN. 5) eager to get on Rule 41 advocacy and training. Shari: 1) DRL coming to visit the Seattle office on June 27-28. This is a standard visit they do to all of their grantees. 2) Meeting with EFF last week - They're going to organize a meeting between us and CloudFlare and may be willing to do an activism campaign if that is unsuccessful. 3) Talked with Giant Rabbit about creating our donation infrastructure. They've sent me a contract. Roger: 1) Still excited about the new Tor blog. Any news? Answer: Mike moved the thread with Kevin forward a bit. 2) FYI: My next 4 months are going to be even messier, logistics-wise and schedule-wise, than the last few months. :( Karsten: 1) Wrote documentation for metrics-lib (Java library to parse Tor descriptors used by Metrics, Onionoo, etc.) and discussed many improvements to developing/building/releasing/running CollecTor (Tor descriptor archive). The medium-term goal is that Metrics doesn't depend as much on a single person anymore. 2) Thought more about funding proposal and started a list of research papers citing Tor Metrics, which already became quite a list (50+ entries). Didn't start with the Metrics calendar or video of calendar just yet. -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBAgAGBQJXQwO4AAoJEC3ESO/4X7XBjykH/Ax48ihz5dlKl+LKXJ6a/blE Q36tP9CjJgoveNpJ10fxoQaKYSLpIJknlk6LQRnNzgw3AOK1nR4jRWxcpcL/tEdB pf4qEdS91FIXRaNdcxVopBy1Kib4m0bXHN08/BALO5jfzaUtSl/hsWnUS1kyNAhK EzzG//B1MQGkG4/krJAqAnfAlh3MUGOF+7qYcdysCfY/Wd60vk4z57aiDUYNZO+Q sMwE1Q13hzKHwApcP1c4uTE+XYfR4leFxily/joSwVUjB53R7xcTnb/c7nwO4sjj a+yjOs5lY1Wy3inDxBPXb++mSpCxGDjKyMczwexEtuI99Wgj/UbrVBHsNhMzfgA= =xio0 -----END PGP SIGNATURE-----

2 1

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

tor-project