- tor-project - lists.torproject.org

Summary of meek's costs, September 2016
by David Fifield 27 Oct '16

27 Oct '16

Here's the summary of meek's CDN fees for September 2016. App Engine + Amazon + Azure = total by period all 2014 $600.63 + $917.89 + $0.00 = $1518.52 January 2015 $464.37 + $669.02 + $0.00 = $1133.39 February 2015 $650.53 + $604.83 + $0.00 = $1255.36 March 2015 $690.29 + $815.68 + $0.00 = $1505.97 April 2015 $886.43 + $785.37 + $0.00 = $1671.80 May 2015 $871.64 + $896.39 + $0.00 = $1768.03 June 2015 $601.83 + $820.00 + $0.00 = $1421.83 July 2015 $732.01 + $837.08 + $0.00 = $1569.09 August 2015 $656.76 + $819.59 + $154.89 = $1631.24 September 2015 $617.08 + $710.75 + $490.58 = $1818.41 October 2015 $672.01 + $110.72 + $300.64 = $1083.37 November 2015 $602.35 + $474.13 + $174.18 = $1250.66 December 2015 $561.29 + $603.27 + $172.60 = $1337.16 January 2016 $771.17 + $1581.88 + $329.10 = $2682.15 February 2016 $986.39 + $977.85 + $445.83 = $2410.07 March 2016 $1079.49 + $865.06 + $534.71 = $2479.26 April 2016 $1169.23 + $1074.25 + $508.93 = $2752.41 May 2016 $525.46 + $1097.46 + $513.56 = $2136.48 June 2016 $0.00 + $1117.67 + $575.50 = $1693.17 July 2016 $0.00 + $1121.71 + $592.47 = $1714.18 August 2016 $0.00 + $1038.62 + $607.13 = $1645.75 September 2016 $0.00 + $932.22 + $592.92 = $1525.14 -- total by CDN $13138.96 + $18871.44 + $5385.91 = $37396.31 grand total https://metrics.torproject.org/userstats-bridge-transport.html?start=2016-0… The number of users was up again slightly compared to the preceding month. == Amazon a.k.a. meek-amazon == On 2016-08-18, I changed the Amazon CDN price class to "Use Only US, Canada and Europe" to see if it would be cheaper. (As recorded in the log at https://trac.torproject.org/projects/tor/wiki/doc/meek#Users.) That's why there's no "Asia Pacific", "EU", "South America" etc. The setting doesn't affect who can use meek-amazon; it only affects what edge servers get used. It helped a little. We had a little more bandwidth compared to last month (3225 GB vs. 2865 GB) and it cost a little less ($251.88 vs. 277.90). EU (Ireland) 287M requests $345.37 1261 GB $98.34 Global 7M requests $7.12 20 GB $1.56 US East (Northern Virginia) 327M requests $327.34 1943 GB $151.98 -- total 622M requests $679.83 3225 GB $251.88 charge for alarms $0.50 https://atlas.torproject.org/#details/F4AD82B2032EDEF6C02C5A529C42CFAFE5165… == Azure a.k.a. meek-azure == Zone 1 6641 GB $577.79 Zone 2 110 GB $ 15.13 -- total 6751 GB $592.92 https://atlas.torproject.org/#details/AA033EEB61601B2B7312D89B62AAA23DC3ED8… Earlier reports in this series: https://trac.torproject.org/projects/tor/wiki/doc/meek#Costs

1 0

Booth during the FOSDEM
by Syl 27 Oct '16

27 Oct '16

Hello, I'm a member of Nos oignons (https://nos-oignons.net/ a french association that runs exit nodes) and I thought about having a booth during the next FOSDEM to talk about Tor and related stuff. What do you think about sharing a common booth? I send this invitation to Tor Project, Tails Project, Frënn vun der Ënn, and torservers.net. The deadline for stand proposals is October 31, I would send the proposal in one month if we are enough people to participate. I think we need to be 3 people each day. Thanks. Syl

3 3

Notes from October 20 2016 Vegas team meeting
by Karsten Loesing 27 Oct '16

27 Oct '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 See this posting for context: https://lists.torproject.org/pipermail/tor-project/2016-April/000223.html Notes for October 20 2016 meeting: Alison: 1) Support desk stopgap measures: what we're doing before support.torproject.org goes live 2) nothing else to report, unless you want to hear from the Cool and Exciting world of Library Freedom Project, where things are going really well :) Nick: 1) 030 is forked. 2) 029 needs more testing, but we have no binaries. :( * GeKo says he's figured out the bug on ln5's nightlies system, and will try to get nightlies back tomorrow. Woo! 3) While Documenting stuff, I've been noticing how many old things we still have in rephist.c and geoip.c and elsewhere. Metrics folks: any time to review what we collect there and make sure it's all actually useful? [Already talked with Karsten and Iwakeh here; no need to discuss at meeting.] Kate: 1) Planning out next 6 months of communications. 2) Working with OONI on ooniprobe 2.0.0 announcement to solicit media coverage :) 3) Organizing 200 pages of press clips for DRL report 4) Working on various ongoing media stories. Waiting to hear back on Wendy's opinion piece on Rule 41. Mike: 1) Talked with CloudFlare a bit on tor-access. They said they will be rolling out the WAF thing to paid sites, and their systems will be ready for the blind token extension this quarter (they meant by end of year, I think). Arturo: 1) Released ooniprobe 2.0.0 (yay!). Still need to publish announcement, but waiting for debian and osx packages to be done. 2) Gotten more or less green light from Ford to have them cover the costs of the hackathon. 3) Many interesting and useful conversations at OTF summit. Isabela: 1) A contract was sent to Tom (dev that will work on Orfox FE) - Linda is leading the copy for the UI and our deadline is to have a final copy by EOM 2) Working on DRL quarterly report 3) Sent call for help on testing core tor releases - got some responses in tor-dev list and some off the list - need to follow up with them now that the release is out 4) Lots going on at the OTF summit 5) lots of things to catch up because of OTF summit Karsten: 1) We're on track with enabling CollecTor instances to synchronize data from each other, which is our most important October milestone. Shari: 1) We hired new finance and grants manager, Brad Parker. He starts on November 14. 2) Working on end-of-year campaign stuff. 3) Meeting with lots of people this week at OTF Summit. -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBCAAGBQJYEF/AAAoJEC3ESO/4X7XBVwkIALU9jGYE33UGEBzA90oKNwfJ YlxR0ydAwMYyGkVMdye9EfUDoH8t9SmJtG9m8OP3m8xfnymHR/Sf0SRNVaJ020l6 bk/IMC7scCq2RPaEsVNjktHFNTxqjRBBAs7C/Q7cxN4YpIjO7kmjkPFM11J2Uqh6 F6G6HIPS5CVqkaPH98B9JLz6M0syE6WZf0pclagF7KRmM8OOC2z3LQ72MVCvh1UH /RyFkyW08hhaxQBs+pPDuVKZLYELwyLDldl+VMVY5ICuIqsN8rzy1k3xYmIjVf6v lqp0co1yhbD2ekTjIVgAcYS7lUKNbYDJJ0aKhcghJ5PLArU/oXT35NSv0gDbd/E= =3SYK -----END PGP SIGNATURE-----

2 2

What folks say about Tor
by Shari Steele 26 Oct '16

26 Oct '16

Hey all. I’m collecting quotes of complimentary things our adversaries have said about Tor for possible inclusion on a t-shirt, and I would really appreciate your help. Roger got me started with a bunch of quotes below, but most of them are missing attribution. So if any of you have additional quotes and/or can add attribution to Roger’s quotes below, I would be extremely grateful. Thanks in advance for your help with this! Shari > Here are some: > > - "Still the King of high secure, low latency Internet Anonymity" "There > are no contenders for the throne in waiting" -- from an NSA or GCHQ > slide deck in 2011 > > - "Tor Project staffed with smart people!" from the same slide deck > > - "Tor is very good -- No passive exploitation :-(" from the same slide > deck > > - "TorButton: A Thorn in the side of SIGINT" from the same slide deck > > - "Catastrophic: near-total loss/lack of insight to target communications, > presence" refering to impact of Tor, TrueCrypt, and Tails. > > - "Very naughty people use Tor" -- GCHQ, in a summary slide from a slide > deck analyzing hidden service security (also "Near impossible to figure > out who is talking to who"). > > There are a few more that I should hunt down, like a good quote about > Tails, and something complimentary of Mike in particular. But maybe > those will be a good start?

4 4

can someone reboot storm?
by isabela 25 Oct '16

25 Oct '16

Hi there, sorry if this is the wrong place. I've noticed since yesterday that storm is not accessible. The fact I can't access the information there is starting to block some work from moving forward. I know isis has been taking care of our storm instance for a while. I don't know if she is still doing it, and if she is, I don't know if she has time now to get storm working again. (thank you isis!) Would be possible to reboot the machine and see if it comes back? Again, sorry if this is not the right place. Isabela

1 1

Fwd: [Netfreedom] IFF 2017 Call for Proposals
by Shari Steele 25 Oct '16

25 Oct '16

> Begin forwarded message: > > From: Sarah Bushman <sbushman(a)irex.org> > Subject: [Netfreedom] IFF 2017 Call for Proposals > Date: October 25, 2016 at 8:16:28 AM PDT > To: netfreedom(a)lists.cymru.com > > Dear IF colleagues, > > The 2017 Call for Internet Freedom Festival (IFF) Proposals is currently open, and we would love for you to submit your session or workshop ideas to be part of the festival program! > > The *final deadline* for submission on Monday, November 28th, 2016. We’re expecting a big turnout, so submit your session soon! > > Host a Session —> https://internetfreedomfestival.org/host-a-session/ <https://internetfreedomfestival.org/host-a-session/> > > Furthermore, via funds raised for the IFF Diversity & Inclusion Fund, the IFF is now able to offer a limited amount of travel assistance to the event, to participants whose session proposals are selected for the festival program! > > IFF Diversity & Inclusion Fund -> https://internetfreedomfestival.org/internet-freedom-festival-diversity-inc… <https://internetfreedomfestival.org/internet-freedom-festival-diversity-inc…> > > The IFF is a gathering made for this community, by this community - and we want to ensure that your voice and ideas are heard. So think big, be innovative, be creative, and send in your session ideas by November 28th! > > And remember, IFF is March 6-10, 2017 this year! See you in Valencia! > > -- > > Sarah E. Bushman > > Program Officer > > IREX/USA > > 1275 K Street, NW, Ste. 600 > > Washington, DC 20005 > > 202-628-8188 x129 > > Skype: sarahbushman > > Make a Better World: www.irex.org/donate <http://www.irex.org/donate> > > _______________________________________________ > Netfreedom mailing list > Netfreedom(a)lists.cymru.com > https://lists.cymru.com/mailman/listinfo/netfreedom

1 0

Anything wrong with "March 22-28, Amsterdam"?
by Roger Dingledine 25 Oct '16

25 Oct '16

Hi folks, We're considering to do our next big meeting March 22-28, 2017, in or near Amsterdam. These dates would be right before Rightscon in Belgium, which could be a great coincidence since people could come to our hackdays before they go to Rightscon. Let us know if there are problems with these dates! :) --Roger

2 2

Learning how to give talks & getting practice
by Griffin Boyce 19 Oct '16

19 Oct '16

This was originally sent to tor-meeting@, but is being forwarded here by request. Hope it is useful! =) -------- Original Message -------- Hi all, At the meeting, there was a discussion on how people can learn how to give talks -- particularly if they have some experience but want to refine their skills a bit. I'm not sure if there was a proper report-back on it, but here are some suggestions on getting experience: 1) Join Toastmasters or similar clubs Toastmasters costs money ($128/year in Boston), but there are lots of similar clubs on Meetup and around universities that don't cost anything and are a great way to get over fear of speaking and get feedback on technique. 2) Prepare and give a talk to your cat Or by yourself. Presenting your talk to yourself (out loud) is a great way to figure out what works and what doesn't, or what passages just need more work. It's also good to do this before giving a proper talk -- not just for practice, but also to make sure that your talk is within time limits. 3) Give talks at small events that aren't recorded Presenting a lightning talk at a hackerspace or small conferences can be a low-stress way to get experience. 4) Hard Mode Give talks that *are* recorded, and pick apart your performance later by watching that talk on YouTube. I wouldn't say I *recommend* this, but have definitely done it ;P MOAR TIPS: http://web.mit.edu/urop/resources/speaking.html https://www.toastmasters.org/Resources/Public-Speaking-Tips -- Accept what you cannot change, and change what you cannot accept. PGP: 0x03cf4a0ab3c79a63

5 4

Notes from October 17th Community Team Meeting
by Yidhra Kthanid 19 Oct '16

19 Oct '16

Notes are at https://storm.torproject.org/grain/Xyq4zgG9PZop5SxaG8yPoj # Glossary * Work has been done on glossary in the last few weeks https://storm.torproject.org/shared/wjpmSOq0ku3zZEppCdPV_xXr4mXPxjKvIH3PUyx… * Almost done, needs reviewing * Should try to make less jargony and easier to understand # Support desk stopgap efforts * support.torproject.org is in the works, RT help desk being disabled * Help desk getting too many requests, but now all users emails execdir@ for help * Support messages being forwarded to a mailing list staffed by Phoul + flexlibris * Only meant to be a temporary stopgap * No current timeline on the portal # Tor browser manual progress * Manual has been edited * Ready apart from a few screenshots that have to be retaken * Next steps are publishing blog post and opening up translations # What we need help with * Support portal templates (some out of date, some unfriendly, and some not covered)! # T-Shirt update * Jon has processes in place and want to see if he can keep up on his own - doesn't want help * Don't want to start sending emails about tshirts while not being able to keep up with backlog * Not 100% on size of backlog - maybe hundreds? * Emails operators to say that we're working on backlog and thinking of other stuff * Possibility of automating (enter fingerprint to check eligibility) * Automatically sending emails to eligible operators. * Possibility of editing the Tor Weather code to do this * Handing out tshirts at 33C3/other cons to people who don't wish to give address - ask arma2 -- pgp: 0xBD26F0F8029825DD

1 0

Notes from October 13 2016 Vegas team meeting
by Karsten Loesing 17 Oct '16

17 Oct '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 See this posting for context: https://lists.torproject.org/pipermail/tor-project/2016-April/000223.html Notes for October 13 2016 meeting: Georg: 1) Worked on the upcoming proposal for OTF 2) SponsorU items 3) Whom do we plan to have on stage for a possible 33c3 talk? 4) Helped a bit with the meeting with the frontend dev for the security slider port to Orfox Nick: 1) Very soon, 0.2.9 will be in testing. We will need it tested! Isabela will send out requests and appeals. Please help! 2) Not much else to report. Kate: 1) Following up on multiple articles in progress about Tor (good news articles). 2) Following up on Seattle meeting action items 3) Holiday plan for teaching family and other totally nontechnical people about Tor (Each one teach five). 4) Sent Q and A to reporter who is covering trump and uses SecureDrop. 5) Tweaking Wendy's privacy op-ed. 6) Met with reporter and all he wanted to talk about was fixing Tor Messenger bug b/c he loves Tor Messenger. Mike: 1) The blog is being converted. Performing complicated comment merge+extraction will cost more $$. Do we really need those comments? (We probably should have reverted to the dump where they still existed if so, so I guess not?) 2) Android is still a mess. The CopperHead folks are upset about Android 7.1 and the semi-discontinuation of the current devices. This may delay things, but they think if we launch Tor Labs soon, it will be OK. I told them I am shooting for end-of-month. Arturo: 1) Posted OONI UX designer job on the Tor website and open source design (https://www.torproject.org/about/jobs-ooni-ux-designer.html.en, https://github.com/opensourcedesign/jobs/pull/112) Please share and spread as much as you can. 2) Resolved some of the last critical bugs for the 2.0.0 release, so that is likely to be released very soon now. 3) We would like to have a OONI internal meeting mid November + 2 days of Open Hack day. This would allow us to meet the new developer in person and do some better coordination. 4) We published a long report on internet controls in Zambia during the elections: https://ooni.torproject.org/post/zambia-election-monitoring/ 5) The 2.0.0 release of ooniprobe will have enabled by default a tor deck, that will check to see if the meek domain fronts are working and if plain tor is able to bootstrap properly. 6) Working on a report on internet censorship in Ethiopia. Alison: 1) had a call with Maria to begin preliminary work on future partnerships with OONI and the Community Team (for Rapid Response, Outreach, etc) 2) support portal: still chugging along, will talk to Shari today about getting the resources we need to make this happen 3) membership guidelines: waiting on Lunar's final notes and then will send the doc to tor-internal@ to approve 4) been noticing/hearing from users about our woefully out-of-date and misleading documentation. we should have a sprint to fix these. will the website redesign help? should this happen before that? 5) where do we stand on the general contact email? Karsten: 1) We're very close to merging and deploying data synchronization between CollecTor instances. Finally! 2) Planning to ask devs to help with writing and testing CollecTor and later Onionoo operation guides, though not before end of next week: https://people.torproject.org/~karsten/volatile/metrics-operation-guides-20… 3) We realized that metrics-lib builds are reproducible, and we're considering to publish a guide for reproducing them, to have multiple people building and signing releases, and to publish this as Good Tor News later this year or in 2017. Isabela: 1) Follow up with Adam on OTF reports and NCE 2) Follow up with OTF proposal v4 / deadline friday 3) Plan on sending out today a call asking help on testing core tor releases / goal is to have a QA team that can help us with that on every release / 0.2.9 will be a pilot 4) Met Thomas the dev who will do the orfox front end gig with us / we will send him the contract asap and he should get started pretty soon 5) Great progress on security slider user experience on orfox / which can be used on tor browser desktop as well / Linda is driving this 6) Preparing for Chile 7) Starting to collect stuff for Q3 report to sponsorS 8) all week next week at OTF summit Roger: 1) CCC tickets: connect people who need them with people who have tokens. I've done some of this connecting, and I'll do more soon. People should let me know if they still need a ticket / if they have an extra voucher. 2) NSF posters + slides: for the January NSF PI meeting, we need one summary slide per NSF project, and we have five of them. Also an optional poster. I'll be commandeering Tor people to help with those in the coming week. 3) Rachel's NSF proposal: her sociology Tor+Wikipedia paper got accepted, and now they plus Mako are writing an NSF proposal to explore the https://blog.torproject.org/blog/call-arms-helping-internet-services-accept… topic further. I'm going to write them a letter of support on behalf of Tor, but not be a co-proposer, because conflict. 4) Next dev meeting: Mar 12-16 is during swsx so it's a poor choice. Next option we're looking at is Mar 23--27. Let us know if there's a conflict. 5) Speaker's bureau: I filed a ticket: https://bugs.torproject.org/20305 but there is no movement yet. 6) I'm talking to some professors about a new NSF proposal to fund a research testbed Tor network, which could build from the testing Tor network that dgoulet et al are operating. The proposal timing is not good but maybe we'll try something anyway. I have Cass in the loop. Shari: 1) trying to catch up after a week's vacation. :( 2) on the verge of hiring a chief financial and grants officer 3) working on getting end-of-year campaign ready 4) revising budget for otf proposal 5) finishing up with 990 -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBCAAGBQJYBMiDAAoJEC3ESO/4X7XBYycH/iH12PocwTnQQAmQaru8MOWG F7RjvNGZMsIcmdNfhAWFuvekrNeoCL00DugnLJU8+PCebrvFwY1VCjVjmmMQIGIx XtOqEJDMXb0MSQjI8VQNn7nExuoHw6TQNQftfzuh70Xt8VMdGgMgTuIIuRykaWBF Phrz4B+L28ChRmEXy09FwW60xpj2SDSDEwHHTKLGYQc1we+6DVZI7S1ohlN6LW8X ADwi3llfYAJc+J3bN6KrE6nBtDuzKBQZgNsOZllFwHd5DfRfKATGzz3BVP77NBhi D70PMRkutkxI+A3J26reMVyeTGJ8Xger02qOhPo6DdHddQUuyChhWQR721S7cig= =YMid -----END PGP SIGNATURE-----

1 0