- tor-project - lists.torproject.org

Notes from November 10 2016 Vegas team meeting
by Karsten Loesing 14 Nov '16

14 Nov '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 See this posting for context: https://lists.torproject.org/pipermail/tor-project/2016-April/000223.html Notes for November 10 2016 meeting: Georg: 1) Preparations for releases with donation banner (6.0.6, 6.5a4 and 6.5a4-hardened) 2) More coordination with Mozilla on a roadmap for Tor related things 3) How to bill for future OTF work? Isabela: 1) Behind with reports -- priority to get it done asap 2) Linda is working with Metrics team on ux for the metrics.tpo page - she is documenting the project here -> https://trac.torproject.org/projects/tor/wiki/doc/UX/MetricsRedesign / she is also in Berlin now and has a lot of different things going on, meeting w/ metrics team, working w/ ooni on new hiring, participating/presenting at underexposed (ux event organized by simply secure) 3) I wonder if I should write a report back from chile - in short I presented to librarians students at a university and has a contact who wants to help get a library to be a pilot in chile (at least start with the LFP privacy pledge / did a training with around 25 people / did a interview for a local tech mgz / presented at another university / presented at primavera hacker / met with university of chile about hosting a tor relay (sent report about this one) 4) campus party brazil (10k people audience) offered Tor a space for the whole week to do presentations, workshops etc. I am trying to organize the space with local people who are part of the community 5) misc - catching up with hiring for network team and ooni / trying to following up with donation campaign stuff / misc network team stuff Nick: 1) End-of-month crunch 2) Hiring. 3) I've been reading/watching these once or twice a day: http://www.humansofnewyork.com/post/152973683571/i-first-ran-for-congress-i… https://boingboing.net/2016/11/09/harvey-milks-hope-speech.html Alison: 1) Checking in with Colin tomorrow about creating a support portal timeline. 2) Sent the community council guidelines to the -internal list for feedback Kate: 1) Fewer than normal media interactions because of election media deluge. 2) Writing press releases for OONI and user manual. Mike: 1) Phone Blog Post draft is mostly written. I could use some help from Kate, others. 2) Tor Labs Arturo: 1) OONI internal meeting (did a lot of very useful discussions and planning for the next steps) + open hackathon happening tomorrow. Karsten: 1) Berlin UX/metrics team meeting with Linda (lnl) and iwakeh to redesign Tor Metrics website. We made some good progress here, but we also decided not to do all the things at once. 2) We'll have a web designer to implement the Tor Metrics website changes in November/December. 3) Asked Silvia (hiro) to help with getting metrics builds on Jenkins and giving feedback on the CollecTor manual. Shari: 1) end of year stuff 2) personnel stuff 3) planning Amsterdam Tor meeting -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBCAAGBQJYKZ7HAAoJEC3ESO/4X7XBe3IH/3ZJt+sINsFUb+8jSAzxOIOn JBg3YJSdNx10B7t0XD/o8bOvMJu1SVuR59K/r4ySEndUiGt+uJoQGiK9gf7aetlC zf9xO6I+P8BUBHoFeDSF5m9nHaD4bmBmy//gMF8Yj06XPknseWHtQTK1mApLdHNY dR/KbwbJ1q3/nGkWRskFCkiypg178BH9Anjq0ro3X6EoAyg3x2W1pFCtdVvW+pT1 YI41GLH8ILtON11mpjlOX2HceyKL0cvBvsRXWwx7BW1IkY86eBWbIefZRqFQB8vS 8yNcSvXG8t5fUI7GUGBDiqOcax1kJ0fVvGHN5yPm7esLiwhG++ipnqd7+93OR9M= =JMl3 -----END PGP SIGNATURE-----

1 0

Aspiration Dev Summit
by Allen Gunn 13 Nov '16

13 Nov '16

Hi friends, I hope this finds you all well and having good weekends after a tough week at least in the US. With apologies for not posting this sooner, I wanted to let folks on this list know about our annual Nonprofit Software Development Summit, taking place this year 16-18 November in Oakland, California US. More information is here: https://aspirationtech.org/events/devsummit16 It's a place to share Tor-related knowledge, projects and updates with a diverse network of activists, and meet other techies focused on free, open and non-corporate efforts for privacy, anonymity and general good. We have some Tor-identified folks coming, and we welcome more if you are in range of the Bay Area. We have guest registrations available for anyone who wants to join, and even have a little travel budget left if you are inclined to come from farther away. I'm happy to answer questions. Hope to see some of you there. thanks & peace, gunner -- Allen Gunn Executive Director, Aspiration +1.415.216.7252 www.aspirationtech.org Aspiration: "Better Tools for a Better World" Read our Manifesto: http://aspirationtech.org/publications/manifesto Follow us: Facebook: www.facebook.com/aspirationtech Twitter: www.twitter.com/aspirationtech --

1 0

Report on meeting with university of Chile on hosting Tor relays
by isabela 08 Nov '16

08 Nov '16

Background: During Tor Meeting in Seattle (2016) we had a session to discuss about building a stronger presence in the global south. One of the things that came out of the session was to build partnership with universities in the global south, starting in Latin America, to seek the opportunity to have them hosting Tor relays. University of Chile meeting: Isabela and ilv met with Salvador Millaleo, the coordinator of 'Centro de Estudos de Derecho Informático' -- Center of Studies of Computer Law -- or something close to it :) they exist for a long time and one of the people working there too is the founder of Derechos Digitales. We explained why Tor would like to have more servers in the south, how that was important for the network to have geolocation diversity and also how that could be something interesting for them. We said that beyond helping with our mission, which has to do with their mission as well (freedom of expression and privacy online) it could be a great opportunity for them as a study center in the university for research. They were very excited about it and said they were going to reach out to the CS department to build a partnership with them on hosting a tor relay. I mentioned that for the CS department that could also be a very good opportunity for the students to learn more about security and privacy online and to do research. We mentioned PETS as it seems one professor from there (Alejandro Hevia) have been part of PETS committee to review papers. Next steps: We will follow up with Salvador and try to establish a contact with someone at the CS school there as well to see if we can get them excited about hosting a relay. We also plan on document the discussion we had at the last Tor Meeting inside the community team wiki (finally) so we can carry on this work in a more organized way :) and in coordination with the community team. Reach out to other universities in Latin America. Work with Derechos Digitales to see if we can initiate a campaign for tor relays in the region -- which will be a big help with this initiative.

1 0

Notes from November 3 2016 Vegas team meeting
by Karsten Loesing 07 Nov '16

07 Nov '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 See this posting for context: https://lists.torproject.org/pipermail/tor-project/2016-April/000223.html Notes for November 3 2016 meeting: Karsten: 1) Let's start thinking about mass mailing donors from the last fundraising campaign, in a way that they won't hate us. Nick: 1) sponsor-U guard hacking targets. Arturo: 1) Working on having better integration testing for the various OONI components after a critical bug came out in 2.0.0 (will probably be something based on travis and docker). 2) The OONI hackathon is 1 week away. Georg: 1) Firefox releases got moved one week and Tor Browser will follow which means we have one week more to test the donation banners and to get the strings for the fundraising campaign translated (the english ones landed on Torbutton master) Shari: 1) a couple of personnel things 2) trying to get end-of-year fundraising stuff in place, including reaching out to major donors (suggestions welcomed on folks to approach!) 3) started meeting planning for Amsterdam (suggestions welcomed on this topic, as well!) -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBCAAGBQJYIENsAAoJEC3ESO/4X7XBrk0IAMNrqTxA6uL6N5AER+jPXQT+ XbATt5Jy2UE8yoFkekQe3R9zQ5Dg3UJLJyfzjiVylE5CKOk0BXEElFb2Hr/ge30a h1YB3SlowakVIjM7JOycBxHW4zJqha0gAlqN2tvboqHsQp2paixs+1jWe6AxVY16 fAVh8gmWqerV40N0SuFDq3zVN5YmkT7D3XZuWCCZQ5vzSbjUHubvzEeQ/TGm7mNq 2l6RIDj1orxw6r0S7Tq6ro0qo/Th2DrPbI8d2qPI4a1BpNYXSYr7GwVNhUYIl/Q2 NJgQyKSqL6crpiWVhE3lu8Kjspx/iUUgMARfmFKY64AeVEOoLTB3yGL7UC+si8k= =E2w8 -----END PGP SIGNATURE-----

2 1

Notes from October 27 2016 Vegas team meeting
by Karsten Loesing 01 Nov '16

01 Nov '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 See this posting for context: https://lists.torproject.org/pipermail/tor-project/2016-April/000223.html Notes for October 27 2016 meeting: Alison: 1) Not much to report this week: working on membership docs, doing lots of trainings around New England, USA Roger: 1) It looks like we're moving forward on a preliminary NSF proposal to work on a plan for a live testing Tor network, which can help answer more realistic research questions than tools like Chutney or Shadow can answer. If we do it we'll be submitting it within a week. Cass is in the loop. 2) Reminder that I'll be offline from Nov 3 through Nov 11ish. Kate: 1) Coordinating a few blog posts 2) Networking with colleagues in other NGOS (best practices, etc.) 3) Stillll following up with major stories in the offing (that have been going forever). 4) Not much else this week (was sick for a couple days earlier) Arturo: 1) Got the thread for the UX design hire started 2) Publishing a report on censorship in Egypt that includes some analysis of how they are blocking Tor: https://ooni.torproject.org/post/egypt-network-interference/ 3) Published announcement of the Hackthon in Berlin (seems like the metrics team is also there during those days, yay!) https://ooni.torproject.org/post/berlin-hackathon-2016/ Georg: 1) Got nightly builds working again (thanks to ln5) 2) SponsorU work and release preparations Nick: 1) Let's keep the testing coming! Karsten: 1) We're debugging the new sync feature of CollecTor and should have a release in the next couple of days. 2) Will soon need help with invoicing for the first completed Sponsor X task. 3) We'll soon have a web designer to help with Metrics website improvements and Atlas usability tweaks. Isabela: 1) Silvia - new services maintainer starts on Nov 2nd! - I am trying to organize her on-boarding as I won't be online as much due to trip to Chile 2) Linda is kicking ass :) I couldn't be happier with the work she is doing. We are closing the loop with the security slider on orfox, she also documented all this work in the team wiki and organized the whole thing. Now she is preparing for her trip to Berlin and for our next job which is to work with the metrics team on the site usability report 3) Preparing for Chile - 3 different talks and one workshop - translating a lot of things to spanish etc 4) Working on Q3 report for DRL (vixe maria!) 5) Trying to get people to test tor alpha release 6) grant stuff - hiring new people stuff Shari: 1) lots of preparation for end-of-year campaign 2) preliminary planning stuff for Amsterdam 2017 meeting 3) catching up after time out of the office, Tor meeting, etc. -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBCAAGBQJYGLiIAAoJEC3ESO/4X7XBrt8H/jlaxfviWB3vSAXIiqY+HQnF YSpLLp0LF8GEBO52cq06oKNxyMBmkKK6FmUVKMhMWF8qPmsfbv0Y0zwMAfap0Tfk fVHSWn+NIXGCW5WdJarXiwMNHT7pKOz3qJNNhORpMnplCDK/MG1DCT5MT2D96Z7E rhJLxb9pg4OM//wSFNs4Q2ZAEdhBABz3TE0BUVv4c0VbZtMXw7pRN4df0S4jzeu+ miJkGD6SJht1qKmpU2s3ZSeA2If9SqVddGf60bQo0lHLV0f6/nnpZD6/Vb7vLlT4 tBm0D+CoWEVWrxJXnpFyNNE35Jd8wWM3/O2MjgttEvWneNkNURoNl/ZQnOMSO3M= =Wdam -----END PGP SIGNATURE-----

1 0

Orfox Security Slider
by Linda Naeun Lee 31 Oct '16

31 Oct '16

Hello, We're making good progress in porting over the security slider to Orfox. We finished designing the mobile user interface. Documentation of our the process here: https://trac.torproject.org/projects/tor/wiki/doc/UX/OrfoxSecuritySlider We also hired a contractor to develop the appropriate changes. Yay! P.S.: A wiki page with a tl;dr gist of our projects (and the link to each project's page) is here: https://trac.torproject.org/projects/tor/wiki/org/teams/UxTeam/PastProjects You can get to that page (and other good ones) from the UX team page: https://trac.torproject.org/projects/tor/wiki/org/teams/UxTeam The UX team page now has links to UX references and lists open tickets. ٩(^‿^)۶, Linda -- Current Key: https://pgp.mit.edu/pks/lookup?search=lindanaeunlee GPG Fingerprint: FA0A C9BE 2881 B347 9F4F C0D7 BE70 F826 5ED2 8FA2

1 0

Fwd: [guardian-dev] Orbot 15.2.0 RC 1 is out!
by Nathan Freitas 28 Oct '16

28 Oct '16

----- Original message ----- From: Nathan of Guardian <nathan(a)guardianproject.info> To: guardian-dev(a)lists.mayfirst.org Subject: [guardian-dev] Orbot 15.2.0 RC 1 is out! Date: Fri, 28 Oct 2016 09:13:11 -0700 A culmination of work done since March, has resulted in a stable-enough-for-jazz RC 1 release of Orbot v15.2. This is the first RC using our new Gradle-based project, which we hope to even further refine into various useful modules. We've also redesigned the user interface to be even simpler for new users, yet still have all the exciting options for the old timers. Along with this, we are now shipping on ARM only, SDK16+ release, reducing the app download size to 7MB. We will be released x86 and MIPS builds shortly, as well. We are considering our strategy for supporting older devices, in particular Android 2.3, or at least 4.0/SDK-14, and up still. The build has been pushed to Google Play, and is available as an APK for direct download. We will update our F-Droid repository shortly, as always. APK: https://guardianproject.info/releases/Orbot-v15.2.0-RC-1-arm.apk (.asc) Tag: https://gitweb.torproject.org/orbot.git/commit/?id=9077bd236df388cd14727252… CHANGELOG: https://gitweb.torproject.org/orbot.git/tree/CHANGELOG /** 15.2.0 RC 1 / 28 October 2016/ 9077bd236df388cd14727252d0be676d39b841e5 **/ 9077bd2 update to 15.2.0-RC-1 and SDK min of 16 085ddb3 make ndk-build work again 290059d fix string path in build script dec3d95 add proguard rules to optimize orbot binary 160383b update for gradle /** 15.2.0 BETA 2 / 24 October 2016/ 12b1198b4b5a4420b16b9ab166828bba787c17aa **/ 345aea9 move the controls to the left sidebar; improve VPN mode more c76d935 improve bridge dialog display ac037a9 fix browser install request 28f1dbf make the VPN/apps mode have a better UI flow c1ffdbb put browser button back in 518f70d comment out notification actions for now 0bb8e84 update Tor version to 0.2.8.9 2125db1 make start and stop of Tor service all hanlded through executor d8648a5 remove meek-google as an option 2676cd3 update resource to make smaller 3ee6b2a don't fail on lint for release builds e3d7ca2 update tor 0.2.8.9 /** 15.2.0 BETA 1 / 13 October 2016/ abaa3f83fc64b9b567a5d437d26db0f660655f35 **/ cd8b549 add the compiled tun2socks lib for devs who just want to work on UI 3c181bc add the proguard rules 9948975 we aren't going to show a notification light 50f33c9 make sure we set VPN mode properly before we launch the service 9de4f54 using compat builder for notifications 3308602 improve the code for launching the pdnsd daemon da0fb10 multiple fixes to re-enable VPN mode and pdnsd daemon ca238c6 continued re-integration of VPN feature 1614921 clean pdnsd binaries from libs in Makefile 1db5676 continue to migrate service and VPN code d5f2c06 remove vpn code that is now in the service module 34c7cfd modify jni build inclusion 268002b fix build scripts for new paths 6333a45 update gitignore to handle orbotservice binary libs d2cf545 move jni code and VPN logic from app module to service 9f61afc improve tor service event handling and display ebc046e remove littleproxy reference (for now!) 7c3a16f we don't need a separate service for the VPN 7950cac remove dated information in the BUILD file 9afbb00 update gradle props and ignore files we don't want in repo 7284a5e make sure Tor start/stop work - use Process instance instead of processID lookup - reply on Tor's HALT command 55e08b9 tweak homescreen layout and strings d56fdb2 renable polipo 90d77ce modify imports 1ffea58 udpate resource paths bab7904 target API 14 aba7f8e update gitignores for gradle 912cb74 update tor to 0.2.8.7 5a4e00a fix paths for new module layout ecf9023 remove old binaries 10f1ade update makefile and add new patch b52023a move assets to service project 549399b launch default activity from notification 6d0fdbb update gitignore for gradle project 56683a3 add pdnsd library in for vpn service DNS! 29fd07a remove patches from here, moved to external 0f00e12 move patches to external since that is what it is applied to (external code) 54b3349 remove redundant code from old ant build format (not in gradle modules) 18682e4 big check-in of major gradle refactor; now building and running! VPN features are disabled for now bdb5893 update translations 4023354 Merge branch 'master' of github.com:n8fr8/orbot 6e45c07 Merge pull request #32 from ghost/patch-1 21c5bcc Remove typo 5adcbec Start the meek transport for custom meek bridges -- Nathan of Guardian nathan(a)guardianproject.info _______________________________________________ List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev To unsubscribe, email: guardian-dev-unsubscribe(a)lists.mayfirst.org

1 0

IFF 2017 - Calling for your session proposal(s)
by Matthew Finkel 28 Oct '16

28 Oct '16

/---------------------------\ /-----------------------\ | "Private" Network | | Internet | | | | | | User--------------\ ---------- /-server ___ | | User-------------| Firewall |-------server | | ------/ | |\-server | | User--------/ / ---------- \--- | | User-/ | ^ | \-----server | \---------------------------/ /|\ \-----------------------/ | / / Freedom Added and removed here! :) (Five newlines?) (See [0] if you don't understand the reference for the artwork) Shari beat me to the annoucement, but that's not a problem - this'll be a little more detailed. I've been slacking a bit too much on this. I'd like to encourage everyone in submitting a proposal for hosting a session at IFF [1][2]. Next year IFF will be 6-10 March. Specifically, many of you should look at the Tools and Tech theme - but the other themes are equally interesting depending on your interests. (Yes, I am promoting this because I'm on the team selecting the sessions, and yes I loved Valencia and IFF so much for the last two years I think we should all go hangout for a third year). All proposal submissions are due by 28 November (1 month from today. No, I don't know which timezone). You can learn about the other themes on the website [2], but below is the summary of Tools and Tech: The Tools & Technology Theme creates a space for the technologists that are driving the next generation of security and privacy tools to share knowledge and concerns, as well as to work collectively on core infrastructure and known obstacles. It will feature workshops, sessions and hackathons to improve the quality of existing tools and support the development of innovative solutions to technical and real-world problems. Topics for the Tools & Technology Theme include: - New tools and latest developments in circumvention technologies - Tool monitoring: i.e. ensuring what we are using and propagating is still good? - Tool contextualization and transferability - Hardware Security I can think of at least one person or team that fits each of these, so I'll try getting in touch with you, but I hope everyone will consider submitting a proposal. Just some thoughts: - Workshop or hackathon for OONI and lepidopter - Panel about testing Tor with shadow/chutney/testnet and the future - Presentation about Tails on QubesOS on X200 using libreboot - Presentation on distributing Tor in censored regions and how it's improved - Presentation on OONI, its growing dataset, and how the backend was designed to be webscale compatible. - Presentation on Metrics, the challenges of obtaining data, and its excellent visualizations - Something with bridges, bridge auth, bridgedb, monitoring bridges, ... - ?? There are many potential sessions, let me know if you're interested or have any questions. I should mention here that all sessions are either 1 hour or 3 hours long, so factor that into the equation, as well. Thanks, Matt [0] https://img.washingtonpost.com/rf/image_1484w/2010-2019/WashingtonPost/2013… https://www.washingtonpost.com/world/national-security/nsa-infiltrates-link… [1] https://internetfreedomfestival.org/host-a-session/ [2] https://people.torproject.org/~sysrqb/Tools-and-Tech.png (required linkage) [3] https://internetfreedomfestival.org/#themes [4] boots-and-cats-and-boots-and-cats

1 0

Summary of meek's costs, September 2016
by David Fifield 27 Oct '16

27 Oct '16

Here's the summary of meek's CDN fees for September 2016. App Engine + Amazon + Azure = total by period all 2014 $600.63 + $917.89 + $0.00 = $1518.52 January 2015 $464.37 + $669.02 + $0.00 = $1133.39 February 2015 $650.53 + $604.83 + $0.00 = $1255.36 March 2015 $690.29 + $815.68 + $0.00 = $1505.97 April 2015 $886.43 + $785.37 + $0.00 = $1671.80 May 2015 $871.64 + $896.39 + $0.00 = $1768.03 June 2015 $601.83 + $820.00 + $0.00 = $1421.83 July 2015 $732.01 + $837.08 + $0.00 = $1569.09 August 2015 $656.76 + $819.59 + $154.89 = $1631.24 September 2015 $617.08 + $710.75 + $490.58 = $1818.41 October 2015 $672.01 + $110.72 + $300.64 = $1083.37 November 2015 $602.35 + $474.13 + $174.18 = $1250.66 December 2015 $561.29 + $603.27 + $172.60 = $1337.16 January 2016 $771.17 + $1581.88 + $329.10 = $2682.15 February 2016 $986.39 + $977.85 + $445.83 = $2410.07 March 2016 $1079.49 + $865.06 + $534.71 = $2479.26 April 2016 $1169.23 + $1074.25 + $508.93 = $2752.41 May 2016 $525.46 + $1097.46 + $513.56 = $2136.48 June 2016 $0.00 + $1117.67 + $575.50 = $1693.17 July 2016 $0.00 + $1121.71 + $592.47 = $1714.18 August 2016 $0.00 + $1038.62 + $607.13 = $1645.75 September 2016 $0.00 + $932.22 + $592.92 = $1525.14 -- total by CDN $13138.96 + $18871.44 + $5385.91 = $37396.31 grand total https://metrics.torproject.org/userstats-bridge-transport.html?start=2016-0… The number of users was up again slightly compared to the preceding month. == Amazon a.k.a. meek-amazon == On 2016-08-18, I changed the Amazon CDN price class to "Use Only US, Canada and Europe" to see if it would be cheaper. (As recorded in the log at https://trac.torproject.org/projects/tor/wiki/doc/meek#Users.) That's why there's no "Asia Pacific", "EU", "South America" etc. The setting doesn't affect who can use meek-amazon; it only affects what edge servers get used. It helped a little. We had a little more bandwidth compared to last month (3225 GB vs. 2865 GB) and it cost a little less ($251.88 vs. 277.90). EU (Ireland) 287M requests $345.37 1261 GB $98.34 Global 7M requests $7.12 20 GB $1.56 US East (Northern Virginia) 327M requests $327.34 1943 GB $151.98 -- total 622M requests $679.83 3225 GB $251.88 charge for alarms $0.50 https://atlas.torproject.org/#details/F4AD82B2032EDEF6C02C5A529C42CFAFE5165… == Azure a.k.a. meek-azure == Zone 1 6641 GB $577.79 Zone 2 110 GB $ 15.13 -- total 6751 GB $592.92 https://atlas.torproject.org/#details/AA033EEB61601B2B7312D89B62AAA23DC3ED8… Earlier reports in this series: https://trac.torproject.org/projects/tor/wiki/doc/meek#Costs

1 0

Booth during the FOSDEM
by Syl 27 Oct '16

27 Oct '16

Hello, I'm a member of Nos oignons (https://nos-oignons.net/ a french association that runs exit nodes) and I thought about having a booth during the next FOSDEM to talk about Tor and related stuff. What do you think about sharing a common booth? I send this invitation to Tor Project, Tails Project, Frënn vun der Ënn, and torservers.net. The deadline for stand proposals is October 31, I would send the proposal in one month if we are enough people to participate. I think we need to be 3 people each day. Thanks. Syl

3 3