- tor-project - lists.torproject.org

Notes from October 20 2016 Vegas team meeting
by Karsten Loesing 27 Oct '16

27 Oct '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 See this posting for context: https://lists.torproject.org/pipermail/tor-project/2016-April/000223.html Notes for October 20 2016 meeting: Alison: 1) Support desk stopgap measures: what we're doing before support.torproject.org goes live 2) nothing else to report, unless you want to hear from the Cool and Exciting world of Library Freedom Project, where things are going really well :) Nick: 1) 030 is forked. 2) 029 needs more testing, but we have no binaries. :( * GeKo says he's figured out the bug on ln5's nightlies system, and will try to get nightlies back tomorrow. Woo! 3) While Documenting stuff, I've been noticing how many old things we still have in rephist.c and geoip.c and elsewhere. Metrics folks: any time to review what we collect there and make sure it's all actually useful? [Already talked with Karsten and Iwakeh here; no need to discuss at meeting.] Kate: 1) Planning out next 6 months of communications. 2) Working with OONI on ooniprobe 2.0.0 announcement to solicit media coverage :) 3) Organizing 200 pages of press clips for DRL report 4) Working on various ongoing media stories. Waiting to hear back on Wendy's opinion piece on Rule 41. Mike: 1) Talked with CloudFlare a bit on tor-access. They said they will be rolling out the WAF thing to paid sites, and their systems will be ready for the blind token extension this quarter (they meant by end of year, I think). Arturo: 1) Released ooniprobe 2.0.0 (yay!). Still need to publish announcement, but waiting for debian and osx packages to be done. 2) Gotten more or less green light from Ford to have them cover the costs of the hackathon. 3) Many interesting and useful conversations at OTF summit. Isabela: 1) A contract was sent to Tom (dev that will work on Orfox FE) - Linda is leading the copy for the UI and our deadline is to have a final copy by EOM 2) Working on DRL quarterly report 3) Sent call for help on testing core tor releases - got some responses in tor-dev list and some off the list - need to follow up with them now that the release is out 4) Lots going on at the OTF summit 5) lots of things to catch up because of OTF summit Karsten: 1) We're on track with enabling CollecTor instances to synchronize data from each other, which is our most important October milestone. Shari: 1) We hired new finance and grants manager, Brad Parker. He starts on November 14. 2) Working on end-of-year campaign stuff. 3) Meeting with lots of people this week at OTF Summit. -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBCAAGBQJYEF/AAAoJEC3ESO/4X7XBVwkIALU9jGYE33UGEBzA90oKNwfJ YlxR0ydAwMYyGkVMdye9EfUDoH8t9SmJtG9m8OP3m8xfnymHR/Sf0SRNVaJ020l6 bk/IMC7scCq2RPaEsVNjktHFNTxqjRBBAs7C/Q7cxN4YpIjO7kmjkPFM11J2Uqh6 F6G6HIPS5CVqkaPH98B9JLz6M0syE6WZf0pclagF7KRmM8OOC2z3LQ72MVCvh1UH /RyFkyW08hhaxQBs+pPDuVKZLYELwyLDldl+VMVY5ICuIqsN8rzy1k3xYmIjVf6v lqp0co1yhbD2ekTjIVgAcYS7lUKNbYDJJ0aKhcghJ5PLArU/oXT35NSv0gDbd/E= =3SYK -----END PGP SIGNATURE-----

2 2

What folks say about Tor
by Shari Steele 26 Oct '16

26 Oct '16

Hey all. I’m collecting quotes of complimentary things our adversaries have said about Tor for possible inclusion on a t-shirt, and I would really appreciate your help. Roger got me started with a bunch of quotes below, but most of them are missing attribution. So if any of you have additional quotes and/or can add attribution to Roger’s quotes below, I would be extremely grateful. Thanks in advance for your help with this! Shari > Here are some: > > - "Still the King of high secure, low latency Internet Anonymity" "There > are no contenders for the throne in waiting" -- from an NSA or GCHQ > slide deck in 2011 > > - "Tor Project staffed with smart people!" from the same slide deck > > - "Tor is very good -- No passive exploitation :-(" from the same slide > deck > > - "TorButton: A Thorn in the side of SIGINT" from the same slide deck > > - "Catastrophic: near-total loss/lack of insight to target communications, > presence" refering to impact of Tor, TrueCrypt, and Tails. > > - "Very naughty people use Tor" -- GCHQ, in a summary slide from a slide > deck analyzing hidden service security (also "Near impossible to figure > out who is talking to who"). > > There are a few more that I should hunt down, like a good quote about > Tails, and something complimentary of Mike in particular. But maybe > those will be a good start?

4 4

can someone reboot storm?
by isabela 25 Oct '16

25 Oct '16

Hi there, sorry if this is the wrong place. I've noticed since yesterday that storm is not accessible. The fact I can't access the information there is starting to block some work from moving forward. I know isis has been taking care of our storm instance for a while. I don't know if she is still doing it, and if she is, I don't know if she has time now to get storm working again. (thank you isis!) Would be possible to reboot the machine and see if it comes back? Again, sorry if this is not the right place. Isabela

1 1

Fwd: [Netfreedom] IFF 2017 Call for Proposals
by Shari Steele 25 Oct '16

25 Oct '16

> Begin forwarded message: > > From: Sarah Bushman <sbushman(a)irex.org> > Subject: [Netfreedom] IFF 2017 Call for Proposals > Date: October 25, 2016 at 8:16:28 AM PDT > To: netfreedom(a)lists.cymru.com > > Dear IF colleagues, > > The 2017 Call for Internet Freedom Festival (IFF) Proposals is currently open, and we would love for you to submit your session or workshop ideas to be part of the festival program! > > The *final deadline* for submission on Monday, November 28th, 2016. We’re expecting a big turnout, so submit your session soon! > > Host a Session —> https://internetfreedomfestival.org/host-a-session/ <https://internetfreedomfestival.org/host-a-session/> > > Furthermore, via funds raised for the IFF Diversity & Inclusion Fund, the IFF is now able to offer a limited amount of travel assistance to the event, to participants whose session proposals are selected for the festival program! > > IFF Diversity & Inclusion Fund -> https://internetfreedomfestival.org/internet-freedom-festival-diversity-inc… <https://internetfreedomfestival.org/internet-freedom-festival-diversity-inc…> > > The IFF is a gathering made for this community, by this community - and we want to ensure that your voice and ideas are heard. So think big, be innovative, be creative, and send in your session ideas by November 28th! > > And remember, IFF is March 6-10, 2017 this year! See you in Valencia! > > -- > > Sarah E. Bushman > > Program Officer > > IREX/USA > > 1275 K Street, NW, Ste. 600 > > Washington, DC 20005 > > 202-628-8188 x129 > > Skype: sarahbushman > > Make a Better World: www.irex.org/donate <http://www.irex.org/donate> > > _______________________________________________ > Netfreedom mailing list > Netfreedom(a)lists.cymru.com > https://lists.cymru.com/mailman/listinfo/netfreedom

1 0

Anything wrong with "March 22-28, Amsterdam"?
by Roger Dingledine 24 Oct '16

24 Oct '16

Hi folks, We're considering to do our next big meeting March 22-28, 2017, in or near Amsterdam. These dates would be right before Rightscon in Belgium, which could be a great coincidence since people could come to our hackdays before they go to Rightscon. Let us know if there are problems with these dates! :) --Roger

2 2

Learning how to give talks & getting practice
by Griffin Boyce 19 Oct '16

19 Oct '16

This was originally sent to tor-meeting@, but is being forwarded here by request. Hope it is useful! =) -------- Original Message -------- Hi all, At the meeting, there was a discussion on how people can learn how to give talks -- particularly if they have some experience but want to refine their skills a bit. I'm not sure if there was a proper report-back on it, but here are some suggestions on getting experience: 1) Join Toastmasters or similar clubs Toastmasters costs money ($128/year in Boston), but there are lots of similar clubs on Meetup and around universities that don't cost anything and are a great way to get over fear of speaking and get feedback on technique. 2) Prepare and give a talk to your cat Or by yourself. Presenting your talk to yourself (out loud) is a great way to figure out what works and what doesn't, or what passages just need more work. It's also good to do this before giving a proper talk -- not just for practice, but also to make sure that your talk is within time limits. 3) Give talks at small events that aren't recorded Presenting a lightning talk at a hackerspace or small conferences can be a low-stress way to get experience. 4) Hard Mode Give talks that *are* recorded, and pick apart your performance later by watching that talk on YouTube. I wouldn't say I *recommend* this, but have definitely done it ;P MOAR TIPS: http://web.mit.edu/urop/resources/speaking.html https://www.toastmasters.org/Resources/Public-Speaking-Tips -- Accept what you cannot change, and change what you cannot accept. PGP: 0x03cf4a0ab3c79a63

5 4

Notes from October 17th Community Team Meeting
by Yidhra Kthanid 19 Oct '16

19 Oct '16

Notes are at https://storm.torproject.org/grain/Xyq4zgG9PZop5SxaG8yPoj # Glossary * Work has been done on glossary in the last few weeks https://storm.torproject.org/shared/wjpmSOq0ku3zZEppCdPV_xXr4mXPxjKvIH3PUyx… * Almost done, needs reviewing * Should try to make less jargony and easier to understand # Support desk stopgap efforts * support.torproject.org is in the works, RT help desk being disabled * Help desk getting too many requests, but now all users emails execdir@ for help * Support messages being forwarded to a mailing list staffed by Phoul + flexlibris * Only meant to be a temporary stopgap * No current timeline on the portal # Tor browser manual progress * Manual has been edited * Ready apart from a few screenshots that have to be retaken * Next steps are publishing blog post and opening up translations # What we need help with * Support portal templates (some out of date, some unfriendly, and some not covered)! # T-Shirt update * Jon has processes in place and want to see if he can keep up on his own - doesn't want help * Don't want to start sending emails about tshirts while not being able to keep up with backlog * Not 100% on size of backlog - maybe hundreds? * Emails operators to say that we're working on backlog and thinking of other stuff * Possibility of automating (enter fingerprint to check eligibility) * Automatically sending emails to eligible operators. * Possibility of editing the Tor Weather code to do this * Handing out tshirts at 33C3/other cons to people who don't wish to give address - ask arma2 -- pgp: 0xBD26F0F8029825DD

1 0

Notes from October 13 2016 Vegas team meeting
by Karsten Loesing 17 Oct '16

17 Oct '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 See this posting for context: https://lists.torproject.org/pipermail/tor-project/2016-April/000223.html Notes for October 13 2016 meeting: Georg: 1) Worked on the upcoming proposal for OTF 2) SponsorU items 3) Whom do we plan to have on stage for a possible 33c3 talk? 4) Helped a bit with the meeting with the frontend dev for the security slider port to Orfox Nick: 1) Very soon, 0.2.9 will be in testing. We will need it tested! Isabela will send out requests and appeals. Please help! 2) Not much else to report. Kate: 1) Following up on multiple articles in progress about Tor (good news articles). 2) Following up on Seattle meeting action items 3) Holiday plan for teaching family and other totally nontechnical people about Tor (Each one teach five). 4) Sent Q and A to reporter who is covering trump and uses SecureDrop. 5) Tweaking Wendy's privacy op-ed. 6) Met with reporter and all he wanted to talk about was fixing Tor Messenger bug b/c he loves Tor Messenger. Mike: 1) The blog is being converted. Performing complicated comment merge+extraction will cost more $$. Do we really need those comments? (We probably should have reverted to the dump where they still existed if so, so I guess not?) 2) Android is still a mess. The CopperHead folks are upset about Android 7.1 and the semi-discontinuation of the current devices. This may delay things, but they think if we launch Tor Labs soon, it will be OK. I told them I am shooting for end-of-month. Arturo: 1) Posted OONI UX designer job on the Tor website and open source design (https://www.torproject.org/about/jobs-ooni-ux-designer.html.en, https://github.com/opensourcedesign/jobs/pull/112) Please share and spread as much as you can. 2) Resolved some of the last critical bugs for the 2.0.0 release, so that is likely to be released very soon now. 3) We would like to have a OONI internal meeting mid November + 2 days of Open Hack day. This would allow us to meet the new developer in person and do some better coordination. 4) We published a long report on internet controls in Zambia during the elections: https://ooni.torproject.org/post/zambia-election-monitoring/ 5) The 2.0.0 release of ooniprobe will have enabled by default a tor deck, that will check to see if the meek domain fronts are working and if plain tor is able to bootstrap properly. 6) Working on a report on internet censorship in Ethiopia. Alison: 1) had a call with Maria to begin preliminary work on future partnerships with OONI and the Community Team (for Rapid Response, Outreach, etc) 2) support portal: still chugging along, will talk to Shari today about getting the resources we need to make this happen 3) membership guidelines: waiting on Lunar's final notes and then will send the doc to tor-internal@ to approve 4) been noticing/hearing from users about our woefully out-of-date and misleading documentation. we should have a sprint to fix these. will the website redesign help? should this happen before that? 5) where do we stand on the general contact email? Karsten: 1) We're very close to merging and deploying data synchronization between CollecTor instances. Finally! 2) Planning to ask devs to help with writing and testing CollecTor and later Onionoo operation guides, though not before end of next week: https://people.torproject.org/~karsten/volatile/metrics-operation-guides-20… 3) We realized that metrics-lib builds are reproducible, and we're considering to publish a guide for reproducing them, to have multiple people building and signing releases, and to publish this as Good Tor News later this year or in 2017. Isabela: 1) Follow up with Adam on OTF reports and NCE 2) Follow up with OTF proposal v4 / deadline friday 3) Plan on sending out today a call asking help on testing core tor releases / goal is to have a QA team that can help us with that on every release / 0.2.9 will be a pilot 4) Met Thomas the dev who will do the orfox front end gig with us / we will send him the contract asap and he should get started pretty soon 5) Great progress on security slider user experience on orfox / which can be used on tor browser desktop as well / Linda is driving this 6) Preparing for Chile 7) Starting to collect stuff for Q3 report to sponsorS 8) all week next week at OTF summit Roger: 1) CCC tickets: connect people who need them with people who have tokens. I've done some of this connecting, and I'll do more soon. People should let me know if they still need a ticket / if they have an extra voucher. 2) NSF posters + slides: for the January NSF PI meeting, we need one summary slide per NSF project, and we have five of them. Also an optional poster. I'll be commandeering Tor people to help with those in the coming week. 3) Rachel's NSF proposal: her sociology Tor+Wikipedia paper got accepted, and now they plus Mako are writing an NSF proposal to explore the https://blog.torproject.org/blog/call-arms-helping-internet-services-accept… topic further. I'm going to write them a letter of support on behalf of Tor, but not be a co-proposer, because conflict. 4) Next dev meeting: Mar 12-16 is during swsx so it's a poor choice. Next option we're looking at is Mar 23--27. Let us know if there's a conflict. 5) Speaker's bureau: I filed a ticket: https://bugs.torproject.org/20305 but there is no movement yet. 6) I'm talking to some professors about a new NSF proposal to fund a research testbed Tor network, which could build from the testing Tor network that dgoulet et al are operating. The proposal timing is not good but maybe we'll try something anyway. I have Cass in the loop. Shari: 1) trying to catch up after a week's vacation. :( 2) on the verge of hiring a chief financial and grants officer 3) working on getting end-of-year campaign ready 4) revising budget for otf proposal 5) finishing up with 990 -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBCAAGBQJYBMiDAAoJEC3ESO/4X7XBYycH/iH12PocwTnQQAmQaru8MOWG F7RjvNGZMsIcmdNfhAWFuvekrNeoCL00DugnLJU8+PCebrvFwY1VCjVjmmMQIGIx XtOqEJDMXb0MSQjI8VQNn7nExuoHw6TQNQftfzuh70Xt8VMdGgMgTuIIuRykaWBF Phrz4B+L28ChRmEXy09FwW60xpj2SDSDEwHHTKLGYQc1we+6DVZI7S1ohlN6LW8X ADwi3llfYAJc+J3bN6KrE6nBtDuzKBQZgNsOZllFwHd5DfRfKATGzz3BVP77NBhi D70PMRkutkxI+A3J26reMVyeTGJ8Xger02qOhPo6DdHddQUuyChhWQR721S7cig= =YMid -----END PGP SIGNATURE-----

1 0

Fwd: Tech For Justice Hackathon Invite
by Nima Fatemi 14 Oct '16

14 Oct '16

FYI -------- Forwarded Message -------- Subject: Tech For Justice Hackathon Invite Date: Fri, 14 Oct 2016 10:47:39 -0500 From: Christy Leos <christy(a)internetbar.org> To: nima(a)torproject.org CC: Jeffrey Aresty <jeffaresty(a)internetbar.org> Hello Nima, My name is Christy Leos and I am the Director of Operations for Tech For Justice. My boss Jeff Aresty mentioned meeting you at Rights Con and discussing Tor and some of our projects as well. I wanted to reach out and invite you to our upcoming virtual hackathon techforjustice.org/legal-justice-hackathon. We would love to have you work with us to create solutions; Tor's expertise and know how would be extremely beneficial for the justice issues currently plaguing our communities. If you could share this information with your organization and its members, that would be amazing. Please let me know if you have any questions or would like more details. Thank you for your time, Christy Leos *Director of Operations * *InternetBar.org <http://InternetBar.org> Institute * *The Houston Bar Center* *723 Main St. Houston, TX* 361-220-8128

1 0

If you're going to 33c3, be sure to get a ticket!
by Roger Dingledine 14 Oct '16

14 Oct '16

https://events.ccc.de/2016/09/01/call-for-participation-33rd-chaos-communic… https://events.ccc.de/2016/09/13/33c3-ticket-sales/ Congress is on track to sell out again this year. We plan to have a bunch of Tor people there, so we can answer Tor development and community questions for all the people who will have them. So if you are planning to be there, be sure to make plans to get a ticket! Some of our friends at CCC still complain about last year when we surprised them by wanting five tickets two weeks before the event. Let's not do that again. This month (October) is the best month for getting a ticket, since after October everything gets messier. Let us know if you will be going there as a Tor person and you need a ticket. Let us know early and often until it is resolved! Thanks, --Roger

9 9