- tor-project - lists.torproject.org

Joydeep's Monthly Status Report for July 2022
by Joydeep Sen Gupta 03 Aug '22

03 Aug '22

Hello everyone! These are my updates from the month of July. With the major Tor Browser 11.5 release, much of my work this month was concentrated around it. I updated the documentation on the Tor Browser User Manual[1], Support Portal[2] and various other documentation we maintain for user support[3]. We got a number of user support requests, as is usual with a major Tor Browser release with users reporting a couple of bugs[4][5]. These bugs are now fixed in the Tor Browser 11.5.1 release! With Tor Browser 11.5, we also have Connection Assist[6] in the stable browser and I have been working to gain feedback about the Circumvention map[7] in order to improve this feature. There has been a major uptick in requests for unlisted obfs4 bridges, mostly from users in China and Turkmenistan[8]. On the Android front, we got multiple reports of the bug in rendering webpages on Samsung S22 device (this is a device specific issue)[9]. That pretty much sums up the highlights from last month and following are some quick stats and highlights from our official support channels. ## Frontdesk Timeline : 01 July - 31 July 2022 Tickets: new: 42 open: 20 resolved: 467 Breakdown of number of RT tickets received with respect to operating system: (Note: This includes tickets where the user mentioned the operating system or it was evident from the issue they were running into and/or enclosed screenshots.) Windows - 22 macOS - 16 GNU/Linux - 3 Android- 18 Breakdown of most frequent tickets (at least 3 RT tickets): 1. 141 RT Tickets - How to use Tor Bridges in Russia.[10] 2. 101 RT Tickets - Private Bridge requests. This is not related to the .ru censorship but requests from Tor users in China, Iran, etc.[11] 3. 6 RT Tickets - Bug in rendering webpages on Tor Browser for Android, specific to the Samsung S22 device[9] 4. 4 RT Tickets - Tor Browser 11.5 incompatible with macOS 10.12[12] 5. 3 RT Tickets - Questions and feedback[13] about the new features in Tor Browser Desktop -- Bridge-moji[14] & Connection Assist. ## Tor Forum Most popular topics in the Support category (in terms of no. of views): 1. "Too many connections (to a single relay) (DDoS 2022.07.02)".[15] 2. "Cannot open any site correctly with Tor (Browser)"[16] 3. "Do my Snowflakes work?"[17] 4. "Testing Invitation for Tor Browser with supported_groups patch countermeasure in Snowflake to evade censorship observed in Russia"[18] 5. "The “Continue to HTTP site” button in HTTPS-only mode doesn’t work"[19] Thanks, -- Joydeep [1]: https://gitlab.torproject.org/tpo/web/manual/-/issues/119 [2]: https://gitlab.torproject.org/tpo/web/support/-/issues/298 [3]: https://gitlab.torproject.org/tpo/community/support/-/issues/40073 [4]: https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41059 [5]: https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41050 [6]: https://support.torproject.org/glossary/connection-assist/ [7]: https://gitlab.torproject.org/tpo/community/support/-/issues/40086 [8]: https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/iss… [9]: https://gitlab.torproject.org/tpo/applications/fenix/-/issues/40216 [10]: https://forum.torproject.net/t/tor-blocked-in-russia-how-to-circumvent-cens… [11]: https://support.torproject.org/censorship/connecting-from-china/ [12]: https://forum.torproject.net/t/version-of-tor-browser-compatible-with-macos… [13]: https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41093 [14]: https://support.torproject.org/glossary/bridge-moji/ [15]: https://forum.torproject.net/t/too-many-connections-ddos-2022-07-02/3827 [16]: https://forum.torproject.net/t/cannot-open-any-site-correctly-with-tor/4028 [17]: https://forum.torproject.net/t/do-my-snowflakes-work/4069 [18]: https://forum.torproject.net/t/testing-invitation-for-tor-browser-with-supp… [19]: https://forum.torproject.net/t/the-continue-to-http-site-button-in-https-on…

1 0

Rhatto's Monthly Status Report, July 2022
by rhatto 03 Aug '22

03 Aug '22

Hi all :) This is my monthly status report for July 2022. Main activities during the period: 0. [Onion Launchpad][], a landing page template to help users connect to Onion Services sites: * Helping with many enhancements and bug fixes. * Creation of development and build environments for Lektor using tools like Docker Compose and GitLab Runner. * Automated deployment procedures for GitLab and GitHub pages. You can see a live demo at https://tpo.pages.torproject.net/onion-services/onion-launchpad/ 1. Other activities related to Sponsor 123 such as development, deployment, monitoring and support. I would also like to thank both @anarcat and @georg for all their help to bring Onionprobe into Debian: https://tracker.debian.org/pkg/onionprobe [Onion Launchpad]: https://gitlab.torproject.org/tpo/onion-services/onion-launchpad/ -- Silvio Rhatto pronouns he/him

1 0

Marco's monthly status report, July 2022
by msim 03 Aug '22

03 Aug '22

Hi, here's my monthly status report for July 2022 Last month I got a bit too over excited about tor-browser-build!443, as it's still in the review cycle [1]. Now that [2] is merged, this entire MR has to be rebased and edited. This month started with some more changes to tor-browser-build!443, and then more patchwork on the WebRTC issue. From the 6th to the 15th (except for the 9th) I was AFK due to external commitments. As soon I was back I started working again on the WebRTC issue, and then got very sick on the 18th. Work started again on the 26th, once again on the WebRTC issue. Unfortunately, due to having reduced and disjoint working hours as a result of external factors, I don't feel like I accomplished everything I wanted to this month. As a result of this, next month I'll be focusing solely on the WebRTC issue and leaving tor-browser-build!443 until after that is complete. In very early August I'm planning on having the compilation issues for WebRTC under MinGW resolved (nearly there, hopefully), and also in early August I'd like to be able to start debugging runtime errors. All things considered, I still managed to become much more familiar with Gecko, which should be very helpful with S131 :) Cheers, Marco [1] https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/merge_re… [2] https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/merge_re…

1 0

Nina’s Monthly Status Report, July 2022
by nina13＠riseup.net 02 Aug '22

02 Aug '22

Hi, everyone, This is my status report for July. My focus remains the same - support the Russian-speaking users in their interactions with Tor Browser through email, our telegram account, and our forum and IRC chat. This month, there were two significant events that I dealt with - the release of the new version of Tor Browser - 11.5 and internet censorship events in Turkmenistan. 1. User support Overall In July, I successfully resolved 473 tickets. On Telegram (@TorProjectSupportBot) - 239 On email (frontdesk@tpo) - 234 Unlike the previous month, I got almost the same amount of user requests on telegram and email in July. I've got many requests on the email frontdesk@tpo from Turkmenistan - the country facing enormous internet censorship. And email communication is more popular as messengers are banned there. 2. New version of TB In July new version of Tor Browser 11.5 was released, so I took part in getting users' feedback on the Connection Assist [1]. Thanks to the new version - the number of bridge requests from Russia lowered in July. 3. User support templates This month I updated the user support templates in Russian according to the new features of the Tor Browser. While doing it, I found a bug with the bridges display [2]. As the Tor Project website was, first, unblocked in Russia and then - blocked again - it caused some extra work on updating the templates. Due to the censorship events in Turkmenistan[3], I gathered all the information that can help users connect to Tor and updated a template for the users from this country. [1] https://gitlab.torproject.org/tpo/community/support/-/issues/40086 [2] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41059 [3] https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/iss…

1 0

PieroV's Monthly Status Report, July 2022
by Pier Angelo Vendrame 01 Aug '22

01 Aug '22

Hi everyone! Here is my status report for July 2022. This month, we released Tor Browser 11.5, and fixing all the final details for it took me the first half of the month. In particular, we switched the bridgemoji to SVG files to improve compatibility and consistency across the different platforms [1]. We also added the description for the various emojis. In addition, we fixed some issues that were reported by users in the alpha testing program. Then we finalized the work on the fonts [2][3][4]. After the release of 11.5, we received many feedbacks. Thanks to everyone for providing them! A pair of problems were particularly relevant for many users [5][6]. We resolved them in Tor Browser 11.5.1, which I helped prepare. After that, we started working on Tor Browser 12.0. We want to clean up the code, remove some legacy code, update the remaining to modern JS and move it from secondary repositories to the main one (tor-browser.git). I have already started moving Security Level [7] and New Identity [8]. But then I paused to update Tor Browser for Android to Firefox 102 [9]. We decided to rebase to 102 instead of 103 because we want to explore a Tor Browser for Android based on the ESR channel instead of rapid release. This could help us release Android updates more often and to focus on new features. This also allows us to have a single git branch for desktop and mobile. Finally, I have started the migration to Firefox 102 [10]. We have just started on that, so we do not know when we will have the first 102-based alpha. Best, Pier [0] https://blog.torproject.org/new-release-tor-browser-115/ [1] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40966 [2] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/30589 [3] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41004 [4] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41043 [5] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41059 [6] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41050 [7] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40925 [8] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40926 [9] https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4… [10] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40730

1 0

no Anti-Censorship meeting today
by meskio 28 Jul '22

28 Jul '22

There is no Anti-Censorship meeting today, most people is having time off. The next meeting will be August 4. Have a nice time off :) -- meskio | https://meskio.net/ -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- My contact info: https://meskio.net/crypto.txt -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Nos vamos a Croatan.

1 0

minutes from the sysadmin meeting
by Antoine Beaupré 26 Jul '22

26 Jul '22

Hello! Here's our monthly meeting minutes. Our meeting schedule is rather affected by those pesky northern-hemisphere-summer-holidays, we should go back to your regular programming in September. # Roll call: who's there and emergencies anarcat, gaba, kez, lavamind, no emergencies. # Dashboard review We didn't have time to do a full quarterly review (of Q2), and people are heading out to vacations anyways so there isn't much we can do about late things. But we reviewed the dashboards to make sure nothing drops to the floor with the vacations. We started with the per user dashboards: * https://gitlab.torproject.org/groups/tpo/-/boards?scope=all&utf8=%E2%9C%93&… * https://gitlab.torproject.org/groups/tpo/-/boards?scope=all&utf8=%E2%9C%93&… * https://gitlab.torproject.org/groups/tpo/-/boards?scope=all&utf8=%E2%9C%93&… ... as we usually do during our weekly checkins ("what are you working on this week, do you need help"). Then moved on to the more general dashboards: * https://gitlab.torproject.org/tpo/tpa/team/-/boards/117 * https://gitlab.torproject.org/groups/tpo/web/-/boards * https://gitlab.torproject.org/groups/tpo/tpa/-/boards Normally we should be making new OKRs for Q3/Q4 at this time, but it doesn't look like we have the cycles to build that system right now, and it doesn't look like anyone else is doing so either in other teams. We are aware of the problem and will work on figuring out how to do roadmapping later. Anarcat nevertheless did a quick review of the roadmap and found that the bullseye upgrade might be a priority. He opened [issue tpo/tpa/team#40837][] to make sure the 13 machines remaining to upgrade are properly covered by Debian LTS while we finish the upgrades. [issue tpo/tpa/team#40837]: https://gitlab.torproject.org/tpo/tpa/team/-/issues/40837 The other big pending change is the email services improvements, but that has been deferred to TPA-RFC-31, the outsourcing of email services, which is still being drafted. # TPA-RFC-33: monitoring requirements adoption Anarcat had already read aloud the requirements in the last meeting, so he spared us from this exercise. Instead we reviewed the [changes proposed by lavamind][] which mostly seem good. Kez still has to look at the proposal, and their input would be crucial as someone less familiar with our legacy stuff: new pair of eyes will be useful! [changes proposed by lavamind]: https://gitlab.torproject.org/tpo/tpa/wiki-replica/-/merge_requests/34 Otherwise the requirements seem to be mostly agreed on, and anarcat will move ahead with a proposal for the monitoring system that will try to address those. # Vacations and next meeting As anarcat and lavamind both have vacations during the month of August, there's no overlap when we can do a 3-way meeting, apart at the very end of the month, a week before what will be the september meeting. So we cancel the meeting for august, next meeting is in september. Regarding holidays, it should be noted that only one person of the team is out at a time, unless someone is out sick. And that can happen, but we can usually withstand a temporary staff outage. So we'll have two people around all August, just at reduced capacity. For triage of the week rotation, rotation will be changed to keep anarcat on rotation an extra week this week, so that things even out during the vacations (two weeks each): * week 31 (this week): anarcat * week 32 (next week): kez, anarcat on vacation * week 33: lavamind, anarcat on vacation * week 34: anarcat, lavamind on vacation * week 35: kez, lavamind on vacation * week 36 (september): lavamind, everyone back # Metrics of the month * hosts in Puppet: 96, LDAP: 96, Prometheus exporters: 164 * number of Apache servers monitored: 30, hits per second: 298 * number of self-hosted nameservers: 6, mail servers: 9 * pending upgrades: 0, reboots: 0 * average load: 2.16, memory available: 4.72 TiB/5.86 TiB, running processes: 883 * disk free/total: 29.47 TiB/91.36 TiB * bytes sent: 420.66 MB/s, received: 298.98 MB/s * planned bullseye upgrades completion date: 2022-09-27 * [GitLab tickets][]: 184 tickets including... * open: 0 * icebox: 151 * backlog: 20 * next: 9 * doing: 2 * needs review: 1 * needs information: 1 * (closed: 2807) [Gitlab tickets]: https://gitlab.torproject.org/tpo/tpa/team/-/boards Upgrade prediction graph lives at https://gitlab.torproject.org/tpo/tpa/team/-/wikis/howto/upgrades/bullseye/ # Date of the month September 27! We moved back the estimated Debian bullseye completion date by almost three weeks, from 2022-10-14, to 2022-09-27. This is bound to slow down however, with the vacations coming up, and all the remaining server needing an upgrade being the "hard" ones. Still, we can dream, can we? -- Antoine Beaupré torproject.org system administration

1 0

Tor Browser Meeting Cancelled 2022-07-25
by Richard Pospesel 25 Jul '22

25 Jul '22

Hello Everyone, We're going to be cancel today's Tor Browser Meeting. The next one will be August 1, 2022 (2022-08-01) at 1100 UTC. Future meetings will most likely be at a later time to be decided. best, -Richard

1 0

test gettor reimplementation
by meskio 22 Jul '22

22 Jul '22

Over the last few months we have being working on reimplementing gettor as part of rdsys[0]. As a last step before moving it into production we are testing that everything works fine. You can help us testing it and telling us if everything works as expected or something could be improved by sending emails to it at: gettor-test(a)riseup.net The links provided should work, but they are not located in the official gettor places. You can find the documentation on how to use gettor at: * https://gettor.torproject.org or * https://support.torproject.org/censorship/gettor-2/ * or sending an email with the word help to gettor-test(a)riseup.net Thank you. [0] https://gitlab.torproject.org/tpo/anti-censorship/rdsys/ -- meskio | https://meskio.net/ -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- My contact info: https://meskio.net/crypto.txt -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Nos vamos a Croatan.

1 0

Anti-censorship team meeting notes, 2022-07-21
by Shelikhoo 21 Jul '22

21 Jul '22

Hey everyone! Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-07-21-15.59.html <http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-03-31-15.59.html> And our meeting pad: Anti-censorship work meeting pad -------------------------------- Next meeting: Thursday Aug 4 16:00 UTC Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) == Goal of this meeting == Weekly check-in about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at Tor. == Links to Useful documents == * Our anti-censorship roadmap: * Roadmap: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards * The anti-censorship team's wiki page: * https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home * Past meeting notes can be found at: * https://lists.torproject.org/pipermail/tor-project/ * Tickets that need reviews: from sponsors we are working on: * All needs review tickets: * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… * Sponsor 28 * must-do tickets: https://gitlab.torproject.org/groups/tpo/-/milestones/10 * possible tickets: https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… * Sponsor 96 * https://gitlab.torproject.org/groups/tpo/-/milestones/24 == Announcements == * logcollector redeployment finished, project moved to team space(src shell) * https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement * https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/70 * https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement/… * https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… (Private) * roskomanzor has lifted the blockade on torproject.org website, no on the network * https://gitlab.torproject.org/tpo/community/support/-/issues/40050#note_282… == Discussion == * What is the status of adjusting snowflake (pion) DTLS signature to avoid blocking in Russia? (Based on offset of supported_groups extension.) * https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/iss… * https://github.com/pion/dtls/pull/474 * https://ntc.party/t/webrtc/2174/21 * https://gitlab.torproject.org/tpo/community/support/-/issues/40050 (generally) * shell have produced a TB tgz with a modified snowflake to test * https://people.torproject.org/~shelikhoo/dqo8apcai4/tor-browser/tor-browser… * shell will post it in nft and tor forum * https://ntc.party/t/testing-invitation-for-tor-browser-with-supported-group… * (Not working???) * >>> Request a packet capture * https://forum.torproject.net/t/testing-invitation-for-tor-browser-with-supp… * (No reply #~#) * Bug fix release for Snowflake necessary(src shell) * Semver? 0.6.1, is cherry-pick necessary? * https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… * https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… * >>> cherry-pick if easy, and then release bug fix release == Actions == == Interesting links == == Reading group == * We will discuss "" on * * Questions to ask and goals to have: * What aspects of the paper are questionable? * Are there immediate actions we can take based on this work? * Are there long-term actions we can take based on this work? * Is there future work that we want to call out in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. cecylia (cohosh): last updated 2022-06-30 Last week: - got tor to bootstrap fully with the deployed conjure station and bridge - met with CU Boulder team to discuss conjure rollout plan This week: - follow up with CU Boulder team about a wireguard connection between the station and bridge - a few quality of life conjure issues - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/conj… - draft an announcement of conjure for forum and development community mailing lists Needs help with: dcf: 2022-07-07 Last week: - commented on STATUS VERSION proposal and proposed some text https://gitlab.torproject.org/tpo/core/torspec/-/merge_requests/63#note_281… - commented on Snowflake user estimates vis-à-vis Tor Metrics https://gitlab.torproject.org/tpo/network-health/metrics/website/-/issues/4… https://gitlab.torproject.org/tpo/network-health/metrics/website/-/issues/4… Next week: - disable non-WireGuard SSH access to snowflake-02 Help with: meskio: 2022-07-21 Last week: - use the same bucket on gettor-rdsys archive.org for the existence file (rdsys!44) - use a folder per flatform on gettor-rdsys gdrive (rdsys!45) - request feedback on bridge URIs and QR codes - review code cleanups on snowflake webextension (webextension!36 !37) - review connection assist feedback (support#40086) - help on bridgedb lektor migration and broken tests (bridgedb!31) Next week: - deploy moat shim-token support - deploy a testing environment of rdsys-gettor Shelikhoo: 2022-07-21 Last Week: - [Merge Request Awaiting] Add SOCKS5 forward proxy support to snowflake (snowflake!64) - [Discussion & Deployment] Migrating Controlling git repo to Tor Gitlab Instance (shelikhoo/LogCollectorAncillary#5) - [Discussion & Deployment] Rollout of Distributed Snowflake Support - [Deployment] Creating a version of Tor Browser with patched Snowflake client that includes supported_groups censorship countermeasure(https://gitlab.torproject.org/tpo/anti-censorship/team/-/iss… - [Coding & Deployment] Proposal: Centralized Probe Result Collector (anti-censorship/team#54) - [Research & Coding] WebSocket + CDN Based Probe Control Connection Forwarder - [Investigate & Review] Daily number of users helped gone to zero (https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow…) Next Week: - [Investigate] China "Anti-Fraud" Webpage Redirection Censorship (censorship-analysis#40026): update the research based on updated ooni - [Research+Coding] Raw Probe Log Data Collection https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement/… result Itchy Onion: 2022-07-21 Last week: - ongoing debugging s28 issues 81 (leaking file descriptor) This week: - updating snowflake plugin for RACE 2.2.0

1 0