- tor-project - lists.torproject.org

Next network-health meeting on 04/25/2022 1600 UTC
by Georg Koppen 12 Apr '22

12 Apr '22

Hello everyone! For those of you being interested in network-health related topics and work: due to the upcoming Easter holidays we'll skip our weekly meeting on 04/18/2022. The next regular sync will be on 04/25/2022 at 1600 UTC in OFTC's #tor-meeting as usual. See you there, Georg

1 0

Anti-censorship team meeting notes, 2022-04-07
by Shelikhoo 07 Apr '22

07 Apr '22

Hey everyone! Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-04-07-15.59.html And our meeting pad: Anti-censorship work meeting pad -------------------------------- Anti-censorship work meeting pad -------------------------------- Next meeting: Thursday April 14th 16:00 UTC Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) == Goal of this meeting == Weekly checkin about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at Tor. == Links to Useful documents == * Our anti-censorship roadmap: * Roadmap: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards * The anti-censorship team's wiki page: * https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home * Past meeting notes can be found at: * https://lists.torproject.org/pipermail/tor-project/ * Tickets that need reviews: from sponsors we are working on: * All needs review tickets: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… * Sponsor 28 * must-do tickets: https://gitlab.torproject.org/groups/tpo/-/milestones/10 * possible tickets: https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… * Sponsor 96 * https://gitlab.torproject.org/groups/tpo/-/milestones/24 == Announcements == * Next snowflake bridge migration scheduled for next week https://gitlab.torproject.org/tpo/tpa/team/-/issues/40716 == Discussion == * Nickname for second bridge site? https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… * The existing bridge site has nickname "flakey" (actually flakey1, flakey2, etc.), since the second bridge site will have a different fingerprint it should have a different nickname * Can leave suggestions on the issue * Discuss about cooperation with Greatfire (by serene) * keroserene and shelikhoo had a call with Greatfire * one of the topics discussed was collaboration regarding FreeBrowser (https://freebrowser.org/, https://github.com/greatfire/freebrowser) and Snowflake * Some notes from the call: https://pad.riseup.net/p/greatfire-snowflake-notes == Actions == * == Interesting links == * Extended DNS Error provides more error codes to indicate why a DNS query failed; code 16 means "censored". (Like status code 451 in HTTP.) https://www.rfc-editor.org/rfc/rfc8914.html#section-4.17 * Ukraine-focused circumvention VPN, only unblocks a handful of sites like VK, Mail.ru * https://zaborona.help/ * https://ntc.party/t/ukraine/2135/3 * Uses static SOCKS proxies? E.g. srv1.vpn.zaborona.help https://zaborona.help/graph.html == Reading group == * We will discuss "Balboa: Bobbing and Weaving around Network Censorship" on April 7 * https://www.usenix.org/system/files/sec21-rosen.pdf * https://censorbib.nymity.ch/#Rosen2021a * Questions to ask and goals to have: * What aspects of the paper are questionable? * Are there immediate actions we can take based on this work? * Are there long-term actions we can take based on this work? * Is there future work that we want to call out, in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. anadahz: 2022-01-27 Last week: - Increase timeout check cycles for default-bridge-felix-1 and default-bridge-felix-2 as they have been generating too many alerts: https://gitlab.torproject.org/tpo/anti-censorship/monit-configuration/-/mer… cecylia (cohosh): last updated 2022-03-31 Last week: - onboarded itchy onion onto s28 tasks - reviews - work on conjure PT This week: - continued work on conjure PT - continue to monitor snowflake broker stats Needs help with: dcf: 2022-04-07 Last week: - set up the snowflake bridge's permanent server and scheduled a time for the migration https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… https://gitlab.torproject.org/tpo/tpa/team/-/issues/40716 - opened an issue for tracking the installation of a second bridge site https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - approved last piece of forward-fingerprint patch https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - posted hints about CPU profiling snowflake-webext in Chrome https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - more correspondence with OTF about a rapid response grant for the snowflake bridge Next week: - look at STATUS VERSION proposal https://gitlab.torproject.org/tpo/core/torspec/-/merge_requests/63 - install second snowflake bridge site https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Help with: agix: 2021-02-10 Last week: - Continued work on gettor-twitter Next week: - Hopefully finish the task Help with: - arlolra: 2022-04-07 Last week: - Merged the rest of snowflake !81 Next week: - Get to snowflake-webext #10 Evergreen: - Figure out where in pion/webrtc ALPN should be configured and used - Maybe add Chacha20Poly1305 to pion/dtls https://github.com/pion/dtls#planned-features https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Help with: - maxb: 2021-09-23 Last week: - Worked on https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… re: utls for broker negotiation - Had conversation with someone about upstream utls http round tripper https://github.com/refraction-networking/utls/pull/74 - Too busy with work :/ Next week: - _Really_ want to get a PR for utls round tripper meskio: 2022-04-07 Last week: - document circumvention settings API (bridgedb#40043) - accept bridge distributor request changes (rdsys#104) - investigate bridgestrap reporting odd timing (tor#40592) - review cross compile docker snowflake-proxy (docker-snowflake-proxy!6) Next week: AFK Shelikhoo: 2022-04-07 Last Week: - [Merge Request Awaiting] Add SOCKS5 forward proxy support to snowflake (snowflake!64) - [Coding & Deployment] Proposal: Centralized Probe Result Collector (anti-censorship/team#54) - [Discussion] Centralized Probe Log Collection Ascension Request - [Discussion] Hosting Centralized Probe Log Collection Server on TPA managed VPS - [Discussion] Bridges should report implementation versions of their pluggable transports - [Coding] Add SOCKS5 forward proxy support to snowflake (snowflake!64) - built-in DNS - [Coding] Distributed Snowflake Bridges - Broker(continue) - (Reply a lot of emails) Next Week: - [Coding] Distributed Snowflake Bridges - Broker (continue) Itchy Onion: 2022-04-07 Last week: - snowflake !84 - racecar onboarding This week: - racecar local testing - set up LDAP Help with: - upgrade to be compatible with racecar 2.1.0 HackerNCoder: 2021-12-16 This week: Last/done: Setup web mirror on tor.encryptionin.space Next: Get (new VPs with) new IP and setup new web mirror on new domain hanneloresx: 2021-3-4 Last week: - Submitted MR for bridgestrap issue #14 Next week: - Finish bridgestrap #14 - Find new issue to work on Help with: - ln5: 2022-03-24 Last week: - Received hardware for a new home for snowflake.tpn; discussed OS configuration with dcf in private email Next week: - Install Debian 11 on new snowflake.tpn - Possibly rack new snowflake.tpn, if I can get access and find time to do the transportation Need help with: - Input on urgency appreciated, for my planning - Input on preferred CPU configuration, esp wrt HyperThreading -- lacking input before deployment in data centre, the machine will *not* have HT disabled and CPU bug mitigation will thus have to be carried out by the kernel

1 0

Community Team meeting notes - April 04 2022
by gus 06 Apr '22

06 Apr '22

Hi, Here's the Community Team meeting logs: http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-04-04-13.59.log… And our meeting pad: ## Tor Community Team meeting pad Next meeting: Monday, April 11, 2022 - 1400 UTC Weekly meetings, every Monday at 14:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) ## Goal of this meeting Weekly checkin about the status of Community Team work at Tor. ## Links to Useful documents * Previous meetings: https://forum.torproject.net/tag/community-team * Monthly l10n hangout: * https://community.torproject.org/localization/hangouts/ * Known issues with Tor Browser: * https://tb-manual.torproject.org/known-issues/ and Tor Browser for Android: https://tb-manual.torproject.org/mobile-tor/#known-issues ## Discussion * Ukraine spike - * https://gitlab.torproject.org/tpo/community/support/-/issues/40068 ## Updates Gus: Last week: - Organizing Tor trainings for S30 (Mexico and Brazil) - Joined the Tor relay operator meetup - 1:1s with the team - Sponsor9 meeting - Sponsor96 meeting This week: - Getting back to some relay operators - Send the relay operator meetup notes to the mailing list - Organizing the last three trainings in Brazil for S30 - Sponsor9 - preparing the LATAM meetup - Meeting with Rhatto and others to discuss onion sre plans Joydeep: Last week: - support work on RT, Forum, cdr.link - helped with S125 report - tags gardening (on Tor Forum) https://gitlab.torproject.org/tpo/community/support/-/issues/40063 - Joined the Tor Relay Operator Meetup This week: - S125 Meeting - Tor Browser 10.0.10 and TBA 11.0.11 testing and post-release support work emmapeel: Last week: - Prepare translation project for sponsor123, review languages. - Improve documentation for translators - also because of new user-password thingie - Ask for screenshots for Tor Browser - get new translators for russian This week: - Add screenshots to transifex - translation russian sposor125 raya: Last week: - s123: worked on march 2022 narrative report - s123: reviewed wireframes, check them out! https://www.figma.com/proto/BydkbTJ87pfo7xhAGHsPGo/USAGM-Landing-Page - 1:1 with gus! :-) - s123: bi-weekly meeting - s123: onion support repo cleanup - s123: fixing language priorities on progress tracker - joined first ever tor relay meetup! This week: - close: https://gitlab.torproject.org/tpo/onion-services/onion-support/-/issues/56 - close: https://gitlab.torproject.org/tpo/onion-services/onion-support/-/issues/35 - close: https://gitlab.torproject.org/tpo/onion-services/onion-support/-/issues/63 - work on: https://gitlab.torproject.org/tpo/web/community/-/issues/265 - s123: coordinate next steps with partners - s123: follow up on landing page development Help with: - getting metrics for narrative report Nina: Last week: - User support on RT, Telegram, IRC. - Finising s125 report - Checking the russian mail services on how do they procced with TP emails This week: - User support. - s125 final meeting rhatto: Last week: - S123 - Onionprobe enhancements: https://gitlab.torproject.org/tpo/onion-services/onion-support/-/issues/58 This week: - 1:1 with Gus - S123 - Onionprobe testbed: https://gitlab.torproject.org/tpo/onion-services/onion-support/-/issues/59 - S123 - Review and merge Oniongroove specs into main branch: https://gitlab.torproject.org/tpo/onion-services/oniongroove/-/merge_reques… - Start to organize the new Onion Services Gitlab Group: https://gitlab.torproject.org/tpo/onion-services - Continue Research on Onion Services UX: https://gitlab.torproject.org/tpo/onion-services/onion-support/-/issues/64 -- The Tor Project Community Team Lead

1 0

Joydeep's Monthly Status Report for March 2022
by Joydeep Sen Gupta 06 Apr '22

06 Apr '22

Hello everyone! This is my monthly report for the month of March. Much like in February, we saw a even greater uptick in the number of requests for unlisted obfs4 bridges. We received 72 unique requests in one month. Understandably so, since some of the obfs4 bridges we were sharing with users went offline at the end of February. Within a month of launching the Telegram User Support Channel for users in Russia, we are seeing more and more questions from users who are new to the Tor ecosystem and curious how all of it works. I am mostly helping with these questions and other technical questions related with little-t-tor, snowflake, Tor Browser design and usability. There were a number of Tor Browser releases last month, namely, 11.5.a5 (Android), 11.0.7, 11.5.a7 (Android), 11.5.a6, 11.0.8 (Android), 11.0.9 and 11.5.a8. A lot of my work was around testing and user support around these specific releases. We received a few reports of the "Tor Browser for Android 11.0.8 crashing on launch" bug [1] and after consulting with the applications team, I posted the workaround [2] on the forum / blog post. I also authored a article (shout-out to @nina13 for the translation!) on the forum [3] encouraging users in Russia to keep their Tor browser up-to-date in light of (1) critical security updates that shipped with Tor Browser 11.0.7 and (2) a lot of users in Russia were unable to update and GetTor for some time was handing out links to Tor Browser 11.0.4. In the past month, I was also able to help some new Tor relay operators setup bridges. That pretty much sums up the highlights from last month and following are some quick stats and highlights from our official support channels. ## Frontdesk Timeline : 01 Mar - 31 Mar 2022 Tickets: new: 26 open: 15 resolved: 792 Breakdown of number of RT tickets received with respect to operating system: (Note: This includes tickets where the user mentioned the operating system or it was evident from the issue they were running into and/or enclosed screenshots.) Windows - 11 macOS - 6 GNU/Linux - 6 Android- 13 Breakdown of most frequent tickets (at least 3 RT tickets): 1. 443 RT Tickets - How to use Tor Bridges in Russia. [4] 2. 72 RT Tickets - Private Bridge requests. This is not related to the .ru censorship but requests from Tor users in China, Iran, etc. [5] 3. 7 RT Tickets - How to circumvent geo-based restrictions with Tor? 4. 8 RT Tickets- How to change the default SE and add a new search engine to Tor Browser? [6] 5. 6 RT Tickets - Tor Browser Android 11.0.8 crashes on launch [1] 6. 5 RT Tickets - Help with setting up a Tor Bridge. ## Tor Forum Most popular topics in the Support category (in terms of no. of views): 1. "What is still blocking my IP address? (IP address on various block lists since running a non-exit Tor relay)". [7] 2. "Can we expect a stable Tor Browser release soon? ESR 91.6.1 appears to fix some critical security issues". [8] 3. "Have I Correctly Set Up My Bridge?" [9] 4. "Snowflake does not work anymore" [10] 5. "I have seen x unique clients (on my Tor Bridge)" [11] Thanks, -- Joydeep [1]: https://gitlab.torproject.org/tpo/applications/fenix/-/issues/40212 [2]: https://forum.torproject.net/t/new-release-tor-browser-11-0-8-android/2527/4 [3]: https://forum.torproject.net/t/tor-browser-11-0-7/2484 [4]: https://forum.torproject.net/t/tor-blocked-in-russia-how-to-circumvent-cens… [5]: https://support.torproject.org/censorship/connecting-from-china/ [6]: https://forum.torproject.net/t/custom-search-engine-in-tor-browser/2574 [7]: https://forum.torproject.net/t/what-is-still-blocking-my-ip-address/2564 [8]: https://forum.torproject.net/t/can-we-expect-a-stable-tor-browser-release-s… [9]: https://forum.torproject.net/t/have-i-correctly-set-up-my-bridge/2637/ [10]: https://forum.torproject.net/t/snowflake-does-not-work-anymore/2650 [11]: https://forum.torproject.net/t/i-have-seen-x-unique-clients/2755

1 0

Sponsor 38 (shadow simulator) update
by Jim Newsome 05 Apr '22

05 Apr '22

I've just shared the 2022-04 update in the Shadow forum: https://github.com/shadow/shadow/discussions/2007 Also it looks like I forgot to share the previous 2021-12 update here: https://github.com/shadow/shadow/discussions/1824 Both mirrored below: 2022-04 update This is part of a series of periodic updates of development in Shadow. This work is sponsored by the NSF <https://github.com/shadow/shadow/blob/main/docs/nsf_sponsorship.md>. Previous update: 2021-12 <https://github.com/shadow/shadow/discussions/1824>. We've merged 82 non-dependabot pull requests <https://github.com/shadow/shadow/pulls?q=is%3Apr+merged%3A2021-12-17..2022-…> and closed 18 issues <https://github.com/shadow/shadow/issues?q=closed%3A2021-12-17..2022-04-05+i…> since our previous update. Release status We are continuing to work on Shadow 2.1 <https://github.com/shadow/shadow/projects/5>. The biggest user-facing goal for this release is to support running golang programs in Shadow <https://github.com/shadow/shadow/milestone/30>, especially tor simulations using the snowflake pluggable transport <https://github.com/shadow/shadow/issues/1549>. We've also begun planning the Shadow 2.2 <https://github.com/shadow/shadow/projects/6> release, which will largely be a push to refactor and migrate more of the core Shadow code to Rust. Notable change since last update Emulation accuracy * Optionally move time forward in non-blocking syscalls <https://github.com/shadow/shadow/pull/1995>. Historically Shadow doesn't move time forward except when explicitly waiting for an event, such as for a deadline to pass or for data to arrive over the network. Conceptually, this emulates a system with an infinite number of infinitely fast CPUs. Normally this is sufficient for modeling networks where CPUs aren't expected to be a bottleneck. Unfortunately as we've explored running more software under Shadow, we've found a growing number of examples of code with "busy loops" <https://github.com/shadow/shadow/issues/1792>, which deadlock in this model. This new feature optionally models every syscall taking some small amount of time (e.g. a microsecond), which allows the simulation to escape most such loops. We are still testing and improving this feature, and expect some version of it to be enabled by default in the next release. * Fixed a corner case in getaddrinfo <https://github.com/shadow/shadow/pull/1998>. * Fixed several bugs in handling file descriptors: o Fixed pipe writable state when reader is closed <https://github.com/shadow/shadow/pull/1985>. o Have pipe writers return EPIPE if there are no readers <https://github.com/shadow/shadow/pull/1983>. o Fixed errno for socket with SOCK_SEQPACKET type <https://github.com/shadow/shadow/pull/1972>. o Don't fail on TCP_NODELAY <https://github.com/shadow/shadow/pull/1936>. * Reliably intercept time via vdso <https://github.com/shadow/shadow/pull/1951>. Previously we relied on intercepting calls to VDSO functions (such as |gettimeofday|) to be intercepted at the libc level via |LD_PRELOAD|. However, this doesn't work when the VDSO is used more directly, such as in golang, which would cause the program to get the real-world time instead of the simulated time. We now patch the VDSO itself at program start to reliably intercept these functions in such cases. * Implemented basic signal emulation <https://github.com/shadow/shadow/pull/1881>. This allows managed code to install signal handlers and send and receive signals within the simulation. (Sending a signal from outside the simulation to a managed process is still not supported). Notably this support is required to handle golang programs, and allows simulated processes to be shut down cleanly by scheduling |kill| processes to send appropriate signals. * Implemented the |select| system call <https://github.com/shadow/shadow/pull/1910>. Usability * Added an experimental option for strace-style logging <https://github.com/shadow/shadow/pull/1886> of syscalls made by managed code. * Stabilized the |--progress| <https://github.com/shadow/shadow/pull/1937> option, which periodically updates stderr with the simulation progress. Performance * Nightly shadow benchmarks are now being run to help detect performance regressions. We also have the ability to run the benchmark on our own development branches to investigate performance changes before merging these branches into Shadow. Benchmark results for a 5% Tor network are published publicly <https://github.com/shadow/benchmark-results/tree/master/tor>, but are only intended to be useful for Shadow developers. * Added a library for overriding crypto functions <https://github.com/shadow/shadow/pull/1853>. When enabled, this option overrides some openssl APIs with "no-op" implementations. This is a reimplementation of a feature previously available in Shadow's "tor plugin". It is intended primarily to improve the performance of tor simulations on hardware without accelerated AES operations, and is only supported on Debian 11. Happy simulating! The Shadow team 2021-12 update This is part of a series of periodic updates of development in Shadow. This work is sponsored by the NSF <https://github.com/shadow/shadow/blob/main/docs/nsf_sponsorship.md>. Previous update: 2021-10 <https://github.com/shadow/shadow/discussions/1695>. We've merged 78 pull requests <https://github.com/shadow/shadow/pulls?q=is%3Apr+merged%3A%3E%3D2021-09-30> and closed 17 issues <https://github.com/shadow/shadow/issues?q=closed%3A%3E%3D2021-09-30+is%3Ais…> since our previous update. Release status We have released Shadow 2.0 <https://github.com/shadow/shadow/releases/tag/v2.0.0>! Give it a try, and let us know if you run into any issues! We have begun work on Shadow 2.1 <https://github.com/shadow/shadow/projects/5>. Notable planned features are support for signals (which is needed <https://github.com/shadow/shadow/issues/1549> to reliably run golang programs under Shadow), and improved Unix socket support. Notable change since last update Emulation accuracy * Add unnamed unix sockets created with socketpair() <https://github.com/shadow/shadow/pull/1787> * Add support for the 'O_DIRECT' flag to pipes (packet mode) <https://github.com/shadow/shadow/pull/1746> * poll and epoll: wait for timeout even with no fd's <https://github.com/shadow/shadow/pull/1697> Performance improvements * Set default min runahead to 1ms <https://github.com/shadow/shadow/pull/1711>. This fixes a performance regression <https://github.com/shadow/shadow/issues/1699> in many-host simulations using multiple CPUs. Stability * Detect and handle death by signals <https://github.com/shadow/shadow/pull/1722> * Handle process exit while it has events scheduled <https://github.com/shadow/shadow/pull/1704> UI improvements * Move host heartbeat options to the experimental options, and disable by default <https://github.com/shadow/shadow/pull/1703> Shadow at Tor We have been collaborating with The Tor Project to use Shadow in its development and testing. We have been running Shadow simulations inside a Gitlab CI pipeline <https://gitlab.torproject.org/jnewsome/sponsor-61-sims> to help develop and tune improved congestion control algorithms in the upcoming 0.4.7 <https://lists.torproject.org/pipermail/tor-project/2021-December/003241.html> release. This is the first major application of Shadow inside the Tor Project itself, and we plan to use the pipeline we've developed for further testing and profiling. We have also been making progress on running Arti (the experimental new Rust implemenation of tor) under Shadow: https://gitlab.torproject.org/tpo/core/arti/-/issues/174. In the course of this work we have fixed some bugs in Arti, fixed an upstream bug in the async-io <https://github.com/smol-rs/async-io/pull/73> crate, and found and identified and fixed several emulation accuracy bugs in Shadow. Happy simulating! The Shadow team

1 0

Cecylia's Monthly Status Report, March 2022
by Cecylia Bocovich 05 Apr '22

05 Apr '22

Hi everyone, This is my status report for March 2022. My work falls into three main areas: 1. Progress on Conjure pluggable transport I have begun adapting Conjure[0] to a Tor pluggable transport, using their Go API[1]. The work in progress client is so far mostly a stub PT and lives on Gitlab[2]. I have also been working on setting up a robust local testing environment to run the Conjure refraction networking station[3] that the registration with Conjure station works as expected. 2. On-boarding and knowledge transfer for sponsor 28 deliverables Since Tor Project hired a new developer to take over the remaining sponsor 28 work, I've been documenting and helping transfer knowledge of the unique sponsor 28 requirements and evaluation environments. 3. Snowflake simulations in Shadow Not much progress on this during the last month. I spent a very small amount of time helping the Shadow team test out fixes for Go simulations in Shadow [4]. Thanks, Cecylia [0] https://dl.acm.org/doi/abs/10.1145/3319535.3363218 [1] https://pkg.go.dev/github.com/refraction-networking/gotapdance/tapdance [2] https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/conj… [3] https://github.com/refraction-networking/conjure [4] https://github.com/shadow/shadow/issues/1549

1 0

Rhatto's Monthly Status Report, March 2022
by rhatto 05 Apr '22

05 Apr '22

Hi all :) This is my monthly status report for February 2022. Main activities during the period: 0. Created the Onionprobe tool for testing and monitoring Onion Services: https://gitlab.torproject.org/tpo/onion-services/onionprobe It has basic functionality, including metrics exporting to Prometheus, but still needs work to address more general use cases: https://gitlab.torproject.org/tpo/onion-services/onionprobe/-/blob/main/TOD… A summary about what it currently does was made during the last Demo Day: https://gitlab.torproject.org/rhatto/onionprobe/-/blob/main/docs/demoday.md Since that, Onionprobe got additional metrics and it's first refactor :) Now I'm interested to know what the community would like to have in such a tool! Some special reporting output? Some auditing like Onionscan does? Please let me know :) 1. Completed the initial version of Oniongroove specs for deployment and monitoring of Onion Service sites. Current specification is available at https://gitlab.torproject.org/tpo/onion-services/oniongroove/-/blob/feature… It's is about to be reviewed and merged in the main branch: https://gitlab.torproject.org/tpo/onion-services/oniongroove/-/merge_reques… Right now the main intention with this document is to make sure we're in the right path towards an automated high availability deployment/monitoring suite, making acceptable choices to ease the handling of all complexities involved in hosting Onion Services. So comments and suggestions would be gladly welcomed :) 2. Started research/summarization for existing proposals on Onion Service usability improvements, to be published soon. Related ticket: https://gitlab.torproject.org/tpo/onion-services/onion-support/-/issues/64 3. Many other activities related to Sponsor 123 such as meetings, plannings and support :) -- Silvio Rhatto pronouns he/him

1 0

Network Team - Upcoming tor.git 0.4.7.6-rc release - April 2022
by David Goulet 05 Apr '22

05 Apr '22

Greetings, Network team will be releasing on Thursday (April 7th, 2022) the first release candidate of the 0.4.7.x series! Yes! Finally! Congestion control is arriving to a relay near you! We'll be stabilizing as much as we can in the coming weeks. There might be another release candidate in case of major bugfixes or not. We are quite hopeful to have the first stable before the end of the month! Upcoming versions: - 0.4.7.6-rc @network-team: It is _now_ a good time to start reviewing changes/ files: https://gitlab.torproject.org/tpo/core/tor/-/tree/main/changes Last, we've asked the dirauth to recommend this version few minutes ago. Cheers! David -- tMKneCFiLexBFETizMy77pmc72pSH0TMqJMvr/mbpx4=

1 0

Nina's Monthly Status Report, March 2022
by nina13＠riseup.net 04 Apr '22

04 Apr '22

Hi, this is my March Report. Overall, I resolved 2041 user support tickets in March: 518 requests were answered by email, and 1523 using Telegram. Most of the requests were bridge requests from the users in Russia and troubleshooting around that. There are also many questions on how to download the Tor Browser as the main domain of the Tor Project is blocked in Russia. There were also several cases of the Android App bug and a growing amount of requests about using bridges in Tails. I've summarized my experience of using cdr.link for tech support: https://gitlab.torproject.org/tpo/community/support/-/issues/40059#note_278… I also did some translations for the forums to help Russian-speaking users to stay in touch with our latest news and updates: https://ntc.party/t/in-case-snowflake-rendezvous-gets-blocked/1857 https://forum.torproject.net/t/tor-browser-11-0-7/2484 This month I also added one more support template article in Russian with the basic information on software signature. I got several questions from the users about it and see a growing tendency to download software from unsafe sources. Thanks, Nina

1 0

minutes from the TPA meeting
by Antoine Beaupré 04 Apr '22

04 Apr '22

Hi! Here's your monthly digest of TPA minutiae. # Roll call: who's there and emergencies First few minutes of the meeting were spent dealing with blocking issues with office.com, which ultimately led to disabling sender verification. See [tpo/tpa/team#40627][] for details. [tpo/tpa/team#40627]: https://gitlab.torproject.org/tpo/tpa/team/-/issues/40627 Present: anarcat, gaba, kez, lavamind, linus. # Roadmap / OKR review We reviewed our two roadmaps: * [sysadmin OKRs][] * [web OKRs][] [sysadmin OKRs]: https://gitlab.torproject.org/tpo/tpa/team/-/wikis/roadmap/2022 [web OKRs]: https://gitlab.torproject.org/tpo/web/team/-/wikis/roadmap/2022 ## TPA OKRs We didn't do much in the TPA roadmap, unfortunately. Hopefully this week will get us started with the bullseye upgrades, and some initiatives have been *started* but it looks like we will probably not fullfill most (let alone all) of our objectives for the roadmap inside TPA. ## web OKRs More progress was done on the web side of things: * donate: lektor frontend needs to be cleaned up, some of the settings are still set in react instead of with lektor's `contents.lr`. Vanilla JS rewrite mostly complete, possibly enough that the rest can be outsourced. Still no .onion since production is running the react version (doesn't run in tbb) and .onion might also break on the backend. We also don't have an HTTPS certificate for the backend! * translators: good progress on this front, build time blocking on the i18n plugin status ([TPA-RFC-16][]), stuck on Python 3.8 land, we are also going to make changes to the workflow to allow developers to merge MRs (but not push) * documentation: removed some of the old docs, dev.tpo for Q2? The TPA-RFC-16 proposal (rewriting the lektor-i18n plugin) was discussed a little more in depth. We will get more details about the problems kez found with the other CMSes and a rough comparison of the time that would be required to migrate to another CMS vs rewriting the plugin. See [tpo/web/team#28][] for details. [TPA-RFC-16]: https://gitlab.torproject.org/tpo/tpa/team/-/wikis/policy/tpa-rfc-16-replac… [tpo/web/team#28]: https://gitlab.torproject.org/tpo/web/team/-/issues/28 # Dashboard review * https://gitlab.torproject.org/tpo/tpa/team/-/boards/117 * https://gitlab.torproject.org/groups/tpo/web/-/boards * https://gitlab.torproject.org/groups/tpo/tpa/-/boards Skipped for lack of time # Holidays Skipped for lack of time # Other discussions Skipped for lack of time # Next meeting May 2nd, same time. We should discuss phase 3 of bullseye upgrades next meeting, so that we can make a decision about the stickiest problems like Icinga 2 vs Prometheus, Schleuder, Mailman, Puppet 6/7, etc. # Metrics of the month * hosts in Puppet: 91, LDAP: 91, Prometheus exporters: 149 * number of Apache servers monitored: 26, hits per second: 314 * number of self-hosted nameservers: 6, mail servers: 8 * pending upgrades: 1, reboots: 23 * average load: 3.62, memory available: 4.58 TiB/5.70 TiB, running processes: 749 * disk free/total: 29.72 TiB/85.33 TiB * bytes sent: 382.46 MB/s, received: 244.51 MB/s * planned bullseye upgrades completion date: 2025-01-30 * [GitLab tickets][]: 185 tickets including... * open: 0 * icebox: 157 * backlog: 12 * next: 8 * doing: 5 * needs review: 1 * needs information: 2 * (closed: 2680) [Gitlab tickets]: https://gitlab.torproject.org/tpo/tpa/team/-/boards Upgrade prediction graph lives at https://gitlab.torproject.org/tpo/tpa/team/-/wikis/howto/upgrades/bullseye/ Now also available as the main Grafana dashboard. Head to <https://grafana.torproject.org/>, change the time period to 30 days, and wait a while for results to render. -- Antoine Beaupré torproject.org system administration

1 0