- tor-project - lists.torproject.org

Rhatto's Monthly Status Report, April 2022
by rhatto 05 May '22

05 May '22

Hi all :) This is my monthly status report for April 2022. Main activities during the period: 0. Onionprobe (an onion sites monitoring tool): * Uploaded to PyPI! https://pypi.org/project/onionprobe/ * Released Onionprobe version 0.3.0: https://gitlab.torproject.org/tpo/onion-services/onionprobe/-/blob/main/Cha… https://gitlab.torproject.org/tpo/onion-services/onionprobe/-/tags/0.3.0 * Added Debian packaging support! https://gitlab.torproject.org/tpo/onion-services/onionprobe/-/issues/4 * Adapted for an instance monitoring the health of The Tor Project's onion sites: https://gitlab.torproject.org/tpo/tpa/team/-/issues/40717 2. Onionmine: created this small set of scripts to help automating the generation of Onion Service vanity keys: https://gitlab.torproject.org/tpo/onion-services/onionmine/ 3. Many other activities related to Sponsor 123 such as meetings, development and support :) -- Silvio Rhatto pronouns he/him

1 0

Anti-censorship team meeting notes, 2022-05-05
by meskio 05 May '22

05 May '22

Hey everyone! Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-05-05-15.58.html And our meeting pad: Anti-censorship work meeting pad -------------------------------- Next meeting: Thursday May 12th 16:00 UTC Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) == Goal of this meeting == Weekly check-in about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at Tor. == Links to Useful documents == * Our anti-censorship roadmap: * Roadmap: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards * The anti-censorship team's wiki page: * https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home * Past meeting notes can be found at: * https://lists.torproject.org/pipermail/tor-project/ * Tickets that need reviews: from sponsors we are working on: * All needs review tickets: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… * Sponsor 28 * must-do tickets: https://gitlab.torproject.org/groups/tpo/-/milestones/10 * possible tickets: https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… * Sponsor 96 * https://gitlab.torproject.org/groups/tpo/-/milestones/24 == Announcements == * the bridges telegram bot is now in rdsys == Discussion == * Distributed Snowflake Server Support * there is a merge request now: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… * review is wellcome, there are mayor changes * RKS hackathon * RKS is organizing a hackathon: demhack.ru and asked TPO to be part of it * we are proposing whatsapp gettor+bridgesbot * they think it might be to small, we can extend it * another idea is to do it in iMessage * we'll discuss it in a ticket * due to monday == Actions == * == Interesting links == * == Reading group == * We will discuss "Understanding the Impact of Encrypted DNS on Internet Censorship, ACM WWW 2021" on May 19th, 2022 * https://shhaos.github.io/papers/www21-DoE.pdf * Questions to ask and goals to have: * What aspects of the paper are questionable? * Are there immediate actions we can take based on this work? * Are there long-term actions we can take based on this work? * Is there future work that we want to call out in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. anadahz: 2022-01-27 Last week: - Increase timeout check cycles for default-bridge-felix-1 and default-bridge-felix-2 as they have been generating too many alerts: https://gitlab.torproject.org/tpo/anti-censorship/monit-configuration/-/mer… cecylia (cohosh): last updated 2022-04-14 Last week: - moved tor-specific snowflake code out of client library (snowflake#40124) - merge request: snowflake!85 - bump version of webrtc dependency (snowflake#40127) - merge request: snowflake!86 - commented on snowflake web workflow (snowflake#40125) - opened issue to bump version of snowflake and webrtc in tor browser (tor-browser-build#40474) - work on conjure test environment setup This week: - continue work on conjure PT - continue snowflake maintenance tasks Needs help with: dcf: 2022-05-01 (will be absent 2022-05-05) Last week: - opened an issue for confusing client NAT check log messages https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - filed an OONI issue to get access to stunreachability measurements, in order to get more insignt into torsf (snowflake) failures https://github.com/ooni/backend/issues/590 Next week: - look at STATUS VERSION proposal https://gitlab.torproject.org/tpo/core/torspec/-/merge_requests/63 - set up access control on the snowflake-02 bridge https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Help with: arlolra: 2022-04-07 Last week: - Merged the rest of snowflake !81 Next week: - Get to snowflake-webext #10 Evergreen: - Figure out where in pion/webrtc ALPN should be configured and used - Maybe add Chacha20Poly1305 to pion/dtls https://github.com/pion/dtls#planned-features https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Help with: - maxb: 2021-09-23 Last week: - Worked on https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… re: utls for broker negotiation - Had conversation with someone about upstream utls http round tripper https://github.com/refraction-networking/utls/pull/74 - Too busy with work :/ Next week: - _Really_ want to get a PR for utls round tripper meskio: 2022-05-05 Last week: - deploy telegram in rdsys (rdsys#111) - advance on the onionsproutsbot deployment (team#78) - add onionsproutsbot to transifex (l10n#40070) - add the location to circumvention settings (rdsys#108) - API for dynamic bridges in telegram (rdsys#98) - review bridedb.tpo/info fixes (bridgedb!39) Next week: - bridges sharing the same IP should use the same distributor (rdsys#106) - finish and deploy the changes into circumvention settings API (rdsys#108) Shelikhoo: 2022-05-05 Last Week: >>> - [Merge Request] Add Distributed Snowflake Server Support (snowflake!87) <<< - [Merge Request Awaiting] Add SOCKS5 forward proxy support to snowflake (snowflake!64) - [Merge Request Review] Telegram distributor hands both new and old bridges to old accounts(snowflake!37) - [Merge Request Review] Don't mix up old and new telegram accounts(snowflake!38) - [Merge Request Review] Remove smallerRichard default bridge - [Research & Coding] WebSocket + CDN Based Probe Control Connection Forwarder (shelikhoo/LogCollectorAncillary#3) - [Coding & Deployment] Include frontdisk testing targets in probe tests (shelikhoo/LogCollectorAncillary#4) - [Coding & Deployment] Proposal: Centralized Probe Result Collector (anti-censorship/team#54) - [Discussion] Opening 8443 port on probetelemetry-01@ for V2Ray Websocket Connection Inbound Next Week: - [Coding] Distributed Snowflake Bridges (continue) - [Coding & Deployment] Proposal: Centralized Probe Result Collector (anti-censorship/team#54) - [Research] Implement metrics to measure snowflake churn(https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transport… Itchy Onion: 2022-05-05 Last week: - go over snowflake code (in preparation for the next Georgetown meeting and also help with snowflake rebasing) This week: - prepare Georgetown meeting (read more docs and code) - starting to look at new RACE version (2.1.1) HackerNCoder: 2021-12-16 This week: Last/done: Setup web mirror on tor.encryptionin.space Next: Get (new VPs with) new IP and setup new web mirror on new domain -- meskio | https://meskio.net/ -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- My contact info: https://meskio.net/crypto.txt -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Nos vamos a Croatan.

1 0

Nina's Monthly Status Report, April 2022
by nina13＠riseup.net 05 May '22

05 May '22

Hi, that's my monthly report for April 2022 Summary: Telegram tickets answered and solved - 554 Tickets received by email (frontdesk) answered and solved - 189 Total: 743 This month I took part in the Samsung S22 bug investigation[1] and spotted some issues with cdr.link[2]. Fortunately, minor ones. In April, we managed to get some feedback on censorship in Turkmenistan[3] and test some ways to circumvent it. Private bridges worked best. This month @ggus, @championquizzer, and I had a Ticket triage and backlog session for frontdesk tickets. I put some effort into educating as many users as possible about our bot https://t.me/@getbridgesbot so that they could get bridges anytime and immediately. That makes their experience using Tor Browser better and gives us more space to communicate with alpha-testers. [1] https://gitlab.torproject.org/tpo/applications/fenix/-/issues/40216 [2] https://gitlab.torproject.org/tpo/community/support/-/issues/40078 [3] https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/iss… and https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/iss…

1 0

PieroV's Monthly Status Report, April 2022
by Pier Angelo Vendrame 03 May '22

03 May '22

Hi everyone! Here is my status report for April 2022. As anticipated last month, I continued working on the about:torconnect page and on about:preferences#connection. We have merged the first revision, which you can find on the latest alphas of Tor Browser 11.5! Any feedback is more than welcome 😄️. But we have not stopped there, and we prepared a second iteration, which is being reviewed [1]. Apart from this, I have worked on Tor Browser for Android for the rest of the month. We really had a lot of trouble with the rebase to Geckoview/Android Components/Fenix v99. You can read the whole story on tor-browser-build#40446 [2]. It should solve the crash that some users reported to us. We are sorry it took us so long to fix them. I have also already rebased everything for a v99-base stable of Tor Browser for Android 11.0, and I hope to begin its preparation soon. However, Firefox 100 is coming soon. Therefore, I worked for a v100-based TBA in April last week [3]. In addition to the updates, my working branch makes the QA-signed build compatible with Android R+ [4]. Thanks, Pier [1] https://gitlab.torproject.org/tpo/applications/tor-browser/-/merge_requests… [2] https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4… [3] https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4… [4] https://gitlab.torproject.org/tpo/applications/fenix/-/issues/40202

1 0

Anti-censorship team meeting notes, 2022-04-28
by Shelikhoo 28 Apr '22

28 Apr '22

Hey everyone! Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-04-28-15.58.html And our meeting pad: Anti-censorship work meeting pad -------------------------------- Next meeting: Thursday May 5th 16:00 UTC Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) == Goal of this meeting == Weekly check-in about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at Tor. == Links to Useful documents == * Our anti-censorship roadmap: * Roadmap: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards * The anti-censorship team's wiki page: * https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home * Past meeting notes can be found at: * https://lists.torproject.org/pipermail/tor-project/ * Tickets that need reviews: from sponsors we are working on: * All needs review tickets: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… * Sponsor 28 * must-do tickets: https://gitlab.torproject.org/groups/tpo/-/milestones/10 * possible tickets: https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… * Sponsor 96 * https://gitlab.torproject.org/groups/tpo/-/milestones/24 == Announcements == * polyanthum & gettor-01 will be upgraded next week, the servers where bridgedb,rdsys,gettor and other anti-censorship infra is hosted == Discussion == * Distributed Snowflake Server Support * Any feedbacks? * https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… * No blocker issue discovered. * will first deploy the new broker, and give time for proxies to update * removed smallerRichard builtin server * https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/44 * RKS hackathon * (Discussion Skipped) == Actions == * == Interesting links == * https://www.codastory.com/authoritarian-tech/kazakhstan-shut-down-its-inter… * https://eprint.iacr.org/2020/114 == Reading group == * We will discuss "Blocking of HTTP/3 (QUIC) in Russia" on Apr/28th/2022 * https://dl.acm.org/doi/abs/10.1145/3487552.3487836 * https://github.com/net4people/bbs/issues/108 * Questions to ask and goals to have: * What aspects of the paper are questionable? * Are there immediate actions we can take based on this work? * Are there long-term actions we can take based on this work? * Is there future work that we want to call out, in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. anadahz: 2022-01-27 Last week: - Increase timeout check cycles for default-bridge-felix-1 and default-bridge-felix-2 as they have been generating too many alerts: https://gitlab.torproject.org/tpo/anti-censorship/monit-configuration/-/mer… cecylia (cohosh): last updated 2022-04-14 Last week: - moved tor-specific snowflake code out of client library (snowflake#40124) - merge request: snowflake!85 - bump version of webrtc dependency (snowflake#40127) - merge request: snowflake!86 - commented on snowflake web workflow (snowflake#40125) - opened issue to bump version of snowflake and webrtc in tor browser (tor-browser-build#40474) - work on conjure test environment setup This week: - continue work on conjure PT - continue snowflake maintenance tasks Needs help with: dcf: 2022-04-28 Last week: - made graphs of the snowflake bridge since the server move 2 weeks ago https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Next week: - look at STATUS VERSION proposal https://gitlab.torproject.org/tpo/core/torspec/-/merge_requests/63 - set up access control on the snowflake-02 bridge https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Help with: arlolra: 2022-04-07 Last week: - Merged the rest of snowflake !81 Next week: - Get to snowflake-webext #10 Evergreen: - Figure out where in pion/webrtc ALPN should be configured and used - Maybe add Chacha20Poly1305 to pion/dtls https://github.com/pion/dtls#planned-features https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Help with: - maxb: 2021-09-23 Last week: - Worked on https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… re: utls for broker negotiation - Had conversation with someone about upstream utls http round tripper https://github.com/refraction-networking/utls/pull/74 - Too busy with work :/ Next week: - _Really_ want to get a PR for utls round tripper meskio: 2022-04-28 Last week: - use bridgestrap results to select what bridges to distribute (rdsys#96) - give rdsys a free software license (rdsys#107) - removed smallerRichard builtin bridge (team#44) - brainstorm on dnstt (trac#40001) Next week: - deploy telegram in rdsys (rdsys#101) - advance on the onionsproutsbot deployment Shelikhoo: 2022-04-28 Last Week: - [Merge Request Awaiting] Add SOCKS5 forward proxy support to snowflake (snowflake!64) - [Coding & Deployment] Proposal: Centralized Probe Result Collector (anti-censorship/team#54) - [Discussion] Centralized Probe Log Collection Ascension Request - [Discussion] Hosting Centralized Probe Log Collection Server on TPA managed VPS - [Discussion] Proposal: Support for Dynamic IP obfs4 bridges with unattended proxy information update(aka "Subscription") - [Coding] Distributed Snowflake Bridges - Broker - [Coding] Distributed Snowflake Bridges Testing Environment - Dockerlized - [Deployment] Distributed Snowflake Bridges Testing Broker Next Week: - [Coding] Distributed Snowflake Bridges (continue) - [Research] Implement metrics to measure snowflake churn(https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transport… - [Research] Blocking of Snowflake in Turkmenistan, 2021-10-24 Itchy Onion: 2022-04-28 Last week: - debugged a RACE 2.1.0 issue - had a meeting with Georgetown folks (a recurring meeting to go over each other's channel code) This week: - go over snowflake code (in preparation for the next Georgetown meeting and also help with rebase snowflake rebasing) - go over RACECAR docs HackerNCoder: 2021-12-16 This week: Last/done: Setup web mirror on tor.encryptionin.space Next: Get (new VPs with) new IP and setup new web mirror on new domain

1 0

The Tor Project's priorities for April - June 2022
by Gaba 26 Apr '22

26 Apr '22

Hi! For visibility in the broader community, I'm sending the priorities we have for 2022 and specific projects and tasks we are working on for this quarter. There are links where you can read more about the work that different teams at Tor are doing. If you want to read about long term strategic goals for the Tor project organization, you can go to this wiki page: https://gitlab.torproject.org/tpo/team#organization # The Tor Project Priorities 2022 The Tor network Make the Tor network faster for users Get Arti to production level Improve bad relay tooling Support researchers for network experiments Improve monitoring and alerting for metrics services. Maintain a healthy relay operators community Increase adoption of onion services Trainings and User Research in the global south Connect with censored users to improve censorship circumvention Research on Tor Browser new features and VPN concept Collaborate with other organizations in the Tor ecosystem New Tor's "VPN" client Design safety criteria Define MVP for client Build the network engine for VPN solution Evaluate orbot and leap components and architecture Start working on UI Tor Browser Implement feedback from users Improve automatic censorship detection during bootstrap Enable HTTPS-only mode Browser is under control (releases on schedule, automated tests pass) Censorship Circumvention Implement new pluggable transport: Conjure & HTTPT Scale Snowflake Deploy improved bridge distribution system Monitor bridge health Censorship analysis and response to it Infrastructure User support tools gets improved User support Documentation keep up to date Improve mail services Rebuild donate page Make it easier for translators to contribute # Tor's TEAMS PRIORITIES FOR Q2 ---------------------------------- ## Applications (Led by Richard. Board https://gitlab.torproject.org/groups/tpo/applications/-/boards?label_name[]…) Implement Tor Browser UX changes that UX team is prioritizing from user research and feedback. Improve automatic censorship detection during bootstrapping in Tor Browser (desktop and Android). Evaluate orbot and leap for components and architecture. Design VPN safety criteria. HTTPS everywhere replacement. Go/Rust/Java dependency resolution: how to resolve dependencies ahead of time. Browser: Browser is under control Android Tor Browser releases are on schedule Android/Linux Tor Browser Automated tests are passing Survey the Browser ecosystem Integration: Begin understanding application integration/embedding Begin helping Network Team create easy-to-use Arti API Document required components for Android app integration ## Community (Led by Gus. Board https://gitlab.torproject.org/groups/tpo/community/-/boards?label_name[]=Q2 and https://gitlab.torproject.org/groups/tpo/onion-services/-/boards?label_name…) - assist network health team to maintain a healthy relay operators community - assist anti-censorship team on connecting with censored users to improve censorship circumvention - improve user support tools and documentation - lead trainings with communities in latinoamerica and east africa - look for spikes in tor usage and document process and resources available for it. ## Network Health (Led by Geko. Board https://gitlab.torproject.org/groups/tpo/network-health/-/boards?label_name…) - s61 O2.1: Reduce the number of slow and extremely slow sessions for our users by developing and deploying load balancing improvements. - s61 O4.2: Find and fix performance-impacting issues and bugs discovered from monitoring and scanning. - Run bad-relay detection scripts - Bad-relay tooling improvements . - Fix any sbws critical issues that may come up - Support for researchers for network experiments - Consider tickets from other teams - Support OTF fellow on Relay Operators Community Health Research - Relay operator meetups. - Keep moderating and answering the tor-relays mailing list - Handle EOL relays - Support mentee from GSoC - Improve monitoring and alerting for metrics services. - Deploy a data store for metrics servicesn plan - Refactor sbws2 - Surprise 'anomaly analysis' on the network as needed - Think about metrics for the VPN client and their possible privacy issues/risks - Network anomaly detection: use current monitoring infrastructure to get some of the anomalies we can catch with it. # Network (Led by Alex. Board https://gitlab.torproject.org/groups/tpo/core/-/boards?label_name[]=Q2) - S30 2.3.3 - Improve ability for bridgedb/authority to test bridges that only expose a pluggable transport. - S30 2.4.5 - Increase stability and resilience of bridge authority and bridgeDB by exploring and implementing decentralization of those services. - S61 O1.1: Optimize user-facing performance by tuning parameters of previously deployed Tor network improvements. - S61 O2: sbws with congestion control (Tor support to pin exits/Sos Rends, or just wait). - S61 O3.2: Implement promising performance improvements from evaluation in O3.1. - S61 O4.1: Improve and implement network health monitoring and scanning. - S96 O3.5: Integrate Tor+Snowflake/obfs4 capabilities into mobile applications. - S96 O3.5.1 OnionShare, iOS. - S96 O3.5.2: OnionShare, Android. - S96 O3.5.3: Save (Share-Archive-Verify-Encrypt) by OpenArchive . - S101 O3.2: Enhance Tor to act as a VPN service, rather than an opt-in proxy as it does today. - S119 Arti 1.0.0 - Try to reach "production quality". # Anti-censorship (Lead by Meskio. Board https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards?label_nam…) - S30 O2.3.1 - Develop new and/or improve existing bridge selection and distribution strategies based on data collected about successful, effective methods per evaluation during O1.1. Conjure/Tapdance implementation - S96 O1.1.1 Prepare the Snowflake system for a surge in operators and users. - S96 O1.2: Increase the number of Snowflake bridges. - S96 O1.3: Implement bridges with pluggable transport HTTPT support. - S96 O1.4: Increase the number of active obfs4 and HTTPT bridges. - S96 O2.2: Deploy improved bridge distribution systems. - S96 Start Salmon based design - S96 O2.3: React and steer our response to censorship. - S96 O4.3: Modify GetTor so that it can distribute Tor Browser via messaging apps - S28 RACE project - S2125 Automatize bridge rotation for telegram. Continue translations of anti-censorship material into russian. # UX (Led by Duncan. Board https://gitlab.torproject.org/groups/tpo/-/boards?label_name[]=UX%20Team) Roadmap in https://www.figma.com/file/n4ETd0cUkcfj3KyclJQnt3/UX-Team-Planning?node-id=… # TPA (Led by Anarcat. Board https://gitlab.torproject.org/groups/tpo/tpa/-/boards ) Roadmap in https://gitlab.torproject.org/tpo/tpa/team/-/wikis/roadmap/2022 # WEB It is a collaboration between TPA and Community teams. Board https://gitlab.torproject.org/groups/tpo/web/-/boards cheers, gaba (Tor's project manager)

1 0

Community Team Meeting notes - April 25 2022
by gus 25 Apr '22

25 Apr '22

Hi, Here's the Community Team meeting logs: http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-04-25-13.59.log… And our meeting pad: ## Tor Community Team meeting pad Next meeting: Monday, May 2, 2022 - 1400 UTC Weekly meetings, every Monday at 14:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) ## Goal of this meeting Weekly check-in about the status of Community Team work at Tor. ## Links to Useful documents * Previous meetings: https://forum.torproject.net/tag/community-team * Monthly l10n hangout: https://community.torproject.org/localization/hangouts/ * Known issues with Tor Browser: https://tb-manual.torproject.org/known-issues/ and Tor Browser for Android: https://tb-manual.torproject.org/mobile-tor/#known-issues ## Discussion * Workshop: Relay Operator SysAdmin 101 - https://gitlab.torproject.org/tpo/community/relays/-/issues/36 * Announcement - TB user manual alpha branch: https://gitlab.torproject.org/tpo/web/manual/-/tree/alpha * Community member is suggesting to create an "Education" category in Tor forum and a #tor-education channel on IRC (with Matrix bridge): https://gitlab.torproject.org/tpo/community/support/-/issues/40070 * Related forum post: https://forum.torproject.net/t/tor-in-education-discussion/911/10 ## Updates Name: Last week: - What you worked on last week. This week: - What you are you planning to work on this week. Help with: - Something you need help with. Gus: Last week: - Started the Alix Dunn course - Worked on Sponsor96 and Sponsor30 reports - Sent the Tor Latam meetup agenda to participants - 1:1s with the team - Updated the relay associations page: https://community.torproject.org/relay/community-resources/relay-associatio… - RT ticket triage with Joydeep and Nina - Digital security training with Raya and Tor staff This week: - S96 meeting - Tor Latam meetup - 1:1s with the team - Sponsor125 final report Joydeep: Last week: - RT Ticket triage with Nina and Gus - Planning pre-release documentation updates wrt TB 11.5: https://gitlab.torproject.org/tpo/web/manual/-/issues/119, https://gitlab.torproject.org/tpo/community/support/-/issues/40073, https://gitlab.torproject.org/tpo/web/support/-/issues/298 - user support work on RT, Forum, cdr.link and SM. - Sponsor125 report wrt user support activities This week: - 1:1 with Gus - sync with the UX team - Triage more of the backlog on RT emmapeel: Last week: - Onboarding new translator for rapid response russia. - i18n for the onion support landing page - transifex, repo work - strings review - deal with input form translators in transifex - update website translation files This week: - support new russian translator - onboard sponsor123 translators for landing page - documentation updates raya: Last week: - meeting with s123 stakeholders - 1:1 with gus - work on training page revamp: - https://gitlab.torproject.org/tpo/web/community/-/issues/265 - security training with gus and team This week: - s123 monthly report: - https://gitlab.torproject.org/tpo/onion-services/onion-support/-/issues/75 - meeting with s123 stakeholders - depends on priority, but work on some other to-do's: - https://gitlab.torproject.org/dashboard/issues?scope=all&state=opened&assig… - 1:1 with gus Help with: - rhatto: Last week: - 1:1 with Gus - S123 - Onionprobe testbed: https://gitlab.torproject.org/tpo/onion-services/onion-support/-/issues/59 - S123 - Released Onionprobe 0.3.0 - * https://gitlab.torproject.org/tpo/onion-services/onionprobe/-/tags/0.3.0 * https://pypi.org/project/onionprobe/0.3.0/ - S123 - Onionprobe Debian package: https://gitlab.torproject.org/tpo/onion-services/onionprobe/-/issues/4 This week: - S123 - Continue the Onionprobe testbed setup: https://gitlab.torproject.org/tpo/onion-services/onion-support/-/issues/59 - S123 - Work on new deployments Nina: Last week: - User support on RT and Cdr.link. - Collecting data for Sponsor 125 final report - RT Ticket triage with Gus and Joydeep This week: - User support. - 1:1 with Gus -- The Tor Project Community Team Lead

1 0

Network Team - Upcoming tor.git 0.4.7.7 release - April 2022
by David Goulet 25 Apr '22

25 Apr '22

Greetings, Network team will be releasing on Wednesday (April 27th, 2022) the first stable release of the 0.4.7.x series. Very little has changed from the previous release candidate so this should be a smooth transition into the stable. We'll of course keep a close eye on it due to its drastic new feature: congestion control Upcoming versions: - 0.4.7.7 @network-team: It is _now_ a good time to start reviewing changes/ files: https://gitlab.torproject.org/tpo/core/tor/-/tree/main/changes Last, we've asked the dirauth to recommend this version few minutes ago. Keep an eye out for the release announcement and a blog post about this new stable version. Cheers! David -- g0mNrchagnDtRyN1ttVfag8Txoz/EKIKjotiMPGc7ug=

1 0

Anti-censorship team meeting notes, 2022-04-21
by meskio 21 Apr '22

21 Apr '22

Hey everyone! Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-04-21-15.59.html And our meeting pad: Anti-censorship work meeting pad -------------------------------- Next meeting: Thursday April 21th 16:00 UTC Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) == Goal of this meeting == Weekly checkin about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at Tor. == Links to Useful documents == * Our anti-censorship roadmap: * Roadmap: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards * The anti-censorship team's wiki page: * https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home * Past meeting notes can be found at: * https://lists.torproject.org/pipermail/tor-project/ * Tickets that need reviews: from sponsors we are working on: * All needs review tickets: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… * Sponsor 28 * must-do tickets: https://gitlab.torproject.org/groups/tpo/-/milestones/10 * possible tickets: https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… * Sponsor 96 * https://gitlab.torproject.org/groups/tpo/-/milestones/24 == Announcements == * == Discussion == * Do we have graphs about telegram bridge usage * irl has some script to generate them * current telegram bridges are not pressent in metrics.tpo as 'distributor telegram', as they are manually feeded. This will change when we start using rdsys for it. * Is the reading group reading supposed to be "Web censorship measurements of HTTP/3 over QUIC" https://dl.acm.org/doi/abs/10.1145/3487552.3487836 ? * or the threads https://github.com/net4people/bbs/issues/108 https://ntc.party/t/http-3-quic/1823 ? * one of the authors of the paper, Kathrin Elmenhorst, has posted some more recent measurements of HTTP/3 blocking in Russia specifically https://github.com/kelmenhorst/quic-censorship/issues/4 * we'll read the paper, the threads are for more context * Snowflake Multi-Server Broker Testing (https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow…) * (this is where the client tells the broker&proxy what bridge it wants to use, by putting fingerprint=1234ABCD... on its Bridge line) * testing is wellcome... * there are instructions for testing it in the issue * Report of CDN Block in Turkmenistan(https://gitlab.torproject.org/tpo/anti-censorship/censorship-a… * cloudflare is being blocked in Turkmenistan * in Russia they are blocking 2 IPs of cloudflare too, but might be an error of overblocking targeting a single site https://ntc.party/t/cloudflare-cdn/2245/24 * shell will talk with fastly and cloudflare to see what they know, and we'll look into setting up a vantage point in TM * meskio, if you could give rdsys a free software license, i will breathe easier at night: https://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/issues/107 * meskio will add 3-BSD in the comming days * dnstt, next steps * https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/trac… * the major blocker now is to have support for PT commands over the SOCKS connection * will require forking the code into tpo == Actions == * == Interesting links == * https://pluggabletransports.info/blog/pt-meetup-apr2022/ == Reading group == * We will discuss "Blocking of HTTP/3 (QUIC) in Russia" on Apr/28th/2022 * https://dl.acm.org/doi/abs/10.1145/3487552.3487836 * https://github.com/net4people/bbs/issues/108 * Questions to ask and goals to have: * What aspects of the paper are questionable? * Are there immediate actions we can take based on this work? * Are there long-term actions we can take based on this work? * Is there future work that we want to call out, in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. anadahz: 2022-01-27 Last week: - Increase timeout check cycles for default-bridge-felix-1 and default-bridge-felix-2 as they have been generating too many alerts: https://gitlab.torproject.org/tpo/anti-censorship/monit-configuration/-/mer… cecylia (cohosh): last updated 2022-04-14 Last week: - moved tor-specific snowflake code out of client library (snowflake#40124) - merge request: snowflake!85 - bump version of webrtc dependency (snowflake#40127) - merge request: snowflake!86 - commented on snowflake web workflow (snowflake#40125) - opened issue to bump version of snowflake and webrtc in tor browser (tor-browser-build#40474) - work on conjure test environment setup This week: - continued work on conjure PT - continue snowflake maintenance tasks Needs help with: dcf: 2022-04-21 Last week: - investigated how Tor Metrics estimates the number of users and asked questions about it https://lists.torproject.org/pipermail/tor-dev/2022-April/014724.html https://gitlab.torproject.org/tpo/network-health/metrics/website/-/issues/4… - made a graph of Tor users in Russia across all transports https://gitlab.torproject.org/tpo/community/support/-/issues/40050#note_279… - wrote feedback on the Def Con submission draft - installed a second snowflake bridge https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Next week: - look at STATUS VERSION proposal https://gitlab.torproject.org/tpo/core/torspec/-/merge_requests/63 Help with: agix: 2021-02-10 Last week: - Continued work on gettor-twitter Next week: - Hopefully finish the task Help with: - arlolra: 2022-04-07 Last week: - Merged the rest of snowflake !81 Next week: - Get to snowflake-webext #10 Evergreen: - Figure out where in pion/webrtc ALPN should be configured and used - Maybe add Chacha20Poly1305 to pion/dtls https://github.com/pion/dtls#planned-features https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Help with: - maxb: 2021-09-23 Last week: - Worked on https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… re: utls for broker negotiation - Had conversation with someone about upstream utls http round tripper https://github.com/refraction-networking/utls/pull/74 - Too busy with work :/ Next week: - _Really_ want to get a PR for utls round tripper meskio: 2022-04-21 Last week: - deploy rdsys 0.2 with many fixes - update monit configuration to the new snowflake bridge (monit-configuration!2) - merge moat documentation into rdsys (rdsys!34) - catch up after a week off Next week: - use bridgestrap results to select what bridges to distribute (rdsys#96) - give rdsys a free software license (rdsys#107) Shelikhoo: 2022-04-21 Last Week: - [Merge Request Awaiting] Add SOCKS5 forward proxy support to snowflake (snowflake!64) - [Coding & Deployment] Proposal: Centralized Probe Result Collector (anti-censorship/team#54) - [Discussion] Centralized Probe Log Collection Ascension Request - [Discussion] Hosting Centralized Probe Log Collection Server on TPA managed VPS - [Discussion] Proposal: Support for Dynamic IP obfs4 bridges with unattended proxy information update(aka "Subscription") - [Discussion+Coding] Support Automatic Bridge Info update(shelikhoo/LogCollectorAncillary#1) - [Discussion+Coding] Remove Inactive Bridge from Test Result(shelikhoo/LogCollectorAncillary#2) - [Coding] Distributed Snowflake Bridges - Broker - [Coding] Distributed Snowflake Bridges Testing Environment - Dockerlized - [Deployment] Distributed Snowflake Bridges Testing Broker Next Week: - [Coding] Distributed Snowflake Bridges (continue) - [Research] Blocking of Snowflake in Turkmenistan, 2021-10-24 Itchy Onion: 2022-04-14 Last week: - worked on rebasing RACECAR snowflake but didn't finish (3 day week) - read RACECAR doc This week: - debugged a RACE 2.1.0 issue - read snowflake code -- there is going to be a recurring 1:1 meeting between me and Eliana from Georgetown to go over each other's channel code HackerNCoder: 2021-12-16 This week: Last/done: Setup web mirror on tor.encryptionin.space Next: Get (new VPs with) new IP and setup new web mirror on new domain hanneloresx: 2021-3-4 Last week: - Submitted MR for bridgestrap issue #14 Next week: - Finish bridgestrap #14 - Find new issue to work on Help with: - -- meskio | https://meskio.net/ -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- My contact info: https://meskio.net/crypto.txt -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Nos vamos a Croatan.

1 0

UX team meeting notes, April 19th
by Duncan Russell 19 Apr '22

19 Apr '22

Hello, Thanks to everyone who made it to today's UX Team meeting too! We’re looking forward to seeing you all again in a week’s time. Here are the minutes: http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-04-12-16.59.log… <http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-04-12-16.59.log…> Today we discussed the timings of updating the Tor Browser user manual ahead of Tor Browser 11.5 release, which we’re planning on bundling into the browser. *** == User Experience Team Meeting == UX Team meetings happen every Tuesday at 1600 UTC in #tor-meeting on OFTC. Here are the logs from our meeting on April 12th: http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-04-12-16.59.log… <http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-04-12-16.59.log…> == Useful links == About the UX Team: https://gitlab.torproject.org/tpo/ux/team <https://gitlab.torproject.org/tpo/ux/team> UX repository: https://gitlab.torproject.org/tpo/ux <https://gitlab.torproject.org/tpo/ux> UX roadmap: https://www.figma.com/file/n4ETd0cUkcfj3KyclJQnt3/UX-Team-Planning?node-id=… <https://www.figma.com/file/n4ETd0cUkcfj3KyclJQnt3/UX-Team-Planning?node-id=…> UX kanban: https://gitlab.torproject.org/groups/tpo/-/boards?scope=all&utf8=%E2%9C%93&… <https://gitlab.torproject.org/groups/tpo/-/boards?scope=all&utf8=%E2%9C%93&…> Team kanban: https://gitlab.torproject.org/groups/tpo/-/boards?scope=all&label_name[]=UX… <https://gitlab.torproject.org/groups/tpo/-/boards?scope=all&label_name[]=UX…> == Meetbot commands == - #startmeeting UX Team Weekly Meeting - #endmeeting --------------------------- Tuesday April 19th @ 16:00 UTC --------------------------- == What projects are we working on? == S9 - Usability and Community Intervention on Support for Democracy and Human Rights https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… <https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&…> S30 - Empowering Communities in the Global South to Bypass Censorship https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… <https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&…> S96 – Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & Tibet https://gitlab.torproject.org/groups/tpo/-/milestones/24 <https://gitlab.torproject.org/groups/tpo/-/milestones/24> S101 - Tor VPN Client for Android https://gitlab.torproject.org/groups/tpo/-/milestones/32 <https://gitlab.torproject.org/groups/tpo/-/milestones/32> S123 - Tor Secure Access Package for USAGM https://gitlab.torproject.org/groups/tpo/-/milestones/34 <https://gitlab.torproject.org/groups/tpo/-/milestones/34> == Announcements == Nothing this week! == Agenda == Evergreen items: 1. Announcements 📣 2. Weekly planning 📅 3. Check-in with user support 💬 Discussion items for this week only: 4. Update Tor Browser User Manual with TB 11.5 release - related tickets: https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/11698 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/11698> - tb-manual.tpo: https://gitlab.torproject.org/tpo/web/manual/-/issues/119 <https://gitlab.torproject.org/tpo/web/manual/-/issues/119> - support.tpo: https://gitlab.torproject.org/tpo/web/support/-/issues/298 <https://gitlab.torproject.org/tpo/web/support/-/issues/298> - user support channels: https://gitlab.torproject.org/tpo/community/support/-/issues/40073 <https://gitlab.torproject.org/tpo/community/support/-/issues/40073> - localization: https://gitlab.torproject.org/tpo/community/l10n/-/issues/40068 <https://gitlab.torproject.org/tpo/community/l10n/-/issues/40068> Championquizzer: i'd also stress that we will have to keep a good time margin for l10n Richard: we should hash out some details in the release meeting re how this is actually getting integrated into tor-browser and the build system Deadline for changes to make the bundling: TBC, donuts will discuss with applications in our next release meeting == Weekly planning == Note: Please highlight anything you'd like to discuss below in **bold** duncan/donuts Last week (actual): - Split the newest designs in tor-browser#40773 into new tickets for implementation - Tested new connection features in 11.5a9 and posted feedback in applications/tor-browser#40887 - Began working on the next steps for tor-qa in applications/team#6 - Quarterly reports for funders This week (planned): - Combine, dedupe and finalize the two bridge-moji shortlists in applications/tor-browser#40860 - Add Tor Browser to the Internews UX Forum website - Design mockup for the bundled tb-manual in applications/tor-browser#40885 - Produce outline for tor-qa recruitment campaign in applications/team#6 - Start thinking about social previews/teasers for Tor Browser 11.5 - Maybe look at Snowflake landing page redesign in pluggable-transports/snowflake#40125 - Catch up on O1 activities for S101 - More quarterly reports for funders Nah Last week (actual): - gave a quick reading to s9 ToR - started analysing s30 feedback (start with spanish): https://gitlab.torproject.org/tpo/ux/research/-/issues/79 <https://gitlab.torproject.org/tpo/ux/research/-/issues/79> - reviewed s9 follow up, and sent compensation to s9 interviewees - transcribed and translated most of s9 interviews: https://gitlab.torproject.org/tpo/ux/research/-/issues/77 <https://gitlab.torproject.org/tpo/ux/research/-/issues/77> - did more s30 usability testing (mex) and br (two of them today) - transcribed and translated usability testing from mexico - attended "Obfuscated VPN: Lessons Learned and Future Work" - afk on Monday This week (planned): - meet and review s9 ToR today - transcribe and translate today's usability testing (s30) - schedule more 2 usability testing for connect assist - final analysis for these usability testing ^ - review s30 report - translate orbot's usability testing and survey (from portuguese to EN) - finish survey analysis (s30) - prepare s9 presentation for latam tor meetup - schedule meeting with sweetcurator to review script interview - catch up on s101 Need help: review card sorting survey based on job stories (s101) Near future: hope to start scheduling s101 interviewees mid-next-week with sweetcurator Nicob Last week (actual): - afk most of thurs + fri - USAGM:QA with Kez - Revise donate page header images - Revise monoprint onion sticker design - Dropping in content for Annual Report, beginning layout and design This week (planned): - USAGM: Design QA with kez - Annual report: Continue dropping in content as it becomes available; continue layout and design, plan graphics and illustrations - Artwork for Network Health blog post - Update outreach material with v3 onion address Joydeep Check-in with user support: - few more reports of TBA 11.0.8 crashing on launch (https://gitlab.torproject.org/tpo/applications/fenix/-/issues/40212 <https://gitlab.torproject.org/tpo/applications/fenix/-/issues/40212>) == Open Call for User Research == Find out how to contribute to the UX team: https://community.torproject.org/user-research/how-to-volunteer/ <https://community.torproject.org/user-research/how-to-volunteer/> Thanks everyone! *** Duncan Larsen-Russell Product Manager & UX Team Lead duncan(a)torproject.org <mailto:duncan@torproject.org>

1 0