- tor-project - lists.torproject.org

Anti-censorship team meeting notes, 2022-02-03
by meskio 03 Feb '22

03 Feb '22

Hey everyone! Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-02-03-16.00.html And our meeting pad: Anti-censorship work meeting pad -------------------------------- Next meeting: Thursday February 3rd 16:00 UTC Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) == Goal of this meeting == Weekly checkin about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at Tor. == Links to Useful documents == Our anti-censorship roadmap: Roadmap: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards The anti-censorship team's wiki page: https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home Past meeting notes can be found at: https://lists.torproject.org/pipermail/tor-project/ Tickets that need reviews: from sponsors we are working on: All needs review tickets: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… Sponsor 30 https://gitlab.torproject.org/groups/tpo/-/milestones/4 https://gitlab.torproject.org/groups/tpo/-/milestones/7 https://gitlab.torproject.org/groups/tpo/-/milestones/5 https://gitlab.torproject.org/groups/tpo/-/milestones/6 Sponsor 28 must-do tickets: https://gitlab.torproject.org/groups/tpo/-/milestones/10 possible tickets: https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… == Announcements == == Discussion == snowflake bridge is now switched back from staging to production https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… load balancing is effective - the bridge is now using all its CPU resources effectively, and is no longer bottlenecked on tor as a consequence, the bridge is providing about twice as much bandwidth as before (now 20 MB/s, from 10 MB/s) however, it is now at the limit of its CPU capability, and will not be able to go faster than it does now for the 6 days the staging server was in use, it was going even faster, up to 30 MB/s. there's no obvious low-hanging fruit in the snowflake-server CPU profile https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… profiling extor-static-cookie could be worthwhile == Actions == == Interesting links == == Reading group == We will discuss "Weaponizing Middleboxes for TCP Reflected Amplification" on 2022-02-17 https://censorbib.nymity.ch/#Bock2021b Questions to ask and goals to have: What aspects of the paper are questionable? Are there immediate actions we can take based on this work? Are there long-term actions we can take based on this work? Is there future work that we want to call out, in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. anadahz: 2022-01-27 Last weeek: - Increase timeout check cycles for default-bridge-felix-1 and default-bridge-felix-2 as they have been generating too many alerts: https://gitlab.torproject.org/tpo/anti-censorship/monit-configuration/-/mer… cecylia (cohosh): last updated 2022-02-03 Last week: - deployed new version of snowflake webextension + badge - fixed issue with file limits at probetest (snowflake#40096) - Updated documentation on schleuder mailing list admin (tpa/wiki-replica!22) - filed issue about mailing list public key change (tpa/team#40609) - reviews - responded to ooni questions about snowflake tests (snowflake#40097) - https://github.com/ooni/probe/issues/2004 - lots of meetings This week: - more reviews - try out recent shadow bug fixes - work with ooni on tor related tests - s28 evaluation prep - look at what's necessary for tapdance/conjure - write up more documentation Needs help with: dcf: 2022-02-03 Last week: - profiled snowflake-server on the staging bridge https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - found a solution to prevent onion key rotation on the load-balanced bridge: a preexisting directory at a destination path https://forum.torproject.net/t/tor-relays-how-to-reduce-tor-cpu-load-on-a-s… - opened an issue for an assertion failure that happens when onion key rotation is prevented https://gitlab.torproject.org/tpo/core/tor/-/issues/40554 - monitored the switchover from the staging snowflake bridge to production, and debugged resulting issues https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - wrote scripts to graph multi-instance bandwidth and clients https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - discovered a couple of minor bugs in snowflake-server https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Next week: - update snowflake bridge installation and survival guides - open an issue for metrics graphs correctly showing graphs for fingerprints with multiple instances - start a discussion on tor-dev about alternatives for ExtORPort authentication (remove the need for extor-static-cookie) - start a discussion on tor-dev about supported ways to disable onion key authentication Help with: agix: 2021-01-13 Last week: - Busy with work on Censored Planet Next week: - Continue work on gettor-twitter Help with: - arlolra: 2022-01-20 Last week: - [added 2022-01-20 by dcf] ALPN support for pion DTLS https://github.com/pion/dtls/pull/415 Next week: - Figure out where in pion/webrtc ALPN should be configured and used - Maybe add Chacha20Poly1305 to pion/dtls https://github.com/pion/dtls#planned-features https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Help with: - maxb: 2021-09-23 Last week: - Worked on https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… re: utls for broker negotiation - Had conversation with someone about upstream utls http round tripper https://github.com/refraction-networking/utls/pull/74 - Too busy with work :/ Next week: - _Really_ want to get a PR for utls round tripper meskio: 2022-02-03 Last week: - test deployment for the new rdsys/bridgedb setup (rdsys#12) - read the rdsys token from a file (bridgedb!33) - fixes on country block mechanism for rdsys and bridgedb (rdsys!26) - review bridgedb web redesign in lektor (bridgedb!31) - feedback on the debian package for obfs4proxy (obfs4#33736) - API rethinking for circumvention settings (bridgedb#40043 TorBrowser#40781) Next week: - make easier to test bridgedb ater rdsys change (bridgedb#40034) Shelikhoo: 2022-02-03 Last Week: - [Merge Request Awaiting] Add SOCKS5 forward proxy support to snowflake(snowflake!64) - [Merge Request Done] Privacy preserving stats in Snowflake standalone proxy(snowflake#40079, snowflake!72) - [Merge Request Review Done] Configure what distributor does distribute each resource type - [Discussion] Implement metrics to measure snowflake churn(snowflake#34075) - [Discussion] Proposal: Support for Dynamic IP obfs4 bridges with unattended proxy information update(aka "Subscription") - [Discussion] Proposal: Push Notification Based Signaling Channel - [Discussion] Proposal: Centralized Probe Result Collector(anti-censorship/team#54) - [Discussion] HTTPT & Websocket(https://gitlab.torproject.org/tpo/anti-censorship/pluggable-trans… - [Investigate] Is there a better moat/snowflake SNI than cdn.sstatic.net? (snowflake#40068) - [Investigate] Multi-instance Load Balanced Tor - Snowflake Deployment - [Investigate] China "Anti-Fraud" Webpage Redirection Censorship(censorship-analysis#40026) - [Investigate] uTLS for broker negotiation Next Week: - [Discussion] Implement metrics to measure snowflake churn (snowflake#34075) - [Discussion] Proposal: Push Notification Based Signaling Channel - [Merge Request] Add verbosity switch to suppress diagnostic output(snowflake#40079, snowflake!74) - [Discussion] Proposal: Centralized Probe Result Collector(anti-censorship/team#54) - [Investigate] uTLS for broker negotiation HackerNCoder: 2021-12-16 This week: Last/done: Setup web mirror on tor.encryptionin.space Next: Get (new VPs with) new IP and setup new web mirror on new domain hanneloresx: 2021-3-4 Last week: - Submitted MR for bridgestrap issue #14 Next week: - Finish bridgestrap #14 - Find new issue to work on Help with: - -- meskio | https://meskio.net/ -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- My contact info: https://meskio.net/crypto.txt -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Nos vamos a Croatan.

1 0

Network Team - Upcoming 0.4.5.12 and 0.4.6.10 - February 2022
by David Goulet 02 Feb '22

02 Feb '22

Greetings! There was a problem in our release engineering flow for our last 0.4.5 and 0.4.6 releases back in December 2021. In short, the git history was merged foward (from previous maintained versions) but not the actual changes for specific commits! Yes this can happen because we use `git merge -s ours` in our workflow at a very specific step in the process which lead to this problem. How it happened, we don't know but since this part is still done manually, it was a human error and likely the normal merge forward was not done for some parts and was done through the "-s ours". Anyway, someone noticed (huge thanks!), you can track it here: https://gitlab.torproject.org/tpo/core/tor/-/issues/40557 The good news is that it was only the new fallbackdir list and GeoIP updates. And thus, these two new releases will just be about that. Quick reminder as well that 0.3.5.x is EOL since Feb 1st and so network team is now done maintaining that version. Upcoming version: - 0.4.5.12 - 0.4.6.10 We've just asked the authorities to recommend these new versions. Cheers! David -- JdqWtdb2QqepPCR0HlXnXo1juV9HTc7FhjLutGwwn2I=

1 0

Monthly status report for irl
by Iain Learmonth 02 Feb '22

02 Feb '22

Hi, This is my monthly status report for work completed in January 2022. I have restructured the dynamic bridges such that they are now handled by unique identifiers, rather than by a numeric index. This makes it a lot easier to increase/decrease the number of bridges hosted on each provider, with targeted removal of specific bridges. Previously it was only possible to decrease the count, removing bridges according to their index. The bridges are now being monitored for the “overload” parameter in their descriptors, so that it’s possible to see when a pool is undersupplied to meet the demand. I now have a local dashboard for managing the bridges, making replacement easier and no longer requiring manual changes to text files with an editor. (Although any more advanced operations still require that.) I have deployed an instance of CDR Link (https://digiresilience.org/solutions/link/) for user support. This instance is being used to evaluate the platform with a view to eventually replacing RT as the hub for user support tickets. Throughout February, I am planning to add another cloud provider to the dynamic bridge framework and continue to monitor the deployed dynamic bridges and CDR Link instance for any maintenance that may be required. Thanks, Iain. -- Iain Learmonth (he/him) SR2 Communications Limited Phone: +44 (0)1224 900 202 | Email: irl(a)sr2.uk

1 0

PieroV's monthly status report
by Pier Angelo Vendrame 02 Feb '22

02 Feb '22

Hi everyone! This is my status report for January 2022. I took back from the patchset reordering and Tor Browser Bundle test. I got Richard's feedback, thanks to which we improved the result a lot. Now we can build Tor Browser (almost) at every commit of our patchset. Builds at two commits (around the integration of torbutton) produce a non-working browser, but this was an acceptable trade-off for us. Please, have a look at the original issue (tor-browser#40562 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40562>) and at the merge requests (tor-browser!242 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/merge_requests…> and tor-browser!250 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/merge_requests…>) for more details. For tests, I updated the ones that were not working anymore (tor-browser-bundle-testsuite!17 <https://gitlab.torproject.org/tpo/applications/tor-browser-bundle-testsuite…>) and added some issues to what we would like to fix/implement. Then, I had some new tasks. One was rebasing geckoview to version 96 (tor-browser#40769 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40769> and !243 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/merge_requests…>) and Android components to 96.0.13. The latter were not merged; aguestuser rebased them to 96.0.15, instead. Anyway, this took me quite some time, but I learned a lot about our build system. Also, it made me find a problem with our configuration flags for Firefox that prevented geckoview from being compiled successfully and fixed them in tor-browser!251 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/merge_requests…>. Eventually, this patch was also needed for Firefox 91.6. Another big task was updating Tor settings in the about:preferences (tor-browser#40774 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40774>); I am close to a conclusion with it. Finally, another pair of tasks were updating obfs4proxy (tor-browser-build!396 <https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/merge_re…>) and some localization strings (tor-browser!247 <https://gitlab.torproject.org/tpo/applications/tor-browser/-/merge_requests…>). If I have not forgotten anything, that is all for this month 🙂. Thanks, Pier

1 0

UX team meeting notes, February 1st
by Duncan Russell 02 Feb '22

02 Feb '22

Hello, Thanks to everyone who made it to today's UX Team meeting! We’re looking forward to seeing you all again in a week’s time on February 8th. Here are the minutes: http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-02-01-16.59.log… <http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-02-01-16.59.log…> Today we shared an update on upcoming Tor Browser releases for both Android and desktop, and discussed each UX team-member's ongoing work across key projects. *** == User Experience Team Meeting == UX Team meetings happen every Tuesday at 1700 UTC in #tor-meeting on OFTC. Here are the logs from our last meeting on February 1st: http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-0 <http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-02-01-16.59.log…>2-01-16 <http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-02-01-16.59.log…>.59.log.html <http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-02-01-16.59.log…> == Useful links == About the UX Team: https://gitlab.torproject.org/tpo/ux/team <https://gitlab.torproject.org/tpo/ux/team> UX repository: https://gitlab.torproject.org/tpo/ux <https://gitlab.torproject.org/tpo/ux> UX roadmap: https://www.figma.com/file/n4ETd0cUkcfj3KyclJQnt3/UX-Team-Planning?node-id=… <https://www.figma.com/file/n4ETd0cUkcfj3KyclJQnt3/UX-Team-Planning?node-id=…> UX kanban: https://gitlab.torproject.org/groups/tpo/-/boards?scope=all&utf8=%E2%9C%93&… <https://gitlab.torproject.org/groups/tpo/-/boards?scope=all&utf8=%E2%9C%93&…> Team kanban: https://gitlab.torproject.org/groups/tpo/-/boards?scope=all&label_name[]=UX… <https://gitlab.torproject.org/groups/tpo/-/boards?scope=all&label_name[]=UX…> -------------------------- Tuesday February 1st 17:00 UTC -------------------------- == What projects are we working on? == S9 - Usability and Community Intervention on Support for Democracy and Human Rights https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… <https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&…> S30 - Empowering Communities in the Global South to Bypass Censorship https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… <https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&…> S96 – Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & Tibet https://gitlab.torproject.org/groups/tpo/-/milestones/24 <https://gitlab.torproject.org/groups/tpo/-/milestones/24> S101 - Tor VPN Client for Android https://gitlab.torproject.org/groups/tpo/-/milestones/32 <https://gitlab.torproject.org/groups/tpo/-/milestones/32> == Announcements == Tor Browser 11.5a2 for desktop release: https://blog.torproject.org/new-release-tor-browser-115a2/ <https://blog.torproject.org/new-release-tor-browser-115a2/> Tor Browser 11.5a3 for Android release: https:// <https://blog.torproject.org/new-release-tor-browser-115a3/>blog.torproject.org/new-release-tor-browser-115a3/ <https://blog.torproject.org/new-release-tor-browser-115a3/> UCL survey on HTTPS-Only Modes in Tor Browser: https://forum.torproject.net/t/survey-on-https-only-modes-in-tor-browser/18… <https://forum.torproject.net/t/survey-on-https-only-modes-in-tor-browser/18…> == Agenda == 1. Announcements 2. Weekly planning == Weekly planning == Note: Please highlight anything you'd like to discuss below in **bold** Duncan Last week (actual): - Discussed getting tor-browser#19850 back on the roadmap with Applications - Continued to support S96 (torconnect) development - Finished adding tickets and setting up UX planning board for S101 (VPN) - Synced with LEAP about UX for S101 (VPN) - Restarted release meetings with Applications - Finalized proposal for S9 extension This week (planned): - Begin UX evaluation of comparable Android apps for S101 - Start work on additional designs for S96 (torconnect) - Finish and distribute the tor-qa survey - Review UX Research report template - Create ticket & brief nicob on Tor Browser icon work - Buy Figjam licenses Nah Last week (actual): - think on ways to collaborate our User Research with other groups, and meeting with Sajolida to explore new paths in the same subject - Update User Research repository - S9 proposal meeting and review - S9 survey preparation - S101 review studies, use cases and features This week (planned): - S9 survey to find human rights defenders’ challenges and needs * https://gitlab.torproject.org/tpo/ux/research/-/issues/72 <https://gitlab.torproject.org/tpo/ux/research/-/issues/72> * Understand and work on: https://gitlab.torproject.org/tpo/ux/research/-/issues/61 <https://gitlab.torproject.org/tpo/ux/research/-/issues/61> - S30 training and user research planning * https://gitlab.torproject.org/tpo/ux/research/-/issues/71 <https://gitlab.torproject.org/tpo/ux/research/-/issues/71> - S101 interviews planning * https://gitlab.torproject.org/tpo/ux/research/-/issues/70 <https://gitlab.torproject.org/tpo/ux/research/-/issues/70> - Map User Research portal needs for update Nicob Last week (actual): - Artwork for Data Privacy Day - Artwork for YEC blog post - Additional stylizing for Vanguard blog - Worked on UR report template This week (planned): - Continue work on UR report template - Design wordmark + markup for Tor browser - Research for Comms 2022 visual direction == Open Call for User Research == Find out how to contribute to the UX team: https://community.torproject.org/user-research/how-to-volunteer/ <https://community.torproject.org/user-research/how-to-volunteer/> Thanks everyone! *** Duncan Larsen-Russell Product Manager & UX Team Lead duncan(a)torproject.org <mailto:duncan@torproject.org>

1 0

Community Team meeting notes - January 31, 2022
by gus 31 Jan '22

31 Jan '22

Hi, Here's our meeting log: http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-01-31-13.59.log… And our meeting pad: Next meeting: Monday, February 7, 2022 - 1400 UTC Weekly meetings, every Monday at 14:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) ## Goal of this meeting Weekly checkin about the status of Community Team work at Tor. ## Links to Useful documents * Event: Tor Relay Operator meetup February 5: https://forum.torproject.net/t/tor-relays-relay-operators-meetup-fosdem/182… ## Discussion * (update) Team roadmap and OKrs: https://gitlab.torproject.org/tpo/community/team/-/wikis/home * Gamification project weekly update: - Schedule interviews this week and next week - Review interview questions: https://pad.riseup.net/p/cVs1OfnGyclGgXRbWhEe * Telegram support channel: * https://gitlab.torproject.org/tpo/community/support/-/issues/40059 * Tor Training in Brazil and Mexico (March-2022) ## Updates Gus: This week: - S30 - organizing tor training in Brazil and Mexico - Writing miko's outreachy 3rd feedback - Onboarding new Onion SRE person - Promoting FOSDEM Relay Operator Meetup: https://forum.torproject.net/t/tor-relays-relay-operators-meetup-fosdem/182… - Outreachy: following up relay operators interviews. - Publishing the bridges campaign blog post this week! - Moving the training slides to markdown/lektor. - Monitoring telegram bridges health: https://gitlab.torproject.org/tpo/community/support/-/issues/40054 Help with: - Something you need help with. Joydeep: This week: - TBA Alpha (https://forum.torproject.net/t/new-alpha-release-tor-browser-11-5a3-android…) support and testing. General user support tasks on RT and forum - FOSDEM Relay Operators Meetup - RRF Meeting Miko: Last week: - Ideation: discussed a few ideas for relay operator gamification https://gitlab.torproject.org/tpo/community/relays/-/issues/30 This week: - UX Survey insights are out: https://gitlab.torproject.org/tpo/community/relays/-/issues/31 - 2 more insight reports underway (qualitative) - Starting with personas for relay operators - Starting mockups for the relay operator portal (tentatively calling it a "portal") Help with: - Setting up UX interviews with relay operators - Reviewing interview drafts, sending out interview agendas to relay operators https://pad.riseup.net/p/cVs1OfnGyclGgXRbWhEe Nina: Last week: - Start of the support using our channel on Telegram - Translations - User support via RT This week: - Templates update emmapeel: Last week: - L10n previews - l10n rapid response funds - sponsor 9 extension - update translations in transifex This week: - l10n previews - weblate -- The Tor Project Community Team Lead

1 0

Job Announcement - Director of Engineering
by Erin Wyatt 28 Jan '22

28 Jan '22

Hello, everyone! We have a new job opening for a Director of Engineering: https://www.torproject.org/about/jobs/director-of-engineering/ Please help us spread the word. Thank you! Erin Wyatt Director of People Operations (she/her) ewyatt(a)torproject.org PGP: 35E7 2A9F 6655 45F9 2CB6 6624 BA0C 9400 F80F 91CE https://www.torproject.org <https://www.torproject.org/> http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/ ------------------------------------ >8 January 28, 2022 The Tor Project is seeking a Director of Engineering. This newly created position is the most senior engineering role at the organization, reporting directly to the Executive Director. The position will require deep technical expertise and the ability to lead in a geographically dispersed environment. (Most people keep hours between Central European and American Pacific time.) The Director of Engineering role presents an opportunity for an individual who is passionate about privacy and Internet freedom to guide the engineering aspects of the Tor network, Tor Browser and other applications. Our technology helps millions of people around the world, across mobile and desktop platforms, to securely and freely access the Internet. Our teams are composed of talented people who are passionate about our mission to advance human rights and freedoms by creating and deploying free and open-source anonymity and privacy technologies. Our product decisions are directly connected to our engineering efforts, so the Director of Engineering will be working with both our engineering teams and product manager. Our collective efforts are presently focused on four fronts: Applications, Tor Network (core tor), Network Health, and Censorship Circumvention. You will be joining The Tor Project at a unique moment in the project’s history, as we are laying the foundation for Tor to scale and continue to grow. You will be working with all these teams, supporting them in executing a long-term vision and strategy. The Tor Project has a strong culture of transparency and democratic processes. We are looking for a Director of Engineering who shares these values to lead our teams and help Tor to continue to provide the most private and secure way to access the Internet. Academic degrees are great, but not required if you have the right experience! Further, if you feel that you meet most of these requirements or could meet them with a little time and support, we would love to hear from you! This is a full-time and permanently remote position. Salary for this position is $150,000 USD (negotiable) and there is voluntary opt-in salary transparency for employees and contractors. <applewebdata://7C080C49-82E0-49D7-B510-29E8444F1085#the-job>The job: Work with the teams and individuals working on Tor Network, Network Health, Censorship Circumvention, and Applications. Empower and support team leads, and guide decisions on technical strategy. Guide product strategy and drive alignment across teams, crafting team coordination to build features that touch all areas and work across all supported platforms. Work with teams supporting the development of their roadmaps and long-term strategy for the Tor network and applications. Identify and execute on opportunities to improve operational excellence of the teams. Build a trusted partnership with our Project Manager. Build a trusted partnership with our Community Team lead to coordinate efforts as necessary. (Community is a very important part of Tor.) Coordinate with the Fundraising and Communication teams for media or funder requests and/or events. Interact with our funders and/or partner organizations from the Internet Freedom Community, business organizations that are part of Tor’s Membership Program, and potential future collaboration partners. Support the ED’s in exploring a sustainability strategy for the expansion of the Tor network. <applewebdata://7C080C49-82E0-49D7-B510-29E8444F1085#your-skills-and-experience>Your skills and experience: 8+ years of professional experience working with product and engineering teams. 4+ years of leadership experience with teams of 30+people, including hiring, managing, and developing talent. Significant experience with anonymity and privacy online, and network security. Experience mentoring and developing product and engineering teams. Initiative to push projects forward and knowledge of when to involve others. Past demonstrable success defining, articulating, and executing on the strategic vision for a team with a keen focus on user needs. Excellent personal and professional communication skills. Experience building cross-platform applications. Ability to work productively and collaboratively with a diverse group of colleagues from around the globe. Comfort working with privacy-preserving metrics to evaluate objectives. <applewebdata://7C080C49-82E0-49D7-B510-29E8444F1085#how-to-apply>How to Apply To apply, submit a cover letter, your CV/resume in PDF format to job-direng at torproject dot org with "Director of Engineering" in the subject line. In your cover letter, please include the reason you want to work at the Tor Project, your experience as it relates to the job description, and where you heard about this job. <applewebdata://7C080C49-82E0-49D7-B510-29E8444F1085#about-the-tor-project>About The Tor Project The Tor Project's workforce is smart, committed, and hard working. We currently have a paid and contract staff of around 37 developers and operational support people, plus many volunteers who contribute to our work and thousands of volunteers who run relays. The Tor Project is funded in part by government research and development grants, and in part by individual, foundation, and corporate donations. Tor is for everyone, and we are actively working to build a team that represents people from all over the world - people from diverse ethnic, national, and cultural backgrounds; people from all walks of life. We encourage people subject to systemic bias to apply, including people of color, indigenous people, LGBTQIA+ people, women, and any other person who is part of a group that is underrepresented in tech. The Tor Project has a strong culture of transparency and democratic processes, and long-standing community guidelines and cultural norms. Our community is committed to creating an inclusive and welcoming environment. Please read more here: Our Code of Conduct: https://gitweb.torproject.org/community/policies.git/tree/code_of_conduct.t… <https://gitweb.torproject.org/community/policies.git/tree/code_of_conduct.t…> Our Social Contract: https://gitweb.torproject.org/community/policies.git/tree/social_contract.t… <https://gitweb.torproject.org/community/policies.git/tree/social_contract.t…> Our Statement of Values: https://gitweb.torproject.org/community/policies.git/tree/statement_of_valu… <https://gitweb.torproject.org/community/policies.git/tree/statement_of_valu…> The Tor Project has a competitive benefits package, including a generous PTO policy, 16 paid holidays per year (including the week between Christmas and New Year's, when the office is closed), and flexible work schedule. Insurance benefits vary by employment status and country of residence. The Tor Project, Inc. is an equal opportunity, affirmative action employer.

1 0

Anti-censorship team meeting notes, 2022-01-27
by meskio 27 Jan '22

27 Jan '22

Hey everyone! Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-01-27-15.59.html And our meeting pad: Anti-censorship work meeting pad -------------------------------- Next meeting: Thursday January 27th 16:00 UTC Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) == Goal of this meeting == Weekly checkin about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at Tor. == Links to Useful documents == Our anti-censorship roadmap: Roadmap: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards The anti-censorship team's wiki page: https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home Past meeting notes can be found at: https://lists.torproject.org/pipermail/tor-project/ Tickets that need reviews: from sponsors we are working on: All needs review tickets: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… Sponsor 30 https://gitlab.torproject.org/groups/tpo/-/milestones/4 https://gitlab.torproject.org/groups/tpo/-/milestones/7 https://gitlab.torproject.org/groups/tpo/-/milestones/5 https://gitlab.torproject.org/groups/tpo/-/milestones/6 Sponsor 28 must-do tickets: https://gitlab.torproject.org/groups/tpo/-/milestones/10 possible tickets: https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… == Announcements == == Discussion == no news about obfs4 security fixes, needs to be looked into Tor Browser will update first: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/4… status of snowflake load balancing upgrade https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… currently staging bridge is handling almost all the traffic plan to do the upgrade on the production bridge today or tomorrow then switch the DNS back next week our metrics are low, the current hypothesis is that the counts are coming from only one of the instances plan to prevent onion key rotation by making the key files read-only will try profiling on the staging bridge to help reduce CPU usage of snowflake-server https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… test deployment of rdsys + bridgedb next week, will be available to @torproject.org email addresses aim for production in February Hetzner networking issue, shall we add it to the timeline Find more details of the incident and if it has affected any parts of the Tor network bridgedb and many bridges are in hetzner == Actions == == Interesting links == == Reading group == We will discuss "Meteor: Cryptographically Secure Steganography for Realistic Distributions" on 2022-02-03 https://dl.acm.org/doi/10.1145/3460120.3484550 https://eprint.iacr.org/2021/686 https://meteorfrom.space/ Questions to ask and goals to have: What aspects of the paper are questionable? Are there immediate actions we can take based on this work? Are there long-term actions we can take based on this work? Is there future work that we want to call out, in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. anadahz: 2022-01-27 Last weeek: - Increase timeout check cycles for default-bridge-felix-1 and default-bridge-felix-2 as they have been generating too many alerts: https://gitlab.torproject.org/tpo/anti-censorship/monit-configuration/-/mer… cecylia (cohosh): last updated 2022-01-27 Last week: - filed shadow bug: https://github.com/shadow/shadow/issues/1869 - lots of reviews - roadmapping and documentation writing - sponsor reports - reached out to default bridge operators about down or unreliable bridges - helped with deployment of bridge-port-scan fixes This week: - more reviews - finish documenting and cleaning up shadow simulation scripts - use these snowflake + shadow scripts to do more performance testing - start looking at what is needed for a tapdance/conjure PT - write up more documentation Needs help with: dcf: 2022-01-27 Last week: - set up load balanced staging bridge for snowflake, monitored its switchover from the production bridge https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… https://forum.torproject.net/t/tor-relays-how-to-reduce-tor-cpu-load-on-a-s… Next week: - test the read-only file idea for preventing onion key rotation https://forum.torproject.net/t/tor-relays-how-to-reduce-tor-cpu-load-on-a-s… - upgrade the snowflake production bridge for load balancing https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - switch snowflake DNS records back to the production bridge https://gitlab.torproject.org/tpo/tpa/team/-/issues/40602 - before switching over, enable profiling on the staging bridge for https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Help with: agix: 2021-01-13 Last week: - Busy with work on Censored Planet Next week: - Continue work on gettor-twitter Help with: - arlolra: 2022-01-20 Last week: - [added 2022-01-20 by dcf] ALPN support for pion DTLS https://github.com/pion/dtls/pull/415 Next week: - Figure out where in pion/webrtc ALPN should be configured and used - Maybe add Chacha20Poly1305 to pion/dtls https://github.com/pion/dtls#planned-features https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Help with: - maxb: 2021-09-23 Last week: - Worked on https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… re: utls for broker negotiation - Had conversation with someone about upstream utls http round tripper https://github.com/refraction-networking/utls/pull/74 - Too busy with work :/ Next week: - _Really_ want to get a PR for utls round tripper meskio: 2022-01-27 Last week: - select the type of bridges distributed by each distributor (rdsys#63) - add a third pool to the telegram bot (team#53) - rdsys/bridgedb setup coordination with tpa (tpa/team#40581) - update gettor links (gettor#85) - implement country block mechanism for rdsys and bridgedb (bridgedb#40036) Next week: - test deployment for the new rdsys/bridgedb setup (rdsys#12) - make easier to test bridgedb ater rdsys change (bridgedb#40034) - check whats up with obfs4 security fixes Shelikhoo: 2022-01-27 Last Week: - [Merge Request Awaiting] Add SOCKS5 forward proxy support to snowflake(snowflake!64) - [Merge Request Awaiting] Privacy preserving stats in Snowflake standalone proxy(snowflake#40079, snowflake!72) - [Merge Request Done] Add Google backend support for gettor updater(rdsys!19) - [Merge Request Done] Add callbacks in the client for key events during snowflake connections(snowflake#40076) - [Discussion] Implement metrics to measure snowflake churn(snowflake#34075) - [Discussion] Proposal: Support for Dynamic IP obfs4 bridges with unattended proxy information update(aka "Subscription") - [Discussion] Proposal: Push Notification Based Signaling Channel - [Discussion] Proposal: Centralized Probe Result Collector(anti-censorship/team#54) - [Investigate] Is there a better moat/snowflake SNI than cdn.sstatic.net? (snowflake#40068) - [Investigate] Multi-instance Load Balanced Tor - Snowflake Deployment - [Investigate] China "Anti-Fraud" Webpage Redirection Censorship(censorship-analysis#40026) Next Week: - [Discussion] Designing the Container Layout for rdsys - [Discussion] Implement metrics to measure snowflake churn (snowflake#34075) - [Discussion] Proposal: Push Notification Based Signaling Channel - [Merge Request] Privacy preserving stats in Snowflake standalone proxy(snowflake#40079, snowflake!72) - [Merge Request Review] Configure what distributor does distribute each resource type - [Discussion] Proposal: Centralized Probe Result Collector(anti-censorship/team#54) - [Investigate] uTLS for broker negotiation HackerNCoder: 2021-12-16 This week: Last/done: Setup web mirror on tor.encryptionin.space Next: Get (new VPs with) new IP and setup new web mirror on new domain hanneloresx: 2021-3-4 Last week: - Submitted MR for bridgestrap issue #14 Next week: - Finish bridgestrap #14 - Find new issue to work on Help with: - -- meskio | https://meskio.net/ -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- My contact info: https://meskio.net/crypto.txt -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Nos vamos a Croatan.

1 0

UX team meeting notes, January 25th
by Duncan Russell 26 Jan '22

26 Jan '22

Hello, Thanks to everyone who made it to today's UX Team meeting! We’re looking forward to seeing you all again in a week’s time on February 1st. Here are the minutes: http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-01- <http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-01-25-16.59.log…>25-16 <http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-01-25-16.59.log…>.59.log.html <http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-01-25-16.59.log…> Today we shared the study UCL are currently running on HTTPS-only modes in Tor Browser, and discussed each UX team-member's ongoing work across key projects. *** == User Experience Team Meeting == UX Team meetings happen every Tuesday at 1700 UTC in #tor-meeting on OFTC. Here are the logs from our last meeting on January 25th: http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-01- <http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-01-25-16.59.log…>25-16 <http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-01-25-16.59.log…>.59.log.html <http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-01-25-16.59.log…> == Useful links == About the UX Team: https://gitlab.torproject.org/tpo/ux/team <https://gitlab.torproject.org/tpo/ux/team> UX repository: https://gitlab.torproject.org/tpo/ux <https://gitlab.torproject.org/tpo/ux> UX roadmap: https://www.figma.com/file/n4ETd0cUkcfj3KyclJQnt3/UX-Team-Planning?node-id=… <https://www.figma.com/file/n4ETd0cUkcfj3KyclJQnt3/UX-Team-Planning?node-id=…> UX kanban: https://gitlab.torproject.org/groups/tpo/-/boards?scope=all&utf8=%E2%9C%93&… <https://gitlab.torproject.org/groups/tpo/-/boards?scope=all&utf8=%E2%9C%93&…> Team kanban: https://gitlab.torproject.org/groups/tpo/-/boards?scope=all&label_name[]=UX… <https://gitlab.torproject.org/groups/tpo/-/boards?scope=all&label_name[]=UX…> -------------------------- Tuesday January 25th 17:00 UTC -------------------------- == What projects are we working on? == S9 - Usability and Community Intervention on Support for Democracy and Human Rights https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… <https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&…> S30 - Empowering Communities in the Global South to Bypass Censorship https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… <https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&…> S96 – Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & Tibet https://gitlab.torproject.org/groups/tpo/-/milestones/24 <https://gitlab.torproject.org/groups/tpo/-/milestones/24> S101 - Tor VPN Client for Android https://gitlab.torproject.org/groups/tpo/-/milestones/32 <https://gitlab.torproject.org/groups/tpo/-/milestones/32> == Announcements == * Survey on HTTPS Only Modes in Tor Browser: https://forum.torproject.net/t/survey-on-https-only-modes-in-tor-browser/18… <https://forum.torproject.net/t/survey-on-https-only-modes-in-tor-browser/18…> == Agenda == 1. Announcements 2. Weekly planning == Weekly planning == Note: Please highlight anything you'd like to discuss below in **bold** Duncan Last week (actual): - Finished nicob's onboarding - Reviewed and closed old torconenct-related tickets - Created new tickets for the next VPN objectives: https://gitlab.torproject.org/groups/tpo/-/milestones/32 <https://gitlab.torproject.org/groups/tpo/-/milestones/32> - Updated the Android VPN product brief doc - Met to discuss applications QA - Wrote draft script for tor-qa survey: ux/research#67 This week (planned): - Recap tor-browser#19850 and get it back on the roadmap - Support torconnect development - Continue prepwork for the next VPN tasks Nah Last week (actual): - Collect user feedback on community forum: https://gitlab.torproject.org/tpo/ux/research/-/issues/45 <https://gitlab.torproject.org/tpo/ux/research/-/issues/45> - Report user feedback on community forum: https://gitlab.torproject.org/tpo/ux/research/-/issues/46 <https://gitlab.torproject.org/tpo/ux/research/-/issues/46> - I was sick, so this wasn't a very productive week This week (planned): - think on ways to collaborate our User Research with other groups, and meeting with Sajolida to explore new paths in the same subject - Update User Research repository - (if have time) work on User Research Plan for volunteers - S9 proposal meeting and review - S101 review studies, use cases and features Nicob Last week (actual): - Finished final design for Vanguard blog post - Began researching similar orgs branding - Started working on a UR report template - More onboarding This week (planned): - Continue working on UR report template - Begin artwork for Data Privacy & Safer Internet days - Begin artwork for YEC wrap-up blog post == Open Call for User Research == Find out how to contribute to the UX team: https://community.torproject.org/user-research/how-to-volunteer/ <https://community.torproject.org/user-research/how-to-volunteer/> Thanks everyone! *** Duncan Larsen-Russell Product Manager & UX Team Lead duncan(a)torproject.org <mailto:duncan@torproject.org>

1 0

Community Team meeting notes - January 24 2022
by gus 25 Jan '22

25 Jan '22

Hi, Here's our meeting log: http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-01-24-13.59.log… And our meeting pad: Next meeting: Monday, January 31, 2022 - 1400 UTC Weekly meetings, every Monday at 14:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) ## Goal of this meeting Weekly checkin about the status of Community Team work at Tor. ## Links to Useful documents * Looking for volunteers: https://forum.torproject.net/t/looking-for-volunteers-to-contribute-to-the-… ## Discussion * Outreachy - Gamification project update and next steps * User support/Telegram soft launch * RT backlog * Run a bridge campaign retrospective ## Updates Joydeep: This week: - Community Team OKRs - Testing the cdr.link user support platform - RT backlog Gus: This week: - Roadmapping with Isa and Gaba - Writing S9 new proposal - Meeting with Sajolida and TGP team about Tor trainings for S30 - Writing bridges campaign blog post and doing some logistics Miko: Last week: New resources here: UX insights, motivations and pain points https://gitlab.torproject.org/tpo/community/relays/-/issues/27 This week: - Ideation. Submitting ideas for gamification and gathering feedback (votes!) - Discussing interview prompts for Relay Operator interviews (specifically Exit Relay Ops) - Preparing an interview script for Relay Operators - Survey Analysis: Working on UX Survey analyses and observations Next week: - Picking best ideas and building mockups, understanding feasibility/viability of some features I'll pitch this week emmapeel: Last week: - Localization hangout - updates with loclab - translation previews in gitlab - emergency fund translations This week: - Translation previews in gitlab - prepare move to weblate - contact Chinese translators about support.tpo Nina: Last week: - Meetings participation - Responding to user requests (tickets) - The announcement translation - the cdr.link platform testing and discussion This week: - start of the user support via Telegram - complete the translation of the article -- The Tor Project Community Team Lead

1 0