- tor-project - lists.torproject.org

Anti-censorship team monthly report: May 2021
by Cecylia Bocovich 08 Jun '21

08 Jun '21

Hi everyone! This is what we've been up to in May! May 2021 monthly report Snowflake ========= * Snowflake now implements the PTv2 Go API specification https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… * Fixed a goroutine leak causing memory problems in the Snowflake server https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… * Fixed a CPU issue with Snowflake on the probetest service https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… * Improved our standalone proxy setup documentation https://gitlab.torproject.org/tpo/web/community/-/issues/203 BridgeDB ======== * Send QR codes for bridges over email https://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/40008 * Have BridgeDB distribute obfs4 bridges by default https://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/40011 * Fix an HTML injection vulnerability in the HTTPS distributor https://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/40014 * Setup Gitlab CI https://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/40012 Other ===== * meskio has joined our team as a new full-time anti-censorship developer! * We posted a report on the censorship of Tor in Belarus: https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/blo… * We're starting work on a new Conjure PT for Tor! https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/9 https://censorbib.nymity.ch/pdf/Frolov2019b.pdf

1 0

Outreachy Intern Introduction
by Kulsoom Zahra 04 Jun '21

04 Jun '21

Greetings everyone! My name is Kulsoom Zahra (she/her). I'm from India. I'm happy to share that I've been selected as an Outreachy Intern for the May-Aug 2021 corhot! Project - Help Tor Project support our users Mentored by Gus I developed interest into privacy and digital security long back and heard of Tor. Being actually a part of the project is undoubtedly an overwhelming experience! I'm exicted to learn and grow with the community. My nickname on IRC is kulsoom_z. Regards, Kulsoom Zahra

2 1

Anti-censorship meeting notes, 03 June 2021
by Cecylia Bocovich 03 Jun '21

03 Jun '21

Hey everyone, Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2021/tor-meeting.2021-06-03-16.00.html and our meeting pad: Anti-censorship work meeting pad -------------------------------- Next meeting: Thursday June 3rd 16:00 UTC Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) == Goal of this meeting == Weekly checkin about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at Tor. == Links to Useful documents == Our anti-censorship roadmap: Roadmap: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards The anti-censorship team's wiki page: https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home Past meeting notes can be found at: https://lists.torproject.org/pipermail/tor-project/ Tickets that need reviews: from sponsors we are working on: All needs review tickets: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… Sponsor 30 https://gitlab.torproject.org/groups/tpo/-/milestones/4 https://gitlab.torproject.org/groups/tpo/-/milestones/7 https://gitlab.torproject.org/groups/tpo/-/milestones/5 https://gitlab.torproject.org/groups/tpo/-/milestones/6 Sponsor 28 must-do tickets: https://gitlab.torproject.org/groups/tpo/-/milestones/10 possible tickets: https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… Public bug-reporting pad: https://pad.riseup.net/p/tor-anti-censorship-bugs-keep <-- we have anonymous tickets handling now. Let's see which anti-censorship repos to include. == Announcements == we're starting to work on a Conjure PT for Tor == Discussion == produce snowflake releases need signed git tags (tags also useful for go modules) and a documented release process tarballs not necessary, for debian at least == Actions == add to the monthly report: https://pad.riseup.net/p/gzx2ELX_6sFoh_8Xsw77 == Interesting links == == Reading group == We will discuss "" on Questions to ask and goals to have: What aspects of the paper are questionable? Are there immediate actions we can take based on this work? Are there long-term actions we can take based on this work? Is there future work that we want to call out, in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. cecylia (cohosh): last updated 2020-06-03 Last week: - fix HTML injection issue with bridgedb (bridgedb#40014) - update version of snowflake in Tor Browser (tor-browser-build#40302) - worked on s28 deliverables - revised and merged snowflake!36 - reviewed snowflake!40 - wrote up a detailed plan on how to integrate bridgedb with rdsys (rdsys#12) - created some new issues for rdsys work - gave feedback to NAT testbed (snowflake#25595) This week: - more performance investigations for snowflake#40026 - work on rdsys#38 as a prereq for rdsys#12 - work on bridgedb#32276 deployment - follow up on arlo's snowflake broker work - work on a blog post for the snowflake release in TB stable Needs help with: arlolra: 2021-05-20 Last week: - Next week: - Maybe more !39 Help with: - !37 - !39 dcf: 2021-06-03 Last week: - main branch name change in goptlib and meek https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/6 - more review of Snowflake JSON rendezvous https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - made a ticket to upgrade snowflake bridge for tor security fix https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Next week: Help with: Antonela: 2020-08-27 This week: agix:2021-06-03 Last week: -Busy with university stuff Next week: -Work on bridgebox for rdsys -More research on httpt #4 Help with: - hanneloresx: 2021-3-4 Last week: - Submitted MR for bridgestrap issue #14 Next week: - Finish bridgestrap #14 - Find new issue to work on Help with: - maxb: 2021-06-03 Last week: - Made some improvements to github.com/max-b/nat-testing for https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - Now have separate containers for each piece along w/ a reasonably simulated network topology - Got really good feedback from cohosh as always Next week: - Make config fixes cohosh suggested - Implement alternative NAT types - Add testing wrapper w/ "pass/fail" conditions meskio: 2021-06-03 Last week: - debian package snowflake client and proxy (snowflake#19409) - getting acquaintanced with gettor and rdsys Next week: - gettor rewrite in rdsys (rdsys#32) Help with: - HashikD: 2021-01-22 This week: - Next week: - Help with: -

1 0

Monthly Status Report from irl
by Iain R. Learmonth 03 Jun '21

03 Jun '21

Hi All, This is my monthly status report for work complete during May 2021. This month saw the releases of metrics-lib 2.16.0 and CollecTor 1.17.0. The new CollecTor release includes the updated metrics-lib, and has now been deployed to both the Tor Metrics CollecTor instances. During the deployments, I took the opportunity to fully document the deployment and upgrade procedure, and document common error conditions that may appear in the log files. I refreshed my memory on how the GeoIP lookups are performed within Onionoo, and have also been reviewing patches that exist in the GitLab to be included in an updated Onionoo release. I am planning to upload the GeoIP data files to Maven Central, and use that JAR in Onionoo, rather than including the files directly as this will also support Orbot and other Android applications embedding Tor in using those files. Proposal 328's implementation (Make Relays Report When They Are Overloaded) has caused issues with bridge descriptor sanitisation. My first task this month is to get the patch to support the new relay descriptor lines into CollecTor and get that deployed so that we do not find ourselves discarding all bridge descriptors. (CollecTor will only archive those it knows it is safe to archive, which do not contain lines it does not know about). Towards the end of the month, CollecTor experienced disk space issues. These were resolved with the help of the sysadmin team and the system is now running smoothly again, with no data lost or corrupted. Finally, I have been around in Matrix/IRC to answer Metrics questions and on occasion to provide a little end-user support in #tor. I've been attending the weekly network health meetings and will continue to do so. If you've got any questions about anything I'm working on, just send me an email or chat on Matrix/IRC. Thanks, Iain.

1 0

minute details from the sysadmin
by Antoine Beaupré 02 Jun '21

02 Jun '21

There was no meeting this month, here's a short technical report. # Important announcements Those are important announcements you might have missed: * fpcentral will be [retired][] on October 20th 2021, you are encouraged to use EFF's [Cover Your Tracks][] or [TorZillaPrint][] instead, see [ticket 40009][] for background * if you have a precious wiki page from Trac that redirects to some place no one can edit, [we welcome proposals on proper places to redirect those pages][] * we have a reliable [procedure to rename Git branches][] (e.g. to rename from `master` to `main`) globally * we set up a new onionbalance server so we can provide also v3 onion (balanced) services for all of our static websites. See <https://onion.torproject.org/> / <http://xao2lxsmia2edq2n5zxg6uahx6xox2t7bfjw6b5vdzsxi7ezmqob6qid.onion/> for a full list [procedure to rename Git branches]: https://gitlab.torproject.org/tpo/tpa/team/-/wikis/howto/gitlab/#renaming-a… [we welcome proposals on proper places to redirect those pages]: https://gitlab.torproject.org/tpo/tpa/team/-/issues/40233 [ticket 40009]: https://gitlab.torproject.org/tpo/tpa/team/-/issues/40009 [TorZillaPrint]: https://arkenfox.github.io/TZP/ [Cover Your Tracks]: https://coveryourtracks.eff.org/, [retired]: https://lists.torproject.org/pipermail/tor-project/2021-April/003091.html # Metrics of the month * hosts in Puppet: 86, LDAP: 89, Prometheus exporters: 140 * number of Apache servers monitored: 28, hits per second: 162 * number of Nginx servers: 2, hits per second: 2, hit ratio: 0.86 * number of self-hosted nameservers: 6, mail servers: 7 * pending upgrades: 1, reboots: 0 * average load: 0.61, memory available: 1.94 TiB/2.77 TiB, running processes: 565 * bytes sent: 246.89 MB/s, received: 147.97 MB/s * [GitLab tickets][]: 132 tickets including... * open: 0 * icebox: 114 * backlog: 15 * next: 2 * doing: 1 * (closed: 2296) [Gitlab tickets]: https://gitlab.torproject.org/tpo/tpa/team/-/boards # Ticket analysis | date | open | icebox | backlog | next | doing | closed | delta | sum | new | spill | |------------|------|--------|---------|------|-------|--------|-------|------|------|-------| | 2020-11-18 | 1 | 84 | 32 | 5 | 4 | 2119 | NA | 2245 | NA | NA | | 2020-12-02 | 0 | 92 | 20 | 9 | 8 | 2130 | 11 | 2259 | 14 | -3 | | 2021-01-19 | 0 | 91 | 20 | 12 | 10 | 2165 | 35 | 2298 | 39 | -4 | | 2021-02-02 | 0 | 96 | 18 | 10 | 7 | 2182 | 17 | 2313 | 15 | 2 | | 2021-03-02 | 0 | 107 | 15 | 9 | 7 | 2213 | 31 | 2351 | 38 | -7 | | 2021-04-07 | 0 | 106 | 22 | 7 | 4 | 2225 | 12 | 2364 | 13 | -1 | | 2021-05-03 | 0 | 109 | 15 | 2 | 2 | 2266 | 41 | 2394 | 30 | 11 | | 2021-06-02 | 0 | 114 | 14 | 2 | 1 | 2297 | 31 | 2428 | 34 | -3 | |------------|------|--------|---------|------|-------|--------|-------|------|------|-------| | mean | 0.1 | 99.9 | 19.5 | 7.0 | 5.4 | NA | 22.2 | NA | 22.9 | -0.6 | Yes, the Icebox is still filling up. Hopefully this will get resolved soon-ish. Legend: * date: date of the report * open: untriaged tickets * icebox: tickets triaged in the "icebox" ("stalled") * backlog: triaged, planned work for the "next" iteration (e.g. "next month") * next: work to be done in the current iteration or "sprint" (e.g. currently a month, so "this month") * doing: work being done right now (generally during the day or week) * closed: completed work * delta: number of new closed tickets from last report * sum: total number of tickets * new: tickets created since the last report * spill: difference between "delta" and "new", whether we closed more or less tickets than were created -- Antoine Beaupré torproject.org system administration

1 0

Job Announcement - Fundraising Coordinator
by Erin Wyatt 02 Jun '21

02 Jun '21

Hi everyone! We have a new job opening for a Fundraising Coordinator: https://www.torproject.org/about/jobs/fundraising-coordinator/ <https://www.torproject.org/about/jobs/fundraising-coordinator/> The job description is pasted below. Please help us spread the word! Thank you! :) Best, Erin Wyatt Director of People Operations ewyatt(a)torproject.org <mailto:ewyatt@torproject.org> PGP: 35E7 2A9F 6655 45F9 2CB6 6624 BA0C 9400 F80F 91CE https://www.torproject.org <https://www.torproject.org/> http://expyuzz4wqqyqhjn.onion/ <http://expyuzz4wqqyqhjn.onion/> --------------------------------------------->8 # Fundraising Coordinator The Tor Project, Inc., a 501(c)(3) nonprofit organization advancing human rights and freedoms by creating and deploying free and open source anonymity and privacy technologies, is seeking a Fundraising Coordinator to join its Fundraising Team. The Tor Project’s Fundraising Team is responsible for creating and executing fundraising strategies in support of the Tor Project, a 501(c)(3) nonprofit. The Fundraising Coordinator is responsible for administrative support for all major fundraising initiatives, including individual and organizational giving, donor relationships, and gift/data management. We also envision this position having room for growth, expanding to include management of the grant writing process and other fundraising areas. This is a full-time, remote position. ## General Duties & Responsibilities Gift Entry & Acknowledgement: - Execute timely and accurate gift entry into donor database. - Send donation confirmation via email and postal mail. Record Keeping & Reporting: - Produce periodic financial reports (daily, weekly, monthly). - Maintain and improve accuracy of donor database, CiviCRM. - Keep meticulous records in other file structures, e.g. GrantHub, NextCloud, GitLab. - Create and maintain donor lists and reports. Donor Relations: - Act as first point of contact for questions regarding donations and gifts via ticketing system. Administrative Support: - Support the Fundraising Team with other administrative tasks related to organizational giving, grant writing, donor relationships, gift/data management, and annual/one-time fundraising campaigns. Grant Writing: - Support our grant writing work by helping to write and review grant proposals. - Research potential grant opportunities. ## Abilities & Experience - 2+ years of administrative experience in a fundraising or nonprofit setting. - Highly organized with superior attention to detail. - Excellent writing skills. - Strong commitment to donor privacy. - Experience working in a donor CRM. - Comfortable working remotely with a geographically distributed team. - Proficient understanding of and ability to use technology, and most importantly, a willingness and ability to learn and use new technologies. - Willingness to travel to semi-annual international meetings (when in-person gatherings resume). Preferred Qualifications - Experience with CiviCRM. - Experience with grant writing. - Experience working with geographically distributed teams across multiple time zones. - Genuinely be excited about Tor Project and its values! ## Salary & Benefits Salary range for this position is $50,000 USD - $60,000 USD and there is voluntary opt-in salary transparency for employees and contractors. The Tor Project has a competitive benefits package, including a generous PTO policy, 16 paid holidays per year (including the week between Christmas and New Year's, when the office is closed), and flexible work schedule. Insurance benefits vary by employment status and country of residence. ## How to Apply To apply, submit the following documents to job-fundraising at torproject dot org: - Cover letter. In your cover letter, please include the reason you want to work at the Tor Project. - One- to two-page writing sample (fundraising-related, ideally). - CV/resume. IMPORTANT: Please email application materials in plain text or PDF format, if possible, to job-fundraising at torproject dot org with “Fundraising Coordinator” in the subject line. ## About the Tor Project Tor is for everyone, and we are actively working to build a team that represents people from all over the world - people from diverse ethnic, national, and cultural backgrounds; people from all walks of life. We encourage people subject to systemic bias to apply, including people of color, indigenous people, LGBTQIA+ people, women, and any other person who is part of a group that is underrepresented in tech. The Tor Project's workforce is smart, committed, and hard working. We currently have a paid and contract staff of around 24 developers and operational support people, plus many thousands of volunteers who contribute to our work. The Tor Project is funded in part by government research and development grants, and in part by individual, foundation, and corporate donations. The Tor Project, Inc., is an equal opportunity, affirmative action employer.

1 0

Bandwidth scanner report for the last six months
by juga 01 Jun '21

01 Jun '21

1 0

Next Network Health meeting is on Monday, 6/7 1600 UTC
by Georg Koppen 31 May '21

31 May '21

Hi, As today, 5/31, is a national holiday in the US (Memorial Day) we'll skip the Network Health meeting this week. Sorry for the late notice. The next meeting will then be at Mon, 6/7, 1600 UTC in #tor-meeting on irc.oftc.net. See you there, Georg

1 0

Anti-censorship meeting notes, 27 May 2021
by Cecylia Bocovich 27 May '21

27 May '21

Hey everyone, Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2021/tor-meeting.2021-05-27-16.00.html and our meeting pad: Anti-censorship work meeting pad -------------------------------- Next meeting: Thursday May 27th 16:00 UTC Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) == Goal of this meeting == Weekly checkin about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at Tor. == Links to Useful documents == Our anti-censorship roadmap: Roadmap: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards The anti-censorship team's wiki page: https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home Past meeting notes can be found at: https://lists.torproject.org/pipermail/tor-project/ Tickets that need reviews: from sponsors we are working on: All needs review tickets: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… Sponsor 30 https://gitlab.torproject.org/groups/tpo/-/milestones/4 https://gitlab.torproject.org/groups/tpo/-/milestones/7 https://gitlab.torproject.org/groups/tpo/-/milestones/5 https://gitlab.torproject.org/groups/tpo/-/milestones/6 Sponsor 28 must-do tickets: https://gitlab.torproject.org/groups/tpo/-/milestones/10 possible tickets: https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… Public bug-reporting pad: https://pad.riseup.net/p/tor-anti-censorship-bugs-keep <-- we have anonymous tickets handling now. Let's see which anti-censorship repos to include. == Announcements == Snowflake user survey report published https://lists.torproject.org/pipermail/ux/2021-May/000569.html https://gitlab.torproject.org/tpo/ux/research/-/raw/master/reports/2021/pub… == Discussion == == Actions == == Interesting links == https://www.jacobo.org/ansible-snowflake/ == Reading group == We will discuss "" on Questions to ask and goals to have: What aspects of the paper are questionable? Are there immediate actions we can take based on this work? Are there long-term actions we can take based on this work? Is there future work that we want to call out, in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. cecylia (cohosh): last updated 2020-05-27 Last week: - deployed new version of snowflake probetest - fixed up moat shim for bridgedb#32276 and started deployment - revised snowflake!26 for snowflake#29293 - responded to problems with IPtProxy (snowflake#40045) - roadmapping and ticket maintenance - reviewed snowflake!34 - took a look at arlo's refactor for splitting the broker into components (snowflake!36) - provided some feedback for ooni on PT tests during the community meeting - started some new performance tests for snowflake (snowflake#40026, snowflake#32545) This week: - more performance investigations for snowflake#40026 - work more on snowflake documentation (snowflake#40031) - rdsys + bridgedb integration work (rdsys#12) - follow up on NAT testbed (snowflake#25595) Needs help with: - review of snowflake#29293 arlolra: 2021-05-20 Last week: - Next week: - Maybe more !39 Help with: - !37 - !39 dcf: 2021-05-27 Last week: - reviewed prometheus metrics refactoring https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - helped debug IPtProxy problems https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Next week: - re-review Snowflake JSON rendezvous https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - main branch name change in goptlib https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/6 - merge resource leak fix https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… Help with: Antonela: 2020-08-27 This week: agix:2021-05-27 Last week: -Busy with university stuff Next week: -Work on bridgebox for rdsys -More research on httpt #4 Help with: - hanneloresx: 2021-3-4 Last week: - Submitted MR for bridgestrap issue #14 Next week: - Finish bridgestrap #14 - Find new issue to work on Help with: - maxb: 2021-04-29 Last week: - Busy w/ life and new job, but been looking at https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… and working on a Docker-based network testbed POC Next week: - Really want to have a POC to show/get feedback on meskio: 2021-05-27 Last week: - explore rdsys code - make a flatpak package for snowflake proxy (snowflake#19409) Next week: - debian package snowflake client and proxy (snowflake#19409) - start gettor rewrite in rdsys (rdsys#32) Help with: - HashikD: 2021-01-22 This week: - Next week: - Help with: -

1 0

You're invited: PrivChat, Onion Routing 25th anniversary
by Al Smith 26 May '21

26 May '21

Hello Tor! Onion routing is turning 25 month! We are holding our 4th PrivChat next week to celebrate. When: Wed., May 26 at 18:00 UTC / 2:00 PM Eastern / 11:00 AM Pacific Where: https://youtu.be/-wbivkG8TcU Host: Gabriella Coleman, Tor board member Panelists: Paul Syverson, Roger Dingledine, Nick Mathewson We'd love to see you there, and if you could spread the word with others that might be interested, that would be most appreciated. Here's a tweet you can share: https://twitter.com/torproject/status/1395093100456943619?s=20 Here's the event link: https://torproject.org/privchat Have a nice weekend, Al -- Al Smith (they/them) Fundraising • Communications The Tor Project https://www.torproject.org | http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/

1 1