Hi all! Here come the meeting notes from our weekly meeting we had yesterday. The chat log can be found on http://meetbot.debian.net/tor-meeting/2018/tor-meeting.2018-04-16-18.09.log.... and our pad items are/were: Monday, April 16, 2018 pospeselr: Last week: - uplifted patch for #20283 and posted to firefox bug #859782 (https://bugzilla.mozilla.org/show_bug.cgi?id=859782) - verified no other syscalls on files in /proc/ need to be fixed for #20283 - reviewed #21537, #25721 This week: - finish uplift of #20283 (just need to update the patch with review feedback) - #23247 (.onion padlock states), #25147 (Backport of fix shipped in Firefox 58.0) - probably getting sick since my wife brought back the plague from Oregon GeKo: Last week: - release preparations - addressed review feedback for #21537 and #25481 and got both merged - last interview for the android dev position - started to work on rust support for macOS (#25779) This week: - https://bugzilla.mozilla.org/show_bug.cgi?id=1390583 (stylo build bug for windows) - help with the alpha releases - code review of #24309 - fix rust enabled macOS builds (#25779) mcs and brade: Last week: - Worked on rebasing Tor Browser updater patches for ESR60 (part of #25543). - Created #25750 (update Tor Launcher for ESR 60). - Commented on #25511 (Expose TZ info on control port for better debugging of time errors). - Helped with triage of #25737 (Tor Browser's update check bypassed Tor once on macos, because of xpcproxy?) - Participated in the Android developer interview. - Participated in the UX/Tor Browser "sync" meeting. - Attended the Snowflake meeting. This week: - Continue rebasing Tor Browser updater patches for ESR 60. - Monitor #25807 (Can not request bridges from torproject.org (App Engine is broken for moat)). - Revisit #25509 (Tor browser tells me "A local proxy is needed when connecting through a company, school, or university network") igt0: Last Week: - Testing fingerprinting and linkability defenses for TBA: #25703. The last week focus was android ability to open and send data to external apps. - Even if the external-default is false, Orfox(fennec) opens external apps: #25790 - Investigating an exception when an malformed android-app intent is clicked, even when external-default is false. - sysrqb: igt0, are you using a fuzzer or manual testing? (igt0: Manual testing, I am not sure if a fuzzer would help for privacy related issues, however I am open for ideas :)) - moved to a new place (was without internet the whole friday :( ) This week: - Keep looking into #25703 (Test linkability/fingerprinting defenses for TBAndroid). tjr - Have spent a considerable amount of time on working on getting the x64 version of MinGW running. - Most of that time has been spent on getting a debug version with symbols working actually. - Current status: There is a belief from a few folks (ted, binutils) that there are so many symbols in Firefox I am overflowing 'something' in gcc with debug information or something. - Next step is to start parsing coff format and try to figure it out... - I am not sure how much more time I can spend on this... - All (or most) fingerprinting work is on hold until Ethan's team resumes and a plan is determined =/ boklm: Last week: - reviewed #25481 (Enable rust support in Linux nightlies) - setup a new VM for nightly build with more disk space - made some ansible scripts to setup nightly builds (#25817) This week: - help with building the new alpha - finish setup of new nightly build VM and enable email notifications - work on fixing testsuite issues - investigate binutils reproducibility issue sysrqb: Last week: Continued rebasing Orfox patches onto mozilla-central (gecko-dev) Updated https-everywhere addon in Orfox (branch is ready, will update ticket after meeting) This week: Finish rebasing Orfox patches, testing and ask for review by igt0 Push some try builds Hopefully work on bug1440789 - integrating add-on features in-tree arthuredelstein: Last week: Posted patch for circuit display: https://trac.torproject.org/projects/tor/ticket/24309 Continued rebasing https://trac.torproject.org/projects/tor/ticket/25543 (will post branch soon) This week: Post rebased patches run alpha release build Make revisions to #24309 patch as needed Look into PointerEvents https://trac.torproject.org/projects/tor/ticket/25794 (GeKo: #22343 would be neat to see fixed) Experiment with a desktop TBB/Firefox 60 build? Figure out what's still needed Isabela: - need help from Mobile team with report for sponsor8 here is a pad with more info: https://storm.torproject.org/shared/fXYsrJU_42qUhjYLyc4Z0myeeXY39ab336XuYaL_... - will probably bug geko on sponsor4 final reports to make sure I am not missing anything (towards the end of the week) - this week sync will probably follow up with security controls and about:tor - arthur is helping ux team with user research coordinator applications :) Georg