Hi,

Here are the meeting notes for the Tor Browser meeting on 20 Feb (we had no meeting last week).

The chat log can be found at:

http://meetbot.debian.net/tor-meeting/2018/tor-meeting.2018-02-20-19.00.log....

And here come the notes from our pad:

Tuesday, February 20, 2018

tjr Spent a lot of time on Timer Rounding and Fuzzing. Spending yet more time on it, but made good progress..

Got a patch written to hide the canvas prompt unless triggered by user input

https://bugzilla.mozilla.org/show_bug.cgi?id=1376865

The Keyboard layout patch has problems.

It's still leaking data: https://bugzilla.mozilla.org/show_bug.cgi?id=1438795

It breaks a lot of stuff (see Duplicates also): https://bugzilla.mozilla.org/show_bug.cgi?id=1433592

I.... don't really understand this one. Arthur can you walk me through it? (Arthur says: Sure. After the tbb meeting?)

Made headway on "Why doesn't MinGW run" - but need assistance debugging

https://bugzilla.mozilla.org/show_bug.cgi?id=1411401#c17

Added a MinGW 32 Opt build to TC and am working on a x64 Build

There is a draft for the Fingerprinting Protection Help Page

https://bugzilla.mozilla.org/show_bug.cgi?id=1397757

mcs and brade: Last week: - Completed some code reviews: - #15599 (Range requests used by pdfjs are not isolated). - #22614 (Make e10s/non-e10s Tor Browsers indistinguishable). - #22659 (Changes to `intl.accept.languages` get overwritten). - For #23136 (Moat integration): - Confirmed that the BridgeDB Moat distributor is now working (thanks Isis!). - Posted a patch for #19910 (Rip out optimistic data socks handshake variant (#3875)). - Found and fixed #25266 (PT config should include full names of executable files on Windows). - Created some test builds for the Moat feature and posted them. Planned for this week: - Debug #23136 (Moat integration) which is not working for Georg. - Review some more patches. - Triage the Tor Launcher bug list (set priorities, close outdated tickets).

GeKo Last weeks - Worked on #21777 (I finally got a Tor Browser build somewhat running on Windows by using a clang-based cross-compiler) - Reviews - Release preparations for the alpha

This week - More work on #21777 (trying to get mozilla-central built with the new clang-based cross-compilation toolchain) - Reviews - Getting 8.0a2 out - Think about summarizing the security slider discussion we had so far and moving the topic forward - Finally writing the tests for my mixed content blocker .onion patch (#23439)

sysrqb -Last week:

- Worked on #25260 - merging moz build files into tor-launcher

- This ticket is becoming something...different, so I may repurpose it

- We had an unofficial group meeting on Monday and discussed some stuff about mobile

- Worked some more on the TBA roadmap

- This week

- Finish TBA roadmap

- Continue working on #25260

- Start porting Orfox patches onto mozilla-central

- Should we takeover responsibility for Orfox (and release Orfox updates) while we work on TBA?

pospeselr:

Last weeks:

synced with Pari on February's spreadsheet regarding Tor Browser

Worked on #25112 - sandboxing issue on Vista

Tracked down point of failure (ntdll patching), investigating fix

GK: could you ping me offline with the info you mentioned having on getting debug symbols working in windows builds

basically printf debugging atm which is fine for now but would like to be more efficient in the future [Full-fledged debug builds are broken right now (but mozilla-central should have that fixed (https://bugzilla.mozilla.org/show_bug.cgi?id=1372958 has the details). Your best bet with a debugger right now is using the optimized build we usually build, however with stripping disabled; make sure you have --disable-strip in your .mozconfig and if you package a build you need --disable-install-strip as well; bobowen is the windows related sandboxing guru and e.g. in #boxing and pretty helpful if you want feedback for patch ideas GeKo]

pospeselr: --disable-install-strip was the missing piece, thank you!

confirmed fix for #24341 (ubuntu build issue)

This week:

uplifting patch for #22794, fix for #25112

more bug fixes for the bug gods

igt0: Last week: - Investigated the #25247, I was not able to reproduce neither in my machine nor in a debian virtual machine. (Tried different resolutions and pixel densities) - Looked into the https://bugzilla.mozilla.org/show_bug.cgi?id=942652 , the ticket is out to date, good part of the firefox code is already updated to use configured proxy, except the sync code. I am now looking into the sync background service, there is a bug about using a different http lib https://github.com/mozilla-mobile/FirefoxData-android/issues/4

- sysrqb: I assume we'll want to disable Sync at compile-time, so we may not need to do a lot

- igt0: interesting, I found these tickets https://trac.torproject.org/projects/tor/ticket/7188 and https://trac.torproject.org/projects/tor/ticket/10368 , i am not sure it reflects the current state. (where it can be enabled for sync bookmarks, passwords and history)

This week: - Help sysrqb to write the TBA roadmap/documentation - Contact the Mozilla team working in the sync service about #942652, to make sure we are aligned what is the proper solution.

boklm: Last weeks: - worked on some patches for: - Bug 25020: add a tbb_version.json file - Bug 25178: re-enable windows-x86_64 build in 'make testbuild' - Bug 24879: enable fetching of new commits by default for nightly builds - started working on updating binutils (#16472) and gcc (#25304) This week: - help with build of the new alpha release - continue working on: - toolchain updates (#16472 and #25304) - shipping auto-updates for Tor Browser nightly channel (#18867) - testsuite updates/fixes

arthuredelstein: Last weeks: - Uplifted patches to Mozilla (checked in)

https://bugzilla.mozilla.org/show_bug.cgi?id=1433357

https://bugzilla.mozilla.org/show_bug.cgi?id=1433517

https://bugzilla.mozilla.org/show_bug.cgi?id=1432907

https://bugzilla.mozilla.org/show_bug.cgi?id=1433507

https://bugzilla.mozilla.org/show_bug.cgi?id=1344613

https://bugzilla.mozilla.org/show_bug.cgi?id=1433030

https://bugzilla.mozilla.org/show_bug.cgi?id=1434666

https://bugzilla.mozilla.org/show_bug.cgi?id=1433523

Also worked on (but not finished):

https://bugzilla.mozilla.org/show_bug.cgi?id=1438795

https://bugzilla.mozilla.org/1330467

This week:

Current remaining patches for uplift: https://torpat.ch/short

More uplift!

Two bugs mentioned above, and try to finish/uplift https://trac.torproject.org/22343

isabela: - Submitted on Feb 12 SOI to DRL for TB desktop work (small grant - nothing too crazy, implement ux work from anto/otf grant and keep up with mozilla releases/security stuff) - organize team roadmap prep work for Rome - will share more this week (let me know if you have any questions) - moving some work w/ TB team to March because ux team has to get website work done by rome - prep for team meeting day in rome (should we create pads and share stuff before hand or prepare an agenda for the meetings?)

Georg