Hi,

here are the meeting notes from our last meeting on Monday, Feb 26. The log is on

http://meetbot.debian.net/tor-meeting/2018/tor-meeting.2018-02-26-19.00.log....

and the items from the pad are:

Discussion: Possible grant proposal for https://research.fb.com/programs/research-awards/proposals/secure-the-intern... ?

pospeselr:

Last week:

fix for #25112

Uncovered root cause (missing wow_helper.exe), and put up a patch for review

Disables sandboxing specifically for WOW64 Vista and below rather than integrating

wow_helper.exe into the build since this problem 'goes away' once we move past ESR52 shortly

uplift #22794

Got TryServer access setup and working for me

Running tests for linux, linux64 and macos

Seems like my patch may have introduced some regressions :(

This week:

fix regressions (if they are real) introduced by #22794 patch [GeKo: Do you have a bugzilla number for that?]

[pospeselr: patch isn't yet uplifted to gecko-dev; verifying the test failures are consistent and will open a trac ticket if the failures are real; will create mozilla uplift bug once patch is passing firefox's tests] [GeKo: okay, sure]

mcs and brade: Last week: - For #23136 (Moat integration): - Helped debug issues with Georg's builds. - Fixed a problem with cancel and posted a revised Tor Launcher patch. - Discussed possible support for obs4proxy's meek_lite mode (for Tails). - Reviewed a fix for #25000 (modifications to NoScript's whitelist break webextensions) - Worked with Arthur on a couple of uplift issues: - #18900 (TB 6.0a5: updater doesn't work on Linux (cannot find libraries)) - #25331 (Test from #18912 failing) Planned for this week: - For #23136 (Moat integration), discuss and fix some issues reported by Georg. - Work with Arthur to find the root cause for #25331 (Test from #18912 failing).

tjr

Landed a 2ms bump in nightly and beta; uplifting to ESR 52.7

This is going to cause merge failures. (Sorry.)

Hide the canvas prompt unless triggered by user input is landed

Arthur worked on the keyboard patch - thanks so much

Fixed leak: https://bugzilla.mozilla.org/show_bug.cgi?id=1438795

Close to fixing breakage: https://bugzilla.mozilla.org/show_bug.cgi?id=1433592

Why doesn't MinGW run is a little closer, need to talk to Bob Owen

Mostly have worked on Timer Fuzzing

GeKo: Last week: - Slow progress on clang-based cross-compilation (#21777). I am still hitting issues faster than I can diagnose and work around them but am able to build a large chunk of m-c right now - Finished by patch for #23439 (exemption of .onion from mixed content blocking) - Worked on code review for #23136 - Thought about how to deal with the feedback for the security control redesign

This week: - More work on #21777 - More code review - uplift my patches for .onion treatment in mixed content scenarios (this is Mozilla's bug 1382359) - post an updated draft for the security control redesign

igt0: Last week: - Rebasing #25013 to run on mozilla central It needed a bunch of changes since firefox deprecated few APIs and removed few browser specific css. This week: - Make #25013 work on android and figure out why the about:tor is not applying the css rules Can we use a branch instead of mozilla central? thus we can run the tor browser tests with the tor patches applied.

arthuredelstein:

Last week:

https://bugzilla.mozilla.org/show_bug.cgi?id=1438795 (checked in)

https://bugzilla.mozilla.org/show_bug.cgi?id=1436226 (patched)

https://bugzilla.mozilla.org/show_bug.cgi?id=1433592 (patched)

https://bugzilla.mozilla.org/show_bug.cgi?id=1330467 (patch nearly ready)

Worked on https://trac.torproject.org/projects/tor/ticket/25331

This week

Revise above patches for check in

https://bugzilla.mozilla.org/show_bug.cgi?id=1396224

Finish https://bugzilla.mozilla.org/show_bug.cgi?id=1330467

Work with mcs and brade to finish https://trac.torproject.org/projects/tor/ticket/25331 and then try to uplift

Finish https://trac.torproject.org/projects/tor/ticket/22343 and attempt to uplift

More uplift: https://torpat.ch/short

boklm:

Last week:

- helped build and publish the alpha release (8.0a2)

- fixed bug #25327 (create *-debug.tar.xz files instead of *-debug.tar.gz files)

- worked on the binutils update (#16472)

- started looking at data from #22346 (drop in Tor Browser update pings in early 2017 and 2018)

This week:

- fix #25339: Install python 3.6 for building HTTPS-Everywhere

- continue working on:

- toolchain updates (#16472 and #25304) [GeKo: I think we get a new tag tonight for selfrando, so we should be good for the next alpha at least]

- shipping auto-updates for Tor Browser nightly channel (#18867)

- testsuite updates/fixes

sysrqb: - last week:

- Discussed system extensions with some Mozilla devs, regarding support for legacy addons

- Pushed a branch including the Orfox patches for #19675

- Updated #25260 with the current status of the TorLauncher mozbuild integration

- Opened a bugzilla ticket for broken system addons on Android - https://bugzilla.mozilla.org/show_bug.cgi?id=1440789 [GeKo: good stuff. once you have a r+ you can request a check-on with the [checkin-needed] keyword (assuming you don't have Level 3 commit perms for m-c] - This week

- Stop being sick

- Follow up on #19675 and get patches merged

- Open child tickets for everything I think we should change in the Orfox patches

- Actually work on TBA roadmap/design proposal

isabela: haven't finished the agenda's pad - will share it to the list today tho so folks can start organizing for rome

Georg