[tor-project] Anti-censorship team meeting notes, 2022-03-10

meskio meskio at torproject.org
Thu Mar 10 18:20:19 UTC 2022

Hey everyone!

Here are our meeting logs:


And our meeting pad:

Anti-censorship work meeting pad

Next meeting: Thursday March 17th 16:00 UTC

Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress)

== Goal of this meeting ==

Weekly checkin about the status of anti-censorship work at Tor.
Coordinate collaboration between people/teams on anti-censorship at Tor.

== Links to Useful documents ==

	* Our anti-censorship roadmap:
		* Roadmap: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards
	* The anti-censorship team's wiki page:
		* https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home
	* Past meeting notes can be found at:
		* https://lists.torproject.org/pipermail/tor-project/
	* Tickets that need reviews:  from sponsors we are working on:
		* All needs review tickets: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?scope=all&utf8=%E2%9C%93&state=opened&assignee_id=None
		* Sponsor 30
			* https://gitlab.torproject.org/groups/tpo/-/milestones/4
			* https://gitlab.torproject.org/groups/tpo/-/milestones/7
			* https://gitlab.torproject.org/groups/tpo/-/milestones/5
			* https://gitlab.torproject.org/groups/tpo/-/milestones/6
		* Sponsor 28
			* must-do tickets: https://gitlab.torproject.org/groups/tpo/-/milestones/10
			* possible tickets: https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&state=opened&label_name%5b%5d=Sponsor%2028&milestone_title=None

== Announcements ==

== Discussion ==

	* (from March 11th) Reach an agreement on distributed Snowflake (Broker)|(Server) design. Shel: are you going to be workign on https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/issues/28651 ? What else we need to move forward on it? -- from gaba
		* The client telling the broker what bridge it wants to use: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/merge_requests/81
		* missing pieces:
			* broker having a list of known bridge fingerprints
			* proxies telling the broker what bridges they know about in their poll messages
				* might be a good next step
				* arlo is happy to pick this up, if it's helpful +1
			* broker matching clients with proxies, considering not only NAT compatibility but bridge fingerprint
				* proxies will need to both (1) know how to interpret the broker's instructions as to what websocket server to connect to, and (2) know how to forward the client's requested bridge fingerprint to the websocket server.
				* a proxy that does not signal such support to the broker can be matched only with clients that either: do not specify a bridge fingerprint, or specify the current default 2B280B23E1107BB62ABFC40DDCC8824814F80A72
			* proxies forwarding bridge fingerprint to snowflake-server intheir websocket connection
			* snowflake-server having its own internal mapping of bridge fingerprint -> ExtORPort address
				* needs a configuration file or something, can no longer come from TOR_PT_EXTENDED_SERVER_PORT environment variable since there may be more than one
		* Next steps:
			* who is doing what?
	* snowflake proxy auto-update?
		* webextensions have their usual update mechanism
		* docker auto-update if enabled
		* deb package updates
		* people compiling and running their own go-proxy, no updates or notifications of updates
		* the web badge does a page refresh (i think)

== Actions ==

== Interesting links ==

	* https://bsd.network/@matthieu/107900307121945165
		* running snowflake proxy on OpenBSD

== Reading group ==

	* We will discuss "Throttling Twitter: an emerging censorship technique in Russia" on 17 March
		* https://dl.acm.org/doi/pdf/10.1145/3487552.3487858
		* https://censorbib.nymity.ch/#Xue2021a
		* Questions to ask and goals to have:
			* What aspects of the paper are questionable?
			* Are there immediate actions we can take based on this work?
			* Are there long-term actions we can take based on this work?
			* Is there future work that we want to call out, in hopes that others will pick it up?

== Updates ==

    This week:
        - What you worked on this week.
    Next week:
        - What you are planning to work on next week.
    Help with:
	     - Something you need help with.

anadahz: 2022-01-27
	Last week:
		- Increase timeout check cycles for default-bridge-felix-1 and default-bridge-felix-2 as they have been generating too many alerts: https://gitlab.torproject.org/tpo/anti-censorship/monit-configuration/-/merge_requests/1

cecylia (cohosh): last updated 2022-03-10
Last week:
    - worked on setting up a dev environment for conjure
        - https://github.com/refraction-networking/conjure/wiki/Environment-Setup
    - some reviews
This week:
    - continued work on conjure PT
    - continue to monitor snowflake broker stats
    - review rdsys!15
Needs help with:

dcf: 2022-03-10
	Last week:
		- worked on aquiring resources for better hosting for the snowflake bridge
		- posted summary of snowflake amp cache https://github.com/net4people/bbs/issues/109
		- posted observations on multi-instance metrics graphs https://gitlab.torproject.org/tpo/network-health/metrics/onionoo/-/issues/40022#note_2783524
		- posted summary of last week's discussion about multiple snowflake bridges https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/issues/28651#note_2783541
		- posted notes about IGD port forwarding https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/issues/40106#note_2784834
	Next week:
		- review arlo's bridge fingerprint forwarding change https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/merge_requests/81
	Help with:

agix: 2021-02-10
	Last week:
		- Continued work on gettor-twitter
		Next week:
		- Hopefully finish the task
	Help with:

arlolra: 2022-03-10
	Last week:
		- Pass bridge fingerprint in SOCKS param to the broker
	Next week:
	  - Revise !81
	  - Start on the next piece of the multiple bridge design
		- Figure out where in pion/webrtc ALPN should be configured and used
		- Maybe add Chacha20Poly1305 to pion/dtls
	Help with:

maxb: 2021-09-23
	Last week:
		- Worked on https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/issues/40054 re: utls for broker negotiation
		- Had conversation with someone about upstream utls http round tripper https://github.com/refraction-networking/utls/pull/74
		- Too busy with work :/
	Next week:
		- _Really_ want to get a PR for utls round tripper

meskio: 2022-03-10
	Last week:
			- use bridge-distribution-request in rdsys (rdsys#93)
			- use rdsys bridges in circumvention settings (bridgedb#40045)
			- send the right assingments.log to the metrics
	Next week:
			- add some untilisting mechanism to circumvention settings (rdsys#79)

Shelikhoo: 2022-03-10
   Last Week:
       - [Merge Request Awaiting] Add SOCKS5 forward proxy support to snowflake (snowflake!64)
       - [Merge Request Awaiting] uTLS for broker negotiation(Updated)
		  - [Coding & Deployment] Proposal: Centralized Probe Result Collector (anti-censorship/team#54)
		  - [Deployment] Vantage Point in Vinnica, Ukraine
		  - [Discussion] Centralized Probe Log Collection Ascension Request
		  - [Discussion] Hosting Centralized Probe Log Collection Server on TPA managed VPS
   Next Week:
       - [Coding] Add SOCKS5 forward proxy support to snowflake (snowflake!64) - built-in DNS

HackerNCoder: 2021-12-16
This week:
        Setup web mirror on tor.encryptionin.space
        Get (new VPs with) new IP and setup new web mirror on new domain

hanneloresx: 2021-3-4
	Last week: 
		- Submitted MR for bridgestrap issue #14
	Next week:
		- Finish bridgestrap #14
		- Find new issue to work on
	Help with:

meskio | https://meskio.net/
 My contact info: https://meskio.net/crypto.txt
Nos vamos a Croatan.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: signature
URL: <http://lists.torproject.org/pipermail/tor-project/attachments/20220310/8ed474fa/attachment.sig>

More information about the tor-project mailing list