tor-project August 2022

tor-project@lists.torproject.org

12 participants
14 discussions

minutes from the sysadmin meeting
by Antoine Beaupré 29 Aug '22

29 Aug '22

# Roll call: who's there and emergencies anarcat, kez, lavamind. # Dashboard review Normal per-user check-in: * https://gitlab.torproject.org/groups/tpo/-/boards?scope=all&utf8=%E2%9C%93&… * https://gitlab.torproject.org/groups/tpo/-/boards?scope=all&utf8=%E2%9C%93&… * https://gitlab.torproject.org/groups/tpo/-/boards?scope=all&utf8=%E2%9C%93&… General dashboards: * https://gitlab.torproject.org/tpo/tpa/team/-/boards/117 * https://gitlab.torproject.org/groups/tpo/web/-/boards * https://gitlab.torproject.org/groups/tpo/tpa/-/boards We have decided we transfer the OKRs from a bi-quaterly roadmap to a yearly objective. It seems realistic that we manage to accomplish a significant part of the OKRs by the end of the year, even if only a plan for retirements, mail migration, and finish almost all the bullseye upgrades. # TPA-RFC-33: monitoring requirements adoption Still one pending MR here to review / discuss, postponed. # Ireland meeting Review the sessions anarcat proposed. There's a concern about one of the team members not being able to attend. We discussed how we have some flexibility on scheduling so that some sessions arrive at the right time and how we could stream sessions. # Next meeting Next meeting should be in early October. # Metrics of the month * hosts in Puppet: 96, LDAP: 96, Prometheus exporters: 164 * number of Apache servers monitored: 29, hits per second: 468 * number of self-hosted nameservers: 6, mail servers: 10 * pending upgrades: 17, reboots: 0 * average load: 0.72, memory available: 4.74 TiB/5.87 TiB, running processes: 793 * disk free/total: 31.06 TiB/91.86 TiB * bytes sent: 396.67 MB/s, received: 268.32 MB/s * planned bullseye upgrades completion date: 2022-10-02 * [GitLab tickets][]: 180 tickets including... * open: 0 * icebox: 144 * backlog: 17 * next: 11 * doing: 4 * needs information: 3 * needs review: 1 * (closed: 2847) [Gitlab tickets]: https://gitlab.torproject.org/tpo/tpa/team/-/boards Upgrade prediction graph lives at https://gitlab.torproject.org/tpo/tpa/team/-/wikis/howto/upgrades/bullseye/ -- Antoine Beaupré torproject.org system administration

1 0

(no subject)
by meskio 25 Aug '22

25 Aug '22

To: Subject: Anti-censorship team meeting notes, 2022-08-25 Hey everyone! Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-08-25-15.58.html And our meeting pad: Anti-censorship work meeting pad -------------------------------- Next meeting: Thursday Sept 1 16:00 UTC Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) == Goal of this meeting == Weekly check-in about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at Tor. == Links to Useful documents == * Our anti-censorship roadmap: * Roadmap: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards * The anti-censorship team's wiki page: * https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home * Past meeting notes can be found at: * https://lists.torproject.org/pipermail/tor-project/ * Tickets that need reviews: from sponsors we are working on: * All needs review tickets: * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… * Sponsor 28 * must-do tickets: https://gitlab.torproject.org/groups/tpo/-/milestones/10 * possible tickets: https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… * Sponsor 96 * https://gitlab.torproject.org/groups/tpo/-/milestones/24 == Announcements == * There will not be a meeting Sept 15th == Discussion == * Update on the manifest V3 situation for Snowflake webextensions and possible solutions * https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… * https://bugs.chromium.org/p/chromium/issues/detail?id=1207214 * manifest V3 doesn't allow to run webrtc in background * chromium is planning to deprecate v2 begining of next year, it will continue be working on firefox * a possible workaround is to open a tab with the badge * will ask tor, anti-censorship mailing list for suggestions * Snowflake in Turkmenistan: https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/iss… * we are providing a different snowflake bridgeline with specific port for stun servers and azure ad domian front * the changes seems to work for AGTS (one ISP) but not for others, as they block port 3478 and 3479 (New) * Reading group suggestion * "An Empirical Analysis of Plugin-Based Tor Traffic over SSH Tunnel" * 6 pages * https://ieeexplore.ieee.org/document/9020938 * PDF available from Sci-Hub, DOI 10.1109/MILCOM47813.2019.9020938 * new version of BridgeDB and rdsys * a facelift of bridges.torproject.org * svg images and translations are broken but working on it == Actions == == Interesting links == == Reading group == * We will discuss "An Empirical Analysis of Plugin-Based Tor Traffic over SSH Tunnel" on Sept 8 * https://ieeexplore.ieee.org/document/9020938 * PDF available from Sci-Hub, DOI 10.1109/MILCOM47813.2019.9020938 * Questions to ask and goals to have: * What aspects of the paper are questionable? * Are there immediate actions we can take based on this work? * Are there long-term actions we can take based on this work? * Is there future work that we want to call out in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. cecylia (cohosh): last updated 2022-08-25 Last week: - Worked on reproducible builds of Conjure (conjure#14) - helped debug blocking of Snowflake in TM This week: - Snowflake web extension v3 manifest - polish the badge-helper extension more - email tor-dev and anti-censorship team about the current plan - a few quality of life conjure issues - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/conj… - draft an announcement of conjure for forum and development community mailing lists (are you in contact with comms@ about this? --gaba) Needs help with: dcf: 2022-08-25 Last week: - documented re-block of www.torproject.org in Russia https://gitlab.torproject.org/tpo/community/support/-/issues/40050#note_283… Next week: - disable non-WireGuard SSH access to snowflake-02 - migrate goptlib to gitlab https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/86#note_282… Help with: meskio: 2022-08-25 Last week: - release BridgeDB 0.14 - release rdsys 0.3 - deploy BridgeDB new UI - deploy Circumvention Settings changes for snowflake in TM - deploy telegram support for dynamic bridges API - review arti proposal for pluggable transports (arti!686) Next week: - deploy rdsys-gettor Shelikhoo: 2022-08-25 Last Week: - [Merge Request Awaiting] Add SOCKS5 forward proxy support to snowflake (snowflake!64) - [Discussion & Deployment] Migrating Controlling git repo to Tor Gitlab Instance (shelikhoo/LogCollectorAncillary#5) - [Discussion & Deployment] Rollout of Distributed Snowflake Support - [Coding & Deployment] Proposal: Centralized Probe Result Collector (anti-censorship/team#54) - [Merge Request Awaiting] Raw Probe Log Data Collection https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement/… - [Research] HTTPT Planning https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/http… - [Research] WebTunnel Planning(Continue) - [Coding] WebTunnel PT Next Week: - [Investigate] China "Anti-Fraud" Webpage Redirection Censorship (censorship-analysis#40026): update the research based on updated ooni - [Research+Coding] Raw Probe Log Data Collection https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement/… - [Research] WebTunnel Planning(Continue) - [Coding] WebTunnel PT(https://gitlab.torproject.org/shelikhoo/webtunnel/-/tree/dev-init) - [Deployment] WebTunnel PT(maybe https://bridges.torproject.org/status?id=CD050211692AED05885172BCA6ED4B9F56…) Itchy Onion: 2022-08-25 Last week: - Tried a few things for RACE 2.2.X (rebase upstream, change timeout in snowflake library used, add more logging ) and talked to Cecylia about it - This week: - Continue working on RACE 2.2.x - RACE T&E meeting - Review !98 (https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow…) Next week: - RACE 2.2.x -- meskio | https://meskio.net/ -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- My contact info: https://meskio.net/crypto.txt -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Nos vamos a Croatan.

1 0

Anti-censorship team meeting notes, 2022-08-18
by Shelikhoo 18 Aug '22

18 Aug '22

Hey everyone! Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-08-18-15.58.html <http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-03-31-15.59.html> And our meeting pad: Anti-censorship work meeting pad -------------------------------- Next meeting: Thursday Aug 25 16:00 UTC Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) == Goal of this meeting == Weekly check-in about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at Tor. == Links to Useful documents == * Our anti-censorship roadmap: * Roadmap: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards * The anti-censorship team's wiki page: * https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home * Past meeting notes can be found at: * https://lists.torproject.org/pipermail/tor-project/ * Tickets that need reviews: from sponsors we are working on: * All needs review tickets: * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… * Sponsor 28 * must-do tickets: https://gitlab.torproject.org/groups/tpo/-/milestones/10 * possible tickets: https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… * Sponsor 96 * https://gitlab.torproject.org/groups/tpo/-/milestones/24 == Announcements == * == Discussion == (New) * Think a new name for HTTPT PT? * https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/http… * we'll rename it to webtunnel * Update on the manifest V3 situation for Snowflake webextensions and possible solutions * https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… * https://bugs.chromium.org/p/chromium/issues/detail?id=1207214 * manifest V3 doesn't allow to run webrtc in background * chromium is planning to deprecate v2 beggining of next year, it will continue be working on firefox * a possible workaround is to open a tab with the badge * will ask tor, anti-censorship mailing list for suggestions * Snowflake in Turkmenistan: https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/iss… * request users to submit log from Tor Browser * == Actions == == Interesting links == == Reading group == * We will discuss "" on * * Questions to ask and goals to have: * What aspects of the paper are questionable? * Are there immediate actions we can take based on this work? * Are there long-term actions we can take based on this work? * Is there future work that we want to call out in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. cecylia (cohosh): last updated 2022-08-18 Last week: - Followed up with CU Boulder team about a wireguard connection between the conjure station and bridge - Worked on Snowflake webextension V3 manifest update - FOCI townhall and HoTFOCI This week: - a few quality of life conjure issues - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/conj… - draft an announcement of conjure for forum and development community mailing lists (are you in contact with comms@ about this? --gaba) Needs help with: dcf: 2022-08-18 Last week: - updated graphs of users in Russia https://gitlab.torproject.org/tpo/community/support/-/issues/40050#note_282… - snowflake CDN bookkeeping https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/Snowflake-co… - talked to people at the FOCI townhall and HotFOCI (https://hotfoci.org/). gave people references on: - blockpage injection in China: https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/iss… http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-01-13-15.59.log… - running a bridge: https://community.torproject.org/relay/setup/bridge/ - RACECAR and obfs5: https://gitlab.torproject.org/groups/tpo/-/milestones/10 https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/obfs… Next week: - disable non-WireGuard SSH access to snowflake-02 - migrate goptlib to gitlab https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/86#note_282… Help with: meskio: 2022-08-18 Last week: - prepare bridgedb 0.14 release - fight with bridgedb tests that don't want to pass - prepare a deployment of rdsys-gettor - modify circumvention settings map to support hardcoded bridgelines - prepare changes to use azure for snowflake in turkmenistan Next week: - deploy moat shim-token support - deploy rdsys-gettor Shelikhoo: 2022-08-18 Last Week: - [Merge Request Awaiting] Add SOCKS5 forward proxy support to snowflake (snowflake!64) - [Discussion & Deployment] Migrating Controlling git repo to Tor Gitlab Instance (shelikhoo/LogCollectorAncillary#5) - [Discussion & Deployment] Rollout of Distributed Snowflake Support - [Coding & Deployment] Proposal: Centralized Probe Result Collector (anti-censorship/team#54) - [Merge Request Awaiting] Raw Probe Log Data Collection https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement/… - [Research] HTTPT Planning https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/http… - [Deployment] Enable unprivilaged user namespace support on probetelemetry-01@ for systemd user unit isolation https://gitlab.torproject.org/tpo/tpa/team/-/issues/40855 Next Week: - [Investigate] China "Anti-Fraud" Webpage Redirection Censorship (censorship-analysis#40026): update the research based on updated ooni - [Research+Coding] Raw Probe Log Data Collection https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement/… - [Research] HTTPT Planning(Continue) - [Coding] HTTPT PT Itchy Onion: 2022-08-18 Last week: - Talked to Eliana from Georgetown on the leaking file descriptor issue fix - RACE 2.2.X results came back on Friday, didn't pass the CI test This week: - Tried a few things for RACE 2.2.X (rebasing upstream, changing timeout in snowflake library used) and talked to Cecylia about it (can you mention here what are those few things? --gaba) Next week: - Continue working on RACE 2.2.X (add more error logging in the plugin code to hopefully pinpoint at which point messages are being dropped)

1 0

Monthly Localization Hangout Tomorrow from 12UTC onwards
by emma peel 18 Aug '22

18 Aug '22

Just a note to remind you that..... Tomorrow we hang out! Every 3rd Friday of the month the Tor L10n Team meets to translate together, share tricks, have fun while translating, meet fellow translators, and find out about the l10n priorities for the Tor Project. We will talk about transifex tricks to save time and translate more easily (recover similar strings, raw editor, concordance search). Come join us on the Localization Hangout, from Noon UTC, on the #tor-l10n channel in OFTC. (you can also use Element https://element.io/ to connect: #tor-l10n:matrix.org). We start around noon UTC on irc, and at 13UTC we have a video call. More information: https://community.torproject.org/localization/hangouts/ Be there or be... in English! :D emmapeel Localization Coordinator Tor Project

1 0

Anti-censorship team meeting notes, 2022-08-11
by meskio 11 Aug '22

11 Aug '22

Hey everyone! Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-08-11-15.58.html And our meeting pad: Anti-censorship work meeting pad -------------------------------- Next meeting: Thursday Aug 18 16:00 UTC Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) == Goal of this meeting == Weekly check-in about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at Tor. == Links to Useful documents == * Our anti-censorship roadmap: * Roadmap: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards * The anti-censorship team's wiki page: * https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home * Past meeting notes can be found at: * https://lists.torproject.org/pipermail/tor-project/ * Tickets that need reviews: from sponsors we are working on: * All needs review tickets: * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… * Sponsor 28 * must-do tickets: https://gitlab.torproject.org/groups/tpo/-/milestones/10 * possible tickets: https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… * Sponsor 96 * https://gitlab.torproject.org/groups/tpo/-/milestones/24 == Announcements == * == Discussion == * What is the status of adjusting snowflake (pion) DTLS signature to avoid blocking in Russia? (Based on offset of supported_groups extension.) * https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/iss… * https://github.com/pion/dtls/pull/474 * https://ntc.party/t/webrtc/2174/21 * https://gitlab.torproject.org/tpo/community/support/-/issues/40050 (generally) * shell have produced a TB tgz with a modified snowflake to test * https://people.torproject.org/~shelikhoo/dqo8apcai4/tor-browser/tor-browser… * shell will post it on ntc and tor forum * https://ntc.party/t/testing-invitation-for-tor-browser-with-supported-group… * (Not working???) * >>> Request a packet capture * https://forum.torproject.net/t/testing-invitation-for-tor-browser-with-supp… * (No reply #~#) * User reports that the problem now is the presence of a Hello Verify Request message * https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/iss… * This discussion will be moved to censorship-analysis#40030 and remove from the pad * Snowflake * Umbrel asked us: "If you push multi-architecture builds to Docker Hub after your releases automatically, it would just be super simple PR to update the version number and checksum to keep Umbrel up to date". https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… * we are not conforably giving gitlab access to push images to docker hub * but we can build binaries in the CI (New) * Use azure as snowflake's fronting service: context -> Turkmenistan meek working, snowflake blocked https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/iss… https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/iss… src shell (conflicting evidence: https://snowflake-broker.freehaven.net/metrics shows 1 TM IP, but proxy based test show cover site reachable) * meskio will find who has access to meek-azure and if we can change the domain front from the circumvention settings just for TM * there is a merge request in tor to fix some issues connecting to Tor from TM: https://gitlab.torproject.org/tpo/core/tor/-/merge_requests/599 * most obfs4 bridges are blocked as most IP ranges are not reachable from TM * HTTPT discussion RFC: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/http… src shell * shell will start working on that proposal == Actions == == Interesting links == == Reading group == * We will discuss "" on * * Questions to ask and goals to have: * What aspects of the paper are questionable? * Are there immediate actions we can take based on this work? * Are there long-term actions we can take based on this work? * Is there future work that we want to call out in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. cecylia (cohosh): last updated 2022-06-30 Last week: - got tor to bootstrap fully with the deployed conjure station and bridge - met with CU Boulder team to discuss conjure rollout plan This week: - follow up with CU Boulder team about a wireguard connection between the station and bridge - a few quality of life conjure issues - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/conj… - draft an announcement of conjure for forum and development community mailing lists Needs help with: dcf: 2022-08-04 Last week: - answered some questions about snowflake polling https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - snowflake CDN bookkeeping https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/Snowflake-co… - made a mirror of shelikhoo's tor-browser-11.5a13-snowflake-dtlslib-20220712-9d73998bca39 https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/83#note_282… - answered a question about pluggable transports and FascistFirewall https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - archived snowflake-webextension-0.6.1 https://archive.org/details/snowflake-webextension-0.6.1 Next week: - disable non-WireGuard SSH access to snowflake-02 - migrate goptlib to gitlab https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/86#note_282… Help with: meskio: 2022-08-11 Last week: - set upa testing environment of rdsys-gettor - prepare a deployment of rdsys-gettor - catch up after vacation Next week: - deploy moat shim-token support - deploy rdsys-gettor Shelikhoo: 2022-08-04 Last Week: - [Merge Request Awaiting] Add SOCKS5 forward proxy support to snowflake (snowflake!64) - [Discussion & Deployment] Migrating Controlling git repo to Tor Gitlab Instance (shelikhoo/LogCollectorAncillary#5) - [Discussion & Deployment] Rollout of Distributed Snowflake Support - [Coding & Deployment] Proposal: Centralized Probe Result Collector (anti-censorship/team#54) - [Research+Coding] Raw Probe Log Data Collection https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement/… - [Investigate] China "Anti-Fraud" Webpage Redirection Censorship (censorship-analysis#40026): update the research based on updated ooni - [Merge Request Awaiting] Raw Probe Log Data Collection https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement/… - [Research] HTTPT Planning https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/http… - [Deployment] Enable unprivilaged user namespace support on probetelemetry-01@ for systemd user unit isolation https://gitlab.torproject.org/tpo/tpa/team/-/issues/40855 Next Week: - [Investigate] China "Anti-Fraud" Webpage Redirection Censorship (censorship-analysis#40026): update the research based on updated ooni - [Research+Coding] Raw Probe Log Data Collection https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement/… - [Research] HTTPT Planning(Continue) Itchy Onion: 2022-08-11 Last week: - Updated snowflake plugin for RACE 2.2.0 This week: - Fixing leaking file descriptor issue -- meskio | https://meskio.net/ -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- My contact info: https://meskio.net/crypto.txt -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Nos vamos a Croatan.

1 0

Tails is hiring a Fundraising Lead
by sajolida 09 Aug '22

09 Aug '22

Hi everybody, Tails is growing and we're hiring a Fundraising person to tell the story of Tails to a wide variety of current and future donors: https://tails.boum.org/jobs/fundraising/ Please pass the word :) -- sajolida Tails — https://tails.boum.org/ UX · Fundraising · Technical Writing

1 0

Help Tor smash bugs - Bug Smash Fund
by Al Smith 08 Aug '22

08 Aug '22

Hello Tor world, During the month of August, all donations to the Tor Project will go towards the Bug Smash Fund. This year, the Tor Project must raise $75,000 to ensure we can smash Tor bugs and conduct needed maintenance. Read more: https://blog.torproject.org/tor-bug-smash-fund-2022/ We need your help! *Can you spread the word on social, make a donation, or tell a friend who loves privacy about this initiative?* Here are a bunch of easy links to share: - Blog post https://blog.torproject.org/tor-bug-smash-fund-2022/ - Twitter thread https://twitter.com/torproject/status/1554510747584958464?s=20&t=L6s4ZNah0o… - LinkedIn post https://www.linkedin.com/feed/update/urn:li:activity:6960277712875765760 - Facebook post https://www.facebook.com/TorProject/posts/pfbid02bC8qzF8rVJz1smYL1pVodyBs1q… - Instagram post https://www.instagram.com/p/CgxBt3Pv9VZ/ Thank you for supporting Tor and helping us smash bugs, Al -- Al Smith (they/them) Fundraising Director The Tor Project https://www.torproject.org | http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/

1 0

New Tor Browser weekly meeting time
by Richard Pospesel 05 Aug '22

05 Aug '22

Hi everyone, Going forward, Tor Browser weekly dev meetings will be held at 1500 UTC on Mondays in #tor-meeting OFTC. best, -richard

1 0

Anti-censorship team meeting notes, 2022-08-04
by Shelikhoo 04 Aug '22

04 Aug '22

Hey everyone! Here are our meeting logs: http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-08-04-15.59.html <http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-03-31-15.59.html> And our meeting pad: Anti-censorship work meeting pad -------------------------------- Next meeting: Thursday Aug 11 16:00 UTC Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress) == Goal of this meeting == Weekly check-in about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at Tor. == Links to Useful documents == * Our anti-censorship roadmap: * Roadmap: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards * The anti-censorship team's wiki page: * https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home * Past meeting notes can be found at: * https://lists.torproject.org/pipermail/tor-project/ * Tickets that need reviews: from sponsors we are working on: * All needs review tickets: * https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?s… * Sponsor 28 * must-do tickets: https://gitlab.torproject.org/groups/tpo/-/milestones/10 * possible tickets: https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&… * Sponsor 96 * https://gitlab.torproject.org/groups/tpo/-/milestones/24 == Announcements == * HotFOCI next week, Tue 2022-08-09 * https://hotfoci.org/ * register here: https://hotfoci.org/register == Discussion == (KEEP) * What is the status of adjusting snowflake (pion) DTLS signature to avoid blocking in Russia? (Based on offset of supported_groups extension.) * https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/iss… * https://github.com/pion/dtls/pull/474 * https://ntc.party/t/webrtc/2174/21 * https://gitlab.torproject.org/tpo/community/support/-/issues/40050 (generally) * shell have produced a TB tgz with a modified snowflake to test * https://people.torproject.org/~shelikhoo/dqo8apcai4/tor-browser/tor-browser… * shell will post it on ntc and tor forum * https://ntc.party/t/testing-invitation-for-tor-browser-with-supported-group… * (Not working???) * >>> Request a packet capture * https://forum.torproject.net/t/testing-invitation-for-tor-browser-with-supp… * (No reply #~#) * User reports that the problem now is the presence of a Hello Verify Request message * https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/iss… (New) * Snowflake * New snowflake.tpo text review and discussion: https://pad.riseup.net/p/snowflake-landing-page-content-update-2022 ticket: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… * Umbrel asked us:"If you push multi architecture builds to Docker Hub after your releases automatically, it would just be super simple PR to update the version number and checksum to keep Umbrel up to date". https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… == Actions == == Interesting links == == Reading group == * We will discuss "" on * * Questions to ask and goals to have: * What aspects of the paper are questionable? * Are there immediate actions we can take based on this work? * Are there long-term actions we can take based on this work? * Is there future work that we want to call out in hopes that others will pick it up? == Updates == Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with: - Something you need help with. cecylia (cohosh): last updated 2022-06-30 Last week: - got tor to bootstrap fully with the deployed conjure station and bridge - met with CU Boulder team to discuss conjure rollout plan This week: - follow up with CU Boulder team about a wireguard connection between the station and bridge - a few quality of life conjure issues - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/conj… - draft an announcement of conjure for forum and development community mailing lists Needs help with: dcf: 2022-08-04 Last week: - answered some questions about snowflake polling https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - snowflake CDN bookkeeping https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/Snowflake-co… - made a mirror of shelikhoo's tor-browser-11.5a13-snowflake-dtlslib-20220712-9d73998bca39 https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/83#note_282… - answered a question about pluggable transports and FascistFirewall https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… - archived snowflake-webextension-0.6.1 https://archive.org/details/snowflake-webextension-0.6.1 Next week: - disable non-WireGuard SSH access to snowflake-02 - migrate goptlib to gitlab https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/86#note_282… Help with: meskio: 2022-07-21 Last week: - use the same bucket on gettor-rdsys archive.org for the existence file (rdsys!44) - use a folder per flatform on gettor-rdsys gdrive (rdsys!45) - request feedback on bridge URIs and QR codes - review code cleanups on snowflake webextension (webextension!36 !37) - review connection assist feedback (support#40086) - help on bridgedb lektor migration and broken tests (bridgedb!31) Next week: - deploy moat shim-token support - deploy a testing environment of rdsys-gettor Shelikhoo: 2022-08-4 Last Week: - [Merge Request Awaiting] Add SOCKS5 forward proxy support to snowflake (snowflake!64) - [Discussion & Deployment] Migrating Controlling git repo to Tor Gitlab Instance (shelikhoo/LogCollectorAncillary#5) - [Discussion & Deployment] Rollout of Distributed Snowflake Support - [Coding & Deployment] Proposal: Centralized Probe Result Collector (anti-censorship/team#54) - [Research+Coding] Raw Probe Log Data Collection https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement/… Next Week: - [Investigate] China "Anti-Fraud" Webpage Redirection Censorship (censorship-analysis#40026): update the research based on updated ooni - [Research+Coding] Raw Probe Log Data Collection https://gitlab.torproject.org/tpo/anti-censorship/connectivity-measurement/… - [Research] HTTPT Planning result Itchy Onion: 2022-08-04 Last week: - Updated snowflake plugin for RACE 2.2.0 (introduced a bug) This week: - Since updating snowflake plugin to 2.2.0, it has been silently dropping messages. Been working on it since then. Next week: - Still need to work on the leaking file descriptor issue from a while ago

1 0

Joydeep's Monthly Status Report for July 2022
by Joydeep Sen Gupta 03 Aug '22

03 Aug '22

Hello everyone! These are my updates from the month of July. With the major Tor Browser 11.5 release, much of my work this month was concentrated around it. I updated the documentation on the Tor Browser User Manual[1], Support Portal[2] and various other documentation we maintain for user support[3]. We got a number of user support requests, as is usual with a major Tor Browser release with users reporting a couple of bugs[4][5]. These bugs are now fixed in the Tor Browser 11.5.1 release! With Tor Browser 11.5, we also have Connection Assist[6] in the stable browser and I have been working to gain feedback about the Circumvention map[7] in order to improve this feature. There has been a major uptick in requests for unlisted obfs4 bridges, mostly from users in China and Turkmenistan[8]. On the Android front, we got multiple reports of the bug in rendering webpages on Samsung S22 device (this is a device specific issue)[9]. That pretty much sums up the highlights from last month and following are some quick stats and highlights from our official support channels. ## Frontdesk Timeline : 01 July - 31 July 2022 Tickets: new: 42 open: 20 resolved: 467 Breakdown of number of RT tickets received with respect to operating system: (Note: This includes tickets where the user mentioned the operating system or it was evident from the issue they were running into and/or enclosed screenshots.) Windows - 22 macOS - 16 GNU/Linux - 3 Android- 18 Breakdown of most frequent tickets (at least 3 RT tickets): 1. 141 RT Tickets - How to use Tor Bridges in Russia.[10] 2. 101 RT Tickets - Private Bridge requests. This is not related to the .ru censorship but requests from Tor users in China, Iran, etc.[11] 3. 6 RT Tickets - Bug in rendering webpages on Tor Browser for Android, specific to the Samsung S22 device[9] 4. 4 RT Tickets - Tor Browser 11.5 incompatible with macOS 10.12[12] 5. 3 RT Tickets - Questions and feedback[13] about the new features in Tor Browser Desktop -- Bridge-moji[14] & Connection Assist. ## Tor Forum Most popular topics in the Support category (in terms of no. of views): 1. "Too many connections (to a single relay) (DDoS 2022.07.02)".[15] 2. "Cannot open any site correctly with Tor (Browser)"[16] 3. "Do my Snowflakes work?"[17] 4. "Testing Invitation for Tor Browser with supported_groups patch countermeasure in Snowflake to evade censorship observed in Russia"[18] 5. "The “Continue to HTTP site” button in HTTPS-only mode doesn’t work"[19] Thanks, -- Joydeep [1]: https://gitlab.torproject.org/tpo/web/manual/-/issues/119 [2]: https://gitlab.torproject.org/tpo/web/support/-/issues/298 [3]: https://gitlab.torproject.org/tpo/community/support/-/issues/40073 [4]: https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41059 [5]: https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41050 [6]: https://support.torproject.org/glossary/connection-assist/ [7]: https://gitlab.torproject.org/tpo/community/support/-/issues/40086 [8]: https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/iss… [9]: https://gitlab.torproject.org/tpo/applications/fenix/-/issues/40216 [10]: https://forum.torproject.net/t/tor-blocked-in-russia-how-to-circumvent-cens… [11]: https://support.torproject.org/censorship/connecting-from-china/ [12]: https://forum.torproject.net/t/version-of-tor-browser-compatible-with-macos… [13]: https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41093 [14]: https://support.torproject.org/glossary/bridge-moji/ [15]: https://forum.torproject.net/t/too-many-connections-ddos-2022-07-02/3827 [16]: https://forum.torproject.net/t/cannot-open-any-site-correctly-with-tor/4028 [17]: https://forum.torproject.net/t/do-my-snowflakes-work/4069 [18]: https://forum.torproject.net/t/testing-invitation-for-tor-browser-with-supp… [19]: https://forum.torproject.net/t/the-continue-to-http-site-button-in-https-on…

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

tor-project August 2022