Hi all!

Here come the meeting notes from our weekly meeting we had yesterday.

The chat log can be found on

http://meetbot.debian.net/tor-meeting/2018/tor-meeting.2018-04-16-18.09.log....

and our pad items are/were:

Monday, April 16, 2018

pospeselr:

Last week:

- uplifted patch for #20283 and posted to firefox bug #859782 (https://bugzilla.mozilla.org/show_bug.cgi?id=859782)

- verified no other syscalls on files in /proc/ need to be fixed for #20283

- reviewed #21537, #25721

This week:

- finish uplift of #20283 (just need to update the patch with review feedback)

- #23247 (.onion padlock states), #25147 (Backport of fix shipped in Firefox 58.0)

- probably getting sick since my wife brought back the plague from Oregon

GeKo: Last week: - release preparations - addressed review feedback for #21537 and #25481 and got both merged - last interview for the android dev position - started to work on rust support for macOS (#25779) This week: - https://bugzilla.mozilla.org/show_bug.cgi?id=1390583 (stylo build bug for windows) - help with the alpha releases - code review of #24309 - fix rust enabled macOS builds (#25779)

mcs and brade: Last week: - Worked on rebasing Tor Browser updater patches for ESR60 (part of #25543). - Created #25750 (update Tor Launcher for ESR 60). - Commented on #25511 (Expose TZ info on control port for better debugging of time errors). - Helped with triage of #25737 (Tor Browser's update check bypassed Tor once on macos, because of xpcproxy?) - Participated in the Android developer interview. - Participated in the UX/Tor Browser "sync" meeting. - Attended the Snowflake meeting. This week: - Continue rebasing Tor Browser updater patches for ESR 60. - Monitor #25807 (Can not request bridges from torproject.org (App Engine is broken for moat)). - Revisit #25509 (Tor browser tells me "A local proxy is needed when connecting through a company, school, or university network")

igt0: Last Week: - Testing fingerprinting and linkability defenses for TBA: #25703. The last week focus was android ability to open and send data to external apps. - Even if the external-default is false, Orfox(fennec) opens external apps: #25790 - Investigating an exception when an malformed android-app intent is clicked, even when external-default is false.

- sysrqb: igt0, are you using a fuzzer or manual testing? (igt0: Manual testing, I am not sure if a fuzzer would help for privacy related issues, however I am open for ideas :))

- moved to a new place (was without internet the whole friday :( ) This week: - Keep looking into #25703 (Test linkability/fingerprinting defenses for TBAndroid).

tjr - Have spent a considerable amount of time on working on getting the x64 version of MinGW running. - Most of that time has been spent on getting a debug version with symbols working actually. - Current status: There is a belief from a few folks (ted, binutils) that there are so many symbols in Firefox I am overflowing 'something' in gcc with debug information or something. - Next step is to start parsing coff format and try to figure it out... - I am not sure how much more time I can spend on this... - All (or most) fingerprinting work is on hold until Ethan's team resumes and a plan is determined =/

boklm: Last week: - reviewed #25481 (Enable rust support in Linux nightlies) - setup a new VM for nightly build with more disk space - made some ansible scripts to setup nightly builds (#25817) This week: - help with building the new alpha - finish setup of new nightly build VM and enable email notifications - work on fixing testsuite issues - investigate binutils reproducibility issue

sysrqb: Last week: Continued rebasing Orfox patches onto mozilla-central (gecko-dev) Updated https-everywhere addon in Orfox (branch is ready, will update ticket after meeting) This week: Finish rebasing Orfox patches, testing and ask for review by igt0 Push some try builds Hopefully work on bug1440789 - integrating add-on features in-tree

arthuredelstein: Last week:

Posted patch for circuit display: https://trac.torproject.org/projects/tor/ticket/24309

Continued rebasing https://trac.torproject.org/projects/tor/ticket/25543 (will post branch soon)

This week:

Post rebased patches

run alpha release build

Make revisions to #24309 patch as needed

Look into PointerEvents https://trac.torproject.org/projects/tor/ticket/25794 (GeKo: #22343 would be neat to see fixed)

Experiment with a desktop TBB/Firefox 60 build? Figure out what's still needed

Isabela: - need help from Mobile team with report for sponsor8 here is a pad with more info: https://storm.torproject.org/shared/fXYsrJU_42qUhjYLyc4Z0myeeXY39ab336XuYaL_... - will probably bug geko on sponsor4 final reports to make sure I am not missing anything (towards the end of the week) - this week sync will probably follow up with security controls and about:tor - arthur is helping ux team with user research coordinator applications :)

Georg