Hey everyone!

Here are our meeting logs:

http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-01-20-15.59.html

And our meeting pad:

Anti-censorship work meeting pad --------------------------------

Next meeting: Thursday January 20th 16:00 UTC

Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress)

== Goal of this meeting ==

Weekly checkin about the status of anti-censorship work at Tor. Coordinate collaboration between people/teams on anti-censorship at Tor.

== Announcements ==

== Discussion ==

resume posting weekly meeting notes?

no strong feeling either way, but cohosh will resume because our discussion notes are worth saving

Kazakhstan shutdown

shutdown ended 2022-01-11, and nothing new noticed since then

China "Anti-Fraud" Webpage Redirection Censorship https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/issu...

Reply from censored planet: https://gitlab.torproject.org/tpo/anti-censorship/censorship-analysis/-/issu...

currently have no access to an affected vantage point

RIPE Atlas?

want to be able to test a large custom list of domains, to find out (1) which are being blocked, and (2) whether the blocklist is the same in different networks in China

snowflake bridge load balancing migration next week?

https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowf...

dcf can set up a server with adequate resources and the same keys

change DNS to use this staging server while we make configuration changes on the main server

change DNS back when finished

eclips.is (Greenhost) is having issues, a VPS with similar resources is $100–200 / month, not a problem if only used for staging for a week or so

whom to contact about changing snowflake.torproject.net DNS records?

snowflake.bamsoftware.com and snowflake.freehaven.net are already CNAMEs for snowflake.torproject.net, so we only need to change the one

https://gitlab.torproject.org/tpo/tpa/team/

good idea to set a short TTL before making the change

still don't now what to do about onion key rotation, short of patching tor, or hacking LastRotatedOnionKey in the state file

Copy TLS keys in addition to Tor's keys

Reading group?

2022-02-03

== Actions ==

== Interesting links ==

https://fightcensorship.tech/ Icarus Project, an online repository for documented Internet censorship circumvention techniques and methods

https://internews.org/resource/optimashutdownworkflow/ The OPTIMA Internet Shutdowns Advocacy Workflow

== Reading group ==

We will discuss "Meteor: Cryptographically Secure Steganography for Realistic Distributions" on 2022-02-03

https://dl.acm.org/doi/10.1145/3460120.3484550

https://eprint.iacr.org/2021/686

https://meteorfrom.space/

Questions to ask and goals to have:

What aspects of the paper are questionable?

Are there immediate actions we can take based on this work?

Are there long-term actions we can take based on this work?

Is there future work that we want to call out, in hopes that others will pick it up?

== Updates ==

Name: This week: - What you worked on this week. Next week: - What you are planning to work on next week. Help with:

- Something you need help with.

cecylia (cohosh): last updated 2022-01-20 Last week: - commented on snowflake metrics churn - lots of reviews - look at obfs4 vulnerability - documented reachability probe tests for shell - gave shell access to probe site in china - created MR to close NAT check peer connections snowflake-webext!25 This week: - more reviews - finish documenting and cleaning up shadow simulation scripts - use these snowflake + shadow scripts to do more performance testing Needs help with:

dcf: 2022-01-20

Last week:

- tried to reproduce the snowflake webextension disabling screen lock https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowf...

- did brief code inspection of probetest https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowf...

- disabled our standalone snowflake proxies to free up more CPU https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowf...

- set up another load-balanced snowflake bridge, this time with the same identity keys https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowf... https://forum.torproject.net/t/tor-relays-how-to-reduce-tor-cpu-load-on-a-si...

- noticed and posted about upstream obfs4 vulnerability fixes https://lists.torproject.org/pipermail/anti-censorship-team/2022-January/000... https://lists.torproject.org/pipermail/anti-censorship-team/2022-January/000...

Next week:

- do the load balanced snowflake bridge installation again, this time on a production-capable host

Help with:

agix:2021-01-13

Last week:

- Busy with work on Censored Planet

Next week:

- Continue work on gettor-twitter

Help with:

-

arlolra: 2022-01-20

Last week:

- [added 2022-01-20 by dcf] ALPN support for pion DTLS https://github.com/pion/dtls/pull/415

Next week:

- Figure out where in pion/webrtc ALPN should be configured and used

- Maybe add Chacha20Poly1305 to pion/dtls

https://github.com/pion/dtls#planned-features

https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowf...

Help with:

-

maxb: 2021-09-23

Last week:

- Worked on https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowf... re: utls for broker negotiation

- Had conversation with someone about upstream utls http round tripper https://github.com/refraction-networking/utls/pull/74

- Too busy with work :/

Next week:

- _Really_ want to get a PR for utls round tripper

meskio: 2022-1-20

Last week:

- metrics bridge distributor metrics for rdsys (rdsys#67)

- don't distribute private bridges in rdsys (rdsys#84)

- plan with TPA the test deployment of bridgedb (tpa/team#40581)

- add country list to circumnvetion API (rdsys#83)

- review snowlfake's event bus (snowflake!67)

- telegram bot weekly rotation of bridges

Next week:

- select the type of bridges distributed by each distributor (rdsys#63)

- test deployment for the new rdsys/bridgedb setup (rdsys#12)

Shelikhoo: 2022-01-20 Last Week: - [Merge Request Awaiting] Add SOCKS5 forward proxy support to snowflake(snowflake!64) - [Merge Request Awaiting] Multi-arch docker image support with Dockerfile refactor for probetest(probetest!1) - [Merge Request Awaiting] Add callbacks in the client for key events during snowflake connections(snowflake#40076) - [Merge Request Pending] Privacy preserving stats in Snowflake standalone proxy(snowflake#40079)

- [Discussion] Implement metrics to measure snowflake churn(snowflake#34075)

- [Discussion] Proposal: Support for Dynamic IP obfs4 bridges with unattended proxy information update(aka "Subscription")

- [Discussion] Proposal: Push Notification Based Signaling Channel

- [Investigate] Is there a better moat/snowflake SNI than cdn.sstatic.net? (snowflake#40068)

- [Investigate] Multi-instance Load Balanced Tor - Snowflake Deployment

- [Investigate] China "Anti-Fraud" Webpage Redirection Censorship(censorship-analysis#40026)

Next Week: - [Discussion] Designing the Container Layout for rdsys - [Discussion] Implement metrics to measure snowflake churn(snowflake#34075) - [Discussion] Proposal: Push Notification Based Signaling Channel - [Discussion] rdsys Deployment Environment - [Merge Request] Add callbacks in the client for key events during snowflake connections(snowflake#40076) - [Discussion] Proposal: Centralized Probe Result Collector

HackerNCoder: 2021-12-16 This week: Last/done: Setup web mirror on tor.encryptionin.space Next: Get (new VPs with) new IP and setup new web mirror on new domain

hanneloresx: 2021-3-4

Last week:

- Submitted MR for bridgestrap issue #14

Next week:

- Finish bridgestrap #14

- Find new issue to work on

Help with:

-