Hello everyone,

We held our weekly team meeting on 13 January. The meeting logs are available at: http://meetbot.debian.net/tor-meeting2/2020/tor-meeting2.2020-01-13-18.29.lo...

We released three Tor Browser updates (two stables, and one alpha) the previous week. Huge thanks to everyone involved in the process!

Summary: 1) We discussed site-specific settings again, with a focus on integrating the functionality directly into the browser (Tor Browser, but ideally Firefox) 2) We're beginning to look at UniGL[0] for possible integration into Tor Browser 3) There is a question about who we should contact when we are notified about an upcoming, unscheduled Firefox release 4) Discussed where the new namecoin integration should be announced and how feedback should be received (probably starting with tor-talk@ and going from there). 5) We are beginning to update "actual points" on our tickets on a weekly basis, instead of when the ticket is completed.

[0] https://github.com/UniGL/addon

Meeting notes: ============================== Week of January 13, 2020

Discussion: - Anything we want to highlight for the "State of the Onion" FOSDEM talk?

pospeselr: Last week: - reviews: #21952 (Onion-Location), #32778 (tor publish/subscribe fix for Windows)

- probably spent way too much time on #21952

- discussed the spec with asn

- the tldr; is that the spec itself is old and was not thoroughly thought out with how the new header should interact with all of the possible HTTP results (ie what should happen if you get an Onion-Location header with a 404, 30X redirects, etc, etc)

- they suggested we ping web folks who would actually use Onion-Location header (anarcat/hiro, our Facebook friendo, etc) and see how they would want it to work/how they would configure web services to use it

- dove into uMatrix for #30570, haven't had a chance to write up findings yet on ticket

- the tldr; uMatrix looks like a good alternative to NoScript, already supports 'scoping' rules off of domain (so we get 3rd party isolation of content blocking rules for 'free')

This week:

- #30750: actually start writing some prototype code for Tor Browser to interface with uMatrix for script isolation

GeKo: Last week: - finished #31597 Firefox 61-68 bug review (finally, and we are good \o/) - helped with the Tor Browser releases - wrote patch for preferences clean-up (#27268) - posted patches for RLBox build changes in tor-browser-build (#32434, #32435, #32436, #32437) - ticket triage - design doc update (#25021) - wrote mail to tbb-dev about potential tbb proposal changes (https://lists.torproject.org/pipermail/tbb-dev/2020-January/001033.html) This week: - mar signing key creation (#32658) - more work on RLBox integration - ticket triage - design doc update (#25021)

mcs and brade: Last week: - Sponsor 27 work: - Reviewed UX design for #19251 (error page specific to when .onion links fail). - Made progress on #19757 (permanent storage of client auth keys and associated management UI). This week/upcoming: - Create estimates for our remaining Sponsor 27 items. - #19757 (permanent storage of client auth keys and associated management UI). - We plan to post patches this week. - Make available to Antonela a “work in progress” build that contains the Sponsor 27 auth prompt and key management UI.

boklm: Last week: - Helped to build/publish new releases - Looked at blog comments - Worked on #25102 (Add script to sign nightly build mar files, generate update-responses xml and publish the new version) This week: - Review RLBox patches - Review #32456 (Add a question in support.tpo about anti-virus reporting a virus in Tor Browser) - Finish work on #25102 (script to sign nightly build mar files, generate update-responses xml and publish the new version) and remaining things for #18867 (Ship auto-updates for Tor Browser nightly channel) - Try #32768 (Make script to optimize upload and download of Tor Browser releases) - Look at macOS signing situation

sysrqb: Last week: Three releases! (thanks for everyone's help!) Began Jan 2020 roadmapping Attended Real World Cryptography Symposium This week: Working on finishing Jan 2020 roadmap, and moving onto Feb/March roadmap Reviewing tickets and reprioritising

Jeremy Rand: Last week: Pondered next steps for Namecoin a bit. Was a bit less productive than usual due to minor illness. This week: [discuss] Where should I be asking users to report their feedback on the Namecoin integration in Nightly? (So far I've just been telling people "let me know if you see any bugs", which isn't really ideal for making sure Tor sees representative feedback.)

acat: Last week: - Revised #28745: THE Torbutton clean-up - Revised #21952: Onion-location: increasing the use of onion services through automatic redirects and aliasing - Tested/checked tom's new patch for #23719: Make sure WebExtensions are spared from JIT disabling in higher security settings (Medium-High) - Patch for #32414: window.external.AddSearchProvider request goes through catch-all circuit - Revised #22919: Form tracking and OS fingerprinting This week: - Probably some more revision for the last week work. - ? #28005: Officially support onions in HTTPS-Everywhere ? - #31395: Remove inline <script> in aboutTor.xhtml - #32767: Remove Disconnect search as it is discontinued - Do estimates for remaining s27 items.

sisbell: Last Week: - #28765 - LibEvent Android - moved to using clang (this solved a bunch of problems with building tor android) - #28766 - Tor Build for Android - verified compiling with armv7 and x86_64 (still need to do proper packing for apk) This week: - #28766 - Handle packaging and input into tor-android-service, verify build runs on device

Antonela: - I should work on S27 related tickets this week: - Review #30090 - Onion Errors - Review #32645 - URL bar indicators - sysrqb: We should talk about the overlapping bits in our roadmaps. Berlin seems a good time for us to coordinate it.

Pili: Last week: - Catching up after vacations This week: - High Level Roadmapping for 2020 - Refining our capacity estimates based on 2019 data - It would be useful if people could update "Actual Points" for tickets they worked on during a month to make it easy to break up actual capacity for tickets spanning multiple months - Would people be ok with doing that? [discuss] - Getting back to a trac triage routine ==============================

Thanks, Matt

Hello everyone,

We held our weekly meeting on Monday, 03 February. The meeting log is available at http://meetbot.debian.net/tor-meeting2/2020/tor-meeting2.2020-02-03-18.29.lo....

The meeting primarily consisted of a summary of discussions we had at last week's Mozilla All-Hands meeting. We are also beginning our transition off of Mozilla's ESR train and onto the Release train.

Meeting notes: ==============================================

Week of February 3, 2020 Discussion: Future plans

mcs and brade: Last week: - Sponsor 27 work: - Responded to more review feedback in #19757 (permanent storage of client auth keys). - Continued implementation work for #19251 (onion services error page). - Code reviews. This week/upcoming: - Revise our patch for #19757 (permanent storage of client auth keys). - Follow up with the Network Team on some issues that acat found while reviewing #19757. - Continue to work on #19251 (onion services error page).

Jeremy Rand: Last week: Finished notes on Namecoin subtasks that might be relevant to Tor which we could ask for NLnet funding for, sent list to Matt in case he can easily think of something that I've left out. @sysrqb not sure if you've had a chance to glance at my email yet -- I hope I'm not bombarding you with too much info there... is the info I provided at all helpful? Have I omitted anything that jumps out at you? Got sidetracked with non-Tor-related Namecoin things that needed to be dealt with, so didn't yet finish the tor-talk mailing list post. This week: Finish the tor-talk mailing list post draft, send to Matt so he can let me know if I've inadvertently left something out.

sisbell: Last Week: - #32991/32992 - created and integrate LZMA and ZSTD compression libraries for tor. Both projects building. Also verified compiling with tor project. - #28704 - Tor Build for Android - some discussions around blocking issue. Three possible approaches: 1) Move to JNI load libraries from Android or 2) try LD_LIBRARY_PATH or 3) static compile (verified as working). Going to try 2) and fallback to 3) if it doesn’t work. This week: #28704 - test and decide on approach. Will be testing with all libraries including compression libraries. Will respond to feedback, so we can try to wrap up this week. #32993 - package tor-android-service: add new shared libraries to packaging #32200 - OpenSSL flags - this issue deals with some suggested flags for building openssl for Android. We need to make some calls on which ones we want to add #28704 - minor issue regarding use of pck-config that I want to fix

boklm: Last week: - Some reviews: #32891, #27903, #32700, #32870 - Made patch for #32493 (adding MOZ_SERVICES_HEALTHREPORT to mozconfig) - Started looking quickly at #32650 (Check translations for bogus characters) - Looked at blog comments This week: - Try to help with #32650 (Check translations for bogus characters) - Try to finish remaining things for #18867 (Ship auto-updates for Tor Browser nightly channel) - Review #32456 (Add a question in support.tpo about anti-virus reporting a virus in Tor Browser) - More reviews - Help with build of the new releases

tjr: - Ethan has cancelled our every-other-week uplift meeting and monthly meeting. - Not enough Mozilla work to justify continuing, we can do them on demand - Wrote patches for Ion/BaselineJit for Trusted Principals: https://bugzilla.mozilla.org/show_bug.cgi?id=1599226 - At All Hands worked on reproducible Windows builds: - It works in esr68; but not -central. - The differences include clang 8 vs 9, llvm-mingw, rust, and fortify_source/stack protector - glandium had mentioned a clang 9 reproducibility regression he saw on clang 9 for linux - he can't tell me if that's the same problem I have - When I reverted to clang 8 in -central it still had the same problem, so it must be something else from that list - Reverting llvm-mingw and fortify_source/stack protector broke things in a strange way - I can try one or two small things here, but otherwise I fear I will wind up having to put this aside...

acat: Last week: - Continued #28005 PoC implementation (https-everywhere .onion redirects) - Reviews: #27268, #19757, #32948 This week: - Revise #31395 (Remove inline <script> in aboutTor.xhtml). - Continue #28005 work.

sysrqb: Last week: Mozilla All Hands Future Tor Browser planning This week: Reviews, reviews, reviews Writing some emails about planning Reply to Jeremy

GeKo: Last week: Been at Mozilla's All Hands meeting Worked on RLBox (I got it working) Design doc update This week: Re-doing RLBox branch and further testing Moar design doc update

==============================================

Thanks, Matt

Hi everyone,

Last week we held our weekly meeting.

The meeting log can be read here: http://meetbot.debian.net/tor-meeting2/2020/tor-meeting2.2020-02-18-18.31.lo...

Some highlights from the meeting: - Continued the discussion on releasing Alpha-series updates more frequently - Reminder about feedback cycle deadlines - Explanation about submitting Tor Browser releases to VirusTotal, past and future

Meeting notes: ====================== Week of February 17, 2020

Discussion: - VirusTotal?

pospeselr: Last week: - reviewed #19757 - #32645 work - built testing plan - patch submitted for review - started work on #13410 - got my build machine working (so I can make builds for releases again woop woop) This week: - PRESIDENTS DAY - get out a patch for #13410 (bad ssl splash screens) - check back in on Mozilla #1532486 (Ensure media cache is memory-only when in private browsing mode) - marked needinfo so probably needs a patch update - maybe get a patch out for #33298 (HTTP form should get warning popup when coming from onion site)

acat: Last week: - #28005 (https-everywhere .onion redirects): - done test builds and patches for review - sent e-mail re: securedrop update channels and https-everywhere modifications This week: - Rebase Tor Browser patches onto mozilla-central. - Take a quick look at #32767 issues to see if it has a simple solution.

mcs and brade: Last week: - Sponsor 27 work: - Revised our patches for #19757 (permanent storage of client auth keys). - Ready to land? - Reviewed strings and commented in #33035 (create strings for onion service error pages). - Continued to work on #19251 (onion services error page). This week/upcoming: - Code review for #32645 (Update URL bar onion indicators). - More work on #19251 (onion services error page). - The implementation is nearly done; we plan to post patches for review soon. - Strings and “Learn More” URLs are blockers for us (tracked in #33035). - Compose self & peer feedback for TPI Feedback Cycle 2020-1.

tjr: - Ion Patch finally landed: https://bugzilla.mozilla.org/show_bug.cgi?id=1599226

sysrqb: Last week: Tor Browser releases Ticket triage Blog post monitoring This week: Review #19757 Review #28704 Review #31130 Consider another alpha release next week

boklm: last week: - Helped with signing/publishing of new releases - Made patches for #33283 (Add caching for the exec function in rbm) - Started looking at #33289 (Expand list of targets more efficiently) to try to make rbm faster - Tried to setup rsync to nightlies.tbb.torproject.org (#32800) but did not succeed yet - Looked at blog comments This week: - Finish setup of nightly mar signing/rsync to nightlies.tbb.torproject.org - Make patches to add mar signing key to tor-browser.git, and update app.update.url for nightly - Look at testsuite setup - Some reviews - Try to help with #32650 (Check translations for bogus characters) - Review #32456 (Add a question in support.tpo about anti-virus reporting a virus in Tor Browser)

sisbell: Last Week: - #31130 - Debian Upgrade for Android - ready for review. All platforms are building. - #33359 - Use latest version of TOPL and remove patches - ready for review - #32476 - JNI layer for tor - moved JNI class to tor android and started some work to integrate with topl This Week: -#28794 - Android build of tor - this needs review - Next priorities to work on?

pili: Last week: - mostly afk with flu This week: - Catching up on sponsor work and roadmaps - trac triage ======================

Thanks, Matt

Hi everyone,

We held our weekly meeting on 2 March. The meeting logs are available at: http://meetbot.debian.net/tor-meeting2/2020/tor-meeting2.2020-03-02-18.29.lo...

During this meeting we briefly discussed #13410 and how Alec Muffett's S.O.O.C. proposal [SOOC] overlaps with the goal of this ticket. We didn't make any decisions about this topic, however.

[SOOC] https://github.com/alecmuffett/onion-dv-certificate-proposal/blob/master/tex...

Team progress and discussion notes ================================== Discussion:

GeKo:

Last week:

-I worked mainly on RLBox backports

* I have the Linux version up for review (see: #32380 and #32389)

* I got the macOS version ready for review, too (see: #33481, #33487, #33410)

This week:

-finally getting back to design doc update

-maybe working on RLBox reproducibility (#33488) tjr: I recall glandium and/or you had ideas for https://bugzilla.mozilla.org/show_bug.cgi?id=1612035, no? Now would be a good time to add those. :)

mcs and brade: Last week: - Reviewed #32645 patch (Update URL bar onion indicators). - Worked on onion service error strings (#33035). - Investigated and closed #31984 (partial update: unable to remove directory: tobedeleted). - Worked on small issues for #19251 (onion services error page). - Reviewed February Sponsor 27 report. - Worked on peer feedback for TPI Feedback Cycle 2020-1. This week/upcoming: - Review latest #32645 patch (Update URL bar onion indicators). - Finish and post patches for #19251 (onion services error page). - Revisit #32418 (Torbrowser tells on every start, that it can't update). - Finish and submit self, peer, and team lead feedback. - Start to review #28005 (Officially support onions in HTTPS-Everywhere).

pospeselr: Last week: - patch out for #13410

- put out for code review on Mozilla

- consensus among folks who know things about certs (dkeeler, alecmuffet, arma) is seems to be that what we're trying to do here is a bad idea and needs to be more restrictive

- dkeeler pointed me to alecmuffet's SOOC cert spec ( https://github.com/alecmuffett/onion-dv-certificate-proposal/blob/master/tex... ) as well a short summary of the discussions alec has apparently already had with the Mozilla folks

- alecmuffet pointed me to a doc containing the discussions about the spec as well as how to properly implement in firefox

- tldr; removing the chain-of-trust check for onions is not sufficient, but I have a high level understanding of the 'right' way to do this:

- implement sections 1.1 through 1.6 of the SOOC spec in a new 'TrustDomain' in Firefox that is used for onions

- final update for #32645 fixing some icon scaling issues

This week:

- peer feedback

- release notes review

- #13410 updates?

so to implement 1.1 through 1.6 the suggested mozilla way should mostly just be engineering/programming work with very little investigation, but it's still a sizable chunk of time (I'd estimate ~1-2 weeks?)

[discuss] do we want to go through the effort of redoing this for S27, or should we just take what we have now, stick it behind a only-enabled-in-alpha pref and come back to this when we have less time pressure?

- braindump on ticket, maybe start prototyping this

boklm: Last week: - Some reviews: #32437, #32436, #33216, #32992, #32991, #28766, #28765, #33215 - Helped with gpg signing new alpha - Looked at #32650 (Check translations for bogus characters) - Started looking at testsuite setup - Looked at blog comments This week: - Waiting for someone to review/merge #33402 and #33403 to check if nightly updates are working - Work on testsuite setup - More reviews - Submit feedback

sysrqb: Last week: Progress on getting macOS signing/notarization on the hosted signing machine Investigated CSS font-embedding on Safest security level Spent some time on the OTF grant Responded to Jeremy Looked at some possible paths for TLS cert warnings This week: Releasing 9.5a6 Code reviews Create a rough roadmap for the next one-two months (with Pili) Review S27 summary ...

sisbell: Last Week: - Android for Tor - a number of updates, testing. Following merged: #33216, #33215, #32992, #32991. Left with getting OpenSSL, Libevent and Tor project changes approved and merged. - #32476: JNI got build working in tbb - Fenix investigations around dependencies and latest gradle This Week: - Respond and fixes based on reviews to #28764, #28765, #28766 (Tor) - #28765: LibEvent: make small change to handle all platforms - Upgrade tor binaries to 4.x in tor-android-services - #32476 - integrate and test with TOPL, open branch for review

acat: Last week: - Rebase Tor Browser patches onto mozilla-central. This week: - Fix/polish a few remaining things of the mozilla-central patches rebase and create ticket for review. - Write feedback. - Revise #21952 (Onion-Location) to support meta tags. - Investigate #33342 (Disconnect search addon causes error at startup)

pili: Last week: - S27 February report - S27 release planning - GSoC wrangling This week: - Browser team February report - Start of month housekeeping - More GSoC wrangling - Work on developer portal - Tor Browser Release meeting this week

Jeremy Rand: Last week: - Posted on tor-talk asking for feedback on Namecoin integration in Nightly. - Looks like that thread attracted the attention of a journalist: https://linuxreviews.org/The_Nightly_Tor_Browser_Build_Has_Support_For_Namec... - More progress on the linux-arm port of Tor Browser... figured out why the Firefox build was failing with assembler errors; managed to get a working Tor Browser binary built in rbm. This week: - Await feedback on tor-talk thread. - Maybe more linux-arm port stuff. - File ticket about Namecoin TLS support. ==================================

Thanks, Matt

Hi everyone,

On 30 March we held our weekly meeting. The logs from the meeting are available at http://meetbot.debian.net/tor-meeting2/2020/tor-meeting2.2020-03-30-17.59.lo...

The highlights from that meeting are:

1) Tor Browser should provide a mechanism for disabling auto-updating, and this will come from Firefox's Enterprise Policy system.

2) More Namecoin integration discussions

====================================== Discussion: Retrospective

pospeselr:

Last week:

- #21952 code review

- #33534 -> auditing new/added about:config prefs

- made it through half the diff between beta75 and esr68

- #33707 -> updated circuit display icon

This week:

- #33534

- finish the pref audit

- consolidate notes into actionable tasks

mcs and brade: Last week: - Code reviews. - Spent a little time on #33667 (macOS permission change). - Closed #30732 ("Your Firefox is critically out of date" banner). - #29630 (TorBrowser creates empty directory in "/tmp”). - #32418 (on every start TB complains that it can't update). - Is everyone okay with approach 2? (see https://trac.torproject.org/projects/tor/ticket/32418#comment:9) This week/upcoming: - Review latest patch for #21952 (Onion-Location). - Review latest patch for #28005 (.onions in HTTPS-E). - Review rebased updater patches (#33533). - #32418 (on every start TB complains that it can't update).

sysrqb: Last week: 9.0.7 release and 9.5a9 prep This week: 9.5a9 release (thanks boklm and antonela!) Look at H1 report Look at S27 tickets and catch up on that progress/status Catch up on Fenix and Migration status Misc. onion services-related emails

boklm: Last week: - Helped with new release - Started doing some tests for quilt/patches workflow - Monitored blog comments - Looked at #33702 (RSA_get0_d could not be located in the dynamic link library tor.exe) This week: - Finish publishing 9.5a9 - Help with build of next releases - Some reviews - Work on proposal for quilt workflow - Work on testsuite setup - Work on setup of automatic rebasing of tor-browser patches on mozilla-central

Pili: Last week: - S58 organisation and set up - S27 wrap up - Trac triage - Figuring out S27 follow up work for Tor Browser team This week: - Tor Browser release meeting - More S27 wrap up and monthly report - Roadmapping for next few months - Trac triage and end/start of month maintenance - Figuring out S27 follow up work for Tor Browser team

sisbell: Last Week: Fenix #33760: Update rbm,conf for latest NDK (in-review but will certainly require additional changes before final) #33564: Upgrade ZSTD to use Android NDK 21 (in-review) #33562: Upgrade lib event to use android NDK (complete but need to update ticket) #33568: Upgrade TOPL to use latest toolchain (complete) #33626: Add TBB project for GeckoView - working through this #33565: Upgrade LZMA to use Android NDK 21 (works without change) closed this issue Android Tor - tickets are still in review so didn’t make any changes This Week: # Follow up on reviews of Android Tor Support (priority) Fenix #33564: Upgrade tor to use Android NDK 21 #33626: Continue work in TBB for GeckoView #33559: Upgrade android-tor-service to use latest android toolchain

acat: Last week: - Revised #28005 (Officially support onions in HTTPS-Everywhere to use securedrop testing update channel.) - Revised #21952 (Onion-location) - Got a tor-browser-build working for #33533 (Rebase Tor Browser esr68 patches on top of mozilla-central) - Manually rebased to latest central - Added some children tickets. This week: - Fix Tor Browser unit tests for #33533 branch (mozilla-central): - #30832 and children - Possibly some (hopefully simple) revisions of #21952 (Onion-Location) and #28005 (Https-Everywhere .tor.onion). - Possibly help with other tasks related to migration to rapid release cycle.

Jeremy Rand: Last week: - Got more feedback on Reddit for Namecoin integration. - Filed #33749, posted patch. - Filed #33752, debugged it a bit. This week: - Relay r/Namecoin test reports to tor-talk mailing list. - Hopefully get more feedback on Namecoin integration via Twitter. ======================================

Thanks, Matt

Hi everyone,

Today we held our weekly meeting. The meeting was held on Jitsi Meet but some notes are documented at http://meetbot.debian.net/tor-meeting2/2020/tor-meeting2.2020-04-13-17.58.lo...

Highlights from the meeting: 1) My mic worked this week (yay) and we saw/heard each other (yay)

2) Last week 9.5a11 was released and that included new S27 Onion Service usability improvements. We received a little feedback on this, but we need more. Some websites are beginning a trial with using onion-location.

3) The Anti-Censorship team asked about the status of #11698 for distributing the Tor Browser Manual within Tor Browser (as well as on the website). We put this on the roadmap in October 2020.

4) Maybe once per month we'll dedicate a portion of the meeting time to discussing user/usability feedback. This should help us prioritize bugs and improve Tor Browser, overall.

================================ Discussion: - https://bugs.torproject.org/11698 < Can we consider this for some point post ESR transition? - Can we have a space once a month to share and discuss any user testing results we may have had during the previous month?

mcs and brade: Last week: - Finished reviewing the rebased updater patches (#33533). - Built rebased browser on macOS and did some quick tests (#33533). - Researched some Tor Launcher changes that are needed post-ESR68. - acat will fix #32174 (replace XUL <textbox> with html:input). - Commented in #33809 (Fast-Forward Tor Browser Versions). This week/upcoming: - #32418 (on every start TB complains that it can't update). - #33671 (Update "Get Involved" url in about:tor).

sisbell: Last Week: #33877: Disable Samples and Regression tests For Libevent Build - removes these for platform builds (in review) #28765: LibEvent Build for Android - changed some config options, broke out some changes into #33877 (in review) #31499: Update libevent to 2.1.11-stable - made minor change to build with tor on linux (merged) #28766: Tor Build for Android - minor change to use changes in #31499 (in review) - Investigation in the control.txt file not being created. - Linux laptop is becoming unstable with shutdowns so spent time in transition to MacBook. This Week: # Follow up on reviews of Android Tor Support (priority) Fenix - #33626 Add TBB project for GeckoView

pili: Last week: - S58 triage and organisation - Usual trac triage - Wrote up some more of my certificates for onions "article" - S27 work completion report This week: - Tor Browser March report - S58 kick off call with sponsor - gitlab migration meeting -

boklm: Last week: - Helped with releases - Some reviews: #33845, #33749, #31499 - Fixed an issue with nightly updates (#33864) - Monitored blog comments This week: - Some reviews - Update patch for #25102 (Add script to sign nightly build mar files ...) and open tickets for things discussed in the comments - Work on testsuite setup - Work on setup of automatic rebasing of tor-browser patches on mozilla-central - Work on proposal for quilt workflow

pospeselr:

Last week:

- #33534 (FF release notes/tickets review)

- finished investigating outstanding issues and filed tickets for work that needs to be done (parented to #33534)

This week:

- #33791 - Evaluate Firefox tests

acat: Last week: - Revised #33533 (Rebase Tor Browser esr68 patches on top of mozilla-central) - #33838: Update Onion-Location in tor-browser-spec - Spent some time investigating issue with #30832: Fix tor-browser tbb-tests - #33845: namecoin-torbutton.patch needs to be rebased - #33862: Fix usages of createTransport API - #33890: Rename .xul to .xhtml - #33892: Add brandProductName to torbutton brand localization files - #32174: replace XUL <textbox> with html:input Next week: - #31918: Rebase and squash mobile/android patches into desktop - Maybe some children of #33533 (Rebase Tor Browser esr68 patches on top of mozilla-central) - Spend 1-2 hours trying to reproduce https-everywhere bug that dgoulet experienced with #28005.

sysrqb: Last week: Released 9.5a11 and 9.0.9 Ticket cleanup/triage Code review: #28765, #28766, #32993, #33685 This week: Merge tor build for android Review rebased tor browser patches Review migration tickets

Jeremy Rand: Last week: - Tagged Electrum-NMC 3.3.9 (contains a fix for #33752 among other improvements) - Fixed rbm-built clang in #32355 - My mail server was down most of the week, so couldn't send r/Namecoin test reports to tor-talk. This week: - Send in a tor-browser-build patch that pulls in Electrum-NMC 3.3.9 - Relay r/Namecoin test reports to tor-talk mailing list. - Hopefully get more feedback on Namecoin integration via Twitter. - Review patch for #32038. - Review patch for #30334. ================================

Stay safe/healthy/sane everyone, Matt