The Tor Project issueshttps://gitlab.torproject.org/groups/tpo/-/issues2022-01-20T01:36:49Zhttps://gitlab.torproject.org/tpo/web/support/-/issues/263[HTTPS] Duplicate phrase2022-01-20T01:36:49Zchampionquizzerchampionquizzer@torproject.org[HTTPS] Duplicate phraseAs a user on [twitter](https://twitter.com/dejacrypto/status/1444273178549891076) pointed out, on https://support.torproject.org/https/https-1/, the phrase *"The/This visualization shows what information is visible to eavesdroppers with ...As a user on [twitter](https://twitter.com/dejacrypto/status/1444273178549891076) pointed out, on https://support.torproject.org/https/https-1/, the phrase *"The/This visualization shows what information is visible to eavesdroppers with and without Tor Browser and HTTPS encryption."* appears twice in subsequent lines.championquizzerchampionquizzer@torproject.orgchampionquizzerchampionquizzer@torproject.orghttps://gitlab.torproject.org/tpo/web/research/-/issues/40004Update research-web docs to point to gitlab not git2021-10-13T19:00:29ZRoger DingledineUpdate research-web docs to point to gitlab not gitWe're migrating away from jenkins, and using that chance to migrate the research-web git repo from git.tpo to gitlab.tpo as well.
When the dust settles, we should go through whatever meager documentation there is (I see a README file fo...We're migrating away from jenkins, and using that chance to migrate the research-web git repo from git.tpo to gitlab.tpo as well.
When the dust settles, we should go through whatever meager documentation there is (I see a README file for example) and make sure it points to the right git repos, and also make sure it accurately describes the auto build process for the website.
Anybody who is reading this ticket who wants to do these steps, please do. :)https://gitlab.torproject.org/tpo/tpa/team/-/issues/40421enhance incident response procedures2024-02-13T16:04:39Zanarcatenhance incident response procedurestoday we had an ... interesting situation with the puppet infrastructure. while we have actually recovered pretty well, all things considered, it would be important to enhance our response to such situation so that they are less stressfu...today we had an ... interesting situation with the puppet infrastructure. while we have actually recovered pretty well, all things considered, it would be important to enhance our response to such situation so that they are less stressful and why not, even more "fun", if i can be so daring.
some background reading:
* [Got game? Secrets of great incident management](https://bitfieldconsulting.com/blog/got-game-secrets-of-great-incident-management)
* [pager duty incident response documentation](https://response.pagerduty.com/)
some ideas:
* have an issue template for incidents (so, in git, which requires a git repository here, but maybe it's finally time to merge the wiki repo here anyways), available offline
* run simulations/games
* have post-mortem templates, here's the [pager duty template](https://response.pagerduty.com/after/post_mortem_template/)
* gitlab has some [incident management primitives](https://docs.gitlab.com/ee/operations/incident_management/) including aforementioned "[incidents](https://docs.gitlab.com/ee/operations/incident_management/incidents.html)" (which are really just issues)...
* ... but also [integrations](https://docs.gitlab.com/ee/operations/incident_management/integrations.html) which is especially interesting considering they have *native* Prometheus integration, which might require switching from nagios to prometheus (#29864)
anyways, the core idea here is:
1. have incident roles (note-taker, driver, comms, etc)
2. incident and post-mortem templates
3. run gameshttps://gitlab.torproject.org/tpo/web/community/-/issues/230[onion services] Update BBC onion site2021-09-28T12:02:24ZGus[onion services] Update BBC onion siteBBC upgraded their onion site to v3. Let's update the featured onions page:
https://www.bbcnewsd73hkzno2ini43t4gblxvycyac5aw4gnv7t2rccijh7745uqd.onion/
https://community.torproject.org/onion-services/#featured-onionsBBC upgraded their onion site to v3. Let's update the featured onions page:
https://www.bbcnewsd73hkzno2ini43t4gblxvycyac5aw4gnv7t2rccijh7745uqd.onion/
https://community.torproject.org/onion-services/#featured-onionshttps://gitlab.torproject.org/tpo/web/support/-/issues/262[Tor Browser] Add question "How do I install Tor Browser on Windows Pro?"2023-11-06T19:40:31Zchampionquizzerchampionquizzer@torproject.org[Tor Browser] Add question "How do I install Tor Browser on Windows Pro?"On Windows 10 Pro, by default, users cannot install non-Microsoft Store apps. There are some added steps for installing Tor Browser:
1. Go to 'Start'
2. Go to 'Settings'
3. Navigate to 'Apps'
4. Navigate to 'Apps and features'
5. Fro...On Windows 10 Pro, by default, users cannot install non-Microsoft Store apps. There are some added steps for installing Tor Browser:
1. Go to 'Start'
2. Go to 'Settings'
3. Navigate to 'Apps'
4. Navigate to 'Apps and features'
5. From the dropdown menu against 'Choose where to get apps' select any option beside 'The Microsoft Store only'.
6. Then launch the Tor Browser Windows binary and it should install as intended.
Out of *(1) Anywhere, (2) Anywhere, but warn me before installing an app that's not from MS Store and (3) Anywhere, but let me know if there's a comparable app in MS Store*, keeping in mind the security implications of each of the options, I'm not sure which one we should recommend (I am looking for feedback from regular Windows Pro users on this!)ebanamebanam@torproject.orgebanamebanam@torproject.orghttps://gitlab.torproject.org/tpo/web/support/-/issues/261[Censorship] Recommend users to include 'private bridges' in the subject line...2021-09-22T18:32:19Zchampionquizzerchampionquizzer@torproject.org[Censorship] Recommend users to include 'private bridges' in the subject line of the emailOn frontdesk, tickets with the subject/body in non-ASCII characters ends up in spam and that includes emails from our Chinese users writing the email in their locale. In https://support.torproject.org/censorship/connecting-from-china/, w...On frontdesk, tickets with the subject/body in non-ASCII characters ends up in spam and that includes emails from our Chinese users writing the email in their locale. In https://support.torproject.org/censorship/connecting-from-china/, we can suggest users to include *"private bridges"* in the subject line.
*...3. Private and unlisted obfs4 bridges: users will need to request a private bridge to frontdesk@torproject.org **with "private bridges" in the subject line** or...*championquizzerchampionquizzer@torproject.orgchampionquizzerchampionquizzer@torproject.orghttps://gitlab.torproject.org/tpo/web/support/-/issues/260[Get in Touch] Update the irc nick verification docs2022-06-30T13:30:57Zchampionquizzerchampionquizzer@torproject.org[Get in Touch] Update the irc nick verification docsWith the latest changes to oftc with regards to nick verification (see: https://github.com/oftc/oftc-web/blob/gh-pages/_posts/2021-09-15-update.md), running `/msg nickserv checkverify` is not required anymore. We need to update the docum...With the latest changes to oftc with regards to nick verification (see: https://github.com/oftc/oftc-web/blob/gh-pages/_posts/2021-09-15-update.md), running `/msg nickserv checkverify` is not required anymore. We need to update the documentation reflecting that fact, here: https://support.torproject.org/get-in-touch/why-i-cant-join-tor-channels/championquizzerchampionquizzer@torproject.orgchampionquizzerchampionquizzer@torproject.orghttps://gitlab.torproject.org/tpo/web/support/-/issues/259Add reproducible builds verification notes for Android to our verifying signa...2022-01-20T19:20:29ZGeorg KoppenAdd reproducible builds verification notes for Android to our verifying signature pageOn https://www.torproject.org/docs/verifying-signatures.html.en#BuildVerification we outline how to make a link between the bundles we actually ship (including update files) to the artifacts one gets by following our reproducible builds ...On https://www.torproject.org/docs/verifying-signatures.html.en#BuildVerification we outline how to make a link between the bundles we actually ship (including update files) to the artifacts one gets by following our reproducible builds path.
So far, this contains instructions for Linux and Windows bundles. macOS is tricky and dealt with in legacy/trac#18925.
This ticket is to add respective instructions for our .apk file(s) we ship.https://gitlab.torproject.org/tpo/team/-/issues/41TPA-RFC-18: Tor security policy2023-11-03T22:44:22ZtraumschuleTPA-RFC-18: Tor security policyTor Project currently has not general security policy. We need to work out a security policy that covers all of Tor:
See https://trac.torproject.org/projects/tor/ticket/13968#comment:27Tor Project currently has not general security policy. We need to work out a security policy that covers all of Tor:
See https://trac.torproject.org/projects/tor/ticket/13968#comment:27https://gitlab.torproject.org/tpo/web/support/-/issues/258Explain what the various Android download options mean2023-04-03T20:40:24Zkulsoom.zahrakulsoomzahra24@gmail.comExplain what the various Android download options meanTor should be easy to use for all. The various download options available for Android (such as _aarch64, arm_ etc) don't make any sense to layman.
![tor](/uploads/eabebcbf1b0fcfa4b8e0608caee9ee2b/tor.png)Tor should be easy to use for all. The various download options available for Android (such as _aarch64, arm_ etc) don't make any sense to layman.
![tor](/uploads/eabebcbf1b0fcfa4b8e0608caee9ee2b/tor.png)donutsdonutshttps://gitlab.torproject.org/tpo/core/tor/-/issues/40467fingerprint-ed25519 file is not documented in the manpage FILES section2021-09-16T14:21:52Znusenufingerprint-ed25519 file is not documented in the manpage FILES sectionThe file fingerprint-ed25519 got added in #30642
but the man page has not been updated for it.
When adding this entry the description of the fingerprint file
should get more specific.
> DataDirectory/fingerprint
> Only used...The file fingerprint-ed25519 got added in #30642
but the man page has not been updated for it.
When adding this entry the description of the fingerprint file
should get more specific.
> DataDirectory/fingerprint
> Only used by servers. Contains the fingerprint of the server’s identity key.
..the fingerprint of the server's RSA identity key.Tor: 0.4.7.x-freezehttps://gitlab.torproject.org/tpo/web/support/-/issues/257[Misc] Mention the anon-ticket portal in 'How to report bugs'2021-09-08T20:20:38Zchampionquizzerchampionquizzer@torproject.org[Misc] Mention the anon-ticket portal in 'How to report bugs'On [How to Report a Bug or Give Feedback (in the section 'GitLab')](https://support.torproject.org/misc/bug-or-feedback/#gitlab), I believe, we should mention the [Anon-Ticket Portal](https://anonticket.onionize.space/) and how it can be...On [How to Report a Bug or Give Feedback (in the section 'GitLab')](https://support.torproject.org/misc/bug-or-feedback/#gitlab), I believe, we should mention the [Anon-Ticket Portal](https://anonticket.onionize.space/) and how it can be used to submit bug reports in an anonymous manner.https://gitlab.torproject.org/tpo/core/tor/-/issues/40459Bridge-Relay HOWTO wiki update for distros with apparmor, escalade log level ...2022-10-24T20:47:43Zs7rBridge-Relay HOWTO wiki update for distros with apparmor, escalade log level when transport plugin process is killedThe bridge howto wiki instructions we currently have will not apply in Debian Buster or Bullseye (because of apparmor, and I assume the effect is the same on any distro with apparmor enabled).
Basically, the package Tor from deb.torproj...The bridge howto wiki instructions we currently have will not apply in Debian Buster or Bullseye (because of apparmor, and I assume the effect is the same on any distro with apparmor enabled).
Basically, the package Tor from deb.torproject.org comes with apparmor settings in `/etc/apparmor.d/abstractions/tor` that includes `/usr/bin/obfs4proxy Pix,` , but in case obfs4proxy executable is installed at a different path, it won't work:
audit[2994]: AVC apparmor="DENIED" operation="exec" profile="system_tor" name="/usr/local/bin/obfs4proxy" pid=2994 comm="tor" requested_mask="x" denied_mask="x" fsuid=107 ouid=0
kernel: audit: type=1400 audit(1630685584.124:19): apparmor="DENIED" operation="exec" profile="system_tor" name="/usr/local/bin/obfs4proxy" pid=2994 comm="tor" requested_mask="x" denied_mask="x" >
Also, Tor will not complain about it in the log if set to default `notice` level. If you switch to `info` :
[info] process_exec(): Starting new process: /usr/local/bin/obfs4proxy
[info] launch_managed_proxy(): Managed proxy at '/usr/local/bin/obfs4proxy' has spawned with PID '1856'.
These should be set to `warn` level I guess?
The simple fix is to edit `/etc/apparmor.d/abstractions/tor` and add/edit the obfs4proxy path if different from `/usr/bin/obfs4proxy` (which is the default) and reload apparmor service. We should add this extra step in the bridge relay wiki howto and explain that it is necessary if the pluggable transport is installed in a different path than `/usr/bin/$transport` in addition to the libcap2-bin step and `NoNewPrivileges=no` step in `tor@default.service` and `tor@.service`.https://gitlab.torproject.org/tpo/web/support/-/issues/252bandwidth-shaping script link Path not found2022-06-14T15:01:36Zcypherpunksbandwidth-shaping script link Path not foundon page:
https://support.torproject.org/operators/bandwidth-shaping/
The link from last script, leads to nowhere.
https://gitweb.torproject.org/tor.git/tree/contrib/operator-tools/linux-tor-prio.sh
Path not foundon page:
https://support.torproject.org/operators/bandwidth-shaping/
The link from last script, leads to nowhere.
https://gitweb.torproject.org/tor.git/tree/contrib/operator-tools/linux-tor-prio.sh
Path not foundhttps://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/issues/40065Old CentOS Linux snowflake: go.mod at revision v1.1.0: unknown revision v1.1.02022-10-13T17:50:19ZslrslrOld CentOS Linux snowflake: go.mod at revision v1.1.0: unknown revision v1.1.0Hello, i have followed https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/wikis/home#source-code and "go build" output:
`go: git.torproject.org/pluggable-transports/goptlib.git@v1.1.0: reading git.torproj...Hello, i have followed https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/wikis/home#source-code and "go build" output:
`go: git.torproject.org/pluggable-transports/goptlib.git@v1.1.0: reading git.torproject.org/pluggable-transports/goptlib.git/go.mod at revision v1.1.0: unknown revision v1.1.0
`
also in the tutorial i would replace:
Build the Snowflake proxy.
```
go build
```
by:
Build the Snowflake proxy.
```
cd snowflake;go build
```
as it does not work without going to the git cloned dir.https://gitlab.torproject.org/tpo/web/support/-/issues/246Improve and update HTTP or SOCKS Proxy documentation2021-10-07T12:57:16ZemmapeelImprove and update HTTP or SOCKS Proxy documentationIn https://support.torproject.org/tbb/tbb-47/ we are giving too much information, and we are not providing simple instructions for users. We should:
- [x] Remove mentions of HTTPAuthenticator that is deprecated in favor of the HTTPS fla...In https://support.torproject.org/tbb/tbb-47/ we are giving too much information, and we are not providing simple instructions for users. We should:
- [x] Remove mentions of HTTPAuthenticator that is deprecated in favor of the HTTPS flavor
- [ ] Add a code snippet as an example on how to connect to a proxy with authentication
- [x] Maybe link to https://2019.www.torproject.org/docs/tor-manual.html.en#HTTPSProxyAuthenticator
- [ ] Make everything simpler to understandhttps://gitlab.torproject.org/tpo/web/support/-/issues/245README.md - Update wiki pages link2021-09-14T16:16:48ZGusREADME.md - Update wiki pages linkUpdate all the docs references to the new wiki:
```
## Contributing
- [Compile a local version of the site](http://eweiibe6tdjsdprb4px6rqrzzcsi22m4koia44kc5pcjr7nec2rlxyad.onion/web/tpo/wikis/Compiling-a-local-version-of-the-website) (c...Update all the docs references to the new wiki:
```
## Contributing
- [Compile a local version of the site](http://eweiibe6tdjsdprb4px6rqrzzcsi22m4koia44kc5pcjr7nec2rlxyad.onion/web/tpo/wikis/Compiling-a-local-version-of-the-website) (clone the correct repository).
- [Developing on the site](http://eweiibe6tdjsdprb4px6rqrzzcsi22m4koia44kc5pcjr7nec2rlxyad.onion/web/tpo/wikis/How-to-develop-on-the-website)
- [How to write the content - edition tips and best practices for content creation](http://eweiibe6tdjsdprb4px6rqrzzcsi22m4koia44kc5pcjr7nec2rlxyad.onion/torproject/web/tpo/wikis/Writing-the-content)
- [Documentation on how to install, modify and use websites from the Tor project.](http://eweiibe6tdjsdprb4px6rqrzzcsi22m4koia44kc5pcjr7nec2rlxyad.onion/tpo/web/wiki)
```
https://gitlab.torproject.org/tpo/web/wiki/-/wikis/home
Source: https://gitlab.torproject.org/tpo/web/support/-/blob/master/README.mdemmapeelemmapeelhttps://gitlab.torproject.org/tpo/web/support/-/issues/243Add moat to the glossary2021-09-01T14:45:05ZemmapeelAdd moat to the glossaryWe should add a definition of moat for the glossaryWe should add a definition of moat for the glossaryhttps://gitlab.torproject.org/tpo/network-health/team/-/issues/111Remove duplicated docs after #101 got fixed and re-order content2022-02-28T14:17:57ZGeorg KoppenRemove duplicated docs after #101 got fixed and re-order content@gaba fixed #101 and we now need to make sure to get rid of duplicated and outdated docs in our wiki. We should re-order content as we see fit while we are at it. This should be done before we tackle #77.@gaba fixed #101 and we now need to make sure to get rid of duplicated and outdated docs in our wiki. We should re-order content as we see fit while we are at it. This should be done before we tackle #77.Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/web/team/-/issues/11update documentation for local lektor build2021-10-14T13:48:02Zemmapeelupdate documentation for local lektor buildWe need to make some changes our documentation for lektor, as explained by
Derek Cameron in https://lists.torproject.org/pipermail/tor-community-team/2021-August/000414.htmlWe need to make some changes our documentation for lektor, as explained by
Derek Cameron in https://lists.torproject.org/pipermail/tor-community-team/2021-August/000414.htmlemmapeelemmapeel