The Tor Project issueshttps://gitlab.torproject.org/groups/tpo/-/issues2022-08-15T09:40:03Zhttps://gitlab.torproject.org/tpo/network-health/metrics/exonerator/-/issues/40001Add ops instructions to restart or fix the server2022-08-15T09:40:03ZHiroAdd ops instructions to restart or fix the serverExonerator has been OOM-ing quite a bit lately and we have noticed we are missing ops instructions on how to restart and "fix" it if there are issues.
These should be added to the wiki.Exonerator has been OOM-ing quite a bit lately and we have noticed we are missing ops instructions on how to restart and "fix" it if there are issues.
These should be added to the wiki.HiroHirohttps://gitlab.torproject.org/tpo/web/lego/-/issues/48Add the lektor-markdown-highlighter plugin2022-08-02T22:28:57ZKezAdd the lektor-markdown-highlighter pluginOn IRC @gus suggested adding highlighting to markdown code blocks. Lektor has the [lektor-markdown-highlighter](https://github.com/lektor/lektor-markdown-highlighter) plugin that enables syntax highlighting in markdown code blocks, and p...On IRC @gus suggested adding highlighting to markdown code blocks. Lektor has the [lektor-markdown-highlighter](https://github.com/lektor/lektor-markdown-highlighter) plugin that enables syntax highlighting in markdown code blocks, and provides a `get_pygments_stylesheet()` macro for generating a pygments CSS file.
We haven't stopped symlinking the entire `lego/packages` directory (per TPA RFC 30), but enabling this plugin on every site won't have any effects unless the `get_pygments_stylesheet()` macro is used.
- [x] build a source distribution from the 0.3.2 tag (commit b4425dc)
- [x] verify the code in the source distribution is safe
- [x] add to legohttps://gitlab.torproject.org/tpo/web/community/-/issues/281Onion-Location documentation is a bit confusing and hard to translate2023-08-02T05:17:59ZemmapeelOnion-Location documentation is a bit confusing and hard to translatereporter by translator, confirmed by me.
The documentation about Onion-Location https://community.torproject.org/onion-services/advanced/onion-location/ is a bit confusing.
It seems different documentations have been merged on the page...reporter by translator, confirmed by me.
The documentation about Onion-Location https://community.torproject.org/onion-services/advanced/onion-location/ is a bit confusing.
It seems different documentations have been merged on the page, and the examples change names along the differect sections.
For example the onion address is called: `<your-onion-address>.onion`, http://{$TOR_HOSTNAME}, <your-onion-service-address.onion>, etc.
There are also some 'fake' paths in the style of `"/path/to/www.example.com.cert"` that are difficult to translate, particularly for LTR or different character languages.
Maybe it is better to start the page with some example URL and onion address and use them along the different configuration and commands of the howto.https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40543Move reproducible builds documentation into a modularized world2022-12-22T15:49:06ZGeorg KoppenMove reproducible builds documentation into a modularized worldFor lack of a better component I am filing a ticket here for now: where do we document the whole new setup now that tor-browser-build becomes just a project among others? There will be tor-browser-build related documentation changes, sur...For lack of a better component I am filing a ticket here for now: where do we document the whole new setup now that tor-browser-build becomes just a project among others? There will be tor-browser-build related documentation changes, sure. But we'd benefit from a general outline for someone who wanted to get started and use rbm for their project in a modularized world. While I like the idea of having "Reproducible builds at Tor", say, on a wiki page in /applications/team it might not be the right place for that general part.https://gitlab.torproject.org/tpo/network-health/metrics/website/-/issues/40058Mention onionperf "a" instances using guards2022-07-08T11:42:23ZGeorg KoppenMention onionperf "a" instances using guardshttps://metrics.torproject.org/onionperf-buildtimes.html says "We disable Entry Guards in the Tor client configuration used by OnionPerf, to ensure a new guard is selected for each circuit we measure." However, that's not true for the "a...https://metrics.torproject.org/onionperf-buildtimes.html says "We disable Entry Guards in the Tor client configuration used by OnionPerf, to ensure a new guard is selected for each circuit we measure." However, that's not true for the "a" instances which do use entry guards and rotate them every 12h. We should update the text on the website accordingly.Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/applications/team/-/issues/11Update QA and Testing content on our HACKING document2022-06-23T22:20:56ZGeorg KoppenUpdate QA and Testing content on our HACKING documentOur QA and Testing content on our HACKING page needs some update.Our QA and Testing content on our HACKING page needs some update.https://gitlab.torproject.org/tpo/web/support/-/issues/305Onion Services glossary entry misses features2023-01-18T18:33:19ZemmapeelOnion Services glossary entry misses featuresIt seems the list of advantages of Onion Services over ordinary services on the non-private web got lost at some point in the Glossary, as the text ends like this:
`Onion services offer advantages over ordinary services on the non-priva...It seems the list of advantages of Onion Services over ordinary services on the non-private web got lost at some point in the Glossary, as the text ends like this:
`Onion services offer advantages over ordinary services on the non-private web, including:`
We should add the advantages back, maybe recovering them from the trac glossary.
Ref> https://support.torproject.org/glossary/onion-services/
Reported by translator Kate_, thanks!https://gitlab.torproject.org/tpo/core/arti/-/issues/508gitlab-pages is easy to forget to update, and interacts badly with coverage2022-12-13T20:44:03Ztrinity-1686agitlab-pages is easy to forget to update, and interacts badly with coveragethe [gitlab pages](https://tpo.pages.torproject.net/core/arti/) for Arti says it's still 0.3, but 0.4 is available.
Updating the `pages` branch would cause coverage report to disappear (and reappear on next scheduled CI job). I think t...the [gitlab pages](https://tpo.pages.torproject.net/core/arti/) for Arti says it's still 0.3, but 0.4 is available.
Updating the `pages` branch would cause coverage report to disappear (and reappear on next scheduled CI job). I think this branch should not exist, and the website should be directly on `main`. This would make the release process easier (only one branch to update), and would make the CI less strange in how deploying pages is done.https://gitlab.torproject.org/tpo/core/torspec/-/issues/151pluggable transport specs need to be more consistent about quoting2022-06-17T18:05:54ZTaylor Yupluggable transport specs need to be more consistent about quotingThere's some inconsistency among the specs (and code doesn't necessarily match the specs either) about how pluggable transports quote or escape special characters in transport arguments. See legacy/trac#12930 for additional background.
...There's some inconsistency among the specs (and code doesn't necessarily match the specs either) about how pluggable transports quote or escape special characters in transport arguments. See legacy/trac#12930 for additional background.
Proposal:
* Explicitly disallow whitespace (or control characters for that matter) in keys or values of PT arguments. (No PT does this now that I know of, and people with Unix-ish backgrounds are likely to avoid using whitespace in this context anyway.)
* Explicitly disallow `=` and `\` in keys of PT arguments. (I'm assuming PT designers have more flexibility in choosing keys than value encodings, but if this poses a problem for someone please speak up.)
* Allow but discourage `=` in values of PT arguments. (If you encode something in base64 or base32, try to truncate the trailing padding.)
* Allow but discourage `\` in values of PT arguments.
* Require `\` to be escaped by `\` (in addition to escaping `,`, which is already required) in `SMETHOD ARGS` and `transport` lines of `extra-info` documents. (Almost everywhere else I've seen that uses `\` for escaping also requires that `\` itself be escaped, and it's closer to what people already expect. goptlib already implemented this despite it not being specified in `pt-spec.txt`)
* Do not require `=` to be escaped by `\` in `SMETHOD ARGS` and `transport` lines of `extra-info` documents.
* Do not require any PT argument characters to be escaped in BridgeDB output or `Bridge` lines in `torrc`. (Any `\` characters stand for themselves. This requires the fewest changes to existing `tor` code.)https://gitlab.torproject.org/tpo/core/torspec/-/issues/142Revocation process for authority keys2022-07-18T17:53:10ZNick MathewsonRevocation process for authority keysRight now, we don't have a proposal that explains how to do revocation on an authority's signing keys. We should write one, and eventually implement it.Right now, we don't have a proposal that explains how to do revocation on an authority's signing keys. We should write one, and eventually implement it.https://gitlab.torproject.org/tpo/core/torspec/-/issues/130clarify socks-extensions.txt spec resolve command and response2022-07-18T17:54:03Zcypherpunksclarify socks-extensions.txt spec resolve command and responsehttps://gitweb.torproject.org/torspec.git/tree/socks-extensions.txt
The spec leaves multiple open questions:
- What does "initiates a remote lookup of the hostname" mean?
The spec could be improved by saying "A" or/and "AAAA" DNS looku...https://gitweb.torproject.org/torspec.git/tree/socks-extensions.txt
The spec leaves multiple open questions:
- What does "initiates a remote lookup of the hostname" mean?
The spec could be improved by saying "A" or/and "AAAA" DNS lookup is performed.
- There is no information about the response in torspec.git/tree/socks-extensions.txt at all
related:
legacy/trac#31115
https://lists.torproject.org/pipermail/tor-dev/2019-July/013931.htmlhttps://gitlab.torproject.org/tpo/web/community/-/issues/280add information about contacting new relay operators in the requirements2023-04-05T19:00:27Zemmapeeladd information about contacting new relay operators in the requirementsThere was a thread the other day in reddit about tor project wanting to contact a new relay operator that added lots of relays to the network in a very short time.
The whole thread was about why the tor project wanted to do a video call...There was a thread the other day in reddit about tor project wanting to contact a new relay operator that added lots of relays to the network in a very short time.
The whole thread was about why the tor project wanted to do a video call and how bad that was.
We should maybe add some information about this to https://community.torproject.org/relay/relays-requirements/
We can also mention starting an asociation as a good way to preserve the anonimity of individuals, while still keeping certain accountability to benefit the netwrok.
One good phrase about this issue is:
```
Remember that running a relay is an act of transparency
(even though being a Tor user is an act of privacy),
because the way to strengthen trust in relays is by having a stronger community
Be sure to set your ContactInfo to a working email address in case we need to reach you
```
which is part of the sysadmin101 howto gman999 did for the relay operators.GusGushttps://gitlab.torproject.org/tpo/web/community/-/issues/279add slides for sysadmin101 workshop2023-01-11T16:09:19Zemmapeeladd slides for sysadmin101 workshopthe workshop for sysadmin skills was a success, and we can add the slides to the community
portal so they get translated and can be used to do more presentations.the workshop for sysadmin skills was a success, and we can add the slides to the community
portal so they get translated and can be used to do more presentations.GeorgeGeorgehttps://gitlab.torproject.org/tpo/web/manual/-/issues/125Should we keep flash player plugin in "PLUGINS, ADD-ONS AND JAVASCRIPT"?2023-07-13T14:06:28ZcypherpunksShould we keep flash player plugin in "PLUGINS, ADD-ONS AND JAVASCRIPT"?Page "PLUGINS, ADD-ONS AND JAVASCRIPT" says about Flash Player. Should it really be mentioned now, when Flash Player is deprecated, stopped working and nobody is using it?Page "PLUGINS, ADD-ONS AND JAVASCRIPT" says about Flash Player. Should it really be mentioned now, when Flash Player is deprecated, stopped working and nobody is using it?GusGushttps://gitlab.torproject.org/tpo/network-health/metrics/website/-/issues/40053metrics/collector.html has broken torperf link2022-06-23T15:54:09ZRoger Dingledinemetrics/collector.html has broken torperf linkFrom https://metrics.torproject.org/torperf.html click on "reproduce"
which leads you to
https://metrics.torproject.org/reproducible-metrics.html#performance
Then click on "Obtain OnionPerf/Torperf measurement results from CollecTor."...From https://metrics.torproject.org/torperf.html click on "reproduce"
which leads you to
https://metrics.torproject.org/reproducible-metrics.html#performance
Then click on "Obtain OnionPerf/Torperf measurement results from CollecTor."
which leads you to
https://metrics.torproject.org/collector.html#type-torperf
then click on "> recent"
which leads you to
https://metrics.torproject.org/collector/recent/torperf/
which says "Error
Oops! Something went wrong here! We encountered a 404 Not Found when processing your request!"
Similarly, https://metrics.torproject.org/collector/archive/torperf/ looks strangely empty starting in mid 2020.
Thanks!Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/web/support/-/issues/303Add new terms to the glossary wrt TB 11.5 release2022-08-01T18:58:01Zchampionquizzerchampionquizzer@torproject.orgAdd new terms to the glossary wrt TB 11.5 releaseWe should add these new terms that we are introducing with the TB 11.5 release to the [glossary](https://support.torproject.org/glossary/):
1. Connection Assist
2. Connection Test
3. Bridge-moji
..and also this term:
1. Quickstart ...We should add these new terms that we are introducing with the TB 11.5 release to the [glossary](https://support.torproject.org/glossary/):
1. Connection Assist
2. Connection Test
3. Bridge-moji
..and also this term:
1. Quickstart (checking it allows Tor Browser to connect automatically)championquizzerchampionquizzer@torproject.orgchampionquizzerchampionquizzer@torproject.orghttps://gitlab.torproject.org/tpo/web/community/-/issues/277Questionable DNSSEC usefulness2022-06-03T23:30:16ZcypherpunksQuestionable DNSSEC usefulnessAt page https://community.torproject.org/relay/setup/exit/#dns-on-exit-relays there is a recommendation to use DNSSEC-validating local resolver.
But does it help anything?
If validation fails, resolver will SERVFAIL and either OS will t...At page https://community.torproject.org/relay/setup/exit/#dns-on-exit-relays there is a recommendation to use DNSSEC-validating local resolver.
But does it help anything?
If validation fails, resolver will SERVFAIL and either OS will try fallback one (likely not validating) or exit will return error to client and client will retry on another circuit.https://gitlab.torproject.org/tpo/community/support/-/issues/40082Update links to the Telegram Bots (Support, GetBridges) across our support pl...2022-05-24T17:40:47Zchampionquizzerchampionquizzer@torproject.orgUpdate links to the Telegram Bots (Support, GetBridges) across our support platformsTelegram has changed the url of the bots (i.e https://t.me/@GetBridgesBot --> https://t.me/GetBridgesBot) and we need to accordingly update our documentation on RT, cdr.link, Forum and elsewhere. (Thanks to a translator and @emmapeel for...Telegram has changed the url of the bots (i.e https://t.me/@GetBridgesBot --> https://t.me/GetBridgesBot) and we need to accordingly update our documentation on RT, cdr.link, Forum and elsewhere. (Thanks to a translator and @emmapeel for spotting this!)
/cc @nina
Related: https://gitlab.torproject.org/tpo/web/support/-/merge_requests/110championquizzerchampionquizzer@torproject.orgchampionquizzerchampionquizzer@torproject.orghttps://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/conjure/-/issues/5Write documentation on how it is working2023-04-11T18:29:41ZGabagaba@torproject.orgWrite documentation on how it is workingAdd documentation on how it is working, the design, architecture and anything we need for it to be running (including survival guide).
- [ ] bridge survival guide
- [ ] point of contact for conjure station
- [ ] brief summary of archite...Add documentation on how it is working, the design, architecture and anything we need for it to be running (including survival guide).
- [ ] bridge survival guide
- [ ] point of contact for conjure station
- [ ] brief summary of architectureCecylia BocovichCecylia Bocovichhttps://gitlab.torproject.org/tpo/web/tpo/-/issues/299Should Contact page point to Matrix rooms?2022-07-01T04:45:13ZJim NewsomeShould Contact page point to Matrix rooms?https://www.torproject.org/contact/ still only mentions IRC. AFAICT the only pointer to our matrix rooms is from the blog post https://blog.torproject.org/entering-the-matrix/https://www.torproject.org/contact/ still only mentions IRC. AFAICT the only pointer to our matrix rooms is from the blog post https://blog.torproject.org/entering-the-matrix/