The Tor Project issueshttps://gitlab.torproject.org/groups/tpo/-/issues2023-08-10T22:04:15Zhttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41929Update Google Play store screenshots for TBA 12.52023-08-10T22:04:15ZdonutsUpdate Google Play store screenshots for TBA 12.5S'il vous plaît @richard (better late than never).
New assets here: [Nextcloud link](https://nc.torproject.net/s/iSM4mNXd3RcZmXs)S'il vous plaît @richard (better late than never).
New assets here: [Nextcloud link](https://nc.torproject.net/s/iSM4mNXd3RcZmXs)richardrichardhttps://gitlab.torproject.org/tpo/core/arti/-/issues/986HS client: Never use an unlisted ipt even if found in descriptor2023-07-28T17:55:25ZIan Jacksoniwj@torproject.orgHS client: Never use an unlisted ipt even if found in descriptorAs per https://gitlab.torproject.org/tpo/core/torspec/-/merge_requests/154#note_2926422 we should not use an introduction point that's not listed in the consensus.
Some details of our response are still TBD, see the discussion there.
S...As per https://gitlab.torproject.org/tpo/core/torspec/-/merge_requests/154#note_2926422 we should not use an introduction point that's not listed in the consensus.
Some details of our response are still TBD, see the discussion there.
See also #966 which it will probably be convenient to address at the same time.Arti: Onion service supportIan Jacksoniwj@torproject.orgIan Jacksoniwj@torproject.orghttps://gitlab.torproject.org/tpo/community/l10n/-/issues/40115Translate Videos and Social Copy to Arabic, Chinese Hans, Persian and Swahili2023-08-29T14:54:53ZemmapeelTranslate Videos and Social Copy to Arabic, Chinese Hans, Persian and SwahiliWe are translating this video subtitles:
- [Introduction To Tor Browser](https://hosted.weblate.org/projects/tor/tb-introduction-video-subtitles/) :
- Arabic: <img src="https://hosted.weblate.org/widgets/tor/ar/tb-introduction-video-s...We are translating this video subtitles:
- [Introduction To Tor Browser](https://hosted.weblate.org/projects/tor/tb-introduction-video-subtitles/) :
- Arabic: <img src="https://hosted.weblate.org/widgets/tor/ar/tb-introduction-video-subtitles/svg-badge.svg" alt="Translation status" />
- Chinese Hans: <img src="https://hosted.weblate.org/widgets/tor/zh_Hans/tb-introduction-video-subtitles/svg-badge.svg" alt="Translation status" />
- Persian: <img src="https://hosted.weblate.org/widgets/tor/fa/tb-introduction-video-subtitles/svg-badge.svg" alt="Translation status" />
- Swahili: <img src="https://hosted.weblate.org/widgets/tor/sw/tb-introduction-video-subtitles/svg-badge.svg" alt="Translation status" />
- [Introduction to bridges](https://hosted.weblate.org/projects/tor/bridges-introduction-video-subtitles/):
- Arabic: <img src="https://hosted.weblate.org/widgets/tor/ar/bridges-introduction-video-subtitles/svg-badge.svg" alt="Translation status" />
- Chinese Hans: <img src="https://hosted.weblate.org/widgets/tor/zh_Hans/bridges-introduction-video-subtitles/svg-badge.svg" alt="Translation status" />
- Persian: <img src="https://hosted.weblate.org/widgets/tor/fa/bridges-introduction-video-subtitles/svg-badge.svg" alt="Translation status" />
- Swahili: <img src="https://hosted.weblate.org/widgets/tor/sw/bridges-introduction-video-subtitles/svg-badge.svg" alt="Translation status" />
- [Introduction to Onionshare](https://hosted.weblate.org/projects/tor/onionshare-introduction-video-subtitles/):
- Arabic: <img src="https://hosted.weblate.org/widgets/tor/ar/onionshare-introduction-video-subtitles/svg-badge.svg" alt="Translation status" />
- Chinese Hans: <img src="https://hosted.weblate.org/widgets/tor/zh_Hans/onionshare-introduction-video-subtitles/svg-badge.svg" alt="Translation status" />
- Persian: <img src="https://hosted.weblate.org/widgets/tor/fa/onionshare-introduction-video-subtitles/svg-badge.svg" alt="Translation status" />
- Swahili: <img src="https://hosted.weblate.org/widgets/tor/sw/onionshare-introduction-video-subtitles/svg-badge.svg" alt="Translation status" />
- [Social content](https://hosted.weblate.org/projects/tor/social-copy/):
- Arabic: <img src="https://hosted.weblate.org/widgets/tor/ar/social-copy/svg-badge.svg" alt="Translation status" />
- Chinese Hans: <img src="https://hosted.weblate.org/widgets/tor/zh_Hans/social-copy/svg-badge.svg" alt="Translation status" />
- Persian: <img src="https://hosted.weblate.org/widgets/tor/fa/social-copy/svg-badge.svg" alt="Translation status" />
- Swahili: <img src="https://hosted.weblate.org/widgets/tor/sw/social-copy/svg-badge.svg" alt="Translation status" />emmapeelemmapeelhttps://gitlab.torproject.org/tpo/anti-censorship/lox/-/issues/27Flakey bridge_replace test2024-01-18T03:48:16ZonyinyangFlakey bridge_replace testThe [`bridge_replace test`](https://gitlab.torproject.org/tpo/anti-censorship/lox-rs/-/blob/main/crates/lox-library/src/tests.rs#L730) in the lox-library intermittently fails for an unknown reason. It's not clear if this is a bug introdu...The [`bridge_replace test`](https://gitlab.torproject.org/tpo/anti-censorship/lox-rs/-/blob/main/crates/lox-library/src/tests.rs#L730) in the lox-library intermittently fails for an unknown reason. It's not clear if this is a bug introduced by the test itself or the underlying `bridge_replace` function. In any case, it should be fixed.https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/issues/40281Umbrel Snowflake Tor Proxy down for days2023-08-09T10:41:18ZXiangcaiUmbrel Snowflake Tor Proxy down for days### Umbrel SnowFlake Log
```plaintext
snowflake
Attaching to snowflake_tor_server_1, snowflake_web_1, snowflake_app_proxy_1, snowflake_proxy_1
app_proxy_1 | [HPM] Client disconnected
app_proxy_1 | Validating token: 1b19614ff477 ......### Umbrel SnowFlake Log
```plaintext
snowflake
Attaching to snowflake_tor_server_1, snowflake_web_1, snowflake_app_proxy_1, snowflake_proxy_1
app_proxy_1 | [HPM] Client disconnected
app_proxy_1 | Validating token: 1b19614ff477 ...
app_proxy_1 | Validating token: 1b19614ff477 ...
app_proxy_1 | Validating token: 1b19614ff477 ...
app_proxy_1 | [HPM] Upgrading to WebSocket
app_proxy_1 | Validating token: 1b19614ff477 ...
app_proxy_1 | [HPM] Client disconnected
app_proxy_1 | Validating token: 1b19614ff477 ...
app_proxy_1 | [HPM] Upgrading to WebSocket
app_proxy_1 | [HPM] Client disconnected
proxy_1 | 2023/07/27 13:57:22 Timed out waiting for client to open data channel.
proxy_1 | 2023/07/27 13:57:23 sdp offer successfully received.
proxy_1 | 2023/07/27 13:57:23 Generating answer...
proxy_1 | 2023/07/27 13:57:49 Timed out waiting for client to open data channel.
proxy_1 | 2023/07/27 13:58:42 sdp offer successfully received.
proxy_1 | 2023/07/27 13:58:42 Generating answer...
proxy_1 | 2023/07/27 13:59:10 Timed out waiting for client to open data channel.
proxy_1 | 2023/07/27 14:01:44 sdp offer successfully received.
proxy_1 | 2023/07/27 14:01:44 Generating answer...
proxy_1 | 2023/07/27 14:02:10 Timed out waiting for client to open data channel.
web_1 | 2023/07/27 13:41:50 websocket: close 1001
web_1 | 2023/07/27 13:41:50 Connection closed: 10.21.0.8:59112, connections: 0
web_1 | 2023/07/27 13:41:50 Command exited for: 10.21.0.8:59112
web_1 | 2023/07/27 13:57:00 10.21.0.8:59760 200 GET /auth_token.js
web_1 | 2023/07/27 13:57:00 New client connected: 10.21.0.8:59764
web_1 | 2023/07/27 13:57:00 Command is running for client 10.21.0.8:59764 with PID 23 (args="-c tail -n 10000 -f /snowflake/snowflake.log | grep \"Traffic Relayed\""), connections: 1
web_1 | 2023/07/27 13:57:00 10.21.0.8:59764 101 GET /ws
web_1 | 2023/07/27 13:57:03 websocket: close 1001
web_1 | 2023/07/27 13:57:03 Command exited for: 10.21.0.8:59764
web_1 | 2023/07/27 13:57:03 Connection closed: 10.21.0.8:59764, connections: 0
```meskiomeskio@torproject.orgmeskiomeskio@torproject.orghttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41917Make the appearance of letterboxing look more intentional2024-01-30T13:24:57Zma1Make the appearance of letterboxing look more intentionalCurrent letterboxing appearance looks like a buggy window to some users.
We want to make it look more intentional by:
1. adding a shadow to the content area to make it "pop" from the letterboxing background
2. adding a themed gradient t...Current letterboxing appearance looks like a buggy window to some users.
We want to make it look more intentional by:
1. adding a shadow to the content area to make it "pop" from the letterboxing background
2. adding a themed gradient to the letterboxing backgroundma1ma1https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41916Letterboxing preferences UI2024-03-21T13:24:49Zma1Letterboxing preferences UIAs discussed [here](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/32324#note_2899463) and [here](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/32324#note_2925080), some user might prefer to hav...As discussed [here](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/32324#note_2899463) and [here](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/32324#note_2925080), some user might prefer to have the letterboxing content vertically centered.
It has been suggested that this should be an user-accessible option, under a "Letterboxing" preference section including also an "Always remember last window" toggle.
Backend work:
- Letterboxing centering #41917
- Remember last window option #41918
[Figma Design](https://www.figma.com/file/rWgMwiiFTDFp4ujuP3PKbq/Tor-Browser-13.5?type=design&node-id=202-1221&mode=design&t=W4c43um0jGlUramZ-4)
Initial comments:
@ruihildt
> don't think the letterboxing setting belongs to the "Privacy and security" section: I suggest we move it to "Website and appearance".
@ma1
> 1. would prefer to name the thing to be centered "web content" or "web page" instead of "website"
> 2. What about having a "What's this" tooltip and/or a question mark cursor when hovering the letterbox area, which would open the preference panel if clicked?
Intentionally omitting the release target (the parent issue has 13.5), leaving it to @duncan & @richard .
/cc @thorinma1ma1https://gitlab.torproject.org/tpo/ux/design/-/issues/51Apply text styles to the Proton UI library2023-08-29T17:29:00ZdonutsApply text styles to the Proton UI libraryText styles were one of the few remaining pieces of #45. There are a very small number of existing text styles in the file already, however most text has individual styling applied at present.Text styles were one of the few remaining pieces of #45. There are a very small number of existing text styles in the file already, however most text has individual styling applied at present.Jag TalonJag Talonhttps://gitlab.torproject.org/tpo/ux/design/-/issues/50Update the Tor Browser 13.0 design file to use the latest features from the P...2023-07-27T19:25:05ZdonutsUpdate the Tor Browser 13.0 design file to use the latest features from the Proton UI libraryNow that we've published many of the changes documented in https://gitlab.torproject.org/tpo/ux/design/-/issues/45, it would be great to update the [Tor Browser 13.0 design file](https://www.figma.com/file/gFE1rXBMdbZGJAIdwtZ508/Tor-Brow...Now that we've published many of the changes documented in https://gitlab.torproject.org/tpo/ux/design/-/issues/45, it would be great to update the [Tor Browser 13.0 design file](https://www.figma.com/file/gFE1rXBMdbZGJAIdwtZ508/Tor-Browser-13.0?type=design&node-id=204%3A7797&mode=design&t=8etmWzbj28WNfqoz-1) before handing it over to dev next week-ish.Jag TalonJag Talonhttps://gitlab.torproject.org/tpo/tpa/team/-/issues/41282Review debian sbws package 1.7.02023-08-02T16:05:13ZjugaReview debian sbws package 1.7.0Last changes to review at https://salsa.debian.org/juxor-guest/sbws. Canonical debian repo at https://salsa.debian.org/pkg-privacy-team/sbws.
@lavamind said he might have time for this, otherwise it's fine, we ask some other debian main...Last changes to review at https://salsa.debian.org/juxor-guest/sbws. Canonical debian repo at https://salsa.debian.org/pkg-privacy-team/sbws.
@lavamind said he might have time for this, otherwise it's fine, we ask some other debian maintaner.Jérôme Charaouilavamind@torproject.orgJérôme Charaouilavamind@torproject.orghttps://gitlab.torproject.org/tpo/tpa/team/-/issues/41281db.tpo/update.cgi fails to checking sudo pass2023-08-02T17:24:34Zjugadb.tpo/update.cgi fails to checking sudo passTrying to create a sudo password as explained in the [docs](https://gitlab.torproject.org/tpo/tpa/team/-/wikis/doc/accounts#ldap), i get:
```
Password check failed for new sudo pass: check exited with exit code 1, said '' on stdout, and ...Trying to create a sudo password as explained in the [docs](https://gitlab.torproject.org/tpo/tpa/team/-/wikis/doc/accounts#ldap), i get:
```
Password check failed for new sudo pass: check exited with exit code 1, said '' on stdout, and 'Traceback (most recent call last): File "/usr/lib/userdir-ldap-cgi/password-qualify-check", line 72, in F.write(w1[0]+w2+"\n"); IndexError: string index out of range ' on stderr.. Please go back and try again.
```
I've tried with different types of passwords, but i don't manage to create one.Jérôme Charaouilavamind@torproject.orgJérôme Charaouilavamind@torproject.orghttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41911Firefox-Android tor bootstrap connect button css broken2023-10-03T13:28:49ZDan BallardFirefox-Android tor bootstrap connect button css brokenthe text lost its centering
![Screenshot_20230725-120325](/uploads/a74e35270a0d8b4bad31662a44f7e843/Screenshot_20230725-120325.png)the text lost its centering
![Screenshot_20230725-120325](/uploads/a74e35270a0d8b4bad31662a44f7e843/Screenshot_20230725-120325.png)Dan BallardDan Ballardhttps://gitlab.torproject.org/tpo/core/arti/-/issues/984Concrete implementation of onion service state-management code2024-01-09T16:43:50ZNick MathewsonConcrete implementation of onion service state-management codeWe should make sure that we build onion services by default using persistent on-disk storage for their state.
Part of #729. See also #983We should make sure that we build onion services by default using persistent on-disk storage for their state.
Part of #729. See also #983Arti: Onion service supportIan Jacksoniwj@torproject.orgIan Jacksoniwj@torproject.orghttps://gitlab.torproject.org/tpo/core/arti/-/issues/983Abstract version of persistent state for onion services2024-01-09T16:40:10ZNick MathewsonAbstract version of persistent state for onion servicesThis is somewhat underspecified. We'll need a function that lets the api-user of an onion service provide a mechanism for getting and storing the persistent state associated with that onion service, when necessary. This might be as sim...This is somewhat underspecified. We'll need a function that lets the api-user of an onion service provide a mechanism for getting and storing the persistent state associated with that onion service, when necessary. This might be as simple as providing an `impl StateMgr` or (more likely) an `impl StateHandle<HsState>`.
There may or may not be need to integrate with the keymgr code, depending on how hard or easy we think key export should be.
Part of #729.Arti: Onion service supportIan Jacksoniwj@torproject.orgIan Jacksoniwj@torproject.orghttps://gitlab.torproject.org/tpo/core/arti/-/issues/977Implement hsdir publisher2023-08-25T18:01:05ZNick MathewsonImplement hsdir publisherWe'll need a piece of code to encode and upload a new onion service descriptor as appropriate.
Part of #697.We'll need a piece of code to encode and upload a new onion service descriptor as appropriate.
Part of #697.gabi-250gabi-250https://gitlab.torproject.org/tpo/core/arti/-/issues/967Make introduction points part of an onion service's persistent state2023-12-04T19:24:05ZNick MathewsonMake introduction points part of an onion service's persistent stateIn !1429, @diziet came up with a system that is in many ways better than C tor's approach. Instead of forgetting our intro points on each restart, we'd save them as persistent data.
We are not planning to do this as part of our first i...In !1429, @diziet came up with a system that is in many ways better than C tor's approach. Instead of forgetting our intro points on each restart, we'd save them as persistent data.
We are not planning to do this as part of our first implementation phase, but it might improve reliability. We should see if the ~"Onion Services Coalition" is interested.Arti: Onion service supportIan Jacksoniwj@torproject.orgIan Jacksoniwj@torproject.orghttps://gitlab.torproject.org/tpo/core/torspec/-/issues/212Merge finished proposals2023-08-24T18:34:18ZNick MathewsonMerge finished proposalsThe following proposals are marked FINISHED, meaning that they have been built, but not merged into the main specs. We should finish them.
* [`260-rend-single-onion.txt`](https://gitlab.torproject.org/tpo/core/torspec/-/blob/main/prop...The following proposals are marked FINISHED, meaning that they have been built, but not merged into the main specs. We should finish them.
* [`260-rend-single-onion.txt`](https://gitlab.torproject.org/tpo/core/torspec/-/blob/main/proposals/260-rend-single-onion.txt): Rendezvous Single Onion Services (Finished)
* [`332-ntor-v3-with-extra-data.md`](https://gitlab.torproject.org/tpo/core/torspec/-/blob/main/proposals/332-ntor-v3-with-extra-data.md): Ntor protocol with extra data, version 3. (Finished) See !163.
* [`333-vanguards-lite.md`](https://gitlab.torproject.org/tpo/core/torspec/-/blob/main/proposals/333-vanguards-lite.md): Vanguards lite (Finished)
@mikeperry @dgoulet I can do 332. If you want to merge 360 and 333 that would be great, but if not it would be cool if you could spare the time to look them over to see whether they are accurate and need any changes to describe what Tor actually does. Once that is done, I can merge them if you don't have time.Nick MathewsonNick Mathewsonhttps://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40906Add a var/essential_deps variable2023-07-26T15:08:09ZPier Angelo VendrameAdd a var/essential_deps variableAfter the Bullseye update, we don't have `less` in our Linux containers anymore.
We've added it to common dependencies, but it still isn't installed in projects like Firefox, in which we rewrite all the packages there.
Maybe we could h...After the Bullseye update, we don't have `less` in our Linux containers anymore.
We've added it to common dependencies, but it still isn't installed in projects like Firefox, in which we rewrite all the packages there.
Maybe we could have a set of essential packages, that we always include (and projects should never override).boklmboklmhttps://gitlab.torproject.org/tpo/tpa/team/-/issues/412782FA physical key setup on forum.torproject.org2023-07-31T22:17:49ZThorin2FA physical key setup on forum.torproject.orgin setting up 2FA with my yubikey, it is not clear to me what to put for the registered name or how important this piece of info is ... the default placeholder is `user.second_factor.security_key.default_name`
![whatname](/uploads/4822...in setting up 2FA with my yubikey, it is not clear to me what to put for the registered name or how important this piece of info is ... the default placeholder is `user.second_factor.security_key.default_name`
![whatname](/uploads/4822cbc89f694e032374d7eb2d123a4d/whatname.png)Jérôme Charaouilavamind@torproject.orgJérôme Charaouilavamind@torproject.orghttps://gitlab.torproject.org/tpo/anti-censorship/lox/-/issues/25Implement Open-Invitation Distribution2023-08-21T15:15:42ZonyinyangImplement Open-Invitation DistributionLox should decide how to distribute open invitations. We have proposed handing out open invitations until they have been distributed to k(10) users and then moving on to another invitation. We likely will also need to decide an upper bou...Lox should decide how to distribute open invitations. We have proposed handing out open invitations until they have been distributed to k(10) users and then moving on to another invitation. We likely will also need to decide an upper bound of buckets that can be distributed each day so that we don't run out of open invitation buckets.
These are probably good enough for alpha and we should try to get metrics around how quickly we get to this k number of users each day as well as other things that can help us to refine this process.onyinyangonyinyang