The Tor Project issueshttps://gitlab.torproject.org/groups/tpo/-/issues2023-10-31T13:46:34Zhttps://gitlab.torproject.org/tpo/web/lego/-/issues/58fallback.js is causing scrolling issues on page load2023-10-31T13:46:34ZKezfallback.js is causing scrolling issues on page loadlego has a "fallback.js" script that uses javascript to fallback to PNGs if SVG is not supported. i'm not sure it's useful since SVG support is [99%+ supported](https://caniuse.com/?search=svg), and a user without SVG likely also has no ...lego has a "fallback.js" script that uses javascript to fallback to PNGs if SVG is not supported. i'm not sure it's useful since SVG support is [99%+ supported](https://caniuse.com/?search=svg), and a user without SVG likely also has no javascript.
but the main issue is that [at the end of the script](https://gitlab.torproject.org/tpo/web/lego/-/blob/3d8002591b1a6df64e27624bd08d7a91d8e4c763/assets/static/js/fallback.js#L41-50) there's code specific to support.tpo. When used on sites other than support.tpo, this snippet causes the viewport to scroll directly to the top of the page. this script is included in the default footer template, which is used in most of the sites. this means that most of our sites are loading, and then flinging users back to the very top of the page.
the end of this script needs to be moved to its own script in support, and we may want to consider removing the rest of the script (the actual fallback) altogetherhttps://gitlab.torproject.org/tpo/tpa/team/-/issues/41362gitlab artifacts runner failure2023-10-31T13:33:18ZIan Jacksoniwj@torproject.orggitlab artifacts runner failureThanks for switching from docker to podman. Things are much much better now. So much better that it seems worth reporting this failure, even though as far as I'm aware it only happened once:
https://gitlab.torproject.org/nickm/arti/-/...Thanks for switching from docker to podman. Things are much much better now. So much better that it seems worth reporting this failure, even though as far as I'm aware it only happened once:
https://gitlab.torproject.org/nickm/arti/-/jobs/391016
> ERROR: Downloading artifacts from coordinator... error couldn't execute GET against https://gitlab.torproject.org/api/v4/jobs/391013/artifacts?direct_download=true: Get "https://gitlab.torproject.org/api/v4/jobs/391013/artifacts?direct_download=true": dial tcp: lookup gitlab.torproject.org on 8.8.4.4:53: dial udp 8.8.4.4:53: connect: network is unreachable id=391013 token=64_vXqrz
Was there a known outage about 16h ago? FTR in !1663 we changed the way we handle artifacts so that they aren't done by the `after_script` any more. So while I'm not confident that this isn't a bug in our CI setup, I don't think it's *that* bug.
CC @trinity-1686aJérôme Charaouilavamind@torproject.orgJérôme Charaouilavamind@torproject.orghttps://gitlab.torproject.org/tpo/core/tor/-/issues/40875From coverity: possible memory leak. (CID 1547857)2023-10-30T16:52:23ZNick MathewsonFrom coverity: possible memory leak. (CID 1547857)```
*** CID 1547857: Resource leaks (RESOURCE_LEAK)
/src/core/or/connection_edge.c: 4239 in connection_exit_begin_resolve()
4233 case DOS_STREAM_DEFENSE_NONE:
4234 break;
4235 case DOS_STREAM_DEFENSE_REFUSE_ST...```
*** CID 1547857: Resource leaks (RESOURCE_LEAK)
/src/core/or/connection_edge.c: 4239 in connection_exit_begin_resolve()
4233 case DOS_STREAM_DEFENSE_NONE:
4234 break;
4235 case DOS_STREAM_DEFENSE_REFUSE_STREAM:
4236 dns_send_resolved_error_cell(dummy_conn, RESOLVED_TYPE_ERROR_TRANSIENT);
4237 return 0;
4238 case DOS_STREAM_DEFENSE_CLOSE_CIRCUIT:
>>> CID 1547857: Resource leaks (RESOURCE_LEAK)
>>> Variable "dummy_conn" going out of scope leaks the storage it points to.
4239 return -END_CIRC_REASON_RESOURCELIMIT;
4240 }
4241
4242 /* send it off to the gethostbyname farm */
4243 switch (dns_resolve(dummy_conn)) {
4244 case -1: /* Impossible to resolve; a resolved cell was sent. */
```trinity-1686atrinity-1686ahttps://gitlab.torproject.org/tpo/team/-/issues/217Q3 Reports for DRL sponsored projects2023-10-30T13:45:49ZGabagaba@torproject.orgQ3 Reports for DRL sponsored projects61
- [x] Write the last report for the project
- [x] Gather indicators https://nc.torproject.net/f/462462
- [x] Send final docs to team for review
- [x] Send final docs to Bekeela and Isabela for review
96
- [x] Send mail [requesting i...61
- [x] Write the last report for the project
- [x] Gather indicators https://nc.torproject.net/f/462462
- [x] Send final docs to team for review
- [x] Send final docs to Bekeela and Isabela for review
96
- [x] Send mail [requesting info](http://kfahv6wfkbezjyg4r6mlhpmieydbebr5vkok5r34ya464gqz6c44bnyd.onion/p/sponsor96-next-report)
- [x] Get narrative into the report
- [x] Gather indicators
- [x] Send final docs to team for review
- [x] Send final docs to Bekeela and Isabela for review
101
- [x] Send mail [requesting info](https://pad.riseup.net/p/sponsor101-next-report)
- [x] Get narrative into the report
- [x] Gather indicators
- [x] Send final docs to team for review
- [x] Send final docs to Bekeela and Isabela for review
112
- [x] Send mail [requesting info](https://pad.riseup.net/p/sponsor112-next-report)
- [x] Get narrative into the report
- [x] Gather indicators
- [x] Send final docs to team for review
- [x] Send final docs to Bekeela and Isabela for reviewGabagaba@torproject.orgGabagaba@torproject.org2023-10-25https://gitlab.torproject.org/tpo/core/arti/-/issues/862Keystores should auto-generate certain keys2023-10-30T13:30:30Zgabi-250Keystores should auto-generate certain keysMotivated by the discussion at https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/1147#note_2898055
If the configured key store directory doesn't have all the required keys, our key store implementation (`ArtiNativeKeyStore`/`...Motivated by the discussion at https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/1147#note_2898055
If the configured key store directory doesn't have all the required keys, our key store implementation (`ArtiNativeKeyStore`/`CTorKeyStore`) needs to be ready to auto-generate them
1. Which keys needs to be auto-generated?
2. Arti's `KeyMgr` has multiple underlying key stores - which of those should we be autogenerating keys in?Arti: Onion service supportgabi-250gabi-250https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40989Add .nobackup files to reproducible and disposable directores2023-10-28T13:24:46ZrichardAdd .nobackup files to reproducible and disposable directoresrichardrichardhttps://gitlab.torproject.org/tpo/network-health/margot/-/issues/22Allow rejection/badexiting of relays provided by file2023-10-27T09:57:49ZGeorg KoppenAllow rejection/badexiting of relays provided by fileWhen rejecting relays (or putting them in badexit/middleonly) mode it's often the case that we pass in a set of fingerprints (one per line) which then get written into the respective files with the respective rules. We should have this f...When rejecting relays (or putting them in badexit/middleonly) mode it's often the case that we pass in a set of fingerprints (one per line) which then get written into the respective files with the respective rules. We should have this feature in `margot` as well.
If any of those relays are not in the consensus/online at the time of writing the rules to their files we should include the rejections/flags by fingerprint as usual. However, the entries per IP address should not show up (given that there is no IP address to be rejected when the relay is not running).jugajugahttps://gitlab.torproject.org/tpo/core/torspec/-/issues/223Convert specifications to mdbook2023-10-26T14:20:06ZNick MathewsonConvert specifications to mdbookPer [proposal 345](https://gitlab.torproject.org/tpo/core/torspec/-/blob/main/proposals/345-specs-in-mdbook.md), I want to convert our specifications to markdown and render them in mdbook.
The end result of the migration will be that:...Per [proposal 345](https://gitlab.torproject.org/tpo/core/torspec/-/blob/main/proposals/345-specs-in-mdbook.md), I want to convert our specifications to markdown and render them in mdbook.
The end result of the migration will be that:
* The torspec repository looks more [like this](https://gitlab.torproject.org/nickm/torspec/-/tree/spec_conversion?ref_type=heads).
* There is rendered torspec website looks more [like this](https://people.torproject.org/~nickm/volatile/mdbook-specs/index.html).
It looks like [spec.tpo](https://spec.torproject.org) is available as a target for this rendering; @weasel (the current spec.tpo maintainer) has approved on IRC. There is a [TPA ticket](https://gitlab.torproject.org/tpo/tpa/team/-/issues/41348) open for the admin side of the issue, and I've gotten some helpful advice there too.
On this ticket I'll be tracking the actual details of doing the migration. I won't do anything final without talking to more people, though.
Next steps here are:
* [x] Decide on the new layout we want for torspec.git.
* [x] Decide on the URL layout we want for the new spec.tpo website.
- Should we have a landing page, or should the mdbook content **be** the landing page?
- Should we leave a spot for RFCs?
* [ ] Work on [the migration scripts](https://gitlab.torproject.org/nickm/torspec-converter) and their configuration (including where to break the sections), until they produces output we like, and it gives us the layout we want.
* [ ] Develop the CI process as needed to keep the site up to date.
- Probably, publish to gitlab pages at first.
* [ ] Figure out whose approval we need for this, and see what they think.
* [ ] Write documentation as needed to explain how to edit the spec.
* [ ] Decide how to maintain redirects and permalinks.
After we've done this stuff I think we are ready to start the migration.Nick MathewsonNick Mathewsonhttps://gitlab.torproject.org/tpo/core/torspec/-/issues/217Consider a proposal about advertising protocols of intro points, rend points,...2023-10-26T14:19:20ZNick MathewsonConsider a proposal about advertising protocols of intro points, rend points, and onion servicesWhile writing onion service code in Arti, we're finding places where we'd like the onion client to know the supported protocols of the intro point, and onion service; and where we'd like the onion service to know the supported protocols ...While writing onion service code in Arti, we're finding places where we'd like the onion client to know the supported protocols of the intro point, and onion service; and where we'd like the onion service to know the supported protocols of the rendezvous point.
Currently, the algorithm for Intro points and Rend points is something like,
* Look up the listed relay in your consensus, and use its protocols if you find them.
* Otherwise, use the minimal supported protocols ("required-relay-protocols") listed in the consensus.
For onion services, you can't assume support for _any_ protocol. We _could_ assume that the onion service has the protocols listed in "required-client-protocols", but those are updated as infrequently as possible. When we _do_ need the onion service to advertise support for something new, we have to add a new field in the service descriptor.
I suggest that instead we could write a proposal to do some or all of the following:
1. Encode intro points' protocol lists in the service descriptor
2. Encode rendezvous points' protocol lists in the INTRODUCE2 body
3. Create a new "protocols" line in the onion service descriptor, containing a subset of the onion service's supported protocols.Nick MathewsonNick Mathewsonhttps://gitlab.torproject.org/tpo/tpa/team/-/issues/41276give pavel access to limesurvey2023-10-25T21:49:39ZGabagaba@torproject.orggive pavel access to limesurvey@pavel will need access to the limesurvey instance to create surveys for project 144. Please give him access.@pavel will need access to the limesurvey instance to create surveys for project 144. Please give him access.Jérôme Charaouilavamind@torproject.orgJérôme Charaouilavamind@torproject.orghttps://gitlab.torproject.org/tpo/web/blog/-/issues/40066Update CoC link2023-10-25T21:24:35ZGusUpdate CoC linkTor Code of Conduct document moved from gitweb to gitlab (https://gitlab.torproject.org/tpo/community/policies/-/blob/master/code_of_conduct.txt?ref_type=heads).
We need to change the link: https://gitlab.torproject.org/tpo/web/blog/-/b...Tor Code of Conduct document moved from gitweb to gitlab (https://gitlab.torproject.org/tpo/community/policies/-/blob/master/code_of_conduct.txt?ref_type=heads).
We need to change the link: https://gitlab.torproject.org/tpo/web/blog/-/blob/main/templates/macros/blog.html#L87Jérôme Charaouilavamind@torproject.orgJérôme Charaouilavamind@torproject.orghttps://gitlab.torproject.org/tpo/community/relays/-/issues/55Collect proposals towards a more trusted relay operator community2023-10-25T17:47:07ZGeorg KoppenCollect proposals towards a more trusted relay operator communityWe should dig through our archives and take stock of what has been proposed over the years to help with our goal of having a more trusted Tor network. The write-up should be focused on evaluating technical proposals.We should dig through our archives and take stock of what has been proposed over the years to help with our goal of having a more trusted Tor network. The write-up should be focused on evaluating technical proposals.Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/core/tor/-/issues/40405Implement Prop#3242023-10-25T15:34:59ZMike PerryImplement Prop#324This is the ticket for implementation work on congestion control algorithms:
https://gitlab.torproject.org/tpo/core/torspec/-/blob/master/proposals/324-rtt-congestion-control.txt
Sub-tickets:
* [x] Handshake negotiation spec: https://g...This is the ticket for implementation work on congestion control algorithms:
https://gitlab.torproject.org/tpo/core/torspec/-/blob/master/proposals/324-rtt-congestion-control.txt
Sub-tickets:
* [x] Handshake negotiation spec: https://gitlab.torproject.org/tpo/core/tor/-/issues/40377
* [x] Flow Control implementation: https://gitlab.torproject.org/tpo/core/tor/-/issues/40450
* [x] Full negotiation implementation: https://gitlab.torproject.org/tpo/core/tor/-/issues/40444
* [x] Parameter default update and other fixups from simulation: https://gitlab.torproject.org/tpo/core/tor/-/issues/40524
* [x] Unit testing work: https://gitlab.torproject.org/tpo/core/tor/-/issues/40443
* [x] Simulation work: https://gitlab.torproject.org/tpo/core/tor/-/issues/40404
* [x] Flow control XON/XOFF pseudocode specification: https://gitlab.torproject.org/tpo/core/tor/-/issues/40573
* [ ] Specification updates: https://gitlab.torproject.org/tpo/core/tor/-/issues/40572
* [x] Extra-info fields for flow control: https://gitlab.torproject.org/tpo/core/tor/-/issues/40477Sponsor 61 - Making the Tor network faster & more reliable for users in Internet-repressive placesMike PerryMike Perryhttps://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/95Investigate Distributed Snowflake Rollout Issue on proxy2023-10-25T15:24:07ZshelikhooInvestigate Distributed Snowflake Rollout Issue on proxyCurrently, we are encountering a slow rollout in distributed snowflake. We should investigate why.Currently, we are encountering a slow rollout in distributed snowflake. We should investigate why.Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & Tibetshelikhooshelikhoohttps://gitlab.torproject.org/tpo/network-health/metrics/website/-/issues/40101Advanced Search on relay search has selected the obfs4 transport as default2023-10-25T10:49:28ZGeorg KoppenAdvanced Search on relay search has selected the obfs4 transport as defaultAfter the fixes for https://gitlab.torproject.org/tpo/network-health/metrics/website/-/issues/40093 landed our Advanced Search regressed as the obfs4 transport is selected by default. In fact, there is no option to *not* include any tran...After the fixes for https://gitlab.torproject.org/tpo/network-health/metrics/website/-/issues/40093 landed our Advanced Search regressed as the obfs4 transport is selected by default. In fact, there is no option to *not* include any transport at all. If I want to just see all relays that joined during the last 7 days I am not executing something like https://metrics.torproject.org/rs.html#search/type:relay%20first_seen_days:0-7%20transport:obfs4?fields=transports, which, somewhat surprisingly, gives 0 results.
We should have by default something like `Any` for the transports, I guess.Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/web/donate-static/-/issues/128Update donate.torproject.org link preview / share card contents for YEC 20232023-10-24T16:08:51Zal smithUpdate donate.torproject.org link preview / share card contents for YEC 2023Note: this is **not** an emergency. :smile: It fell through the cracks by not becoming a ticket. I'm now rectifying that.
The https://donate.torproject.org link previews generated by social sites / messaging apps use the previous year's...Note: this is **not** an emergency. :smile: It fell through the cracks by not becoming a ticket. I'm now rectifying that.
The https://donate.torproject.org link previews generated by social sites / messaging apps use the previous year's campaign imagery and copy.
See example of how a Mastodon client generates the link preview:
![Screenshot_2023-10-16_at_6.14.34_PM](/uploads/e134f40f2688019114d8286f73233fbb/Screenshot_2023-10-16_at_6.14.34_PM.png)
Here's what we want the link preview to contain:
- Image: https://blog.torproject.org/2023-fundraiser-make-a-donation-to-Tor/yec-quote-blog.png
- Title: Donate to the Tor Project
- Subtitle: If you value privacy, support TorYear End Campaign 2023Jérôme Charaouilavamind@torproject.orgJérôme Charaouilavamind@torproject.orghttps://gitlab.torproject.org/tpo/tpa/team/-/issues/41366Please update GPG key for irl2023-10-24T15:35:28ZirlPlease update GPG key for irl```
-----BEGIN PGP PUBLIC KEY BLOCK-----
mQINBFZp8zEBEACxOYriD+tEuc3Wpnbh+GGnyiaLEMABBrfn6JlDQphbBq/YTz9M
9OPkttjxhLL/yrxlM1nD69XbGKQ9gIL3LEgOz9+OdivPbN+Q5iNMqk/WCQUqd3bC
Fbbsn1yvoTumFy9S9kYX45Db3jRJoN/Nye6Stf7KKPxHxot14iY+PUR/5Gx5KbeW
...```
-----BEGIN PGP PUBLIC KEY BLOCK-----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=RltH
-----END PGP PUBLIC KEY BLOCK-----
```
Thanks.Jérôme Charaouilavamind@torproject.orgJérôme Charaouilavamind@torproject.orghttps://gitlab.torproject.org/tpo/network-health/metrics/onionperf/-/issues/40070op-de6a is running out of disk space2023-10-24T13:51:45ZGeorg Koppenop-de6a is running out of disk spaceWe are getting the diskspace alert for a while now and it's worth filing a ticket so other folks can check what's going on. One thing we could do is bundling this ticket with #40069 which suggests archiving the 6a instances anyway.
/cc ...We are getting the diskspace alert for a while now and it's worth filing a ticket so other folks can check what's going on. One thing we could do is bundling this ticket with #40069 which suggests archiving the 6a instances anyway.
/cc @hiroHiroHirohttps://gitlab.torproject.org/tpo/team/-/issues/215Check about this s112 indicator for objective 12023-10-24T13:49:52ZGabagaba@torproject.orgCheck about this s112 indicator for objective 1Check with @gk about this indicator "Time (in hours) from beginning to end of a investigation on a suspected malicious relay." It is used to measure outcome of objective 1.
It seems that there are some factors out of our control that i...Check with @gk about this indicator "Time (in hours) from beginning to end of a investigation on a suspected malicious relay." It is used to measure outcome of objective 1.
It seems that there are some factors out of our control that influence that indicator. Let's see if we can redefine it so it does not take into account the replies from directory authorities. Otherwise we can remove it.
If we remove this indicator, can we have an indicator that we track for the outcomes on objective 1 based on the new metrics in https://gitlab.torproject.org/tpo/network-health/team/-/issues/299 ?Gabagaba@torproject.orgGabagaba@torproject.org2023-10-23https://gitlab.torproject.org/tpo/tpa/team/-/issues/41330Create a `lox` user on rdsys-frontend-012023-10-23T18:30:48ZCecylia BocovichCreate a `lox` user on rdsys-frontend-01On the rdsys-frontend-01 machine, we're going with the plan to create a user per service and setup systemd for that user (see https://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/issues/167#note_2943424)). We're planning to deploy t...On the rdsys-frontend-01 machine, we're going with the plan to create a user per service and setup systemd for that user (see https://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/issues/167#note_2943424)). We're planning to deploy the lox distributor and would like a user for that service.
cc @meskio @onyinyanganarcatanarcat