The Tor Project issueshttps://gitlab.torproject.org/groups/tpo/-/issues2022-08-03T01:37:40Zhttps://gitlab.torproject.org/tpo/web/community/-/issues/250snowflake: add debian package as installation method2022-08-03T01:37:40Ztxt.filesnowflake: add debian package as installation method<!--
* Use this issue template for suggesting new docs or updates to existing docs.
-->
### Problem to solve
<!-- Include the following detail as necessary:
-->
* On debian its a good idea to use the package manager instead of docker/a...<!--
* Use this issue template for suggesting new docs or updates to existing docs.
-->
### Problem to solve
<!-- Include the following detail as necessary:
-->
* On debian its a good idea to use the package manager instead of docker/ansible/self-compilation
* debian has a snowflake-proxy package
### Further details
<!--
* Include use cases, benefits, and/or goals for this work.
* If adding content: What audience is it intended for? (What roles and scenarios?)
-->
* https://packages.debian.org/search?keywords=snowflake%2Dproxy
### Proposal
<!-- Further specifics for how can we solve the problem. -->
Add installation via debian packages to `content/relay/setup/snowflake/standalone/contents.lr`.
### Who can address the issue
<!-- What if any special expertise is required to resolve this issue? -->
Anyperson able to write text.
### Other links/references
<!-- E.g. related Tor issues/MRs -->https://gitlab.torproject.org/tpo/tpa/anon_ticket/-/issues/51"Generate identifier" "Create identifier"2023-12-07T14:54:45Zcypherpunks"Generate identifier" "Create identifier"A detail of user interface:
When I first landed on the anonymous ticket site, it offered "Create identifier" and "Login with identifier". However the Main Links bar on the left has "Generate identifier". Probably the result is the same, ...A detail of user interface:
When I first landed on the anonymous ticket site, it offered "Create identifier" and "Login with identifier". However the Main Links bar on the left has "Generate identifier". Probably the result is the same, but labeling the link differently makes it not obvious.https://gitlab.torproject.org/tpo/web/support/-/issues/280Discourage more running a browser in parallel to Tor Browser2022-11-30T16:52:28ZGeorg KoppenDiscourage more running a browser in parallel to Tor BrowserWe have https://support.torproject.org/tbb/tbb-17/ for answering the question about whether it is safe to running a different browser in parallel to Tor Browser.
It's correct that *Tor Browser's* privacy features are unaffected by that ...We have https://support.torproject.org/tbb/tbb-17/ for answering the question about whether it is safe to running a different browser in parallel to Tor Browser.
It's correct that *Tor Browser's* privacy features are unaffected by that but we should stress more the risk of linking both browsing activities.
Maybe something like
```
If you run Tor Browser and another browser at the same time, it won't affect Tor's performance or privacy properties. However, be aware that when using Tor and another browser at the same time, your Tor activity could be linked to your non-Tor (real) IP from the other browser, simply by moving your mouse from one browser into the other. Or you may imply forget and accidentally use that non-private browser to do something that you intended to do in Tor Browser instead.
```
Thanks to `ForMariosTheHacker` at h1 to point that out.GusGushttps://gitlab.torproject.org/tpo/anti-censorship/docker-obfs4-bridge/-/issues/9Add Docker health check2022-03-01T17:54:36ZMelroy van den BergAdd Docker health checkYou could add a [HEALTHCHECK](https://docs.docker.com/engine/reference/builder/#healthcheck) to the Docker image.
So it's easy to see if the Bridge is working or not. You can execute any command you want within this HEALTHCHECK stateme...You could add a [HEALTHCHECK](https://docs.docker.com/engine/reference/builder/#healthcheck) to the Docker image.
So it's easy to see if the Bridge is working or not. You can execute any command you want within this HEALTHCHECK statement.
I leave it up to you what exact command you want to run to validate the healthy of the bridge.
Regards,
Melroyhttps://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/46Review UX and suggest improvements for telegram bridge bot2023-03-31T18:51:53ZdonutsReview UX and suggest improvements for telegram bridge botWe have a telegram bridge bot, and it's awesome! However at some point (i.e. when we revisit the bot and potentially integrate it with rdsys in future) UX should review and input into the following:
- The General UX/Design of the bot
- ...We have a telegram bridge bot, and it's awesome! However at some point (i.e. when we revisit the bot and potentially integrate it with rdsys in future) UX should review and input into the following:
- The General UX/Design of the bot
- How to collect user feedback about its use
- How to include (or link to) basic instructions on how to add bridges
- Improving user communication when (re)distributing cached bridges
- Integrating basic help functions/links to support articles
- If we want to localize it, and how this will work from a UI point of viewhttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40733MOZ_ASSERT on about:tor2022-10-04T19:46:41ZPier Angelo VendrameMOZ_ASSERT on about:tor### Summary
`about:tor` crashes in debug builds, because a `MOZ_ASSERT` is triggered.
### Steps to reproduce:
1. Compile Tor Browser with `ac_add_options --enable-debug` in the `mozconfig`
2. Run Tor Browser
3. Connect to the Tor net...### Summary
`about:tor` crashes in debug builds, because a `MOZ_ASSERT` is triggered.
### Steps to reproduce:
1. Compile Tor Browser with `ac_add_options --enable-debug` in the `mozconfig`
2. Run Tor Browser
3. Connect to the Tor network
4. You will see the tab crashing
5. Try to go to any other address, it will work
6. Try to write `about:tor` in the address bar, and go there: the tab will crash
### What is the current bug behavior?
The tab crashes, and Tor Browser asks you whether you want to reload it.
But if you press it, the tab crashes again. Other tabs work normally.
If you attach a debugger to Tor Browser, it will stop in one of the `MOZ_ASSERT` of `nsresult NS_CompareLoadInfoAndLoadContext(nsIChannel* aChannel)`.
File: `netwerk/base/nsNetUtil.cpp`, line: around 3092 (the first `MOZ_ASSERT` of the function).
Visual Studio tells that it is a dereferenced `nullptr`, but I do not understand why (it seem to me it is using normal objects allocated on stack; I will have to investigate more).
### What is the expected behavior?
I wanted to see the normal `about:tor` page :smile:
### Environment
I tested on a 91.3.0/11.0.1 Windows build compiled by me, with `ac_add_options --enable-debug`.
This happened both on Windows 10 and Windows 11.
This happens on Linux as well (remember to update the `build` as well, to copy debug `geckodriver`).
### Relevant logs and/or screenshots
![about_tor](/uploads/16177a720b8246d5a840c038ce77b1aa/about_tor.png)https://gitlab.torproject.org/tpo/web/manual/-/issues/114Explain *why* you would want to make Tor Browser portable2023-11-07T17:02:58ZGusExplain *why* you would want to make Tor Browser portableUser feedback:
The description doesn't explain the value of making Tor Browser portable.
What is the advantage, security and reason for portable?User feedback:
The description doesn't explain the value of making Tor Browser portable.
What is the advantage, security and reason for portable?https://gitlab.torproject.org/tpo/web/support/-/issues/275Dead link on FAQ2022-01-13T18:10:35ZcypherpunksDead link on FAQOn main page of support website, in section named "Gmail warns me that my account may have been compromised", there is a link to fscked.org, which seems to be a long-dead mikeperry's website.On main page of support website, in section named "Gmail warns me that my account may have been compromised", there is a link to fscked.org, which seems to be a long-dead mikeperry's website.https://gitlab.torproject.org/tpo/web/tpo/-/issues/262Remove jinja template escaping from "Become a Member" section2022-07-09T04:26:25ZGusRemove jinja template escaping from "Become a Member" sectionhttps://www.torproject.org/about/membership/
```
Become a Member
{ _("Join the Tor Project Membership Program and demonstrate your commitment to privacy online and become more deeply involved in the Tor community. Email us at giving@to...https://www.torproject.org/about/membership/
```
Become a Member
{ _("Join the Tor Project Membership Program and demonstrate your commitment to privacy online and become more deeply involved in the Tor community. Email us at giving@torproject.org. to get started.") }
```emmapeelemmapeelhttps://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/issues/71Consider attaching Tor Browser signing key to gettor emails2022-10-12T18:28:12ZPhilipp Winterphw@torproject.orgConsider attaching Tor Browser signing key to gettor emailsIt turns out that censored users are unlikely to be able to fetch our Tor Browser signing key: tpo/applications/tor-browser#40195
One way to fix this issue is to attach the signing key to GetTor's email autoresponse. That's easy for us ...It turns out that censored users are unlikely to be able to fetch our Tor Browser signing key: tpo/applications/tor-browser#40195
One way to fix this issue is to attach the signing key to GetTor's email autoresponse. That's easy for us and convenient for the user. The downside is that users have to place more trust in GetTor's autoresponse. So far, if Alice receives a spoofed GetTor response and downloads a malicious Tor Browser, she can still detect this attack by getting her signing key from an independent source. If GetTor's response email provides both Tor Browser links *and* the signing key, Alice would fall for the attack.https://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/issues/70Unexpected Naming Scheme in Semantic Versioning Represention Structure2022-09-27T09:58:21ZshelikhooUnexpected Naming Scheme in Semantic Versioning Represention StructureIn the [Version](https://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/blob/f7d0b7451e242a711f3c9887348b84a6ae054c38/pkg/usecases/resources/links.go#L14) Structure, "Major" version is named "Mayor" version, which is different from it...In the [Version](https://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/blob/f7d0b7451e242a711f3c9887348b84a6ae054c38/pkg/usecases/resources/links.go#L14) Structure, "Major" version is named "Mayor" version, which is different from its [definition](https://semver.org/) form. If this is unintentional, we could consider renaming it to its definition form.https://gitlab.torproject.org/tpo/web/lego/-/issues/39Create 'sitemap.xml' for our Lektor websites2022-06-29T21:38:49ZGusCreate 'sitemap.xml' for our Lektor websitesA relay operator [suggested](https://lists.torproject.org/pipermail/tor-relays/2021-November/020015.html) creating a 'sitemap'.
Checking Lektor docs, I found this guide:
https://www.getlektor.com/docs/guides/sitemap/A relay operator [suggested](https://lists.torproject.org/pipermail/tor-relays/2021-November/020015.html) creating a 'sitemap'.
Checking Lektor docs, I found this guide:
https://www.getlektor.com/docs/guides/sitemap/https://gitlab.torproject.org/tpo/ux/design/-/issues/31Outreach material: update torproject.org onion site address (v2 to v3)2022-04-25T20:55:31ZGusOutreach material: update torproject.org onion site address (v2 to v3)As v2 onions are now fully deprecated, we need to update these outreach materials:
Files:
- https://gitlab.torproject.org/tpo/community/outreach/-/blob/master/print/en_EN/Back_feminist_en_EN.pdf
- https://gitlab.torproject.org/tpo/comm...As v2 onions are now fully deprecated, we need to update these outreach materials:
Files:
- https://gitlab.torproject.org/tpo/community/outreach/-/blob/master/print/en_EN/Back_feminist_en_EN.pdf
- https://gitlab.torproject.org/tpo/community/outreach/-/blob/master/print/en_EN/Back_stencil_en_EN.pdf
- https://gitlab.torproject.org/tpo/community/outreach/-/blob/master/print/es_ES/Back_feminist_es_ES.pdf
- https://gitlab.torproject.org/tpo/community/outreach/-/blob/master/print/es_ES/Back_stencil_es_ES.pdf
- https://gitlab.torproject.org/tpo/community/outreach/-/blob/master/print/pr_BR/Back_feminist_pr_BR.pdf
- https://gitlab.torproject.org/tpo/community/outreach/-/blob/master/print/pr_BR/Back_stencil_pr_BR.pdfGusGushttps://gitlab.torproject.org/tpo/web/manual/-/issues/110Add Android 12 battery optiization tip2023-11-08T07:17:09ZHackerNCoderhackerncoder@encryptionin.spaceAdd Android 12 battery optiization tipI'm using GrapheneOS which just updated to Android 12, it is even more battery optimizing, to the point where it feels like it is killing Tor Browser in the background by default. Whenever I close the app, and open it again, I have to cl...I'm using GrapheneOS which just updated to Android 12, it is even more battery optimizing, to the point where it feels like it is killing Tor Browser in the background by default. Whenever I close the app, and open it again, I have to click connect. Unless I change the battery optimization level to "Unrestricted".https://gitlab.torproject.org/tpo/web/community/-/issues/236Relay operations is missing from secondary navbar2021-10-29T19:59:35ZemmapeelRelay operations is missing from secondary navbarThe secondary navbar that we have on the different sections of the website is missing the Relay Operations link. See the 6 sections on the homepage:
![all-sections.cleaned](/uploads/97700a38f46adaa78a4d2dd8354bfd21/all-sections.cleaned....The secondary navbar that we have on the different sections of the website is missing the Relay Operations link. See the 6 sections on the homepage:
![all-sections.cleaned](/uploads/97700a38f46adaa78a4d2dd8354bfd21/all-sections.cleaned.png)
And only 5 sections on the navbar:
![missig-relays.cleaned](/uploads/bd7a13aa9b381de314f5fd257c43a558/missig-relays.cleaned.png)https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40670Android Google Assistant Sign-In pops up using Tor2022-11-30T15:24:37ZiampowerslaveAndroid Google Assistant Sign-In pops up using TorHi.
I had the following issue that exposes my identity to Google.
I started Tor (Android) logged in to a website that is Google Sign-In compatible, and when I entered my credentials the Google Assistant Sign In dialog popped up, so Goo...Hi.
I had the following issue that exposes my identity to Google.
I started Tor (Android) logged in to a website that is Google Sign-In compatible, and when I entered my credentials the Google Assistant Sign In dialog popped up, so Google nows it was me trying to log in to that site even behind Tor.
Moto G9 Plus
Android 11
Tor 10.5.9 (91.2.0-Release)https://gitlab.torproject.org/tpo/web/community/-/issues/233[Onion Services] Update NYT onion service2021-10-20T13:23:15Zchampionquizzerchampionquizzer@torproject.org[Onion Services] Update NYT onion serviceNew York Times have updated their onion service to v3: https://www.nytimesn7cgmftshazwhfgzm37qxb44r64ytbb2dj3x62d2lljsciiyd.onion/
.. and we must update it on the 'featured onions' section: https://community.torproject.org/onion-servic...New York Times have updated their onion service to v3: https://www.nytimesn7cgmftshazwhfgzm37qxb44r64ytbb2dj3x62d2lljsciiyd.onion/
.. and we must update it on the 'featured onions' section: https://community.torproject.org/onion-services/#featured-onions
Proof: TLS/SSL certificate and onion-location header on https://www.nytimes.com/HackerNCoderhackerncoder@encryptionin.spaceHackerNCoderhackerncoder@encryptionin.spacehttps://gitlab.torproject.org/tpo/core/arti/-/issues/191Replace caret with num-derive, popularity.2022-02-07T15:56:39ZcheakoReplace caret with num-derive, popularity.I believe this would get tangled with #165.
The [`caret`](https://crates.io/crates/caret) create has sometimes 4 downloads a day, when [`num-derive`](https://crates.io/crates/num-derive) has thousands.
Effects `tor-cell`.
```
[depende...I believe this would get tangled with #165.
The [`caret`](https://crates.io/crates/caret) create has sometimes 4 downloads a day, when [`num-derive`](https://crates.io/crates/num-derive) has thousands.
Effects `tor-cell`.
```
[dependencies]
num-traits = "0.2"
num-derive = "0.3"
```
Note: Investigate `NumCast`, `NumOpt` makes no sense being math only and doesn't cover `Ord` and `Eq`.
```
use num_derive::{FromPrimitive, ToPrimitive};
```
https://fasterthanli.me/series/making-our-own-ping/part-11
```
#[derive(Debug, FromPrimitive, ToPrimitive)]
#[repr(u8)]
pub enum Protocol {
ICMP = 0x01,
TCP = 0x06,
UDP = 0x11,
}
```https://gitlab.torproject.org/tpo/web/lego/-/issues/33Add Discourse forum logo on the footer2021-10-25T19:31:15ZGusAdd Discourse forum logo on the footerAs part of our [Soft launch plan](https://gitlab.torproject.org/tpo/web/team/-/wikis/Plan-To-Launch-Tor's-Forum#timeline), we need to add [Discourse logo](https://fontawesome.com/v5.15/icons/discourse) on the footer.As part of our [Soft launch plan](https://gitlab.torproject.org/tpo/web/team/-/wikis/Plan-To-Launch-Tor's-Forum#timeline), we need to add [Discourse logo](https://fontawesome.com/v5.15/icons/discourse) on the footer.2021-10-20https://gitlab.torproject.org/tpo/web/manual/-/issues/108Error titles vary from original source in the browser2022-06-30T04:53:23ZemmapeelError titles vary from original source in the browserThe documentation at [onion-services/#onion-services-errors](https://tb-manual.torproject.org/onion-services/#onion-services-errors) has varied the Error messages and titles from the original source, that are the strings at the browser c...The documentation at [onion-services/#onion-services-errors](https://tb-manual.torproject.org/onion-services/#onion-services-errors) has varied the Error messages and titles from the original source, that are the strings at the browser code, and by extension also available for translation on [transifex](https://www.transifex.com/otf/torproject/translate/#es/$/185269561?q=key%3AonionServices.) and that can be seen at
https://gitweb.torproject.org/translation.git/tree/en/torbutton.properties?h=torbutton-torbuttonproperties
(they are the strings with keys starting with onionServices.)
We should make the docs have the same strings as the browser.