The Tor Project issueshttps://gitlab.torproject.org/groups/tpo/-/issues2023-05-09T17:32:05Zhttps://gitlab.torproject.org/tpo/onion-services/cebollitas/-/issues/7Support for documentation in various languages2023-05-09T17:32:05ZSilvio RhattoSupport for documentation in various languagesAdd support for documentation in various languages
One possible way is to have one document per language (like `README.pt-BR.md` etc).Add support for documentation in various languages
One possible way is to have one document per language (like `README.pt-BR.md` etc).https://gitlab.torproject.org/tpo/onion-services/cebollitas/-/issues/6Add reference to the onion-desktop project2023-05-09T17:32:06ZSilvio RhattoAdd reference to the onion-desktop projectAdd reference to the [onion-desktop](https://github.com/scanlime/onion-desktop) project.Add reference to the [onion-desktop](https://github.com/scanlime/onion-desktop) project.https://gitlab.torproject.org/tpo/onion-services/cebollitas/-/issues/5Create the onion-chat example2023-05-09T17:32:06ZSilvio RhattoCreate the onion-chat exampleCreate the `onion-chat` example with a basic chat application.Create the `onion-chat` example with a basic chat application.https://gitlab.torproject.org/tpo/onion-services/cebollitas/-/issues/4Create an onion-python example2023-05-09T17:32:06ZSilvio RhattoCreate an onion-python exampleCreate an `onion-python` example (with Python built-in webserver).Create an `onion-python` example (with Python built-in webserver).https://gitlab.torproject.org/tpo/onion-services/cebollitas/-/issues/3Rename onion-app to onion-flask2023-05-09T17:32:06ZSilvio RhattoRename onion-app to onion-flaskRename `onion-app` to `onion-flask`, to be more specific.Rename `onion-app` to `onion-flask`, to be more specific.https://gitlab.torproject.org/tpo/onion-services/cebollitas/-/issues/2LICENSE and other metafiles2023-05-15T09:49:43ZSilvio RhattoLICENSE and other metafilesAdd LICENSE and other metafiles.Add LICENSE and other metafiles.https://gitlab.torproject.org/tpo/onion-services/cebollitas/-/issues/1Improve documentation, show different technologies depending on the knowledge...2023-05-09T17:32:06ZjugaImprove documentation, show different technologies depending on the knowledge, for different operating systems and accesibilityDuring the workshop today we realized about many things we can improve.
The attendees have MacOS and Windows, didn't know about docker and Internet wasn't good, therefore it took quite some time to download, install and understand how t...During the workshop today we realized about many things we can improve.
The attendees have MacOS and Windows, didn't know about docker and Internet wasn't good, therefore it took quite some time to download, install and understand how to use docker in those operative systems.
For this concrete case we could have here or in a different repository:
- [ ] an example using only python (lighter to download) and tor, without docker
- [ ] add documentation about how to install docker in different operating system for the docker case
- [ ] add documentation about what each things does (lines in `torrc`, docker, ...)
- [ ] get people from UX to review the readibility of our exampleshttps://gitlab.torproject.org/tpo/network-health/tor-weather/-/issues/63Improve accessibility2023-12-13T16:00:57ZtelekoboldImprove accessibilityThe accessibility of the Tor Weather web pages could be improved. Examining the login page with [this freely available tool](https://accessmonitor.acessibilidade.gov.pt/results/https:%2F%2Fweather.torproject.org%2Flogin) yielded, among o...The accessibility of the Tor Weather web pages could be improved. Examining the login page with [this freely available tool](https://accessmonitor.acessibilidade.gov.pt/results/https:%2F%2Fweather.torproject.org%2Flogin) yielded, among others, the following results, which could probably be easily improved:
- SVG with missing alternative text
- no `<h1>` element
- JavaScript used to remove focus from field
- HTML errors (including the missing `alt` attribute)
- missing `lang` attribute
Further examination should be done [to the page(s) after login](https://weather.torproject.org/dashboard/node-status/node-down) (which is not easily accessible by the used tool), but most of above mentioned issues also occur there.https://gitlab.torproject.org/tpo/network-health/tor-weather/-/issues/45Subscription entries could get some more verbose explanation e.g. via tooltips2023-12-13T16:00:57ZGeorg KoppenSubscription entries could get some more verbose explanation e.g. via tooltipsSome subscription entries might not be easy to grasp. E.g. for the guard node subscription it's not clear whether one gets a notification once one loses the flag or once one gets it or both. We could be more verbose about what a subscrip...Some subscription entries might not be easy to grasp. E.g. for the guard node subscription it's not clear whether one gets a notification once one loses the flag or once one gets it or both. We could be more verbose about what a subscription entails by explaining it a bit more in tooltips.https://gitlab.torproject.org/tpo/network-health/tor-weather/-/issues/35Logout is not related to any kind of support2023-12-13T16:00:24ZGeorg KoppenLogout is not related to any kind of supportRight now if I look at the interface the "Logout" option looks like being in the Support group:
![weather_support](/uploads/f664069873d9a26baa0a2637a29f2fbd/weather_support.png)
I think there should be some space between it and the "Su...Right now if I look at the interface the "Logout" option looks like being in the Support group:
![weather_support](/uploads/f664069873d9a26baa0a2637a29f2fbd/weather_support.png)
I think there should be some space between it and the "Submit Feedback" option to avoid that impression.https://gitlab.torproject.org/tpo/network-health/bwauthealth/-/issues/10Remove Faravahar from code2024-01-17T09:41:29ZjugaRemove Faravahar from codeAs stated at https://gitlab.torproject.org/tpo/core/tor/-/issues/40688, we should also remove Faravahar here.
I think it's used in `bwauthealth/bwauthealthpr/settings/base.py` and `bwauthealth/bwauthealth/util.py`As stated at https://gitlab.torproject.org/tpo/core/tor/-/issues/40688, we should also remove Faravahar here.
I think it's used in `bwauthealth/bwauthealthpr/settings/base.py` and `bwauthealth/bwauthealth/util.py`https://gitlab.torproject.org/tpo/web/community/-/issues/303Add NAT/firewall setup instructions for Snowflake2023-05-11T18:26:19ZWofWcawofwca@protonmail.comAdd NAT/firewall setup instructions for Snowflakehttps://gitlab.torproject.org/tpo/web/community/-/tree/main/content/relay/setup/snowflake
Need to add instructions for how to set up the machine for it to have an "unrestricted NAT".
Typical firewall settings appear to result in a ["re...https://gitlab.torproject.org/tpo/web/community/-/tree/main/content/relay/setup/snowflake
Need to add instructions for how to set up the machine for it to have an "unrestricted NAT".
Typical firewall settings appear to result in a ["restricted NAT"](https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/blob/7db2568448fed6d883b33db11e3a497c69f1748f/broker/broker.go#L125), even if the machine has a dedicated IP (no NAT) (see [this forum post](https://forum.torproject.net/t/firewall-needs-settings-for-running-standalone-snowflake-proxy/4314/2?u=wofwca), for example), while an unrestricted one is more desirable. (Although I might be wrong, since [the metrics](https://snowflake-broker.torproject.net/metrics) say that there are ~2000 unrestricted proxies?) We [already have instructions](https://gitlab.torproject.org/tpo/web/community/-/blob/abea7a2c54a959136dc573489bfd3b24dd399703/content/relay/setup/post-install/contents.lr#L9) for regular Tor relays, but WebRTC (ICE) is a different kind of beast.
Need to consider both the NATed (say, behind a router), and the dedicated IP cases.
In case there's no NAT, simply allowing all incoming connections to the entire [allowed port range](https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/blob/7db2568448fed6d883b33db11e3a497c69f1748f/proxy/main.go#L35) should solve the problem, allowing the use of [`host` ICE candidates](https://webrtcforthecurious.com/docs/03-connecting/#host), but it compromises security, because another app may get assigned an ephemeral port from that range. So I thought maybe there is a way to disable [filtering](https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/wikis/NAT-matching#nat-filtering-behaviour) for the Snowflake process specifically. Or maybe use a non-ephemeral port range so that other apps can't randomly get a port from that range (but this may affect censorship-resistance). Or maybe there is a way to have one dedicated port for Snowflake (is [`SetICEUDPMux`](https://pkg.go.dev/github.com/pion/webrtc/v3#SettingEngine.SetICEUDPMux) it?) which can be opened up, with fallback to ephemeral ports in case the client's censor blocks that one.
There may be better mechanisms that I'm just not aware of since I'm not that good at networking (in both meanings of the word XD).
Related:
* https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/issues/40092
* https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake-webext/-/issues/57
* https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/issues/40235https://gitlab.torproject.org/tpo/core/torspec/-/issues/177Create Style Guides2023-01-05T18:14:59ZMatthew FinkelCreate Style GuidesFollowing legacy/trac#26184, we should document our coding style preferences. We should consider documenting all Tor Browser-related projects.Following legacy/trac#26184, we should document our coding style preferences. We should consider documenting all Tor Browser-related projects.https://gitlab.torproject.org/tpo/onion-services/onion-support/-/issues/174Onion Service Dereferrer2022-12-08T13:19:28ZSilvio RhattoOnion Service DereferrerBuild a small self-contained Onion Service application that does HTTP Referrer removals (link redirection).
See background discussion and details at https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/25484#note_2861382....Build a small self-contained Onion Service application that does HTTP Referrer removals (link redirection).
See background discussion and details at https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/25484#note_2861382.
See documentation on best-practices for Onion Services at https://gitlab.torproject.org/tpo/onion-services/onion-support/-/issues/30.https://gitlab.torproject.org/tpo/tpa/anon_ticket/-/issues/56Add tpo/anti-censorship/gettor-project/OnionSproutsBot to the list of projects2022-12-05T17:10:50Zn0tooseAdd tpo/anti-censorship/gettor-project/OnionSproutsBot to the list of projectsLink: https://gitlab.torproject.org/tpo/anti-censorship/gettor-project/OnionSproutsBotLink: https://gitlab.torproject.org/tpo/anti-censorship/gettor-project/OnionSproutsBothttps://gitlab.torproject.org/tpo/web/support/-/issues/316Page about bookmarks is confusing2023-11-06T20:15:12ZemmapeelPage about bookmarks is confusingThe page about exporting your bookmarks is pretty confusing: https://support.torproject.org/tbb/export-and-import-bookmarks/
One thing it does is to mix instructions for different operating systems without warning.
It would be better t...The page about exporting your bookmarks is pretty confusing: https://support.torproject.org/tbb/export-and-import-bookmarks/
One thing it does is to mix instructions for different operating systems without warning.
It would be better to have different sections for Mac, Linux, Android, Windows
thanks translator @eulalio for the comment at https://hosted.weblate.org/translate/tor/support-portal/es/?checksum=3dc5a0cd207d143bhttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41380Update bridges in our Makefile2023-01-05T18:05:33ZPier Angelo VendrameUpdate bridges in our MakefileBridges have been updated after tor-browser-build#40649 and a few other issues.
We should reflect the changes to tor-browser.git, too, if we want to test meek in our dev builds.
We could even remove the bridge file, and move them to `0...Bridges have been updated after tor-browser-build#40649 and a few other issues.
We should reflect the changes to tor-browser.git, too, if we want to test meek in our dev builds.
We could even remove the bridge file, and move them to `000-tor-browser.js`, if we have a macro that is defined only for dev builds (but not for nightlies; actually I'm a little bit confused about it).https://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/issues/130Upgrade telebot library to version 32022-11-03T16:39:33Zmeskiomeskio@torproject.orgUpgrade telebot library to version 3We use [telebot](https://github.com/tucnak/telebot) in our [bridges bot](https://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/blob/main/doc/telegram.md). But we are using the version 2 of the library, let's update it to version 3.We use [telebot](https://github.com/tucnak/telebot) in our [bridges bot](https://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/blob/main/doc/telegram.md). But we are using the version 2 of the library, let's update it to version 3.https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40642statically-link dependencies into tor daemon2023-07-18T21:40:35Zrichardstatically-link dependencies into tor daemonWe ship our own versions of libevent, openssl, etc with tor in Tor Browser. This can cause issues when systems do not use these packaged libraries ( like in https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41336 ).
We...We ship our own versions of libevent, openssl, etc with tor in Tor Browser. This can cause issues when systems do not use these packaged libraries ( like in https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41336 ).
We should statically link our dependencies into the tor daemon. This will ensure we are actually, using the implementation we think we are, and it should reduce the final package/install size as LTO will ensure we are only building and linking in the symbols actually used.
Ricochet-Refresh builds openssl, zlib and libevent this way for tor on Windows (x86,x64), Linux (x86,x64), and macOS (x64):
- openssl: https://github.com/blueprint-freespeech/ricochet-build/tree/main/projects/openssl
- libvent: https://github.com/blueprint-freespeech/ricochet-build/tree/main/projects/libevent
- zlib: https://github.com/blueprint-freespeech/ricochet-build/tree/main/projects/zlib
- tor: https://github.com/blueprint-freespeech/ricochet-build/tree/main/projects/tor
Android is not currently built/supported so anything in there referncing it is left-overs from the original tor-browser-build fork.Marco SimonelliMarco Simonellihttps://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/issues/128Add microsoft onedrive provider to gettor2022-10-05T13:37:27Zmeskiomeskio@torproject.orgAdd microsoft onedrive provider to gettorThe [gettor updater](https://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/blob/main/doc/gettor.md) could upload Tor Browser also to a [microsoft OneDrive](https://www.microsoft.com/en-us/microsoft-365/onedrive), like already do to o...The [gettor updater](https://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/blob/main/doc/gettor.md) could upload Tor Browser also to a [microsoft OneDrive](https://www.microsoft.com/en-us/microsoft-365/onedrive), like already do to other providers: https://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/tree/main/pkg/presentation/updaters/gettor
OneDrive free plan is only 5GBs, which is too small for our current needs, but this requirement might be reduced in the near future. Or we might consider paying for the service as OneDrive is probably reachable in most places.