The Tor Project issueshttps://gitlab.torproject.org/groups/tpo/-/issues2023-10-03T15:38:05Zhttps://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40615Consider adding a readme to the fonts directory2023-10-03T15:38:05ZPier Angelo VendrameConsider adding a readme to the fonts directoryWe could add a readme.txt to the font directory, in which we explain users that they aren't supposed to add fonts on their own, sum up the risk, and link some FAQ page.We could add a readme.txt to the font directory, in which we explain users that they aren't supposed to add fonts on their own, sum up the risk, and link some FAQ page.Sponsor 131 - Phase 2 - Privacy Browserhttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40144about:privatebrowsing Firefox branding2023-02-22T11:40:50ZPassword is "Cypherpunks Write Code" without quotescypherpunks@mailinator.comabout:privatebrowsing Firefox brandingabout:privatebrowsing contains Firefox branding instead of Tor Browser oneabout:privatebrowsing contains Firefox branding instead of Tor Browser oneSponsor 131 - Phase 2 - Privacy BrowserPier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/issues/5Implement persistence mechanism for resources2021-01-15T22:45:17ZPhilipp Winterphw@torproject.orgImplement persistence mechanism for resourcesRdsys's backend currently does not write anything to disk. Let's implement a persistence mechanism that allows rdsys to write its resources to disk so that they can persist across restarts. I suggest starting with a simple serialisation ...Rdsys's backend currently does not write anything to disk. Let's implement a persistence mechanism that allows rdsys to write its resources to disk so that they can persist across restarts. I suggest starting with a simple serialisation format like Golang's [gob](https://golang.org/pkg/encoding/gob/). Bridgestrap [does something similar](https://gitlab.torproject.org/tpo/anti-censorship/bridgestrap/-/blob/master/tor.go#L86).Sponsor 30 - Objective 2.3Armin HuremagicArmin Huremagichttps://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/issues/4Build API that lets resources register themselves2022-08-30T18:24:51ZPhilipp Winterphw@torproject.orgBuild API that lets resources register themselvesRdsys supports both a push and pull-based model to ingest resources. So far, we only read Tor's cached-extrainfo file (which comes from the bridge authority). Let's build an API that allows systems like HTTPS Proxy to register themselves...Rdsys supports both a push and pull-based model to ingest resources. So far, we only read Tor's cached-extrainfo file (which comes from the bridge authority). Let's build an API that allows systems like HTTPS Proxy to register themselves. There's a diagram over at tpo/anti-censorship/rdsys#3, which shows the big picture:
![Rdsys's architecture](https://gitlab.torproject.org/tpo/anti-censorship/rdsys/uploads/8d3021a46a656585fb02431b4ef77b81/BridgeDB-NG.png "Rdsys's architecture")
This issue concerns the arrow that's labeled with "Publish bridge line."Sponsor 30 - Objective 2.3Philipp Winterphw@torproject.orgPhilipp Winterphw@torproject.orghttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/20378Text-to-speech doesn't work in TBB since El Capitan2022-12-09T11:56:59ZJens KubiezielText-to-speech doesn't work in TBB since El CapitanAt [Tor.SE](https://tor.stackexchange.com) there is a [question regarding text-to-speech and Tor Browser](https://tor.stackexchange.com/q/12915/88). The user is dyslexic and recently upgraded to El Capitan (10.11.6). Since then the text-...At [Tor.SE](https://tor.stackexchange.com) there is a [question regarding text-to-speech and Tor Browser](https://tor.stackexchange.com/q/12915/88). The user is dyslexic and recently upgraded to El Capitan (10.11.6). Since then the text-to-speech software stopped working with TBB. The software reads the entire webpage instead of the text the user had selected. It worked in previous version of Moc OS X and it also does work in Firefox and Safari. So it seems to be a TBB related bug.
Do you need more information? Can you help to fix this bug?Sponsor 131 - Phase 2 - Privacy Browserhenryhenryhttps://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/issues/42Provide download links for android on gettor2023-02-03T16:01:32Zmeskiomeskio@torproject.orgProvide download links for android on gettorWill be nice to add android as a platform as well. There are few challenges, as there is one single `.apk` for all languages and a bunch of different architectures: android-aarch64, android-armv7, android-x86, android-x86_64.Will be nice to add android as a platform as well. There are few challenges, as there is one single `.apk` for all languages and a bunch of different architectures: android-aarch64, android-armv7, android-x86, android-x86_64.Sponsor 139: Rapid Response Iranmeskiomeskio@torproject.orgmeskiomeskio@torproject.orghttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41038Update "Click to Copy" button label in circuit display2023-04-04T15:29:45ZdonutsUpdate "Click to Copy" button label in circuit displayApparently the circuit display has a button to click to copy the URL, that appears when you hover over it (which is news to me!):
<img src="/uploads/fe519f445175dba65088b0cfa3430ba4/circuit-display-nyt.png" alt="circuit-display-nyt" wid...Apparently the circuit display has a button to click to copy the URL, that appears when you hover over it (which is news to me!):
<img src="/uploads/fe519f445175dba65088b0cfa3430ba4/circuit-display-nyt.png" alt="circuit-display-nyt" width="50%">
I'm guessing this is a legacy feature carried across from torbutton, since it's trivial enough to copy the URL from the address bar itself? In any case, we should avoid "Click..." commands in our microcopy and update the label to something like `Copy Address` instead.Sponsor 30 - Objective 3.5henryhenry2023-04-17https://gitlab.torproject.org/tpo/core/tor/-/issues/40619Typo in microdesc.c2022-07-21T19:19:42ZcypherpunksTypo in microdesc.cThe file src/feature/nodelist/microdesc.c currently has the following strings:
<code>
if (tor_memeq(node->rs->descriptor_digest,
(*mdp)->digest, DIGEST256_LEN)) {
rs_match = "Microdesc digest in RS...The file src/feature/nodelist/microdesc.c currently has the following strings:
<code>
if (tor_memeq(node->rs->descriptor_digest,
(*mdp)->digest, DIGEST256_LEN)) {
rs_match = "Microdesc digest in RS matches";
} else {
rs_match = "Microdesc digest in RS does match";
}
</code>
It looks like a typo that should read "digest in RS does *not* match".Tor: 0.4.8.x-freezeNick MathewsonNick Mathewsonhttps://gitlab.torproject.org/tpo/web/support/-/issues/300Search bar with fixed width2022-07-26T20:57:11ZGusSearch bar with fixed widthKeeping the search bar a fixed width (like \~600px) before the mobile breakpoint would be great too, otherwise it gets a little short at tablet sizes.
https://gitlab.torproject.org/tpo/web/support/-/merge_requests/108#note_2799154Keeping the search bar a fixed width (like \~600px) before the mobile breakpoint would be great too, otherwise it gets a little short at tablet sizes.
https://gitlab.torproject.org/tpo/web/support/-/merge_requests/108#note_2799154Sponsor 9 - Phase 6 - Usability and Community Intervention on Support for Democracy and Human Rightshttps://gitlab.torproject.org/tpo/web/community/-/issues/335(Snowflake guide) Add Snowflake debian package2024-02-05T19:12:52ZGus(Snowflake guide) Add Snowflake debian packageSnowflake-proxy is available as a package in Debian bookworm. We should mention at https://community.torproject.org/relay/setup/snowflake/standalone/Snowflake-proxy is available as a package in Debian bookworm. We should mention at https://community.torproject.org/relay/setup/snowflake/standalone/Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetGusGushttps://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/issues/118support multiple moat-shim tokens2022-12-16T12:05:21Zmeskiomeskio@torproject.orgsupport multiple moat-shim tokensRight now moat has a configuration field for a [shim_token](https://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/blob/main/conf/config.json#L99) used to authenticate connections coming from the domain fronting so we provide differen...Right now moat has a configuration field for a [shim_token](https://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/blob/main/conf/config.json#L99) used to authenticate connections coming from the domain fronting so we provide different bridges if is from domain fronting or from the open internet. Let's provide a list of shim-tokens so all of them are used to authenticate and provide the same kind of bridges if a valid token is provided, so other clients can have their own token.Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & Tibetmeskiomeskio@torproject.orgmeskiomeskio@torproject.orghttps://gitlab.torproject.org/tpo/web/community/-/issues/273[Snowflake] Update the standalone instructions2022-08-18T15:17:12ZGus[Snowflake] Update the standalone instructionsFrom https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/issues/40125
If I may I'd point out that the NAT behaviour tool page linked at https://community.torproject.org/relay/setup/snowflake/standalone/ ne...From https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/issues/40125
If I may I'd point out that the NAT behaviour tool page linked at https://community.torproject.org/relay/setup/snowflake/standalone/ needs updating as well. Currently the syntax uses 'go get' which is deprecated in favour of 'go install'. I only had success with "go install github.com/pion/stun/cmd/stun-nat-behaviour@latest".Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & Tibethttps://gitlab.torproject.org/tpo/web/donate-static/-/issues/35Update the donors FAQ2023-12-05T21:59:40ZemmapeelUpdate the donors FAQThe [donors FAQ](https://donate.torproject.org/donor-faq/) is a bit outdated.
There is also too many questions, we should simplify and not duplicate Tor Project FAQs, but replace them, for example, with links to the Support portal.
We h...The [donors FAQ](https://donate.torproject.org/donor-faq/) is a bit outdated.
There is also too many questions, we should simplify and not duplicate Tor Project FAQs, but replace them, for example, with links to the Support portal.
We have opened a pad to work on the changes at
http://kfahv6wfkbezjyg4r6mlhpmieydbebr5vkok5r34ya464gqz6c44bnyd.onion/p/donateFAQ6hS-wFdjD7QyebyfuCCFRedesign donate.torproject.orghttps://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/issues/6Implement integration tests2023-11-02T11:08:42ZPhilipp Winterphw@torproject.orgImplement integration testsLet's figure out a way to implement integration tests for rdsys. Here's a simple suggestion for a simple shell script:
1. Write a simple cached-extrainfo file to disk.
2. Start the backend.
3. Start the HTTPS distributor.
4. Use curl to ...Let's figure out a way to implement integration tests for rdsys. Here's a simple suggestion for a simple shell script:
1. Write a simple cached-extrainfo file to disk.
2. Start the backend.
3. Start the HTTPS distributor.
4. Use curl to fetch bridges from the HTTPS distributor.
5. Make sure that the bridges are the same as those in the cached-extrainfo file.
There are probably smarter ways to accomplish this. Let's make sure that our integration tests are lightweight and can be run as part of a continuous integration test infrastructure.Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & Tibetmeskiomeskio@torproject.orgmeskiomeskio@torproject.orghttps://gitlab.torproject.org/tpo/web/community/-/issues/341[Featured Onions] Add Amnesty International onionsite2024-03-06T17:41:16ZGus[Featured Onions] Add Amnesty International onionsiteLet's add Amnesty International onionsite to our curated list: https://community.torproject.org/onion-services/#featured-onions
"Amnesty International has today launched its global website as an .onion site on the Tor network, giving us...Let's add Amnesty International onionsite to our curated list: https://community.torproject.org/onion-services/#featured-onions
"Amnesty International has today launched its global website as an .onion site on the Tor network, giving users greater access to its ground-breaking work exposing and documenting human rights violations in areas where government censorship and digital surveillance are rife.
In recent years, a number of countries including Algeria, China, Iran, Russia and Viet Nam have blocked Amnesty International websites, according to the Open Observatory of Network Interference (OONI), in a deliberate attempt to suppress freedom of information and efforts to hold the powerful to account.
The new Amnesty onion site can be accessed using the Tor Browser through our secure onion address at: https://www.amnestyl337aduwuvpf57irfl54ggtnuera45ygcxzuftwxjvvmpuzqd.onion."
https://www.amnesty.org/en/latest/news/2023/12/global-amnesty-international-website-launches-on-tor-network-to-help-universal-access/GusGushttps://gitlab.torproject.org/tpo/onion-services/onionmine/-/issues/26Setup Onion MkDocs for Onionmine2024-02-22T22:06:52ZSilvio RhattoSetup Onion MkDocs for OnionmineConvert Onionmine documentation to [Onion MkDocs][].
[Onion Mkdocs]: https://gitlab.torproject.org/tpo/web/onion-mkdocs/Convert Onionmine documentation to [Onion MkDocs][].
[Onion Mkdocs]: https://gitlab.torproject.org/tpo/web/onion-mkdocs/Silvio RhattoSilvio Rhattohttps://gitlab.torproject.org/tpo/network-health/doctor/-/issues/40035"NOTICE: gabelmoo had 17 MiddleOnly flags in its vote but the consensus had 9...2024-03-21T14:27:02ZRoger Dingledine"NOTICE: gabelmoo had 17 MiddleOnly flags in its vote but the consensus had 9" isn't noteworthyI grabbed the consensus and gabelmoo's vote during the time period that we got the doctor warning, and sure enough:
```
$ grep MiddleOnly cached-consensus |grep ^s|wc -l
9
$ grep MiddleOnly gabelmoo-vote |grep ^s|wc -l
17
```
And in mo...I grabbed the consensus and gabelmoo's vote during the time period that we got the doctor warning, and sure enough:
```
$ grep MiddleOnly cached-consensus |grep ^s|wc -l
9
$ grep MiddleOnly gabelmoo-vote |grep ^s|wc -l
17
```
And in more detail,
```
$ grep MiddleOnly gabelmoo-vote |grep ^s
s BadExit MiddleOnly Running Stable Valid
s BadExit Fast MiddleOnly Stable Valid
s BadExit Fast MiddleOnly Running Stable Valid
s BadExit Fast MiddleOnly Running Stable Valid
s BadExit Fast MiddleOnly Stable Valid
s BadExit Fast MiddleOnly Running Valid
s BadExit Fast MiddleOnly Running Stable Valid
s BadExit Fast MiddleOnly Running Valid
s BadExit Fast MiddleOnly Stable Valid
s BadExit Fast MiddleOnly Stable Valid
s BadExit Fast MiddleOnly Stable Valid
s BadExit Fast MiddleOnly Stable Valid
s BadExit Fast MiddleOnly Stable Valid
s BadExit Fast MiddleOnly Running Stable Valid
s BadExit Fast MiddleOnly Running Stable Valid
s BadExit Fast MiddleOnly Stable Valid
s BadExit Fast MiddleOnly Running Stable Valid
```
So even gabelmoo only thought 9 of the 17 should be Running, so it's not surprising that only 9 of them made it into the consensus.
But even if gabelmoo had different opinions about which ones are Running, the fact that gabelmoo voted MiddleOnly about a relay which didn't make it into the consensus is not noteworthy. There are a variety of cases where it could happen during normal operation.
I think a more precise check would be: for each relay listed in the consensus as MiddleOnly, did gabelmoo list it as MiddleOnly too?
If that's too much coding, a simpler approximation (which avoids reporting the false positives but also omits some of the true positives) might be: don't log anything if the number in the vote is bigger than the number in the consensus.Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/anti-censorship/bridge-port-scan/-/issues/7Build process needs updating2024-02-07T13:11:37ZKezBuild process needs updatingThe web team's lektor site build process has changed a bit since this repo was last updated, and the repo no longer builds with the instructions provided (the build instructions seem a bit incomplete even without these build changes). So...The web team's lektor site build process has changed a bit since this repo was last updated, and the repo no longer builds with the instructions provided (the build instructions seem a bit incomplete even without these build changes). So the build process needs to be updated, and more thoroughly documented.https://gitlab.torproject.org/tpo/network-health/metrics/website/-/issues/40106Details API returning undocumented `contact` for bridges2023-11-29T20:48:03ZSarthik Guptasarthikg@icloud.comDetails API returning undocumented `contact` for bridgesContrary to the key-value pairs listed at https://metrics.torproject.org/onionoo.html#details_bridge,
Details API Response contains `contact` key for bridges as can be tested in the response for the following api, https://onionoo.torpro...Contrary to the key-value pairs listed at https://metrics.torproject.org/onionoo.html#details_bridge,
Details API Response contains `contact` key for bridges as can be tested in the response for the following api, https://onionoo.torproject.org/details?limit=4&search=scriptonhttps://gitlab.torproject.org/tpo/network-health/metrics/onionoo/-/issues/40041Details API returning undocumented `contact` for bridges2023-11-27T14:49:33ZSarthik Guptasarthikg@icloud.comDetails API returning undocumented `contact` for bridgesContrary to the key-value pairs listed at https://metrics.torproject.org/onionoo.html#details_bridge,
Details API Response contains `contact` key for bridges as can be tested in the response for the following api, https://onionoo.torpro...Contrary to the key-value pairs listed at https://metrics.torproject.org/onionoo.html#details_bridge,
Details API Response contains `contact` key for bridges as can be tested in the response for the following api, https://onionoo.torproject.org/details?limit=4&search=scripton