The Tor Project issueshttps://gitlab.torproject.org/groups/tpo/-/issues2021-12-13T18:18:09Zhttps://gitlab.torproject.org/tpo/ux/design/-/issues/21[UX] Learn about other products2021-12-13T18:18:09Zriyajawandhiya[UX] Learn about other products**Why is this important?**
It will communicate other products of tor community offered for diversification reasons. They are already using one product, the user might be interested in a particular product only and making user learn about...**Why is this important?**
It will communicate other products of tor community offered for diversification reasons. They are already using one product, the user might be interested in a particular product only and making user learn about other may encourage them to use or even share to those people the find or think may be useful to them.
**How to add them without extra detailing**
It will be good if we add to the present interface a rectangular bar in the empty space of the home screen or an intuitive icon that can incite the user to tap on it. It should be done in a friendly and interactive way.
Another way is to provide some tips which pop up in a clear and transparent way (a way that will not block or obscure part of the present interface ) as the user navigates along.https://gitlab.torproject.org/tpo/ux/design/-/issues/18[UX] Non-uniform search bar2021-12-13T18:17:54Zriyajawandhiya[UX] Non-uniform search bar**What is the issue?**
When taping the logo of the search engine, it doesn't open up in the tab which goes against the expected behavior.
For all the competitor applications, open up the search engine in the tab.
**Why is it important?...**What is the issue?**
When taping the logo of the search engine, it doesn't open up in the tab which goes against the expected behavior.
For all the competitor applications, open up the search engine in the tab.
**Why is it important?**
They allow users to quickly move between a small number of equally important views. When implemented correctly, tabs improve usability by making the navigation experience more clear.
1. Make navigation predictable
2. Add visual consistencyhttps://gitlab.torproject.org/tpo/ux/design/-/issues/17[UX] Nonuniformity in home page2021-12-13T18:16:59Zriyajawandhiya[UX] Nonuniformity in home pageAligning the logo to the center
I felt that the home screen was lacking overall uniformity and symmetry. This could reduce the overall appeal of the UI.
The logo on the home screen occupies the left corner, resulting in a lot of empty ar...Aligning the logo to the center
I felt that the home screen was lacking overall uniformity and symmetry. This could reduce the overall appeal of the UI.
The logo on the home screen occupies the left corner, resulting in a lot of empty areas on the right.https://gitlab.torproject.org/tpo/ux/design/-/issues/13[UX] Confusing path to reach home button2021-12-13T18:16:15Zriyajawandhiya[UX] Confusing path to reach home button**What is the user problem?**
The new user can get confused in finding the home screen
**Why is this important?**
A user may press back which will take them to each page visited. Pressing the tab button may not come to mind as in oth...**What is the user problem?**
The new user can get confused in finding the home screen
**Why is this important?**
A user may press back which will take them to each page visited. Pressing the tab button may not come to mind as in other browsers it only opens floating active tabs and not the home screen.
**how to solve this?**
Pop-ups can be provided to the new user.https://gitlab.torproject.org/tpo/ux/design/-/issues/12[UX] Top sites : functionality and usage2022-04-06T21:23:18Zriyajawandhiya[UX] Top sites : functionality and usage**Functionality**
Add to top sites is given in the mobile application.
Open a tab>> click on kebab menu >> Add to top sites
**How to use?**
Steps to reuse it as a shortcut are unknown.
**Changes**
1. Adding the shortcut in the kebab ...**Functionality**
Add to top sites is given in the mobile application.
Open a tab>> click on kebab menu >> Add to top sites
**How to use?**
Steps to reuse it as a shortcut are unknown.
**Changes**
1. Adding the shortcut in the kebab menu >> bookmarks and top sites
2. Removing the featurehttps://gitlab.torproject.org/tpo/ux/design/-/issues/11[UX] Seperate private search engine2022-04-06T21:20:41Zriyajawandhiya[UX] Seperate private search engine**What is the problem you are trying to solve?**
Users may want to change the default search provider.
**Why is it a problem?**
The user might not want to use Duck Duck Go as a default search engine as they can be more careful about ...**What is the problem you are trying to solve?**
Users may want to change the default search provider.
**Why is it a problem?**
The user might not want to use Duck Duck Go as a default search engine as they can be more careful about searching on the [local level](https://dzone.com/articles/duckduckgo-has-a-privacy-problem).
None of the search engines is perfect, so we can give users the freedom to use the search engine which they trust.
**How would you solve the problem? What is your design proposal?**
A dialogue box asking if the user wants to change the default search engine.https://gitlab.torproject.org/tpo/ux/design/-/issues/10[UX] Adding shortcuts in the search bar2021-12-13T18:15:54Zriyajawandhiya[UX] Adding shortcuts in the search bar**Mention the issue**
During a search, if the search bar is clicked automatically text is selected there are no suggestions or shortcuts are showing whether we want to copy the text or the document button is given there whose usage is n...**Mention the issue**
During a search, if the search bar is clicked automatically text is selected there are no suggestions or shortcuts are showing whether we want to copy the text or the document button is given there whose usage is not clear.
Either we have to click shortcuts or delete the selected text, which increases the number of clicks.
**Explain the issue**
It's an issue because, in the browser, the documentation shortcut button confuses the user and some users are lost.https://gitlab.torproject.org/tpo/ux/design/-/issues/8[UX] Enhancing the Search Experience2021-12-13T18:15:35Zriyajawandhiya[UX] Enhancing the Search Experience**What is the problem you are trying to solve?**
Enhancing the Search Experience
**Why is it a problem?** (Why is it important)
Enhancing Search experience is essential as it is one of the most common elements that we interact with d...**What is the problem you are trying to solve?**
Enhancing the Search Experience
**Why is it a problem?** (Why is it important)
Enhancing Search experience is essential as it is one of the most common elements that we interact with daily. If users can easily express their queries and needs, and they get useful information or personalized information, it can be a win for the app or website.
**How would you solve the problem? What is your design proposal?**
We can enhance the user’s searching experience by :
1. Improving the search experience on the home screen
Adding QR code, voice, and image search features on the website.https://gitlab.torproject.org/tpo/ux/design/-/issues/6[UX] usage of unnecessary buttons2022-08-01T17:30:23Zriyajawandhiya[UX] usage of unnecessary buttons**What is the user problem?**
The usage of unnecessary buttons is a common problem. When a user is provided with too many options, users end up doing nothing.
![image](/uploads/2ae24704902491e60e158104a2720459/image.png)
The tests dis...**What is the user problem?**
The usage of unnecessary buttons is a common problem. When a user is provided with too many options, users end up doing nothing.
![image](/uploads/2ae24704902491e60e158104a2720459/image.png)
The tests discovered that simple fonts and print helped people reason more clearly. The more options are given, the harder it was for subjects to process information.
**Why is this important?**
A button’s action and state should be clear.
**Why does this satisfy?**
1. Removing confusions
2. Clean as space is saved
3. Minimal designs are always lighter than those cluttered and complex designs with too many elements
**How to measure design's effectiveness?**
[A/B testing](https://uxdesign.cc/7-steps-of-a-b-testing-what-how-cf3b209467fd) - A quick A/B with my acquaintances (who cover major sections of people using the internet) with a high-fidelity versionhttps://gitlab.torproject.org/tpo/core/tor/-/issues/40326Request for comment - Debian logrotate - Adding the scrub option by default2022-10-24T20:55:12ZcypherpunksRequest for comment - Debian logrotate - Adding the scrub option by defaultWe could add the "shred" and "shredcycles" options to "/etc/logrotate.d/tor" by default. The number of cycles could be just 1, instead of the default 3, to reduce wear. We should at least to it for relays and the "debug" and "info" log l...We could add the "shred" and "shredcycles" options to "/etc/logrotate.d/tor" by default. The number of cycles could be just 1, instead of the default 3, to reduce wear. We should at least to it for relays and the "debug" and "info" log level.
Here is [some](https://www.bleepingcomputer.com/news/government/german-police-accused-of-carrying-out-some-pretty-stupid-raids/) [horror](https://www.techdirt.com/articles/20160406/08211234116/law-enforcement-raids-another-tor-exit-node-because-it-still-believes-ip-address-is-person.shtml) [stories](https://www.theregister.com/2014/12/22/stay_away_popular_tor_exit_relays_look_raided/) that support my concern.https://gitlab.torproject.org/tpo/tpa/team/-/issues/40185re-enable grub automated upgrades?2022-11-07T17:35:12Zanarcatre-enable grub automated upgrades?In #40042 (and #40040 and #40041) we touched on some of the issues we recently had rebooting after grub upgrades.
i wonder if this issue might have actually been fixed in Debian's grub scripts... I am not sure what error we were getting...In #40042 (and #40040 and #40041) we touched on some of the issues we recently had rebooting after grub upgrades.
i wonder if this issue might have actually been fixed in Debian's grub scripts... I am not sure what error we were getting on the console here exactly, but if i remember correctly, it looked something like [bug 966575](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=966575) in the Debian BTS, which is:
```
GRUB loading.
Welcome to GRUB!
error: symbol 'grub_calloc' not found.
grub rescue>
```
was that the exact error?
if that's the case, then the bug above is marked as fixed in grub 2.02+dfsg1-20+deb10u3, which has been shipped everywhere. also, since that version, grub-pc upgrades will completely fail if `grub-install` fails, which should at least mark the package as broken in situations such as this.
so should we remove this from the unattended-upgrades blocklist?Jérôme Charaouilavamind@torproject.orgJérôme Charaouilavamind@torproject.orghttps://gitlab.torproject.org/tpo/core/tor/-/issues/40302ORPort incorrectly detected as non-reachable in 0.4.5.6/62022-06-24T14:33:37ZrotorORPort incorrectly detected as non-reachable in 0.4.5.6/6### Summary
After my bridge upgrade from 0.4.3.5 to 0.4.5.5 (and now 0.4.5.6 - from your "debian stable main" repository) my ORPort isn't detected as reacheable anymore (a message in logs after 20 minutes). However, when I check it with...### Summary
After my bridge upgrade from 0.4.3.5 to 0.4.5.5 (and now 0.4.5.6 - from your "debian stable main" repository) my ORPort isn't detected as reacheable anymore (a message in logs after 20 minutes). However, when I check it with telnet or even using your TCP reachability test it is completely fine. I suspect, it is a regression related to more aggressive IPv6 mode (I've seen the other issues, but they seemed to be fixed in 0.4.5.6).
I tried to set `ORPort` to "55555 IPv4Only", but it does seem to be ignored. I still observe:
> Unable to find IPv4 address for ORPort 55555. You might want to specify IPv4Only to it or set an explicit address or set Address.
maybe related to #40300.
As I run Tor in a container image in Podman, I cannot easily define an IP address in the configuration. In addition the container might support IPv6 at its network interface, but my external (host's) network does not. That might be confusing for Tor and maybe the external checker tries to reach it using IPv6.
It would be good to be able to simply disable IPv6 globally (IPv4Only in ORPort doesn't work for me). Related to #40208? Is there any workaround available right now to make it work again?
### Environment
Tor 0.4.5.6 from your "debian stable main" repository
> Tor 0.4.5.6 running on Linux with Libevent 2.1.8-stable, OpenSSL 1.1.1d, Zlib 1.2.11, Liblzma 5.2.4, Libzstd 1.3.8 and Glibc 2.28 as libc.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40338Tor Browser complains of potential security risk ahead for valid certificate,...2022-07-08T23:13:33Zf9424ec9fd944a20Tor Browser complains of potential security risk ahead for valid certificate, unable to accept risk and continueTor Browser version 10.0.10 on Manjaro Linux
When trying to visit a specific https:// site Tor Browser displays page "Warning: Potential Security Risk Ahead".
The links on this page, "Learn more…", "Go Back", do nothing. Clicking "Adva...Tor Browser version 10.0.10 on Manjaro Linux
When trying to visit a specific https:// site Tor Browser displays page "Warning: Potential Security Risk Ahead".
The links on this page, "Learn more…", "Go Back", do nothing. Clicking "Advanced" reveals another link "Accept the Risk and Continue" which does nothing.
In previous Tor Browser versions I was able to "Accept the Risk and Continue", but this no longer works.
Other browsers such as Firefox and Chromium do not complain about a potential security risk when visiting the same site.
The certificate appears valid an not self signed.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40331Error when searching in tor browser2022-12-08T15:15:30ZThe WisemError when searching in tor browserWhen I do my first search on tor, it would always show this error sign. It always occurs. But only on the first search when starting tor. Rest is working.![Screenshot_20210213-092825](/uploads/0c02da2f91d261d5ed64162f4336ddf0/Screenshot_...When I do my first search on tor, it would always show this error sign. It always occurs. But only on the first search when starting tor. Rest is working.![Screenshot_20210213-092825](/uploads/0c02da2f91d261d5ed64162f4336ddf0/Screenshot_20210213-092825.jpg)
Device: Samsung galaxy tab A
OS: Android 7.0.0https://gitlab.torproject.org/tpo/core/tor/-/issues/40262Static build regression in !2172022-06-17T16:30:53ZtobtohtStatic build regression in !217A static Tor build using the Dockerfile below results in:
```
/usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/5/crtbeginT.o: relocation R_X86_64_32 against `__TMC_END__' can not be used when making a shared object; recompile with -fPIC
/usr/...A static Tor build using the Dockerfile below results in:
```
/usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/5/crtbeginT.o: relocation R_X86_64_32 against `__TMC_END__' can not be used when making a shared object; recompile with -fPIC
/usr/lib/gcc/x86_64-linux-gnu/5/crtbeginT.o: error adding symbols: Bad value
```
Dockerfile:
```
FROM ubuntu:16.04
ENV CFLAGS="-fPIC"
ENV CPPFLAGS="-fPIC"
ENV CXXFLAGS="-fPIC"
ENV SOURCE_DATE_EPOCH=1397818193
RUN apt-get update && \
apt-get install -y build-essential wget git automake pkg-config python python3 && \
rm -rf /var/lib/apt/lists/*
# Tor will not static link with 1.1.1i
RUN wget https://www.openssl.org/source/openssl-1.0.2u.tar.gz && \
echo "ecd0c6ffb493dd06707d38b14bb4d8c2288bb7033735606569d8f90f89669d16 openssl-1.0.2u.tar.gz" | sha256sum -c && \
tar -xzf openssl-1.0.2u.tar.gz && \
rm openssl-1.0.2u.tar.gz && \
cd openssl-1.0.2u && \
./config no-shared no-dso --prefix=/usr/local/openssl-1.0.2u && \
make -j$THREADS && \
make test && \
make -j$THREADS install_sw && \
rm -rf $(pwd)
RUN wget https://github.com/libevent/libevent/releases/download/release-2.1.12-stable/libevent-2.1.12-stable.tar.gz && \
echo "92e6de1be9ec176428fd2367677e61ceffc2ee1cb119035037a27d346b0403bb libevent-2.1.12-stable.tar.gz" | sha256sum -c && \
tar -zxvf libevent-2.1.12-stable.tar.gz && \
cd libevent-2.1.12-stable && \
PKG_CONFIG_PATH=/usr/local/openssl-1.0.2u/lib/pkgconfig/ \
./configure --prefix=/usr/local/libevent \
--disable-shared \
--enable-static \
--with-pic && \
make -j$THREADS && \
make -j$THREADS install && \
rm -rf $(pwd)
RUN git clone -b v1.2.11 --depth 1 https://github.com/madler/zlib && \
cd zlib && \
git reset --hard cacf7f1d4e3d44d871b605da3b647f07d718623f && \
./configure --static --prefix=/usr/local/zlib && \
make -j$THREADS && \
make -j$THREADS install && \
rm -rf $(pwd)
RUN git clone -b tor-0.4.5.4-rc --depth 1 https://git.torproject.org/tor.git && \
cd tor && \
git reset --hard 9e26a9399fe2422475406d6ee3cb29b2924f3274 && \
./autogen.sh && \
./configure \
--disable-asciidoc \
--disable-manpage \
--disable-html-manual \
--disable-system-torrc \
--disable-module-relay \
--disable-lzma \
--disable-zstd \
--enable-static-tor \
--with-libevent-dir=/usr/local/libevent \
--with-openssl-dir=/usr/local/openssl-1.0.2u \
--with-zlib-dir=/usr/local/zlib \
--disable-tool-name-check \
--enable-fatal-warnings \
--prefix=/usr/local/tor && \
make -j$THREADS && \
make -j$THREADS install && \
rm -rf $(pwd)
```
I bisected this to !217 (Commit: c618c4f27986825df2026fb22b8ee222edd1afa1).
Unrelated to this issue, I noticed a typo in `src/app/include.am`: @TOR_STATIC_**FALGS**@https://gitlab.torproject.org/tpo/core/tor/-/issues/40247relays offline2021-03-02T12:53:37Zpeskyrabbitrelays offlineOkay, relays in question:
https://metrics.torproject.org/rs.html#search/flag:exit%20as:AS200052
I upgraded the relays 2d15h ago to Tor 0.4.6.0-alpha-dev
since then some of the relays are voted to be seen offline.
all of the relays ar...Okay, relays in question:
https://metrics.torproject.org/rs.html#search/flag:exit%20as:AS200052
I upgraded the relays 2d15h ago to Tor 0.4.6.0-alpha-dev
since then some of the relays are voted to be seen offline.
all of the relays are on servers which were not offline the last days:
exit@worlddomination3:~/relayon0301$ uptime
22:15:16 up 33 days, 23:23, 1 user, load average: 41.39, 39.65, 38.87
also, my own AS was online:
https://stat.ripe.net/AS208294#tabId=at-a-glance
So every relay which is less than 2d15h online was voted from the auth servers to be seen offline. I do not see any pattern in this. Relays go down and after a few hours they come back without any change on the server or relays.
Just to make sure: relays, server and routing works. The relays in question are just shown offline in Atlas...https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40284Bluetooth keyboard status change causes Android Tor drop2022-12-08T15:15:31ZjoshuhwuhBluetooth keyboard status change causes Android Tor dropWhen I have Android Tor version 10.0.6 (83.1.0-Release) (Build #2015737915) browser running with Bluetooth active on the phone, connected to a logitech Bluetooth keyboard, if I turn off the keyboard, or walk out of range and lose the con...When I have Android Tor version 10.0.6 (83.1.0-Release) (Build #2015737915) browser running with Bluetooth active on the phone, connected to a logitech Bluetooth keyboard, if I turn off the keyboard, or walk out of range and lose the connection, Tor closes all tabs and loses its connection, returning to the "Connect" screen. It also does this in the opposite situation, where I turn ON the keyboard or establish a Bluetooth connection.
New to GitHub/Lab. Please advise if this needs to be posted elsewhere.
Thank you!https://gitlab.torproject.org/tpo/network-health/metrics/onionperf/-/issues/40015Onionperf ability to configure guard topology and proximity2021-04-01T11:57:16ZGeorge KadianakisOnionperf ability to configure guard topology and proximityIn https://gitlab.torproject.org/tpo/core/tor/-/issues/40157 we've been doing experiments with various guard topologies. In particular we do experiments with guards that are **close** to the onionperf box, and guards that are **far** fro...In https://gitlab.torproject.org/tpo/core/tor/-/issues/40157 we've been doing experiments with various guard topologies. In particular we do experiments with guards that are **close** to the onionperf box, and guards that are **far** from the onionperf box, or with 2 guards where one guard is close and the other is far. We also do experiments with a single guard and two guards.
Right now I'm doing this by specifying a different config file for each of those scenarios. However if we want to run these experiments consistently in the future we might want to automate this in onionperf.
\cc @acute @karsten @mikeperrySponsor 61 - Making the Tor network faster & more reliable for users in Internet-repressive placeshttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40262Browser tabs crashing on the new Macbooks with the M1 chip2021-01-16T16:15:29Zchampionquizzerchampionquizzer@torproject.orgBrowser tabs crashing on the new Macbooks with the M1 chipThere are recurring reports from users on the frontdesk that the latest version of Tor Browser (10.0.5) and Tor Browser Alpha (10.5a4) for the MacOS on the new Macbooks with the M1 chip, keeps crashing with the error message "Gah. Your t...There are recurring reports from users on the frontdesk that the latest version of Tor Browser (10.0.5) and Tor Browser Alpha (10.5a4) for the MacOS on the new Macbooks with the M1 chip, keeps crashing with the error message "Gah. Your tab just crashed"Tor Browser: 10.0https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40248tor browser creates data outside bundle directory on windows2022-12-08T15:15:31Zconcarnetor browser creates data outside bundle directory on windowsWhile using tor-browser on windows (bundle installed on usb flash) it creates a folder labeled "tor" in C:\Users\<username>\AppData\Roaming
it does that on any machine that the USB is plugged into and tor-browser is executed including t...While using tor-browser on windows (bundle installed on usb flash) it creates a folder labeled "tor" in C:\Users\<username>\AppData\Roaming
it does that on any machine that the USB is plugged into and tor-browser is executed including the the machine that was originally used to download and install the tor browser. The tor browser itself works fine on all machines it is used on.
List of files in the "tor" directory can be seen in the screenshot![tbb](/uploads/d5c494e9c5b46ec5e2d654bba2e8580f/tbb.JPG) attached