The Tor Project issueshttps://gitlab.torproject.org/groups/tpo/-/issues2022-05-03T11:01:24Zhttps://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/issues/101how to keep the quality of the telegram bridges?2022-05-03T11:01:24Zmeskiomeskio@torproject.orghow to keep the quality of the telegram bridges?Right now the bridges distributed by the telegram bot have a very small ratio of being blocked, as they are manually handled and rotated when blocked. We are integrating the bot into rdsys and as part of that planning to start using brid...Right now the bridges distributed by the telegram bot have a very small ratio of being blocked, as they are manually handled and rotated when blocked. We are integrating the bot into rdsys and as part of that planning to start using bridges from the bridge authority, at least for the *old* accounts.
Bridges in rdsys has being rotated, and some old bridges might have being blocked in certain countries when they were assigned to another distributor. Also, censors might discover bridges in the *old* pool by using and block them and our [protections](https://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/blob/main/doc/telegram.md) might not be enough. How can we keep the quality of bridges after the move?
The situation might not be attenuated by providing more than one bridge on each request, but a higher number of bridges provided also means make easier for the censor to block them.
Some ideas we discussed today:
* Can we use the country block mechanism of rdsys to stop distributing bridges in certain countries? In telegram we don't know the country where the user comes from, but we do know their locale, maybe we can use this. But that will require maintaining that list manually.
* Should we distribute a small set of well tested bridges that we know they work? We can use the [allow list](https://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/blob/main/doc/block-allow-list.md) and the locale of the user to provide a list of bridges we want to distribute in a certain country/locale that we have tested they work.Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & Tibetmeskiomeskio@torproject.orgmeskiomeskio@torproject.orghttps://gitlab.torproject.org/tpo/community/relays/-/issues/44Scaling dynamic bridges2023-08-10T14:54:48ZGusScaling dynamic bridgesAs @irl is working on the Bypass Censorship dashboard (https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/66), we should:
- [x] Look into the budget for new relay/bridge associations
- [x] Define how to send bridgelines to ...As @irl is working on the Bypass Censorship dashboard (https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/66), we should:
- [x] Look into the budget for new relay/bridge associations
- [x] Define how to send bridgelines to the vantage point, so they can rotate the bridge when it's blocked
- [ ] Find other operatorsSponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetGusGushttps://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/issues/100in moat's circumvention defaults you can get the same bridge twice2022-03-31T10:20:33Zmeskiomeskio@torproject.orgin moat's circumvention defaults you can get the same bridge twiceBridges are selected randomly and is not checking that they are different.Bridges are selected randomly and is not checking that they are different.Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & Tibetmeskiomeskio@torproject.orgmeskiomeskio@torproject.orghttps://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/issues/99distributors should wait a delay to retry the connection to the backend2022-06-02T10:08:28Zmeskiomeskio@torproject.orgdistributors should wait a delay to retry the connection to the backendEach retry produces an entry in the log, a missconfigured service was retrying so frequently that has produced 10GB of logs and fill the disk.Each retry produces an entry in the log, a missconfigured service was retrying so frequently that has produced 10GB of logs and fill the disk.Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & Tibetmeskiomeskio@torproject.orgmeskiomeskio@torproject.orghttps://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/issues/97shorten the period to get fresh bridges in circumvention settings2023-09-11T15:36:19Zmeskiomeskio@torproject.orgshorten the period to get fresh bridges in circumvention settingsAt !30 I implemented (from the [doc I wrote](https://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/blob/0d4729347c11bb476fcb41eaff47d50241a7567a/doc/moat.md)):
> The resources provided /circumvention/settings and /circumvention/defa...At !30 I implemented (from the [doc I wrote](https://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/blob/0d4729347c11bb476fcb41eaff47d50241a7567a/doc/moat.md)):
> The resources provided /circumvention/settings and /circumvention/defaults use a combination of two mechanisms to make it harder for attackers to list all the bridges.
>
> Resources are group so each resource will only be distributed in a certain time period (rotation_period_hours), and will not be distributed again until a number of periods has past (num_periods). If rotation_period_hours=24 and num_periods=30 resources will be divided in 30 groups and each group will be distributed during one day and so a single resource will not be distributed again 30 days has passed.
>
> The IP address of the requester will be used so over the same rotation period every IP coming from the same subnet will get the same resources on each request.
I have some doubts about that mechanism. I'm thinking on setting `rotation_period_hours=24`. So if the bridges that a user gets don't work they need to wait for a day to be able to request new bridges, might that be too long? Might we want to add another rotation period for the IP subnet, something like the current MOAT_ROTATION_PERIOD=3h, so from the same bridge group a single subnet can get different bridges each 3 hours. Or will that just complicate the mechanism without adding much?
I'm using the same subnet definition that [BridgeDB](https://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/blob/9f739738fe1eed32933a9fa0165b0835907280e2/bridgedb/distributors/https/distributor.py#L110), /16 for IPv4 and /32 for IPv6. Specifically for IPv4 I guess many countries will not have so many subnets, which means that most users in a country requesting bridges in a single rotation period will get to few bridges. Is that concern real? The second rotation period would help here as well, or we could reduce the subnets (to /24 for IPv4).
(from https://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/issues/79#note_2788654)Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & Tibetmeskiomeskio@torproject.orgmeskiomeskio@torproject.orghttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40861[Connection Settings] Rejig the UI to support multiple bridge lines2022-04-12T21:35:35Zdonuts[Connection Settings] Rejig the UI to support multiple bridge linesNow we have an accordion designed to support multiple bridge lines, Let's update the wip `about:preferences#connection` pane.
See https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40782#note_2789998 for mockups and not...Now we have an accordion designed to support multiple bridge lines, Let's update the wip `about:preferences#connection` pane.
See https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40782#note_2789998 for mockups and notes on intended behavior.
Here for the Figma file: [Figma link](https://www.figma.com/file/eL7fo8Fdy8cexelqoLP90e/about%3Apreferences%23connection?node-id=3%3A4221)
And the following links for slightly buggy prototypes:
- [Not connected accordion](https://www.figma.com/proto/eL7fo8Fdy8cexelqoLP90e/about%3Apreferences%23connection?page-id=3%3A4221&node-id=3%3A9406&viewport=289%2C48%2C0.32&scaling=min-zoom&starting-point-node-id=3%3A4349)
- [Connected accordion](https://www.figma.com/proto/eL7fo8Fdy8cexelqoLP90e/about%3Apreferences%23connection?page-id=3%3A4221&node-id=23%3A2923&viewport=289%2C48%2C0.32&scaling=min-zoom&starting-point-node-id=3%3A4349)Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetPier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40860Create shortlist of unicode emoji for bridge-moji feature2022-07-19T11:04:38ZdonutsCreate shortlist of unicode emoji for bridge-moji featureThe new bridge cards that were designed for `about:preferences#connection` in https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40782 initially included four randomly generated words to help differentiate one bridge fro...The new bridge cards that were designed for `about:preferences#connection` in https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40782 initially included four randomly generated words to help differentiate one bridge from another. When reviewing this feature, the team pointed out that using an English-language dictionary would lead to poorer recognition by non-English speakers – and it was suggested to replace these with emojis instead (similar to how matrix.org handles key-comparisons, which is a nice analogue), which would have the added benefit of still being a11y friendly :sparkles:
This ticket is to review the full unicode list of emoji and provide a safe shortlist/subset to use when generating bridge-moji. For example, we should avoid emoji of a political nature (e.g. flags), those with negative connotations (e.g. weapons or alcohol), emoji that are hard to recognize/describe, or emojis that are too similar to differentiate at a glance (e.g. the many different kinds of smiley).
https://unicode.org/emoji/charts/full-emoji-list.htmlSponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetPier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/issues/96only distribute functional bridges tested by bridgestrap2023-05-10T17:46:44Zmeskiomeskio@torproject.orgonly distribute functional bridges tested by bridgestrapWe are testing bridges with bridgestrap and using that results for metrics and to provide feedback to bridge operators on the status of their bridges. But having a fast look into the code doesn't look like we are using that results to di...We are testing bridges with bridgestrap and using that results for metrics and to provide feedback to bridge operators on the status of their bridges. But having a fast look into the code doesn't look like we are using that results to distribute only functional bridges.Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & Tibetmeskiomeskio@torproject.orgmeskiomeskio@torproject.orghttps://gitlab.torproject.org/tpo/web/support/-/issues/296Discourage VPN usage when running a snowflake proxy2024-02-27T13:16:51ZGusDiscourage VPN usage when running a snowflake proxyFeedback from the [Tor forum](https://forum.torproject.net/t/discourage-vpn-usage-when-running-a-snowflake-proxy/2408):
"For instance just a simple sentence like “Due to censorship of VPN servers in some countries, we kindly ask you to...Feedback from the [Tor forum](https://forum.torproject.net/t/discourage-vpn-usage-when-running-a-snowflake-proxy/2408):
"For instance just a simple sentence like “Due to censorship of VPN servers in some countries, we kindly ask you to not run a snowflake proxy while connected to a VPN”."
We could add this sentence here:
https://support.torproject.org/censorship/how-to-help-running-snowflake/Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & Tibethttps://gitlab.torproject.org/tpo/anti-censorship/rdsys/-/issues/95telegram l10n support2023-08-23T18:59:04Zmeskiomeskio@torproject.orgtelegram l10n supportIs l10n support possible? how does this work?Is l10n support possible? how does this work?Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & Tibetmeskiomeskio@torproject.orgmeskiomeskio@torproject.orghttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40844[Connection Settings] Update formatting of the bridge card's bridge-moji2022-04-13T00:22:21Zdonuts[Connection Settings] Update formatting of the bridge card's bridge-mojiI've been mulling over the bridge-moji and I'm starting to think it's probably too abstract as a concept, and runs the risk of causing more confusion than it alleviates. However we could still push it into Nightly & Alpha for feedback wi...I've been mulling over the bridge-moji and I'm starting to think it's probably too abstract as a concept, and runs the risk of causing more confusion than it alleviates. However we could still push it into Nightly & Alpha for feedback with some light design amends:
![connection-settings-bridge-configured_2x](/uploads/8b1b14613ddd5685394021aa696dd66b/connection-settings-bridge-configured_2x.png)
Changes include:
- Each emoji square is 36px with 4px rounded corners and a 4px margin between each
- The emoji themselves are 20px
- the "What's this?" link can be hidden/ignored until the tb-manual is updated.
I've started a new page in Figma for these changes here: [Figma link](https://www.figma.com/file/Vsh1aPOZGneDX4Zp27mjsK/torconnect?node-id=1667%3A11813)Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetPier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40842[Connection Settings] Update the "Help" buttons in bridge/proxy modals2022-06-09T15:47:16Zdonuts[Connection Settings] Update the "Help" buttons in bridge/proxy modalsCould we update the "Help" buttons to the bottom-left of the bridge and proxy modals like so please:
- [x] Point the "Select a Built-In Bridge..." help button here: https://tb-manual.torproject.org/circumvention/
- [x] Point the "Reques...Could we update the "Help" buttons to the bottom-left of the bridge and proxy modals like so please:
- [x] Point the "Select a Built-In Bridge..." help button here: https://tb-manual.torproject.org/circumvention/
- [x] Point the "Request a Bridge..." and "Add a Bridge Manually..." help buttons here: https://tb-manual.torproject.org/bridges/
- [x] Hide the "Help" button from Advanced Connection Settings entirely.Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetPier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40841[Connection Settings] Remove the periods from the "Advanced" section strings2022-04-13T00:22:32Zdonuts[Connection Settings] Remove the periods from the "Advanced" section stringsPlease remove the periods from the following strings:
`Configure how Tor Browser connects to the internet.`
`View the Tor logs.`
So they appear like so instead:
`Configure how Tor Browser connects to the internet`
`View the Tor logs...Please remove the periods from the following strings:
`Configure how Tor Browser connects to the internet.`
`View the Tor logs.`
So they appear like so instead:
`Configure how Tor Browser connects to the internet`
`View the Tor logs`
(I don't know why I kept the periods in the mockups, but as far as I can tell this is more consistent with the rest of `about:preferences` and looks a little less awkward too)Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetPier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40840[Connection Settings] Update "Learn More" to "Learn more" (sentence case)2022-04-13T00:22:37Zdonuts[Connection Settings] Update "Learn More" to "Learn more" (sentence case)This string appears on the other settings screens as `Learn more` (in sentence case). Could we update the string we're using in Connection Settings to match please?This string appears on the other settings screens as `Learn more` (in sentence case). Could we update the string we're using in Connection Settings to match please?Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetPier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40839[Connection Settings] Add "Copied!" state to Copy Bridge Address button2022-04-13T00:22:42Zdonuts[Connection Settings] Add "Copied!" state to Copy Bridge Address buttonThe "Copy Bridge Address" button could use a little feedback when pressed. Could we:
- Update the string to "Copied!"
- Change the color to Blue/Teal (depending on the theme)
- Return the button to its original state after ~1200ms
Like...The "Copy Bridge Address" button could use a little feedback when pressed. Could we:
- Update the string to "Copied!"
- Change the color to Blue/Teal (depending on the theme)
- Return the button to its original state after ~1200ms
Like so please?
![obsf4-bridge-card-copied](/uploads/dbab4e63aba5cd8ffe7d3bdb0a7a1f02/obsf4-bridge-card-copied.png)
I've thrown together a quick prototype to demonstrate the intended behavior too: [Figma link](https://www.figma.com/proto/Vsh1aPOZGneDX4Zp27mjsK/torconnect?page-id=1667%3A11813&node-id=1667%3A11815&viewport=241%2C48%2C0.44&scaling=min-zoom&starting-point-node-id=1667%3A12290)Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetPier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40838[Connection Settings] Add kebab menu to bridge card with option to “Remove”2022-04-13T00:22:47Zdonuts[Connection Settings] Add kebab menu to bridge card with option to “Remove”Should the bridge card switch be repurposed in https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40837 to switch between enabled/disabled states, please add a kebab menu as visualized in https://gitlab.torproject.org/tp...Should the bridge card switch be repurposed in https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40837 to switch between enabled/disabled states, please add a kebab menu as visualized in https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40782 containing the option to "Remove" the bridge entirely.
The exact UX should match addon the cards in `about:addons#extensions`.Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetPier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40837[Connection Settings] Add switch to "...current bridges" section to enable/di...2022-04-13T00:22:51Zdonuts[Connection Settings] Add switch to "...current bridges" section to enable/disable all bridgesIn the current build the bridge card switch effectively clears the configured bridge from the settings screen entirely.
Instead, could we use the switch to enable/disable the bridge without removing it – essentially leaving it in a sta...In the current build the bridge card switch effectively clears the configured bridge from the settings screen entirely.
Instead, could we use the switch to enable/disable the bridge without removing it – essentially leaving it in a state of being "off" but still readily available for future use? The disabled state should be set to 60% opacity and the preceding string appended with `(disabled)`, like so:
![connection-settings-bridge-disabled_2x](/uploads/aca5817664b9be85b3f6630e20113cd9/connection-settings-bridge-disabled_2x.png)
I've prototyped the intended functionality here too: [Figma link](https://www.figma.com/proto/Vsh1aPOZGneDX4Zp27mjsK/torconnect?page-id=1667%3A11813&node-id=1667%3A11815&viewport=241%2C48%2C0.34&scaling=min-zoom&starting-point-node-id=1667%3A12290)Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetPier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40836[Connection Settings] Update string for Quickstart description2022-04-13T00:22:57Zdonuts[Connection Settings] Update string for Quickstart descriptionI rewrote Quickstart's description in https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40782 to clarify its function. Could we update it to the following please?
> Quickstart connects Tor Browser to the Tor Network au...I rewrote Quickstart's description in https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40782 to clarify its function. Could we update it to the following please?
> Quickstart connects Tor Browser to the Tor Network automatically when launched, based on your last used connection settings.Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetPier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40835[Connection Settings] Fix typo in Tor Network connected state2022-04-13T00:23:02Zdonuts[Connection Settings] Fix typo in Tor Network connected stateThe Tor Network connected state accidentally reads "Connnected" (with three Ns).
![connection-settings-tor-network-connected-typo](/uploads/472d406ad05c00e1073b2fa54bae02b2/connection-settings-tor-network-connected-typo.png)The Tor Network connected state accidentally reads "Connnected" (with three Ns).
![connection-settings-tor-network-connected-typo](/uploads/472d406ad05c00e1073b2fa54bae02b2/connection-settings-tor-network-connected-typo.png)Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetPier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40834[Connection Settings] Update Internet status to newer Proton network icon2022-07-21T09:02:54Zdonuts[Connection Settings] Update Internet status to newer Proton network iconIt looks like we're using the older Photon network icon instead of the newer proton variant next to "Internet" in the connection status section:
![connection-settings-internet-status](/uploads/267a635782d7fa1f29862f58766cdefc/connection...It looks like we're using the older Photon network icon instead of the newer proton variant next to "Internet" in the connection status section:
![connection-settings-internet-status](/uploads/267a635782d7fa1f29862f58766cdefc/connection-settings-internet-status.png)
Here's the right one, for ref:
- [network.svg](/uploads/25c8acaef931f3c9f7a1f23337212d71/network.svg)Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetPier Angelo VendramePier Angelo Vendrame