The Tor Project issueshttps://gitlab.torproject.org/groups/tpo/-/issues2024-03-28T16:04:32Zhttps://gitlab.torproject.org/tpo/onion-services/onionspray/-/issues/53Support for internal mappings to handle CORS issues2024-03-28T16:04:32ZSilvio RhattoSupport for internal mappings to handle CORS issues# Tasks
* [ ] Implement a special internal mapping type (`internalmap`, `aliasmap` etc) that maps a path (such as `/some-endpoint`) into an external site endpoint. This could be used to avoid CORS issues when fecthing external content (...# Tasks
* [ ] Implement a special internal mapping type (`internalmap`, `aliasmap` etc) that maps a path (such as `/some-endpoint`) into an external site endpoint. This could be used to avoid CORS issues when fecthing external content (https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/32865).
# Time estimation
* Complexity: small (1 day)
* Uncertainty: low (x1.1)
* [Reference](https://jacobian.org/2021/may/25/my-estimation-technique/) (adapted)Onionspray 1.7.0Silvio RhattoSilvio Rhatto2024-06-27https://gitlab.torproject.org/tpo/web/onion-mkdocs/-/issues/14Renovate updates through Pipenv2024-03-28T15:42:20ZSilvio RhattoRenovate updates through Pipenv# Tasks
* [ ] Let Renovate properly watch for updates through Pipenv:
https://gitlab.torproject.org/tpo/tpa/renovate-cron/-/issues/11# Tasks
* [ ] Let Renovate properly watch for updates through Pipenv:
https://gitlab.torproject.org/tpo/tpa/renovate-cron/-/issues/11https://gitlab.torproject.org/tpo/onion-services/onionspray/-/issues/52Server-side anonymity improvements2024-03-28T15:33:39ZSilvio RhattoServer-side anonymity improvements# Tasks
* [ ] Make `tor_single_onion` disabled by default? Or at least document that properly.
* [ ] Add Vanguards support when `tor_single_onion` is disabled?
* [ ] Would enabling `VanguardsLiteEnabled` make any difference?
# Time est...# Tasks
* [ ] Make `tor_single_onion` disabled by default? Or at least document that properly.
* [ ] Add Vanguards support when `tor_single_onion` is disabled?
* [ ] Would enabling `VanguardsLiteEnabled` make any difference?
# Time estimation
* Complexity: small (1 day)
* Uncertainty: low (x1.1)
* [Reference](https://jacobian.org/2021/may/25/my-estimation-technique/) (adapted)Onionspray 1.7.0Silvio RhattoSilvio Rhatto2024-06-27https://gitlab.torproject.org/tpo/network-health/tor-weather/-/issues/98Improve adding new servers2024-03-28T14:21:54ZJens KubiezielImprove adding new serversTor-Weather shows an empty window when used for the first time. Attention drawn to the side-bar on the left and it takes quite some time to find the add button in the right-bottom corner.
That's Why I'd find it better, if Tor-Weather co...Tor-Weather shows an empty window when used for the first time. Attention drawn to the side-bar on the left and it takes quite some time to find the add button in the right-bottom corner.
That's Why I'd find it better, if Tor-Weather could check if there are servers registered and if not, it should show either a big(ger) "register server" button or show a larger hint (big red arrow :-)) to the existing "+" button. In my opinion this would improve the experience for first time users.https://gitlab.torproject.org/tpo/applications/vpn/-/issues/152improve bridge selection UX2024-03-28T13:48:16Zcybertaimprove bridge selection UXthere are a couple of issues with the current implementation
* after the bridge bot was selected, any manual selection for built-in bridges need to be unset in the UI
* only request obfs4 bridges from bridgeDB (wrapped in the circumventi...there are a couple of issues with the current implementation
* after the bridge bot was selected, any manual selection for built-in bridges need to be unset in the UI
* only request obfs4 bridges from bridgeDB (wrapped in the circumvention API) instead of snowflake + obfs4VPN pre-alpha 07https://gitlab.torproject.org/tpo/onion-services/onionspray-log-parser/-/issues/11Slowness on onionspray-get-logs-from-s3fs2024-03-28T13:25:06ZSilvio RhattoSlowness on onionspray-get-logs-from-s3fs# Tasks
* [ ] Investigate why [onionspray-get-logs-from-s3fs][] is being slow, and how that can be fixed.
* [ ] If can't be fixed easily, recomend users to try [onionspray-get-logs-from-s3][] first.
[onionspray-get-logs-from-s3fs]: htt...# Tasks
* [ ] Investigate why [onionspray-get-logs-from-s3fs][] is being slow, and how that can be fixed.
* [ ] If can't be fixed easily, recomend users to try [onionspray-get-logs-from-s3][] first.
[onionspray-get-logs-from-s3fs]: https://gitlab.torproject.org/tpo/onion-services/onionspray-log-parser/-/blob/main/onionspray-get-logs-from-s3fs
[onionspray-get-logs-from-s3]: https://gitlab.torproject.org/tpo/onion-services/onionspray-log-parser/-/blob/main/onionspray-get-logs-from-s3
# Time estimation
* Complexity: very small (0.5 day)
* Uncertainty: low (x1.1)
* [Reference](https://jacobian.org/2021/may/25/my-estimation-technique/) (adapted)Silvio RhattoSilvio Rhattohttps://gitlab.torproject.org/tpo/onion-services/onionspray/-/issues/51Improved troubleshooting tips2024-03-28T13:07:39ZSilvio RhattoImproved troubleshooting tips# Tasks
* [ ] Improve the "Troubleshooting" document with tips to debug Onionspray, NGINX and tor.
* [ ] Include debugging tips such as custom log configurations like `Log [rend]info notice file /var/log/tor/notices.log`
that can ...# Tasks
* [ ] Improve the "Troubleshooting" document with tips to debug Onionspray, NGINX and tor.
* [ ] Include debugging tips such as custom log configurations like `Log [rend]info notice file /var/log/tor/notices.log`
that can reduce the noise and pinpoint things (but usually is better to log all subsystems).
# Time estimation
* Complexity: negligible (0.1 day)
* Uncertainty: low (x1.1)
* [Reference](https://jacobian.org/2021/may/25/my-estimation-technique/) (adapted)Onionspray 1.7.0Silvio RhattoSilvio Rhatto2024-06-27https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/issues/279Add mozconfig-linux-aarch642024-03-28T13:16:10ZNoisyCoilAdd mozconfig-linux-aarch64For https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/12631 and/or https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/32355 we need to add `mozconfig-linux-aarch64`.For https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/12631 and/or https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/32355 we need to add `mozconfig-linux-aarch64`.https://gitlab.torproject.org/tpo/onion-services/onionspray/-/issues/50Onionbalance commands should check for existing PID2024-03-28T13:03:05ZSilvio RhattoOnionbalance commands should check for existing PID# Tasks
* [ ] Commands `ob-start`, `ob-stop` and `ob-restart` should check for the existing `PID`.
# Time estimation
* Complexity: negligible (0.1 day)
* Uncertainty: low (x1.1)
* [Reference](https://jacobian.org/2021/may/25/my-estima...# Tasks
* [ ] Commands `ob-start`, `ob-stop` and `ob-restart` should check for the existing `PID`.
# Time estimation
* Complexity: negligible (0.1 day)
* Uncertainty: low (x1.1)
* [Reference](https://jacobian.org/2021/may/25/my-estimation-technique/) (adapted)Onionspray 1.7.0Silvio RhattoSilvio Rhatto2024-06-27https://gitlab.torproject.org/tpo/onion-services/onionspray/-/issues/49Command for looking into the local logs2024-03-28T13:00:30ZSilvio RhattoCommand for looking into the local logs# Tasks
* [ ] Implement a `tail-logs-local` that does a `tail -F projects/*/log/*.log`.
# Time estimation
* Complexity: negligible (0.1 day)
* Uncertainty: low (x1.1)
* [Reference](https://jacobian.org/2021/may/25/my-estimation-techni...# Tasks
* [ ] Implement a `tail-logs-local` that does a `tail -F projects/*/log/*.log`.
# Time estimation
* Complexity: negligible (0.1 day)
* Uncertainty: low (x1.1)
* [Reference](https://jacobian.org/2021/may/25/my-estimation-technique/) (adapted)Onionspray 1.7.0Silvio RhattoSilvio Rhatto2024-06-27https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42491Add mozconfig-linux-aarch642024-03-28T13:05:16ZNoisyCoilAdd mozconfig-linux-aarch64For https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/12631 and/or https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/32355 we need to add `mozconfig-linux-aarch64`.For https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/12631 and/or https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/32355 we need to add `mozconfig-linux-aarch64`.https://gitlab.torproject.org/tpo/onion-services/onionspray-log-parser/-/issues/10Output template2024-03-28T14:23:08ZSilvio RhattoOutput template# Tasks
* [ ] Support for output with custom templating.
* [ ] Support for Markdown table output.
# Time estimation
* Complexity: very small (0.5 day)
* Uncertainty: low (x1.1)
* [Reference](https://jacobian.org/2021/may/25/my-estimat...# Tasks
* [ ] Support for output with custom templating.
* [ ] Support for Markdown table output.
# Time estimation
* Complexity: very small (0.5 day)
* Uncertainty: low (x1.1)
* [Reference](https://jacobian.org/2021/may/25/my-estimation-technique/) (adapted)Silvio RhattoSilvio Rhatto2024-04-01https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42490Install svg from branding theme to browser/chrome/icons/default2024-03-28T14:59:30ZboklmInstall svg from branding theme to browser/chrome/icons/defaultIn
https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/merge_requests/943#note_3013584,
@PieroV mentioned that we have svg files (added in commits `Bug 2176:
Rebrand Firefox to TorBrowser` and `MB 1: Mullvad Browser brandi...In
https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/merge_requests/943#note_3013584,
@PieroV mentioned that we have svg files (added in commits `Bug 2176:
Rebrand Firefox to TorBrowser` and `MB 1: Mullvad Browser branding`),
but we currently don't install them to `browser/chrome/icons/default`.
If we do that we can then update the debian package to link them from
`/usr/share/icons/hicolor/scalable/apps`.Pier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/applications/vpn/-/issues/151reconnect/new circuit when changing bridge type or on/off2024-03-28T10:49:31Zkwadronautreconnect/new circuit when changing bridge type or on/offIs there a need to reconnect/move to a new circuit when the bridge settings are changed: bridge on/off or type (obfs4 or snowflake for now).Is there a need to reconnect/move to a new circuit when the bridge settings are changed: bridge on/off or type (obfs4 or snowflake for now).Sponsor 101 - Tor VPN Client for Androidhttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42489Lox module notifications2024-03-28T10:07:16ZhenryLox module notificationsCurrently the Lox module does not give out notifications for when its internals change, so:
+ `TorSetting` is not notified when the bridges change. So it is only set to the new value when restarting Tor Browser.
+ "about:preferences" is...Currently the Lox module does not give out notifications for when its internals change, so:
+ `TorSetting` is not notified when the bridges change. So it is only set to the new value when restarting Tor Browser.
+ "about:preferences" is not notified when the invites change or when there is a blockage or upgrade event.henryhenryhttps://gitlab.torproject.org/tpo/applications/vpn/-/issues/150Version 0.5.0 crashes when being run with ARMv8.5 MTE (memory tagging)2024-03-28T09:54:40Zfid02Version 0.5.0 crashes when being run with ARMv8.5 MTE (memory tagging)When running Tor VPN with ARMv8.5 [memory tagging](https://developer.android.com/ndk/guides/arm-mte) enabled, after tapping on the Connect button the app will crash within 3 seconds, and will produce the attached error.
[Error_in_Tor_VPN...When running Tor VPN with ARMv8.5 [memory tagging](https://developer.android.com/ndk/guides/arm-mte) enabled, after tapping on the Connect button the app will crash within 3 seconds, and will produce the attached error.
[Error_in_Tor_VPN_d259276bb201.txt](/uploads/3a2f447b299ee4805da463ec37ae87f3/Error_in_Tor_VPN_d259276bb201.txt)
You will currently only be able to reproduce this in production on a Google Pixel 8 or Google Pixel 8 Pro device, running GrapheneOS with memory tagging enabled for the Tor VPN Android app.
Please note that this is not a bug with GrapheneOS, it is a memory corruption bug which is exposed by GrapheneOS. Android will be eventually deploying memory tagging by default, so this will need to be resolved before that point, to avoid the app being broken for users with an MTE-capable device.
Steps to reproduce:
1. Install Tor VPN version 0.5.0 from the Gitlab package archive
2. Open Tor VPN and dismiss the dialog shown upon first run
3. Tap on Connect
Not being experienced in debugging native code, I do not know if this is a memory corruption within little-t tor or within the Tor VPN app itself.
version 0.5.0
org.torproject.vpn
versionCode 5
Installed from the Gitlab package archivehttps://gitlab.torproject.org/tpo/network-health/tor-weather/-/issues/97Password Reset / Change Missing2024-03-28T09:43:49ZAnonymous420Password Reset / Change MissingThere is no way to change a password, or recover an account once you lose your password.There is no way to change a password, or recover an account once you lose your password.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42488ESR 128: Remove role="code" from tor circuit panel2024-03-28T09:25:29ZhenryESR 128: Remove role="code" from tor circuit panelWe have a [line where we add the "code" role to a `<code>` element](https://gitlab.torproject.org/tpo/applications/tor-browser/-/blob/494af37613c7efd420c5ebda4bfc4f9f1fb99317/browser/components/torcircuit/content/torCircuitPanel.js#L618-...We have a [line where we add the "code" role to a `<code>` element](https://gitlab.torproject.org/tpo/applications/tor-browser/-/blob/494af37613c7efd420c5ebda4bfc4f9f1fb99317/browser/components/torcircuit/content/torCircuitPanel.js#L618-629). After [mozilla bug 1834931](https://bugzilla.mozilla.org/show_bug.cgi?id=1834931) this won't be necessary.henryhenryhttps://gitlab.torproject.org/tpo/network-health/tor-weather/-/issues/96sidebar broken when window width < 1400px2024-03-28T08:38:08Ztrinity-1686asidebar broken when window width < 1400pxthe text in the sidebar get increasingly crippled as the window width gets lowered.
for instance: with a window width of 960px (browser resized to fit half a 1080p screen):
![image](/uploads/4c1228cb8fe51f3defd99641779cf1ca/image.png)the text in the sidebar get increasingly crippled as the window width gets lowered.
for instance: with a window width of 960px (browser resized to fit half a 1080p screen):
![image](/uploads/4c1228cb8fe51f3defd99641779cf1ca/image.png)https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42487Quick connect doesn't work unless you connect at least once before on the new...2024-03-28T05:12:54ZclairehurstQuick connect doesn't work unless you connect at least once before on the new bootstrap (either HTML or Native)<!--
* Use this issue template for reporting a new bug.
-->
### Summary
**Summarize the bug encountered concisely.**
Not sure if this is intentional but it made me think it wasn't working correctly so I made this ticket.
### Steps t...<!--
* Use this issue template for reporting a new bug.
-->
### Summary
**Summarize the bug encountered concisely.**
Not sure if this is intentional but it made me think it wasn't working correctly so I made this ticket.
### Steps to reproduce:
**How one can reproduce the issue - this is very important.**
1. Get a clean install (without connecting with the new connection assist bootstrap)
2. Enable connection assist (either HTML or Native) and restart the app (for the changes to take effect)
3. Enable quickstart
4. Restart the app without connecting
5. Come back and notice that the quickstart button is checked/toggled but you don't automatically connect
### What is the current bug behavior?
**What actually happens.**
Quickstart fails to automatically connect in a certain instance
### What is the expected behavior?
**What you want to see instead**
Quickstart should always automatically connect the user if its both enabled and the app is starting.
### Environment
**Which operating system are you using? For example: Debian GNU/Linux 10.1, Windows 10, Ubuntu Xenial, FreeBSD 12.2, etc.**
**Which installation method did you use? Distribution package (apt, pkg, homebrew), from source tarball, from Git, etc.**
### Relevant logs and/or screenshotsclairehurstclairehurst