Community issueshttps://gitlab.torproject.org/groups/tpo/community/-/issues2024-03-27T09:39:52Zhttps://gitlab.torproject.org/tpo/community/policies/-/issues/6Resurrect directory authority policy2024-03-27T09:39:52ZGeorg KoppenResurrect directory authority policyWe have an old directory authority policy we should resurrect and make into a document about expectations of relay operators.We have an old directory authority policy we should resurrect and make into a document about expectations of relay operators.Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/community/policies/-/issues/5Write a proposal for how to do OSINT work when hunting malicious relays2024-03-13T14:33:10ZGeorg KoppenWrite a proposal for how to do OSINT work when hunting malicious relaysLeveraging open source intelligence (OSINT) for our fight against malicious relays is a useful method in our toolbox. We should write a proposal about how intend to do that to make this process transparent and easier to amend where needed.Leveraging open source intelligence (OSINT) for our fight against malicious relays is a useful method in our toolbox. We should write a proposal about how intend to do that to make this process transparent and easier to amend where needed.GusGushttps://gitlab.torproject.org/tpo/community/policies/-/issues/4Policies lack version number2023-05-25T18:24:44ZSilvio RhattoPolicies lack version numberIt would be great if each policy had a version number.
/cc @gus @arma @gkIt would be great if each policy had a version number.
/cc @gus @arma @gkhttps://gitlab.torproject.org/tpo/community/relays/-/issues/67EFF University Tor relay advocacy campaign2024-03-04T19:33:05ZRoger DingledineEFF University Tor relay advocacy campaignWe are collaborating with Cooper at EFF to help them run an advocacy campaign to get more Tor relays running in universities.
The campaign has several synergistic goals, including: increase capacity for the Tor network; help create a ne...We are collaborating with Cooper at EFF to help them run an advocacy campaign to get more Tor relays running in universities.
The campaign has several synergistic goals, including: increase capacity for the Tor network; help create a new generation of activist-users who understand Tor and want to help; test and refine our messaging about the value of running a Tor relay; make sure privacy and decentralization are better integrated into the curriculum at more institutions; help provide a focus and a lever for people to change policy toward privacy and human rights tools at their institutions; and build a list of high-profile institutions that are participating in the Tor network, to normalize the idea that everybody should do it and so we can leverage that list for our policy and comms goals.
This is the master ticket for tracking the roadmap and progress on the overall campaign.
* [x] (0) Have some sort of starting web presence to point at, e.g. a Tor gitlab ticket.
* (1) Organize, write, and/or improve guides or links for each of
- [x] (1a) "how to set up a relay" (https://community.torproject.org/relay/)
- [x] (1b) "why universities are great places for relays" (https://gitlab.torproject.org/tpo/community/relays/-/issues/72)
- [x] (1c) "how best to advocate for a relay at your university" (https://community.torproject.org/relay/community-resources/tor-relay-universities/)
- [x] (1d) "explanations to reassure university general counsel"
- [x] (1e) "suggested escalation path e.g. start with a bridge, then a non-exit relay, then an exit relay"
- Some starting points: https://community.torproject.org/relay/community-resources/, https://www.eff.org/deeplinks/2014/06/why-you-should-use-tor
* (2) Re-establish and strengthen relationships with existing university relay operators
- [x] (2a) Invite them to publicly join the campaign at launch
- [x] (2b) Answer all of their Tor questions and ideas over time, and use these interactions as a feedback loop to improve the above guides.
- [x] (2c) Learn what level of support they have at their uni: do they just do it themselves? Does the GC know? What do the sysadmins think?
- [ ] (2d) Connect them to their peers to strengthen the community
- [ ] (2d1) Cultivate a section in the Tor forum for this audience
- [ ] (2d2) Hold periodic university relay operator meetups
- [x] (2d3) Set up announce/newsletter mailing list
* (3) Put the campaign on the web
- [x] (3a) Have a central EFF campaign site, including the above guides/links, the names of amenable participants and institutions, etc.
- [x] (3b) Have an EFF lawyer on deck to reassure university lawyers. Prepare this lawyer for the questions they will receive.
- [x] (3c) EFF reviews the EFF Tor Legal FAQ to see if it needs any updates. (As of April 2023 Cooper says they have looked at it again and they are still happy with it.)
- [ ] (3d) Make sure the improved guides get onto the Tor community portal too.
* (4) Figure out a scalable and sustainable way to keep track of our contacts.
- [x] Start with a contact email alias with the five-ish of us on it, but very soon we will want something more workable than "past emails in our mailboxes" for being organized. Try not to invent too many new things, but also don't fall into the Google docs trap. A pad? A git repo?
* (5) With help from our EFA contacts, track which universities are Tor-supportive.
- [ ] (5a) Policy and culture: Are they ok with snowflakes on their network? bridges? relays? What are the *policies* (AUP, etc) about running tools like Tor on their network?
- [ ] (5b) Technical: Does Tor as a client work on their network in practice? Are the Tor websites (www, gitlab, etc) reachable?
* (6) Recruit new university relay operators, choosing them by:
- [x] (6a) Direct contact from existing relationships
- [ ] (6b) Picking the good candidates from step 5
- [x] (6b) Drive interactions from people discovering the campaign site
- [x] (6c) Spread the word at academic conferences and events
- [x] (6d) Do Tor seminars and guest lectures at key (tipping point) institutions
* (7) Publicize the ongoing successes
- [ ] (7a) Pick out some good ambassadors and amplify them
- [ ] (7b) Reward (swag!) and highlight the Tor-positive institutions
- [ ] (7c) Visualize and understand our progress using network health tools (https://gitlab.torproject.org/tpo/community/relays/-/issues/73)
- [ ] (7d) Become as open with our data as we can, modulo individual privacy
- [ ] (7e) In particular, highlight successes on Tor's community portal too
- [ ] (7f) Feed everything back into step 1
* (8) Unsorted bonus items for later phases
- [ ] (8a) A stock "Tor and Education" presentation that people can use to drive their own advocacy
- [ ] (8b) Curriculum content for professors (most every security class these days has a Tor module, and they vary widely)
- [ ] (8c) Other ways to help, e.g. run a Conjure station at your uniRoger DingledineRoger Dingledinehttps://gitlab.torproject.org/tpo/community/l10n/-/issues/40109Get RT articles for translators to easily translate2023-09-27T17:59:49ZGabagaba@torproject.orgGet RT articles for translators to easily translateWe have a bunch of articles in RT for user support that we need to translate into farsi and other languages: https://rt.torproject.org/Articles/Article/Search.html?Class=10&Parent=0&HideOptions=1
- [ ] Get all user support articles from...We have a bunch of articles in RT for user support that we need to translate into farsi and other languages: https://rt.torproject.org/Articles/Article/Search.html?Class=10&Parent=0&HideOptions=1
- [ ] Get all user support articles from RT into weblate so we can easily translate them.
- [ ] Find a way to easily update RT with the translations.
@gus Could we say that all the support articles that needs translations are around 1800 words? I saw that there are around 55 articles and with an average of 30 words per articles, that would be how much we could translate.emmapeelemmapeelhttps://gitlab.torproject.org/tpo/community/policies/-/issues/20Get an overview of how we dealt with past suggestions for network-health/comm...2024-03-27T09:45:36ZGeorg KoppenGet an overview of how we dealt with past suggestions for network-health/community improvementsIt would be good to dig a bit into past suggestions for improvement made by relay operators and community members on how to improve the health of the operator community and the overall health of the Tor network and how we dealt with them...It would be good to dig a bit into past suggestions for improvement made by relay operators and community members on how to improve the health of the operator community and the overall health of the Tor network and how we dealt with them. We could then come up with recommendations for improvement on that process which could guide our current work on establishing a (new and better) process.Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/community/relays/-/issues/63Organize a SysAdmin workshop for relay operators2023-03-29T21:11:09ZGusOrganize a SysAdmin workshop for relay operatorsRelay operators asked about having a new SysAdmin workshop (https://gitlab.torproject.org/tpo/community/relays/-/issues/36).
I'm creating this ticket so we can start planning this.Relay operators asked about having a new SysAdmin workshop (https://gitlab.torproject.org/tpo/community/relays/-/issues/36).
I'm creating this ticket so we can start planning this.GusGushttps://gitlab.torproject.org/tpo/community/training/-/issues/87Create training material on digital security while seeking abortion2023-06-30T17:20:23ZrayaCreate training material on digital security while seeking abortionrayarayahttps://gitlab.torproject.org/tpo/community/relays/-/issues/59Add instructions for relay tuning2023-02-01T20:34:50ZGeorg KoppenAdd instructions for relay tuningWe have a bunch of instructions about what to do in case of [overload](https://support.torproject.org/relay-operators/#relay-operators_relay-bridge-overloaded) but we lack a somewhat related set of tips and tricks to tune relays (e.g. co...We have a bunch of instructions about what to do in case of [overload](https://support.torproject.org/relay-operators/#relay-operators_relay-bridge-overloaded) but we lack a somewhat related set of tips and tricks to tune relays (e.g. conntrack table adjustments), in particular as that might help with fending off attacks in the future.
There got tweaks collected [previously](https://torservers.net/exit-relay-setup/#high-bandwidth-tweaks-100-mbps) and some might still be buried on random Trac tickets...
/cc @micahhttps://gitlab.torproject.org/tpo/community/training/-/issues/80All About Tor slides in Arabic2023-08-25T18:40:39ZrayaAll About Tor slides in Arabic## To-Do:
- [ ] Complete translation of slides
- [ ] Upload to community portal
## Steps to upload to community portal
- [ ] add slides in PDF and ODP formats here: https://gitlab.torproject.org/tpo/web/community/-/tree/main/assets/stat...## To-Do:
- [ ] Complete translation of slides
- [ ] Upload to community portal
## Steps to upload to community portal
- [ ] add slides in PDF and ODP formats here: https://gitlab.torproject.org/tpo/web/community/-/tree/main/assets/static/files, simply as `file-name.odp` and `file-name.pdf`
- [ ] add slides in PDF and ODP formats here: https://gitlab.torproject.org/tpo/community/training, inside folder: `year/topic/file-name.odp` and `year/topic/file-name.pdf`
- [ ] add preview image of slides here (size H:700, W:400): https://gitlab.torproject.org/tpo/web/community/-/tree/main/assets/static/images/training, this image will be displayed here: http://community.torproject.org/training/resources, simply add as `file-name.png`
- [ ] edit the `training-resources.json` file and add training properties: https://gitlab.torproject.org/tpo/web/community/-/blob/main/databags/training-resources.json
- [ ] edit the `community-training-materials.json` file and add training properties:
https://gitlab.torproject.org/tpo/web/community/-/blob/main/databags/community-training-materials.jsonrayarayahttps://gitlab.torproject.org/tpo/community/l10n/-/issues/40101Get the automatic subtitles from our Youtube videos, edit the english subs, a...2023-09-27T15:19:23ZemmapeelGet the automatic subtitles from our Youtube videos, edit the english subs, and put them up for translationSeveral videos we produced are interesting to stop misinformation and get more people to learn about different aspects in Tor when they hear about it for the first time.
A group of this videos at least are the PrivChat sessions: https:/...Several videos we produced are interesting to stop misinformation and get more people to learn about different aspects in Tor when they hear about it for the first time.
A group of this videos at least are the PrivChat sessions: https://www.torproject.org/privchat/
We should get the different automatic subtitles and fix errors, and add them for translation in weblate.
It seems there are different ways of editing subtitles in youtube: https://www.makeuseof.com/how-to-create-edit-youtube-subtitles/emmapeelemmapeelhttps://gitlab.torproject.org/tpo/community/support/-/issues/40101Monitor new Tor censorship events2023-08-10T13:22:32ZGusMonitor new Tor censorship eventsUsing OONI data API, we should have scripts to verify if or which part of Tor is blocked in target regions.
We can tweak these scripts/visualizations by new iterations, i.e., find out how many anomalies per ISP is something concerning (...Using OONI data API, we should have scripts to verify if or which part of Tor is blocked in target regions.
We can tweak these scripts/visualizations by new iterations, i.e., find out how many anomalies per ISP is something concerning (a new regional or national censorship event).
Or adapt this project to work with Tor data and Prometheus: https://0xacab.org/leap/ooni-exporter.
Reference: https://magma.lavafeld.org/guide/data-analysis.html#ooni-data-analysis
- [x] Implement torsf snowflake test
- [x] Implement website test
- [ ] Create alerts when Tor is blocked.https://gitlab.torproject.org/tpo/community/support/-/issues/40100Script - Bridge reachability test2023-08-10T13:42:15ZGusScript - Bridge reachability testSometimes bridge operators ask us to test their bridges in specific countries. Adding to logcollector makes sense when you want to test and get results for a long period, but for just a quick test, it's overwhelming. We need to build a s...Sometimes bridge operators ask us to test their bridges in specific countries. Adding to logcollector makes sense when you want to test and get results for a long period, but for just a quick test, it's overwhelming. We need to build a simple script to bootstrap and test bridge reachability in target countries, i.e., test if vanilla/obfs4 bridges can bootstrap from the vantage point without having to install and configure the whole logcollector program.https://gitlab.torproject.org/tpo/community/training/-/issues/79Introduction to Onion Services in Arabic2023-07-19T11:33:24ZrayaIntroduction to Onion Services in Arabic## To-Do:
- [ ] Complete translation of slides
- [ ] Upload to community portal
## Steps to upload to community portal
- [ ] add slides in PDF and ODP formats here: https://gitlab.torproject.org/tpo/web/community/-/tree/main/assets/stat...## To-Do:
- [ ] Complete translation of slides
- [ ] Upload to community portal
## Steps to upload to community portal
- [ ] add slides in PDF and ODP formats here: https://gitlab.torproject.org/tpo/web/community/-/tree/main/assets/static/files, simply as `file-name.odp` and `file-name.pdf`
- [ ] add slides in PDF and ODP formats here: https://gitlab.torproject.org/tpo/community/training, inside folder: `year/topic/file-name.odp` and `year/topic/file-name.pdf`
- [ ] add preview image of slides here (size H:700, W:400): https://gitlab.torproject.org/tpo/web/community/-/tree/main/assets/static/images/training, this image will be displayed here: http://community.torproject.org/training/resources, simply add as `file-name.png`
- [ ] edit the `training-resources.json` file and add training properties: https://gitlab.torproject.org/tpo/web/community/-/blob/main/databags/training-resources.json
- [ ] edit the `community-training-materials.json` file and add training properties:
https://gitlab.torproject.org/tpo/web/community/-/blob/main/databags/community-training-materials.json
### Working document
- https://docs.google.com/presentation/d/1Mlyzjfvcr5qI4hZlNMzF87iKBADX7EmVVFqn5rJfNqY/editrayarayahttps://gitlab.torproject.org/tpo/community/l10n/-/issues/40100Learn and integrate the weblate command line client on our translation workflow2023-09-27T15:18:32ZemmapeelLearn and integrate the weblate command line client on our translation workflowWeblate has a command line client, wlc, that we can use to admin the translations.
We can use it to administer the different projects.Weblate has a command line client, wlc, that we can use to admin the translations.
We can use it to administer the different projects.emmapeelemmapeelhttps://gitlab.torproject.org/tpo/community/training/-/issues/76[Training] Prepare training material on circumventing Internet shutdowns with...2023-06-20T14:19:12Zraya[Training] Prepare training material on circumventing Internet shutdowns with TorThe aim is to create slides on fighting censorship with Tor (from a user perspective), highlighting:
- How Tor works for bypassing blocking
- Where Tor can and cannot help
- How to circumvent censorship of Tor itself: GetTor, Bridges, Co...The aim is to create slides on fighting censorship with Tor (from a user perspective), highlighting:
- How Tor works for bypassing blocking
- Where Tor can and cannot help
- How to circumvent censorship of Tor itself: GetTor, Bridges, Connection AssistGusGushttps://gitlab.torproject.org/tpo/community/l10n/-/issues/40098Clear licenses for translations in weblate2023-08-25T18:40:24ZemmapeelClear licenses for translations in weblateOur free account in weblate depends on the translations made for Free and Libre software.
We do not have a clear policy about licenses for translations, and if possible decide on a default license for them.
The licenses offered in Webl...Our free account in weblate depends on the translations made for Free and Libre software.
We do not have a clear policy about licenses for translations, and if possible decide on a default license for them.
The licenses offered in Weblate are explained here: https://spdx.org/licenses/.
We need to find out which licenses the translations should have, fix the licenses on weblate, and document the reasoning.emmapeelemmapeelhttps://gitlab.torproject.org/tpo/community/support/-/issues/40093Provide a recommended set of iptables/nftables rules to help in case of DoS a...2023-07-14T15:15:42ZGeorg KoppenProvide a recommended set of iptables/nftables rules to help in case of DoS attacksA bunch of DoS attacks are essentially ongoing since June 2022 and we discussed a bunch of potential solution to improve things for our users. One thing folks started to experiment with is trying to come up with good iptables rules to he...A bunch of DoS attacks are essentially ongoing since June 2022 and we discussed a bunch of potential solution to improve things for our users. One thing folks started to experiment with is trying to come up with good iptables rules to help fighting ongoing attacks.
This ticket is for collecting all the information we gathered so far and coming up with some rules we can recommend to our relay operators (and updating our support guidelines accordingly).https://gitlab.torproject.org/tpo/community/policies/-/issues/19Document relay community governance processes2024-03-27T09:19:13ZGabagaba@torproject.orgDocument relay community governance processesThis is activity O2.4 for [sponsor 112](https://gitlab.torproject.org/groups/tpo/-/milestones/44#tab-issues):
Document relay community governance processes. In this activity, we will publish public-facing documentation on what enforceme...This is activity O2.4 for [sponsor 112](https://gitlab.torproject.org/groups/tpo/-/milestones/44#tab-issues):
Document relay community governance processes. In this activity, we will publish public-facing documentation on what enforcement mechanisms were considered, why the ones that were selected were chosen, and why the ones that were not implemented but were considered as possible candidates, were eventually rejected. The audience for these documents will be future technology projects that utilize the similar volunteer-run infrastructure and may be able to benefit from the insights Tor obtained during this process.Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/community/relays/-/issues/58Develop and implement solutions for operator codes of conduct, policies, agre...2024-03-27T09:44:55ZGabagaba@torproject.orgDevelop and implement solutions for operator codes of conduct, policies, agreements, and methods for enforcementThis is activity O2.3 for [sponsor 112](https://gitlab.torproject.org/groups/tpo/-/milestones/44#tab-issues):
Develop and implement solutions for operator codes of conduct, policies, agreements, and methods for enforcement. The code of ...This is activity O2.3 for [sponsor 112](https://gitlab.torproject.org/groups/tpo/-/milestones/44#tab-issues):
Develop and implement solutions for operator codes of conduct, policies, agreements, and methods for enforcement. The code of conduct will codify what we expect of relay operators rather than leaving it implicit, as it is now. These guidelines mirror our criteria for rejecting bad relays.
In this Activity we will:
- Publish clear guidelines for
1. Tor to consistently identify and reject malicious relays, and
2. Relay operators to understand what kind of behavior will not be tolerated and what steps are taken when certain activity is detected.
- Use criteria developed in [activity O2.1](https://gitlab.torproject.org/tpo/network-health/team/-/issues/265) to evaluate whether these behavior expectations and consequence solutions are appropriate per relay operator feedback.Georg KoppenGeorg Koppen