BridgeDB issueshttps://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues2020-07-09T18:21:00Zhttps://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/34116Set up OONI's MetaDB on polyanthum2020-07-09T18:21:00ZPhilipp Winterphw@torproject.orgSet up OONI's MetaDB on polyanthumAs part of legacy/trac#32740, we need to sync OONI's test results with BridgeDB's SQLite database; in particular its BlockedBridges table. [Over here](https://trac.torproject.org/projects/tor/ticket/32126#comment:4) and [here](https://gi...As part of legacy/trac#32740, we need to sync OONI's test results with BridgeDB's SQLite database; in particular its BlockedBridges table. [Over here](https://trac.torproject.org/projects/tor/ticket/32126#comment:4) and [here](https://github.com/ooni/backend/issues/396#issuecomment-620611456), hellais suggested to set up a copy of OONI's MetaDB and have it sync with their canonical database. We can then use our local copy on polyanthum to update BridgeDB's SQLite database.
Instructions for setting up a MetaDB are available at:
https://github.com/ooni/sysadmin/blob/master/docs/metadb-sharing.mdPhilipp Winterphw@torproject.orgPhilipp Winterphw@torproject.orghttps://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/33727Gmail marks emails from BridgeDB as spam2022-07-24T17:16:25ZPhilipp Winterphw@torproject.orgGmail marks emails from BridgeDB as spamI noticed that Gmail now tosses emails from BridgeDB's autoresponder into its spam folder:
![spam.cleaned.png, 100%](uploads/spam.cleaned.png, 100%)
BridgeDB's instructions should mention that users should take a look into their spam f...I noticed that Gmail now tosses emails from BridgeDB's autoresponder into its spam folder:
![spam.cleaned.png, 100%](uploads/spam.cleaned.png, 100%)
BridgeDB's instructions should mention that users should take a look into their spam folder if they didn't get a response. Ideally, we should find a way to prevent this from happening. I clicked the "Report not spam" button of every single BridgeDB email. I hope it will tell Gmail's classifier that this is a false positive.hanneloresxhanneloresxhttps://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/33299Remove retired pluggable transports from BridgeDB2021-07-01T17:47:15ZPhilipp Winterphw@torproject.orgRemove retired pluggable transports from BridgeDBBridgeDB still hands out obfs3, ScrambleSuit, and FTE bridges. Tor Browser no longer supports FTE (see legacy/trac#29319), so we should remove it. I suggest also removing obfs3 and ScrambleSuit because these transports don't offer anythi...BridgeDB still hands out obfs3, ScrambleSuit, and FTE bridges. Tor Browser no longer supports FTE (see legacy/trac#29319), so we should remove it. I suggest also removing obfs3 and ScrambleSuit because these transports don't offer anything that obfs4 doesn't already provide.
As of today, BridgeDB knows about 1,316 bridges. Among these:
* 31 support FTE. 29 of these wouldn't be handed out because they also support obfs4 (see legacy/trac#28655). The remaining two bridges run FTE/obfs3 and ScrambleSuit/obfs3/FTE.
* 34 support ScrambleSuit. 32 of these also support obfs4 and only two don't. Instead, they run obfs3/ScrambleSuit and ScrambleSuit/obfs3/FTE.
* 106 support obfs3. Only seven of these don't support obfs4.
Considering the above, I think it's safe to retire FTE, ScrambleSuit, and obfs3.Philipp Winterphw@torproject.orgPhilipp Winterphw@torproject.orghttps://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/40023Go through process of distributing private bridges2021-07-15T17:32:56ZPhilipp Winterphw@torproject.orgGo through process of distributing private bridgesOver at legacy/trac#31872, we created a process for distributing private bridges to NGOs:
https://trac.torproject.org/projects/tor/wiki/org/teams/AntiCensorshipTeam/NGOBridgeSupport
It's now time to go through this process with a non-tr...Over at legacy/trac#31872, we created a process for distributing private bridges to NGOs:
https://trac.torproject.org/projects/tor/wiki/org/teams/AntiCensorshipTeam/NGOBridgeSupport
It's now time to go through this process with a non-trivial number of censored users. Once we did, we need to document our experience and iteratively improve the process.Sponsor 30 - Objective 2.3GusGushttps://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/32134Request new translation and update i18n instructions2021-07-01T17:47:15ZPhilipp Winterphw@torproject.orgRequest new translation and update i18n instructionsWhile implementing our language switcher (legacy/trac#26543), we added a new string, "Language", that requires translations. We should also update our instructions on how to request new translations.While implementing our language switcher (legacy/trac#26543), we added a new string, "Language", that requires translations. We should also update our instructions on how to request new translations.Philipp Winterphw@torproject.orgPhilipp Winterphw@torproject.orghttps://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/31903Update translations and push translation requests to Transifex2021-07-01T17:47:15ZPhilipp Winterphw@torproject.orgUpdate translations and push translation requests to TransifexIt's time to update BridgeDB's existing translations and to push new translation requests because some of BridgeDB's strings have changed in the meanwhile.It's time to update BridgeDB's existing translations and to push new translation requests because some of BridgeDB's strings have changed in the meanwhile.Philipp Winterphw@torproject.orgPhilipp Winterphw@torproject.orghttps://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/31878Make BridgeDB and bridge authority more resilient2020-11-20T18:46:03ZPhilipp Winterphw@torproject.orgMake BridgeDB and bridge authority more resilientWe should explore options to decentralise BridgeDB and/or our bridge authority.We should explore options to decentralise BridgeDB and/or our bridge authority.Sponsor 30 - Objective 2.4https://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/31876Overhaul BridgeDB's documentation and specification2020-10-29T18:39:08ZPhilipp Winterphw@torproject.orgOverhaul BridgeDB's documentation and specificationBridgeDB's documentation is slightly outdated and its [specification](https://gitweb.torproject.org/torspec.git/tree/bridgedb-spec.txt) is severely outdated. It's time to update both.BridgeDB's documentation is slightly outdated and its [specification](https://gitweb.torproject.org/torspec.git/tree/bridgedb-spec.txt) is severely outdated. It's time to update both.Sponsor 30 - Objective 2.4https://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/31875BridgeDB should consider a user's location2021-09-09T14:18:39ZPhilipp Winterphw@torproject.orgBridgeDB should consider a user's locationbridges.torproject.org knows the user's physical location and should consider it when returning bridges. For example, if somebody in country X asks for an obfsN bridge but BridgeDB knows that only obfsN+1 works in X (e.g., by consulting ...bridges.torproject.org knows the user's physical location and should consider it when returning bridges. For example, if somebody in country X asks for an obfsN bridge but BridgeDB knows that only obfsN+1 works in X (e.g., by consulting the result of tpo/community/outreach#28531), it should return obfsN+1.
Ideally, we would do this for all of BridgeDB's distribution mechanisms. We could also do it for email – if the user emailed bridges+CC@bridges.torproject.org. As I understand it, we cannot do it for moat because BridgeDB doesn't get to see the user's IP address in this case.Sponsor 30 - Objective 3.3meskiomeskio@torproject.orgmeskiomeskio@torproject.orghttps://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/31780Write a specification for BridgeDB's metrics2020-06-27T13:42:47ZPhilipp Winterphw@torproject.orgWrite a specification for BridgeDB's metricsNow that BridgeDB exports metrics (legacy/trac#9316), it's time to specify the format of these metrics, allowing third parties to write parsers.Now that BridgeDB exports metrics (legacy/trac#9316), it's time to specify the format of these metrics, allowing third parties to write parsers.Philipp Winterphw@torproject.orgPhilipp Winterphw@torproject.orghttps://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/40022Recruit potential default bridges from set of long-running bridges2021-09-10T17:40:33ZPhilipp Winterphw@torproject.orgRecruit potential default bridges from set of long-running bridgesWe would like to set up more default bridges. One way to recruit more is to look for non-default bridges that have 1) high capacity, 2) have been around for a long time, and 3) have a stable uptime. Ideally, we should also know the perso...We would like to set up more default bridges. One way to recruit more is to look for non-default bridges that have 1) high capacity, 2) have been around for a long time, and 3) have a stable uptime. Ideally, we should also know the person who runs the bridge, as stated in our [list of criteria](https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/DefaultBridges#Addingnewdefaultbridges) for setting up a new default bridges.
Let's have a look at archived bridge data and extract a list of default bridge candidates.https://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/31426Update BridgeDB's specification2022-03-01T17:35:40ZPhilipp Winterphw@torproject.orgUpdate BridgeDB's specificationWe have [a BridgeDB spec](https://gitweb.torproject.org/torspec.git/tree/bridgedb-spec.txt) but it's outdated and was last modified in 2013. We should update the specification so it reflects BridgeDB's current implementation. We should a...We have [a BridgeDB spec](https://gitweb.torproject.org/torspec.git/tree/bridgedb-spec.txt) but it's outdated and was last modified in 2013. We should update the specification so it reflects BridgeDB's current implementation. We should also cover Moat, our new BridgeDB metrics (legacy/trac#9316), and maybe our anti-bot mechanism (legacy/trac#31252).
We should get the spec to a point where it can provide newcomers with a comprehensive understanding of BridgeDB's overall design.https://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/29597Cleanup bridgedb-admin git repository2020-06-27T13:42:50ZDavid Gouletdgoulet@torproject.orgCleanup bridgedb-admin git repositoryIt is full of either out of date scripts or thing that aren't used.
The branch will probably have many commits touching many things ;). Spring cleanup!It is full of either out of date scripts or thing that aren't used.
The branch will probably have many commits touching many things ;). Spring cleanup!David Gouletdgoulet@torproject.orgDavid Gouletdgoulet@torproject.orghttps://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/29596Cleanup bridgedb crontab2020-06-27T13:42:50ZDavid Gouletdgoulet@torproject.orgCleanup bridgedb crontabOverall cleanup to what the server is actually running.Overall cleanup to what the server is actually running.David Gouletdgoulet@torproject.orgDavid Gouletdgoulet@torproject.orghttps://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/29484Update the requirements.txt and freeze them on release2020-06-27T13:42:50ZDavid Gouletdgoulet@torproject.orgUpdate the requirements.txt and freeze them on releaseThe `requirements.txt` file has package versions that are pinned and some are very old by now.
I've done a quick test and using all the latest works with a very minor fix in the code so far.
We should have a development one that uses t...The `requirements.txt` file has package versions that are pinned and some are very old by now.
I've done a quick test and using all the latest works with a very minor fix in the code so far.
We should have a development one that uses the latest packages (maybe?) and then use a minimal one that we use when we release (pip freeze).
This way, we keep up to date with everything and do not fall into the risk of having huge security holes because old dependencies for instance.Philipp Winterphw@torproject.orgPhilipp Winterphw@torproject.orghttps://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/29483Use systemd init script for BridgeDB2020-06-27T13:42:50ZDavid Gouletdgoulet@torproject.orgUse systemd init script for BridgeDBThe bridgedb process is executed in a cron at bootup. So if it crashes, we do not know about it because lack of monitoring but also it won't be restarted.
Lets move this out of the cron and into a systemd init script. The machine is Deb...The bridgedb process is executed in a cron at bootup. So if it crashes, we do not know about it because lack of monitoring but also it won't be restarted.
Lets move this out of the cron and into a systemd init script. The machine is Debian 9.7 so systemd is stable there and what should be used.David Gouletdgoulet@torproject.orgDavid Gouletdgoulet@torproject.orghttps://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/29481Cleanup bridgedb.conf and bridgedb.crontab2020-06-27T13:42:50ZDavid Gouletdgoulet@torproject.orgCleanup bridgedb.conf and bridgedb.crontabThe production `bridgedb.conf` needs to be cleaned up due to several outdated config in there.The production `bridgedb.conf` needs to be cleaned up due to several outdated config in there.Matthew FinkelMatthew Finkelhttps://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/29276Make a release of BridgeDB2020-06-27T13:42:51ZAlexander Færøyahf@torproject.orgMake a release of BridgeDBAs far as we understand here at the hackmeeting in Brussels there is currently no software release of the BridgeDB codebase. We should make a 0.0.1 release (or whatever we decide as initial version number).As far as we understand here at the hackmeeting in Brussels there is currently no software release of the BridgeDB codebase. We should make a 0.0.1 release (or whatever we decide as initial version number).Philipp Winterphw@torproject.orgPhilipp Winterphw@torproject.orghttps://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/29273Document BridgeDB infrastructure2020-06-27T13:42:51ZAlexander Færøyahf@torproject.orgDocument BridgeDB infrastructureWe should document how the current BridgeDB that is running is configured and how to configure a new instance in case there is a problem with the one we have today.We should document how the current BridgeDB that is running is configured and how to configure a new instance in case there is a problem with the one we have today.David Gouletdgoulet@torproject.orgDavid Gouletdgoulet@torproject.orghttps://gitlab.torproject.org/tpo/anti-censorship/bridgedb/-/issues/40018Evaluation of bridge statistics2023-08-24T15:15:04ZCecylia BocovichEvaluation of bridge statisticsSee what we information we have, what we need, and how we can use these statistics.See what we information we have, what we need, and how we can use these statistics.meskiomeskio@torproject.orgmeskiomeskio@torproject.org