blog issueshttps://gitlab.torproject.org/tpo/web/blog/-/issues2023-02-06T19:53:58Zhttps://gitlab.torproject.org/tpo/web/blog/-/issues/40060To publish: blog post about DDoS attack2023-02-06T19:53:58ZIsabela FernandesTo publish: blog post about DDoS attacktitle: Tor is slow right now. Here is what is happening.
author: Isabela
# Why Tor is slow right now and what we are doing about it.
For at least 7 months, several different types of ongoing denial of service (DoS) attacks have affect...title: Tor is slow right now. Here is what is happening.
author: Isabela
# Why Tor is slow right now and what we are doing about it.
For at least 7 months, several different types of ongoing denial of service (DoS) attacks have affected the Tor network. At some points, the attacks impacted the network severely enough that users could not load pages or access onion services.
We have been working hard to mitigate the impacts and defend the network from these attacks. The methods and targets of these attacks have changed over time and we are adapting as these attacks continue. It's not possible to determine with certainty who is conducting these attacks or their intentions.
We will continue to increase and tweak defenses on the Tor network to combat this problem. We are also adding two new members to our Network team who will be solely focused on .onion services development.
# A big thank you to our community.
We know that a lot of people use and depend on Tor for security and privacy while connecting to the internet. There are many tools and pieces of infrastructure out there that depend on Tor as well. We take that responsibility and the work we do very seriously.
The Tor Project has a strong community that also understands Tor’s importance for so many people around the world, and fortunately, they have always been there to help.
Throughout our work to improve the network’s defenses, many people have stepped up to support us, fight this attack, and make sure the Tor network is stable for users. Allies have [highlighted the importance of financially supporting Tor](https://bitcoinmagazine.com/culture/if-you-love-bitcoin-you-should-help-tor), [held fundraisers to add more relays to the network](https://savetor.network/), [funded current relay operator associations](https://bitcoinmagazine.com/business/hrf-awards-325000-bitcoin-grants), and come together to form the Onion Services Resource Coalition, which has allowed us to hire two new network team developers who will focus specifically on onion services. This, plus the countless supporters who have spread the word about helping Tor on social media and in their communities.
We would like to add to this post a big thank you to everyone in our community—and to our friends at [Ocelot](https://ocelot.net/), [Quiet](https://tryquiet.org/), [Wasabi Wallet / zKSNACKs](https://zksnacks.com/), [Fedimint](https://fedimint.org/), [Trezor](https://trezor.io/), [OpenSats](https://opensats.org/), and [Freedom of the Press Foundation](https://freedom.press/)—who are helping us right now in all sorts of ways, we thank you.
# You can help too! Here is how:
We are 70% towards our goal of fully funding two years worth of onion service development to mitigate the impacts of these attacks. **We have $155,000 left to raise.**
If you believe in the importance of the Tor network and defending it against attacks, please make a donation directly towards this work:
- [Make a USD donation via Stripe or PayPal](https://donate.torproject.org/): add “onion services” to the comments field.
- [Make a BTC donation via BTCPayServer](https://btcpay.torproject.org/apps/48eCC1sFqByBXTKKoCgMmkkGvheX/pos): we’ll know your donation is to be used to advance onion services.
- [Make a cryptocurrency donation directly to our wallet](https://donate.torproject.org/cryptocurrency/): let us know you’ve made a donation at giving at torproject.org
You can contribute to the Onion Support Coalition fund by making a donation.
If you have any information that could help us understand better the nature of these attacks you can contact us via signal: [https://signal.me/#p/+17787431312](https://signal.me/#p/+17787431312).
If you are a relay operator and would like to know more about what to do to defend your relay from these types of attacks you can connect with us through the email list tor-relays at lists.torproject.org. We actually recommend that all relay operators join this list to be up to date with best practices to keep the Tor network healthy.https://gitlab.torproject.org/tpo/web/blog/-/issues/40056Update our 2023 event calendar2023-02-13T21:05:44ZRoger DingledineUpdate our 2023 event calendarHere is a start at some events we should tell the world we are interested in:
* FOSDEM, Brussels, Feb 4-5
https://fosdem.org/2023/
* RightsCon, Costa Rica, Jun 5-8
https://www.rightscon.org/attend/
* Mozfest, Amsterdam, Jun 8-20
https...Here is a start at some events we should tell the world we are interested in:
* FOSDEM, Brussels, Feb 4-5
https://fosdem.org/2023/
* RightsCon, Costa Rica, Jun 5-8
https://www.rightscon.org/attend/
* Mozfest, Amsterdam, Jun 8-20
https://www.mozillafestival.org/en/proposals/
* PETS, Switzerland, Jul 10-14
https://petsymposium.org/
* Usenix Security, California, Aug 9-11
https://www.usenix.org/conference/usenixsecurity23
* Defcon, Las Vegas, Aug 10-13
https://defcon.org/html/defcon-31/dc-31-cfi.html
* Internet Governance Forum, Japan, Oct 8-12
https://www.intgovforum.org/en/content/igf-2023
Let's collect whichever ones are missing, and then get them added as events on the blog calendar, and also tell Al and the newsletter people so they can get included in the right newsletters, and also plan to tweet about them at the right times.https://gitlab.torproject.org/tpo/web/blog/-/issues/40044Comments are broken on onion version2023-06-26T16:53:02ZsreadyComments are broken on onion versionWhen visiting some post through onion service ([example](http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/new-alpha-release-tor-browser-120a1/)) with JS enabled, there is a browser error instead of comments section. ...When visiting some post through onion service ([example](http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion/new-alpha-release-tor-browser-120a1/)) with JS enabled, there is a browser error instead of comments section. Looks related to CSP.Sponsor 9 - Phase 6 - Usability and Community Intervention on Support for Democracy and Human RightsJérôme Charaouilavamind@torproject.orgJérôme Charaouilavamind@torproject.org2023-06-30https://gitlab.torproject.org/tpo/web/blog/-/issues/40011Fossilize old Drupal blog2021-12-13T19:21:54ZJérôme Charaouilavamind@torproject.orgFossilize old Drupal blogIt would be a good idea to fossilize and archive the old Drupal blog, it might come in handy eventually.
@anarcat had some ideas about how we can proceed.It would be a good idea to fossilize and archive the old Drupal blog, it might come in handy eventually.
@anarcat had some ideas about how we can proceed.Launch support's Forum and Blog migrationJérôme Charaouilavamind@torproject.orgJérôme Charaouilavamind@torproject.orghttps://gitlab.torproject.org/tpo/web/blog/-/issues/40063Consider updating Debian repositories blog post2023-03-12T02:56:53ZJérôme Charaouilavamind@torproject.orgConsider updating Debian repositories blog postWhile doing research for !167, I noticed we have this blog post up about using Tor as a transport for the Debian APT repositories:
https://blog.torproject.org/debian-and-tor-services-available-onion-services/
However, though the onion ...While doing research for !167, I noticed we have this blog post up about using Tor as a transport for the Debian APT repositories:
https://blog.torproject.org/debian-and-tor-services-available-onion-services/
However, though the onion adresses may still be valid (I was unable to confirm), we should probably update them to the v3 addresses.Jérôme Charaouilavamind@torproject.orgJérôme Charaouilavamind@torproject.orghttps://gitlab.torproject.org/tpo/web/blog/-/issues/40049make it possible to publish "same-day" posts2023-05-16T19:28:57ZIsabela Fernandesmake it possible to publish "same-day" postsHi there, this is a report from the comms team. Please keep in mind that the use case here is of a user that does not know command line.
- [x] web IDE crashes the browser because it requires so many resources from the computer. It take...Hi there, this is a report from the comms team. Please keep in mind that the use case here is of a user that does not know command line.
- [x] web IDE crashes the browser because it requires so many resources from the computer. It takes forever to load (15-45minutes) after many attempts. This is just to get to a place where you can upload an image, if an error occurs you have to start all over again. **action point**: document in a new issue in https://gitlab.torproject.org/tpo/web/lego/-/issues, see if it's possible to use lektor locally?
- [ ] takes ~15-30 minutes to upload a preview. normally the workflow involves a lot of back and forward with preview to fix markup mistakes. this 'editing and previewing' process ends up taking hours. **action point**: document in https://gitlab.torproject.org/tpo/web/blog/-/issues/40015
- [ ] if something in the build process breaks and the preview doesn't populate, it is not possible to tell what is wrong and more time is lost in figuring what to fix **action point**: document in a new issue in https://gitlab.torproject.org/tpo/web/blog/-/issues/
- [ ] doing anything more than adding a lead image (e.g., adding images inline, hyperlinking an inline image, resizing something) takes a
mixture of markup and HTML, which requires a lot of trial and error (see second item) **action point**: see if it's possible to use lektor locally?
- [ ] we always depend on a person to finalize the process, you have to (a) ask a web person to merge the request (b) keep checking the website for an hour+ to ensure its there (c) often ask the person to do another step to *actually* make the post live because something was forgotten in the merge process. this adds up to the time to complete the task. **action point**: request access to the web team
- [ ] currently is almost impossible to guarantee a post can be published on the "day-of", to do that we need to mobilize a lot of time to make sure the task can be done. **action point**: fix all of the above issues. :smile:Jérôme Charaouilavamind@torproject.orgJérôme Charaouilavamind@torproject.orghttps://gitlab.torproject.org/tpo/web/blog/-/issues/40039Please add this meta tag to blog.torproject.org for monetization w/ coil2022-03-23T10:54:45ZIsabela FernandesPlease add this meta tag to blog.torproject.org for monetization w/ coilHello we have set up a wallet to receive contributions through coil. The goal is to add this meta tag to our torproject.org and blog.torproject.org so we can receive contributions in coil.
The tag:
`<meta name="monetization" content="$...Hello we have set up a wallet to receive contributions through coil. The goal is to add this meta tag to our torproject.org and blog.torproject.org so we can receive contributions in coil.
The tag:
`<meta name="monetization" content="$ilp.uphold.com/pYfXb92JBQN4">`
More information about coil meta tags:
https://help.coil.com/docs/monetize/content/websites-monetize-sitehttps://gitlab.torproject.org/tpo/web/blog/-/issues/40051give al power to merge requests on the blog2022-10-11T18:15:58Zanarcatgive al power to merge requests on the blogin #40049 and, in person, in ireland, it became obvious that one of the blockers @smith is facing is his (in)capacity at just getting through the entire process of publishing stuff on his own. right now, he needs to submit a MR but can't...in #40049 and, in person, in ireland, it became obvious that one of the blockers @smith is facing is his (in)capacity at just getting through the entire process of publishing stuff on his own. right now, he needs to submit a MR but can't merge it himself, nor can he merge other people's.
this should be fixed: let's give @smith the privileges required to merge MRs in this repository.
at the informal session in Ireland, i mentioned different ways MRs can be used in different projects. basically, i presented three ways:
1. ask: you need permission from someone else before changes can be merged, or you can't merge yourself
2. review: you need revisions from someone else, but you can merge yourself, maybe after a timeout or checks pass
3. tell: you can just merge on your own, but you still use the process to show others how something special is done
We are, i think somewhere between process 1 and 2 in the blog, and we'd be promoting al from status 1 to 2.
Those ideas come from [martin fowler](https://martinfowler.com/articles/ship-show-ask.html)Jérôme Charaouilavamind@torproject.orgJérôme Charaouilavamind@torproject.orghttps://gitlab.torproject.org/tpo/web/blog/-/issues/10022We need a new blogging system2020-06-27T14:30:12ZAndrew LewmanWe need a new blogging systemThe current blogging system is based on Drupal 5 and heavily hacked up to remove lots of surface area for classes of attacks. However, it doesn't work so much years later. The search functionality is broken. Lots of the admin functionali...The current blogging system is based on Drupal 5 and heavily hacked up to remove lots of surface area for classes of attacks. However, it doesn't work so much years later. The search functionality is broken. Lots of the admin functionality is broken as well. I've resorted to using raw SQL queries to manage the system. This is less than optimal.
Options I see are:
1. Do nothing and let the blog further degrade.
2. Migrate to a static blog generator like jekyll.
3. Migrate to modern drupal in the debian repos.
4. Use RedTeam's WordPress system for a more secure wordpress installation.
5. Host it somewhere else and let them worry about it, so long as we can get our data out daily.https://gitlab.torproject.org/tpo/web/blog/-/issues/10440Cross Site Scripting at TorProject Blog2020-06-27T14:30:12ZTracCross Site Scripting at TorProject BlogGET parameter incorrectly filter GET query which allows attackers to execute JavaScript code which is called Cross Site Scripting.
https://blog.torproject.org/archive/1%3Cbody%20onload=alert%28666%29%3E/2013/11/,
**Trac**:
**Username...GET parameter incorrectly filter GET query which allows attackers to execute JavaScript code which is called Cross Site Scripting.
https://blog.torproject.org/archive/1%3Cbody%20onload=alert%28666%29%3E/2013/11/,
**Trac**:
**Username**: patryk.bogdan@pentesters.plhttps://gitlab.torproject.org/tpo/web/blog/-/issues/10479Export blog posts from current blog2020-06-27T14:30:12ZAndrew LewmanExport blog posts from current blogExport everything in some sane format for future imports (html vs. markdown?)Export everything in some sane format for future imports (html vs. markdown?)2014 Tor Blog Replacementhttps://gitlab.torproject.org/tpo/web/blog/-/issues/10480Export comments from current blog2020-06-27T14:30:11ZAndrew LewmanExport comments from current blogExport comments from current blog in some sane format and some ability to import the threads, etc. into a new system.Export comments from current blog in some sane format and some ability to import the threads, etc. into a new system.2014 Tor Blog Replacementhttps://gitlab.torproject.org/tpo/web/blog/-/issues/13118Design an updated look and feel for the comment system2020-06-27T14:30:11ZAndrew LewmanDesign an updated look and feel for the comment systemDesign an updated look and feel for the comment systemDesign an updated look and feel for the comment system2014 Tor Blog Replacementhttps://gitlab.torproject.org/tpo/web/blog/-/issues/13262test blog migration2020-06-27T14:30:11ZAndrew Lewmantest blog migrationTest a migration of the blog to the new jekyll systemTest a migration of the blog to the new jekyll system2014 Tor Blog Replacementhttps://gitlab.torproject.org/tpo/web/blog/-/issues/13263test migration of comments to juvia2020-06-27T14:30:11ZAndrew Lewmantest migration of comments to juviaTest a migration of blog comments to juviaTest a migration of blog comments to juvia2014 Tor Blog Replacementhttps://gitlab.torproject.org/tpo/web/blog/-/issues/13264integrate the new jekyll blog into the tor website homepage2020-06-27T14:30:11ZAndrew Lewmanintegrate the new jekyll blog into the tor website homepageintegrate the new jekyll blog into the tor website homepage.
With the new jekyll blog platform, we can integrate the latest posts into the index.wml which creates the home page on the main www.torproject.org site.integrate the new jekyll blog into the tor website homepage.
With the new jekyll blog platform, we can integrate the latest posts into the index.wml which creates the home page on the main www.torproject.org site.2014 Tor Blog Replacementhttps://gitlab.torproject.org/tpo/web/blog/-/issues/15032Make blog.torproject.org mirrorable2021-11-18T03:02:01ZTracMake blog.torproject.org mirrorableThe blog at blog.torproject.org is an essential part of the torproject website that many users may want to visit. Though currently, mirror operators do not (cannot) mirror it due to its dynamic content (commenting capability). I suggest ...The blog at blog.torproject.org is an essential part of the torproject website that many users may want to visit. Though currently, mirror operators do not (cannot) mirror it due to its dynamic content (commenting capability). I suggest that we implement a method of exporting a static copy of the blog that can be mirrored.
**Trac**:
**Username**: martingaleJérôme Charaouilavamind@torproject.orgJérôme Charaouilavamind@torproject.orghttps://gitlab.torproject.org/tpo/web/blog/-/issues/18773JS errors in Blog2020-12-11T12:58:41ZbugzillaJS errors in BlogWhen loading a blog post:
```
Error: call to eval() blocked by CSP jquery.js:2:0
ReferenceError: $ is not defined drupal.js:205:2
ReferenceError: $ is not defined textarea.js:35:2
```
and
```
Content Security Policy: The page's settings ...When loading a blog post:
```
Error: call to eval() blocked by CSP jquery.js:2:0
ReferenceError: $ is not defined drupal.js:205:2
ReferenceError: $ is not defined textarea.js:35:2
```
and
```
Content Security Policy: The page's settings blocked the loading of a resource at self ("script-src https://blog.torproject.org 'sha256-dOEkAci/oPxf5KnvZSDGW6/1gs5qvj7uG++2KYd+qd4='"). jquery.js:2:0
```https://gitlab.torproject.org/tpo/web/blog/-/issues/20156log.torproject.org is DOWN2020-06-27T14:30:11Zcypherpunkslog.torproject.org is DOWNhttps://gitlab.torproject.org/tpo/web/blog/-/issues/20158Comments on blog posts disappeared2020-06-27T14:30:10ZboklmComments on blog posts disappearedWe can still see them in the admin interface, under the list of published comments, so they are not completely lost, but they don't appear anymore under the blog posts.
Posting new comments is still working.
It could be related to the ...We can still see them in the admin interface, under the list of published comments, so they are not completely lost, but they don't appear anymore under the blog posts.
Posting new comments is still working.
It could be related to the reboot of the server hosting the blog today.https://gitlab.torproject.org/tpo/web/blog/-/issues/22013Migrate blog.tpo2020-06-30T09:19:09ZHiroMigrate blog.tpoThis ticket will be used to track blog.tpo migration to a newer drupal installation.
Here is a list of still open tickets:
[[TicketQuery(status=accepted|assigned|needs_information|needs_review|needs_revision|new|reopened,parent=legacy/t...This ticket will be used to track blog.tpo migration to a newer drupal installation.
Here is a list of still open tickets:
[[TicketQuery(status=accepted|assigned|needs_information|needs_review|needs_revision|new|reopened,parent=legacy/trac#22013,order=priority,format=table,col=status|summary|reporter|priority)]]HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22014Migrate urls so we won't have dead links2020-06-27T14:30:10ZHiroMigrate urls so we won't have dead linksThis task takes care of ensuring that permalinks for migrated posts are maintained.This task takes care of ensuring that permalinks for migrated posts are maintained.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22016Create a calendar widget2020-06-27T14:30:10ZHiroCreate a calendar widgetCreate a calendar widget similar to the existing one (but utilizing more modern Drupal modules). Existing calendar data does not need to be imported.Create a calendar widget similar to the existing one (but utilizing more modern Drupal modules). Existing calendar data does not need to be imported.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22017Provide per-tag comment moderation queues2020-06-27T14:30:10ZHiroProvide per-tag comment moderation queuesProvide per-tag comment moderation queues for the Tor Blog (to be implemented as a Views module override of the default admin panel with exposed filters)Provide per-tag comment moderation queues for the Tor Blog (to be implemented as a Views module override of the default admin panel with exposed filters)HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22018Prevent users from being individually tracked in Drupal’s logs.2020-06-27T14:30:10ZHiroPrevent users from being individually tracked in Drupal’s logs.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22019Integrate a Captcha and Honeypot2020-06-27T14:30:10ZHiroIntegrate a Captcha and HoneypotIntegrate a Captcha and Honeypot for comment forms that does not involve third party services. This will not prevent all spam but will reduce the success of automated spam attacks.Integrate a Captcha and Honeypot for comment forms that does not involve third party services. This will not prevent all spam but will reduce the success of automated spam attacks.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22020Ensure the site renders properly on different devices and browsers versions2020-06-27T14:30:10ZHiroEnsure the site renders properly on different devices and browsers versionsEnsure the site renders properly on different devices, as well as in the latest versions of Safari, Chrome, Firefox, IE and both the alpha and stable releases of The Tor Browser.Ensure the site renders properly on different devices, as well as in the latest versions of Safari, Chrome, Firefox, IE and both the alpha and stable releases of The Tor Browser.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22021Provide an RSS feed of blog posts that is accessible at its previous URL.2020-06-27T14:30:09ZHiroProvide an RSS feed of blog posts that is accessible at its previous URL.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22243CSS and logo changes2020-06-27T14:30:09ZIsabela FernandesCSS and logo changesChange all color: #ABCD03 to #68b030
Primary font should be Source Sans Pro
Remove the slogan below the logo
Add new logo (png attached)Change all color: #ABCD03 to #68b030
Primary font should be Source Sans Pro
Remove the slogan below the logo
Add new logo (png attached)HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22334Missing top-right links in blog2020-06-27T14:30:09ZteorMissing top-right links in blogThere are 9 links in the top right of https://www.torproject.org/ , and the new blog only has 2 in the top center left (and the blog link in the top right).
Did we deliberately remove:
* Documentation
* Press
* Contact
* Download
* Volu...There are 9 links in the top right of https://www.torproject.org/ , and the new blog only has 2 in the top center left (and the blog link in the top right).
Did we deliberately remove:
* Documentation
* Press
* Contact
* Download
* Volunteer
I'd like to put Download back if we can, not sure about the other ones.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22335Please remove "The" from the blog title2020-06-27T14:30:09ZteorPlease remove "The" from the blog titleThe current title is: "The Tor Blog | The Tor Project Blog"
"The" doesn't add any useful information. And it makes tab names hard to read when I have many tabs open.
I suggest we remove both instances of "The".
And maybe we want to thi...The current title is: "The Tor Blog | The Tor Project Blog"
"The" doesn't add any useful information. And it makes tab names hard to read when I have many tabs open.
I suggest we remove both instances of "The".
And maybe we want to think about whether repeating "Tor" and "Blog" is useful too.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22336blogs/$user not present in new blog2020-06-27T14:30:09ZArturo Filastòblogs/$user not present in new blogIn the old blog every use would have the list of posts they published accessible via:
https://blog.torproject.org/blogs/art
While in the new blog the URI has changed to:
https://live-tor-blog-8.pantheonsite.io/users/artIn the old blog every use would have the list of posts they published accessible via:
https://blog.torproject.org/blogs/art
While in the new blog the URI has changed to:
https://live-tor-blog-8.pantheonsite.io/users/arthttps://gitlab.torproject.org/tpo/web/blog/-/issues/22337blog.tpo/node/ does not exist in the new blog2020-06-27T14:30:09ZArturo Filastòblog.tpo/node/ does not exist in the new blogI think this may be too complex to map and maybe not worth it.
The old blog had links to articles also available in the form:
https://blog.torproject.org/node/1190/191104
but on the new blog:
https://live-tor-blog-8.pantheonsite.io/n...I think this may be too complex to map and maybe not worth it.
The old blog had links to articles also available in the form:
https://blog.torproject.org/node/1190/191104
but on the new blog:
https://live-tor-blog-8.pantheonsite.io/node/1190/191104
gives 404https://gitlab.torproject.org/tpo/web/blog/-/issues/22338Missing and mismatched blog posts2020-06-27T14:30:09ZArturo FilastòMissing and mismatched blog postsI noticed that some of the blog posts I wrote now give a permission denied error.
For example:
* https://live-tor-blog-8.pantheonsite.io/blog/ooni-bridge-reachability-study-and-hackfest (gives permission denied error)
* https://live-t...I noticed that some of the blog posts I wrote now give a permission denied error.
For example:
* https://live-tor-blog-8.pantheonsite.io/blog/ooni-bridge-reachability-study-and-hackfest (gives permission denied error)
* https://live-tor-blog-8.pantheonsite.io/blog/tor-project-hiring-developer-ooni (redirects to /blog/tor-misused-criminals), but then shows the correct article with a different author. I also don't see this appear in my list of posts: https://live-tor-blog-8.pantheonsite.io/users/artHiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22350Loading a tag leads to Drupal\Core\Database\DatabaseExceptionWrapper2020-06-27T14:30:08ZRoger DingledineLoading a tag leads to Drupal\Core\Database\DatabaseExceptionWrapperTrying to load
https://live-tor-blog-8.pantheonsite.io/category/tags/research
consistently gives me this error
```
The website encountered an unexpected error. Please try again later.
Drupal\Core\Database\DatabaseExceptionWrapper: Excep...Trying to load
https://live-tor-blog-8.pantheonsite.io/category/tags/research
consistently gives me this error
```
The website encountered an unexpected error. Please try again later.
Drupal\Core\Database\DatabaseExceptionWrapper: Exception in Taxonomy term[taxonomy_term]: SQLSTATE[42S22]: Column not found: 1054 Unknown column 'taxonomy_index.status' in 'where clause': SELECT taxonomy_index.sticky AS taxonomy_index_sticky, taxonomy_index.created AS taxonomy_index_created, node_field_data.nid AS nid FROM {node_field_data} node_field_data LEFT JOIN {taxonomy_index} taxonomy_index ON node_field_data.nid = taxonomy_index.nid WHERE ((taxonomy_index.tid = :taxonomy_index_tid)) AND (taxonomy_index.status = :db_condition_placeholder_0) ORDER BY taxonomy_index_sticky DESC, taxonomy_index_created DESC LIMIT 11 OFFSET 0; Array ( [:taxonomy_index_tid] => 87 [:db_condition_placeholder_0] => 1 ) in Drupal\views\Plugin\views\query\Sql->execute() (line 1488 of core/modules/views/src/Plugin/views/query/Sql.php).
```
Maybe this is a problem only with the current temporary blog, or maybe it represents a bigger problem. I'm not sure.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22352blog post import lost <h2> tags?2020-06-27T14:30:08ZRoger Dingledineblog post import lost <h2> tags?On https://blog.torproject.org/blog/tor-heart-pets-and-privacy-research-community notice how the "Part one" is in an h2 tag.
But then on
https://live-tor-blog-8.pantheonsite.io/blog/tor-heart-pets-and-privacy-research-community
notice h...On https://blog.torproject.org/blog/tor-heart-pets-and-privacy-research-community notice how the "Part one" is in an h2 tag.
But then on
https://live-tor-blog-8.pantheonsite.io/blog/tor-heart-pets-and-privacy-research-community
notice how it's just a normal p tag.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22353Threading broken in new blog comments2020-06-27T14:30:08ZRoger DingledineThreading broken in new blog commentsOn https://blog.torproject.org/blog/transparency-openness-and-our-2015-financials scroll down to the comments section, and you'll see that some comments are replies to others, e.g.
https://blog.torproject.org/blog/transparency-openness-a...On https://blog.torproject.org/blog/transparency-openness-and-our-2015-financials scroll down to the comments section, and you'll see that some comments are replies to others, e.g.
https://blog.torproject.org/blog/transparency-openness-and-our-2015-financials#comment-262562
But then notice on
https://live-tor-blog-8.pantheonsite.io/comment/262562#comment-262562
how it's all one flat set of comments.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22354Blog comment titles are redundant and can be left out?2020-06-27T14:30:08ZRoger DingledineBlog comment titles are redundant and can be left out?In the comments on the new blog, e.g.
https://live-tor-blog-8.pantheonsite.io/comment/262562#comment-262562
There is a comment title field, but in the old blog there were no comment titles, so now there's just a confusing repetition of t...In the comments on the new blog, e.g.
https://live-tor-blog-8.pantheonsite.io/comment/262562#comment-262562
There is a comment title field, but in the old blog there were no comment titles, so now there's just a confusing repetition of the first couple words of the comment, in caps, at the beginning of each comment.
Maybe we can simplify and streamline by getting rid of the title part?HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22383Upcoming events are not showing up2020-06-27T14:30:08ZanadahzUpcoming events are not showing upIs seems that the upcoming events are not showing up on the front page.
Perhaps the events have not be yet migrated from the old blog?Is seems that the upcoming events are not showing up on the front page.
Perhaps the events have not be yet migrated from the old blog?HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22385Migrate new blog posts from old blog to new blog2020-06-27T14:30:08ZRoger DingledineMigrate new blog posts from old blog to new bloghttps://blog.torproject.org/blog/state-internet-censorship-indonesia
and
https://blog.torproject.org/blog/tor-browser-70a4-released
both got posted to the old blog but aren't on the new blog yet.https://blog.torproject.org/blog/state-internet-censorship-indonesia
and
https://blog.torproject.org/blog/tor-browser-70a4-released
both got posted to the old blog but aren't on the new blog yet.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22386Make the www.tpo script to pull blog rss files resume working2020-06-27T14:30:08ZRoger DingledineMake the www.tpo script to pull blog rss files resume workingSee include/blog-recent.wmi in the webwml git.
It gets included by en/index.wml in the webwml git.
It gets built on jenkins, when jenkins builds our website:
https://gitweb.torproject.org/project/jenkins/tools.git/tree/slaves/linux/web...See include/blog-recent.wmi in the webwml git.
It gets included by en/index.wml in the webwml git.
It gets built on jenkins, when jenkins builds our website:
https://gitweb.torproject.org/project/jenkins/tools.git/tree/slaves/linux/website-build-blog-snippets
In particular, by this script:
https://gitweb.torproject.org/project/jenkins/tools.git/tree/slaves/linux/website-build-blog-snippets/make-recent-posts
which looks like it loads this page from the blog:
https://blog.torproject.org/blog/feed
and that page seems to return 404 currently.
So we should either find out where that blog feed page is now, and change the link, or make one and make it available.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22387Make unapproved comments visually different from approved comments2020-06-27T14:30:08ZRoger DingledineMake unapproved comments visually different from approved commentsRight now when looking at a blog post, e.g.
https://blog.torproject.org/blog/stem-release-15
There are some comments that are approved, and some that are unapproved, but they all look just like comments.
In the old blog, they were a dar...Right now when looking at a blog post, e.g.
https://blog.torproject.org/blog/stem-release-15
There are some comments that are approved, and some that are unapproved, but they all look just like comments.
In the old blog, they were a darker color and had the word 'unapproved' or 'unpublished' or something written over them.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22388Put a favicon in place2020-06-30T09:19:37ZRoger DingledinePut a favicon in placeThe blog tab in my browser now has the little angry blue drupal guy as its icon.
That's fine for now, so no rush, but we can do better! :)The blog tab in my browser now has the little angry blue drupal guy as its icon.
That's fine for now, so no rush, but we can do better! :)HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22389No way to save a draft blog post without publishing it?2020-06-27T14:30:07ZRoger DingledineNo way to save a draft blog post without publishing it?https://blog.torproject.org/node/add/article
doesn't have any options for selecting "published status" or the like.
In the past, we could draft a blog post, and pass the URL around to other people who had blog accounts, and they could e...https://blog.torproject.org/node/add/article
doesn't have any options for selecting "published status" or the like.
In the past, we could draft a blog post, and pass the URL around to other people who had blog accounts, and they could edit it, without needing to publish it to the frontpage.
That seems like a useful feature to resurrect.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22390I can't edit an existing blog post unless I'm its author2020-06-27T14:30:07ZRoger DingledineI can't edit an existing blog post unless I'm its authorI've logged in, and I'm at
https://blog.torproject.org/blog/we-are-upgrading-our-blog
How do I edit this blog post?
There is a button on the top right that says "Edit", but when I click it, nothing happens (maybe it works in Chrome but ...I've logged in, and I'm at
https://blog.torproject.org/blog/we-are-upgrading-our-blog
How do I edit this blog post?
There is a button on the top right that says "Edit", but when I click it, nothing happens (maybe it works in Chrome but not in Firefox? Or maybe it just doesn't work?). In any case, that same button is there when I'm on the front page (https://blog.torproject.org/) so I'm guessing it is not actually the way to edit a blog post.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22392Should we remove or compress the left column on the blog?2020-06-27T14:30:07ZRoger DingledineShould we remove or compress the left column on the blog?We have a new blog (yay), and it comes with a new template (mostly yay).
The engineers among us have been staring at the left of the three columns on the blog, and wondering if that is the best amount of whitespace to use, while smushin...We have a new blog (yay), and it comes with a new template (mostly yay).
The engineers among us have been staring at the left of the three columns on the blog, and wondering if that is the best amount of whitespace to use, while smushing all the content into the middle column.
See e.g.
https://blog.torproject.org/blog/tor-0306-released-new-series-stable
and scroll down a bit. Notice how you're now reading a narrow column of text, with plentiful whitespace on either side of it.
Maybe whoever designed this layout had a big screen resolution, and it worked better there.
I have no clue how this looks on mobile, but ... ok, actually I went to go check, and on ios safari it just shows me the middle column, and it pretends those left and right columns aren't there. Lucky mobile users. :)
I am adding the ux-team keyword in hopes that they can help us move forward. I know that "hey user experience people, can you help with layout, that's the same thing right" must drive you crazy, and I apologize in advance, but you're still our best hope here. :)Antonelaantonela@torproject.orgAntonelaantonela@torproject.orghttps://gitlab.torproject.org/tpo/web/blog/-/issues/22393Commenter names are duplicated and inconsistent2020-06-27T14:30:07ZcypherpunksCommenter names are duplicated and inconsistentThe names of the commenters are duplicated in the comment and are inconsistent.
For example https://blog.torproject.org/comment/268725#comment-268725 shows
```
Anonymous
Submitted by John (not verified) on May 25, 2017
```
Curiously w...The names of the commenters are duplicated in the comment and are inconsistent.
For example https://blog.torproject.org/comment/268725#comment-268725 shows
```
Anonymous
Submitted by John (not verified) on May 25, 2017
```
Curiously when replying to the comment and previewing it results in
```
John
Submitted by John (not verified) on May 25, 2017
```HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22394Missing styling on user pages2020-06-27T14:30:07ZcypherpunksMissing styling on user pagesSome pages on the user pages are missing styling. For example;
https://blog.torproject.org/users/arma (see latest (top) post).
https://blog.torproject.org/users/arma?page=1 (all posts).
https://blog.torproject.org/users/gk?page=1 (all p...Some pages on the user pages are missing styling. For example;
https://blog.torproject.org/users/arma (see latest (top) post).
https://blog.torproject.org/users/arma?page=1 (all posts).
https://blog.torproject.org/users/gk?page=1 (all posts).
However, not all pages all like this. For example;
https://blog.torproject.org/users/arma?page=2
https://blog.torproject.org/users/gk?page=2HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22395find a way to present the comment threading more intuitively2020-06-27T14:30:07ZRoger Dingledinefind a way to present the comment threading more intuitivelyCheck out
https://blog.torproject.org/blog/did-fbi-pay-university-attack-tor-users#comments
then scroll down and try to figure out which comment is replying to which comment.
The hierarchy is still basically flat, and you have to count ...Check out
https://blog.torproject.org/blog/did-fbi-pay-university-attack-tor-users#comments
then scroll down and try to figure out which comment is replying to which comment.
The hierarchy is still basically flat, and you have to count the number of vertical lines to the left of the comment to try to figure out what's going on.
I think it could be improved by indenting comments as a function of where they are in the nested hierarchy.
But that's not the only possible way. I suspect there are other, better, options too.Antonelaantonela@torproject.orgAntonelaantonela@torproject.orghttps://gitlab.torproject.org/tpo/web/blog/-/issues/22401Pictures don't load in blog posts2020-06-27T14:30:06ZRoger DingledinePictures don't load in blog postshttps://blog.torproject.org/blog/lifecycle-of-a-new-relay
is supposed to have a picture:
```
<p><a href="https://extra.torproject.org/blog/2013-09-11-lifecycle-of-a-new-relay/lifecycle.png" rel="nofollow"><br /></a></p>
```
But it doesn...https://blog.torproject.org/blog/lifecycle-of-a-new-relay
is supposed to have a picture:
```
<p><a href="https://extra.torproject.org/blog/2013-09-11-lifecycle-of-a-new-relay/lifecycle.png" rel="nofollow"><br /></a></p>
```
But it doesn't show up on the page.
See also
https://blog.torproject.org/blog/what-tor-supporter-looks-edward-snowden
Is it being blocked by some sort of content security policy? Or is it something else?HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22404I can't add comments to blog posts released before the migration2020-06-27T14:30:06ZGeorg KoppenI can't add comments to blog posts released before the migrationLet's say I want to reply to https://blog.torproject.org/comment/268422#comment-268422 now after our migration is over. Somewhat surprisingly there seems to be no way to do so. There are no "Delete Edit Reply Approve" buttons on that com...Let's say I want to reply to https://blog.torproject.org/comment/268422#comment-268422 now after our migration is over. Somewhat surprisingly there seems to be no way to do so. There are no "Delete Edit Reply Approve" buttons on that comment available for me. I am logged in and replying to comments works for me with the https://blog.torproject.org/blog/we-are-upgrading-our-blog entry.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22411Comments are not shown at all to users who aren't logged in2020-06-27T14:30:06ZSebastian HahnComments are not shown at all to users who aren't logged inThis was just reported by funmill on #tor-project, and I seem to be able to confirm it. I looked at ~10 posts and none of them have comments. Using the comment URLs in the other tickets gives either permission denied or just empty pages ...This was just reported by funmill on #tor-project, and I seem to be able to confirm it. I looked at ~10 posts and none of them have comments. Using the comment URLs in the other tickets gives either permission denied or just empty pages instead of comments.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22426Missing `#comments` anchor on article pages2020-06-27T14:30:06ZDavid Fifielddcf@torproject.orgMissing `#comments` anchor on article pagesClicking an "_X_ comments" link from the index takes you to a URL with a `#comments` anchor at the end, for example:
https://blog.torproject.org/blog/we-are-upgrading-our-blog#comments
It's supposed to scroll you down to the comments, ...Clicking an "_X_ comments" link from the index takes you to a URL with a `#comments` anchor at the end, for example:
https://blog.torproject.org/blog/we-are-upgrading-our-blog#comments
It's supposed to scroll you down to the comments, but the article page is missing the appropriate anchor.
This bit of HTML:
```
<section>
<h2>Comments</h2>
```
needs to change to something like this:
```
<section id="comments">
<h2>Comments</h2>
```HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22436Some blog users have blogger role, and others don't?2020-06-27T14:30:06ZRoger DingledineSome blog users have blogger role, and others don't?On the https://blog.torproject.org/admin/people page it turns out some people have the "blogger" role, and other people don't.
There are now two intermediate roles, "authenticated user" and "blogger". I guess that was true on the old bl...On the https://blog.torproject.org/admin/people page it turns out some people have the "blogger" role, and other people don't.
There are now two intermediate roles, "authenticated user" and "blogger". I guess that was true on the old blog too, but I don't think we had anybody in the "has an account but doesn't have the blogger role" there. Somehow some of the users lost that role in the transition. Or maybe we did have that distinction, but the people without the blogger role could still blog, edit comments, etc on the old blog. I'm not sure.
I just went through and added the blogger role to most people, so it isn't an urgent issue now.
Is there a downside to merging the two roles, that is, simplifying by making everybody who has an account into a blogger?
I guess we could go the other way too, which is letting ordinary people make accounts on our blog, so they can be the same human each time they comment, and maybe even so they can bypass captchas and stuff. Is there a downside to that? :)HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22442Blog Search doesn't search in comments2020-06-27T14:30:06ZcypherpunksBlog Search doesn't search in commentsIt gives false sense of searching through the blog, but can't find anything written in comments.It gives false sense of searching through the blog, but can't find anything written in comments.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22443Direct links to comments (old style) no longer work2020-06-27T14:30:06ZcypherpunksDirect links to comments (old style) no longer workLet say open legacy/trac#22153 and see https://blog.torproject.org/blog/tor-browser-70a3-released#comment-263144 in it. The blog will be shown at the beginning. It now wants strange https://blog.torproject.org/comment/263144#comment-2631...Let say open legacy/trac#22153 and see https://blog.torproject.org/blog/tor-browser-70a3-released#comment-263144 in it. The blog will be shown at the beginning. It now wants strange https://blog.torproject.org/comment/263144#comment-263144 permalink to work.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22464Upcoming events are in reversed order2020-06-27T14:30:06ZcypherpunksUpcoming events are in reversed orderCopied from ticket:22383#comment:9
>It looks like the events are ordered "farthest in the future" to "nearest in the future"?
>
>Which means that on the frontpage, we have events in August, and the events in June and July are hidden?Copied from ticket:22383#comment:9
>It looks like the events are ordered "farthest in the future" to "nearest in the future"?
>
>Which means that on the frontpage, we have events in August, and the events in June and July are hidden?HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22509Put "Reply" bar at the bottom of comment2020-06-27T14:30:05ZcypherpunksPut "Reply" bar at the bottom of commentsubjsubjHiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22510Increasing brand presence on the Tor blog (i.e. to make it look more Tor-y)2020-06-27T14:30:05ZLinda LeeIncreasing brand presence on the Tor blog (i.e. to make it look more Tor-y)During the UX ticket triaging discussion, we realized that various people didn't like how bright the tor blog was, wanted more tor in the blog, and many other things. Let's intentionally design a color scheme and design for our new blog!...During the UX ticket triaging discussion, we realized that various people didn't like how bright the tor blog was, wanted more tor in the blog, and many other things. Let's intentionally design a color scheme and design for our new blog!
Possible options:
* using tor colors (light theme with tor-purple and tor-green accents, dark theme with tor-purple and tor-green accents, predominantly tor-purple theme, or predominantly tor-green theme)
* adding more graphics (onions, tor logo, etc.)
* making it look like our other sites (but torproject.org is not so great that we want it to necessarily look like it, looking at metrics.torproject.org can give ideas)
Resources:
* [How the current blog looks](https://blog.torproject.org/)
* [How the old blog used to look](https://web.archive.org/web/20170426133309/https://blog.torproject.org/blog/tor-browser-70a3-released)
* [Tor style guide](https://github.com/uracreative/tor-styleguide/blob/master/RGB/Tor%20Style%20Guide%20Complete%20-%20RGB.pdf)Antonelaantonela@torproject.orgAntonelaantonela@torproject.orghttps://gitlab.torproject.org/tpo/web/blog/-/issues/22530Redirection loop with disabled js on every page of blog.torproject.org2020-07-02T19:08:40ZcypherpunksRedirection loop with disabled js on every page of blog.torproject.orgFor several years everyone was able to post on https://blog.torproject.org without enabling JavaScript and other dangerous things.
Observed behaviour: can not post unless slider set to medium or low
Expected behaviour: high security sup...For several years everyone was able to post on https://blog.torproject.org without enabling JavaScript and other dangerous things.
Observed behaviour: can not post unless slider set to medium or low
Expected behaviour: high security supported
Steps to reproduce: try to post at https://blog.torproject.org with security slider on highHiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22549Put more comments per page?2020-06-27T14:30:05ZRoger DingledinePut more comments per page?I'm sure this is a setting somewhere, but I have no clue where to find it.
In the old blog, we could fit a lot of comments before you had to click next.
That way you could search on the page.
In the new blog, it seems like after 10 co...I'm sure this is a setting somewhere, but I have no clue where to find it.
In the old blog, we could fit a lot of comments before you had to click next.
That way you could search on the page.
In the new blog, it seems like after 10 comments you're out of space and on to a second page.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22557Comment pagination links could go to `#comments` anchors2020-06-27T14:30:05ZDavid Fifielddcf@torproject.orgComment pagination links could go to `#comments` anchorsOn a page like https://blog.torproject.org/blog/tor-browser-70-released#comments, the comment pagination links at the bottom could have `#comments` appended to them, so that the page scrolls directly to the comments and you don't have to...On a page like https://blog.torproject.org/blog/tor-browser-70-released#comments, the comment pagination links at the bottom could have `#comments` appended to them, so that the page scrolls directly to the comments and you don't have to scroll down over the article again.
I mean these links at the bottom:
```
1 / 2 / 3 / Next › Last »
```
So, for example, clicking "Next" would take you to https://blog.torproject.org/blog/tor-browser-70-released?page=1#comments.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22622You aren't allowed to use tags that haven't already been used2020-06-27T14:30:05ZRoger DingledineYou aren't allowed to use tags that haven't already been usedWhen you draft a new blog post, and pick the tag "foo", it prevents you from publishing, because "foo" is not a known tag.
It looks like you're only allowed to choose from tags that were used on the old blog?
The better behavior is to ...When you draft a new blog post, and pick the tag "foo", it prevents you from publishing, because "foo" is not a known tag.
It looks like you're only allowed to choose from tags that were used on the old blog?
The better behavior is to let people pick whatever tags they want to pick.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22624"See all upcoming events" shows you events in 20082020-06-27T14:30:05ZRoger Dingledine"See all upcoming events" shows you events in 2008Go to the frontpage of the blog, and then click on "see all upcoming events" on the right column. You end up at
https://blog.torproject.org/events/upcoming
which starts off telling me about a January 24, 2008 event.
There is a subtle li...Go to the frontpage of the blog, and then click on "see all upcoming events" on the right column. You end up at
https://blog.torproject.org/events/upcoming
which starts off telling me about a January 24, 2008 event.
There is a subtle link called "See the events calendar" which brings us to
https://blog.torproject.org/events/month
which I think is the calendar we are hoping to see after the first click.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22625New blog events default to today2020-06-27T14:30:05ZRoger DingledineNew blog events default to todayWhen you make a new event on the blog, you can set the Start Time and the End Time. But when you have made the event, suddenly it's the top event on the frontpage. It turns out there's another, optional, time you can set, called "Calenda...When you make a new event on the blog, you can set the Start Time and the End Time. But when you have made the event, suddenly it's the top event on the frontpage. It turns out there's another, optional, time you can set, called "Calendar date", and if you don't set it, it fills in today.
We should make it fill in the same date as Start Time instead. Or make it leave the optional thing empty, and use the Start Time if Calendar date isn't filled in.
Long term goal should be having drupal copy the start date into the calendar date.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22655Blog: feed has broken redirection2020-06-27T14:30:04ZcypherpunksBlog: feed has broken redirectionSteps to reproduce:
1. open https://blog.torproject.org/blog/feed , a feed URL provided by the page https://blog.torproject.org/ in any web browser (Tested: Firefox with different modifications, Epiphany)
What happens:
Loading the page...Steps to reproduce:
1. open https://blog.torproject.org/blog/feed , a feed URL provided by the page https://blog.torproject.org/ in any web browser (Tested: Firefox with different modifications, Epiphany)
What happens:
Loading the page fails with too many redirections.
The server sends a "301 Moved Permanently" status to the same URL (https://blog.torproject.org/blog/feed) until the browser aborts loading the page because of too many redirects.
What should happen:
Do not redirect recursively. You might want to redirect to https://blog.torproject.org/rss.xml.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22671Implement design changes to blog.torproject.org2020-06-27T14:30:04ZLinda LeeImplement design changes to blog.torproject.orgWe've taken the time to redesign blog.torproject.org. We think the new design is easier to read, uses the space better, and looks more Tor!
![tor-blogpage-before.png,300px](uploads/tor-blogpage-before.png,300px)
![tor-blogpage-commen...We've taken the time to redesign blog.torproject.org. We think the new design is easier to read, uses the space better, and looks more Tor!
![tor-blogpage-before.png,300px](uploads/tor-blogpage-before.png,300px)
![tor-blogpage-comments.png,300px](uploads/tor-blogpage-comments.png,300px)
Before: too much whitespace, confusing comments, too white.
![tor-blogpage-after.png,300px](uploads/tor-blogpage-after.png,300px)
After: more space used for content, intuitive comments, tor colors.
Since we're finished with the design, the next step is to incorporate all these changes and ship them. These include:
* legacy/trac#22392: removing the left column
* legacy/trac#22395: more intuitive comment threading
* legacy/trac#22510: increasing brand presence
* changes in font hierarchy, specifically h2 not being bold and in all caps.
* changes in color and styling
* including an onion icon next to tor people's comments (people who are registered on the blog) so that people can see which answers are more tor-official--see the attached image. Notice that the color of the onion depends on the color of the comment. For that, I suggest looking at: https://css-tricks.com/cascading-svg-fill-color/
The assets for the new design can be found here: https://projects.invisionapp.com/d/main#/console/11254922/239848960/inspect (look at the top navigation bar, and it has assets)HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22724New blog comment css has only one layer of comment replies2020-06-27T14:30:04ZRoger DingledineNew blog comment css has only one layer of comment replieshttps://blog.torproject.org/comment/269444#comment-269444
is a reply to
https://blog.torproject.org/comment/269430#comment-269430
but with the new css we got for comments last week, they're at the same level of indentation.https://blog.torproject.org/comment/269444#comment-269444
is a reply to
https://blog.torproject.org/comment/269430#comment-269430
but with the new css we got for comments last week, they're at the same level of indentation.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22774Figure out how much of each blog post to display on the index (front) page2020-06-30T09:22:11ZRoger DingledineFigure out how much of each blog post to display on the index (front) pageOn the old blog, we put the entirety of each blog post on the index pages. It was a conscious design choice -- it meant fewer posts got listed per index page, but you could actually read the posts by reading the index pages.
Now we have...On the old blog, we put the entirety of each blog post on the index pages. It was a conscious design choice -- it meant fewer posts got listed per index page, but you could actually read the posts by reading the index pages.
Now we have some subset of each post, and sometimes it's just a few lines, and sometimes it's "just" the first 35 bullet points of the changelog we're announcing.
We should figure out if we want to put all of each post, or just a teaser. And if we choose teaser, we should build code or policy that makes us more uniform in how much teaser we pick.
I'm including keyword ux-team because this is another one where they'd be helpful.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22783Remove fontawsome from the blog template2020-06-27T14:30:04ZHiroRemove fontawsome from the blog templateGlyphicons are not loaded on high security level in Tor browser.
The search box now is visible also on high-security mode.Glyphicons are not loaded on high security level in Tor browser.
The search box now is visible also on high-security mode.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22784Check for external resource being loaded by the tor-bootstrap template2020-06-27T14:30:04ZHiroCheck for external resource being loaded by the tor-bootstrap templateExternal resource prevent the site to be displayed properly on Tor browser.External resource prevent the site to be displayed properly on Tor browser.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22786The blog's search box is hard to find, particularly on high security mode2020-06-27T14:30:04ZteorThe blog's search box is hard to find, particularly on high security modeThere's no line around the search box on the blog, making it look like read-only text. Even worse, in High Security mode in Tor Browser, the search icon becomes a unicode placeholder.There's no line around the search box on the blog, making it look like read-only text. Even worse, in High Security mode in Tor Browser, the search icon becomes a unicode placeholder.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22806http://blog.torproject.org/ should redirect to https2020-06-27T14:30:04ZRoger Dingledinehttp://blog.torproject.org/ should redirect to https```
$ wget http://blog.torproject.org/
--2017-07-04 00:32:34-- http://blog.torproject.org/
Resolving blog.torproject.org (blog.torproject.org)... 23.185.0.2, 2620:12a:8001::2, 2620:12a:8000::2
Connecting to blog.torproject.org (blog.tor...```
$ wget http://blog.torproject.org/
--2017-07-04 00:32:34-- http://blog.torproject.org/
Resolving blog.torproject.org (blog.torproject.org)... 23.185.0.2, 2620:12a:8001::2, 2620:12a:8000::2
Connecting to blog.torproject.org (blog.torproject.org)|23.185.0.2|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: ‘index.html’
index.html [ <=> ] 43.03K --.-KB/s in 0.03s
2017-07-04 00:32:35 (1.54 MB/s) - ‘index.html’ saved [44067]
```
Shouldn't it instead be redirecting me to the https version of the site?HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22807Content Security Policy (CSP) header not implemented2020-06-27T14:30:03ZcypherpunksContent Security Policy (CSP) header not implementedMozilla Observatory reports that blog.torproject.org does not have a CSP header: https://observatory.mozilla.org/analyze.html?host=blog.torproject.orgMozilla Observatory reports that blog.torproject.org does not have a CSP header: https://observatory.mozilla.org/analyze.html?host=blog.torproject.orgHiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22822Cannot edit blogs2020-06-27T14:30:03ZstephwCannot edit blogsThe blog body editor will not load. Tommy and I have tried in Tor, Opera, Chrome, and Safari.The blog body editor will not load. Tommy and I have tried in Tor, Opera, Chrome, and Safari.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22823Edit blog leading image size and alignment2020-06-27T14:30:03ZstephwEdit blog leading image size and alignmentThe current leading image is aligned left and is not capable of being the same width as images in the blog body. Ideally, we'd follow Open Graph protocol.
For now, can we have a centered leading image which is allowed to be the width o...The current leading image is aligned left and is not capable of being the same width as images in the blog body. Ideally, we'd follow Open Graph protocol.
For now, can we have a centered leading image which is allowed to be the width of the blog container, like the body images?HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22845make new blog posts default to 'comments open', not 'comments closed'2020-06-27T14:30:03ZRoger Dingledinemake new blog posts default to 'comments open', not 'comments closed'Right now when I write a blog post, it defaults to "no comments".
asn got bit by this where he was wondering why his wilmington hackfest blog post had no comments.
I just almost got bit by it with no new blog post I'm working on.
Hope...Right now when I write a blog post, it defaults to "no comments".
asn got bit by this where he was wondering why his wilmington hackfest blog post had no comments.
I just almost got bit by it with no new blog post I'm working on.
Hopefully this is just a config setting change somewhere.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22846Please don't make me click "save and publish" in order to configure my blog p...2020-06-30T09:23:33ZRoger DingledinePlease don't make me click "save and publish" in order to configure my blog post draft to be unpublishedI want to make a blog post draft, but not publish it yet. That way other Tor people can read it first and give me feedback.
I look all over the page for the option -- especially looking at the column on the right which has phrases like ...I want to make a blog post draft, but not publish it yet. That way other Tor people can read it first and give me feedback.
I look all over the page for the option -- especially looking at the column on the right which has phrases like "promotion options" -- but I find nothing. The one thing I stay totally away from is the big blue "save and publish" button, because I definitely do not want to do that.
Apparently what I wanted is a tiny little blue arrow that is part of the "Save and publish" button. So if I click the tiny blue arrow, I get to change it to "Save as unpublished". And if I click the wrong part of the arrow, I accidentally publish my blog post draft to the world.
This little blue arrow has got to be violating every user interface guideline in Linda's book.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22850Warning: mkdir(): File exists2020-06-27T14:30:03ZcypherpunksWarning: mkdir(): File existsOn loading https://blog.torproject.org/blog/tor-browser-702-released?page=1 it shows
```
×
Error message
Warning: mkdir(): File exists in Drupal\Component\PhpStorage\FileStorage->createDirectory() (line 157 of core/lib/Drupal/Component/...On loading https://blog.torproject.org/blog/tor-browser-702-released?page=1 it shows
```
×
Error message
Warning: mkdir(): File exists in Drupal\Component\PhpStorage\FileStorage->createDirectory() (line 157 of core/lib/Drupal/Component/PhpStorage/FileStorage.php).
```HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/22947Possible Security Issue (Information Disclosure) with Drupal on blog.torproje...2020-06-30T09:22:52ZcypherpunksPossible Security Issue (Information Disclosure) with Drupal on blog.torproject.orgWhen loading https://blog.torproject.org/blog/tor-0312-alpha-out-notes-about-0311-alpha, a Drupal warning appeared at the top of the page that looked something like:
Warning: Drupal mkdir() failed directory already exists, etc. etc.
En...When loading https://blog.torproject.org/blog/tor-0312-alpha-out-notes-about-0311-alpha, a Drupal warning appeared at the top of the page that looked something like:
Warning: Drupal mkdir() failed directory already exists, etc. etc.
Encountered around 06:00-06:10 UTC. I apologize for the vague wording, but I was an idiot and forgot to take a screenshot. The error appeared after the tab was reloaded from a previous Firefox session, and disappeared after I refreshed the page. The warning message contained directory/path names that appeared at least slightly sensitive. I don't think that displaying server-side error messages to a client is intended behavior, either...
Apologies if this is the wrong channel for reporting this. I looked for an email address for security issues, but the Contact page says to "email the respective maintainer" (???). I'm not familiar with who maintains the blog, and it doesn't seem very high-risk or reproducible, so I'll leave a comment on the blog directing someone here.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/23005'no space left on device' Drupal warning messages2020-06-27T14:30:03ZRoger Dingledine'no space left on device' Drupal warning messagesFrom irc:
```
<snoek> Not sure where to put this info, as there's no #tor-it channel, but
when I was browsing the events calendar on the tor blog, the site is
displaying 'no space left on device' Drupal warning messages: "Warning:
mkdir(...From irc:
```
<snoek> Not sure where to put this info, as there's no #tor-it channel, but
when I was browsing the events calendar on the tor blog, the site is
displaying 'no space left on device' Drupal warning messages: "Warning:
mkdir(): No space left on device in Drupal\Component\..."
```
I'm not able to reproduce immediately, but that doesn't mean there isn't some thing somewhere that's full and needs attention.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/23007Get a second blog maintainer2020-06-27T14:30:02ZRoger DingledineGet a second blog maintainerWe try to have two maintainers for every service:
https://trac.torproject.org/projects/tor/wiki/org/operations/Infrastructure
I think only hiro knows how to log in to the blog and fix stuff? Or worse, there is no such thing as logging i...We try to have two maintainers for every service:
https://trac.torproject.org/projects/tor/wiki/org/operations/Infrastructure
I think only hiro knows how to log in to the blog and fix stuff? Or worse, there is no such thing as logging into the blog (i.e. there is only the web interface), and fixing things requires filing tickets with the current hosting provider? And in that case the right answer is to document how to file those tickets, who our contacts are, etc, so somebody else can do this process if needed?
Is Mike this person?HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/23008Possible low disk space on tor blog server2020-06-27T14:30:02ZTracPossible low disk space on tor blog serverWhen clicking through the calendar on the Tor blog (https://blog.torproject.org/events/month/201712), I got an error message about space being low. Couldn't reproduce, but it still seems like a pretty symptomatic event.
```
Warning:...When clicking through the calendar on the Tor blog (https://blog.torproject.org/events/month/201712), I got an error message about space being low. Couldn't reproduce, but it still seems like a pretty symptomatic event.
```
Warning: mkdir(): No space left on device in Drupal\Component\PhpStorage\FileStorage->createDirectory() (line 157 of core/lib/Drupal/Component/PhpStorage/FileStorage.php).
Warning: rename(/srv/bindings/f9f2c526d24b44d7ba7aa6dbd99e29d2/tmp/rolling/live_27/twig/.F38PtAmo52rpiQgOPThx3rCjQRg,/srv/bindings/f9f2c526d24b44d7ba7aa6dbd99e29d2/tmp/rolling/live_27/twig/597322173a1f3_views-view.html.twig_SBN7Lltt1eiGczqO_RklqsLYR/eZcB9mV7uCho4pn6tePHDY0N4l6teDPtUnThCnq6_Vg.php): No such file or directory in Drupal\Component\PhpStorage\MTimeProtectedFastFileStorage->save() (line 88 of core/lib/Drupal/Component/PhpStorage/MTimeProtectedFastFileStorage.php).
```
Can supply screenshot upon request.
**Trac**:
**Username**: snoekHiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/23022Increase lead image bottom spacing; reduce top spacing2020-06-27T14:30:02ZstephwIncrease lead image bottom spacing; reduce top spacingAdd 1.5em to the margin-bottom of the blog post leading image.Add 1.5em to the margin-bottom of the blog post leading image.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/23096Request to create solution for permanent link of newsletter letters + archive2020-06-27T14:30:01ZIsabela FernandesRequest to create solution for permanent link of newsletter letters + archiveHello Hiro!
Steph is working on organizing a newsletter for Tor. One of the things we want to do is to have a permanent link of these letters so people can share them on social media etc.
This would be a simple html page with the same ...Hello Hiro!
Steph is working on organizing a newsletter for Tor. One of the things we want to do is to have a permanent link of these letters so people can share them on social media etc.
This would be a simple html page with the same content used for the email. Systems like Nation Builder and Constant Contact that are used by NGOs to do mailing has an easy way to create these pages (an easy editor where you can use pretty much the same html you used to format the email version).
This ticket is to investigate if we could use the drupal we have for our blog to allow Steph to easily create these pages.
You can create pages with drupal from admin painel and the editor is very similar to publishing a blog post.
My questions re:
1. Can we first do a test using the html created for our newsletter (we have a version to test already) to create a page at our drupal (blog drupal) and see what we will have to do to get the format right? I assume things wont be as easy as a copy and paste. But giving the template will not change too much from one letter to another, getting the first one right will save time with the next ones.
2. Is there any security issue we should consider in order to do this?
I will wait to see what comes out from this investigation. We are also checking with Giant Rabbit on it. We are looking for the solution that is easy to do and be ready soon.
Once we have figure out how to create the permanent links for the newsletters, we will want to add a link to the press page: https://www.torproject.org/press/press.html.en
For an archive (index, simple page) where one could see all the past letters. Which could be kept updated manually (create a ticket for the page to be updated like we do for the press clips) or whatever is the best solution to do it.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/23132Add blog.torproject.org to onion.torproject.org2020-06-27T14:30:01ZcypherpunksAdd blog.torproject.org to onion.torproject.orgOk, where can I find a .onion for your blog?Ok, where can I find a .onion for your blog?https://gitlab.torproject.org/tpo/web/blog/-/issues/23259Pagination on tag search page show mini pager2020-06-27T14:30:01ZHiroPagination on tag search page show mini pagerThe pagination layout used in the tag pages is the mini one.The pagination layout used in the tag pages is the mini one.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/23287Cannot save new blog post draft2020-06-27T14:30:01ZstephwCannot save new blog post draftIn Tor Browser, any entered text disappears.
In Opera, I can add text, but when I tried to save and keep unpublished, I received the attached error message.In Tor Browser, any entered text disappears.
In Opera, I can add text, but when I tried to save and keep unpublished, I received the attached error message.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/23394"hardening android": if the script doesn't work maybe someone should publish ...2020-06-30T10:28:40ZTrac"hardening android": if the script doesn't work maybe someone should publish a notice for the general publicafter hours of trying to get it work i had to give it up: the "hardening android" script doesn't seem to work on debian 9 or fedora 24. if the script doesn't work anymore maybe someone should publish a notice for the general public?
**T...after hours of trying to get it work i had to give it up: the "hardening android" script doesn't seem to work on debian 9 or fedora 24. if the script doesn't work anymore maybe someone should publish a notice for the general public?
**Trac**:
**Username**: missionimpossible@grr.laHiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/23395Every blog post had its comments set back to 'open'?2020-06-30T09:25:32ZRoger DingledineEvery blog post had its comments set back to 'open'?I notice that we're getting blog comments on blog posts from 2012 where I had previously set the comments to closed.
Looking at those posts now, the comments are set to open.
Did all of the posts get reset sometime recently? We should ...I notice that we're getting blog comments on blog posts from 2012 where I had previously set the comments to closed.
Looking at those posts now, the comments are set to open.
Did all of the posts get reset sometime recently? We should close them.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/23792Update wiki to add a source of example onions.2020-12-11T12:57:49ZcypherpunksUpdate wiki to add a source of example onions.blog.torproject.org/we-want-you-test-next-gen-onion-services
Source: Comments belowblog.torproject.org/we-want-you-test-next-gen-onion-services
Source: Comments belowhttps://gitlab.torproject.org/tpo/web/blog/-/issues/23810Blog internal server error2020-06-27T14:30:00ZstephwBlog internal server errorFor a few minutes this morning, there was an internal server error for opening any individual blog post.
It seems to be working now, but I am submitting a ticket in case it wasn't a fluke.For a few minutes this morning, there was an internal server error for opening any individual blog post.
It seems to be working now, but I am submitting a ticket in case it wasn't a fluke.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/23857Search box isn't properly aligned with the search button2020-06-30T09:28:11ZcypherpunksSearch box isn't properly aligned with the search buttonHere's what I'm thinking about:
![screenshot.png](uploads/screenshot.png)Here's what I'm thinking about:
![screenshot.png](uploads/screenshot.png)HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/23906Align blog post image and body with title2020-06-27T14:30:00ZstephwAlign blog post image and body with titleWhen you click from the post archive to the individual blog post, the body content jumps to the right.
Please match alignment with what is on the blog archive.When you click from the post archive to the individual blog post, the body content jumps to the right.
Please match alignment with what is on the blog archive.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/23992Allow email subscription to blog2020-06-30T10:32:06ZArthur EdelsteinAllow email subscription to blogI think it would be very good for user engagement if we can offer a way for users to subscribe to our blog.torproject.org posts via email. I think Drupal has some modules that can make this possible.I think it would be very good for user engagement if we can offer a way for users to subscribe to our blog.torproject.org posts via email. I think Drupal has some modules that can make this possible.HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/24187Reduce bullet spacing on blog2020-06-27T14:30:00ZstephwReduce bullet spacing on blogChange li margin-bottom from 1.5em to 0.5emChange li margin-bottom from 1.5em to 0.5emHiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/24390Blog issue2020-06-27T14:30:00ZTracBlog issueIt says.
Browser is likely to skip this alpha, and pick up the next one, which should be out in early **November**.
But it is past early November.
[tor-0325-alpha-released](https://blog.torproject.org/tor-0325-alpha-released)
**Trac*...It says.
Browser is likely to skip this alpha, and pick up the next one, which should be out in early **November**.
But it is past early November.
[tor-0325-alpha-released](https://blog.torproject.org/tor-0325-alpha-released)
**Trac**:
**Username**: DbryrtfbcbhgfHiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/24437Change line height of blog post title2020-06-27T14:30:00ZstephwChange line height of blog post titleChange line height of blog post title from 26px to 36px (It is already 36px from the archive view)Change line height of blog post title from 26px to 36px (It is already 36px from the archive view)HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/24438Change blog "Recent Updates" title line height2020-06-27T14:29:59ZstephwChange blog "Recent Updates" title line heightChange title line-height of posts under "Recent Updates" from 16.5px to 19x (to match line height of event listing titles)Change title line-height of posts under "Recent Updates" from 16.5px to 19x (to match line height of event listing titles)HiroHirohttps://gitlab.torproject.org/tpo/web/blog/-/issues/24439Update blog title tab2020-06-27T14:29:59ZstephwUpdate blog title tabOn main page, it is currently:
"Tor Blog | "
Change to:
"Tor Blog | Tor Project"
post tabs stay the sameOn main page, it is currently:
"Tor Blog | "
Change to:
"Tor Blog | Tor Project"
post tabs stay the sameHiroHiro