[tor-project] Tor Browser meeting December 10, 2018
Georg Koppen
gk at torproject.org
Mon Dec 10 21:15:00 UTC 2018
Hi everyone!
Our weekly Tor Browser meeting ended 1 hour ago. The IRC log can be
found at:
http://meetbot.debian.net/tor-meeting/2018/tor-meeting.2018-12-10-19.00.log.txt
and the items on our meeting pad are pasted below, for your convenience:
Monday December 10, 2018
Discussion:
- Summary of All Hands Meetings? [GeKo: overall it seems the meeting
went well, there'll be a summary sent to the tbb-dev list I hear]
boklm:
(afk during meeting)
Last week:
- helped build the new releases
- some reviews
- fixed #28775 (Add mercurial in tbb-build ansible role)
- added patch for #26843 (Get l10n-changesets.json from
tor-browser.git)
- looked at #28685 (Tor Browser for Android needs a more dynamic
Build ID)
This week:
- will be at reproducible builds meeting from tuesday to
thursday: probably not much time tomorrow to help with release publishing.
- on friday/monday: continue work on testsuite, and binutils issue
mcs and brade:
Last week:
- Thought about bootstrap status reporting and commented in some tor
tickets:
- #27102 (decouple bootstrap progress numbers from
BOOTSTRAP_STATUS enum values).
- #28281 (outline of high-level bootstrap tracker abstractions).
- Completed several code reviews:
- #25794 (Disable PointerEvents).
- #27290 (WebGL is broken in Tor Browser 8).
- #27919 (Backport SSL status API).
- #28075 (Torbutton WARN: no SOCKS credentials found).
- #28608 (Disable HTTP response throttling by default).
- #28695 (Set BRNameMatchingPolicy to "Enforce").
This week:
- #25694 (Improve the user experience of updating Tor Browser).
pospeselr:
Last week(s):
- updated #25702 patches with feedback (tor-browsesr re-branding)
- patch for #28546 (windows installer rebranding)
- patch for #12885 (remove broken 'jumplists' in tor-browser for
windows)
- closed #26280 (blurry app icon in Gnome)
- Mozilla All-Hands, met up with Arthur re: tor browser uplift
This week:
- patch for #28809 (update tor-browser-build to allow side-by-side
installation of release, alpha and nightly)
- get back on that #3600 work, ping Steven E about that
storage-api/TPI meeting and see what ideas we can integrate/steal
- patch for #28561 (moving About Tor dialog from tor-button to
tor-browser branding)
- investigate #28810 (separate default tor ports for release, alpha,
and nightly builds)
sysrqb;
Last week:
Mozilla All-Hands
Ran/attended meetings about:
Sandboxing
First-Party Isolation
Canvas fingerprinting and fonts
Mobile roadmap
Other Tor+Mozilla things
This week:
Clean up torbutton-as-a-systemaddon patch - #28640
Try backporting patches for Android file/content URI crash - #28705
Start working on new TBA+Orbot UI - #28329
Meeting about next TBA alpha release
tjr:
- Sat at home last week and missed everyone
- The NSS Version bump landed in esr60; so I will be (trying to)
land build jobs and patches there:
- mingw-gcc x64 build confirmed to run
- mingw-clang build
- x86 and x64 builds confirmed to run
- missing resources backported and confirmed fixed
- --enable-accessibility build works and runs on Windows 10
- did not test an accessibility tool though
https://treeherder.mozilla.org/#/jobs?repo=try&revision=9192ea6f6abeb775f9a3e62108eda5747e28aa9b
is the full patchset for x86/x64 mingw-gcc,
mingw-clang+resourcefix+accessibility on esr60
- Working on security bugs backports:
- Randomize small allocations in jemalloc:
https://bugzilla.mozilla.org/show_bug.cgi?id=1376408
- Backported patch - jemalloc changes a lot since it was
originally written
- unit tests pass, running Talos to get an approximation on
performance
- Need to fix a small Windows issue; and manually re-read
patch to confirm it looks sane.
- Arraybuffer Metadata in its own Arena:
https://bugzilla.mozilla.org/show_bug.cgi?id=1474659
- Patches apply fine, unt tests are fine. Need to Talos run
for perf, and double check with reviewer the patch is okay
- I think enabling CFG via mingw-clang would be 'easy' and be
something nice. Haven't tested it yet though.
https://trac.torproject.org/projects/tor/ticket/28811#ticket
- I am wondering what is up with #3600; in particular I was hoping
to understand the proposals a bit better...
GeKo:
Last week:
-a lot of reviews to get stuff into our releases (e.g. #26843,
#28697, #28725, #28573, #28696, #28540, #27762, #28466)
-built releases and started signing (stable is ready and is
getting rsync'ed to dist)
-did the begin-of-the-month admin work
-wrote some smaller patches (#28750, #28747, #28695, #27290,
#25794, #28608)
-worked on Rust enabled in macOS Tor over the weekend (#25779)
-found the missing binutils patch for enabling MOZILLA_OFFICIAL
on 32bit-Windows builds on the weekend, currently testing result (see:
#28618)
-did some triage for TBA-a3
-worked on the security control redesign (#25658)
-work on related bugs (#27290, #21805)
This week:
-help getting releases out
-review of proposals for #3600
-more work on #25658 and related bugs
-reviews
-Tor Browser design doc update (#25021)
sisbell:
Last week:
- #28697 - Reusable signing key and fixed timestamps to make apk
reproducible (merged)
- #28696 - Use hard-coded grade repo path to make apk reproducible
(merged)
- #28764 - OpenSSL Build for Android (in review)
This Week:
- #27609 - Evaluate Tor Onion Proxy
- #28765 - LibEvent for Android
- #28766 - Tor Build for Android
pili:
Last week:
- Sponsor 8 Q4 report prep
- Roadmap review
- Research into Project Management tools
This week:
- More of the same
- Tor Browser Release meeting
antonela:
Last Week:
- Mozilla All-Hands
This Week:
- #28329 TBA + Orbot
Georg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-project/attachments/20181210/92979c12/attachment.sig>
More information about the tor-project
mailing list