[tor-project] Tor Browser team meeting notes, 26 June 2018

Georg Koppen gk at torproject.org
Wed Jun 27 17:32:00 UTC 2018


Hi!

Even though the meeting yesterday was a bit bumpy due to OFTC issues
here come the usual notes and link to the chat log. For the latter see:

http://meetbot.debian.net/tor-meeting/2018/tor-meeting.2018-06-26-17.59.log.txt


The notes from the pad are:

Tuesday, June 26, 2018

Discussion:
    -alpha release
    -next meetings (brade: July 2; discuss future meetings at that
meeting or via email)  (GeKo: I can't make it on Monday, sent a mail to
tbb-dev for further planning
(https://lists.torproject.org/pipermail/tbb-dev/2018-June/000867.html))
    - sysrqb: do we have a process for including new bridges in TB?
(GeKo: yes,
https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Hacking#AddingNewDefaultBridges)
    - sysrqb: rustconf - 16-17 August, in Portland, OR, USA - should any
of us go? (i'm thinking about going) (GeKo: sounds good to me!)


pospeselr:

    Last Week:

    - finished #23247 (onion lock)

    - posted patch for #26039 (extension-overrides.js)

    - posted patches for #26355 (no install/update on Vista or lower)

    - discovered and investigated #26456 (HTTP onions tabs inherit
certificate info from previous HTTPS pages)

    - #859782 (run without /proc) now fixed in FF62

    - discovered an issue with pdfjs while working on #26039,
disableRange option now seems to break pdfjs altogether, will file a bug
in a hot sec

    This Week:

    - post fixups for #26039

    - figure out and fix #26456

    - file bug for pdfjs issue and investigate

    - backport patch #859782 to ESR60 TorBrowser


sukhe:
    Last Week:
        - #9145 (enable hardware acceleration); under review
        - #26251 (build Snowflake for macOS); under review
        - #26319 (update mach build package); under review
        - #26186 (remove intl.locale.matchOS); merged
    This Week:
        - #26216 (MAR generation broken)
        - #12968 (Specify HEASLR in MinGW-w64)


mcs and brade:
  Last week:
    - Continued with #22074 (Review Firefox Developer Docs and
Undocumented bugs since FF52esr). GeKo: Did you already file bugs for
the things you found in the Dev Docs? mcs: No, we will do that.
    - Worked on — but did not find the root cause of — #26381 (about:tor
page does not load on first start in localized Windows bundle) (Arthur
says: could you post your "headless" branch of tor-launcher? I'm curious
if it fixes 26506 symptom) mcs: We will clean it up and post it. Arthur:
thanks! :)
    - Helped with bug triage, code reviews, and testing of esr60 fixes
and backports.
  This week:
    - Help with the Tor Browser 8.0a9 release, especially updater testing.
    - Continue on #26381 (about:tor page does not load on first start in
localized Windows bundle)
    - Assist with #26506 (NoScript not working on TBB/ESR60 on Windows)
    - Look at #26477 (Meek is broken in ESR60-based Tor Browser)
    - Continue on #22074 (Review Firefox Developer Docs and Undocumented
bugs since FF52esr).
  Note: We will have reduced hours next week due to the U.S. July 4th
holiday.


boklm:
    Last week:
        - helped build/publish the new releases
        - reviewed some patches:
            - #26362: Use old MAR format when generating the MAR files
for the first esr60-based alpha
            - #23561: Fix NSIS builds for Windows 64
            - #26424: Disable using UNC paths via preference
            - #26221: Backport patch for bug 1444532 to Tor Browser
stable (7.5)
        - made some patches for:
            - #26428: temporary fix to avoid https-e submodule error
            - #26440: move vaulted vars to a separate directory
            - #26461: Generating incrementals fails if the
release/signed or alpha/signed directory doesn't exist
            - #26450: disable dependency on firefox-langpacks in testbuild
            - #26489: dmg2mar script is broken due to added whitespace
in "Tor Browser"
            - #26496: Set MAR_OLD_FORMAT=1 in dmg2mar
            - #26380: Remove tor browser sandbox from the download page
        - started working on a patch for #26323 (Build 32bit Linux
bundles on 64bit systems)
        - booked flights for mexico meeting
    This week:
        - continue with 8.0a9 release
        - doing some reviews
        - fill upstream binutils ticket for #26148
        - continue work on some ansible roles for testsuite VMs setup
(#26149)
    PSA: I plan to be on vacation from 7/14-7/22


GeKo:
    Last Week
      -release preparations (including hotfixing a bunch of release
blockers for the alpha over the weekend)
      -release signing
      -patches written for seatbelt profiles removes (#26438),
unbreaking our Linux32 alpha builds (#26462)
      -reviews: #23247, #26428, #26440, #20628, #26451, #26039, #26461,
#26186, #26430
    This Week
      -help with the alpha release
      -bug triage after alpha release taking release fallout into account
      -more network code audit
      -work on tracking down the rust related reproducibility issue we
found (#26475)
      -more reviews
      -getting up to speed again with the tor browser for android state
and focusing on getting it moved forward towards the alpha release
      -prepare meeting with Cliqz folks
    PSA: I plan to be on vacation from 7/8-7/16 (inclusive)


sysrqb:
    last week:
        - Rebased TBA patches onto 60.1.0, more testing (#26401)
        - Finished first-round proxy-safety audit (#21863)
        - Windows/OSX/Linux Sandbox investigation
        - Recovery from all-hands
        - Some thinking about Tor+IPv6 because mobile networks are
adopting it faster than others
        - Created some more tickets from auditing #26401
    This week

        - Setting up local proxy-bypass test environment for Android

    - Setting #26401 in needs-review, really this time

          - More sandboxing investigation, and hopefully writing an email

              - I'm making notes
https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Sandbox


igt0:
    Last week:
        - Investigated the Gecko Mozilla Update Service, the comment #9
describes my finds (#26242)
        - Commented out the ticket #26318 (Consider different
installation methods) about a proposal how we can validate de app.
        - Started updating UpdateService to support F-Droid (I will open
a ticket about it this week).
    This week:
        - Send patch to make UpdateService support F-Droid
        - Make UpdateService to use the app directory(sandboxed) instead
of an external storage.


arthuredelstein:
    Last week:
        - Investigated #26322 (Circuit display - UI bug - Long v3 name)
        - Wrote a patch for #26430 (New torbutton icons)
        - Patch for #26321 (Remove some menu items from torbutton and
move to Fil/hamburger menu
        - Reviewed #26058 (Revert #18743 - "Sign in to Sync" icon not
hidden)
        - Wrote patch for #20629 (More locales for Tor Browser)
        - Patch for 26451 (HTTPS-E update)
        - Opened and patched #26500 (Torbutton relay icon in the wrong
place)
        - Opened and investigated #26506 (NoScript not working on
TBB/ESR60 on Windows)
        - Investigated
https://trac.torproject.org/projects/tor/ticket/26128#comment:13
(extension startup race affects noscript control)
    This week:
        - Keep looking at #26506, #26128 comment 13 issues
        - More UX issues in 8.0a we need to fix (some of which I will
file today)
        - Optimistic SOCKS. HTTP/2 if there is time
        - Help verify build as needed


tjr
 - mingw-clang (Jacek) goes swimmingly! We have a successful build in
TaskCluster, and Jacek is cleaning up patches and getting them reviewed.
 - Unsure of how far along he is in his contract though
 - I have yet to dig into
https://bugzilla.mozilla.org/show_bug.cgi?id=1470772 but plan to tomorrow
 - Are esr60-based builds going to have a Windows x86 release? Are
esr60-clang-based builds? (GeKo: it sems 32bit Windows builds still seem
useful, we keep them for now)
  - Answer: Yes.
 - I am working on fuzzyfox
 - I replied to tor-qa about alpha 9 on Windows.


sisbell:
    Last week:
         -Got builds working in my environment: tor-browser desktop,
rbm, Fennec
    This week:
        - Working on getting mobile tor browser build working


Georg

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-project/attachments/20180627/dfd74baa/attachment.sig>


More information about the tor-project mailing list