[tor-project] Anti-censorship meeting notes, 22 April 2021

[Cecylia Bocovich]

Hi everyone,

Here are our meeting logs:

http://meetbot.debian.net/tor-meeting/2021/tor-meeting.2021-04-22-16.00.html

and our meeting pad:


Anti-censorship work meeting pad
--------------------------------

Next meeting: Thursday April 22nd 16:00 UTC

Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC
(channel is logged while meetings are in progress)

== Goal of this meeting ==

Weekly checkin about the status of anti-censorship work at Tor.
Coordinate collaboration between people/teams on anti-censorship at Tor.

== Links to Useful documents ==

    Our anti-censorship roadmap:

    Roadmap:
https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards

    The anti-censorship team's wiki page:

    https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home

    Past meeting notes can be found at:

    https://lists.torproject.org/pipermail/tor-project/

    Tickets that need reviews:  from sponsors we are working on:

    All needs review tickets:
https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?scope=all&utf8=%E2%9C%93&state=opened&assignee_id=None

    Sponsor 30

    https://gitlab.torproject.org/groups/tpo/-/milestones/4

    https://gitlab.torproject.org/groups/tpo/-/milestones/7

    https://gitlab.torproject.org/groups/tpo/-/milestones/5

    https://gitlab.torproject.org/groups/tpo/-/milestones/6

    Sponsor 28

    must-do tickets:
https://gitlab.torproject.org/groups/tpo/-/milestones/10

    possible tickets:
https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&state=opened&label_name%5b%5d=Sponsor%2028&milestone_title=None

    Public bug-reporting pad:

    https://pad.riseup.net/p/tor-anti-censorship-bugs-keep <-- we have
anonymous tickets handling now. Let's see which anti-censorship repos to
include.


== Announcements ==

    The Cure53 security audit of Turbo Tunnel is over.


https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/issues/40042
is a resource leak found by the audit.

    David is waiting on an upstream disclosure before publishing the
report, but there is nothing much to worry about regarding Snowflake.


== Discussion ==

    Snowflake in Tor Browser 10.5 stable (mid June)?

    Conclusion: yes, we're going to plan to ship Snowflake enabled in
Tor Browser 10.5. There are a list of things we should make sure we're
in a good position to monitor so we can know how it's going. And we
might shoot for a 'soft launch', i.e. put it in but ask the comms team
to not make such a big deal out of it quite yet.


== Actions ==



== Interesting links ==


https://gitlab.torproject.org/cohosh/censorship-analysis/-/blob/belarus/belarus/2020/2020-belarus-report.md


== Reading group ==

    We will discuss "Domain Shadowing: Leveraging Content Delivery
Networks for Robust Blocking-Resistant Communications" on April 29th

    https://www.usenix.org/system/files/sec21fall-wei.pdf

    Questions to ask and goals to have:

    What aspects of the paper are questionable?

    Are there immediate actions we can take based on this work?

    Are there long-term actions we can take based on this work?

    Is there future work that we want to call out, in hopes that others
will pick it up?


== Updates ==

Name:
    This week:
        - What you worked on this week.
    Next week:
        - What you are planning to work on next week.
    Help with:

         - Something you need help with.


cecylia (cohosh): last updated 2020-04-22
Last week:
    - talked to OONI about adding fallback dirs to tor test
    - wrote a plaintext email template for our prometheus alert manager
(tpa/team#40214)
    - implemented a shim for Moat to parse client USERADDR (bridgedb#32276)
    - finished draft report on Tor blocking in Belarus
(censorship-analysis#40002)
    - reviewed emma#4
    - revised prometheus alerts for snowflake (snowflake#40024)
This week:
    - upload scripts used for censorship-analysis#40002
    - revise snowflake v2 API (snowflake#40036)
    - use json for client-broker interaction (snowflake#29293)
    - congestion logging patches for snowflake#40026
    - install our snowflake app on android and try it out for a few days
    - deploy moat shim
Needs help with:
    - review of bridgedb#32276 (low priority)
    - review of censorship-analysis#40002 (roger/gus)
    - review of fixes to snowflake!32

arlolra: 2020-10-29

    Last week:

    -

    Next week:

    - getting back up to speed

    - follow ups to #33365

    - start on #31201

    Help with:

    -


dcf: 2021-04-22

    Last week:

    - archived snowflake-webextension-0.5.4

    - checked on probetest CPU usage
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/issues/40039

    - opened an issue for a Snowflake resource leak found by the Turbo
Tunnel security audit
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/issues/40042

    - opened an issue for a broken error check in the Snowflake server
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/issues/40043

    - reviewed PT v2 API branch
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/merge_requests/31

    Next week:

    - review of broker metrics export
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/merge_requests/32


    Help with:


Antonela: 2020-08-27

    This week:


agix:2021-04-22

    Last week:

    -Been busy with university stuff for the last few weeks

    Next week:

    -Work on bridgebox for rdsys

    -More research on httpt #4

    Help with:

    -


hanneloresx: 2021-3-4

    Last week:

    - Submitted MR for bridgestrap issue #14

    Next week:

    - Finish bridgestrap #14

    - Find new issue to work on

    Help with:

    -


HashikD: 2021-01-22

    This week:

    -

    Next week:

    -

    Help with: -