[tor-project] Anti-censorship team meeting notes, 2023-09-07

Hey everyone!

Here are our meeting logs:
http://meetbot.debian.net/tor-meeting/2023/tor-meeting.2023-09-07-15.57.html

And our meeting pad:

Anti-censorship

···

--------------------------------

Next meeting: Thursday, Sep 14 16:00 UTC
Facilitator: onyinyang

Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC
(channel is logged while meetings are in progress)

This week's Facilitator: meskio

== Goal of this meeting ==

Weekly check-in about the status of anti-censorship work at Tor.
Coordinate collaboration between people/teams on anti-censorship at the Tor Project and Tor community.

== Links to Useful documents ==

  * Our anti-censorship roadmap:
    * Roadmap: Development · Boards · Anti-censorship · GitLab
  * The anti-censorship team's wiki page:
    * Home · Wiki · The Tor Project / Anti-censorship / Team · GitLab
  * Past meeting notes can be found at:
    * The tor-project Archives
  * Tickets that need reviews: from sponsors, we are working on:
    * All needs review tickets:
      * Merge requests · Anti-censorship · GitLab
    * Sponsor 96 <-- meskio, shell, onyinyang, cohosh
      * Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & Tibet · The Tor Project · GitLab
    * Sponsor 139 <-- hackerncoder, irl, joydeep, meskio, emmapeel working on it
      * Riseup Pad

== Announcements ==

== Discussion ==

  * No webtunnel and conjure options at Users – Tor Metrics
    * there is an issue on the metrics side: Add new Pluggable Transports source stats (#40092) · Issues · The Tor Project / Network Health / Metrics / Website · GitLab
    * is already developed and will be deployed next week
  * Upgrading Go toolchain for snowflake
    * Update module github.com/xtaci/kcp-go/v5 to v5.6.3 (!162) · Merge requests · The Tor Project / Anti-censorship / Pluggable Transports / Snowflake · GitLab
    * Update module github.com/refraction-networking/utls to v1.5.3 (!164) · Merge requests · The Tor Project / Anti-censorship / Pluggable Transports / Snowflake · GitLab
    * some dependencies like uTLS need go 1.20+
    * debian stable has go 1.19, it will be harder to make packages for backports
      * we'll try to get the package in apt.tpo
    * we think is more important to keep up to date with dependencies
  * release new snowflake version
    * Snowflake failed to connect on Android 11 and above (#40278) · Issues · The Tor Project / Anti-censorship / Pluggable Transports / Snowflake · GitLab
    * is broken in android API 30+ we need a release to fix it
    * shelikhoo will make a release
  * snowflake-02 outage [anti-censorship-team] Spike in client polls from Snowflake broker metrics -- caused by outage of snowflake-02
    * University of Michigan halts internet during first week of class
    * the university got disconnected from the internet for we days

== Actions ==

== Interesting links ==

  * Firefox planning to ship ECH by default. Think about resurrecting meek-esni?
    * Firefox will ship ECH by default · Issue #280 · net4people/bbs · GitHub
    * Use ESNI via Firefox HTTPS helper (#28168) · Issues · The Tor Project / Anti-censorship / Pluggable Transports / meek · GitLab
  * 2023 August update - Open Collective

== Reading group ==

  * We will discuss "" on
    *
    * Questions to ask and goals to have:
      * What aspects of the paper are questionable?
      * Are there immediate actions we can take based on this work?
      * Are there long-term actions we can take based on this work?
      * Is there future work that we want to call out in hopes that others will pick it up?

== Updates ==

Name:
    This week:
        - What you worked on this week.
    Next week:
        - What you are planning to work on next week.
    Help with:
       - Something you need help with.

cecylia (cohosh): 2023-09-07
Last week:
    - finished writing shadow simulations guide for PTs (will post later today)
    - discussed weird increase in Snowflake client polls
This week:
    - deploy the lox distributor for testing with rdsys
        - Deploy the lox distributor in a staging environment (#19) · Issues · The Tor Project / Anti-censorship / lox-rs · GitLab
    - followup on conjure reliability issues
    - visualize and write up some snowflake shadow simulation results

  Needs help with:

dcf: 2023-09-07
  Last week:
    - investigated a snowflake-02 bridge outage that caused a temporary increase in client polls [anti-censorship-team] Spike in client polls from Snowflake broker metrics -- caused by outage of snowflake-02
    - merged goptlib STATUS TYPE=version and tagged v1.5.0 Add STATUS version support (!1) · Merge requests · The Tor Project / Anti-censorship / Pluggable Transports / goptlib · GitLab
    - opened a merge request to remove the unique proxy IP address counting code from the broker Remove proxy churn measurements from broker. (!173) · Merge requests · The Tor Project / Anti-censorship / Pluggable Transports / Snowflake · GitLab
  Next week:
    - revise encapsulation.ReadData redesign to return an error in the case of a short buffer Have encapsulation.ReadData read into a provided buffer (!154) · Merge requests · The Tor Project / Anti-censorship / Pluggable Transports / Snowflake · GitLab
    - open issue to have snowflake-client log whenever KCPInErrors is nonzero Deploy snowflake-server for QueuePacketConn buffer reuse fix (#40260) (#40262) · Issues · The Tor Project / Anti-censorship / Pluggable Transports / Snowflake · GitLab
      - parent: Improve bug discovery process (#40267) · Issues · The Tor Project / Anti-censorship / Pluggable Transports / Snowflake · GitLab
    - open issue to disable /debug endpoint on snowflake broker
  Help with:

meskio: 2023-09-07
   Last week:
     - vacation :slight_smile:
    - coordinate with TPA to get a VM for a rdsys staging server
    - review lyrebird merge requests
   Next week:
    - deploy the rdsys staging server

Shelikhoo: 2023-09-07
   Last Week:
    - [Merge Request Awaiting] Add SOCKS5 forward proxy support to snowflake (snowflake!64) (stalled)
    - logcollector alert system
    - Add Remote Network Address Mapping in HTTP Upgrade Transport (Draft: Add Remote Network Address Mapping in HTTP Upgrade Transport (!17) · Merge requests · The Tor Project / Anti-censorship / Pluggable Transports / WebTunnel · GitLab)
    - Merge request reviews
   Next Week/TODO:
    - Add Remote Network Address Mapping in HTTP Upgrade Transport (Draft: Add Remote Network Address Mapping in HTTP Upgrade Transport (!17) · Merge requests · The Tor Project / Anti-censorship / Pluggable Transports / WebTunnel · GitLab) (Continue)
    - Release new version of snowflake
    - Merge request reviews

onyinyang: 2023-09-07
  Last week(s):
    - Finished up implementation of new approach for getting resources Reconfigure Lox distributor to sync with static resources from rdsys (!24) · Merge requests · The Tor Project / Anti-censorship / lox-rs · GitLab
    - Bug hunting for what turned out to be a serialize/deserialize issue caused by the Dedup filter implementation Dedup fix (!42) · Merge requests · The Tor Project / Anti-censorship / lox-rs · GitLab
    - Updating dependencies from renovate bot MRs
  This week:
    - Continue updating dependencies, check how complicated it will be to update failing updates, such as:
      - aes-gcm: Update Rust crate aes-gcm to 0.10 (!35) · Merge requests · The Tor Project / Anti-censorship / lox-rs · GitLab
      - base64: Update Rust crate base64 to v0.21.3 (!36) · Merge requests · The Tor Project / Anti-censorship / lox-rs · GitLab
    - Work on adding metrics
  (long term things were discussed at the meeting!):
       Riseup Pad
      - brainstorming grouping strategies for Lox buckets (of bridges) and gathering context on how types of bridges are distributed/use in practice
      Question: What makes a bridge usable for a given user, and how can we encode that to best ensure we're getting the most appropriate resources to people?
        1. Are there some obvious grouping strategies that we can already consider?
         e.g., by pt, by bandwidth (lower bandwidth bridges sacrificed to open-invitation buckets?), by locale (to be matched with a requesting user's geoip or something?)
        2. Does it make sense to group 3 bridges/bucket, so trusted users have access to 3 bridges (and untrusted users have access to 1)? More? Less?

--
meskio | https://meskio.net/
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
My contact info: https://meskio.net/crypto.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Nos vamos a Croatan.

1 Like