[tor-project] Anti-censorship team meeting notes, 2022-12-08

Hey everyone!

Here are our meeting logs:
#tor-meeting: tor anti-censorship meeting <http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-03-31-15.59.html&gt;

And our meeting pad:

Anti-censorship work meeting pad

···

--------------------------------

Next meeting: Thursday, Dec 15 16:00 UTC

Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC
(channel is logged while meetings are in progress)

== Goal of this meeting ==

Weekly check-in about the status of anti-censorship work at Tor.
Coordinate collaboration between people/teams on anti-censorship at the Tor Project and Tor community.

== Links to Useful documents ==

 \* Our anti\-censorship roadmap:
     \* Roadmap: https://gitlab.torproject.org/groups/tpo/anti-censorship/-/boards
 \* The anti\-censorship team&#39;s wiki page:
     \* https://gitlab.torproject.org/tpo/anti-censorship/team/-/wikis/home
 \* Past meeting notes can be found at:
     \* https://lists.torproject.org/pipermail/tor-project/
 \* Tickets that need reviews:  from sponsors, we are working on:
     \* All needs review tickets:
         \* https://gitlab.torproject.org/groups/tpo/anti-censorship/-/merge_requests?scope=all&utf8=%E2%9C%93&state=opened&assignee_id=None
     \* Sponsor 28
         \* must\-do tickets: https://gitlab.torproject.org/groups/tpo/-/milestones/10
         \* possible tickets: https://gitlab.torproject.org/groups/tpo/-/issues?scope=all&utf8=%E2%9C%93&state=opened&label_name%5b%5d=Sponsor%2028&milestone_title=None
     \* Sponsor 96
         \* https://gitlab.torproject.org/groups/tpo/-/milestones/24

== Announcements ==

 \* Cece is the new Outreachy intern working on Rdsys \(adding a new social media platform\) until March 5th\! Please welcome her to the team\!
 \* No meetings December 29 neither January 5\. We&#39;ll be AFK Dec 22 \- Jan 7
 \* Tor Browser 12\.0 has the snowflake\-02 bridge
     \* https://blog.torproject.org/new-release-tor-browser-120/
     \* https://metrics.torproject.org/rs.html#details/91DA221A149007D0FD9E5515F5786C3DD07E4BB0

== Discussion ==

 \* snowflake\-02 is live in TB 12
     \* not in Orbot yet
     \* plan to see how things go in Tor Browser, bring it up with Orbot in sponsor 96 meeting in January 2023
 \* make obfs4 distinguishability reports public?
     \* https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/obfs4/-/issues/40007
     \* https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/obfs4/-/issues/40008
     \* https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/91
     \* we were waiting for a threshold of 50% of bridges to upgrade
     \* some emails to gmail\.com in the last batch of notifications bounced \(https://lists.torproject.org/pipermail/tor-project/2022-December/003519.html)
     \* we&#39;ll send one more batch of notifications, then plan to make public after the break on 2023\-01\-09
 \* does ajax\.aspnetcdn\.com still work in turkmenistan??
     \* it might be working, and we only use it for meek
     \* snowflake uses cdn\.sstatic\.net
     \* curl and dig tests are not showing injection for ajax\.aspnetcdn\.com nor cdn\.sstatic\.net from outside \(https://github.com/net4people/bbs/issues/80#issuecomment-906533865)
 \* rwails and NRL working on a new pluggable transport
     \* any compatibility issues between C\-tor and Arti? probably not\.
     \* how to run a PT in arti: https://gitlab.torproject.org/tpo/core/arti/-/issues/333

== Actions ==

== Interesting links ==

 \* https://ntc.party/t/ajax-aspnetcdn-com/3571
     \* Reported block of ajax\.aspnetcdn\.com in Russia, by TSPU, since mid\-November?
     \* https://explorer.ooni.org/chart/mat?probe_cc=RU&test_name=web_connectivity&domain=ajax.aspnetcdn.com&since=2022-11-07&until=2022-12-07&axis_x=measurement_start_day

== Reading group ==

 \* We will discuss &quot;&quot; on
     \*
     \* Questions to ask and goals to have:
         \* What aspects of the paper are questionable?
         \* Are there immediate actions we can take based on this work?
         \* Are there long\-term actions we can take based on this work?
         \* Is there future work that we want to call out in hopes that others will pick it up?

== Updates ==

Name:
This week:
- What you worked on this week.
Next week:
- What you are planning to work on next week.
Help with:
- Something you need help with.

cecylia (cohosh): last updated 2022-11-24
Last week:
- wrote a fix to make go fmt CI more verbose (snowflake!122)
This week:
- continue work on conjure client
- more work on reputation-based bridge dist
- fixup snowflake!108
Needs help with:

dcf: 2022-12-08
Last week:
- disabled non-WireGuard SSH access to snowflake-02 Set up a second snowflake bridge site (#40122) · Issues · The Tor Project / Anti-censorship / Pluggable Transports / Snowflake · GitLab
- merged some snowflake-server performance improvements, thanks itchyonion
- Increase clientIDAddrMapCapacity to 98304 (!115) · Merge requests · The Tor Project / Anti-censorship / Pluggable Transports / Snowflake · GitLab
- turbotunnel performance improvements (!118) · Merge requests · The Tor Project / Anti-censorship / Pluggable Transports / Snowflake · GitLab
- asked to have snowflake-01's other IP addresses excepted in DDoS mitigation scripts Spread snowflake-01 bridges' tor traffic over several IP addresses (#40223) · Issues · The Tor Project / Anti-censorship / Pluggable Transports / Snowflake · GitLab
Next week:
- performance tuning on snowflake-02 bridge
- make obfs4 distinguishability reports public
- https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/obfs4/-/issues/40007
- https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/91
- document recent performance optimizations in Snowflake bridge installation guide
- have snowflake-02's outgoing IP address added to DDoS mitigation scripts
- make the number of KCP state machines a command-line option Use multiple parallel KCP state machines in the server (!119) · Merge requests · The Tor Project / Anti-censorship / Pluggable Transports / Snowflake · GitLab
- migrate goptlib to gitlab migrate away from git.torproject.org (#86) · Issues · The Tor Project / Anti-censorship / Team · GitLab
- try Conjure PT development version [tor-dev] Introducing a Conjure PT for Tor
Help with:

meskio: 2022-12-08
Last week:
- update gettor/onionsproutsbot for the Tor Browser release
- investigate why systemd freezes onionsproutsbot (onionsproutsbot#47)
- some bridges appear offline in metrics.tpo (team#112)
- support onbasca attempts to test bridge speed (onbasca#130)
- onboard our outreachy intern
- review merge request to use a different network on docker bridge images (docker-obfs4-proxy!10)
Next week:
- add localization support to rdsys

Shelikhoo: 2022-12-08
Last Week:
- [Merge Request Awaiting] Add SOCKS5 forward proxy support to snowflake (snowflake!64)
- [Discussion & Deployment] Rollout of Distributed Snowflake Support
- [Coding & Deployment] Proposal: Centralized Probe Result Collector (anti-censorship/team#54)
- [Research] HTTPT Planning Add HTTPT as a pluggable transport to Tor Browser (#1) · Issues · The Tor Project / Anti-censorship / Pluggable Transports / HTTPT · GitLab
- [Merge Request Done] Get Webtunnel to build together with tor browser
- [Merge Request Done] fix "utls RoundTripper does not work when it is supposed to use HTTP/1"
Next Week:
- [Research] WebTunnel planning (Continue)
- [Coding] More Reliable Raw Log Upload For log collector

Itchy Onion: 2022-11-24
Last week:
- continue working on snowflake in RACE; it passes one of the integration tests, but fails the second one with heavier load
- worked on "Abbreviate `ice` list in bridge lines" (interruptted by RACE test results)
This week:
- continue working on snowflake in RACE; trying to cut down the number of times snowflake peers establish connection bc it's expensive (right now multiple connections are needed for messages between the same hosts)
- review some MRs