[tor-project] Anti-censorship team meeting notes, 2022-5-19

Hey everyone!

Here are our meeting logs:

http://meetbot.debian.net/tor-meeting/2022/tor-meeting.2022-05-19-15.59.html

And our meeting pad:

Anti-censorship work meeting pad

···

--------------------------------

Next meeting: Thursday May 26th 16:00 UTC

Weekly meetings, every Thursday at 16:00 UTC, in #tor-meeting at OFTC (channel is logged while meetings are in progress)

== Goal of this meeting ==

Weekly check-in about the status of anti-censorship work at Tor.
Coordinate collaboration between people/teams on anti-censorship at Tor.

== Links to Useful documents ==

  * Our anti-censorship roadmap:
    * Roadmap: Development · Boards · Anti-censorship · GitLab
  * The anti-censorship team's wiki page:
    * Home · Wiki · The Tor Project / Anti-censorship / Team · GitLab
  * Past meeting notes can be found at:
    * The tor-project Archives
  * Tickets that need reviews: from sponsors we are working on:
    * All needs review tickets: Merge requests · Anti-censorship · GitLab
    * Sponsor 28
      * must-do tickets: Sponsor 28: Reliable Anonymous Communication Evading Censors and Repressors (RACECAR) · The Tor Project · GitLab
      * possible tickets: Issues · The Tor Project · GitLab
    * Sponsor 96
      * Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & Tibet · The Tor Project · GitLab

== Announcements ==

== Discussion ==

  * Snowflake doesn't work in Russia (connection failure by timeout)
    * IRC Tip about Signature used to block Snowflake in Russia, 2022-May-16 (#40030) · Issues · The Tor Project / Anti-censorship / censorship-analysis · GitLab
    * Snowflake blocked by ClientHello [RU] (#40140) · Issues · The Tor Project / Anti-censorship / Pluggable Transports / Snowflake · GitLab
    * A new Snowflake blocking rule (offset of supported_groups in DTLS Client Hello) - Russia - NTC
      * the new reported blocking rule, with a different offset to supported_groups than what we diagnosed in December 2021 (Make Snowflake's DTLS fingerprint more similar to popular WebRTC implementations (#40014) · Issues · The Tor Project / Anti-censorship / Pluggable Transports / Snowflake · GitLab) is real
      * however Snowflake still works in Russia, apparently
    * Is there a tool to do automated bisection of packet contents and discover such blocking rules?
      * OONI once had a module called daphn3
        * ooniprobe-debian/daphn3.py at master · OpenObservatory/ooniprobe-debian · GitHub
        * OONI and Daphn3 - Speaker Deck
      * Also Geneva could work for this purpose https://geneva.cs.umd.edu/
  * polyanthum got upgraded to bullseye
    * everything is working except for bridgestrap metrics
  * Any anti-censorship stands/activities at MCH2022 (https://mch2022.org/)?

== Actions ==

== Interesting links ==

== Reading group ==

  * We will discuss "" on
    *
    * Questions to ask and goals to have:
      * What aspects of the paper are questionable?
      * Are there immediate actions we can take based on this work?
      * Are there long-term actions we can take based on this work?
      * Is there future work that we want to call out in hopes that others will pick it up?

== Updates ==

Name:
    This week:
        - What you worked on this week.
    Next week:
        - What you are planning to work on next week.
    Help with:
       - Something you need help with.

cecylia (cohosh): last updated 2022-05-19
  Last week:
    - finished setting up networked VMs for conjure development
    - reviewed some snowflake MRs
    - emailed conjure people about weird license for required kernel module
  This week:
    - continue work on conjure PT
    - continue snowflake maintenance tasks
  Needs help with:

dcf: 2022-05-19
  Last week:
    - posted a chart of estimated daily unique Snowflake users How many Snowflake users do we have in Russia? (#40012) · Issues · The Tor Project / Network Health / Metrics / Analysis · GitLab
    - helped investigate a reported DTLS blocking rule in Russia IRC Tip about Signature used to block Snowflake in Russia, 2022-May-16 (#40030) · Issues · The Tor Project / Anti-censorship / censorship-analysis · GitLab A new Snowflake blocking rule (offset of supported_groups in DTLS Client Hello) - Russia - NTC Snowflake blocked by ClientHello [RU] (#40140) · Issues · The Tor Project / Anti-censorship / Pluggable Transports / Snowflake · GitLab
    - snowflake CDN bookkeeping Snowflake costs · Wiki · The Tor Project / Anti-censorship / Team · GitLab
    - analyzed OONI stunreachability measurements from Russia [anti-censorship-team] OONI stunreachability measurements from Russia
  Next week:
    - look at STATUS VERSION proposal Add STATUS VERSION message for PT protcol (!63) · Merge requests · The Tor Project / Core / Tor Specifications · GitLab
    - set up access control on the snowflake-02 bridge Set up a second snowflake bridge site (#40122) · Issues · The Tor Project / Anti-censorship / Pluggable Transports / Snowflake · GitLab
  Help with:

arlolra: 2022-04-07
  Last week:
    - Merged the rest of snowflake !81
  Next week:
    - Get to snowflake-webext #10
  Evergreen:
    - Figure out where in pion/webrtc ALPN should be configured and used
    - Maybe add Chacha20Poly1305 to pion/dtls
    GitHub - pion/dtls: DTLS 1.2 Server/Client implementation for Go
    Make Snowflake's DTLS fingerprint more similar to popular WebRTC implementations (#40014) · Issues · The Tor Project / Anti-censorship / Pluggable Transports / Snowflake · GitLab
  Help with:
    -

meskio: 2022-05-19
  Last week:
      - add a delay to BridgeDB reconnections to rdsys backend (bridgedb!40)
      - release a new version of snowflake-proxy and obfs4-bridge docker images for multiple archs
      - fix issues after polyanthum upgrade to bullseye
  Next week:
      - rethink distributor retries to the rdsys backend (rdsys#99)
      - use systemd to run bridgedb (team#72)

Shelikhoo: 2022-05-19
   Last Week:
     - [Merge Request] Add Distributed Snowflake Server Support (snowflake!87)
    - [Merge Request Awaiting] Add SOCKS5 forward proxy support to snowflake (snowflake!64)
    - [Research & Coding] WebSocket + CDN Based Probe Control Connection Forwarder (shelikhoo/LogCollectorAncillary#3)
    - [Coding & Deployment] Proposal: Centralized Probe Result Collector (anti-censorship/team#54)
    - [Discussion & Deployment] Migrating Controling git repo to Tor Gitlab Instance (shelikhoo/LogCollectorAncillary#5) <- awaiting/blocked
   Next Week:
      - [Coding] Distributed Snowflake Bridges (continue)
      - [Coding] Distributed Snowflake Bridges (Javascript ver.)
      - [Merge Request] Add Distributed Snowflake Server Support (snowflake!87)
      - [Coding & Deployment] Proposal: Centralized Probe Result Collector (anti-censorship/team#54)
      - [Research & Coding] WebSocket + CDN Based Probe Control Connection Forwarder (shelikhoo/LogCollectorAncillary#3)
      - [Research & Coding] Implement metrics to measure snowflake churn (Implement metrics to measure snowflake churn (#34075) · Issues · The Tor Project / Anti-censorship / Pluggable Transports / Snowflake · GitLab)

Itchy Onion: 2022-05-12
    Last week:
        - audit s28 PI meeting
        - work on the snowflake issues assigned to me (!84, !88)
        - review MRs assigned to me
    This week:
        - work on the snowflake issues assigned to me
        - review MRs assigned to me
        - work on s28 issue 81

anadahz: 2022-01-27
  Last week:
    - Increase timeout check cycles for default-bridge-felix-1 and default-bridge-felix-2 as they have been generating too many alerts: Increase number of cycles for felix bridges (!1) · Merge requests · The Tor Project / Anti-censorship / monit-configuration · GitLab

HackerNCoder: 2021-12-16
  This week:
    Last/done:
        Setup web mirror on tor.encryptionin.space
    Next:
        Get (new VPs with) new IP and setup new web mirror on new domain

maxb: 2021-09-23
  Last week:
    - Worked on uTLS for broker negotiation (#40054) · Issues · The Tor Project / Anti-censorship / Pluggable Transports / Snowflake · GitLab re: utls for broker negotiation
    - Had conversation with someone about upstream utls http round tripper feat: sketch out utls http.RoundTripper by bassosimone · Pull Request #74 · refraction-networking/utls · GitHub
    - Too busy with work :confused:
  Next week:
    - _Really_ want to get a PR for utls round tripper

--
meskio | https://meskio.net/
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
My contact info: https://meskio.net/crypto.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Nos vamos a Croatan.

2 Likes