15:01:42 #startmeeting 15:01:42 Meeting started Fri Jul 18 15:01:42 2014 UTC. The chair is mikeperry. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:01:42 Useful Commands: #action #agreed #help #info #idea #link #topic. 15:03:00 so this week, I set up three build machines in my apartment, made a branch for mjuarez for website traffic fingerprinting, but then stalled out due to the missing langpacks for this upcoming Firefox release 15:03:47 I started looking into security slider prefs also, and hope to have a list of the up today 15:04:43 as hopefully everyone is now aware, there is a tor security release coming, along with the FIrefox security release 15:05:13 well, at least the latter is coming next week... 15:05:24 see Roger's last mail 15:09:52 the last one I saw said fridayish 15:10:49 there was one today 15:11:09 <20140717225404.GC7437@moria.seul.org> 15:12:47 * GeKo wonders about that reaaaaally long July 17 15:12:51 ;) 15:13:32 ah, that was today, or yesterday depending on timezone :) 15:17:45 well I still can't find this mail.. anyway, we should keep going 15:19:31 mikeperry: so what would be good for next week would be a tor browser branch for ESR 31 15:19:47 no need to have some rebased patches yet 15:20:01 ok. it looks like they just tagged a secodn build of it. I got that mail :) 15:20:03 just something for me to test our toolchains 15:20:32 next week? grr, i am going offline next week :( 15:20:55 * n8fr8 interrupts rudely 15:22:15 mikeperry: or maybe I put one in my user repo... might work as well 15:24:26 yeah, it should be possible to change the TBB remote URL location easily now 15:24:54 then I put that on my plate 15:25:22 until we have an official esr31 branch 15:26:29 should we enable baseline jit for this release next week btw? 15:26:53 hmm... 15:27:53 I'd like to enable that stuff when we make the JIT pages non-writable 15:28:12 escpecially as we have no new user report complaining ASAICT 15:28:18 *reports 15:28:28 AFAICT, too 15:28:43 well the tails people posted a complaint about sharedcoin on blockchain.info not working 15:29:17 and aneabling baseline jit fixed that? 15:29:22 *enabling 15:30:28 not sure. I could ask. we also need to move all of this jit conversation out of the security slider ticket and into its own ticket I think 15:30:39 good idea 15:31:02 so, when this really fixes the problem, then yes, as baseline jit is not so critical security-wise 15:31:19 IIRC the talk with nicholas 15:32:20 i.e. better tested etc. 15:35:39 ok, I will file that ticket. who wants to go next? 15:35:44 me 15:36:50 I hopefully fixed #12391 and #12381 15:37:12 the latter is not merged yet as I thought we have somebody testing it first 15:37:38 if that is not happening I'll merge the patch anyway and give it to our 3.6.3 QA 15:38:12 I think it definitely should make it into 3.6.3 if possible 15:38:42 then I debugged the VTV of #10599 further and it seems at least one reason of not getting proper debugging output is 15:38:59 a bug in the gdb shipped with Ubuntu Precise 15:39:27 compiling an own, new version helps but I am still investigating with the help of Google engineers 15:39:52 hopefully I can file a Mozilla bug with proper output next week... 15:40:24 then I looked at the TBB roadmap which came out of the meeting and I updated it with tickets I filed 15:40:38 do you remember the JIT write protect tickt on bugzilla btw? 15:40:55 I think only two things a re missing ticket-wise: the mixed content blocking thing 15:41:10 and one test ticket 15:41:25 mikeperry: see #12523 15:41:35 https://bugzilla.mozilla.org/show_bug.cgi?id=977805 15:42:03 then I looked at #3455 part 1 and merged and reviewed some tickets 15:42:09 next week: 15:42:35 I try to do some more review; part 3 is realisitc not sure whether i get tp part 2 of #3455 15:43:04 then the VTV issue + I try to finally get rid of #9531 and the like 15:43:26 and, of course, the release is coming... 15:43:32 that's it so far from me 15:45:12 I can go next. 15:45:21 I've been working on #5752 and descendants. I have posted patches for #3455 and #8405 and getting lots of very helpful feedback. I'm hoping to get started on #8641 now (browser circuit status + exit UI), and if anyone has any thoughts on how that should look, I'd be glad to hear. 15:46:47 Also I'm available for #12620 in whatever capacity 15:47:28 That's all for me. 15:47:46 nice work btw, arthuredelstein 15:47:53 thanks 15:48:03 thanks for all your help 15:48:05 yeah 15:48:21 yw, I am really looking forward to get this deployed 15:48:45 * boklm can go next 15:48:45 I could see a "New IP" or "New Circuit" button in the #8641 menu.. it could for example just ad a new nonce into a hash for the SOCKS username+password for a tab 15:49:28 that way people could pick a new circuit for just a given site 15:49:31 but we are not hvaing a per tab things 15:49:37 I don't think the info panel should be global though 15:49:52 well, for that url bar I mean 15:50:01 so getting the binding to the domain part properly translated into UI 15:50:15 for the normal user seems not easy to me 15:50:20 One problem with picking a new circuit for one site is that the new and old identities are linkable unless we can wipe everything for that URL Bar domain. 15:50:30 right 15:50:44 ...as GeKo and lunar pointed out to me 15:51:02 yeah.. I think people compain about missing New Identity from Vidalia because they really want a way to get a new exit IP 15:51:14 which is not exactly the same as New Circuit/NEWNYM 15:51:34 yes 15:51:54 I guess sometimes, we want a new exit that *is* linkable. Because the old exit is too slow 15:53:03 or banned by the site... 15:53:04 or otherwise unacceptable 15:53:31 The distinction between new identity and new exit would need to be very clear 15:55:04 So this week I started integration of xpcshell tests into our test suite 15:55:17 I ran it on a mozilla commit: https://people.torproject.org/~boklm/tmp/tests/r/browser-155c4c79792c997b8d70/browser-155c4c79792c997b8d70.html 15:55:25 And on tor-browser-24.7.0esr-3.x-1 branch: https://people.torproject.org/~boklm/tmp/tests/r/browser-c660ca4cb98351bbce6c/browser-c660ca4cb98351bbce6c.html 15:55:45 in #9442, I suggested that we provide a hidden pref for people who want "New Circuit", so we can get the technical people to stop complaining all the time 15:56:13 that might be a part of the solution, yes 15:57:04 what's the latest tor-experimental build version number, out of curiosity? 15:57:20 not 2.5.x? 15:57:21 boklm: so the stock FF fails lots of tests on our build setup... hrmm.. 15:57:46 i'm seeing if I can reproduce kpdyer's bug 15:57:46 mikeperry: actually, some of the fails are on parts of the tree that are not built 15:57:50 perhaps we just filter those tests out for now so we can focus on the ones we broke? 15:57:55 yes 15:58:04 I should add a filter 15:58:21 Next week I'm planning to add a diff of test failures between current and previous commit, and launch it on all of our commits (on esr27 branch first, and restart it on esr30 when it's available), to find which commit is responsible for which test failure 15:58:52 i'll presume 3.6.2. 15:59:15 boklm: awesome 16:00:13 And then see how we can also run those tests on the binaries produced by the nightly builds of the bundle 16:01:52 that's it for me 16:01:55 I need to leave now but am reading the backlog later... 16:02:19 ok 16:03:17 any support people here? 16:03:39 Pearl Crescent is absent this week, but posted a report on TBB dev 16:05:32 if there's no one else, I think we might be done anyway then? 16:05:53 yes 16:07:19 ok 16:07:40 #endmeeting *baf*