19:00:26 #startmeeting tor browser 19:00:26 Meeting started Mon Dec 18 19:00:26 2017 UTC. The chair is GeKo. Information about MeetBot at http://wiki.debian.org/MeetBot. 19:00:26 Useful Commands: #action #agreed #help #info #idea #link #topic. 19:00:28 mondays == never ending meetings day 19:00:32 hi all! 19:00:38 ) 19:00:44 :) 19:00:46 hi! 19:00:50 feeling any better isa? 19:00:52 hi! 19:00:53 Hi! 19:00:57 so, this is week two using our new meeting schedule 19:00:57 hi 19:00:58 pospeselr: yes! 19:01:15 hello! 19:01:22 i'd propose addint a new week at the top of the pad that avoids a bunch of scrolling :) 19:01:27 *adding 19:01:42 (where is the pad?) 19:01:51 https://storm.torproject.org/shared/tHoN4Ii7rLSjPE0OP4gydX4cMGadsXmRQNc-6lwru0N 19:01:52 https://storm.torproject.org/shared/tHoN4Ii7rLSjPE0OP4gydX4cMGadsXmRQNc-6lwru0N 19:01:57 tx 19:02:02 GeKo: good idea, sorry about putting at the bottom 19:02:12 anyway, let's have a look at the pad for items we want to discuss 19:02:49 * mcs is reading 19:03:38 hi everyone! :) 19:04:11 igt0: i get a 404 for your paste link? 19:05:09 the ')' needs to be removed from the link I think 19:05:33 GeKo, oh! okey, i updated the link 19:06:06 thanks 19:08:53 alright, do we need more time to read? 19:09:31 Kathy and I are done reading. 19:09:37 i guess we can start from top to down 19:09:53 so, it seems the next ESR will be 60 instead of 59 19:10:12 i am thinking about redoing that part of our roadmap 19:10:29 (or maybe we should not?) 19:10:39 and thought about getting feedback from the whole group 19:10:50 I think we should leave some extra time if we have it (many unknowns, as usual). 19:11:11 what do you mean wit "extra time"? 19:11:21 for the transition to the new ESR? 19:11:46 In other words, maybe do not just move our roadmap plans back 6 weeks (e.g,, start dates stay closer to where they are than the amount the ESR is moving) 19:12:06 like leaving, say, march blank and just do the stuff that did not get done earlier? :) 19:12:24 Kind of, but it depends what else we should be working on. 19:12:30 mcs: okay, sounds reasonable 19:13:01 that sounds reasonable to me as well 19:13:12 so, the thing that worries me most right now is that the critical months will be in the traditional vacation time 19:13:31 and i am already booked for things as i assumed the next esr will be 59 19:13:46 i have no idea how to deal with that yet 19:14:05 do we want to move the 7.5 release as well? 19:14:29 we usually had the x.5 releases somewhat loosely bound to the upcoming esr 19:15:23 shoud or brease to nightly plan be affected by that news? 19:15:27 *should 19:15:37 do we want to start later now as well? 19:16:23 my current thinking is to answer all three questions with "no" 19:17:02 that is to proceed in that regard without being bothered by which version will be the next esr 19:17:32 We want to rebase TBB to ESR60, though, right? 19:17:42 yes 19:17:45 So the rebase to nightly probably won't start until after the manual rebase. 19:17:48 to ESR60. 19:18:04 that's one option 19:18:17 another one could be to do the heavy lifting for 59 19:18:33 because we sort of have the time for that right now 19:18:39 Oh, I see. That's a good point. 19:18:46 and then do a small bit for 59 -> 60 19:18:55 so i am fine either way 19:19:21 Yeah, actually I rather like that idea. 19:20:07 okay, then let's stick to that 19:20:25 i'll amend the roadmap accordingly 19:21:00 do we have anything else for this dicsussion item? 19:22:02 okay, let's move on then 19:22:11 igt0: so the propsoal 19:22:16 *proposal 19:22:40 yes, i think we'd need one for the torbutton and tor launcher port 19:22:53 Yep, sysrqb and I have been in touch about it. 19:23:00 i guess mcs/brade and i should help with that 19:23:15 yeah 19:23:23 for torbutton there is a P1-P5 above each function 19:23:27 our main concern right now is the migration to webextension, since there are few roles in the API. 19:23:48 what do you mean by “few roles?” 19:23:48 mikeperry did that long ago and we could get rid of quite a bunch of P1 stuff etc. 19:23:56 * arthuredelstein is also happy to help with torbutton port on things I worked on 19:24:07 yeah 19:24:13 this will be a team effort :) 19:24:27 mcs, the api doesn't support few things such as changing few settings attributes or disabling the plugins 19:25:11 igt0: got it. I think there are even more things missing that Tor Launcher needs (compared to Torbutton). But that is a guess. 19:25:17 so it will need changes in the browser side :/ 19:25:19 So one option would be to move torbutton/torlauncher components into tor-browser.git. That would mean not having to rely on webextensions. And it would also help provide direction for the UX part of Project Fusion. 19:26:19 `yes, that crossed my mind, too 19:26:24 that's a good idea as the whole extension thing is kind of a hack anyway 19:26:29 yep 19:26:37 Also it would be nice if we can keep as much code in common for both desktop and mobile. 19:26:45 Only the UX part needs to be different; not the business logic. 19:26:48 yep, for sure 19:27:00 I wonder what the Mozilla people think is the best direction for us? I kind of like the “move it into the browser” solution (but research is required) 19:27:24 mcs: 'move into the browser'? 19:27:31 I am sure some refactoring needs to be done to make sharing backend code possible and cleaner. 19:27:39 yes 19:27:43 What arthuredelstein suggested 19:27:49 ah 19:27:51 isabela ^ 19:27:51 tx 19:28:52 this can be included in the proposal as an alternative 19:29:10 maybe it'll be easier to discuss the pro's and con's after the document is written 19:29:53 tjr: will probably have valuable input 19:30:23 (heh, sorry, not a message to you, just referencing you :) ) 19:31:00 :) 19:31:03 i am not sure whether we really need to have two different ways of doing things in the proposal 19:32:07 having all the things we need in the browser is appealing for a number of reasons 19:32:32 so, i'd say let's start with a proposal for that idea 19:32:49 and try to find out what works and what not 19:33:12 if we feel we hit a roadblock we can't bypass we still have the webextensions fallback plan 19:33:33 e.g. i have no clue right now what to do with the security slider :) 19:34:00 maybe we even end up with a hybrid solution: getting everything we can into the browser 19:34:09 and ship an extension for the remaining things 19:34:42 this could still be beneficial as it makes maintaining the extension part(s) easier 19:35:04 There are some other products that use Tor Launcher but that can be sorted out over time. 19:35:26 hm! 19:35:40 Tor Launcher needs Firefox whether it's an extension or built-in in any case. 19:35:58 Well, it works in Thunderbird too. 19:36:10 And Tor Messenger. 19:36:15 But all Firefox-y things 19:36:21 all of those are… 19:36:38 I should have said Firefoxy :) 19:36:50 A Webextension solution is probably worse for TBird 19:37:03 (I am not sure they have a plan for their future in that area) 19:37:08 they don't 19:37:33 okay, interesting! 19:37:49 i guess we could continue discussing that in the meeting after this one 19:38:02 (there will be a mobile tor browser sync afterwards 19:38:12 feel free to attend everyone) 19:38:23 do we have anything else for now for this item? 19:38:25 Before you folks go, since it sounds like you've finished up your agenda... 19:39:25 I'd like to introduce myself. I recently started working at Brave, partly on some security things, and partly to provide some kind of first-class Tor integration into Brave. 19:39:40 neat. welcome! 19:39:42 awesome! 19:39:45 congrats 19:39:49 Thanks! 19:39:51 hi Riastradh! Great to have you here. 19:40:13 hi Riastradh o/ 19:40:21 I don't have anything in particular to ask or to contribute at the moment, but I will be hanging around to pay attention to what's going on in the Firefoxy Tor land. 19:40:34 isabela: Hi! We met briefly at Libreplanet this past March, I think. 19:40:50 aha! :) 19:41:02 Riastradh: feel free to ask things if there is something unclear and let us know how we can help 19:41:36 ( mcs - there is a question from me on the pad to you and brade about meeting this wed) 19:41:50 tjr: regarding the sandboxing item you wrote in the pad 19:42:10 Our current plan is not to make a super-airtight browser that will rival the Tor Browser and thwart targeted attacks by major world governments, but for a first approximation, the more modest goal of thwarting targeted advertising's mass surveillance. 19:42:17 i wonder how we can tackle the remaining bits for windows 19:42:20 isabela: 2000 UTC on Wed is fine for us 19:42:28 mcs: great :) 19:43:00 My intention had been to rebase the patches you applied to 52 and try to get them uplifted. Is there more 'bits' than that? 19:43:03 And there's institutional support to make it a first-class part of Brave. 19:43:11 (Not counting anything that's occurred between 52 and today) 19:43:25 tjr: no. if you could do that that would be neat 19:43:37 the code has PoC quality though 19:43:57 so, we needed to hotfix things for getting it working at all 19:44:03 So I might have questions, and if you folks have questions about Brave or want to alert someone responsible to privacy or anonymity issues in it, let me know. 19:44:44 tjr: so, you'd probably need to spend a bit more time on that one than "just upstreaming" 19:45:08 Riastradh: sounds great, thanks! I'm interested in your plan for adding a UI and making it usable, but that can be discussed later :) 19:45:12 for working at all you mean 'getting it running' after you got it built? 19:45:29 Riastradh: cool! very glad to help in any way possible 19:45:31 I expect to be pretty busy until at the very earliest mid-January; but it's priority is basically "It needs to get into the next ESR." 19:46:07 tjr: cool. and no, i meant just fixing code issues that prevented compilation 19:46:30 but i fixed those only minimally, i.e. where the compilation really broke 19:46:31 ah okay. 19:48:23 alright, anything else for today's meeting? 19:48:44 i guess i could announce that this one was the last meeting this year 19:49:02 :) :( 19:49:03 and the next one should be, i think, on jan 8 2018 19:49:25 in case i have not said this previously explicitely enough: 19:49:37 it was a pleasure and an honor to work with you all! 19:49:47 \o/ 19:49:50 hah 19:49:57 and i am excited of the things to come in 2018 :) 19:50:00 * mcs hopes GeKo is coming back for more fun in 2018 19:50:03 ah, good! 19:50:08 *whew* 19:50:10 heh 19:50:19 heheh 19:50:41 \(^O^)/ 19:50:45 hehe. while am looking forward to get rid of tor browser that won't happen so fast :) 19:50:47 it's been a fun two weeks so far 19:50:52 lol 19:51:01 thanks all *baf* 19:51:04 #endmeeting