18:29:31 #startmeeting tor-browser 2/25/2019 18:29:31 Meeting started Mon Feb 25 18:29:31 2019 UTC. The chair is GeKo. Information about MeetBot at http://wiki.debian.org/MeetBot. 18:29:31 Useful Commands: #action #agreed #help #info #idea #link #topic. 18:29:39 let's see who is here today 18:29:53 hi 18:29:54 hi! 18:30:02 i hope you all had a good week despite not having a tor browser meeting :) 18:30:21 please add your status updates to the pad (https://storm.torproject.org/shared/tHoN4Ii7rLSjPE0OP4gydX4cMGadsXmRQNc-6lwru0N) 18:30:30 and mark things you want to talk about bold 18:31:09 * mcs is here 18:31:25 hello 18:31:28 * brade is here 18:32:13 hi 18:32:31 okay, let's get started 18:32:51 it seems sysrqb is missing so far but we should not delay the meeting further i think 18:32:58 o/ 18:33:03 hi! 18:33:23 antonela: while you are here: how did the build for #25658 work? 18:33:31 did we get some nice feedback? 18:33:48 yess, pili ran user research in india about it 18:34:07 great! 18:34:14 i got some problems on my local comp because i have 1929192 tor browsers installed here and it is taking some prev config, but at pili's computer worked great 18:34:25 we had feedback and pospeselr is working on it 18:34:31 awesome! 18:34:47 i also have been playing with the latest TBA (!) 18:34:51 do you plan to document that feedback on the bug? 18:34:52 :) 18:35:01 so that we can see how we iterated? 18:35:26 (might be helpful for future things etc.) 18:35:54 yes yes, we are working with caroline sinders on it, she is a researcher and will help us to reporting all this findings 18:36:21 yay 18:36:30 okay. 18:36:47 looking at pospeselr's entry: how did the releasing go? 18:36:51 o/ sorry i'm late 18:36:59 pospeselr: did you get a proper build on tpo infra? 18:37:04 sysrqb: o/ 18:37:20 yeah i686 linux built just fine (though slowly :p ) on the build server 18:37:53 i believe boklm filed an issue for verifying the alpha build 18:37:58 okay, and the sha256sums matched? 18:38:11 everything is matched except for macos mar files for me 18:38:16 er, mar tools rather 18:38:17 #29510 18:38:17 yeah, i closed that already as i got matching builds on the weekend 18:38:26 pospeselr: o_O 18:38:42 I suspect i just have bits lying around from pili's macos build 18:38:57 hm. 18:39:10 as i've been playing build roulette over here :p 18:39:23 russian? 18:39:25 ;p 18:39:25 only the mar files are not matching? 18:39:30 so the macos bundles and mar file sall match, just mar tools 18:40:04 could you upload the non matching mar tools somewhere, so we can check the diff? 18:40:21 yeah I'll do that tonight 18:40:26 in the office today 18:40:48 okay. 18:41:03 pospeselr: we should try that alpha release again if you think that's cool 18:41:05 if it was due to pili's build, I think not only the mar tools would not be matching 18:41:17 to have it working in the future 18:41:27 (mit proper signatures etc.) 18:41:34 yeah 18:41:35 s/mit/with/ 18:41:48 the main issue on my end was that linux i686 build oom'ing 18:42:14 which meant having to shuffle file around to get the final make alpha-incrementals working 18:42:23 I think this one should get solved by #26323 18:42:33 yeah 18:45:15 okay 18:45:32 i have only the release prep item marked bold as we wanted to the tba-a3 out this week 18:45:45 i still have some hope that we get to it 18:46:04 * sysrqb just moved their update on the pad, it was under the wrong week 18:46:06 * antonela crossed fingers 18:46:12 sisbell: could you address sysrqb's review feedback and fix the remaining bits? 18:46:29 as far as i see that's mainly #29575? 18:46:47 (modulo review feedback) 18:47:00 GeKo: Sure I'll comment on those. I'll likely need to open tickets in TOPL github project if changes are needed 18:47:33 sysrqb: i guess you could meanwhile start testing the topl stuff in particular related to the ui you wrote 18:48:19 GeKo: oh, yes, i missed that on my update 18:48:29 i want to test TOPL integration this week, too 18:48:46 i this sisbell maybe started looing at that, too 18:48:53 sysrqb: what is the f-droid submission patch? 18:48:55 *think 18:49:14 submitting TBA directly to f-droid 18:49:26 instead of using the guardian projects repo or creating our own 18:49:34 how do we make sure we get the same build as we build? 18:49:50 s/we build/we// 18:49:50 they build with tor-browser-build 18:49:58 aha! 18:50:00 they accept a shell script 18:50:13 so the shell script downloads and runs to-browser-biuld :) 18:50:18 in theory, this should work :) 18:50:23 even though we create runc containers etc.? 18:50:26 we'll see if it does in pratice 18:50:31 yes they build in a VM 18:50:38 so we can modify the vm as needed 18:50:46 including installing deps 18:50:51 neat 18:50:54 great 18:50:57 in theory :) 18:51:09 but i'm hopeful 18:51:32 have you seen _hc's feedback on the ticket? 18:51:45 it seems pretty reasonable to me 18:52:42 yes 18:53:12 okay, good 18:53:21 i think we can avoid running our own repo, as long as we create reproducible builds 18:53:34 and using that update mechanism would be very nice 18:54:09 yep 18:54:24 okay, antonela: 18:54:36 yes, i planned to reply to that mail and pointing to our ticket 18:54:49 oh great 18:54:51 i found that briar's takeaways very useful as an intermediate step for what we are trying to achieve with TBA, Tor reachability vanilla test, offer PT per location - what do you think about to have those in consideration for our Tor Browsers? 18:55:05 sounds good 18:55:18 i did not have the time today to study in detail what they did 18:55:35 but from what i read that sonded like a good direction to explore 18:55:40 *sounded 18:55:41 i know, its fine, i just want to put that over the table and if you mobile dev didn't read it, you should :) 18:56:19 i agree :) 18:56:21 * sysrqb will read the mail later 18:56:25 thanks! 18:56:43 alright, anything else regarding status updates? 18:57:25 actually I will move my 2 announcements to status updates 18:57:40 then let's move on to pili's discussion items 18:57:45 * GeKo hands mic over 18:57:50 right, so I'll start with the quick ones :) 18:58:06 Our OTF Onion Services proposal got accepted, for those that didn't see 18:58:22 \o/ 18:58:23 officially we have that starting in April, but we could start it earlier if we wanted 18:58:38 are there details available of what that includes? :) 18:58:54 sysrqb: yup, one sec, let me pull it up 18:59:52 it's not necessarily needed right now :) but i am curious 19:00:07 "Objective 2: We will improve the end user experience of onion services with the goal of increasing user adoption and retention." 19:00:10 is the gist ;) 19:00:21 neat, thanks 19:00:29 it was the authorization for onion services 19:00:49 making the v3 onion addresses more human readable 19:01:04 typo errors, etc... :) 19:01:17 cool 19:01:21 maybe that includes OTF items on https://pad.riseup.net/p/tbb-roadmap-2018-19 19:01:32 mcs: that's right :) 19:01:58 i need to update that next week 19:02:03 then we had another proposal with NLNET for ESR migration work move to the next round, so fingers crossed for that... it won't cover all the work, but it will cover some of it if we get it 19:02:04 as i move some items out 19:02:16 *moved 19:02:42 actually I think I may have put those OTF ones there :) 19:02:57 yeah, the items in april look like a decent start 19:03:09 (not saying we'll tackle all of them in that month :) ) 19:03:13 geko, is a lot 19:03:28 yeah, got just dropped there 19:03:30 haha but maybe make plans on them 19:03:43 yep 19:03:48 and i'll need to organize that next week with pili's help 19:03:51 yup 19:04:06 you mean we're not going to finish the whole project in April?!? :P 19:04:24 ok, any questions on OTF or NLNet? 19:04:30 :) 19:04:54 the good thing about the otf item is that it is over 12months 19:05:07 so we don't have to solve all the things during our esr migration 19:05:19 (which would have been the case if it were just 6months) 19:05:25 GeKo: That’s good news :) 19:05:32 indeed 19:06:09 ok, I'll move on :) 19:07:03 dev meeting invites brainstorm: is there anyone that we want to make sure is there at the dev meeting in July from a browser team point of view? :) 19:07:23 anyone we've been working with a lot ? 19:07:52 it doesn't mean they'll get invited we just want to make sure we don't forget about anyone 19:08:00 or remember them at the last minute... 19:08:24 do we have a spreadsheet where we collect this info? 19:08:27 who is organizing this this list? 19:08:38 ah, yes, that :) 19:08:42 or is this more or less an adhoc thing right now? 19:08:45 :) 19:09:17 i guess we could have someone from cliqz and brave at the meeting? 19:09:25 for their tor mode 19:09:30 and next steps? 19:09:50 there is a spreadsheet 19:10:07 there's a new https-everywhere developer/maintainer who we should invite, too 19:10:09 I'm not sure how public it is 19:10:27 pili, riastradh from Brave 19:10:34 should we start discussing this internally? 19:10:47 maybe is on the network team part of the list pili 19:10:50 sysrqb: yup, I just wanted to get people to start thinking about it 19:10:57 alrighty :) 19:11:34 I'll send an email out :) 19:12:45 sorry, 1 sec 19:12:56 what's the deadline for this? 19:13:00 this week? 19:13:18 yeah, ideally 19:13:31 kk 19:14:17 then we need to schedule part II of the Tor Browser vision exercise, I'm going to suggest the unpopular time of Friday 20:00 UTC again :) 19:14:41 this friday? next? 19:14:43 what about 1900 UTC? 19:14:51 this 19:14:51 undecided which week? 19:14:56 ah, okay 19:14:58 this week friday 19:15:08 I’m not available; sorry another appointment 19:15:22 could also potentially be 19:00 UTC 19:15:37 brade: does that help or still can't make it? 19:15:48 pili: sorry; does not help me 19:15:54 no worries :) 19:16:09 we can move it to the following week if it would be better, I'll create a doodle in that case 19:16:11 mcs: but you could make it? 19:16:17 okay 19:16:24 GeKo: I think so, yes. 19:17:59 ok, I'll send an email anyway to try to schedule it, I just wanted to do a quick poll to see if it could work 19:18:20 any other objections to Friday 1900 UTC? 19:18:57 works for me 19:19:02 works for me 19:19:14 i can do it 19:19:43 ok, great, let's move on to the tor browser dev hiring process as we just have 10 minutes 19:19:47 i can do it, too 19:20:23 I think the main thing I want to get feedback on is criteria for evaluating candidates 19:20:59 and maybe any feedback on the process in general 19:21:46 are there any notes somewhere of how we evaluated candidates in the past that we can re-use? 19:22:45 not sure if the storm spreadsheets are still available 19:23:07 i we guess we could ask ewyatt about that 19:23:19 yup 19:23:34 but there was nothing else that came close to "criteria" 19:23:55 I'm also going to start giving us deadlines for giving feedback about candidates, does 1 week seem reasonable to everyone or would we prefer 2 weeks? 19:24:06 i.e from the moment we receive the application 19:24:24 I will send emails out reminding us to do so in any case 19:24:47 I would think 1 week is better (for candidates) 19:25:05 yeah 1 week seems reasonable 19:25:27 ok, good :) 19:25:32 (and should not be that hard assuming we don't get dozens of applications suddenly) 19:25:42 fingers crossed 19:25:53 GeKo and I can also do a first screen if it would help 19:26:33 just so I am clear on the process: we should send feedback after pili calls for it, e.g., like you did earlier today for 3 candidates? 19:26:33 I actually only sent emails about those candidates I thought would be worth reviewing for the next round, but everyone can feel free to give feedback to Erin about any candidate, especially if it's positive 19:26:54 mcs: we can discuss this now, GeKo what do you think? 19:27:09 sure 19:27:28 do we do a first pass and then I send an email to the team those that we think we should review further? 19:27:53 if you and Geko can do that quickly, then I like the prescreen idea 19:27:59 i did something like that in the past iirc 19:28:29 yes, the prescreen should be easy 19:28:33 ok, let's do that then, when a new cv comes in, GeKo and i will scan and I will send an email if they pass the prescreen 19:28:48 to get the rest of the team to give feedback 19:28:53 in the sense that we only sort those out that we very likely don't want anyway 19:29:00 yup 19:29:06 (e.g. because not necessary experience etc.) 19:29:18 pili: sounds good 19:29:42 ok, any other comments and/or feedback on the process for the current browser dev hiring? 19:29:51 and, just as a note, this is a learning process :) 19:30:02 +1 :D 19:30:03 so far we did the whole hiring more or less adhoc 19:30:10 pili: what about “blind coding review”? are we doing that? 19:30:10 without having a proper process etc. 19:30:14 we're working on formalising though 19:30:22 which kind of worked 19:30:29 but we can do better i think 19:30:36 brade: I think that's a very good idea we just need to work out the logistics 19:30:44 pili: I don’t like the idea 19:30:47 no? :) 19:30:51 brade: that's not decided yet 19:31:01 pili: I like to interact with people to know who we might hire 19:31:11 GeKo: good :-) 19:31:25 brade: fair enough :) 19:32:22 please also keep sending feed back on evaluation criteria 19:32:29 we will need it for the next rounds 19:32:48 and I think that's all from me 19:33:01 (especially since we're over time now) 19:33:39 pili: how should we submit feedback for the evaluation criteria? 19:34:32 I will forward the existing comments we've had to a new thread on the browser job mailing list and we can discuss there 19:34:42 great 19:34:49 anything else for discussion today? 19:35:47 i hear... nothing. thanks everybody then *baf* 19:35:50 #endmeeting