17:31:16 #startmeeting tor-browser 4/23/2019 17:31:16 Meeting started Tue Apr 23 17:31:16 2019 UTC. The chair is GeKo. Information about MeetBot at http://wiki.debian.org/MeetBot. 17:31:16 Useful Commands: #action #agreed #help #info #idea #link #topic. 17:32:06 the meeting pad as usual is at https://storm.torproject.org/shared/tHoN4Ii7rLSjPE0OP4gydX4cMGadsXmRQNc-6lwru0N 17:32:27 o/ 17:32:33 let's check this out and give folks a couple of minutes to catch up with it 17:32:35 o/ 17:33:08 hi 17:33:28 morning y'all :) 17:33:50 hi 17:34:19 hi 17:35:44 okay, let's get started 17:35:58 i hope you all had some days off during easter to recover 17:36:12 and having fresh energy to finally get 8.5 out :) 17:36:23 that said i have one item for the group: 17:36:40 i still miss some self-feedback according to our feedback process 17:36:51 the deadline was march 19th 17:37:13 so, please get to that during this week in case you did not send anything to me yet 17:37:48 antonela: you are next up 17:38:10 thanks, some following ups there 17:38:20 #25658 - anything needed on my side there? 17:38:29 #28800 - still in april? 17:38:53 #27399, #29955, do we have plans for it, we talked a bit in mexico but can we refresh our memories together? 17:39:32 okay, let's start in reverse order 17:39:36 jiji 17:39:41 reverse engine, i like it 17:39:54 yes, we should sync with sysrqb. he can't make the meeting 17:40:01 so we probably should get to it tomorrow 17:40:14 it's still marked for 8.5 as a must have 17:40:26 perfect, yes 17:40:32 so we should be clear sooner than later what we need here 17:40:33 will ping matt about it in #tor-dev 17:40:39 sounds good, thanks 17:40:50 i guess we could ping each other tomorrow :) 17:40:57 and hope we have time ad hoc to chat 17:40:58 oki, yes 17:41:19 re #28800, we won't get to it in april, but i think it's worth doing in may 17:41:36 we'll have enough tbb-8.5-must items for the remaining month 17:41:43 i bet, cool 17:41:57 so, #25658 17:42:29 we should figure out what we want to do for the site-specific settings 17:42:50 i am still inclined it's worth doing 17:42:55 for this release? 17:43:12 but it seems to me we might want to skip this for 8.5 17:43:21 yes, 9.0 is a good scope for that discussion 17:43:54 okay, given that noscript is not vanishing from the toolbar with the update to 8.5 i think that's okay 17:44:21 i think that could be the remaining item for this proposal pospeselr could work on in may 17:44:28 antonela: would that work for you? 17:44:33 oh yes 17:44:52 great 17:44:59 cool :) 17:45:00 pospeselr: does that make sense to you? 17:45:11 okey, so we are groot with ux-team tickets for next release 17:45:18 i think so 17:45:34 perfect, thanks! 17:46:34 (i guess "cool :)" means "yes", so, moving on) 17:46:50 haha 17:46:51 sorry yes 17:47:07 tjr: hi hi! 17:47:12 i think you are next 17:47:25 okay, so 17:47:28 both with acat's item and yours 17:48:12 Oh as far as acat goes, I wanted to throw a couple of bugzilla items on the pile that I think may be active fingerprinting vectors worth reviewing and either confirming there's a bandaid in place for TB or it's open, or we can close bugzilla 17:48:18 (or it's just not a priority) 17:48:30 One would leak locale 17:48:54 One could leak hardware capabilitiy in certain circumstances 17:49:49 k 17:50:03 i'll go over our tickets and look for respective ones 17:50:11 and file new ones if needed at least 17:50:50 As far as letterboxing goes: I sent an email that basically says I spent a long time during a bunch of data analysis and coming up with what I think is a good tradeoff between fingerprinting and usability; and then tested it and in 30 seconds determined I hate it usability-wise. 17:50:50 And went back to the near-original proposal of "What if we just step by 50px if less than X, 100px if less than Y, and 200px otherwise." 17:51:39 I'm happy to let other people try out different proposals (which can be done on Nightly now, by setting a pref to a string of dimensions you can find in a link in my email) if they want to confirm my thoughts. 17:52:06 But I think the next step is basically to try codifying my stepped-range idea in code (so one doesn't have to set a pref) and then backporting to esr60 for TB Alpha. 17:52:13 And I'd like to get signoff on that plan. :) 17:54:43 tjr: with codifying you mean so that the result gets included in mozilla's nightlies? 17:55:30 one thing we could do before shipping alphas with it is to have it a nightly only features for a bit to see how this works in a tor browser context 17:55:40 (or an esr60 one, that is) 17:56:00 that would help us shake out bugs issues before we ship it in an alpha release 17:56:40 Yea, I'd alter the code in -central so if you turn on letterboxing you get the stepped letterboxing instead of the current 200x100 rounding 17:56:55 sounds good 17:57:13 And yea, I fogot Tor Browser Nightly existed, so it can certainly ride the trains in Tor Browser from TB Nightly -> Alpha, etc 17:57:20 fwiw, i think it is fine to start with the stepped version right from the beginning 17:57:32 and not after the users is doing the resizing 17:57:41 *user 17:58:19 Yeah, the letterboxing (using stepped ranges) will always behave the same way before or during a resize. (I'm not entirely sure what you mean by your last statement) 17:59:02 https://bugzilla.mozilla.org/show_bug.cgi?id=1538130 17:59:45 it seemed to me there was kind of an open question about that from our PoV 18:00:10 (at least some folks were wondering about what we think about that bug) 18:00:40 Yes... so that one is "Should we bother rounding the window now that we have letterboxing?" and I can see advantages on both sides. When I make a patch for Tor Browser I can make it either way 18:02:07 i don't have a strong opinion here, so i guess we start with one option and see how it goes 18:02:20 that said: i think your overall plan sounds reasonable :) 18:03:09 cool, thanks 18:04:15 pili: you are up 18:04:20 hi 18:04:56 first one is just an announcement that I have finished the ideas page for Google Season of Docs but would welcome reviews from people :) 18:04:59 most of the ideas are more for tor core 18:05:15 but there's also still time to submit ideas if you are willing to mentor 18:05:21 by when do you need feedback? 18:05:59 well, the deadline to submit the application is today 18:06:07 but I think we can have a few days to refine the list 18:06:37 having said that I'm relatlively happy with the state of that page :) 18:07:32 okay 18:07:41 i can have a look at it tomorrow i think 18:07:50 sure, thanks :) 18:08:23 the other thing is that I was reminded of the need for deciding what we're going to do about orbot tickets going forward 18:08:46 orbot or orfox pili? 18:08:57 this is probably something that gaba and I need to figure out, but if anyone has any suggestions or ideas I'd be happy to hear them :) 18:09:00 orbot 18:09:01 pili: you saw the thread on tor-team? 18:09:08 GeKo: yup :) 18:09:12 k 18:09:21 I had it at the bottom of my pile before that anyway :) 18:09:30 so, i think we should try to do a meeting with nathan and nail things down 18:10:48 I guess to start Orbot could disble issues 18:10:55 So no one can open new ones 18:10:56 yup, I see their point though about not wanting to move people to trac if we're going to move to something else 18:11:13 also the fact that trac might not be as user friendly when it comes to reporting issues 18:12:32 anyway, that was all I had on that also :) 18:12:50 okay, any other status updates? 18:13:20 i forgot something ! 18:13:37 go for it 18:13:46 DRL proposal deadline is friday, could you review O3 GeKo and can we talk about it offline to check that we are in the same page there 18:14:03 ux improvements are running over TB, so we should sync there 18:14:10 sure 18:14:20 send me the link to what i should look at? 18:14:23 antonela: I think it's Monday :) 18:14:29 even better :) 18:14:30 but yes, better to get it done asap 18:14:47 yes, will do GeKo 18:15:01 i think i can look at that tomorrow as well 18:15:10 so we have time for some back and forth if needed 18:15:49 ok, thanks 18:16:24 okay discussion time 18:16:42 we currently have 21 tbb-8.5-must tickets 18:17:06 i need to sync with sysrqb because he is involved in most of them 18:17:24 but i still hope we can build 8.5 next week-ish 18:17:40 pili: do we have the release sync tomorrow? 18:17:46 yup 18:17:57 #30136 might be worth chatting about then 18:18:03 I should send a reminder email 18:18:04 and having maybe stephw around 18:18:13 anyone else? 18:18:57 not from my side 18:20:15 ok :) 18:20:19 so, anything that speaks against trying to get 8.5 built next week? 18:20:34 (apart from the 21 open issues) 18:21:38 okay, i hear no objections :) 18:21:55 so if you have tbb-8.5-must tickets on your radar, please focus on them 18:22:00 anything else for today? 18:24:18 okay, hearing silence 18:24:30 thanks everyone and have a nice week *baf* 18:24:32 #endmeeting