Opened 8 months ago

Last modified 3 months ago

#29275 new task

Get default bridges checked for reachability by OONI

Reported by: cohosh Owned by:
Priority: Medium Milestone:
Component: Circumvention/Pluggable transport Version:
Severity: Normal Keywords: tbb-bridges, ex-sponsor-19
Cc: cohosh, gk, phw Actual Points:
Parent ID: Points:
Reviewer: Sponsor: Sponsor30-must

Description

Talk to OONI about getting our default bridges scanned. This should be done for new PTs once they are deployed.

Child Tickets

Change History (12)

comment:1 Changed 8 months ago by gk

Cc: gk added

comment:2 Changed 8 months ago by teor

Owner: asn deleted
Status: newassigned

asn does not need to own any obfuscation tickets any more. Default owners are trouble.

comment:3 Changed 7 months ago by cohosh

Status: assignednew

tickets were assigned to asn, setting them as unassigned (new) again.

comment:4 Changed 5 months ago by phw

Cc: phw added

comment:5 Changed 5 months ago by teor

Tor Browser's default bridges are already tested by OONI:
https://github.com/citizenlab/test-lists/blob/master/lists/services/tor/bridges.csv

But the lists might be out of date.

comment:6 Changed 5 months ago by phw

To elaborate on teor's comment: I had a chat with our friends over at OONI and was told that the bridge reachability test already takes care of this. The relevant list is here, but only used by OONI probes up to version 2.3:
https://github.com/OpenObservatory/ooni-resources/blob/master/bridge_reachability/tor-bridges-ip-port.csv

Arturo mentioned that this ticket discusses the future for mobile and 3.x probes.

We should be able to see the test results in OONI's explorer. One can filter by test name. All "bridge reachability" tests I've seen are quite old, though -- from 2014 or 2015. I'll try to find out what's going on here.

FYI, the Tor Browser hacking guide has a small section that discusses the process of adding new default bridges. It includes having the bridges added to OONI's test list: https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Hacking#AddingNewDefaultBridges

Last edited 5 months ago by phw (previous) (diff)

comment:7 in reply to:  6 ; Changed 5 months ago by dcf

Replying to phw:

We should be able to see the test results in OONI's explorer. One can filter by test name. All "bridge reachability" tests I've seen are quite old, though -- from 2014 or 2015. I'll try to find out what's going on here.

"Bridge reachability" is a different test, and as you found hardly run. The bridges are actually tested in the "TCP Connect" test. E.g.
https://explorer.ooni.torproject.org/measurement/20190107T070320Z_AS4134_d5QVa5d13jHeRFwOVn63qJmX0CXVymh47lFwR27iq8Y2hfqxr3?input=obfs4%20154.35.22.13:6041

It's only a TCP connect, and not a full bootstrap, but it is run pretty frequently. https://api.ooni.io/api/v1/files?since=2019-04-01&test_name=tcp_connect finds 454 reports for me currently.

I did some early analysis of the TCP connect tests here:
https://lists.torproject.org/pipermail/ooni-dev/2016-December/000482.html

More recently Briar has been doing analysis on them.
https://code.briarproject.org/briar/briar/issues/1266
https://code.briarproject.org/briar/tor-circumvention-analytics/
https://lists.torproject.org/pipermail/tor-dev/2019-February/013708.html

Last edited 5 months ago by dcf (previous) (diff)

comment:8 in reply to:  7 Changed 5 months ago by phw

Replying to dcf:

Replying to phw:

We should be able to see the test results in OONI's explorer. One can filter by test name. All "bridge reachability" tests I've seen are quite old, though -- from 2014 or 2015. I'll try to find out what's going on here.

"Bridge reachability" is a different test, and as you found hardly run. The bridges are actually tested in the "TCP Connect" test. E.g.
https://explorer.ooni.torproject.org/measurement/20190107T070320Z_AS4134_d5QVa5d13jHeRFwOVn63qJmX0CXVymh47lFwR27iq8Y2hfqxr3?input=obfs4%20154.35.22.13:6041

Perfect, thanks David!

comment:9 Changed 5 months ago by phw

Since OONI is already doing a great job at scanning our bridges, the next (and remaining?) question related to this ticket is how we can make sure that OONI's list of default bridges is up-to-date. There's some discussion on this over at https://trac.torproject.org/projects/tor/ticket/30006#comment:7.

comment:10 Changed 5 months ago by dcf

Keywords: tbb-bridges added

comment:11 Changed 3 months ago by gaba

Keywords: ex-sponsor-19 added

Adding the keyword to mark everything that didn't fit into the time for sponsor 19.

comment:12 Changed 3 months ago by phw

Sponsor: Sponsor19Sponsor30-must

Moving from Sponsor 19 to Sponsor 30.

Note: See TracTickets for help on using tickets.