I'm already halfway through my internship and I believe it is a good time to update my readers about the progress I've made and what my goals are for the remainder of the internship. First, let's begin with what we were able to accomplish in the past one and a half month or so. I was able to complete around 250 tickets on Tor Project's Request Tracker, write and improve parts of the documentation- both the support and manual docs, make an user feedback report covering varied range of topics - from UI/UX to anti-censorship and so on.
The most interesting part of writing technical documentation is that you happen to learn a LOT but it also happens to be time intensive. You need to be thorough with the concepts, communicate questions with folks actually working on that technology and then make it presentable in a way that would be helpful and easy to understand for the reader. Same is true for tickets on the Request Tracker. In most cases, no two tickets are similar and you're never sure what exactly is going wrong. With Tor, it can be a censorship issue, an issue with the Tor Browser or a basic configuration issue and so on. All that said, I'm very fortunate to have a project which covers for almost all of the teams in Tor Project. In the past couple of months, I have learnt quite a lot about the Tor Network, the underlying cryptography, bridges, configuration of relays and circumventing censorship in countries prohibiting a free and fair internet access to all.
So now, moving onto the next half, I will be focussing on documenting Snowflake, working on a bunch of UI/UX stuff on the Tor Project's Website and continue my work on the Request Tracker.

In this blog post, I would like to give you an introduction to Tor and try to address some fundamental questions about it.

What is Tor?

Tor is a network of virtual tunnels that allows you to improve your privacy and security on the Internet. It protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world, it prevents somebody watching your Internet connection from learning what sites you visit and it prevents the sites you visit from learning your physical location. This collection of volunteer relays is called the Tor network. The way most people use Tor is with the Tor Browser, which is based on Firefox ESR and comes bundled with privacy enhancing & anti-fingerprinting features.

So, basically, it's a VPN?

Nope. Tor is NOT a VPN and furthermore it is not recommended to use Tor and VPN together. These are fundamentally very different. In the case of VPN, you're just transferring your trust from your internet service provider (ISP) to the VPN provider. The VPN provider can log any data while you use their network and it's a single point of failure as well. Anyone snooping on the VPN connection can also easily gain knowledge of your activities. To add, VPNs don't essentially take any steps to mitigate browser fingerprinting or cross-site tracking on the internet.

While using Tor, your connection is made to the website by bouncing the connection through three different relays so the website you're connecting to can only see the IP address of the 'exit' relay. The Tor Browser furthermore comes bundled with features like: a different circuit of every different domain, i.e. a new circuit for every website you're connecting to so as to mitigate cross-site tracking; 'Security Settings' with which you can also disable most of the harmful JavaScript (this might break some websites though!). Something noteworthy is that the idea is not to hide that you're using the Tor network but to anonymize your activities on the Tor network.

"But, hey, if it's known that you're connecting to the Tor network then anyone can censor your connection, right?" Yep, let's talk about censorship!

Censorship

I've touched on this very briefly in my previous post. Many governments or internet service providers try to block connections to the Tor Network. The Tor Browser ships with "pluggable transports" to circumvent these blocks. Most pluggable transports, such as obfs4, rely on the use of “bridge” relays. Unlike the ordinary relays, bridge relays are not listed publicly (but these are still run by volunteers).

Tor is an essential tool for privacy and anonymity on the internet. It is a tool used by millions of people all around the globe - from journalists to human rights activists to ordinary people. My work as an intern with the Community Team is to handle tickets on the request tracker, answer user queries and derive useful reports for our teams across the board!

I'm almost three weeks into my internship and I think it would be a right time to talk about some of the challenges I'd been facing.

In the first two weeks, I have been mostly working on Tor Project's Request Tracker - responding to user queries, trying to figure how to circumvent censorship, accumulating user feedback and provide that as a report for our teams and generally learning more and more about the various moving parts of The Tor Project.

The primary goal of the community team is to be a bridge (pun intended ;) between users and the developers and designers. We have to be technical enough but should also be able to present those technical concepts in a more understandable manner. I have already been in 14-day long email threads trying to figure out why Tor is not working for an user. There are so many things to be considered and most of the time I got stuck trying to figure what exactly might be happening at their end. For this it's very important that I should be thorough with the documentation that we have, especially the manual and support docs. In the most challenging cases, my idea is to try and simulate those issues and then figure out how to solve them. At this point, if you're wondering why this is an issue, I have to remind you that Tor is censored in many countries and the fight that we are battling for anti-censorship and the basic freedom of internet users all around the globe is a challenging one.

The other thing I have always been encouraged to do is to ASK. Yes, asking questions in a public forum isn't easy. Yes, IRC can be tough sometimes. But the Tor Community comprises of excellent folks who are always willing to help. For instance, this has been a recurring issue for the past few weeks but upon discussion we decided that we could actually use that ticket for collecting feedback - turning an issue into a learning experience in the process!
But, emphasizing more on the previous point, I, more often than not, hesitate asking a question because it seems to be too trivial or something that "I should just know!" but I was encouraged to even ask those. If you, my dear reader, face the same thing, remember, no question is too trivial and it's okay to not know about something. And more importantly, it's alright to make mistakes!

I'm elated to share, I am one of the Tor Project interns with Outreachy for the December 2020 - March 2021 round. I will be working on the project- "Helping Tor support our users". Through this blog I will try to document my work, my thoughts and my experiences ... and answer the questions that my readers might have.

About Myself

I'm Joydeep Sen Gupta, also known as 'championquizzer' on the internet. I very recently graduated with a bachelors degree in engineering (Electronics and Communication). I love computers (and technology, in general) and spend most of my day in front of one. I am a free/libre open-source software enthusiast with a strong focus on privacy and cybersecurity. In my free time, I like to read history, watch documentaries, study ancient & modern maps, listen to music (mostly baroque & classical) and play football (soccer).

My core values are -
- curiousity : I'm perennially curious to learn and re-learn stuff about computer systems and society. I like to hear other people's lived experiences and learn from them.
- openness : I firmly believe in openness and inclusion of all. This is primarily why, I am also a strong advocate of open source technology and open knowledge.
- kindness & compassion : I don't know who quoted this but this resonates with me so well - "We're a collection of seven billion codependent atoms, stop hating eachother on the basis of social constructs and come along for the ride!"

Outreachy Internship and Tor Project

The principles that Outreachy Internships stand for - welcoming folks from all walks of life to open source, promoting a culture of diversity and inclusion, connecting interns with experienced mentors from open source communities is what motivated me to apply to this program. The past few months, right from the application period to the contribution period has been a great learning experience for me.
Furthermore, with my interest in encryption, privacy, anonymity and freedom from surveillance on the internet, I was highly motivated to work with the Tor Project. As most of our work and communication is moving online, these are really challenging times to fight for your freedom, privacy and rights on the internet. I am glad I can be part of the project at such crucial times.

January 2021

M T W T F S S
    123
4 5678910
11121314151617
1819202122 2324
25262728293031

Syndicate

RSS Atom

Most Popular Tags