[guardian-dev] Problems with Snowflake rendezvous front domain since 2023-09-20

Nathan of Guardian nathan at guardianproject.info
Sun Oct 1 13:42:34 EDT 2023


Eventually, but for now we just posted it as a release on Github, due to limited time:
https://github.com/guardianproject/orbot/releases/tag/17.1.0-RC-1-tor.0.4.7.14

I am getting reports though that the new front domain chosen may not be reachable in Iran, so we have made things worse for users there.

On Sat, Sep 30, 2023, at 1:09 PM, David Fifield wrote:
> Cool, as of 2023-09-28 I see:
> https://github.com/guardianproject/orbot/releases/tag/17.1.0-RC-1-tor.0.4.7.14
> 594c49e Fix snowflake Fastly and Moat Activity front
>
> What's the best way to instruct users to install this version? From the
> F-Droid repo?
> https://guardianproject.info/fdroid/
>
> On Thu, Sep 21, 2023 at 08:47:23PM -0400, Nathan of Guardian wrote:
>> Thanks David. I think we are looped in on this and will see where we need to make changes to push out the fix 
>> 
>> On Thu, Sep 21, 2023, at 7:26 PM, David Fifield wrote:
>> > This is a heads-up for a problem with Snowflake rendezvous that affects
>> > Orbot. In short, the default front domain sometimes resolves to a
>> > Cloudflare IP address rather than a Fastly one. If a user gets a
>> > Cloudflare IP address, the domain fronting doesn't work, and
>> > bootstrapping stalls with "broker failure Unexpected error, no answer"
>> > in the tor log.
>> >
>> > https://forum.torproject.org/t/problems-with-snowflake-since-2023-09-20-broker-failure-unexpected-error-no-answer/9346
>> > https://lists.torproject.org/pipermail/anti-censorship-team/2023-September/000314.html
>> >
>> > At the anti-censorship team meeting today, we decided to proceed with
>> > the workaround of changing the front domain. Another workaround that is
>> > reported to work with Orbot is to use AMP cache rendezvous rather than
>> > domain fronting rendezvous.
>> >
>> > https://bugs.torproject.org/tpo/applications/tor-browser/42120
> _______________________________________________
> List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
> To unsubscribe, email:  guardian-dev-unsubscribe at lists.mayfirst.org

-- 
  Nathan of Guardian
  nathan at guardianproject.info


More information about the guardian-dev mailing list