[guardian-dev] Problems with Snowflake rendezvous front domain since 2023-09-20
Nathan of Guardian
nathan at guardianproject.info
Sun Oct 1 13:42:34 EDT 2023
Eventually, but for now we just posted it as a release on Github, due to limited time:
https://github.com/guardianproject/orbot/releases/tag/17.1.0-RC-1-tor.0.4.7.14
I am getting reports though that the new front domain chosen may not be reachable in Iran, so we have made things worse for users there.
On Sat, Sep 30, 2023, at 1:09 PM, David Fifield wrote:
> Cool, as of 2023-09-28 I see:
> https://github.com/guardianproject/orbot/releases/tag/17.1.0-RC-1-tor.0.4.7.14
> 594c49e Fix snowflake Fastly and Moat Activity front
>
> What's the best way to instruct users to install this version? From the
> F-Droid repo?
> https://guardianproject.info/fdroid/
>
> On Thu, Sep 21, 2023 at 08:47:23PM -0400, Nathan of Guardian wrote:
>> Thanks David. I think we are looped in on this and will see where we need to make changes to push out the fix
>>
>> On Thu, Sep 21, 2023, at 7:26 PM, David Fifield wrote:
>> > This is a heads-up for a problem with Snowflake rendezvous that affects
>> > Orbot. In short, the default front domain sometimes resolves to a
>> > Cloudflare IP address rather than a Fastly one. If a user gets a
>> > Cloudflare IP address, the domain fronting doesn't work, and
>> > bootstrapping stalls with "broker failure Unexpected error, no answer"
>> > in the tor log.
>> >
>> > https://forum.torproject.org/t/problems-with-snowflake-since-2023-09-20-broker-failure-unexpected-error-no-answer/9346
>> > https://lists.torproject.org/pipermail/anti-censorship-team/2023-September/000314.html
>> >
>> > At the anti-censorship team meeting today, we decided to proceed with
>> > the workaround of changing the front domain. Another workaround that is
>> > reported to work with Orbot is to use AMP cache rendezvous rather than
>> > domain fronting rendezvous.
>> >
>> > https://bugs.torproject.org/tpo/applications/tor-browser/42120
> _______________________________________________
> List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
> To unsubscribe, email: guardian-dev-unsubscribe at lists.mayfirst.org
--
Nathan of Guardian
nathan at guardianproject.info
More information about the guardian-dev
mailing list