Tor in the Media: 2020

blog.torproject.org
5 min read
fairly difficult
Hi! My name is Maria Violante, and I'm one of two Outreachy interns for Tor Project for Winter 2020/2021.
I'm thrilled to share with you the results of my internship thus far: the Anonymous Ticket Portal, which allows individuals to submit instant, anonymous tickets to participate in GitLab repos without signing up for a GitLab account or disclosing any personal data.

Keep reading to find out how you can participate in and benefit from the Anonymous Ticket Portal!

Why Anonymous Ticketing?

Currently, before making a bug report to one of Tor's repos, users must sign up for a GitLab account via the TicketLobby (https://gitlab.onionize.space/). Although this is the right approach for many users, it has its limitations:

It's overkill for the occasional or one-time bug reporter.

The delay between requesting a GitLab account and approval by a moderator means bug reports are lost, as people may not return to submit their bug or remember the circumstances that provoked the bug in the first place.

Many privacy-focused Tor users don't feel comfortable providing their email for a bug report.

This anonymous ticketing portal is designed to circumvent these limitations, resulting in more complete, private bug reporting, and includes the following features:

Lightning-fast, Anonymous (and Lazy) User Interface

Instead of username and password, the Anonymous Ticket Portal's authentication system mirrors Freedom of the Press Foundation's Secure Drop (https://securedrop.org/), in that potential bug reporters receive a code phrase of six random words from the EFF's New Wordlists for Random Passphrases. (https://www.eff.org/deeplinks/2016/07/new-wordlists-random-passphrases)

(An example of user identifier code phrase generation.)

Once the user approves their code phrase, they are redirected to a bookmarkable landing page that allows them to browse and search projects and issues or instantly create their first issue/note using GitLab Flavored Markdown (https://docs.gitlab.com/ee/user/markdown.html)

(A sample user landing view.)

As they navigate through the system, their…
Last August, We Asked You To Help Us Fundraise During Our Second Annual
Read full article