Cecylia Bocovich

We're seeing a sudden drop of obfs4 usage in Belarus recently, and a rise in meek usage:  I wonder if some new Tor blocking prompted the switch.

I would like some help with linking the blocking pattern we saw (where the TCP ACK never reaches the destination) with other known censorship events. I saw in some news...

For context: https://trac.torproject.org/projects/tor/ticket/30451

We're going to have to set `CGO_LDFLAGS_ALLOW="-z|noexecstack"` for CI to pass.

Hrm, okay this actually just seems like a linux problem. I'm going to make a go-webrtc patch for linux for the rbm Tor Browser builds that patches this issue. However,...

Okay, updated the CGO directives to be platform specific, and CI passes now. I talked to GeKo and they said they'd prefer this to be fixed upstream rather than handled...

Hey! This is something that has to be done on the _server_ (i.e., bridge) side, your PR changes the _client_ side torrc options, which won't help. I don't know who...

Ah, I think this issue is due to a recent change in Snowflake: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/commit/9edaee65470a1483bbdbe984e5e15a885f1e95d2 I'm going to take a closer look at those changes, and whether we even need more...

You're right, it is `IP_BIND_ADDRESS_NO_PORT`. I just saw this in the commit linked above: ```golang sockErr = syscall.SetsockoptInt(int(fd), unix.SOL_IP, unix.IP_BIND_ADDRESS_NO_PORT, 1) ```

> Do you know if your snowflake sims need support for OutboundBindAddress? They shouldn't, no. And I don't think we're going to have trouble with running out of ports for...