Thema: Neue Tor-Version: sicherer und anonymer

[SiLæncer]

Changelog

 * Windows + OS X + Linux

   * Update Openssl to 1.1.1l
   * Update Firefox to 78.14.0esr

 * Build System

   * OS X

     * Bug 40358: Make OpenSSL 1.1.1l buildable for macOS [tor-browser-build]

[close]

Download: https://dist.torproject.org/torbrowser/10.5.6/

https://www.torproject.org/

[SiLæncer]

An interface for Tor that packs several extra security feature build to complement the well-known security and anonymity browser.

License: GPLv3

Whats new:>>

    Uses WinDivert-2.2.0-B
    Uses tor-win32-0.4.5.10

https://github.com/basil00/TorWall

[SiLæncer]

Whats new:>>

* All Platforms

   * Update Openssl to 1.1.1l

 * Windows + OS X + Linux

   * Update Firefox to 78.14.0esr
   * Bug 40597: Implement TorSettings module [tor-browser]

 * Android

   * Bug 40611: Rebase geckoview patches onto 92.0 [tor-browser]

* OS X

   * Bug 40358: Make OpenSSL 1.1.1l buildable for macOS [tor-browser-build]

Download: https://www.torproject.org/dist/torbrowser/11.0a7/

https://www.torproject.org/

[SiLæncer]

Whats new:>>

    Major feature: Private keys (v3 onion client authentication) replaces passwords and HTTP basic auth
    Updated Tor to 0.4.6.7 on all platforms
    Various bug fixes

https://onionshare.org/

[SiLæncer]

ProxAllium is a FOSS (Free and Open Source) GUI wrapper for Tor. I like to call it a "Tor Proxy Bundle" (like the Tor Browser Bundle).

MIT License

Release Notes

    Additions:

    Added support for the Snowflake pluggable transport
    Added an option to run Tor setup manually

    Changes:

    Main window no longer hides when minimized, instead it hides when closed

    Fixes:

    An out-of-bounds bug in Tor output handling code

[close]

https://proxallium.tuxfamily.org/

[SiLæncer]

Whats new:>>

WASTE: Updated to 1.8.0.build.208.
Ban List, applies to Secure Chats and Transfers.
Resume improved under either node terminating.
Improved Chunk Counting under resume transfer.
Improved Download Retry/Resume.
Improved Saving of Network Addresses.

Tor: 0.4.6.7 with Libevent 2.1.12-stable, OpenSSL 3.0.0, Zlib 1.2.8, Liblzma5.2.4, Libzstd 1.4.8 and Unknown N/A as libc. Static.

xFox Profile : Improvements to existing profile recovery and integration.

Purple i2p daemon: v2.39.0.

http://sourceforge.net/projects/blackbeltpriv/

[SiLæncer]

Whats new:>>

 * Windows + OS X + Linux
   * Update Firefox to 78.15.0esr
   * Bug 40049: Add banner for VPN survey to about:tor [torbutton]
 * Android
   * Bug 40193: Add banner for VPN survey to Android homepage [fenix]
 * Build System
   * All Platforms
     * Bug 40363: Change bsaes git url [tor-browser-build]

Download: https://dist.torproject.org/torbrowser/10.5.8/

https://www.torproject.org/

[SiLæncer]

OnionFruit Connect permits you to continue using your browser of choice to connect to the TOR network.

Having the ability to use a browser that you are already comfortable with makes using TOR more of a seamless process. OnionFruit Connect will initiate the TOR service and then configures your proxy settings allowing your apps to be routed through TOR's tunnel. You will be notified know you're protected confirming that all your internet traffic is being passed through the TOR tunnel safely encrypted. This process ensures that every single site you visit gets routed through multiple servers to help mask your actions making them difficult to track.

Changelog

Bridges

Add snowflake bridge support

In an effort to improve accessibility, snowflake bridge support has been added. This can be used instead of the other bridge types and could improve network access

Allow auto-configuration of some bridge types

Some bridges will now hide the entry box if they are non-configurable

Tor

Add circuit lifetime limiter

As requested, an option to configure the lifetime of a circuit has been added to the Tor settings page

Compatibity

Add DNS compatibility warning for Windows 11

We're aware of compatibility issues with Windows 11, and are working to resolve any issues. For now, a message is displayed in the settings window, informing some users of compatibility issues.

Frontend

Change timeout indicator to show connection progress

The timeout will no longer change the message, but will still change the ribbon colour and enable the toggle switch

Backend

Disable connection timeout after first trigger

Aims to fix a rare issue where the client takes so long to connect it can desynchronise the state presented to the user

Web

Improve the information on the default landing page

We've increased the accuracy and the data provided when you land on the default connection page. If you're connected you can get the company who owns the IP address, if it's supplied to us by Tor

[close]

https://github.com/dragonfruitnetwork/onionfruit

[SiLæncer]

Changelog

    Windows + OS X + Linux

        Update Firefox to 91.2.0esr
        Update Tor to 0.4.7.1-alpha
        Bug 40004: Convert tl-protocol to async.
        Bug 40012: Watch all requested tor events
        Bug 40027: Make torbutton_send_ctrl_cmd async
        Bug 40042: Add missing parameter of createTransport
        Bug 40043: Delete all plugin-related protections
        Bug 40045: Teach the controller about status_client
        Bug 40046: Support arbitrary watch events
        Bug 40047: New string for Security Level panel
        Bug 40048: Protonify Circuit Display Panel
        Bug 40600: Multiple pages as home page unreliable in 11.0a4
        Bug 40616: UX: multiple about:torconnect
        Bug 40624: TorConnect banner always visible in about:preferences#tor even after bootstrap
        Bug 40626: Update Security Level styling to match Proton UI
        Bug 40628: Checkbox wrong color in about:torconnect in dark mode theme
        Bug 40630: Update New Identity and New Circuit icons
        Bug 40631: site identity icons are not being displayed properly
        Bug 40632: Proton'ify Circuit Display Panel
        Bug 40634: Style updates for Onion Error Pages
        Bug 40636: Fix about:torconnect 'Connect' border radius in about:preferences#tor

    Build System

        Windows + OS X + Linux

            Update Go to 1.16.9
            Bug 40048: Remove projects/clang-source
            Bug 40347: Make the list of toolchain updates needed for firefox91
            Bug 40363: Change bsaes git url

        Windows + Linux

            Bug 40357: Update binutils to 2.35.2

        Windows

            Bug 28240: switch from SJLJ exception handling to Dwarf2 in mingw for win32 [tor-browser-build]
            Bug 40306: Update Windows toolchain to switch to mozilla91
            Bug 40376: Use python3 for running pe_checksum_fix.py
        OS X
            Bug 40307: Update macOS toolchain to switch to mozilla91
        Linux
            Bug 40222: Bump GCC to 10.3.0 for Linux
            Bug 40305: Update Linux toolchain to switch to mozilla91
            Bug 40353: Temporarily disable rlbox for linux builds

[close]

Download: https://www.torproject.org/dist/torbrowser/11.0a9/

https://www.torproject.org/

[SiLæncer]

Whats new:>>

 * All Platforms
   * Translations Update
 * Windows + OS X + Linux
   * Revert bug 40049 [torbutton]
   * Bug 40051: Implement 2021 Year End Campaign look in about:tor [torbutton]
 * Android
   * Revert bug 40193 [fenix]
   * Bug 40194: Add 2021 YEC home screen [fenix]

Download: https://dist.torproject.org/torbrowser/10.5.10/

https://www.torproject.org/

[SiLæncer]

Whats new:>>

WASTE : Updated to 1.8.0.build.214.
Rare connection related crash fixed.
Default back to Tor for nullnet connections.
Performance up from 80+ MB per sec to 90+ MB per sec, nearly 800 Mbits persec, over ipv4.
Improved 'connect first time' for connections, across all networks.
Improved Status Updates in Chat Rooms.

BBP Suite: Spaces removed from the exe name to aid installation under WINE on linux.

http://sourceforge.net/projects/blackbeltpriv/

[SiLæncer]

Changelog

Windows + OS X + Linux

Update Firefox to 91.3.0esr
Update Tor to 0.4.7.2-alpha

Bug 32624: localStorage is not shared between tabs [tor-browser]
Bug 33125: Remove xpinstall.whitelist.add* as they don't do anything anymore [tor-browser]
Bug 34188: Cleanup extensions.* prefs [tor-browser]
Bug 40053: investigate fingerprinting potential of extended TextMetrics interface
Bug 40083: Make sure Region.jsm fetching is disabled
Bug 40177: Clean up obsolete preferences in our 000-tor-browser.js
Bug 40220: Make sure tracker cookie purging is disabled
Bug 40342: Set `gfx.bundled-fonts.activate = 1` to preserve current bundled fonts behaviour
Bug 40463: Disable network.http.windows10-sso.enabled in FF 91
Bug 40483: Deutsche Welle v2 redirect
Bug 40548: Set network.proxy.failover_direct to false in FF 91
Bug 40630: New Identity and New Circuit icons
Bug 40641: Update Security Level selection in about:preferences to match style as tracking protection option bubbles
Bug 40648: Replace onion pattern divs/css with tiling SVG
Bug 40653: Onion Available text not aligned correctly in toolbar in ESR91
Bug 40655: esr91 is suggesting to make Tor Browser the default browse
Bug 40657: esr91 is missing "New identity" in hamburger menu
Bug 40680: Prepare update to localized assets for YEC

Build System

Windows + OS X + Linux

Bug 40366: Use bullseye to build https-everywhere
Bug 40368: Use system's python3 for https-everywhere

[close]

https://www.torproject.org/

[SiLæncer]

Changelog

  This version fixes several bugs from earlier versions of Tor. One
  highlight is a fix on how we track DNS timeouts to report general
  relay overload.

  o Major bugfixes (relay, overload state):
    - Relays report the general overload state for DNS timeout errors
      only if X% of all DNS queries over Y seconds are errors. Before
      that, it only took 1 timeout to report the overload state which
      was just too low of a threshold. The X and Y values are 1% and 10
      minutes respectively but they are also controlled by consensus
      parameters. Fixes bug 40491; bugfix on 0.4.6.1-alpha.

  o Minor features (fallbackdir):
    - Regenerate fallback directories for October 2021. Closes
      ticket 40493.

  o Minor features (testing):
    - On a testing network, relays can now use the
      TestingMinTimeToReportBandwidth option to change the smallest
      amount of time over which they're willing to report their observed
      maximum bandwidth. Previously, this was fixed at 1 day. For
      safety, values under 2 hours are only supported on testing
      networks. Part of a fix for ticket 40337.
    - Relays on testing networks no longer rate-limit how frequently
      they are willing to report new bandwidth measurements. Part of a
      fix for ticket 40337.
    - Relays on testing networks now report their observed bandwidths
      immediately from startup. Previously, they waited until they had
      been running for a full day. Closes ticket 40337.

  o Minor bugfix (onion service):
    - Do not flag an HSDir as non-running in case the descriptor upload
      or fetch fails. An onion service closes pending directory
      connections before uploading a new descriptor which can thus lead
      to wrongly flagging many relays and thus affecting circuit building
      path selection. Fixes bug 40434; bugfix on 0.2.0.13-alpha.
    - Improve logging when a bad HS version is given. Fixes bug 40476;
      bugfix on 0.4.6.1-alpha.

  o Minor bugfix (CI, onion service):
    - Exclude onion service version 2 Stem tests in our CI. Fixes bug 40500;
      bugfix on 0.3.2.1-alpha.

  o Minor bugfixes (compatibility):
    - Fix compatibility with the most recent Libevent versions, which no
      longer have an evdns_set_random_bytes() function. Because this
      function has been a no-op since Libevent 2.0.4-alpha, it is safe
      for us to just stop calling it. Fixes bug 40371; bugfix
      on 0.2.1.7-alpha.

  o Minor bugfixes (onion service, TROVE-2021-008):
    - Only log v2 access attempts once total, in order to not pollute
      the logs with warnings and to avoid recording the times on disk
      when v2 access was attempted. Note that the onion address was
      _never_ logged. This counts as a Low-severity security issue.
      Fixes bug 40474; bugfix on 0.4.5.8.

[close]

https://www.torproject.org/

[SiLæncer]

Changelog

Tor Browser 11.0 is now available from the Tor Browser download page and our distribution directory. This is the first stable release based on Firefox ESR 91, and includes an important update to Tor 0.4.6.8.

Tor Browser gets a new look

Earlier this year, Firefox’s user interface underwent a significant redesign aimed at simplifying the browser chrome, streamlining menus and featuring an all-new tab design. Firefox ESR 91 introduces the new design to Tor Browser for the first time.

To ensure it lives up to the new experience, each piece of custom UI in Tor Browser has been modernized to match Firefox’s new look and feel. That includes everything from updating the fundamentals like color, typography and buttons to redrawing each of our icons to match the new thinner icon style.

In addition to the browser chrome itself, the connection screen, circuit display, security levels and onion site errors all received a sprucing-up too – featuring some small but welcome quality of life improvements to each.

Final deprecation of v2 onion services

Last year we announced that v2 onion services would be deprecated in late 2021, and since its 10.5 release Tor Browser has been busy warning users who visit v2 onion sites of their upcoming retirement. At long last, that day has finally come. Since updating to Tor 0.4.6.8 v2 onion services are no longer reachable in Tor Browser, and users will receive an “Invalid Onion Site Address” error instead.

Should you receive this error when attempting to visit a previously working v2 address, there is nothing wrong with your browser – instead, the issue lies with the site itself. If you wish, you can notify the onion site’s administrator about the problem and encourage them to upgrade to a v3 onion service as soon as possible.

It’s easy to tell if you still have any old v2 addresses saved in your bookmarks that are in need of removal or updating too: although both end in .onion, the more secure v3 addresses are 56 characters long compared to v2’s modest 16 character length.

Known issues

Tor Browser 11.0 comes with a number of known issues:

    Bug 40668: DocumentFreezer & file scheme
    Bug 40671: Fonts don't render
    Bug 40679: Missing features on first-time launch in esr91 on MacOS
    Bug 40689: Change Blockchair Search provider's HTTP method
    Bug 40667: AV1 videos shows as corrupt files in Windows 8.1
    Bug 40677: Since the update to 11.0a9 some addons are inactive and need disabling-reenabling on each start
    Bug 40666: Switching svg.disable affects NoScript settings
    Bug 40690: Browser chrome breaks when private browsing mode is turned off

Full changelog

The full changelog since Tor Browser 10.5.10 is:

    Windows + OS X + Linux
        Update Firefox to 91.3.0esr
        Update Tor to tor-0.4.6.8
        Bug 32624: localStorage is not shared between tabs
        Bug 33125: Remove xpinstall.whitelist.add* as they don't do anything anymore
        Bug 34188: Cleanup extensions.* prefs
        Bug 40004: Convert tl-protocol to async.
        Bug 40012: Watch all requested tor events
        Bug 40027: Make torbutton_send_ctrl_cmd async
        Bug 40042: Add missing parameter of createTransport
        Bug 40043: Delete all plugin-related protections
        Bug 40045: Teach the controller about status_client
        Bug 40046: Support arbitrary watch events
        Bug 40047: New string for Security Level panel
        Bug 40048: Protonify Circuit Display Panel
        Bug 40053: investigate fingerprinting potential of extended TextMetrics interface
        Bug 40083: Make sure Region.jsm fetching is disabled
        Bug 40177: Clean up obsolete preferences in our 000-tor-browser.js
        Bug 40220: Make sure tracker cookie purging is disabled
        Bug 40342: Set `gfx.bundled-fonts.activate = 1` to preserve current bundled fonts behaviour
        Bug 40463: Disable network.http.windows10-sso.enabled in FF 91
        Bug 40483: Deutsche Welle v2 redirect
        Bug 40534: Cannot open URLs on command line with Tor Browser 10.5
        Bug 40547: UX: starting in offline mode can result in difficulty to connect later
        Bug 40548: Set network.proxy.failover_direct to false in FF 91
        Bug 40561: Refactor about:torconnect implementation
        Bug 40567: RFPHelper is not init until after about:torconnect bootstraps
        Bug 40597: Implement TorSettings module
        Bug 40600: Multiple pages as home page unreliable in 11.0a4
        Bug 40616: UX: multiple about:torconnect
        Bug 40624: TorConnect banner always visible in about:preferences#tor even after bootstrap
        Bug 40626: Update Security Level styling to match Proton UI
        Bug 40628: Checkbox wrong color in about:torconnect in dark mode theme
        Bug 40630: Update New Identity and New Circuit icons
        Bug 40631: site identity icons are not being displayed properly
        Bug 40632: Proton'ify Circuit Display Panel
        Bug 40634: Style updates for Onion Error Pages
        Bug 40636: Fix about:torconnect 'Connect' border radius in about:preferences#tor
        Bug 40641: Update Security Level selection in about:preferences to match style as tracking protection option bubbles
        Bug 40648: Replace onion pattern divs/css with tiling SVG
        Bug 40653: Onion Available text not aligned correctly in toolbar in ESR91
        Bug 40655: esr91 is suggesting to make Tor Browser the default browse
        Bug 40657: esr91 is missing "New identity" in hamburger menu
        Bug 40680: Prepare update to localized assets for YEC
        Bug 40686: Update Onboarding link for 11.0
    Build System
        Windows + OS X + Linux
            Update Go to 1.16.9
            Bug 40048: Remove projects/clang-source
            Bug 40347: Make the list of toolchain updates needed for firefox91
            Bug 40363: Change bsaes git url
            Bug 40366: Use bullseye to build https-everywhere
            Bug 40368: Use system's python3 for https-everywhere
        Windows + Linux
            Bug 40357: Update binutils to 2.35.2
        Windows
            Bug 28240: switch from SJLJ exception handling to Dwarf2 in mingw for win32
            Bug 40306: Update Windows toolchain to switch to mozilla91
            Bug 40376: Use python3 for running pe_checksum_fix.py
        OS X
            Bug 40307: Update macOS toolchain to switch to mozilla91
        Linux
            Bug 40222: Bump GCC to 10.3.0 for Linux
            Bug 40305: Update Linux toolchain to switch to mozilla91
            Bug 40353: Temporarily disable rlbox for linux builds

[close]

https://www.torproject.org/

[SiLæncer]

Changelog

 * Windows + OS X + Linux

   * Tor Launcher 0.2.32
   * Bug 40059: YEC activist sign empty in about:tor on RTL locales [torbutton]
   * Bug 40383: Workaround issue in https-e wasm [tor-browser-build]
   * Bug 40438: Add Blockchair as a search engine [tor-browser]
   * Bug 40689: Change Blockchair Search provider's HTTP method [tor-browser]
   * Bug 40690: Browser chrome breaks when private browsing mode is turned off [tor-browser]
   * Bug 40700: Switch Firefox recommendations off by default [tor-browser]

[close]

https://www.torproject.org/