Thema: Neue Tor-Version: sicherer und anonymer

[SiLæncer]

Changelog

All Platforms:

Update Firefox to 45.5.0esr
Update Tor to 0.2.8.9
Update OpenSSL to 1.0.1u
Update Torbutton to 1.9.5.12
Bug 20414: Add donation banner on about:tor for 2016 campaign
Translation updates
Update Tor Launcher to 0.2.9.4
Bug 20429: Do not open progress window if tor doesn't get started
Update HTTPS-Everywhere to 5.2.7
Update meek to 0.25
Bug 20030: Shut down meek-http-helper cleanly if built with Go > 1.5.4
Bug 19838: Add dgoulet's bridge and add another one commented out
Bug 20296: Rotate ports again for default obfs4 bridges
Bug 19735: Switch default search engine to DuckDuckGo
Bug 20118: Don't unpack HTTPS Everywhere anymore

Windows:

Bug 20342: Add tor-gencert.exe to expert bundle

Build system:

All platforms
Bug 20023: Upgrade Go to 1.7.3

[close]

https://www.torproject.org/

[SiLæncer]

Changelog

Use the tor-browser-45.5.0esr-6.0-1 branch (e5dafab8) on tor-browser
Use the THUNDERBIRD_45_4_0_RELEASE tag on comm-esr45
Update ctypes-otr to 0.0.3
Trac 16489: Only show "close" button on Windows
Trac 16491: Contact list entries don't adapt to the actual font size
Trac 16536: Investigate Tor Browser patches relevant to Tor Messenger
Trac 17471: Investigate Tor Browser preferences relevant to Tor Messenger
Trac 17480: Make url linkification toggleable
Trac 19816: Build process should generate mar files
Trac 20205: Support SASL ECDSA-NIST256P-CHALLENGE
Trac 20208: Put conversations on hold by default
Trac 20231: Remove incomplete translations
Trac 20276: Fix toggling sounds
Trac 20608: Use Instantbird app version
Bugzilla 1246431: Properly handle incoming xmpp server messages
Bugzilla 1313137: Fix irc "msg is not defined" error
Bugzilla 1316000: Remove old Yahoo! Messenger support
Trac 20062: Make stripping signatures reproducible on TM .exe files

[close]

https://www.torproject.org/

[SiLæncer]

Whats new:>>

All Platforms

    Update Firefox to 45.5.1esr
    Update NoScript to 2.9.5.2

https://www.torproject.org/

[SiLæncer]

Whats new:>>

All Platforms

    Update Firefox to 45.6.0esr
    Update Tor to 0.2.8.11
    Update Torbutton to 1.9.5.13
        Bug 20947: Donation banner improvements
    Update HTTPS-Everywhere to 5.2.8
    Bug 20809: Use non-/html search engine URL for DuckDuckGo search plugins
    Bug 20837: Activate iat-mode for certain obfs4 bridges
    Bug 20838: Uncomment NX01 default obfs4 bridge
    Bug 20840: Rotate ports a third time for default obfs4 bridges

https://www.torproject.org/

[SiLæncer]

Changelog

All Platforms

    Use the tor-browser-45.6.0esr-6.0-1-build1 tag on tor-browser
    Use the THUNDERBIRD_45_6_0_RELEASE tag on comm-esr45
    Update ctypes-otr to 0.0.4
    Update tor-browser to 6.0.8
    Don't allow javascript: links in themes
    Permit storing cert. exceptions in private browsing mode
    Bugzilla 1321420: Add a pref to disable JavaScript in browser requests
    Bugzilla 1321641: Disable svg and mathml in content

[close]

https://www.torproject.org/

[SiLæncer]

Whats new:>>

• Bugfixes on WASTE.
• WASTE now enables key distribution to individual users. Broadcast mode switched off by default.
• Tor updated to 0.2.9.8.

http://sourceforge.net/projects/blackbeltpriv/

[SiLæncer]

Release Notes

WASTE : Updated to 1.8 beta – build 34. Keys can now be distributed to a single user, negating the need to use any broadcast modes. This will improve privacy. Broadcast mode is now disabled by default. When you generate a unique key, and you should, you can now right-click the BIOS node and choose ‘Send Public Key to user’. That then secures you. Only the BIOS nodes will know your key. You can also use this mechanism to enable secure chats to individual users. You send your key to them directly, right-click them and ‘Send Public Key to user’.

[close]

http://sourceforge.net/projects/blackbeltpriv/

[SiLæncer]

Changelog

All Platforms
Update Firefox to 45.7.0esr
Tor to 0.2.9.9
OpenSSL to 1.0.2j
Update Torbutton to 1.9.6.12

    Bug 16622: Timezone spoofing moved to tor-browser.git
    Bug 17334: Move referrer spoofing for .onion domains into tor-browser.git
    Bug 8725: Block addon resource and url fingerprinting with nsIContentPolicy
    Bug 20701: Allow the directory listing stylesheet in the content policy
    Bug 19837: Whitelist internal URLs that Firefox requires for media
    Bug 19206: Avoid SOCKS auth and NEWNYM collisions when sharing a tor client
    Bug 19273: Improve external app launch handling and associated warnings
    Bug 15852: Remove/synchronize Torbutton SOCKS pref logic
    Bug 19733: GETINFO response parser doesn't handle AF_UNIX entries + IPv6
    Bug 17767: Make "JavaScript disabled" more visible in Security Slider
    Bug 20556: Use pt-BR strings from now on
    Bug 20614: Add links to Tor Browser User Manual
    Bug 20414: Fix non-rendering arrow on OS X
    Bug 20728: Fix bad preferences.xul dimensions
    Bug 19898: Use DuckDuckGo on about:tor
    Bug 21091: Hide the update check menu entry when running under the sandbox
    Bug 19459: Move resizing code to tor-browser.git
    Bug 20264: Change security slider to 3 options
    Bug 20347: Enhance security slider's custom mode
    Bug 20123: Disable remote jar on all security levels
    Bug 20244: Move privacy checkboxes to about:preferences#privacy
    Bug 17546: Add tooltips to explain our privacy checkboxes
    Bug 17904: Allow security settings dialog to resize
    Bug 18093: Remove 'Restore Defaults' button
    Bug 20373: Prevent redundant dialogs opening
    Bug 20318: Remove helpdesk link from about:tor
    Bug 21243: Add links for pt, es, and fr Tor Browser manuals
    Bug 20753: Remove obsolete StartPage locale strings
    Bug 21131: Remove 2016 donation banner
    Bug 18980: Remove obsolete toolbar button code
    Bug 18238: Remove unused Torbutton code and strings
    Bug 20388+20399+20394: Code clean-up
    Translation updates

Update Tor Launcher to 0.2.10.3

    Bug 19568: Set CurProcD for Thunderbird/Instantbird
    Bug 19432: Remove special handling for Instantbird/Thunderbird
    Translation updates

Update HTTPS-Everywhere to 5.2.9
Update NoScript to 2.9.5.3
Bug 16622: Spoof timezone with Firefox patch
Bug 17334: Spoof referrer when leaving a .onion domain
Bug 19273: Write C++ patch for external app launch handling
Bug 19459: Size new windows to 1000x1000 or nearest 200x100 (Firefox patch)
Bug 12523: Mark JIT pages as non-writable
Bug 20123: Always block remote jar files
Bug 19193: Reduce timing precision for AudioContext, HTMLMediaElement, and MediaStream
Bug 19164: Remove support for SHA-1 HPKP pins
Bug 19186: KeyboardEvents are only rounding to 100ms
Bug 16998: Isolate preconnect requests to URL bar domain
Bug 19478: Prevent millisecond resolution leaks in File API
Bug 20471: Allow javascript: links from HTTPS first party pages
Bug 20244: Move privacy checkboxes to about:preferences#privacy
Bug 20707: Fix broken preferences tab in non-en-US alpha bundles
Bug 20709: Fix wrong update URL in alpha bundles
Bug 19481: Point the update URL to aus1.torproject.org
Bug 20556: Start using pt-BR instead of pt-PT for Portuguese
Bug 20442: Backport fix for local path disclosure after drag and drop
Bug 20160: Backport fix for broken MP3-playback
Bug 20043: Isolate SharedWorker script requests to first party
Bug 18923: Add script to run all Tor Browser regression tests
Bug 20651: DuckDuckGo does not work with JavaScript disabled
Bug 19336+19835: Enhance about:tbupdate page
Bug 20399+15852: Code clean-up
Windows

    Bug 20981: On Windows, check TZ for timezone first
    Bug 18175: Maximizing window and restarting leads to non-rounded window size
    Bug 13437: Rounded inner window accidentally grows to non-rounded size

OS X

    Bug 20590: Badly resized window due to security slider notification bar on OS X
    Bug 20439: Make the build PIE on OSX

Linux

    Bug 20691: Updater breaks if unix domain sockets are used
    Bug 15953: Weird resizing dance on Tor Browser startup

Build system

    All platforms
        Bug 20927: Upgrade Go to 1.7.4
        Bug 20583: Make the downloads.json file reproducible
        Bug 20133: Don't apply OpenSSL patch anymore
        Bug 19528: Set MOZ_BUILD_DATE based on Firefox version
        Bug 18291: Remove some uses of libfaketime
        Bug 18845: Make zip and tar helpers generate reproducible archives
    OS X
        Bug 20258: Make OS X Tor archive reproducible again
        Bug 20184: Make OS X builds reproducible (use clang for compiling tor)
        Bug 19856: Make OS X builds reproducible (getting libfaketime back)
        Bug 19410: Fix incremental updates by taking signatures into account
        Bug 20210: In dmg2mar, extract old mar file to copy permissions to the new one

[close]

https://www.torproject.org/

[SiLæncer]

PirateBrowser is a bundle package of the Tor client and FireFox Portable browser and custom configs that allow you to circumvent censorship.

PirateBrowser is a bundle package of the Tor client (Vidalia) and FireFox Portable browser (with foxyproxy addon) and some custom configs that allows you to circumvent censorship that certain countries such as Iran, North Korea, United Kingdom, The Netherlands, Belgium, Finland, Denmark, Italy and Ireland impose onto their citizens.

Freeware

https://lilfellauk.wordpress.com/pirate-tor-browser/

[SiLæncer]

Changelog

Changes in version 0.2.9.9 - 2017-01-23

    Major bugfixes (security):
        Downgrade the "-ftrapv" option from "always on" to "only on when --enable-expensive-hardening is provided." This hardening option, like others, can turn survivable bugs into crashes -- and having it on by default made a (relatively harmless) integer overflow bug into a denial-of-service bug. Fixes bug 21278 (TROVE-2017-001); bugfix on 0.2.9.1-alpha.
    Major bugfixes (client, onion service):
        Fix a client-side onion service reachability bug, where multiple socks requests to an onion service (or a single slow request) could cause us to mistakenly mark some of the service's introduction points as failed, and we cache that failure so eventually we run out and can't reach the service. Also resolves a mysterious "Remote server sent bogus reason code 65021" log warning. The bug was introduced in ticket 17218, where we tried to remember the circuit end reason as a uint16_t, which mangled negative values. Partially fixes bug 21056 and fixes bug 20307; bugfix on 0.2.8.1-alpha.
    Minor features (geoip):
        Update geoip and geoip6 to the January 4 2017 Maxmind GeoLite2 Country database.
    Minor bugfixes (portability):
        Avoid crashing when Tor is built using headers that contain CLOCK_MONOTONIC_COARSE, but then tries to run on an older kernel without CLOCK_MONOTONIC_COARSE. Fixes bug 21035; bugfix on 0.2.9.1-alpha.
        Fix Libevent detection on platforms without Libevent 1 headers installed. Fixes bug 21051; bugfix on 0.2.9.1-alpha.

[close]

https://www.torproject.org/

[SiLæncer]

Changelog

All Platforms:

Use the tor-browser-45.7.0esr-6.5-1-build1 tag on tor-browser
Use the THUNDERBIRD_45_7_0_RELEASE tag on comm-esr45
Update tor-browser to 6.5
Update tor-launcher to 0.2.10.3

Windows:

Fix automatic generation of complete MAR files
Trac 21231: Enable intl-api

[close]

https://www.torproject.org/

[SiLæncer]

Whats new:>>

Updated:

    The OpenSSL library to 1.0.2k.
    The zLib library to 1.2.11.
    geoip_c.h with GeoIPCountryWhois.csv released on February 7'th; there are 150033 IP ranges having 32 ranges in the fake "A1" country; all 32 ranges were approximated to real countries.

http://sourceforge.net/projects/advtor/

[SiLæncer]

Securely and anonymously share files and folders using the official Tor servers with the help of this streamlined and very useful app.

License : GPLv3

Changelog

Fixed long-standing macOS X bug that caused OnionShare to crash on older Macs (!)
Added settings dialog to configure connecting to Tor, including support for system Tor
Added support for stealth onion services (advanced option)
Added support for Whonix
Improved AppArmor profiles
Added progress bar for zipping up files
Improved the look of download progress bars
Allows developers to launch OnionShare from source tree, without building a package
Deleted legacy code, and made OnionShare purely use ephemeral Tor onion services
Switched to EFF's diceware wordlist for slugs

[close]

https://onionshare.org/

[SiLæncer]

Changelog

All Platforms

    Update Firefox to 45.8.0esr
    Tor to 0.2.9.10
    OpenSSL to 1.0.2k
    Update Torbutton to 1.9.6.14
        Bug 21396: Allow leaking of resource/chrome URIs (off by default)
        Bug 21574: Add link for zh manual and create manual links dynamically
        Bug 21330: Non-usable scrollbar appears in tor browser security settings
        Translation updates
    Update HTTPS-Everywhere to 5.2.11
    Bug 21514: Restore W^X JIT implementation removed from ESR45
    Bug 21536: Remove scramblesuit bridge
    Bug 21342: Move meek-azure to the meek.azureedge.net backend and cymrubridge02 bridge

Linux

    Bug 21326: Update the "Using a system-installed Tor" section in start script

[close]

https://www.torproject.org/

[SiLæncer]

Changelog

Changes in version 0.2.9.10 - 2017-03-01

    Major bugfixes (directory authority, 0.3.0.3-alpha):
        During voting, when marking a relay as a probable sybil, do not clear its BadExit flag: sybils can still be bad in other ways too. (We still clear the other flags.) Fixes bug 21108; bugfix on 0.2.0.13-alpha.
    Major bugfixes (IPv6 Exits, backport from 0.3.0.3-alpha):
        Stop rejecting all IPv6 traffic on Exits whose exit policy rejects any IPv6 addresses. Instead, only reject a port over IPv6 if the exit policy rejects that port on more than an IPv6 /16 of addresses. This bug was made worse by 17027 in 0.2.8.1-alpha, which rejected a relay's own IPv6 address by default. Fixes bug 21357; bugfix on commit 004f3f4e53 in 0.2.4.7-alpha.

    Major bugfixes (parsing, also in 0.3.0.4-rc):
        Fix an integer underflow bug when comparing malformed Tor versions. This bug could crash Tor when built with --enable-expensive-hardening, or on Tor 0.2.9.1-alpha through Tor 0.2.9.8, which were built with -ftrapv by default. In other cases it was harmless. Part of TROVE-2017-001. Fixes bug 21278; bugfix on 0.0.8pre1. Found by OSS-Fuzz.
    Minor features (directory authorities, also in 0.3.0.4-rc):
        Directory authorities now reject descriptors that claim to be malformed versions of Tor. Helps prevent exploitation of bug 21278.
        Reject version numbers with components that exceed INT32_MAX. Otherwise 32-bit and 64-bit platforms would behave inconsistently. Fixes bug 21450; bugfix on 0.0.8pre1.
    Minor features (geoip):
        Update geoip and geoip6 to the February 8 2017 Maxmind GeoLite2 Country database.
    Minor features (portability, compilation, backport from 0.3.0.3-alpha):
        Autoconf now checks to determine if OpenSSL structures are opaque, instead of explicitly checking for OpenSSL version numbers. Part of ticket 21359.
        Support building with recent LibreSSL code that uses opaque structures. Closes ticket 21359.
    Minor bugfixes (code correctness, also in 0.3.0.4-rc):
        Repair a couple of (unreachable or harmless) cases of the risky comparison-by-subtraction pattern that caused bug 21278.
    Minor bugfixes (tor-resolve, backport from 0.3.0.3-alpha):
        The tor-resolve command line tool now rejects hostnames over 255 characters in length. Previously, it would silently truncate them, which could lead to bugs. Fixes bug 21280; bugfix on 0.0.9pre5. Patch by "junglefowl".

[close]

https://www.torproject.org/