Thema: Neue Tor-Version: sicherer und anonymer

[SiLæncer]

Whats new:>>

• WASTE: Updated to 1.8 beta – build 37. Improvements to Onion Address handling.
• Tor: Updated to 0.3.0.7.

http://sourceforge.net/projects/blackbeltpriv/

[SiLæncer]

Advanced Onion Router is designed to bypass various barriers with a secure, anonymous Internet connection. The program attempts to circumvent firewalls, website censorship, web tracking tools, and more. Allows user of almost any application that connects to the Internet. Unlike similar clients that require a configurable proxy, AOR is able to "force" a program to use the Tor network.

License: Open Source

Changelog

Updated:

    geoip_c.h with GeoIPCountryWhois.csv released on June 7'th; there are 153678 IP ranges having 32 ranges in the fake "A1" country; 31 ranges were approximated to real countries.
    The OpenSSL library to 1.1.0f.

[close]

https://sourceforge.net/projects/advtor/

[SiLæncer]

Changelog

Tor 0.3.0.8 fixes a pair of bugs that would allow an attacker to remotely crash a hidden service with an assertion failure. Anyone running a hidden service should upgrade to this version, or to some other version with fixes for TROVE-2017-004 and TROVE-2017-005.

Tor 0.3.0.8 also includes fixes for several key management bugs that sometimes made relays unreliable, as well as several other bugfixes described below.

Changes in version 0.3.0.8 - 2017-06-08

    Major bugfixes (hidden service, relay, security, backport from 0.3.1.3-alpha):
        Fix a remotely triggerable assertion failure when a hidden service handles a malformed BEGIN cell. Fixes bug 22493, tracked as TROVE-2017-004 and as CVE-2017-0375; bugfix on 0.3.0.1-alpha.
        Fix a remotely triggerable assertion failure caused by receiving a BEGIN_DIR cell on a hidden service rendezvous circuit. Fixes bug 22494, tracked as TROVE-2017-005 and CVE-2017-0376; bugfix on 0.2.2.1-alpha.
    Major bugfixes (relay, link handshake, backport from 0.3.1.3-alpha):
        When performing the v3 link handshake on a TLS connection, report that we have the x509 certificate that we actually used on that connection, even if we have changed certificates since that connection was first opened. Previously, we would claim to have used our most recent x509 link certificate, which would sometimes make the link handshake fail. Fixes one case of bug 22460; bugfix on 0.2.3.6-alpha.

    Major bugfixes (relays, key management, backport from 0.3.1.3-alpha):
        Regenerate link and authentication certificates whenever the key that signs them changes; also, regenerate link certificates whenever the signed key changes. Previously, these processes were only weakly coupled, and we relays could (for minutes to hours) wind up with an inconsistent set of keys and certificates, which other relays would not accept. Fixes two cases of bug 22460; bugfix on 0.3.0.1-alpha.
        When sending an Ed25519 signing->link certificate in a CERTS cell, send the certificate that matches the x509 certificate that we used on the TLS connection. Previously, there was a race condition if the TLS context rotated after we began the TLS handshake but before we sent the CERTS cell. Fixes a case of bug 22460; bugfix on 0.3.0.1-alpha.
    Major bugfixes (hidden service v3, backport from 0.3.1.1-alpha):
        Stop rejecting v3 hidden service descriptors because their size did not match an old padding rule. Fixes bug 22447; bugfix on tor-0.3.0.1-alpha.
    Minor features (fallback directory list, backport from 0.3.1.3-alpha):
        Replace the 177 fallbacks originally introduced in Tor 0.2.9.8 in December 2016 (of which ~126 were still functional) with a list of 151 fallbacks (32 new, 119 unchanged, 58 removed) generated in May 2017. Resolves ticket 21564.
    Minor bugfixes (configuration, backport from 0.3.1.1-alpha):
        Do not crash when starting with LearnCircuitBuildTimeout 0. Fixes bug 22252; bugfix on 0.2.9.3-alpha.
    Minor bugfixes (correctness, backport from 0.3.1.3-alpha):
        Avoid undefined behavior when parsing IPv6 entries from the geoip6 file. Fixes bug 22490; bugfix on 0.2.4.6-alpha.
    Minor bugfixes (link handshake, backport from 0.3.1.3-alpha):
        Lower the lifetime of the RSA->Ed25519 cross-certificate to six months, and regenerate it when it is within one month of expiring. Previously, we had generated this certificate at startup with a ten-year lifetime, but that could lead to weird behavior when Tor was started with a grossly inaccurate clock. Mitigates bug 22466; mitigation on 0.3.0.1-alpha.
    Minor bugfixes (memory leak, directory authority, backport from 0.3.1.2-alpha):
        When directory authorities reject a router descriptor due to keypinning, free the router descriptor rather than leaking the memory. Fixes bug 22370; bugfix on 0.2.7.2-alpha.

[close]

https://www.torproject.org/

[SiLæncer]

Whats new:>>

Update Firefox to 52.2.0esr
Update Tor to 0.3.0.8
Update Torbutton to 1.9.7.4
Bug 22542: Security Settings window too small on macOS 10.12
Update HTTPS-Everywhere to 5.2.18
Bug 22362: NoScript's XSS filter freezes the browser

https://www.torproject.org/

[SiLæncer]

Changelog

All Platforms

    Use the tor-browser-45.9.0esr-6.5-1-build3 tag on tor-browser
    Update tor-browser to 6.5.2
    Add some missing localization for Twitter's actions
    Trac 21736: Hide the timestamp and account from message selection templates

[close]

https://www.torproject.org/

[SiLæncer]

Release Notes

Source code for a new Tor release (0.3.0.9) is now available on the website.

Tor 0.3.0.9 fixes a path selection bug that would allow a client to use a guard that was in the same network family as a chosen exit relay. This is a security regression; all clients running earlier versions of 0.3.0.x or 0.3.1.x should upgrade to 0.3.0.9 or 0.3.1.4-alpha when packages become available.  Packages should be available soon, along with a Tor Browser release early next week.

One last reminder: Tor 0.2.4, 0.2.6, and 0.2.7 will no longer be supported after 1 August of this year.  Tor 0.2.8 will not be supported after 1 Jan of 2018.  Tor 0.2.5 will not be supported after 1 May of 2018.  If you need a release with long-term support, 0.2.9 is
what we recommend: we plan to support it until at least 1 Jan 2020.

This release also backports several other bugfixes from the 0.3.1.x series.

Changes in version 0.3.0.9 - 2017-06-29

    Major bugfixes (path selection, security, backport from 0.3.1.4-alpha):   
        When choosing which guard to use for a circuit, avoid the exit's family along with the exit itself. Previously, the new guard selection logic avoided the exit, but did not consider its family. Fixes bug 22753; bugfix on 0.3.0.1-alpha. Tracked as TROVE-2016- 006 and CVE-2017-0377. 
    Major bugfixes (entry guards, backport from 0.3.1.1-alpha): 
        Don't block bootstrapping when a primary bridge is offline and we can't get its descriptor. Fixes bug 22325; fixes one case of bug 21969; bugfix on 0.3.0.3-alpha. 

[close]

https://www.torproject.org/

[SiLæncer]

Changelog

This release features an important security update to Tor.

We are updating Tor to version 0.3.0.9, fixing a path selection bug that would allow a client to use a guard that was in the same network family as a chosen exit relay. This release also updates HTTPS-Everywhere to 5.2.19.

Here is the full changelog since 7.0.1:

    All Platforms
        Update Tor to 0.3.0.9, fixing bug #22753
        Update HTTPS-Everywhere to 5.2.19

[close]

https://www.torproject.org/

[SiLæncer]

Changelog

All platforms:

Update Firefox to 52.3.0esr
Update Tor to 0.3.0.10
Update HTTPS-Everywhere to 5.2.21

Update Torbutton to 1.9.7.5:

Bug 21999: Fix display of language prompt in non-en-US locales
Bug 18193: Don't let about:tor have chrome privileges
Bug 22535: Search on about:tor discards search query
Bug 21948: Going back to about:tor page gives "Address isn't valid" error
Code clean-up
Translations update

Update Tor Launcher to 0.2.12.3:

Bug 22592: Default bridge settings are not removed

Update NoScript to 5.0.8.1:

Bug 22362: Remove workaround for XSS related browser freezing
Bug 22067: NoScript Click-to-Play bypass with embedded videos and audio
Bug 21321: Exempt .onions from HTTP related security warnings
Bug 22073: Disable GetAddons option on addons page
Bug 22884: Fix broken about:tor page on higher security levels

Windows:

Bug 22829: Remove default obfs4 bridge riemann.
Bug 21617: Fix single RWX page on Windows (included in 52.3.0esr)

[close]

https://www.torproject.org/

[SiLæncer]

Release Notes

Source code for a new Tor release (0.3.0.10) is now available on the website; packages should be available over the next several days. The Tor Browser team tells me they will have a release out next week.

Reminder: Tor 0.2.4, 0.2.6, and 0.2.7 are no longer supported, as of 1 August of this year.  If you need a release with long-term support, 0.2.9 is what we recommend: we plan to support it until at least 1 Jan 2020.
 

Tor 0.3.0.10 backports a collection of small-to-medium bugfixes from the current Tor alpha series. OpenBSD users and TPROXY users should upgrade; others are probably okay sticking with 0.3.0.9.
Changes in version 0.3.0.10 - 2017-08-02

    Major features (build system, continuous integration, backport from 0.3.1.5-alpha):
        Tor's repository now includes a Travis Continuous Integration (CI) configuration file (.travis.yml). This is meant to help new developers and contributors who fork Tor to a Github repository be better able to test their changes, and understand what we expect to pass. To use this new build feature, you must fork Tor to your Github account, then go into the "Integrations" menu in the repository settings for your fork and enable Travis, then push your changes. Closes ticket 22636.
    Major bugfixes (linux TPROXY support, backport from 0.3.1.1-alpha):
        Fix a typo that had prevented TPROXY-based transparent proxying from working under Linux. Fixes bug 18100; bugfix on 0.2.6.3-alpha. Patch from "d4fq0fQAgoJ".

 

    Major bugfixes (openbsd, denial-of-service, backport from 0.3.1.5-alpha):
        Avoid an assertion failure bug affecting our implementation of inet_pton(AF_INET6) on certain OpenBSD systems whose strtol() handling of "0xfoo" differs from what we had expected. Fixes bug 22789; bugfix on 0.2.3.8-alpha. Also tracked as TROVE-2017-007.
    Minor features (backport from 0.3.1.5-alpha):
        Update geoip and geoip6 to the July 4 2017 Maxmind GeoLite2 Country database.
    Minor bugfixes (bandwidth accounting, backport from 0.3.1.2-alpha):
        Roll over monthly accounting at the configured hour and minute, rather than always at 00:00. Fixes bug 22245; bugfix on 0.0.9rc1. Found by Andrey Karpov with PVS-Studio.
    Minor bugfixes (compilation warnings, backport from 0.3.1.5-alpha):
        Suppress -Wdouble-promotion warnings with clang 4.0. Fixes bug 22915; bugfix on 0.2.8.1-alpha.
        Fix warnings when building with libscrypt and openssl scrypt support on Clang. Fixes bug 22916; bugfix on 0.2.7.2-alpha.
        When building with certain versions of the mingw C header files, avoid float-conversion warnings when calling the C functions isfinite(), isnan(), and signbit(). Fixes bug 22801; bugfix on 0.2.8.1-alpha.
    Minor bugfixes (compilation, mingw, backport from 0.3.1.1-alpha):
        Backport a fix for an "unused variable" warning that appeared in some versions of mingw. Fixes bug 22838; bugfix on 0.2.8.1-alpha.
    Minor bugfixes (coverity build support, backport from 0.3.1.5-alpha):
        Avoid Coverity build warnings related to our BUG() macro. By default, Coverity treats BUG() as the Linux kernel does: an instant abort(). We need to override that so our BUG() macro doesn't prevent Coverity from analyzing functions that use it. Fixes bug 23030; bugfix on 0.2.9.1-alpha.
    Minor bugfixes (directory authority, backport from 0.3.1.1-alpha):
        When rejecting a router descriptor for running an obsolete version of Tor without ntor support, warn about the obsolete tor version, not the missing ntor key. Fixes bug 20270; bugfix on 0.2.9.3-alpha.
    Minor bugfixes (linux seccomp2 sandbox, backport from 0.3.1.5-alpha):
        Avoid a sandbox failure when trying to re-bind to a socket and mark it as IPv6-only. Fixes bug 20247; bugfix on 0.2.5.1-alpha.
    Minor bugfixes (unit tests, backport from 0.3.1.5-alpha):
        Fix a memory leak in the link-handshake/certs_ok_ed25519 test. Fixes bug 22803; bugfix on 0.3.0.1-alpha.

[close]

https://www.torproject.org/

[SiLæncer]

Whats new:>>

Tor: Updated to 0.3.0.10

http://sourceforge.net/projects/blackbeltpriv/

[SiLæncer]

Access the Tor network in the blink of an eye by resorting to this lightweight app that ensures your anonymity while surfing the web, regardless of your choice of browser.

Freeware

Whats new:>>

New design
Added a notification
Safety catch - if you go offline tor turns off so you can reconnect
New icons

https://dfnet.ml/onionfruit/

[SiLæncer]

PirateBrowser is a bundle package of the Tor client and FireFox Portable browser and custom configs that allow you to circumvent censorship.

PirateBrowser is a bundle package of the Tor client (Vidalia) and FireFox Portable browser (with foxyproxy addon) and some custom configs that allows you to circumvent censorship that certain countries such as Iran, North Korea, United Kingdom, The Netherlands, Belgium, Finland, Denmark, Italy and Ireland impose onto their citizens.

Freeware

https://lilfellauk.wordpress.com/pirate-tor-browser/

[SiLæncer]

Changelog

All Platforms:

Update Torbutton to 1.9.7.6
Bug 22989: Fix dimensions of new windows on macOS
Translations update
Update HTTPS-Everywhere to 2017.8.31
Update NoScript to 5.0.9
Bug 23166: Add new obfs4 bridge to the built-in ones
Bug 23258: Fix broken HTTPS-Everywhere on higher security levels
Bug 21270: NoScript settings break WebExtensions add-ons

[close]

https://www.torproject.org/

[SiLæncer]

Whats new:>>

Tor: Updated to 0.3.0.10
Bug Fixes

http://sourceforge.net/projects/blackbeltpriv/

[SiLæncer]

Release Notes

Minor features (code style, backport from 0.3.1.7):

    Add "Falls through" comments to our codebase, in order to silence GCC 7's -Wimplicit-fallthrough warnings. Patch from Andreas Stieger. Closes ticket 22446.

Minor features:

    Update geoip and geoip6 to the September 6 2017 Maxmind GeoLite2 Country database.

Minor bugfixes (compilation, backport from 0.3.1.7):

    Avoid compiler warnings in the unit tests for calling tor_sscanf() with wide string outputs. Fixes bug 15582; bugfix on 0.2.6.2-alpha.

Minor bugfixes (controller, backport from 0.3.1.7):

    Do not crash when receiving a HSPOST command with an empty body. Fixes part of bug 22644; bugfix on 0.2.7.1-alpha.
    Do not crash when receiving a POSTDESCRIPTOR command with an empty body. Fixes part of bug 22644; bugfix on 0.2.0.1-alpha.

Minor bugfixes (file limits, osx, backport from 0.3.1.5-alpha):

    When setting the maximum number of connections allowed by the OS, always allow some extra file descriptors for other files. Fixes bug 22797; bugfix on 0.2.0.10-alpha.

Minor bugfixes (logging, relay, backport from 0.3.1.6-rc):

    Remove a forgotten debugging message when an introduction point successfully establishes an onion service prop224 circuit with a client.
    Change three other log_warn() for an introduction point to protocol warnings, because they can be failure from the network and are not relevant to the operator. Fixes bug 23078; bugfix on 0.3.0.1-alpha and 0.3.0.2-alpha.

[close]

https://www.torproject.org/