Thema: Neue Tor-Version: sicherer und anonymer

[SiLæncer]

Securely and anonymously share files and folders using the official Tor servers with the help of this streamlined and very useful app.

License: GPLv3

Changelog

    Specifically check these new/updated sections:

    Receive Files and Message
    Custom Titles

[close]

https://onionshare.org/

[SiLæncer]

Whats new:>>

WASTE : Updated to 1.8.0.build.195. Switch to Socks5 for proxy work.

Tor : 0.4.5.7 with Libevent 2.1.12-stable, OpenSSL 1.1.1k, Zlib 1.2.8, Liblzma
5.2.4, Libzstd 1.4.8 and Unknown N/A as libc. Static.

Purple i2p daemon : v2.37.0.

http://sourceforge.net/projects/blackbeltpriv/

[SiLæncer]

OnionFruit Connect permits you to continue using your browser of choice to connect to the TOR network.

Having the ability to use a browser that you are already comfortable with makes using TOR more of a seamless process. OnionFruit Connect will initiate the TOR service and then configures your proxy settings allowing your apps to be routed through TOR's tunnel. You will be notified know you're protected confirming that all your internet traffic is being passed through the TOR tunnel safely encrypted. This process ensures that every single site you visit gets routed through multiple servers to help mask your actions making them difficult to track.

Freeware

Changelog

    Settings:

    Remove proxy settings:

    We've decided to remove these settings due to low usage, the client not using proxy settings itself and the lack of support for NTLM/Keberos, which is the most common corporate proxy authentication.

    Backend:

    Update Dependencies:

    Add extra safety checks for SecurDNS configs

[close]

https://github.com/dragonfruitnetwork/onionfruit

[SiLæncer]

Whats new:>>

    Tor:

    Fix pluggable transports not working

    Backend:

    Improve loading times and slightly reduce memory consumption

https://github.com/dragonfruitnetwork/onionfruit

[SiLæncer]

Changelog

    New feature: Custom titles can be set for OnionShare's various modes
    New feature: Receive mode supports notification webhooks
    New feature: Receive mode supports submitting messages as well as files
    New feature: New ASCII art banner and prettier verbose output
    New feature: Partial support for range requests (pausing and resuming in HTTP)
    Updated Tor to 0.4.5.7
    Updated built-in obfs4 bridges
    Various bug fixes

[close]

https://onionshare.org/

[SiLæncer]

Release Notes

Tor Browser 10.0.17 is now available from the Tor Browser download page and also from our distribution directory.

This version updates Firefox to 78.11esr. In addition, Tor Browser 10.0.17 updates NoScript to 11.2.8, HTTPS Everywhere to 2021.4.15, and Tor to 0.4.5.8. This version includes important security updates to Firefox for Desktop.

Warning:
Tor Browser will stop supporting version 2 onion services later this year. Please see the previously published deprecation timeline. Migrate your services and update your bookmarks to version 3 onion services as soon as possible.

Note: The Android Tor Browser update will be available next week.

The full changelog since Desktop Tor Browser 10.0.16:

    Windows + OS X + Linux
        Update Firefox to 78.11.0esr
        Update HTTPS Everywhere to 2021.4.15
        Update NoScript to 11.2.8
        Update Tor to 0.4.5.8
        Bug 27002: (Mozilla 1673237) Always allow SVGs on about: pages
        Bug 40432: Prevent probing installed applications
        Bug 40037: Announce v2 onion service deprecation on about:tor

[close]

https://www.torproject.org/

[SiLæncer]

Whats new:>>

Backend

Update Dependencies
Prevent crash reports being reported multiple times

IPC

Prevent crash from Tor killswitch inside control console

https://github.com/dragonfruitnetwork/onionfruit

[SiLæncer]

Release Notes

There's a new release candidate available for download. If you build Tor from source, you can download the source code for 0.4.6.4-rc from the download page on the website. Packages should be available over the coming weeks, with a new alpha Tor Browser release likely next week.

Remember, this is a not a stable release yet: but we still hope that people will try it out and look for bugs before the official stable release comes out in June.

Tor 0.4.6.4-rc fixes a few bugs from previous releases. This, we hope, the final release candidate in its series: unless major new issues are found, the next release will be stable.

    Minor features (compatibility):

        Remove an assertion function related to TLS renegotiation. It was used nowhere outside the unit tests, and it was breaking compilation with recent alpha releases of OpenSSL 3.0.0. Closes ticket 40399.

    Minor bugfixes (consensus handling):

        Avoid a set of bugs that could be caused by inconsistently preferring an out-of-date consensus stored in a stale directory cache over a more recent one stored on disk as the latest consensus. Fixes bug 40375; bugfix on 0.3.1.1-alpha.

    Minor bugfixes (control, sandbox):

        Allow the control command SAVECONF to succeed when the seccomp sandbox is enabled, and make SAVECONF keep only one backup file to simplify implementation. Previously SAVECONF allowed a large number of backup files, which made it incompatible with the sandbox. Fixes bug 40317; bugfix on 0.2.5.4-alpha. Patch by Daniel Pinto.

    Minor bugfixes (metrics port):

        Fix a bug that made tor try to re-bind() on an already open MetricsPort every 60 seconds. Fixes bug 40370; bugfix on 0.4.5.1-alpha.

    Removed features:

        Remove unneeded code for parsing private keys in directory documents. This code was only used for client authentication in v2 onion services, which are now unsupported. Closes ticket 40374.

[close]

https://www.torproject.org/

[SiLæncer]

Whats new:>>

Backend

Update dependencies
Update Tor ( 0.4.5.8 )

https://github.com/dragonfruitnetwork/onionfruit

[SiLæncer]

Release Notes

  Tor 0.4.5.9 fixes several security issues, including a
  denial-of-service attack against onion service clients, and another
  denial-of-service attack against relays. Everybody should upgrade to
  one of 0.3.5.15, 0.4.4.9, 0.4.5.9, or 0.4.6.5.

  o Major bugfixes (security, backport from 0.4.6.5):
    - Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell on
      half-closed streams. Previously, clients failed to validate which
      hop sent these cells: this would allow a relay on a circuit to end
      a stream that wasn't actually built with it. Fixes bug 40389;
      bugfix on 0.3.5.1-alpha. This issue is also tracked as TROVE-2021-
      003 and CVE-2021-34548.

  o Major bugfixes (security, defense-in-depth, backport from 0.4.6.5):
    - Detect more failure conditions from the OpenSSL RNG code.
      Previously, we would detect errors from a missing RNG
      implementation, but not failures from the RNG code itself.
      Fortunately, it appears those failures do not happen in practice
      when Tor is using OpenSSL's default RNG implementation. Fixes bug
      40390; bugfix on 0.2.8.1-alpha. This issue is also tracked as
      TROVE-2021-004. Reported by Jann Horn at Google's Project Zero.

  o Major bugfixes (security, denial of service, backport from 0.4.6.5):
    - Resist a hashtable-based CPU denial-of-service attack against
      relays. Previously we used a naive unkeyed hash function to look
      up circuits in a circuitmux object. An attacker could exploit this
      to construct circuits with chosen circuit IDs, to create
      collisions and make the hash table inefficient. Now we use a
      SipHash construction here instead. Fixes bug 40391; bugfix on
      0.2.4.4-alpha. This issue is also tracked as TROVE-2021-005 and
      CVE-2021-34549. Reported by Jann Horn from Google's Project Zero.
    - Fix an out-of-bounds memory access in v3 onion service descriptor
      parsing. An attacker could exploit this bug by crafting an onion
      service descriptor that would crash any client that tried to visit
      it. Fixes bug 40392; bugfix on 0.3.0.1-alpha. This issue is also
      tracked as TROVE-2021-006 and CVE-2021-34550. Reported by Sergei
      Glazunov from Google's Project Zero.

  o Minor features (compatibility, backport from 0.4.6.4-rc):
    - Remove an assertion function related to TLS renegotiation. It was
      used nowhere outside the unit tests, and it was breaking
      compilation with recent alpha releases of OpenSSL 3.0.0. Closes
      ticket 40399.

  o Minor features (geoip data):
    - Update the geoip files to match the IPFire Location Database, as
      retrieved on 2021/06/10.

  o Minor bugfixes (control, sandbox, backport from 0.4.6.4-rc):
    - Allow the control command SAVECONF to succeed when the seccomp
      sandbox is enabled, and make SAVECONF keep only one backup file to
      simplify implementation. Previously SAVECONF allowed a large
      number of backup files, which made it incompatible with the
      sandbox. Fixes bug 40317; bugfix on 0.2.5.4-alpha. Patch by
      Daniel Pinto.

  o Minor bugfixes (metrics port, backport from 0.4.6.4-rc):
    - Fix a bug that made tor try to re-bind() on an already open
      MetricsPort every 60 seconds. Fixes bug 40370; bugfix
      on 0.4.5.1-alpha.

[close]

https://www.torproject.org/

[SiLæncer]

Whats new:>>

 * Windows + OS X + Linux
   * Update Tor to 0.4.5.9

https://www.torproject.org/

[SiLæncer]

Whats new:>>

Backend

Update dependencies
Improve handling of invalid countries being downloaded by tor

https://github.com/dragonfruitnetwork/onionfruit

[SiLæncer]

Release Notes

Tor Browser 10.5a17 is now available from the Tor Browser download page and also from our distribution directory.

Note: This is an alpha release, an experimental version for users who want to help us test new features. For everyone else, we recommend downloading the latest stable release instead.

This version updates Tor to 0.4.6.5. This version is the last planned version before Tor Browser 10.5 is considered stable. Please report any bugs as soon as possible. In particular, any bugs in the new initial connect screen

Warning:

Tor Browser Alpha does not support version 2 onion services. Tor Browser (Stable) will stop supporting version 2 onion services later this year. Please see the deprecation F.A.Q. entry regarding Tor version 0.4.6. Migrate your services and update your bookmarks to version 3 onion services as soon as possible.

The full changelog since Tor Browser 10.5a16:

    All Platforms
        Update NoScript to 11.2.9
        Update Tor to 0.4.6.5
        Update Tor Launcher to 0.2.29
    Windows + OS X + Linux
        Bug 34345: "Don't Bootstrap" Startup Mode
        Bug 40302: Update version of snowflake
        Bug 40455: Block or recover background requests after bootstrap
        Bug 40456: Update the SecureDrop HTTPS-Everywhere update channel
        Bug 40475: Include clearing CORS preflight cache
        Bug 40478: Onion alias url rewrite is broken
    Build System
        All Platforms
            Update Go to 1.15.13
        Android
            Bug 40313: Use apt-get to install openjdk-8 .deb files with their dependencies

[close]

https://www.torproject.org/

[SiLæncer]

Whats new:>>

WASTE: Updated to 1.8.0.build.198. Improvements to User Interface. AntiSpoof zero false positives.
Tor: 0.4.6.5 with Libevent 2.1.12-stable, OpenSSL 3.0.0-alpha17, Zlib 1.2.8, Liblzma 5.2.4, Libzstd 1.4.8 and Unknown NA as libc. Static.
Purple i2p daemon : v2.38.0.
NOTE: v2 Onion addresses are deprecated in this release. Only v3 onion addresses are supported from here on.

http://sourceforge.net/projects/blackbeltpriv/

[SiLæncer]

Changelog

 * All Platforms
   * Update NoScript to 11.2.9
   * Update Tor Launcher to 0.2.29
   * Translations update
   * Bug 25483: Provide Snowflake based on Pion for Windows, macOS, and Linux
   * Bug 33761: Remove unnecessary snowflake dependencies
   * Bug 40064: Bump libevent to 2.1.12 [tor-browser-build]
   * Bug 40137: Migrate https-everywhere storage to idb [tor-browser]
   * Bug 40261: Bump versions of snowflake and webrtc [tor-browser-build]
   * Bug 40263: Update domain front for Snowflake [tor-browser-build]
   * Bug 40302: Update version of snowflake [tor-browser-build]
   * Bug 40030: DuckDuckGo redirect to html doesn't work [torbutton]
 * Windows + OS X + Linux
   * Bug 27476: Implement about:torconnect captive portal within Tor Browser [tor-browser]
   * Bug 32228: Bookmark TPO support domains in Tor Browser
   * Bug 33803: Add a secondary nightly MAR signing key [tor-browser]
   * Bug 33954: Consider different approach for Bug 2176
   * Bug 34345: "Don't Bootstrap" Startup Mode
   * Bug 40011: Rename tor-browser-brand.ftl to brand.ftl [torbutton]
   * Bug 40012: Fix about:tor not loading some images in 82 [torbutton]
   * Bug 40138: Move our primary nightly MAR signing key to tor-browser [tor-browser-build]
   * Bug 40428: Correct minor Cryptocurrency warning string typo [tor-browser]
   * Bug 40429: Update Onboarding for 10.5 [tor-browser]
   * Bug 40455: Block or recover background requests after bootstrap [tor-browser]
   * Bug 40456: Update the SecureDrop HTTPS-Everywhere update channel [tor-browser]
   * Bug 40475: Include clearing CORS preflight cache [tor-browser]
   * Bug 40478: Onion alias url rewrite is broken [tor-browser]
   * Bug 40484: Bootstrapping page show Quickstart text [tor-browser]
   * Bug 40490: BridgeDB bridge captcha selection is broken in alpha [tor-browser]
   * Bug 40495: Onion pattern is focusable by click on about:torconnect [tor-browser]
   * Bug 40499: Onion Alias doesn't work with TOR_SKIP_LAUNCH [tor-browser]
 * Android
   * Bug 30318: Integrate snowflake into mobile Tor Browser
   * Bug 40206: Disable the /etc/hosts parser [tor-browser]
 * Linux
   * Bug 40089: Remove CentOS 6 support for Tor Browser 10.5 [tor-browser]
 * Build System
   * All Platforms
     * Update Go to 1.15.13
     * Bug 23631: Use rootless containers [tor-browser-build]
     * Bug 33693: Change snowflake and meek dummy address [tor-browser]
     * Bug 40016: getfpaths is not setting origin_project [rbm]
     * Bug 40169: Update apt package cache after calling pre_pkginst, too [tor-browser-build]
     * Bug 40194: Remove osname part in cbindgen filename [tor-browser-build]
   * Windows + OS X + Linux
     * Bug 40081: Build Mozilla code with --enable-rust-simd [tor-browser-build]
     * Bug 40104: Use our TMPDIR when creating our .mar files [tor-browser-build]
     * Bug 40133: Bump Rust version for ESR 78 to 1.43.0 [tor-browser-build]
     * Bug 40166: Update apt cache before calling pre_pkginst in container-image config [tor-browser-build]
   * Android
     * Bug 28672: Android reproducible build of Snowflake
     * Bug 40313: Use apt-get to install openjdk-8 .deb files with their dependencies [tor-browser-build]
   * Windows
     * Bug 34360: Bump binutils to 2.35.1
     * Bug 40131: Remove unused binutils patches [tor-browser-build]
   * Linux
     * Bug 26238: Move to Debian Jessie for our Linux builds
     * Bug 31729: Support Wayland
     * Bug 40041: Remove CentOS 6 support for 10.5 series [tor-browser-build]
     * Bug 40103: Add i386 pkg-config path for linux-i686 [tor-browser-build]
     * Bug 40112: Strip libstdc++ we ship [tor-browser-build]
     * Bug 40118: Add missing libdrm dev package to firefox container [tor-browser-build]
     * Bug 40235: Bump apt for Jessie containers [tor-browser-build]

[close]

Download: https://dist.torproject.org/torbrowser/10.5/

https://www.torproject.org/