Thema: Neue Tor-Version: sicherer und anonymer

[SiLæncer]

Changelog

All Platforms:

Use the tor-browser-45.8.0esr-6.5-2-build1 tag on tor-browser
Use the THUNDERBIRD_45_8_0_RELEASE tag on comm-esr45
Update tor-browser to 6.5.1
Trac 21634: Restore the ability to auto login, but default to off
Trac 17517: Consider using different color for "Add Exception"

[close]

https://www.torproject.org/

[SiLæncer]

Whats new:>>

• WASTE: Updated to 1.8 beta – build 36. Improved Onion Addressing. WASTE can now be operated in Onion Address mode exclusively if required.
• Tor: Updated to 0.2.9.10.
• OpenSSL: Updated to OpenSSL 1.0.2k.


http://sourceforge.net/projects/blackbeltpriv/

[SiLæncer]

Advanced Onion Router is designed to bypass various barriers with a secure, anonymous Internet connection. The program attempts to circumvent firewalls, website censorship, web tracking tools, and more. Allows user of almost any application that connects to the Internet. Unlike similar clients that require a configurable proxy, AOR is able to "force" a program to use the Tor network.

License: Open Source

Changelog

DirServers was renamed to DirAuthorities, to update the list of directory authorities in older AdvOR.ini files.
as2asm can now handle files larger than 73 MB.

Updated:

    Lbraries: libevent-2.1.8-stable, openssl-1.1.0e, zlib-1.2.1;
    The AS path tree with latest AS path definitions from cidr-report.org; there are 281211 AS path definitions;
    csv2asm with latest AS path definitions;
    geoip_c.h with GeoIPCountryWhois.csv released on April 6th; there are 151790 IP ranges having 33 ranges in the fake "A1" country; 32 ranges were approximated to real countries;
    Language strings: 491, 531, 657.

[close]

https://sourceforge.net/projects/advtor/

[SiLæncer]

Changelog

All Platforms:

Update Firefox to 45.9.0esr
Update HTTPS-Everywhere to 5.2.14
Update NoScript to 5.0.2
Bug 21555+16450: Don't remove Authorization header on subdomains (e.g. Twitter)
Bug 19316: Make sure our Windows updates can deal with the SSE2 requirement
Bug 21917: Add new obfs4 bridges
Bug 21918: Move meek-amazon to d2cly7j4zqgua7.cloudfront.net backend

[close]

Download : https://dist.torproject.org/torbrowser/6.5.2/

https://www.torproject.org/

[SiLæncer]

PirateBrowser is a bundle package of the Tor client and FireFox Portable browser and custom configs that allow you to circumvent censorship.

PirateBrowser is a bundle package of the Tor client (Vidalia) and FireFox Portable browser (with foxyproxy addon) and some custom configs that allows you to circumvent censorship that certain countries such as Iran, North Korea, United Kingdom, The Netherlands, Belgium, Finland, Denmark, Italy and Ireland impose onto their citizens.

Freeware

https://lilfellauk.wordpress.com/pirate-tor-browser/

[SiLæncer]

Release Notes

Tor 0.3.0.6 is the first stable release of the Tor 0.3.0 series.

With the 0.3.0 series, clients and relays now use Ed25519 keys to authenticate their link connections to relays, rather than the old RSA1024 keys that they used before. (Circuit crypto has been Curve25519-authenticated since 0.2.4.8-alpha.) We have also replaced the guard selection and replacement algorithm to behave more robustly in the presence of unreliable networks, and to resist guard- capture attacks.

This series also includes numerous other small features and bugfixes, along with more groundwork for the upcoming hidden-services revamp.

Per our stable release policy, we plan to support the Tor 0.3.0 release series for at least the next nine months, or for three months after the first stable release of the 0.3.1 series: whichever is longer. If you need a release with long-term support, we recommend that you stay with the 0.2.9 series.

If you build Tor from source, you can find it at the usual place on the website. Packages should be ready over the next weeks, with a Tor Browser release in late May or early June.

[close]

Quelle & weitere Infos : https://blog.torproject.org/blog/tor-0306-released-new-series-stable

https://www.torproject.org/

[SiLæncer]

Changelog

added support for Unicode command line arguments; main() will use argv[] arguments converted from Unicode to UTF-8
corrected some memory allocation problems that could had caused deallocation of invalid memory regions
the procedure that searches the memory allocated for xul.dll for a function that can be called to delete cookies from Firefox when changing the identity was removed
starting with this version, configuration options used by both 0.3x and 0.4x versions of AdvOR will be saved to AdvOR.ini

[close]

https://sourceforge.net/projects/advtor/

[SiLæncer]

Changelog

– corrected some plugin calls that were using different calling conventions than expected when compiled with newest versions of gcc (thanks to RoLex and Ruza for reporting this problem)
– added a splitter between the main tree and the configuration page that can be used to resize the configuration page
– if both WindowPos and GuiPlacement3 are found, GuiPlacement3 is used because it stores splitter’s position (WindowPos will still be saved to AdvOR.ini)
– messages that are logged before the GUI is created are cached and shown later in the Debug window
– geoip_c.h was updated with GeoIPCountryWhois.csv released on May 2nd; there are 153441 IP ranges having 32 ranges in the fake „A1“ country; 31 ranges were approximated to real countries

[close]

https://sourceforge.net/projects/advtor/

[SiLæncer]

Whats new:>>

– when a client uses an unrecognized Socks5 login, the request will be allowed; however, a warning will be shown that contains the username and the password to allow users to find bad configuration settings (this solves the problem with replacing Tor with AdvOR in the Tor Browser Bundle)
– the files HelpFirefoxreadme.txt and HelpFirefoxAdvOR.ini were updated to work with the 6.5.2 version of Tor Browser
– updated language strings: 3262, 3263

https://sourceforge.net/projects/advtor/

[SiLæncer]

Securely and anonymously share files and folders using the official Tor servers with the help of this streamlined and very useful app.

License : GPLv3

Changelog

OnionShare connects to Tor itself now, so opening Tor Browser in the background isn't required
In Windows and macOS, OnionShare alerts users about updates
Removed the menu bar, and adding a Settings button

[close]

https://onionshare.org/

[SiLæncer]

Changelog

  Tor 0.3.0.7 fixes a medium-severity security bug in earlier versions
  of Tor 0.3.0.x, where an attacker could cause a Tor relay process
  to exit. Relays running earlier versions of Tor 0.3.0.x should upgrade;
  clients are not affected.

  o Major bugfixes (hidden service directory, security):
    - Fix an assertion failure in the hidden service directory code, which
      could be used by an attacker to remotely cause a Tor relay process to
      exit. Relays running earlier versions of Tor 0.3.0.x should upgrade.
      should upgrade. This security issue is tracked as TROVE-2017-002.
      Fixes bug 22246; bugfix on 0.3.0.1-alpha.

  o Minor features:
    - Update geoip and geoip6 to the May 2 2017 Maxmind GeoLite2
      Country database.

  o Minor features (future-proofing):
    - Tor no longer refuses to download microdescriptors or descriptors
      if they are listed as "published in the future". This change will
      eventually allow us to stop listing meaningful "published" dates
      in microdescriptor consensuses, and thereby allow us to reduce the
      resources required to download consensus diffs by over 50%.
      Implements part of ticket 21642; implements part of proposal 275.

  o Minor bugfixes (Linux seccomp2 sandbox):
    - The getpid() system call is now permitted under the Linux seccomp2
      sandbox, to avoid crashing with versions of OpenSSL (and other
      libraries) that attempt to learn the process's PID by using the
      syscall rather than the VDSO code. Fixes bug 21943; bugfix
      on 0.2.5.1-alpha.

[close]

https://www.torproject.org/

[SiLæncer]

Whats new:>>

OnionShare connects to Tor itself now, so opening Tor Browser in the background isn't required
In Windows and macOS, OnionShare alerts users about updates
Removed the menu bar, and adding a Settings button
Added desktop notifications

https://onionshare.org/

[SiLæncer]

Securely browse the Internet while making sure that your privacy stays untouched with the help of this Tor-based, VPN-like utility.

Freeware

http://onion.dfnet.cu.cc/?i=3

[SiLæncer]

Changelog

OnionShare connects to Tor itself now, so opening Tor Browser in the background isn't required
In Windows and macOS, OnionShare alerts users about updates
Removed the menu bar, and added a Settings button
Added desktop notifications, and a system tray icon
Ability to add multiple files and folders with a single "Add" button
Ability to delete multiple files and folders at once with the "Delete" button
Hardened some response headers sent from the web server
Minor clarity improvements to the contents of the share's web page
Alert the user rather than share an empty archive if a file was unreadable
Prettier progress bars

[close]

https://onionshare.org/

[SiLæncer]

Changelog

ALL PLATFORMS:

Update Firefox to 52.1.2esr
Update Tor to 0.3.0.7
Update Torbutton to 1.9.7.3
Bug 22104: Adjust our content policy whitelist for ff52-esr
Bug 22457: Allow resources loaded by view-source://
Bug 21627: Ignore HTTP 304 responses when checking redirects
Bug 22459: Adapt our use of the nsIContentPolicy to e10s mode
Bug 21865: Update our JIT preferences in the security slider
Bug 21747: Make 'New Tor Circuit for this Site' work in ESR52
Bug 21745: Fix handling of catch-all circuit
Bug 21547: Fix circuit display under e10s
Bug 21268: e10s compatibility for New Identity
Bug 21267: Remove window resize implementation for now
Bug 21201: Make Torbutton multiprocess compatible

Translations update:

Update Tor Launcher to 0.2.12.2
Bug 22283: Linux 7.0a4 broken after update due to unix: lines in torrc
Bug 20761: Don't ignore additional SocksPorts
Bug 21920: Don't show locale selection dialog
Bug 21546: Mark Tor Launcher as multiprocess compatible
Bug 21264: Add a README file

Translations update:

Update HTTPS-Everywhere to 5.2.17
Update NoScript to 5.0.5
Update Go to 1.8.3 (bug 22398)
Bug 21962: Fix crash on about:addons page
Bug 21766: Fix crash when the external application helper dialog is invoked
Bug 21886: Download is stalled in non-e10s mode
Bug 21778: Canvas prompt is not shown in Tor Browser based on ESR52
Bug 21569: Add first-party domain to Permissions key
Bug 22165: Don't allow collection of local IP addresses
Bug 13017: Work around audio fingerprinting by disabling the Web Audio API
Bug 10286: Disable Touch API and add fingerprinting resistance as fallback
Bug 13612: Disable Social API
Bug 10283: Disable SpeechSynthesis API
Bug 22333: Disable WebGL2 API for now
Bug 21861: Disable additional mDNS code to avoid proxy bypasses
Bug 21684: Don't expose navigator.AddonManager to content
Bug 21431: Clean-up system extensions shipped in Firefox 52
Bug 22320: Use preference name 'referer.hideOnionSource' everywhere
Bug 16285: Don't ship ClearKey EME system and update EME preferences
Bug 21675: Spoof window.navigator.hardwareConcurrency
Bug 21792: Suppress MediaError.message
Bug 16337: Round times exposed by Animation API to nearest 100ms
Bug 21972: about:support is partially broken
Bug 21726: Keep Graphite support disabled
Bug 21323: Enable Mixed Content Blocking
Bug 21685: Disable remote new tab pages
Bug 21790: Disable captive portal detection
Bug 21686: Disable Microsoft Family Safety support
Bug 22073: Make sure Mozilla's experiments are disabled
Bug 21683: Disable newly added Safebrowsing capabilities
Bug 22071: Disable Kinto-based blocklist update mechanism
Bug 22415: Fix format error in our pipeline patch
Bug 22072: Hide TLS error reporting checkbox
Bug 20761: Don't ignore additional SocksPorts
Bug 21862: Rip out potentially unsafe Rust code
Bug 16485: Improve about:cache page
Bug 22462: Backport of patch for bug 1329521 to fix assertion failure
Bug 21340: Identify and backport new patches from Firefox
Bug 22153: Fix broken feeds on higher security levels
Bug 22025: Fix broken certificate error pages on higher security levels
Bug 21887: Fix broken error pages on higher security levels
Bug 22458: Fix broken `about:cache` page on higher security levels
Bug 21876: Enable e10s by default on all supported platforms
Bug 21876: Always use esr policies for e10s
Bug 20905: Fix resizing issues after moving to a direct Firefox patch
Bug 21875: Modal dialogs are maximized in ESR52 nightly builds
Bug 21885: SVG is not disabled in Tor Browser based on ESR52
Bug 17334: Hide Referer when leaving a .onion domain (improved patch)
Bug 18531: Uncaught exception when opening ip-check.info
Bug 18574: Uncaught exception when clicking items in Library
Bug 22327: Isolate Page Info media previews to first party domain
Bug 22452: Isolate tab list menuitem favicons to first party domain
Bug 15555: View-source requests are not isolated by first party domain
Bug 3246: Double-key cookies
Bug 8842: Fix XML parsing error
Bug 5293: Neuter fingerprinting with Battery API
Bug 16886: 16886: "Add-on compatibility check dialog" contains Firefox logo
Bug 19645: TBB zooms text when resizing browser window
Bug 19192: Untrust Blue Coat CA
Bug 19955: Avoid confusing warning that favicon load request got cancelled
Bug 20005: Backport fixes for memory leaks investigation
Bug 20755: ltn.com.tw is broken in Tor Browser
Bug 21896: Commenting on website is broken due to CAPTCHA not being displayed
Bug 20680: Rebase Tor Browser patches to 52 ESR
Bug 22429: Add IPv6 address for Lisbeth:443 obfs4 bridge
Bug 22468: Add default obfs4 bridges frosty and dragon

Windows:

Bug 22419: Prevent access to file://
Bug 12426: Make use of HeapEnableTerminationOnCorruption
Bug 19316: Make sure our Windows updates can deal with the SSE2 requirement
Bug 21868: Fix build bustage with FIREFOX_52_0_2esr_RELEASE for Windows

BUILD SYSTEM:

Windows:

Bug 21837: Fix reproducibility of accessibility code for Windows
Bug 21240: Create patches to fix mingw-w64 compilation of Firefox ESR 52
Bug 21904: Bump mingw-w64 commit to help with sandbox compilation
Bug 18831: Use own Yasm for Firefox cross-compilation

[close]

https://www.torproject.org/