Thema: Neue Tor-Version: sicherer und anonymer

[SiLæncer]

Whats new:>>

• WASTE : Updated to 1.8.0 Release. Build 058. Increased Transfer Speed. WASTE
can now saturate a 70 mega-bit connection.
• Bugfixes on 8.2018.10. WASTE transfers are properly initialized with the partner
address, to set up a temporary high-speed-region for transfers.

http://sourceforge.net/projects/blackbeltpriv/

[SiLæncer]

Release Notes

* All platforms

   * Update Firefox to 60.3.0esr
   * Update Torbutton to 2.0.8
     * Bug 23925+27959: Donation banner for year end 2018 campaign
     * Bug 24172: Donation banner clobbers Tor Browser version string
     * Bug 27760: Use new NoScript API for IPC and fix about:blank issue
     * Translations update
   * Update HTTPS Everywhere to 2018.9.19
   * Update NoScript to 10.1.9.9

 * Linux

   * Bug 27546: Fix vertical scrollbar behavior in Tor Browser 8 with Gtk3
   * Bug 27552: Use bundled dir on CentOS/RHEL 6

[close]

https://www.torproject.org/

[SiLæncer]

Changelog

All Platforms:

Update Firefox to 60.3.0esr
Update Tor to 0.3.5.3-alpha
Update Torbutton to 2.1.1
Bug 23925+27959: Donation banner for year end 2018 campaign
Bug 24172: Donation banner clobbers Tor Browser version string
Bug 28082: Add locales cs, el, hu, ka
Translations update
Update Tor Launcher to 0.2.17
Bug 27994+25151: Use the new Tor Browser logo
Bug 28082: Add locales cs, el, hu, ka
Translations update
Update HTTPS Everywhere to 2018.9.19
Update NoScript to 10.1.9.9
Bug 1623: Block protocol handler enumeration (backport of fix for #680300)
Bug 27905: Fix many occurrences of "Firefox" in about:preferences
Bug 28082: Add locales cs, el, hu, ka

Windows:

Bug 21704: Abort install if CPU is missing SSE2 support
Bug 28002: Fix the precomplete file in the en-US installer

Build System:

All Platforms:

Bug 27218: Generate multiple Tor Browser bundles in parallel

Windows:

Bug 27320: Build certutil for Windows

[close]

https://www.torproject.org/

[SiLæncer]

OnionFruit Connect permits you to continue using your browser of choice to connect to the TOR network.

Having the ability to use a browser that you are already comfortable with makes using TOR more of a seamless process. OnionFruit Connect will initiate the TOR service and then configures your proxy settings allowing your apps to be routed through TOR's tunnel. You will be notified know you're protected confirming that all your internet traffic is being passed through the TOR tunnel safely encrypted. This process ensures that every single site you visit gets routed through multiple servers to help mask your actions making them difficult to track.

Freeware

https://dfnet.ml/onionfruit/

[SiLæncer]

Changelog

Major bugfixes (compilation, backport from 0.3.5.3-alpha):

Fix compilation on ARM (and other less-used CPUs) when compiling with OpenSSL before 1.1. Fixes bug 27781; bugfix on 0.3.4.1-alpha.

Major bugfixes (mainloop, bootstrap, backport from 0.3.5.3-alpha):

Make sure Tor bootstraps and works properly if only the ControlPort is set. Prior to this fix, Tor would only bootstrap when a client port was set (Socks, Trans, NATD, DNS or HTTPTunnel port). Fixes bug 27849; bugfix on 0.3.4.1-alpha.

Major bugfixes (relay, backport from 0.3.5.3-alpha):

When our write bandwidth limit is exhausted, stop writing on the connection. Previously, we had a typo in the code that would make us stop reading instead, leading to relay connections being stuck indefinitely and consuming kernel RAM. Fixes bug 28089; bugfix on 0.3.4.1-alpha.

Major bugfixes (restart-in-process, backport from 0.3.5.1-alpha):

Fix a use-after-free error that could be caused by passing Tor an impossible set of options that would fail during options_act(). Fixes bug 27708; bugfix on 0.3.3.1-alpha.

Minor features (continuous integration, backport from 0.3.5.1-alpha):

Don't do a distcheck with --disable-module-dirauth in Travis. Implements ticket 27252.
Only run one online rust build in Travis, to reduce network errors. Skip offline rust builds on Travis for Linux gcc, because they're redundant. Implements ticket 27252.
Skip gcc on OSX in Travis CI, because it's rarely used. Skip a duplicate hardening-off build in Travis on Tor 0.2.9. Skip gcc on Linux with default settings, because all the non-default builds use gcc on Linux. Implements ticket 27252.

Minor features (continuous integration, backport from 0.3.5.3-alpha):

Use the Travis Homebrew addon to install packages on macOS during Travis CI. The package list is the same, but the Homebrew addon does not do a `brew update` by default. Implements ticket 27738.

Minor features (geoip):

Update geoip and geoip6 to the October 9 2018 Maxmind GeoLite2 Country database. Closes ticket 27991.

Minor bugfixes (32-bit OSX and iOS, timing, backport from 0.3.5.2-alpha):

Fix an integer overflow bug in our optimized 32-bit millisecond- difference algorithm for 32-bit Apple platforms. Previously, it would overflow when calculating the difference between two times more than 47 days apart. Fixes part of bug 27139; bugfix on 0.3.4.1-alpha.
Improve the precision of our 32-bit millisecond difference algorithm for 32-bit Apple platforms. Fixes part of bug 27139; bugfix on 0.3.4.1-alpha.
Relax the tolerance on the mainloop/update_time_jumps test when running on 32-bit Apple platforms. Fixes part of bug 27139; bugfix on 0.3.4.1-alpha.

Minor bugfixes (C correctness, to appear in 0.3.5.4-alpha):

Avoid undefined behavior in an end-of-string check when parsing the BEGIN line in a directory object. Fixes bug 28202; bugfix on 0.2.0.3-alpha.

Minor bugfixes (CI, appveyor, to appear in 0.3.5.4-alpha):

Only install the necessary mingw packages during our appveyor builds. This change makes the build a little faster, and prevents a conflict with a preinstalled mingw openssl that appveyor now ships. Fixes bugs 27943 and 27765; bugfix on 0.3.4.2-alpha.

Minor bugfixes (code safety, backport from 0.3.5.3-alpha):

Rewrite our assertion macros so that they no longer suppress the compiler's -Wparentheses warnings. Fixes bug 27709; bugfix

Minor bugfixes (continuous integration, backport from 0.3.5.1-alpha):

Stop reinstalling identical packages in our Windows CI. Fixes bug 27464; bugfix on 0.3.4.1-alpha.

Minor bugfixes (directory authority, to appear in 0.3.5.4-alpha):

Log additional info when we get a relay that shares an ed25519 ID with a different relay, instead making a BUG() warning. Fixes bug 27800; bugfix on 0.3.2.1-alpha.

Minor bugfixes (directory connection shutdown, backport from 0.3.5.1-alpha):

Avoid a double-close when shutting down a stalled directory connection. Fixes bug 26896; bugfix on 0.3.4.1-alpha.

Minor bugfixes (HTTP tunnel, backport from 0.3.5.1-alpha):

Fix a bug warning when closing an HTTP tunnel connection due to an HTTP request we couldn't handle. Fixes bug 26470; bugfix on 0.3.2.1-alpha.

Minor bugfixes (netflow padding, backport from 0.3.5.1-alpha):

Ensure circuitmux queues are empty before scheduling or sending padding. Fixes bug 25505; bugfix on 0.3.1.1-alpha.

Minor bugfixes (onion service v3, backport from 0.3.5.1-alpha):

When the onion service directory can't be created or has the wrong permissions, do not log a stack trace. Fixes bug 27335; bugfix on 0.3.2.1-alpha.

Minor bugfixes (onion service v3, backport from 0.3.5.2-alpha):

Close all SOCKS request (for the same .onion) if the newly fetched descriptor is unusable. Before that, we would close only the first one leaving the other hanging and let to time out by themselves. Fixes bug 27410; bugfix on 0.3.2.1-alpha.

Minor bugfixes (onion service v3, backport from 0.3.5.3-alpha):

When selecting a v3 rendezvous point, don't only look at the protover, but also check whether the curve25519 onion key is present. This way we avoid picking a relay that supports the v3 rendezvous but for which we don't have the microdescriptor. Fixes bug 27797; bugfix on 0.3.2.1-alpha.

Minor bugfixes (protover, backport from 0.3.5.3-alpha):

Reject protocol names containing bytes other than alphanumeric characters and hyphens ([A-Za-z0-9-]). Fixes bug 27316; bugfix on 0.2.9.4-alpha.

Minor bugfixes (rust, backport from 0.3.5.1-alpha):

Compute protover votes correctly in the rust version of the protover code. Previously, the protover rewrite in 24031 allowed repeated votes from the same voter for the same protocol version to be counted multiple times in protover_compute_vote(). Fixes bug 27649; bugfix on 0.3.3.5-rc.
Reject protover names that contain invalid characters. Fixes bug 27687; bugfix on 0.3.3.1-alpha.

Minor bugfixes (rust, backport from 0.3.5.2-alpha):

protover_all_supported() would attempt to allocate up to 16GB on some inputs, leading to a potential memory DoS. Fixes bug 27206; bugfix on 0.3.3.5-rc.

Minor bugfixes (rust, directory authority, to appear in 0.3.5.4-alpha):

Fix an API mismatch in the rust implementation of protover_compute_vote(). This bug could have caused crashes on any directory authorities running Tor with Rust (which we do not yet recommend). Fixes bug 27741; bugfix on 0.3.3.6.

Minor bugfixes (rust, to appear in 0.3.5.4-alpha):

Fix a potential null dereference in protover_all_supported(). Add a test for it. Fixes bug 27804; bugfix on 0.3.3.1-alpha.
Return a string that can be safely freed by C code, not one created by the rust allocator, in protover_all_supported(). Fixes bug 27740; bugfix on 0.3.3.1-alpha.

Minor bugfixes (testing, backport from 0.3.5.1-alpha):

If a unit test running in a subprocess exits abnormally or with a nonzero status code, treat the test as having failed, even if the test reported success. Without this fix, memory leaks don't cause the tests to fail, even with LeakSanitizer. Fixes bug 27658; bugfix on 0.2.2.4-alpha.

Minor bugfixes (testing, backport from 0.3.5.3-alpha):

Make the hs_service tests use the same time source when creating the introduction point and when testing it. Now tests work better on very slow systems like ARM or Travis. Fixes bug 27810; bugfix on 0.3.2.1-alpha.

Minor bugfixes (testing, to appear in 0.3.5.4-alpha):

Treat backtrace test failures as expected on BSD-derived systems (NetBSD, OpenBSD, and macOS/Darwin) until we solve bug 17808. (FreeBSD failures have been treated as expected since 18204 in 0.2.8.) Fixes bug 27948; bugfix on 0.2.5.2-alpha.

[close]

https://www.torproject.org/

[SiLæncer]

Changelog

There's a new alpha release available for download. If you build Tor from source, you can download the source code for 0.3.5.4-alpha from the usual place on the website. Packages should be available over the coming weeks, with a new alpha Tor Browser release by mid-December.

Remember, this is an alpha release: you should only run this if you'd like to find and report more bugs than usual.

Tor 0.3.5.4-alpha includes numerous bugfixes on earlier versions and improves our continuous integration support. It continues our attempts to stabilize this alpha branch and build it into a foundation for an acceptable long-term-support release.
Changes in version 0.3.5.4-alpha - 2018-11-08

    Major bugfixes (compilation, rust):
        Rust tests can now build and run successfully with the --enable-fragile-hardening option enabled. Doing this currently requires the rust beta channel; it will be possible with stable rust once Rust version 1.31 is released. Patch from Alex Crichton. Fixes bugs 27272, 27273, and 27274. Bugfix on 0.3.1.1-alpha.
    Major bugfixes (embedding, main loop):
        When DisableNetwork becomes set, actually disable periodic events that are already enabled. (Previously, we would refrain from enabling new ones, but we would leave the old ones turned on.) Fixes bug 28348; bugfix on 0.3.4.1-alpha.

 

    Minor features (continuous integration):
        Add a Travis CI build for --enable-nss on Linux gcc. Closes ticket 27751.
        Add new CI job to Travis configuration to run stem-based integration tests. Closes ticket 27913.
    Minor features (Windows, continuous integration):
        Build tor on Windows Server 2012 R2 and Windows Server 2016 using Appveyor's CI. Closes ticket 28318.
    Minor bugfixes (C correctness, also in 0.3.4.9):
        Avoid undefined behavior in an end-of-string check when parsing the BEGIN line in a directory object. Fixes bug 28202; bugfix on 0.2.0.3-alpha.
    Minor bugfixes (compilation):
        Fix a pair of missing headers on OpenBSD. Fixes bug 28303; bugfix on 0.3.5.1-alpha. Patch from Kris Katterjohn.
    Minor bugfixes (compilation, OpenSolaris):
        Fix compilation on OpenSolaris and its descendants by adding a missing include to compat_pthreads.c. Fixes bug 27963; bugfix on 0.3.5.1-alpha.
    Minor bugfixes (configuration):
        Refuse to start with relative file paths and RunAsDaemon set (regression from the fix for bug 22731). Fixes bug 28298; bugfix on 0.3.3.1-alpha.
    Minor bugfixes (directory authority, also in 0.3.4.9):
        Log additional info when we get a relay that shares an ed25519 ID with a different relay, instead of a BUG() warning with a backtrace. Fixes bug 27800; bugfix on 0.3.2.1-alpha.
    Minor bugfixes (onion service v3):
        Build the service descriptor's signing key certificate before uploading, so we always have a fresh one: leaving no chances for it to expire service side. Fixes bug 27838; bugfix on 0.3.2.1-alpha.
    Minor bugfixes (onion service v3, client authorization):
        Fix an assert() when adding a client authorization for the first time and then sending a HUP signal to the service. Before that, Tor would stop abruptly. Fixes bug 27995; bugfix on 0.3.5.1-alpha.
    Minor bugfixes (onion services):
        Unless we have explicitly set HiddenServiceVersion, detect the onion service version and then look for invalid options. Previously, we did the reverse, but that broke existing configs which were pointed to a v2 service and had options like HiddenServiceAuthorizeClient set. Fixes bug 28127; bugfix on 0.3.5.1-alpha. Patch by Neel Chauhan.
    Minor bugfixes (portability):
        Make the OPE code (which is used for v3 onion services) run correctly on big-endian platforms. Fixes bug 28115; bugfix on 0.3.5.1-alpha.
    Minor bugfixes (protover, rust):
        Reject extra commas in version strings. Fixes bug 27197; bugfix on 0.3.3.3-alpha.
    Minor bugfixes (relay shutdown, systemd):
        Notify systemd of ShutdownWaitLength so it can be set to longer than systemd's TimeoutStopSec. In Tor's systemd service file, set TimeoutSec to 60 seconds to allow Tor some time to shut down. Fixes bug 28113; bugfix on 0.2.6.2-alpha.
    Minor bugfixes (rust, also in 0.3.4.9):
        Fix a potential null dereference in protover_all_supported(). Add a test for it. Fixes bug 27804; bugfix on 0.3.3.1-alpha.
        Return a string that can be safely freed by C code, not one created by the rust allocator, in protover_all_supported(). Fixes bug 27740; bugfix on 0.3.3.1-alpha.
    Minor bugfixes (rust, directory authority, also in 0.3.4.9):
        Fix an API mismatch in the rust implementation of protover_compute_vote(). This bug could have caused crashes on any directory authorities running Tor with Rust (which we do not yet recommend). Fixes bug 27741; bugfix on 0.3.3.6.
    Minor bugfixes (testing):
        Avoid hangs and race conditions in test_rebind.py. Fixes bug 27968; bugfix on 0.3.5.1-alpha.
    Minor bugfixes (testing, also in 0.3.4.9):
        Treat backtrace test failures as expected on BSD-derived systems (NetBSD, OpenBSD, and macOS/Darwin) until we solve bug 17808. (FreeBSD failures have been treated as expected since 18204 in 0.2.8.) Fixes bug 27948; bugfix on 0.2.5.2-alpha.
    Documentation (onion service manpage):
        Improve HSv3 client authorization by making some options more explicit and detailed. Closes ticket 28026. Patch by Mike Tigas.

[close]

https://www.torproject.org/

[SiLæncer]

Changelog

    Major bugfixes (OpenSSL, portability):
        Fix our usage of named groups when running as a TLS 1.3 client in OpenSSL 1.1.1. Previously, we only initialized EC groups when running as a relay, which caused clients to fail to negotiate TLS 1.3 with relays. Fixes bug 28245; bugfix on 0.2.9.15 (when TLS 1.3 support was added).
    Minor features (geoip):
        Update geoip and geoip6 to the November 6 2018 Maxmind GeoLite2 Country database. Closes ticket 28395.

 

    Minor bugfixes (compilation):
        Initialize a variable unconditionally in aes_new_cipher(), since some compilers cannot tell that we always initialize it before use. Fixes bug 28413; bugfix on 0.2.9.3-alpha.
    Minor bugfixes (connection, relay):
        Avoid a logging a BUG() stacktrace when closing connection held open because the write side is rate limited but not the read side. Now, the connection read side is simply shut down until Tor is able to flush the connection and close it. Fixes bug 27750; bugfix on 0.3.4.1-alpha.
    Minor bugfixes (continuous integration, Windows):
        Manually configure the zstd compiler options, when building using mingw on Appveyor Windows CI. The MSYS2 mingw zstd package does not come with a pkg-config file. Fixes bug 28454; bugfix on 0.3.4.1-alpha.
        Stop using an external OpenSSL install, and stop installing MSYS2 packages, when building using mingw on Appveyor Windows CI. Fixes bug 28399; bugfix on 0.3.4.1-alpha.
    Minor bugfixes (documentation):
        Make Doxygen work again after the code movement in the 0.3.5 source tree. Fixes bug 28435; bugfix on 0.3.5.1-alpha.
    Minor bugfixes (Linux seccomp2 sandbox):
        Permit the "shutdown()" system call, which is apparently used by OpenSSL under some circumstances. Fixes bug 28183; bugfix on 0.2.5.1-alpha.
    Minor bugfixes (logging):
        Stop talking about the Named flag in log messages. Clients have ignored the Named flag since 0.3.2. Fixes bug 28441; bugfix on 0.3.2.1-alpha.
    Minor bugfixes (memory leaks):
        Fix a harmless memory leak in libtorrunner.a. Fixes bug 28419; bugfix on 0.3.3.1-alpha. Patch from Martin Kepplinger.
    Minor bugfixes (onion services):
        On an intro point for a version 3 onion service, stop closing introduction circuits on an NACK. This lets the client decide whether to reuse the circuit or discard it. Previously, we closed intro circuits when sending NACKs. Fixes bug 27841; bugfix on 0.3.2.1-alpha. Patch by Neel Chaunan.
        When replacing a descriptor in the client cache, make sure to close all client introduction circuits for the old descriptor, so we don't end up with unusable leftover circuits. Fixes bug 27471; bugfix on 0.3.2.1-alpha.

[close]

https://www.torproject.org/

[SiLæncer]

Whats new:>>

Vidalia: Updated to : 0.2.21.002 - Link to Tor Bridges.
Some Vidalia features, such as the help system, may have failed to show correctly recently.n for transfers.

http://sourceforge.net/projects/blackbeltpriv/

[SiLæncer]

Changelog

All Platforms:

Update Torbutton to 2.1.2
Bug 25013: Integrate Torbutton into tor-browser for Android
Bug 27111: Update about:tor desktop version to work on mobile
Bug 28093: Update donation banner style to make it fit in small screens
Bug 28543: about:tor has scroll bar between widths 900px and 1000px
Bug 28039: Enable dump() if log method is 0
Bug 27701: Don't show App Blocker dialog on Android
Bug 28187: Change tor circuit icon to torbutton.svg
Bug 28515: Use en-US for english Torbutton strings
Translations update
Update Tor Launcher to 0.2.18
Bug 28039: Enable dump() if log method is 0
Translations update
Update HTTPS Everywhere to 2018.10.31
Update NoScript to 10.2.0
Bug 22343: Make 'Save Page As' obey first-party isolation
Bug 26540: Enabling pdfjs disableRange option prevents pdfs from loading

Windows:

Update Tor to 0.3.5.5-alpha
Bug 28310: Don't build obfs4 with module versioning support
Bug 27827: Update Go to 1.11.1
Bug 28185: Add smallerRichard to Tor Browser
Bug 28657: Remove broken FTE bridge from Tor Browser

Build System:

Bug 27977: Build Orbot inside tor-browser-build
Bug 27443: Update Firefox RBM config and build for Android
Bug 27439: Add android target for rust compiler
Bug 28469: Fix unsupported libbacktrace in Rust 1.26
Bug 28468: Modify Android toolchain to support Orbot
Bug 28483: Modify Android Toolchain API Version
Bug 28472: Add Android Makefile Rules
Bug 28470: Add fetch gradle dependency script to common project
Bug 28144: Update projects/tor-browser for Android

[close]

https://www.torproject.org/

[SiLæncer]

Changelog

All platforms:

Update Firefox to 60.4.0esr
Update Tor to 0.3.4.9
Update OpenSSL to 1.0.2q
Update HTTPS Everywhere to 2018.10.31
Update NoScript to 10.2.0

Update Torbutton to 2.0.9:

Bug 28540: Use new text for 2018 donation banner
Bug 28515: Use en-US for english Torbutton strings
Translations update
Bug 1623: Block protocol handler enumeration (backport of fix for #680300)
Bug 25794: Disable pointer events
Bug 28608: Disable background HTTP response throttling
Bug 28185: Add smallerRichard to Tor Browser

Windows:

Bug 26381: about:tor page does not load on first start on Windows
Bug 28657: Remove broken FTE bridge from Tor Browser

[close]

https://www.torproject.org/

[SiLæncer]

Changelog

All Platforms:

Update Firefox to 60.4.0esr
Update OpenSSL to 1.0.2q

Update Torbutton to 2.1.3:

Bug 28540: Use new text for 2018 donation banner
Bug 27290: Remove WebGL pref for min capability mode
Bug 28075: Tone down missing SOCKS credential warning
Bug 28747: Remove NoScript (XPCOM) related unused code
Translations update

Bug 28608: Disable background HTTP response throttling
Bug 28695: Set default security.pki.name_matching_mode to enforce (3)
Bug 27290: Remove WebGL pref for min capability mode
Bug 27919: Backport SSL status API

Windows:

Bug 28740: Adapt Windows navigator.platform value on 64-bit systems

Android:

Bug 26843: Multi-locale support for Tor Browser on Android

Build System:

Android:

Bug 25164: Add .apk to our sha256sums unsigned build file
Bug 28696: Make path to Gradle dependencies reproducible
Bug 28697: Use pregenerated keystore and fix timestamp issues

[close]

https://www.torproject.org/

[SiLæncer]

PirateBrowser is a bundle package of the Tor client and FireFox Portable browser and custom configs that allow you to circumvent censorship.

PirateBrowser is a bundle package of the Tor client (Vidalia) and FireFox Portable browser (with foxyproxy addon) and some custom configs that allows you to circumvent censorship that certain countries such as Iran, North Korea, United Kingdom, The Netherlands, Belgium, Finland, Denmark, Italy and Ireland impose onto their citizens.

Freeware

https://lilfellauk.wordpress.com/pirate-tor-browser/

[SiLæncer]

Whats new:>>

New feature: Receiver mode allows you to receive files with OnionShare, instead of only sending files
New feature: If you're sharing a single file, don't zip it up
New feature: macOS sandbox enabled
New feature: Allow selecting your language from a dropdown
New translations: TODO fill in for final release
Several bugfixes

https://onionshare.org/

[SiLæncer]

Whats new:>>

New feature: Support for next generation onion services (TODO waiting on Tor release)
New feature: Full support for meek_lite (Azure) bridges
Several bugfixes
Invisible to users, but this version includes some major refactoring of the codebase, and a robust set of unit tests which makes OnionShare easier to maintain going forward

https://onionshare.org/

[SiLæncer]

Whats new:>>

WASTE: Updated to 1.8.0 Release. Build 059.0.0.2. Minor Bugfixes.
Prevent null addresses in the address swarm.OpenSSL: Updated to OpenSSL 1.0.2q.
FireFox Profiles: I2P Web browsing profile provided.
You will need to install I2P to browse over that network.

http://sourceforge.net/projects/blackbeltpriv/