New Release: Tor Browser 8.5a1
Tor Browser 8.5a1 is now available from the Tor Browser Project page and also from our distribution directory.
This release features important security updates to Firefox.
Tor Browser 8.5a1 is the first alpha release in the 8.5 series. It contains all the improvements from the new 8.0 release. In addition, we updated Tor to 0.3.4.7-rc and fixed an issue with Moat when a meek bridge has been configured.
The full changelog since Tor Browser 8.0a10 is:
- All platforms
- Update Firefox to 60.2.0esr
- Update Tor to 0.3.4.7-rc
- Update OpenSSL to 1.0.2p
- Update Torbutton to 2.0.6
- Bug 27401: Start listening for NoScript before it loads
- Bug 27276: Adapt to new NoScript messaging protocol
- Bug 26884: Use Torbutton to provide security slider on mobile
- Bug 26962: Circuit display onboarding
- Bug 26520: Fix sec slider/NoScript for TOR_SKIP_LAUNCH=1
- Bug 26490: Remove the security slider notification
- Bug 27301: Improve about:tor behavior and appearance
- Bug 27097: Add text for Tor News signup widget
- Bug 27214: Improve the onboarding text
- Translations update
- Update Tor Launcher to 0.2.16.4
- Update HTTPS Everywhere to 2018.8.22
- Update NoScript to 10.1.9.1
- Bug 26962: New feature onboarding
- Bug 27403: The onboarding bubble is not always displayed
- Bug 27283: Fix first-party isolation for UI tour
- Bug 27213: Update about:tbupdate to new (about:tor) layout
- Bug 26670: Make canvas permission prompt respect first-party isolation
- Bug 26561: .onion images are not displayed
- Bug 21787: Spoof en-US for date picker
- Bug 21607: Disable WebVR for now until it is properly audited
- Bug 21549: Disable wasm for now until it is properly audited
- Bug 26614: Disable Web Authentication API until it is properly audited
- Bug 27281: Enable Reader View mode again
- Bug 26114: Don't expose navigator.mozAddonManager to websites
- Bug 26048: Fix potentially confusing "restart to update" message
- Bug 27221: Purge startup cache if Tor Browser version changed
- Bug 26049: Reduce delay for showing update prompt to 1 hour
- Bug 25405: Cannot use Moat if a meek bridge is configured
- Bug 27268+27257+27262+26603 : Preferences clean-up
- Windows
- Build System
Comments
Please note that the comment area below has been archived.
Please fix the User Agent…
Please fix the User Agent issue!!
+1
+1
+1
+1
+1 +1 +1 Please. It seems…
+1 +1 +1 Please.
It seems to me that such an important, potentially identifying, fault must be rectified asap.
Thank you
How can i enable flash on…
How can i enable flash on tor? Some people are telling me it'll lower my privacy quality, but, i don't care. I just want to know if it can be done. With this new browser update, i'm hoping it'll be possible.
Flash is still used in 2018 ?
Flash is still used in 2018 ?
If I edited an about:config…
If I edited an about:config option to comply with a bug patch before the patch made it into a release, will the option continue to be updated by future automatic updates? Or should I do a fresh install?
We don't overwrite…
We don't overwrite preference changes you made during an update as we don't touch your user profile (except for updating the extensions we ship). So, whatever you changed will still be there.
TB 8.5a stopped showing my…
TB 8.5a stopped showing my bookmarks on the Bookmarks Toolbar, though they are still accessible from the Bookmarks==>Bookmarks Toolbar menu.
TB8.5a1 did not fix this as I hoped.
Please?
Yes, that's still https:/…
Yes, that's still https://trac.torproject.org/projects/tor/ticket/27264. Patches are welcome! Meanwhile there is a workaround outlined in comment:1 on that ticket.
I'm using uMatrix add-on to…
I'm using uMatrix add-on to block the 3-rd party requests that NoScript doesn't show, and recently noticed that uMatrix blocks the CSP requests created by NoScript. Details: https://github.com/gorhill/uBlock/issues/3260
uMatrix shows this well - if you use it, but most users won't see this.
Question: Are TorBrowser users left to trust that NoScript CSP requests will:
Is anyone going to verify these statements?
Who's going to (every day) check that the formerly venomous snake released in your house still does not bite?
Perhaps TorBrowser can use a bit more sanity?
Can't open certain pages…
Can't open certain pages with the new Tor 8.0. Can't change channels nor see which countries I'm using to access the internet anymore. Can't stay downgraded 'cause of automatic updates. It gets more complicated. Don't like these changes.
Which pages do not work?…
Which pages do not work? Could you give me an example? The circuit display moved to the "lock" icon in your URL bar to give you the circuit for that particular site. What do you mean with "Can't change channels"?
In 7.5.. was a line in the…
In 7.5.. was a line in the menu saying "change channels for this page", I guess he means the circuit display
"Can't open certain pages"…
"Can't open certain pages" is vague.
Do you see error messages?
If tab shows only what looks like blank white space without any messages, try looking for indications of the problem by using "view page source" (view-source) command.
Hej Jack, you can monitor…
Hej Jack, you can monitor the countries "you're using" by clicking site information. It's just relocated. Automatic updates can be deactivated in "Preferences". In the end it's not more complicated just a bit new. try it.
"you can monitor the…
"you can monitor the countries "you're using" by clicking site information"
Site information???? Where the hell is that??? There is no "site information" aviable in the menues I've seen
The "i" icon on the left of…
The "i" icon on the left of your URL bar which contains all the information regarding the site you are currently on.
thanks for that:)
thanks for that:)
Where is the comments going…
Where is the comments going when trying to reply to someone?
+1
+1
Where the hell is "New…
Where the hell is "New identity" and "New circuit for this site" button? Wow, thanks.
One location for both is the…
One location for both is the hamburger menu. You get the circuit as well by clicking on the "lock" icon in the URL bar (see the user onboarding on the about:tor page for an introduction). We'll add a dedicated "New Identity" button to the toolbar soon, we just did not get the time to finish that before Tor Browser 8 needed to get out.
Found it before your comment…
Found it before your comment, sorry for getting mad. Keep up the good work guys.
Is there any chance that the…
Is there any chance that the security levels could also be moved to the hamburger menu? E.g. in the form of a submenu with 3 items for each level and a checkmark next to the current one. That would require one less click and no subwindows to get to the security settings.
Some kind of clear indicator of the current security level (maybe as an emblem over the torbutton icon?) would also make the use of this feature easier. As it is now the user has to spend a few clicks just to learn the current level, not to mention the possibility of loading a page with wrong knowledge of the current level (happens easily when you have to constantly switch between them for different sites).
I find the option of multiple security levels extremely useful in itself, it's just a shame that its UI is not very handy.
I have good news for you: We…
I have good news for you: We have been working on that for a while and will improve that process soon. There has been a discussion about it on tbb-dev (see the latest proposal at https://lists.torproject.org/pipermail/tbb-dev/2018-April/000836.html). The bug on Trac to follow is https://trac.torproject.org/projects/tor/ticket/25658.
Same issue for me. No New…
Same issue for me. No New Identity or New Tor Circuit on Tor button.
Why no Windows Vista…
Why no Windows Vista compatible version , (I still use Windows Vista) , will this mean that I cannot continue using the old TOR , I really WANT TOR protection.
How should I proceed from here as I do not want to upgrade to the newest version of Windows spyware.
Advice (pretty please).
Thanks.
Firefox, on which Tor…
Firefox, on which Tor Broswer is based, no longer support Vista. Thus, Tor Browser doesn't either.
Please note that Vista no longer receives security updates. I strongly encourage you to update.
Tor Browser has recently…
Tor Browser has recently upgraded to Firefox ESR 60, which requires at least Windows 7 to run.
If you are concerned the telemetry in Windows 7 and greater could compromise your security, then consider making a Tails live DVD or USB.
security.sandbox.content…
security.sandbox.content.level on windows system is on 2 and not on 5 and now tor browser doesn't work with any another sand-boxing software
You mean having the level…
You mean having the level set to 5 works but 2 not? Which other sandboxing software are you talking about? FWIW: we think we have a fix for the issue that made sandboxing level 2 necessary for us. Should be released with Tor Browser 8.0.1.
Hello, no what i meant was…
Hello, no what i meant was that 2 is not as secure as 5, the sandbox software is Sandboxie, but actually with 32 bit version of tor browser it does work
Thanks for the Tor Browser 8.0.1 info
Yes, we'd like to have level…
Yes, we'd like to have level 5 as well but it seems the right fix is trickier than expected. So, we might need to think harder before flipping that preference in 8.0.1.
New Tor Browser doesn't…
New Tor Browser doesn't allow / blocks(?) Google Captcha, it loads forever and doesn't show the images.
Looks like it's fine now…
Looks like it's fine now. Ignore this post above.
I don't see the Tor circuit…
I don't see the Tor circuit etc. also by clicking on the Lock Green Icon
Click on the "i" in the…
Click on the "i" in the circle, it's on the left from the URL address.
The version 7.5.6 had a…
The version 7.5.6 had a better solution for this. The information was shown with the tor icon. All tor settings were together. This was a better solution.
Problem after log in with…
Problem after log in with facebook.com or facebookcorewwwi.onion. Pops dialog box Firefox.exe - Application error, The execption unknown software exception (0x400......) occured in the application at location 0x......, Click on ok to terminate the program. Won't work after reinstall tor or anything and same problem with friend who update his browser today.
Which Windows version is…
Which Windows version is that? And that's with Tor Browser 8.0? What do I have to do to trigger that crash? Just logging in?
Windows 7 and tor just…
Windows 7 and tor just updated few days ago, with latest new release and tor is up to date. You just need to login facebook and after few seconds when it opens your main page it pops the same dialog box with application error, then clicking ok and it says Gah - Your tab just crashed, when restore this tab this same application error box instantly pops out and it happens over and over again. Other web pages working fine with new tor browser release, but only this facebook page error.
I just tested it on a…
I just tested it on a Windows 7 machine and it is working fine for me. Can you try a clean, new Tor Browser in a different location? Do you see the same problem? Is that a 32bit or a 64bit Tor Browser? (We offer now 64bit versions which might solve your problem in case it is related to limited memory available)
It was tor stable 8.0…
It was tor stable 8.0 version problem, it is latest automatic update version? Now I manually downloading tor 8.5a1 64-bit experimental and everything working fine. Thank you for responding and sorry for confusing wrong topic, was thinking it was updating to 8.5a1.
Great to hear. Can you try a…
Great to hear. Can you try a new 8.0 stable version as well?
this new version refuses to…
this new version refuses to honor my configuration; to wit, colors. I have it set to use system colors, I also tried changing background/text colors, nothing has been affected by any changes. The background is white and the text is black and I repeatedly told it not to do that. As TOR is too painful to look at as of today, I personally consider this a critical bug.
wth with https://www…
wth with https://www.facebook.com/youtube
Just wrote about color UI,…
Just wrote about color UI, finally fixed it -- it's not in the settings menu, but requires making changes in the about:config page
Search for 'color', leave ui.use_native_colors alone ('true') but set
ui.use_standins_for_native_colors : false
*then* in options, set colors to 'use system' and override: always
( browser.display.document_color_use;2 )
Freaking people out by…
Freaking people out by hiding so many essential details in the "Lock" and "Customize" areas was a bad idea. Late newsflash - most people despise the new Firefox design, they are calling for a return to the simpler more user-friendly version
It used to be that if you…
It used to be that if you left clicked on a page you would have the option with noscript to either allow or disallow scripts on the page you are on. That option has disappeared now if you left click there is just a symbol for noscript but no options like before. It seems much more confusing now, and I have found even without granting permissions media is playing on pages now. Why the change?
The playing media is a bug…
The playing media is a bug but otherwise that's because the new NoScript is based on the new WebExtensions API which brought a bunch of changes.
TOR does not load. I can…
TOR does not load. I can however get the following report.
[NOTICE] Bootstrapped 85%: Finishing handshake with first hop
9/7/18, 05:12:27.570 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit
9/7/18, 05:12:27.676 [WARN] Rejecting SOCKS request for anonymous connection to private address [scrubbed].
9/7/18, 05:12:28.704 [NOTICE] Tor has successfully opened a circuit. Looks like client functionality is working.
9/7/18, 05:12:28.704 [NOTICE] Bootstrapped 100%: Done
What does "does not load"…
What does "does not load" mean? This looks good so far.
just updated to version 8,…
just updated to version 8, now browser won't work. message window opens saying: tor unexpectedly exited… pressing button: [Restart Tor] doesn't restart or open Tor. am running on Mac OS 10.9.5. help would be really nice.
Yes, that's an unfortunate…
Yes, that's an unfortunate bug as the current stable Tor version we ship is missing a patch to make it compatible with macOS 10.9 (which, by the way, does not get security updates anymore for two years). This will be fixed in Tor Browser 8.0.1, though. Meanwhile you can use Tor Browser 8.5a1 (https://sedvblmbog.tudasnich.de/projects/torbrowser.html.en#downloads-alpha), the alpha version which is almost the same as Tor Browser 8.0 but with a newer Tor version which contains the fix. Sorry for the inconvenience.
WebGL WebGL is activated…
WebGL
WebGL is activated, WebGL 1.0, Mozilla
Disable WebGL as in 7.5.6!!!
Not receiving "Tor Circuit"…
Not receiving "Tor Circuit" when I click on the Tor button.
https://browserleaks.com…
https://browserleaks.com/social
Third-Party Cookies
! Allowed — You can be vulnerable to this attack.
Not sure what that website…
Not sure what that website is measuring but we still have third party cookies disabled. But even if not they should be bound to the first-party domain and no tracking risk. We just have not finished the audit for that part yet (see: https://trac.torproject.org/projects/tor/ticket/21905=
Disabled 3rd party cookies?…
Disabled 3rd party cookies? Great, but what about all other elements from 3rd party sites? Loading any element from them leaves some fingerprint.
Another Firefox add-on, uMatrix, when installed together with NoScript, reveals a lot more linked sites that NoScript doesn't (try and compare at various sites). What's more, you can block those additional 3rd party elements from uMatrix (proof: the page often looks different after reloading), while NoScript seems to quietly allow them all.
Screen Shot, which worked…
Screen Shot, which worked fine on previous versions of Tor, is not capturing images now.
Could you give me steps to…
Could you give me steps to reproduce your problem?
I have the same problem. I…
I have the same problem. I save a website "Save Page As..." and it does not download the website. The pictures are missing and the layout is totally messed up. This error can be reproduced on most websites. Additionally, there is no need to download the website a second time. Just save it from the browsers cache.
That particular issue is…
That particular issue is https://trac.torproject.org/projects/tor/ticket/22343.
This update is nice +1
This update is nice +1
le navigateur Tor déjà…
le navigateur Tor déjà installé ne veut plus s'ouvrir après la dernière mise à jour. Je suis sur Mac os 10.9.5 .
Yes, this is https://trac…
Yes, this is https://trac.torproject.org/projects/tor/ticket/27482 and we will have a fix for that in Tor Browser 8.0.1 coming hopefully out next week. Meanwhile using Tor Browser 8.5a1 (the alpha series, https://sedvblmbog.tudasnich.de/projects/torbrowser.html.en#downloads-alpha) "solves" this problem.
always the useragent not…
always the useragent not possible change, WTF ? all work fine with the old version, now the useragent is the real !!!!
Исправьте пожалуйста fix,…
Исправьте пожалуйста fix, после нового обновление на ubuntu, пропал значёк картинки тора зелёного , и стоит вопросительный знак серого цвета+ тор плохо очень грузит
Could you give me a…
Could you give me a screenshot to understand better what your issue is? The Torbutton icon is still there but newly designed. It's not green anymore but still an onion shape and should be on the left side of the toolbar.
When i try to verify the…
When i try to verify the signature of the package i get a error message:
Verify signatures failed: error while opening file. I use Ubuntu 16.04
Thanks
since the update I can't…
since the update I can't open Tor browser anymore (mac 10.9.5)
I just recently updated to…
I just recently updated to the latest TB & heres my problem
1. Useragent cannot be spoofed manually
2. Sandbox mode keep TB tabs crashing, running to the latest firejail
The UI doesn't interest me, Pls. fix this on your next update, I hope
We've got a bigger problem…
We've got a bigger problem now...ever since I updated to the new Tor, my PC has slowed down and started "crashing" / "freezing" every few minutes !
What operating system are…
What operating system are you running? Windows I guess? You could try a clean 64bit Tor Browser bundle for Windows as it is said that Firefox is running much more stable with the 64bit than the 32bit version. That said another issue could be that your Antivirus/Firewall software is causing this. If you have any installed, please test after removing it temporarily (disabling is often not enough).
I'm fully aware of this…
I'm fully aware of this being a Alpha release but why so slow?
1. I miss the Onion, I hope you guys are not removing that! I know about the Update arrow next to the URL lock but that's not the same thing. I wont remove the active website and restart in a new clean window. Also you can't see the countries.
2. I don't know if it's just because it's a alpha but I don't like the look of the new window tabs. They just look so, 1980 look a like. I prefer then being round in the corners with a more modern and a dark layout.
Keep up the good work with giving people privacy and freedom!
Criminals who do stupid shit can go to hell. But for normal people who just want some privacy we really do appreciate all the hard work you guys are doing!
If you agree with me about the last part, scroll up in top of this thread and hit the Donate button!
$1 is enough if everyone does it! Not much to ask for comparing for what you get in return for FREE!
That's due to Firefox's new…
That's due to Firefox's new Photon design. The onion is still there is the left corner of the URL bar just not green anymore.
The Javascript error message…
The Javascript error message is backwards. It says it's enabled when it's not and then it says it's not enabled when it is. It's programmed backwards with the new update. You should do a reverse update and bring back the old Tor.
This is the error. It's backwards:
You have JavaScript enabled, you are putting yourself at risk! Please disable it immediately!"
Where can I see this error…
Where can I see this error message?
EDIT: Oh, I see. That's nothing we did but the website owner. If you don't like JavaScript disabled there is the security slider (see the onboarding in the upper left on the about:tor page) to change that.
Tor Browser 8.5a1 the first…
Tor Browser 8.5a1 the first version made by elementary school student
I have problems everywhere…
I have problems everywhere with this new update, you are sure this isn't the beta tor browser released as stable ?
You just posted this comment…
You just posted this comment in the alpha release blog post but I guess you are using Tor Browser 8.0? A good first start would be giving us some hints about your problems and your operating system you are using. Without that it's hard to explain things or help you.
right click dont work on…
right click dont work on some sites = cant use wiew img or open in new tab so on .... left click = open several new windows in backgrond pop ups ... and need confirm every closing of window ... cant use this ver. like a virus .. what to do ?
I guess that's NoScript…
I guess that's NoScript popping up a big window about a potential XSS attack? That's https://trac.torproject.org/projects/tor/ticket/26847 but we need the NoScript author to help us here.
What is happening in the right-click cases?
no script is not keeping…
no script is not keeping changes in its options, after restarting tor browser settings return to default.
In the old tor i could see…
In the old tor i could see and chose witch circuit i want to use. Speed and so on.
Not its gone?
and i get the same circuit all the time and it also stands
"your guard node may not change" what and how to i change or chose another one
I wouldn't be suprised if…
I wouldn't be suprised if this release is full of exploit, the new Tor Browser is shit made by idiots or feds
Noscript work 50% of the time, tracker protection and DNT are not by default, duckduckgo as search engine (us based) etc
EDIT : IT ALSO LEAK YOUR NUMBERS OF CPU CORES AND OS, DON'T USE THE UPDATE
I feel its anonymity aspect has been compromised. This update is sloppy as a mother fucker
compromised by insiders
Yes, this new update is very buggy. It's not a good update at all. The Javascript error message is backwards. I really think this update was programmed by a bunch of elementary school students as a school project to teach them to program. It's really bad. Tor really should do a reverse update. Lol. It's bad.
Screen Reader Accessibility …
Screen Reader Accessibility
Since the tor 8.X update, Tor don't work with screen readers such as NVDA.
Yes, we are aware of it and…
Yes, we are aware of it and try to find a fix but it is non-trivial, alas. See: https://trac.torproject.org/projects/tor/ticket/27503 for the ticket in our bug tracker.
NoScript auto-updated today …
NoScript auto-updated today (Sep. 8, 2018), and changed the General "Presets customization" checkboxes for Default and Untrusted. This is bad.
Default preset is now: Frame, Other
Trusted preset is now: Script, Media, Frame, Font, WebGL, Fetch, Other
Untrusted preset is now: Frame
Many sites don't load anymore after NoScript auto-updated unless I manually change the settings back.
The first node which is…
The first node which is linked to my browser is always the same. Why is this node not allowed to change? Thank you! :)
I really DO NOT like the new…
I really DO NOT like the new "New identity" and "New circuit for this site" solution! So I will return to the last version before 8! Please change this back to the user friendly button! Thanks
02:22:05.306 TypeError: win…
02:22:05.306 TypeError: win.gBrowser is undefined 1 ProcessHangMonitor.jsm:412:9
02:29:47.698 uncaught…
02:29:47.698 uncaught exception: Unable to open IndexedDB. 1 (unknown)
https://www.youtube.com/ ?
New Identity: [09-09 16:41…
New Identity:
[09-09 16:41:50] Torbutton NOTE: Exception on control port [Exception... "Component returned failure code: 0x804b000e (NS_ERROR_NET_TIMEOUT) [nsIBinaryInputStream.readBytes]" nsresult: "0x804b000e (NS_ERROR_NET_TIMEOUT)" location: "JS frame :: chrome://torbutton/content/torbutton.js :: torbutton_socket_readline :: line 707" data: no]
Hi. Is there any chance to…
Hi.
Is there any chance to use Tor Browser under Windows Vista 64 anymore?
Hi Is there any chance to…
Hi
Is there any chance to use Tor 8.5 under Windows Vista 64 anymore ?
NoScript blocks script on…
NoScript blocks script on its own moz-extension:// NoScript Options tab!
getting message saying "Tor…
getting message saying "Tor unexpectedly quit. This might be due to a bug..."
There no error log though?
Any idea on a fix?
Which operating system? On…
Which operating system? On macOS 10.9.X we have https://trac.torproject.org/projects/tor/ticket/27482 (see comment 12 for a workaround).
Hi Tor team, after update to…
Hi Tor team, after update to version 8 the tor icon is not available. here is the icon path in desktop file:
Icon=/opt/tor-browser-linux64-7.5.3_en-US/tor-browser_en-US/Browser/browser/icons/mozicon128.png
could you please let me know the new image path in this version?
note: I realize that after last update the folder Icon=/opt/tor-browser-linux64-7.5.3_en-US/tor-browser_en-US/Browser/browser/icons/ is not longer available
thanks in advance
It seems the icon path moved…
It seems the icon path moved: https://trac.torproject.org/projects/tor/ticket/26556#comment:4
this new release is just…
this new release is just piece of shit ... looking for old version ... f* piece of shit
What I'm seeing with this…
What I'm seeing with this user agent issue is that Mac users seemed to be the ones that had the compatibility issues and Linux users want the user agent changed back. I'm on Linux, and I've never had any OS compatibility issues with a spoofed Windows UA (probably because Linux is better about interoperability and sticking to standards than any proprietary OS). And even if I did, I would investigate it myself, like most Linux users. The "User will get frustrated and immediately cease usage of the program upon encountering any issues" problem may apply to Mac users, but it doesn't apply to most Linux users (otherwise they wouldn't be using Linux).
There are no downsides to changing it back either; yes, maybe in some cases websites will still be able to detect that you're using Linux, but some won't and even when they do spoofing a Windows UA won't be an issue since every other Tor Browser installation would be doing it too. Meanwhile, as it stands now the anonymity set is split between Linux users not spoofing a Windows UA and the (I assume considerably large) number of Linux users choosing to spoof it (as Linux users tend to be on the tech-savvier side and thus I imagine would have no problem installing an extension). So the problem was made worse and not better by this change, while ignoring the fact that there never was a problem in no-JS contexts.
Overall this change is eroding the trust many of your users have in you to make the most sensible default decisions. And people not trusting Tor Browser and rolling their own to whatever degree is a much bigger threat to its design than whatever esoteric OS fingerprinting issues you're worried about invalidating UA spoofing (which, like I said before, makes no sense anyway as even if your real OS is detected, them knowing you have a spoofed UA means nothing if every other Tor Browser is spoofing it too, just as it was in 7.x), even ignoring the fact that it's just not an issue in most no-JS contexts.
As for me I now have an extension installed to spoof my UA. It's open source but is it trustworthy? Hopefully it is. I gladly uninstalled my last UA spoofing extension years ago and now it feels like a major regression that I feel that I have no choice but to install another one.
Just giving into Mozilla's decision making on this issue is a lame excuse too. Has the Tor Browser team forgotten how to code? What's the point of a browser fork if it's not actually, you know, forked?
Overall I'm just annoyed because the logic behind this decision is so transparently flawed and people trust you to make better decisions than this. People shouldn't have to be investing their time in explaining the obvious to you but apparently they do now. I'm sorry for being snippy but this is a major violation of your mission.
I was already annoyed with you constantly dumbing down things UX-wise for the benefit of people who can't be bothered to read a single full sentence about a system that they're expecting to protect their anonymity (which is pointless as they will invariably find some way to screw things up due to their lack of knowledge no matter how many "dangerous" options you remove), but when it's gotten to the point of actually sacrificing privacy/anonymity because some random bozos report "I can't use my google docs!" (which they're probably signed into with an entirely identifiable account) to you (or some other stupid BS about corporate apps that probably can't even be used anonymously no matter what anyway as they all ask for phone numbers) then it's gone too far.
Maybe you can release two versions of Tor Browser? One for people who know what they're doing, are willing to read, and understand that everything might not work automaticaly, and one that's just Firefox with a pretty shade of green paint over it (which is what Tor Browser is trending toward)? Either way you need to do something to fix this because if you don't, you will eventually end up with the situation I just stated as a de facto reality due to a fork, at which point you will split the anonymity set of Tor users further and lose control over what that new team does. You need to make the right decision now before it's too late.
Thanks for this comment. We…
Thanks for this comment. We'll investigating the issue for our upcoming 8.0.1 release. Our current idea is outlined in https://trac.torproject.org/projects/tor/ticket/26146#comment:33.
That said, disabling JavaScript does not prevent OS detection on websites as the font set we ship is differing across platforms.
Why not ship same font set…
Why not ship same font set for all platforms?
"That said, disabling…
"That said, disabling JavaScript does not prevent OS detection on websites as the font set we ship is differing across platforms."
Browser's fonts can't be detected without javascript, can they?
WTF? [09-12 08:54:50]…
WTF?
[09-12 08:54:50] Torbutton INFO: tor SOCKS: https://noscript-csp.invalid/__NoScript_Probe__/ via
torproject.org:95fb0aa26385e3871d52701322ed4856
I suspect this is a false…
I suspect this is a false positive given the .invalid domain, but still why is this associated with a content domain. Do you steps to reproduce that?
it is open very fast but…
it is open very fast but some web site
littel slow also movies or video slow.
Tor 9 new upgrade coming soon :)
The new NoScript is HORRIBLE…
The new NoScript is HORRIBLE, absolutely terrible. Unusable, the program is basically dead, as must be the brains of the developers. This was known already from the "normal" version, but is all the more apparent now that Tor uses it too.
Tor does not work now with this prorgram, which is a kind of bug and certainly a liability.
What do you mean with "Tor…
What do you mean with "Tor does not work now with this program"? What is the issue?
08:25:22.894 Error: No…
08:25:22.894 Error: No handler registered for message "updateSettings" in context moz-extension://%noscript%/ui/options.html#;tab-main-tabs=3 1 Messages.js:422:12
Dear and beloved Tor devs,…
Dear and beloved Tor devs, please fix the user-agent issue! Using Tor Browser on Linux really really stands us out from the crowd! Please at least give us the ability to still enable classical Windows user-agent if we want! Or do you know of any workaround regarding this issue?
As of now, my user-agent header is
Really, really bad! Progress should be toward more anonymity, not less! This is a really scary regression!
Thanks a lot for your work!
This is a new feature…
This is a new feature brought to you by Mozilla and approved by Tor Browser team. Enjoy!
18:15:35.134 Loading failed…
18:15:35.134 Loading failed for the with source “chrome://global/content/TopLevelVideoDocument.js”. 1 269.mp4:1
17:29:23.673 NS_ERROR_NOT…
17:29:23.673 NS_ERROR_NOT_AVAILABLE: 1 videocontrols.xml:391
NI: 18:32:26.005 this…
NI:
18:32:26.005 this.browser is null 1 ext-tabs-base.js:298
get frameLoader chrome://extensions/content/ext-tabs-base.js:298:5
get frameLoader chrome://browser/content/ext-browser.js:605:5
get width chrome://browser/content/ext-browser.js:678:5
convert chrome://extensions/content/ext-tabs-base.js:579:7
get chrome://browser/content/ext-tabs.js:572:18
InterpretGeneratorResume self-hosted:1259:8
next self-hosted:1214:9
get self-hosted:977:17
call/result< resource://gre/modules/ExtensionParent.jsm:772:57
withPendingBrowser resource://gre/modules/ExtensionParent.jsm:427:26
next self-hosted:1214:9
call resource://gre/modules/ExtensionParent.jsm:771:20
next self-hosted:1214:9
torbutton_send_ctrl_cmd chrome://torbutton/content/torbutton.js:753:10
torbutton_do_new_identity chrome://torbutton/content/torbutton.js:1117:10
torbutton_new_identity chrome://torbutton/content/torbutton.js:847:9
oncommand chrome://browser/content/browser.xul:1:1
no images on Safer? server-…
no images on Safer?
server->img_server->alt-svc->hsv3->no images! no way to enable!
wth?
Fucking Cloudflare! It…
Fucking Cloudflare! It vandalizes my web experience even with tls 1.3 enabled!!!!!
https://cflarexljc3rw355ysrkrzwapozws6nre6xsy3n4yrj7taye3uiby3ad.onion/
SSL_ERROR_NO_CYPHER_OVERLAP
I mean alt-svc seamlessly…
I mean alt-svc seamlessly redirects to it!
I do not possess the…
I do not possess the technical knowledge many here do, but the new browser just doesn't seem to work well. Pages don't load, timeouts for well known sites (yes, I get that they could be down), I don't get the Tor landing page confirming Tor loaded fine and is secure, NoScript configuration is what, super-automatic and perfect now...it just seems off. For those of us that have come to rely on it for privacy with the older config options, I don't feel like I have control or knowledge that I am as secure as I used to be. Something just feels off.
12:58:43.774 TypeError: this…
12:58:43.774 TypeError: this.Utils is undefined 1 videocontrols.xml:1879:5
why cannot connect to Israel…
why cannot connect to Israel nodes/relays?
The new version 8 is very…
The new version 8 is very bad...
There's no option to change the ip-address.
Script handling is complicated. The old version is better
Now I only get message 'Your IP Address is banned' everywhere.
WHERE IS THE OLD VERSION !!!
WHERE IS THE OLD VERSION !!!
Dark web
Dark web
TBB-Firefox sends linux…
TBB-Firefox sends Linux kernel version in extensions blocklist update queries to Mozilla. 6 years old ticket closed https://trac.torproject.org/projects/tor/ticket/6734 without fix this privacy issue.
From Ubuntu 18.04.1 LiveCD
/v1/blocklist/3/%7Bec8030f7-c20a-464f-9b0e-13a3a9e97384%7D/60.2.0/Firefox/20180204030101/Linux_x86_64-gcc3/en-US/release/Linux 4.15.0-29-generic (GTK 3.22.30 libpulse 11.1.0)/default/default/1/1/new/
about:config
extensions.blocklist.url:
https://blocklists.settings.services.mozilla.com/v1/blocklist/3/%APP_ID…
Also it send TOTAL_PING_COUNT to tell mozilla how many days you use TBB.
Thank you very much for this…
Thank you very much for this information regarding, "TBB-Firefox sends OS+kernel in update queries to Mozilla".
Ticket #6734, which you pointed out, is closed. The final post in that ticket refers to two other tickets, one of which is closed and the other, #3555, is open. If you or anyone else would like to contribute to the discussion there, please do. Registration is quick with a username and password, no e-mail required. Thank you.
Tickets:
https://trac.torproject.org/projects/tor/ticket/3555
https://trac.torproject.org/projects/tor/ticket/6734
I allowed Tor to update…
I allowed Tor to update itself on Mac 10.9.5 system and now it doesn't run at all. Instantly goes to a crash window. Deleted everything from application support folder and the app itself, downloaded from this website, same exact effect.
adobe flash download demands…
adobe flash download demands "close mozilla". Is it not possible to install the adobe flash player with tor?
That's a very good way to…
That's a very good way to eliminate whatever benefits you were trying to gain by using tor.
13:21:27.382 TypeError: win…
13:21:27.382 TypeError: win is null 1 ExtensionUtils.jsm:118:3
14:10:36.886 Public-Key-Pins…
14:10:36.886 Public-Key-Pins: The site specified a header that did not include a matching pin. 1 alphanumeric_aleo-white_P.png-_9d7fad-0%2C0%2C0%2C0.png
Alt-Svc to onions breaks HPKP it seems, see:
view-source:https://d3kxowhw4s8amj.cloudfront.net/file/data/7yvbw45bfpaqnff352wu/PH…
1537527087896 addons…
1537527087896 addons.manager WARN Exception calling callback: [Exception... "Component returned failure code: 0x80520012 (NS_ERROR_FILE_NOT_FOUND) [nsIFile.isDirectory]" nsresult: "0x80520012 (NS_ERROR_FILE_NOT_FOUND)" location: "JS frame :: resource://gre/modules/addons/PluginProvider.jsm :: get size :: line 415" data: no] Stack trace: get size()@resource://gre/modules/addons/PluginProvider.jsm:415
_updateView()@extensions.js:2933
show/<()@extensions.js:3020
safeCall()@resource://gre/modules/AddonManager.jsm:182
makeSafe/<()@resource://gre/modules/AddonManager.jsm:197
Check this on Safest:https:/…
Check this on Safest:
https://web.archive.org/web/20160308072653/https://www.benthamsgaze.org…
TOR 8 IS A COMPLETE AND…
TOR 8 IS A COMPLETE AND UTTER PIECE OF SHIT
OK so Tor is being like my…
OK so Tor is being like my wife In moving things around that I cant find anymore. So tell me where the picture of the routing Circuit has gone that you normally see when you click on the onion in the top left corner??
This change got announced…
This change got announced via different channels (not sure if your wife is actually doing this kind of thing, too): it is now behind the "i" icon on the URL bar.