New Release: Tor Browser for Android 1.0a3

by sysrqb | October 31, 2018

 

Tor Browser for Android 1.0a3 is now available from the Tor Browser Project page and also from our distribution directory.

This release features important security updates to Firefox.

Moreover, we backport a defense against protocol handler enumeration developed by Mozilla engineers.

Unfortunately, in this release we are temporarily introducing a regression due to a potential proxy-bypass bug within some versions of Android. Tor Browser for Android will not download a website's "favicon" in this release (the small image shown beside the title of the webpage in the list of tabs). From our investigation into this bug, we found Android versions before Android Oreo (Android version 7 and earlier, API level 25 and earlier) leak some information about which webpage the browser is loading. This was corrected in newer versions of Android, however this temporary regression is necessary because it is likely most users have an older version of Android, and there may be other bugs we haven't discovered yet. One bug in the Android networking code is one bug too many. We are working on a new way of downloading these icons.

 

The full changelog since Tor Browser for Android 1.0a2 is:

  • Update Firefox to 60.3.0esr
  • Update Torbutton to 2.1.1
  • Update HTTPS Everywhere to 2018.9.19
  • Backport of fixes for bug 1448014, 1458905, 1441345, and 1448305
  • Bug 1623: Block protocol handler enumeration (backport of fix for #680300)
  • Bug 28125: Prevent proxy-bypass bug by Android networking library

Comments

Please note that the comment area below has been archived.

Anonymous (not verified) said:

November 02, 2018

Permalink

Congratulations on the release. I wanted to open some bug tickets with the cypherpunks account on track, but the operation is disallowed. The main two issues are I can't download files or save pics and I can't copy-paste text. Android 7

cypherpunks account has been - for the first time in a heck of a long time - been completely maltreated all because of online fascist tendencies exhibited by teor (a fine and even super tor guy). Now a lot of TB bugs that weren't diagnosed were because of us not bothering to do the testing since cypherpunks - the only multiaccount on trac - being restricted. AH, how much we miss the good old simple times! Arma if you're reading this please take immediate action.

Anonymous (not verified) said:

November 03, 2018

Permalink

There are some big usability issues with this browser:

- You can't select anything, like text. It's not possible to copy or paste anything.
- Downloads don't work correctly.
- Screenshots are impossible to take, making it necessary to switch to a less secure browser to take a screenshot of a site.

Yes, unfortunately these are known bugs, but thanks for the comment and testing this alpha version.

- You can't select anything, like text. It's not possible to copy or paste anything.
- https://trac.torproject.org/projects/tor/ticket/27256
- Downloads don't work correctly.
- https://trac.torproject.org/projects/tor/ticket/27701
- Screenshots are impossible to take, making it necessary to switch to a less secure browser to take a screenshot of a site.
- https://trac.torproject.org/projects/tor/ticket/27987

Micio (not verified) said:

November 05, 2018

Permalink

Downloaded from Fdroid right now propably 1 hour early ,scripts are giving me issues, don't know exactly what it means :"A script or more is attempting working not properly " just trying typeing on tor check on tor project, else an app has stopped to works while I was trying checking ttb ,very sad .Don't know how to do solving .Android 5. Anyway thank you so much for your hard work, I think you are looking for doing all your best.
Best regards your affectionated follower, I really love ttb on android.
Micio.

noobiexxx (not verified) said:

November 05, 2018

Permalink

i can't download ascii armored GPG sigs with many Android Firefox versions.
.asc and .sig files must not be formatted (treat them like binary)

BigBan (not verified) said:

November 12, 2018

Permalink

That would be handy, of course, if then in the Stable even orbot falls away.

I am testing the browser just now and so far and it is stable. What bothers me that here similar to Fennec F-Droid once the Pocket recommendations are enabled and actually should not change the settings at TOR. I deactivated them anyway because they annoy me.

Corey (not verified) said:

December 01, 2018

Permalink

Hey.
Maybe someone can help. I was using the tor browser alpha and when I went to clear my private data it said that it couldn't remove it all.