Tor Browser Bundle 1.2.9 Released
Tor Browser Bundle 1.2.9 is released today. It updates Firefox and Pidgin Instant Messaging client to address the security issues in the older versions, and includes the latest and greatest Vidalia.
TBB can be downloaded from https://sedvblmbog.tudasnich.de/torbrowser.
The details of the changes are:
- update Vidalia to 0.2.4
- update Qt to 4.5.2
- update Pidgin to 2.6.2
- update Firefox to 3.0.14
Comments
Please note that the comment area below has been archived.
Sorry for offtopic, but i am
Sorry for offtopic, but i am using Vidalia 0.2.3, and i found that there is a lot requests to non mapped IP 69.164.192.183:443 (callisto.vidalia-project.net). What is this?
re: vidalia ip
It's the server we use to update the geoip database on your client. You anonymously connect over Tor to the server, get database updates to download, and then locate servers around the world. If you disable this feature, you'll notice the network map has no country flags next to the relays.
Why do you force people to
Why do you force people to update this database, in previous versions it worked with a non "updated" database.
My configuration is quite strict so newest version is not working as it should, have to use older ones until this new "feature" is fixed or clearly explained how to get it working !!!
What IPs do i have to enable in torrc for this to work with latest bundle ?
Do i have to enable this IP: 69.164.192.183:443(in TORRC, firewall or both?), do i have to do that only once, or every time i start vidalia or even every X hours ???
re: because
People like to see where the relays exist in the world. The geoip lookups are completely anonymously over Tor. You shouldn't have to allow anything in your firewall at all.
Perhaps we should have a config option in vidalia to disable geoip lookups of relays.
TORRC not respected anymore
My point is this:
Previous versions of vidalia bundle works and shows country flags on map, this version is not working, not shownig any country flags on map and are allowing circuits that is blocked by my torrc configuration, so once again
" My configuration is quite strict so newest version is not working as it should, have to use older ones until this new "feature" is fixed or clearly explained how to get it working !!!
What IPs do i have to enable in torrc for this to work with latest bundle ? "
hmm.. why is there no Tor
hmm.. why is there no Tor Browser 0.2.2.1-alpha Bundle? :(
re: hmm
Because it's already alpha enough?
TorButton not working on release
The torbutton is incompatible with this release of Firefox, nor does it work with firefox 3.5.3.
Question:
why not use firefox 3.5.3 on the TOR browser?
re: torbutton and firefox 3.5.x
We don't recommend using torbutton with Firefox 3.5.x at all. While it may appear to work, Firefox 3.5 is a major rewrite of the codebase. We're in the middle of a month of analyzing the firefox 3.5 codebase and adapting torbutton to work with it.
Torbutton was designed for Firefox 3.0.x. This is why we don't ship firefox 3.5.x in the Tor Browser Bundles, it's not safe to do so.
OK, thanks for the answer.
OK, thanks for the answer. Please note that the TOR button does not work with firefox 3.0.0.14 as well.
re: torbutton
torbutton works fine with 3.0.14.
Is the official statement
Is the official statement still that you have to abandon the Firefox browser in the future when version 3.5.x is the only alternative/updated version because of the severe security issues that's impossible to solve with it
Or is it that you are to completely rewrite your own version of it.
If so what alternative browser(s) that are considered safe if any to replace firefox with ?
re: official statement
This is as official as it gets, https://ocewjwkdco.tudasnich.de/blog/tor-browser-bundle-129-released#commen…
It's a work in progress. We realize that Firefox 3.0.x will be unsupported past January 2010.
>The torbutton is
>The torbutton is incompatible with this release of Firefox,
Hmmm. The release of FF included with the copy of this bundle that I downloaded is 3.0.13 and it is working just fine. Perhaps I misunderstood what you were trying to say?
what? On your dowloads page
what? On your dowloads page it say "Want Tor to really work?....We recommend you use Firefox with the Torbutton extension." and you link to mozilla's latest version of firefox (3.5.3) Now you say not to?
And torbutton also say it works fine to firefox 3.6a1pre. some very unclear ambiguity going on here and worrying stuff too.
Re: "On your dowloads page
Re: "On your dowloads page it say "Want Tor to really work?....We recommend you use Firefox with the Torbutton extension." and you link to mozilla's latest version of firefox (3.5.3)"
The url behind that link is "http://www.mozilla.org/firefox" which is obsolete (predates the restructuring of the Mozilla project and domains mozilla.org & mozilla.com) Mozilla.org itself redirects that page request to "http://www.mozilla.com/en-US/firefox/upgrade.html" which will always (absent more restructuring in the future) have the downloads for latest production version(s) of FF. The link on the Tor page should be fixed or deactivated, but it isn't as if Tor were intentionally linking you to an inappropriate version of FF.
Re: "torbutton also say it works fine to firefox 3.6a1pre" I am unable to find such a claim on the Tor download page. Got link?
re: mozilla link
Yes, you are correct. I'll update this to link to Firefox 3.0.x. Sorry for the confusion.
Privoxy?
I never examined the Torbutton settings in the browser bundles until I saw allegations in this thread that it was not working. Now that I have looked, I am a bit confused. I recently read a statement dated 8/25/2009 by Andrew Lewman in a reply to a user question that "The Tor Browser Bundle, aka the portable bundle, doesn't include
Privoxy. It includes Polipo instead." (see: http://www.mail-archive.com/or-talk@freehaven.net/msg11474.html). However (I am using TBB 1.2.9), on the Proxy tab of the Torbutton add-in, both "use the recommended settings for my version of Firefox" *and* "Use Privoxy" are selected. Mr. Lewman's statement and the settings are confusing, and seem to be contradictory. Is the "Use Privoxy" nomenclature in Torbutton deprecated or otherwise misleading? If not, please enlighten me as to what important concept I have missed here. Thank you.
clarification
"until I saw allegations in this thread that it was not working." - "it" being Torbutton, if that was unclear.
re: privoxy
It's a nomenclature bit. The Tor Browser Bundle does not include Privoxy. Torbutton could just as well state "Use Fluffy Bunnies" and point the browser at localhost:8118 correctly.
You do raise a fine point that torbutton needs to be updated.
Thanks, I thought that might
Thanks, I thought that might be the answer, but I thought it was worth asking. With security and privacy tools, it really does seem to me that the only stupid questions are the ones that do not get asked :-)
Most connections fail
Can't give email because connection now fails. Wikileaks submit also failed. Added this latest update after being new at this and at least succeeding at getting to my anon email. Doesn't seem to work so well for me. No one here to help.
re: connections failing
What fails? Tor? Connections to hidden services?
connections failing
Tor was up and running, but would not connect to urls, today it did connect to email url that failed the other day. For one site that failed I was told I need a US exit node, but don't know how to do that. No one here to tell me how.
thanks for changing your
thanks for changing your link to firefox 3.0 that was bad.
You STILL link to the torbutton page which says "tor button fine to 3.6a1pre" link here which is obviously very confusing for people
https://addons.mozilla.org/en-US/firefox/addon/2275.
re: thanks for changing your
It is compatible. If people want to shoot themselves in the foot, they can go right ahead and do so.
2 questions
Whether it's FF 3.5x or previous versions, when enabling Tor Button, it automatically resizes my browser window to various sizes, usually bigger than my screen itself. To make it worse, when I'm done using it and disable it, it doesn't revert back to it's original dimensions. I'd prefer my browser size be left completely alone, and let me resize it myself if/when needed. Why does it do this? is there a logic behind it that I'm unaware of?
Second question, I just read about it not being compatible with 3.5.x. What's unsafe? does it leak your real IP address? When I've checked so far at ipchicken.com, it always seems to show an IP that isn't mine?
Is is possible to update the
Is is possible to update the Tor Browser Bundle (including Pidgin) without uninstalling and then installing the new version?
flashplayer
is there anyway to use adobe while tor is enabled ?
re: flash
Using Flash with Tor isn't safe, you will lose some anonymity. There are options to enable this, but you might as well not use Tor then, https://sedvblmbog.tudasnich.de/torbutton/faq.html.en#noflash
In China, No freedom of speech!
So... for some odd reason my Tor stopped working midway through loading a page today. It can now no longer connect. I'm using the 0.1.15 Vidalia, 0.2.0.35 Tor, 4.3.5 QT, Tor button was a seperate tack on.
I know its an old version, but it took me 4 days last week to look for a working mirror for the browser bundle - since most sites link to the Tor Project. however, I'm running a MAC, and unfortunately Torproject.org is blocked by China. *sighs*
What are my options?
re: no freedom of speech
https://ocewjwkdco.tudasnich.de/blog/tor-partially-blocked-china
Get a bridge, you also may want to update to the latest -stable as bridges will work better and Tor is faster overall.
Armegeddon Came Yesterday!
I have the same problem as the previous poster. As of 09-24-2009 at around 5PM, I can not connect to any TOR relays. None at all - I'm not sure what happened. After the problem, I started looking on the net (Unfortunately I can not connect to torproject.org) and found that I may be using incompatible versions. FF = 3.5.3 and Vidalia-bundle-0.2.0.35-0.1.15. But it worked great until yesterday!
Can anyone give me any advice on how to connect again, and mirror sites to download the needed versions (or even e-mail me the versions that I need).
Any help would be greatly appreciated, especially if it were clear enough for a 5 year old to understand! The only SOCKS I know about smell bad! I don't really need to be anonymous because of anything I'm doing on-line, I just want to get access to blocked websites like facebook.
Every popular breach in the
Every popular breach in the GFW has been filled. Popular free and paid vpn and even tor's bridges are all but blocked in Beijing. Just a week before the 60th anniversary of China, the timing leaves no doubt that they want to have complete and utter control over the internet before the celebrations. Previous anniversaries and important national events are usually the occasion to tighten security measures, both on the street and online, but to date I think this is the first time that tor completely stopped working here in Beijing.
This is not likely to change after oct. 8, so unless the TOR team can come up with a workaround, we people living in China will have to embrace censorship and enjoy harmonious web browsing with Chinese characteristics (or resort to those annoying web proxies).
re: tor in china
We have confirmed reports that Tor is working for some people in China, and that bridges continue to work for the most part.
https://ocewjwkdco.tudasnich.de/blog/tor-partially-blocked-china
Every popular breach in the
Every popular breach in the GFW has been filled. Popular free and paid vpn and even tor's bridges are all but blocked in Beijing. Just a week before the 60th anniversary of China, the timing leaves no doubt that they want to have complete and utter control over the internet before the celebrations. Previous anniversaries and important national events are usually the occasion to tighten security measures, both on the street and online, but to date I think this is the first time that tor completely stopped working here in Beijing.
This is not likely to change after oct. 8, so unless the TOR team can come up with a workaround, we people living in China will have to embrace censorship and enjoy harmonious web browsing with Chinese characteristics (or resort to those annoying web proxies).
Need a New Bridge
Can someone please post a new bridge here for me to use? Tor isn't replying for my request for a bridge - plus I can't get to the published list of bridges on Tor's page. If a couple people reply with new bridges, I think I'd be in good shape. E-mail might be better to keep them confidential - dave7822@aol.com
to find public bridge
to find public bridge addresses is to send mail to bridges@torproject.org with the line get bridges by itself in the body of the mail.
Replacing firefox
Can I replace the Firefox in the bundle with a portable Firefox 3.5.3?
How do I remove browser bundle please?
I followed the instructions on the site and I'm not having any luck. Can someone please help me?
Nov 08 12:03:39.958 [Notice]
Nov 08 12:03:39.958 [Notice] No current certificate known for authority ides; launching request.Please fix this thing. Any updates for TBB?. if so when will be the other version is going 2 be released?
Hi, I installed TOR last
Hi, I installed TOR last week and upon running it, it told me there is a newer version available. I downloaded it and attempted to uninstall the older version so as to install the newer version be the uninstall didn't complete the process and as such I couldn't install the new version as it keeps giving error messages.
Can I get an uninstaller to enable me complete the process or can I repair the damaged one?
Felix.
I have the same problem, was
I have the same problem, was told to upgrade, couldn't uninstall the previous version, installed new version, now nothing works :((((.
when I,ll watch youtube by
when I,ll watch youtube by tor I cant do it and it sey to me that install adobe flash player.how can I install it on tor.I use ubuntu OS 0.4