Outline ·
[ Standard ] ·
Linear+
Tor v0.2.x [Free]
|
cybpsych
|
Aug 12 2014, 06:34 AM
|
|
|
|
|
|
|
|
cybpsych
|
Aug 22 2014, 06:38 AM
|
|
|
|
|
|
|
|
cybpsych
|
Aug 29 2014, 01:12 PM
|
|
|
|
|
|
|
|
cybpsych
|
Sep 3 2014, 05:20 PM
|
|
Tor Browser Bundle 3.6.5https://www.torproject.org/dist/torbrowser/...3.6.5_en-US.exehttps://www.torproject.org/dist/torbrowser/3.6.5/» Click to show Spoiler - click again to hide... « Tor Browser Bundle 3.6.5 -- Sep 2 2014 * All Platforms * Update Firefox to 24.8.0esr * Update NoScript to 2.6.8.39 * Update HTTPS Everywhere to 4.0.0 * Update Torbutton to 1.6.12.1 * Bug 12684: New strings for canvas image extraction message * Bug 8940: Move RecommendedTBBVersions file to www.torproject.org * Bug 9531: Workaround to avoid rare hangs during New Identity * Bug 12684: Improve Canvas image extraction permissions prompt * Bug 7265: Only prompt for first party canvas access. Log all scripts that attempt to extract canvas images to Browser console. * Bug 12974: Disable NTLM and Negotiate HTTP Auth * Bug 2874: Remove Components.* from content access (regression) * Bug 9881: Open popups in new tabs by default * Linux: * Bug 12103: Adding RELRO hardening back to browser binaries. Tor Browser Bundle 4.0 Alpha 2https://www.torproject.org/dist/torbrowser/...pha-2_en-US.exehttps://www.torproject.org/dist/torbrowser/4.0-alpha-2/» Click to show Spoiler - click again to hide... « Tor Browser Bundle 4.0-alpha-2 -- Sep 2 2014 * All Platforms * Update Firefox to 24.8.0esr * Update NoScript to 2.6.8.39 * Update Tor Launcher to 0.2.7.0 * Bug 11405: Remove firewall prompt from wizard. * Bug 12895: Mention @riseup.net as a valid bridge request email address * Bug 12444: Provide feedback when “Copy Tor Log†is clicked. * Bug 11199: Improve error messages if Tor exits unexpectedly * Update Torbutton to 1.6.12.1 * Bug 12684: New strings for canvas image extraction message * Bug 8940: Move RecommendedTBBVersions file to www.torproject.org * Bug 12684: Improve Canvas image extraction permissions prompt * Bug 7265: Only prompt for first party canvas access. Log all scripts that attempt to extract canvas images to Browser console. * Bug 12974: Disable NTLM and Negotiate HTTP Auth * Bug 2874: Remove Components.* from content access (regression) * Bug 4234: Automatic Update support (off by default) * Bug 9881: Open popups in new tabs by default * Meek Pluggable Transport: * Bug 12766: Use TLSv1.0 in meek-http-helper to blend in with Firefox 24 * Windows: * Bug 10065: Enable DEP, ASLR, and SSP hardening options * Linux: * Bug 12103: Adding RELRO hardening back to browser binaries.
|
|
|
|
|
|
cybpsych
|
Sep 12 2014, 09:58 AM
|
|
Tor v0.2.5.7 RC (Linux)https://www.torproject.org/dist/tor-0.2.5.7-rc.tar.gz» Click to show Spoiler - click again to hide... « Changes in version 0.2.5.7-rc - 2014-09-11 Tor 0.2.5.7-rc fixes several regressions from earlier in the 0.2.5.x release series, and some long-standing bugs related to ORPort reachability testing and failure to send CREATE cells. It is the first release candidate for the Tor 0.2.5.x series.
o Major bugfixes (client, startup): - Start making circuits as soon as DisabledNetwork is turned off. When Tor started with DisabledNetwork set, it would correctly conclude that it shouldn't build circuits, but it would mistakenly cache this conclusion, and continue believing it even when DisableNetwork is set to 0. Fixes the bug introduced by the fix for bug 11200; bugfix on 0.2.5.4-alpha. - Resume expanding abbreviations for command-line options. The fix for bug 4647 accidentally removed our hack from bug 586 that rewrote HashedControlPassword to __HashedControlSessionPassword when it appears on the commandline (which allowed the user to set her own HashedControlPassword in the torrc file while the controller generates a fresh session password for each run). Fixes bug 12948; bugfix on 0.2.5.1-alpha. - Warn about attempts to run hidden services and relays in the same process: that's probably not a good idea. Closes ticket 12908.
o Major bugfixes (relay): - Avoid queuing or sending destroy cells for circuit ID zero when we fail to send a CREATE cell. Fixes bug 12848; bugfix on 0.0.8pre1. Found and fixed by "cypherpunks". - Fix ORPort reachability detection on relays running behind a proxy, by correctly updating the "local" mark on the controlling channel when changing the address of an or_connection_t after the handshake. Fixes bug 12160; bugfix on 0.2.4.4-alpha.
o Minor features (bridge): - Add an ExtORPortCookieAuthFileGroupReadable option to make the cookie file for the ExtORPort g+r by default.
o Minor features (geoip): - Update geoip and geoip6 to the August 7 2014 Maxmind GeoLite2 Country database.
o Minor bugfixes (logging): - Reduce the log severity of the "Pluggable transport proxy does not provide any needed transports and will not be launched." message, since Tor Browser includes several ClientTransportPlugin lines in its torrc-defaults file, leading every Tor Browser user who looks at her logs to see these notices and wonder if they're dangerous. Resolves bug 13124; bugfix on 0.2.5.3-alpha. - Downgrade "Unexpected onionskin length after decryption" warning to a protocol-warn, since there's nothing relay operators can do about a client that sends them a malformed create cell. Resolves bug 12996; bugfix on 0.0.6rc1. - Log more specific warnings when we get an ESTABLISH_RENDEZVOUS cell on a cannibalized or non-OR circuit. Resolves ticket 12997. - When logging information about an EXTEND2 or EXTENDED2 cell, log their names correctly. Fixes part of bug 12700; bugfix on 0.2.4.8-alpha. - When logging information about a relay cell whose command we don't recognize, log its command as an integer. Fixes part of bug 12700; bugfix on 0.2.1.10-alpha. - Escape all strings from the directory connection before logging them. Fixes bug 13071; bugfix on 0.1.1.15. Patch from "teor".
o Minor bugfixes (controller): - Restore the functionality of CookieAuthFileGroupReadable. Fixes bug 12864; bugfix on 0.2.5.1-alpha. - Actually send TRANSPORT_LAUNCHED and HS_DESC events to controllers. Fixes bug 13085; bugfix on 0.2.5.1-alpha. Patch by "teor".
o Minor bugfixes (compilation): - Fix compilation of test.h with MSVC. Patch from Gisle Vanem; bugfix on 0.2.5.5-alpha. - Make the nmake make files work again. Fixes bug 13081. Bugfix on 0.2.5.1-alpha. Patch from "NewEraCracker". - In routerlist_assert_ok(), don't take the address of a routerinfo's cache_info member unless that routerinfo is non-NULL. Fixes bug 13096; bugfix on 0.1.1.9-alpha. Patch by "teor". - Fix a large number of false positive warnings from the clang analyzer static analysis tool. This should make real warnings easier for clang analyzer to find. Patch from "teor". Closes ticket 13036.
o Distribution (systemd): - Verify configuration file via ExecStartPre in the systemd unit file. Patch from intrigeri; resolves ticket 12730. - Explicitly disable RunAsDaemon in the systemd unit file. Our current systemd unit uses "Type = simple", so systemd does not expect tor to fork. If the user has "RunAsDaemon 1" in their torrc, then things won't work as expected. This is e.g. the case on Debian (and derivatives), since there we pass "--defaults-torrc /usr/share/tor/tor-service-defaults-torrc" (that contains "RunAsDaemon 1") by default. Patch by intrigeri; resolves ticket 12731.
o Documentation: - Adjust the URLs in the README to refer to the new locations of several documents on the website. Fixes bug 12830. Patch from Matt Pagan. - Document 'reject6' and 'accept6' ExitPolicy entries. Resolves ticket 12878.
|
|
|
|
|
|
cybpsych
|
Sep 15 2014, 09:36 AM
|
|
Android Bundle Orbot v14.0.8.1Direct links https://guardianproject.info/releases/Orbot-v14.0.8.1.apkhttps://guardianproject.info/releases/orbot-latest.apkhttps://play.google.com/store/apps/details?...project.android» Click to show Spoiler - click again to hide... « 2bcb1ee removing binaries from source repo a64e6b1 update Orbot about dialog display to show tor version 93614dd update english versions strings ef98429 update tor binary constant to force on device upgrade a3dc39d updating binaries 08317a9 fixes for transproxy/iptables rules - not all rules were not being cleared in flush - per-app transproxy now still transproxie 826b629 update changelog b35a239 ensure all iptables rules are always wiped and reapply rules settings if modifed after settings menu accessed 313c92f add warning about restarting Orbot after settings changes 8ee5e9e more tuning of Tor service startup and status checking 9c4c349 fix for reconnecting to exiting Tor process after service restart a0b32ba don't manually call onDestroy, just call finish() b8912ad improve error handling of tor startup sequence don't use executor thread pool for time critical commands c98509d remove duplicate service start/bind code in onResume() also disable startup button if service is null b35a239 ensure all iptables rules are always wiped and reapply rules settings if modifed after settings menu accessed 313c92f add warning about restarting Orbot after settings changes 8ee5e9e more tuning of Tor service startup and status checking 9c4c349 fix for reconnecting to exiting Tor process after service restart a0b32ba don't manually call onDestroy, just call finish()
|
|
|
|
|
|
cybpsych
|
Sep 23 2014, 10:13 AM
|
|
|
|
|
|
|
|
cybpsych
|
Sep 26 2014, 11:34 AM
|
|
Tor Browser Bundle 3.6.6https://www.torproject.org/dist/torbrowser/...3.6.6_en-US.exehttps://www.torproject.org/dist/torbrowser/3.6.6/» Click to show Spoiler - click again to hide... « Tor Browser Bundle 3.6.6 -- Sep 24 2014 * All Platforms * Update Tor to tor-0.2.4.24 * Update Firefox to 24.8.1esr * Update NoScript to 2.6.8.42 * Update HTTPS Everywhere to 4.0.1 * Bug 12998: Prevent intermediate certs from being written to disk * Update Torbutton to 1.6.12.3 * Bug 13091: Use "Tor Browser" everywhere * Bug 10804: Workaround fix for some cases of startup hang * Linux * Bug 9150: Make RPATH unavailable on Tor binary.
|
|
|
|
|
|
cybpsych
|
Sep 26 2014, 08:59 PM
|
|
Tor Browser Bundle 4.0 Alpha 3https://www.torproject.org/dist/torbrowser/...pha-3_en-US.exehttps://www.torproject.org/dist/torbrowser/4.0-alpha-3/» Click to show Spoiler - click again to hide... « Tor Browser 4.0-alpha-3 -- Sep 24 2014 * All Platforms * Update Tor to 0.2.5.8-rc * Update Firefox to 24.8.1esr * Update meek to 0.11 * Update NoScript to 2.6.8.42 * Update Torbutton to 1.6.12.3 * Bug 13091: Use "Tor Browser" everywhere * Bug 10804: Workaround fix for some cases of startup hang * Bug 13091: Use "Tor Browser" everywhere * Bug 13049: Browser update failure (self.update is undefined) * Bug 13047: Updater should not send Kernel and GTK version * Bug 12998: Prevent intermediate certs from being written to disk * Bug 13245: Prevent non-english TBBs from upgrading to english version. * Linux: * Bug 9150: Make RPATH unavailable on Tor binary. * Bug 13031: Add full RELRO protection.
|
|
|
|
|
|
cybpsych
|
Oct 16 2014, 09:26 AM
|
|
Tor Browser 4.0https://www.torproject.org/dist/torbrowser/...l-4.0_en-US.exeother packages https://www.torproject.org/dist/torbrowser/4.0/» Click to show Spoiler - click again to hide... « Tor Browser 4.0 -- Oct 15 2014 * All Platforms * Update Firefox to 31.2.0esr * Update Torbutton to 1.7.0.1 * Bug 13378: Prevent addon reordering in toolbars on first-run. * Bug 10751: Adapt Torbutton to ESR31's Australis UI. * Bug 13138: ESR31-about:tor shows "Tor is not working" * Bug 12947: Adapt session storage blocker to ESR 31. * Bug 10716: Take care of drag/drop events in ESR 31. * Bug 13366: Fix cert exemption dialog when disk storage is enabled. * Update Tor Launcher to 0.2.7.0.1 * Translation updates only * Udate fteproxy to 0.2.19 * Update NoScript to 2.6.9.1 * Bug 13416: Defend against new SSLv3 attack (poodle). * Bug 13027: Spoof window.navigator useragent values in JS WebWorker threads * Bug 13016: Hide CSS -moz-osx-font-smoothing values. * Bug 13356: Meek and other symlinks missing after complete update. * Bug 13025: Spoof screen orientation to landscape-primary. * Bug 13346: Disable Firefox "slow to start" warnings and recordkeeping. * Bug 13318: Minimize number of buttons on the browser toolbar. * Bug 10715: Enable WebGL on Windows (still click-to-play via NoScript) * Bug 13023: Disable the gamepad API. * Bug 13021: Prompt before allowing Canvas isPointIn*() calls. * Bug 12460: Several cross-compilation and gitian fixes (see child tickets) * Bug 13186: Disable DOM Performance timers * Bug 13028: Defense-in-depth checks for OCSP/Cert validation proxy usage
|
|
|
|
|
|
cybpsych
|
Oct 24 2014, 09:27 PM
|
|
|
|
|
|
|
|
cybpsych
|
Nov 1 2014, 11:50 AM
|
|
Tor Browser 4.0.1https://dist.torproject.org/torbrowser/4.0....4.0.1_en-US.exeother packages https://dist.torproject.org/torbrowser/4.0.1/» Click to show Spoiler - click again to hide... « Tor Browser 4.0.1 -- Oct 30 2014 * All Platforms * Update Tor to 0.2.5.10 * Update NoScript to 2.6.9.3 * Bug 13301: Prevent extensions incompatibility error after upgrades * Bug 13460: Fix MSVC compilation issue * Windows * Bug 13443: Disable DirectShow to prevent crashes on many sites * Bug 13091: Make app name "Tor Browser" instead of "Tor"
|
|
|
|
|
|
cybpsych
|
Nov 18 2014, 08:07 AM
|
|
Tor Browser 4.5-alpha-1https://dist.torproject.org/torbrowser/4.5-...pha-1_en-US.exeall downloads https://dist.torproject.org/torbrowser/4.5-alpha-1/» Click to show Spoiler - click again to hide... « Tor Browser 4.5-alpha-1 -- Nov 14 2014 * All Platforms * Bug 3455: Patch Firefox SOCKS and proxy filters to allow user+pass isolation * Bug 11955: Backport HTTPS Certificate Pinning patches from Firefox 32 * Bug 13684: Backport Mozilla bug #1066190 (pinning issue fixed in Firefox 33) * Bug 13019: Make JS engine use English locale if a pref is set by Torbutton * Bug 13301: Prevent extensions incompatibility error after upgrades * Bug 13460: Fix MSVC compilation issue * Bug 13504: Remove stale bridges from default bridge set * Bug 13742: Fix domain isolation for content cache and disk-enabled browsing mode * Update Tor to 0.2.6.1-alpha * Update NoScript to 2.6.9.3 * Update Torbutton to 1.8.1.1 * Bug 9387: Provide a "Security Slider" for vulnerability surface reduction * Bug 13019: Synchronize locale spoofing pref with our Firefox patch * Bug 3455: Use SOCKS user+pass to isolate all requests from the same url domain * Bug 8641: Create browser UI to indicate current tab's Tor circuit IPs * Bug 13651: Prevent circuit-status related UI hang. * Bug 13666: Various circuit status UI fixes * Bugs 13742+13751: Remove cache isolation code in favor of direct C++ patch * Bug 13746: Properly update third party isolation pref if disabled from UI * Bug 13586: Make meek use TLS session tickets (to look like stock Firefox). * Bug 12903: Include obfs4proxy pluggable transport * Windows * Bug 13443: Re-enable DirectShow; fix crash with mingw patch. * Bug 13558: Fix crash on Windows XP during download folder changing * Bug 13091: Make app name "Tor Browser" instead of "Tor" * Bug 13594: Fix update failure for Windows XP users * Mac * Bug 10138: Switch to 64bit builds for MacOS
|
|
|
|
|
|
cybpsych
|
Nov 30 2014, 08:15 AM
|
|
|
|
|
|
|
|
cybpsych
|
Dec 3 2014, 08:33 PM
|
|
Tor Browser 4.0.2https://dist.torproject.org/torbrowser/4.0....4.0.2_en-US.exeall downloads https://dist.torproject.org/torbrowser/4.0.2/» Click to show Spoiler - click again to hide... « Tor Browser 4.0.2 -- Dec 2 2014 * All Platforms * Update Firefox to 31.3.0esr * Update NoScript to 2.6.9.5 * Update HTTPS Everywhere to 4.0.2 * Update Torbutton to 1.7.0.2 * Bug 13019: Synchronize locale spoofing pref with our Firefox patch * Bug 13746: Properly link Torbutton UI to thirdparty pref. * Bug 13742: Fix domain isolation for content cache and disk-enabled browsing mode * Bug 5926: Prevent JS engine locale leaks (by setting the C library locale) * Bug 13504: Remove unreliable/unreachable non-public bridges * Bug 13435: Remove our custom POODLE fix * Windows * Bug 13443: Re-enable DirectShow; fix crash with mingw patch. * Bug 13558: Fix crash on Windows XP during download folder changing * Bug 13594: Fix update failure for Windows XP users
|
|
|
|
|
|
cybpsych
|
Dec 4 2014, 07:08 AM
|
|
|
|
|
|
|
|
cybpsych
|
Dec 16 2014, 06:33 AM
|
|
|
|
|
|
|
|
cybpsych
|
Jan 15 2015, 06:41 AM
|
|
|
|
|
|
|
|
cybpsych
|
Jan 22 2015, 04:11 PM
|
|
|
|
|
|
|
|
cybpsych
|
Jan 25 2015, 09:08 AM
|
|
|
|
|
|
|