New Tor Browser Bundles

The Tor Browser Bundles have been updated to Firefox 8. There was a slight delay as we adjusted to their new add-on management scheme, but everything should be working normally now. Please let us know if you have any issues!

https://www.torproject.org/download

Tor Browser Bundle (2.2.34-2)

  • Update Firefox to 8.0
  • Update Libevent to 2.0.15-stable
  • Update NoScript to 2.1.8
  • Add extensions.autoDisableScopes to allow TBB's Firefox to launch with its extensions enabled

Tried to put in a bug report there, it kept on telling me to 'log-in' but I have no log-in ID for that website so..... anyone care to direct me to a guide to submitting a bug report?

Anonymous

November 19, 2011

Permalink

hi everybody!this new version is TOO slower than 2.2.34-1!!
and please learn us how we can made our bundle package!

Your speed is dependent upon your circuit selection. If you have slow guard nodes, or just a slow circuit, then everything will be slow. The circuits are randomly selected over time.

In general, we've lost capacity in the tor network due to a few high bandwidth exit relays going offline. This has increased latency in the tor network overall. See https://metrics.torproject.org/performance.html for more details.

Anonymous

November 19, 2011

Permalink

>Rumors of Tor's compromise are greatly exaggerated
Posted October 24th, 2011 by phobos

>Tor 0.2.2.34 fixes a critical anonymity vulnerability where an attacker
can deanonymize Tor users. Everybody should upgrade.
Posted October 27th, 2011 by erinn

Oh, the irony.

http://www.ics.forth.gr/news/angelos_keromytis_lecture3.html

There are ways to fix this. Let people waste bandwidth if they want higher anonymity.

- JavaScript enabled by default in TBB. (bug or feature?)
- Three tunnels within the same country shouldn't be allowed.
- Any software signed by the Mozilla Foundation can't be trusted anymore.

Sorry, but some of us have had enough.
Phantom is the future.

To be clear, these are two completely different posts. Eric Filliol's attacks aren't so much attacks as they are lots of press. The bug fixed in 0.2.2.34 was reported to us anonymously via a very good bughunter and quietly with a suggested fix. Usually, the quieter the bug report, the more severe the bug.

Yes, javascript is enabled in tbb, but between noscript protections and torbutton integration, we feel torbrowser running javascript is fairly safe.

Current research shows that restricting via country doesn't make your circuit safer. Restricting by Autonomous System (AS) may help a bit, but not as much as you think. See http://www.cs.rpi.edu/~edmanm2/ccs159-edman.pdf, "AS-awareness in Tor path selection".

As for Mozilla, debatable.

Good luck with Phantom.

Anonymous

November 20, 2011

Permalink

Hi, I see a lot of people coming here and complaining like you owe them or something, so I just wanted to say thanks for creating and maintaining Tor, and I'll definitely donate when I can!

Anonymous

November 21, 2011

Permalink

Hi, I just want to say that yahoo mail don't let me to login with new tor browser bundle, and beside it, I tried several days and I would like to ask:
is it possible that main server at university hack my tor access in the sense that I get VERY OFTEN the same beginning IP address: 199.48.147.42 and second begin with 173....these 2 IP addresses are 70-80% my first IP address always when I start Tor.

Anonymous

November 23, 2011

Permalink

Hi & Hello
Where is 8118 port?
in past Tor works with http proxy (127.0.0.1:8118) but now dosn't work.
Why i need it?
cause of i use "Internet Download Manager" and Proxy set on this software must be Http Proxy, Mean IDM dosnt Sopport SOCKS Proxy.
and i can't download videos from YouTube, Please help me, mean think of this problem.

Sorry for my words, i can't speak (or write) fully English.

Thanks.

Anonymous

November 24, 2011

Permalink

This package doesn't have Firefox 8 as advertised, it's pre-pre-release Firefox! please update to latest stable release.

Anonymous

November 24, 2011

Permalink

QUOTE
==========
Hi, I see a lot of people coming here and complaining like you owe them or something, so I just wanted to say thanks for creating and maintaining Tor, and I'll definitely donate when I can!
==========

People are not complaining, they have legit questions. If you make a security product that and it has vulnerability's that can expose your anonymity, this can be an issue. It doesn't matter if this is free and donated, it is a piece of work with an very established and trusted name. If something is broke, or the developers missed something, people SHOULD question it and the developers should make that processes easy if they want their software name to be in good standing with the community.

And even more reason if they want donations. Security is not about being nice, It either works or it doesn't

Anonymous

December 11, 2011

Permalink

There is nothing you can do with that new tor version! There is no way to send emails, for example. I can't log in to yahoo mail anymore since tor is updated!

Anonymous

April 17, 2012

Permalink

After downloading the new tbb tor browser won't launch. What gives? Wrong version for my system maybe?