Tor Browser 6.0.2 is released

by boklm | June 21, 2016

Tor Browser 6.0.2 is now available from the Tor Browser Project page and also from our distribution directory.

Tor Browser 6.0.2 is a fixup release to address the most pressing issues we found after switching to Firefox 45.2.0esr.

In particular, we resolved a possible crash bug visible e.g. on Faceboook or mega.nz and we fixed the broken PDF download button in the PDF reader.

Note: In version 6.0 we started code signing the OS X bundle for Gatekeeper support. A side effect of this signature is that it makes it harder to compare the bundles we ship with the bundles produced using reproducible builds, therefore we plan to post instructions for removing the OS X code signing parts on our website soon. An other effect is that the incremental update will not be working for users who installed the previous version using the .dmg file, due to bug 19410. The internal updater should still work, though, doing a complete update.

Update (June 23, 12:38 UTC): We have still some users that report crashes on Facebook and mega.nz. We suspect this happens because those users are not using Tor Browser in its default configuration but have left the Private Browsing Mode. There are at least two workarounds for this: 1) Using a clean new Tor Browser 6.0.2 (including a new profile) solves the problem. 2) As files cached by those websites in the Tor Browser profile are causing the crashes, deleting them helps as well. See bug 19400 for more details in this regard.

Here is the full changelog since 6.0.1:

  • All Platforms
    • Update Torbutton to 1.9.5.5
    • Bug 19401: Fix broken PDF download button
    • Bug 19411: Don't show update icon if a partial update failed
    • Bug 19400: Back out GCC bug workaround to avoid asmjs crash
  • Windows
    • Bug 19348: Adapt to more than one build target on Windows (fixes updates)
  • Linux
    • Bug 19276: Disable Xrender due to possible performance regressions
Tags
tor browser
tbb
tbb-6.0
Anonymous

Anonymous (not verified) said:

June 22, 2016

Permalink

Hi all! Newby here.

I changed the background (blue) and font colors (yellow) in OPTIONS/CONTENT/COLORS, for webpages, etc., and using Google mail and G+ (yeah, I know...?), all their related links on any Google page, don't show, though scanning the pointer will find them, but it's guesswork.
The usual borders around each button etc., don't show either, adding to the guess-point.

Also, (I'm in Australia) the Australian Bureau of Meteorology "BoM" radar and satellite pages do not always display the images/maps.

Sometimes nothing, sometimes, scant clouds with no map and background, and none with the various buttons on the maps.

One example: http://www.bom.gov.au/products/national_radar_sat.loop.shtml
Just checked again, and the above page is now good, but has no city radar buttons.

This
http://www.bom.gov.au/products/IDR021.loop.shtml#skip
has no map or other features, for now.
The BoM site does seem better tonight though.

This appears where the options are given, on other browsers, if it helps?
!DOCTYPE html> html> head> style type "text/css">body{margin:0;padding:0;overflow:hidden;line-height:0;} /style> script> function ){var g this,l function a,b){var c a.split "."),d g;c[0]in d||!d.execScript||d.execScript "var "+c[0]);for var e;c.length&& e c.shift ));)c.length||void 0 b?d d[e]?d[e]:d[e] {}:d[e] b},m function a,b,c){return a.call.apply a.bind,arguments)},n function a,b,c){if !a)throw Error );if 2 arguments.length){var d Array.prototype.slice.call

(Damn I wish I could learn code, etc!)

Thanks for Tor Dudes! Y'all may yet help save us from "them"!

"Because Tor Browser ships tor stable which is still 0.2.7.6."
OK.
The question is:
Is the newer geoip database from from "June 7 2016" in
https://blog.torproject.org/blog/tor-0284-rc-released
better than the old one
"based on December 1 2015 Maxmind GeoLite2 Country" in
https://blog.torproject.org/blog/tor-browser-602-released .

If not, why there are new updated versions of this database?
In https://blog.torproject.org/blog/tor-0284-rc-released , too?

Old database, inaccurate result?

Anonymous

Anonymous (not verified) said:

August 23, 2016

Permalink

For my XP is 6.0.2 ending version. I try then 6.0.4, that very stink of Chrome, then was very slow and abrupt work! Sorry....

Anonymous

Anonymous (not verified) said:

June 22, 2016

Permalink

Thanks! there was a bug in previous with mega.nz but it is ok now.
you are doing a good work!

Regarding add-ons, is there some list of addons that are safe to install in tor browser?

Flash Isn't supposed to work by default; it leaks your IP, and may not send traffic through Tor. In order to get it working you need to change settings; please research if it fits within your threat model.

I enabled it in the addons manager so that it shows now "always activate" and I also unticked "disable browser plugins" under "privacy and security settings" of the tor button. It still doesn't work. http://isflashinstalled.com/ is saying Adobe Flash is not installed while accessing the same website from IE says it is enabled.

Is there anything else I need to do?

There is no formal process to enter it. But a good way is to start working on bugs in the Applications/Tor Browser component in our bug tracker (trac.torproject.org). Getting familiar with the bundle and how it is being built might be good, too (https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Hacking). Finally, we have a mailing list (tbb-dev https://lists.torproject.org/cgi-bin/mailman/listinfo/tbb-dev) and quite regular weekly meetings on IRC (#tor-dev on oftc.net) Mondays 19 UTC where we discuss development related things.

Anonymous

Anonymous (not verified) said:

June 22, 2016

Permalink

I have removed DuckDuckGo.com from my browser list but it still goes to DuckDuckGo.com as the search engine after I enter on the initial screen search. I have Disconnect as the default. I just have Disconnect and StartPage in my list of available search engines. Using Tails I remove them and it adds them right back. Thank you.

Anonymous

Anonymous (not verified) said:

June 22, 2016

Permalink

is it a bad or a good idea to check on HTTPSeverywhere add-on "use the observatory" ?
does it not leak my location ?
does it not disturb my mailbox when i log-in ?

Anonymous

Anonymous (not verified) said:

June 22, 2016

Permalink

After the update, the browser shows Firefox search bar on start, and when I try to browse, it says proxy server is refusing connections. What is the problem?

Anonymous

Anonymous (not verified) said:

June 22, 2016

Permalink

:)

Anonymous

Anonymous (not verified) said:

June 23, 2016

Permalink

I'm not very smart about all of this! I see there's a 6.0 Tor now. I'm using an old version of Tor Bundle for Android. How can I update? Using a Samsung Galaxy and noticed a warning about port 9050. I downloaded soc app, and see no Samsung app on port 9050? Help! Thanks very much.

Anonymous

Anonymous (not verified) said:

June 23, 2016

Permalink

thanks

Anonymous

Anonymous (not verified) said:

June 23, 2016

Permalink

Since the latest update, every time I try to access messages on Facebook, Tor crashes. Any suggestions?

Hm. Do you have the "Don't record browsing history or website data (enabled Private Browsing Mode)" checkbox checked? (behind the green onion in your toolbar -> Privacy and Security Settings...) It should be.

That said this is still a fallout from https://bugs.torproject.org/19400 I guess and you have basically two options:

1) Start with a clean Tor Browser 6.0.2 or
2) There are cached files in your profile that are causing this. Deleting the files must be done just once and manually at the moment. Those files are in storage/temporary/https+++facebook.com (or something similar).

Sorry for the inconvenience.

Just google search? (Endless captchas that don't let you do anything?) Probably because it's seen a bot coming from your exit node at one point or another. Try getting a new circuit (Onion menu > New Tor Circuit for this Site or Control + Shift + L)

Or do you mean logging in to any google services? I'm having trouble with that since I updated. (Forces me through the "verify your account" questionnaire full of questions no one but the NSA probably knows the answer to.) Does the new TBB (linux) have a different user agent now? Checking my google login history on my other browser that's still logged in shows all my TBB logins as Windows, but I think the blocked logins (I've tried getting a new identity and logging in over and over) all show up as "unknown."

What doesn't work about pixiv? I was able to load the login screen (don't have an account so that's as far as I got). Do you have javascript disabled? You might have to play with your NoScript settings (and make them less secure...) to make everything display right.

You can't login with default history settings, on successful login the login page loads again as if it forgot.
If you type in wrong passwd/login it responds correctly and changing settings to "remember history" fixes the whole problem. And of course I've tried it with JS turned on.

Anonymous

Anonymous (not verified) said:

June 23, 2016

Permalink

Linux Ubuntu 16.04 LTS running 6.02 has a problem in which Firefox (separate from TOr Firefox) shows as open when TOR browser is open. Also there is no menu for bookmarks etc.. displayed.

Tor browser 6.0.2 was downloaded from Ubuntu Software.

Or maybe it's the behavior I've been noticing after update (in Gnome/Debian): when restarting from an update, Gnome for some reason thinks Tor Browser is just another Firefox window. There is no TB icon in the dock, Alt+Tab shows it under Firefox as another window. (Firefox was running separately already at the time of update.) Closing and reopening TB gets it its own icon again. This has happened the past few updates.

I am seeing this behavior inconsistently on Debian (Gnome). I ran start-tor-browser with --register-app a few updates ago to get it to show up in my applications and launch it through Gnome's graphical application list. Usually it starts up with the Tor Browser icon (even with Firefox/Iceweasel already running), but when I started it today (using the restart browser option given when you install an extension that needs a browser restart), it restarted under the Firefox icon as a separate Firefox window (rather than as its own thing).

Anonymous

Anonymous (not verified) said:

June 24, 2016

Permalink

ok