Tor Messenger 0.5.0b1 is released

by sukhbir | September 28, 2017

Tor Messenger is a cross-platform chat program that aims to be secure by default and sends all of its traffic over Tor. It supports a wide variety of transport networks, including XMPP, IRC, Twitter, and others; enables ​Off-the-Record (OTR) Messaging automatically; has an easy-to-use graphical user interface; and a secure automatic updater.

We are pleased to announce another public beta release of Tor Messenger that features important improvements to its stability and security. All users are encouraged to upgrade.

Mozilla ESR52

This release of Tor Messenger is based on Firefox ESR52, specifically tor-browser-52.3.0esr-7.0-1-build1 and THUNDERBIRD_52_3_0_RELEASE on comm-central.

Deterministic Builds

Tor Messenger builds are now reproducible for Windows and macOS as well; earlier, only Linux builds were reproducible (#10942). This means that anyone building Tor Messenger from source should end up with identical byte-for-byte binaries to the ones we release. To get started with building Tor Messenger (something we encourage!), please refer to the instructions in the README.md file. Since this is a fairly involved process, talk to us on IRC or the comments section below if you need help.

XMPP Improvements

This version of Tor Messenger introduces temporary XMPP accounts (a feature inspired by ChatSecure) that creates an XMPP account automatically with a random username and password (#16606). This helps you to quickly set up an account and get a conversation started without requiring you to bother with the registration or account details. These accounts don't expire automatically but the intent is that you can use them as throwaway accounts and quickly create new ones when required. (Note: Currently, some data remains after deleting an account. See #23675)

Starting with this release, Tor Messenger will attempt to automatically use the onion service for known XMPP servers which helps improve the security of your connection (#13855). The current list includes onion addresses for riseup.net, jabber.ccc.de, jabber.otr.im, and jabber.calyxinstitute.org. We plan to add more servers in the subsequent releases. (Note: Existing accounts remain unchanged. This setting is only applied during new account setup.)

Other Notable Changes

Tor Messenger for Linux is now built with Selfrando for hardened builds (#22229). For more information on Selfrando, please refer to the Q and A with Georg.

This release also fixes the Tor Messenger crash on Windows XP that prevented it from starting (#17469).

Downloads

Please note that Tor Messenger is still in beta. The purpose of this release is to help test the application and provide feedback. At-risk users should not depend on it for their privacy and safety.

Linux (32-bit)

Linux (64-bit)

Windows

macOS

sha256sums-signed-build.txt

sha256sums-signed-build.txt.asc

The sha256sums-signed-build.txt file containing hashes of the bundles is signed with the key 0xB01C8B006DA77FAA (fingerprint: E4AC D397 5427 A5BA 8450 A1BE B01C 8B00 6DA7 7FAA). Please verify the fingerprint from the signing keys page on Tor Project's website.

Changelog

Tor Messenger 0.5.0b1 -- September 28, 2017

  • All Platforms
    • Use the tor-browser-52.3.0esr-7.0-1-build1 tag on tor-browser
    • Use the THUNDERBIRD_52_3_0_RELEASE tag on comm-esr52
    • Update tor-browser to 7.0.5
    • Update tor-launcher to 0.2.12.3
    • Trac 22005: Move to ESR 52
    • Trac 16606: Temporary XMPP accounts
    • Trac 13855: Use known onions for XMPP servers
  • Linux
  • Mac
  • Windows
    • Trac 17469: Tor Messenger is not working on Windows XP
    • Trac 10942: Deterministic builds for Instantbird
       

Comments

Please note that the comment area below has been archived.

September 29, 2017

In reply to sukhbir

Permalink

have conversations with people 'contacts' from when i first install it. under 'new conversation' tab thinking it's server side , is there anyway to delete these contacts?

December 12, 2017

In reply to sukhbir

Permalink

Hi,

Can i use Tor Messenger in my android?

Looking forward to your response.

September 28, 2017

Permalink

Just wait for 0.3.2 tor for its new secure onion address, current onion address system is risky, those XMPP onion servers can be faked...

September 28, 2017

Permalink

Congratulations!
This release is really great!
Could you, please, release Tor Mail on the same base?

We (well, I should say "I" here since I can only speak for myself) have plans for working on Tor Mail at some point but I can't give you a timeline yet, not even an approximate one.

September 29, 2017

Permalink

Hope you guys make it work asap, it has huge potential. XMPP account said "Connected for few seconds" does it mean that I was connected? This add new account/configuration window didn't disappear after user registration. Also no sign on the chat itself that I was using this exact client. Just reporting what I saw and I know that it is in beta, hope you guys make it work so we can all enjoy it! Cheers

"Connected for few seconds" means that you have been connected to the particular account and shows the time elapsed since the connection.

As far as your second issue, can you explain a bit more? When you tried registering for a new account, it will just show connected and then you will have to add the person you want to talk to and then start the chat.

October 01, 2017

Permalink

> Since this is a fairly involved process, talk to us on IRC
ERROR: Anonymous TOR usage is unavailable

And how to do it?

October 03, 2017

In reply to sukhbir

Permalink

How?
irc.oftc.net is randomly blocking Tor. How can I switch a Tor circuit?

October 14, 2017

Permalink

I hope this is the proper forum for this question. What is HTML5 canvass imaging? I get this pop up when I land on a web page and sometimes it won't let the page load. Specifically, Logging into Coinbase.com.
Any thoughts? Thanks.

October 14, 2017

Permalink

hy,
i am new in browser... i want to lern browsing. plz say how to find out it wap address..

November 16, 2017

Permalink

Very interested in "beginning" to learn "open sourced" code and the initial beginnings of the tor scene. I am in my 70's and am fascinated by the algorithmic dexterity of you youngsters. Is there a secret place atop a cloud covered eerie bat infested cavern where those of us who still lagging behind, and missing all the fun...a place for "baby steps" to be had?

January 03, 2018

Permalink

great work sukhbir ! i am eager to find either omemo or (n+1)sec encryption in TM. both are great encryption libraries.. please add it .. group encryption is most awaited thing in TM !