Tor Browser 7.0.8 is released

by boklm | October 24, 2017

Tor Browser 7.0.8 is now available from the Tor Browser Project page and also from our distribution directory.

In version 7.0.7 we added a donation banner to point to our end-of-the-year 2017 donation campaign. This new release is fixing a bug which prevented the display of the banner.

The full changelog since Tor Browser 7.0.7 is:

  • All Platforms
    • Update Torbutton to 1.9.7.9
      • Bug 23949: Fix donation banner display
      • Update locale list with translated banner
      • Translations update
Tags
tor browser
tbb
tbb-7.0

Open menu --> Options --> Advanced --> Update --> "Check for updates, but let me choose whether to install them"

Above activated button proved reliable to not update TOR automatically

TOR team, keep up the good work!

Anonymous

Curious (not verified) said:

October 26, 2017

Permalink

Why doesn't the tor relay, 128.31.0.61 (U.S.A), ever change? Even when I change identities, it remains the same in each case while the other 2 relays below it change.

The first relay ("guard") is not supposed to change. That's to give your computer fewer chances to eventually hit a hostile relay.

BUT THIS IS A PROBLEM FOR SOME USERS ON WINDOWS WHERE THE AUTO-UPDATE DOES NOT WORK. THEY ARE FORCED TO DOWNLOAD THE WHOLE NEW VERSION FOR EACH UPDATE WHICH LOSES TRACK OF WHICH GUARD RELAY THEY WERE USING, PUTTING ANONYMITY IN DANGER.

1. 'Preview' did not display my reply post any differently than on the 'compose' screen. In particular, the html codes displayed 'as codes.'

2. I also don't see my post. Is there a standard delay?

China here is still very poor speed

It won't install properly on Windows 7 I get many fail boxes.

What do you mean with "many fail boxes"?

doesn't work, doesn't work, doesn't work. Type in an address and it either does nothing and sits on the welcome page or crashes. I need to go back to an older version do you have repository?

Yes: https://archive.torproject.org/tor-package-archive/torbrowser/. Which version is the first one that breaks for you?

unusableon older windows 7 laptop. Crashes, freezez, you can't even shut the window it locksao bad? What happen these last two update? You make Tor useless.

Which version is still working for you? See: https://archive.torproject.org/tor-package-archive/torbrowser/ for older versions.

turn off firewall no difference still freeze on connection not display pages. Can't close.

ad im torbrowser?...widerspricht sich das nicht?...ich werde das nicht testen weil es mir einfach zu blöd ist...

sorry for my bad english...

No it does not contradict each other. Tor Browser is not a browser made to fight ads on the internet. Rather it is one to prevent users from getting tracked and fingerprinted and from leaking IP addresses. That's doable without blocking ads.

only adding comment:
Disabling javascript (by noscript defaults) tends to "block" ad systems.
A small fraction of sites show "static" ads.

Wow so much whining in these comments it's unbelievable. TBB is here to provide privacy and anonimity first. If you want to use webmail and watch YT videos and still have some protection, then use the tor proxy feature from your normal browser. Stop expecting them to cater TBB to your individual needs. Every added feature to accommodate one of you is at least one potential attack surface opened up.

That being said, please do not push simple non-security updates like this. Everyone who uses the older version has updates downloaded when they start TBB up (assuming you start fresh each time), which makes it easier to fingerprint and track people.

In which regard does it make it easier for users to get tracked and fingerprinted if we update them to a new Tor Browser with no security fixes?

I have windows 10 home, so I do not have full access to the operating system's full protective scheme as designed. I utilize EMET 5.52, and have learned how to configure it to treat each app, and process in a unique manner. It is a passive defense, and does not interfere with my software firewall or vpn. I utilize all these, and use Tor as my non-Java browser. EMET is set up to run Firefox (64bit) with 'Attack Surface Reduction' enabled. In short,the browser screen presence is reduced in size, like Tor. Anytime one has a glitch with a Tor upgrade, I will confirm that looking at one's anti-virus/firewall configuration will give you insight into what is blocking installation or proper operation.

The new release, and every past one has given me no head/heartaches as far as my system is concerned. Windows 10 Home w/ EMET 5.52, Avast Premier and Secure Line VPN. EMET 5.52 allows me to configure Firefox (64bit) with 'Attack Surface Reduction', so its' open window is virtually the same size as Tor, and thus its presence on the web is reduced.

I do not understand why so many people are NOT concerned about firefox apps data mining users full web information, tabs, forms, EVERYTHING. What is up with that shit?
The whole purpose of firefox was supposedly privacy, security, and speed.
Yeah, go to their apps download page and pick one of their apps and the browser warns you that you will be given ALL information to the app dev, basically.

k?

good

tnx 4 yr job

It is normal that this browser is slow or something is wrong on my computer?

Tor Browser is slower as other browsers, yes. That's due to traffic send over three different hops before it reaches the website you want (the responses take those three hops back as well) and encryption along the path. While the browser speed improved considerably in the past there is still work ongoing to make it better and remove bottlenecks. But you won't be able to reach the speed with Tor Browser you would get without using Tor.

This update broke "Save image as" under right click. Saving files/photos results in 4kb and its corrupted. Rolling back to older versions doesn't have this issue.

Do you have steps to reproduce that? Which image was not working? On which operating system did that happen? I tested it on a Linux machine and while the download took a bit to get started I got a proper image finally.

This update is advertised as being "A security and stability update". Apparently, that's a blatent lie. Putting such blanket statements into your software doesn't inspire confidence. It does the opposite.

Where does it do that? Our blog post announcing the release does not have that phrase.

12:19:45.838 Unchecked lastError value: Error: Could not establish connection. Receiving end does not exist. 1 ExtensionCommon.jsm:265
withLastError resource://gre/modules/ExtensionCommon.jsm:265:9
wrapPromise/< resource://gre/modules/ExtensionCommon.jsm:316:11

15:43:53.864 A promise chain failed to handle a rejection. Did you forget to '.catch', or did you forget to 'return'?
See https://developer.mozilla.org/Mozilla/JavaScript_code_modules/Promise.j…

Date: Tue Oct 31 2017 15:43:27 GMT+0000 (UTC)
Full Message: TypeError: this._addon is null
Full Stack: gDetailView.fillSettingsRows/finish/<@chrome://mozapps/content/extensions/extensions.js:3493:1
gDetailView.fillSettingsRows/whenViewLoaded@chrome://mozapps/content/extensions/extensions.js:3481:9
gDetailView.fillSettingsRows/finish@chrome://mozapps/content/extensions/extensions.js:3488:7
gDetailView.fillSettingsRows/ resource://gre/modules/Promise-backend.js:932:23
this.PromiseWalker.walkerLoop@resource://gre/modules/Promise.jsm -> resource://gre/modules/Promise-backend.js:813:7
this.PromiseWalker.scheduleWalkerLoop/<@resource://gre/modules/Promise.jsm -> resource://gre/modules/Promise-backend.js:747:11
1 extensions.js:3493

Please don't wait for mozilla on security

https://www.bleepingcomputer.com/news/security/mozilla-wants-to-distrus…

Parts of this hacking and interception law are already in business from the first of september 2017.
Consider removing this trusted root certificate, because they are undermining the chain of trust in security.

Hopefully they will be forced (again!) by european court to finally follow international law jurisdiction.

yes , yet reported it.
that is a shame !
Netherlands is becoming a jail land where all is reserved for vip.

* European court ? The same who enslaves you telling us that is legal because 2 of them have voted for ? i prefer that mozilla & another net_team take their own decisions defending & promoting user's right than unknown well dressed write that i must live or believe (they should try first that that they give to the others so generously : an impossible freedom & health).

why do no onion links work? havent after newest update one time.

Do you have an example link that used to work (in which version) but does not anymore?

Hello,

is NoScript in TBB the very same, unmodified, in https://noscript.net/ ?

Yes, we just flip preferences that come with NoScript to adapt it to our needs. See: https://gitweb.torproject.org/builders/tor-browser-build.git/tree/proje… for prefs we change.

Hi,
what are the updates concerning translations?
Thank you

help me) i need rus language, it's possible?)))

Yes, we have loacalized Russian bundles for download. Go to https://www.torproject.org/download/download-easy.html.en and below the big purple button you see a drop down menu with "English" on it. If you click on that one you can select the Russian version and download it.

how to update tor browser

You can click on the "hamburger" menu in the upper right corner of your browser and there on the "?" and then on "About Tor Browser" to start the update check manually. That said Tor Browser should check in the background for new updates periodically and download any that are available. You get a notification to restart the browser once the update got successfully applied.

good

Join the discussion...

We encourage respectful, on-topic comments. Comments that violate our Code of Conduct will be deleted. Off-topic comments may be deleted at the discretion of the post moderator. Please do not comment as a way to receive support or report bugs on a post unrelated to a release. If you are looking for support, please see our support portal or ways to get in touch with us.

About text formats
CAPTCHA

This question is for testing whether or not you are a human visitor and to prevent automated spam submissions.

10 + 1 =
Solve this simple math problem and enter the result. E.g. for 1+3, enter 4.