Tor Browser 7.5.5 is released

CVE-2018-6126: Heap buffer overflow rasterizing paths in SVG with Skia
Another one hole in google's backdoor? Surprise, surprise...

thanks

> we had to remove the amazon-meek pluggable transport.

Tragic.

Amazon's biggest customer is CIA, as some of us tried to warn over the past two years, so TP should have foreseen the demise of domain-fronting. You were so warned.

Please, TP, don't make the same mistake again by trusting the companies (such as Google) which are salivating over the prospect of becoming a permanent member of the US Surveillance-Industrial complex.

TP must find sources of funding other than USG or their public-private partners (BBG) and "benign" sponsorships such as "Google Summer of Code" from companies like Google.

If TP cannot look to "benign" USG agencies (like RFA) or "benign" multinational corporate partners of USG (like Google)--- because Yasha Levine is correct when he argues that there is no such thing as a "benign" partner of a government which seeks global hegemony--- who does that leave? Ordinary people.

This is why it is so worrisome that:

o the new TP ED has said nothing about whether she intends to continue Shari's attempts to move TP funding to a user-funded model similar to EFF,

o the long overdue TP financials have *still* not been posted, with no explanation of the hangup or any firm deadlines being offered.

And what about the PKI cert issue for this very blog? What's up with that?

make sizing adjustment for each website for user and add to memory for re-boot

How's about NOT auto-updating my software, making me think I've been the victim of an automated attack?!
Prompting prominently, is acceptable.
Then I can download the update, verify it, and install it CLEANLY.
This is security best-practice. You're breaking that like Microsoft does - with the assumption that FORCING everyone to do it means more people are going to be updated and the 'herd' is overall less vulnerable.
Other people's laziness for such an easy-to-achieve operation is NOT my problem to suffer abuse over.
Whilst BLIND acceptance of updates (from which IP? I had no way to verify - HOW do I verify? It is safer to assume hostile environment, and I am suffering a potential VPNFilter infection, so no way do I trust things blindly at the moment.
But hey, what do I know, I only administrate my own equipment - you _must_ know better... sure...(!)

tor browser

Thank you :-)... Works like a charm.

Seems to be working for me.

Is this a joke?

Where is the new Tor?

Just remember that Tor is updated only after the NSA and FBI have conducted their investigations. Remember when Dingledine let CMU run its attack? Tor is consumer grade security.

Why not with Tor 0.3.3.6 stable?

Where is the source code for Tor Browser Bundle?

Hello, I have an issue. Whenever I try to watch any video, I get the following error message: "no video with supported format and mime type found". I've tried everything I've found online but haven't found a solution yet. Could anyone please help?

meek_lite in Whonix 14 doesn't work.

Security Problem