New Release: Tor Browser 8.0.8

by boklm | March 22, 2019

Tor Browser 8.0.8 is now available from the Tor Browser Project page and also from our distribution directory.

This release features important security updates to Firefox.

The main change in this new release is the update of Firefox to 60.6.1esr, fixing bugs found during the Pwn2Own contest.

The full changelog since Tor Browser 8.0.7 is:

  • All platforms
    • Update Firefox to 60.6.1esr
    • Update NoScript to 10.2.4
      • Bug 29733: Work around Mozilla's bug 1532530
Tags
tor browser
tbb
tbb-8.0
Anonymous

me (not verified) said:

April 29, 2019

Permalink

Why does Tor update when I specifically and repeatedly decline? The new updates breaks things and then I have to restore from tarball and loose many links. This is *very* annoying. If I say, no, I mean no.

I think it depends on how you say "no". If you start Tor Browser and then go into settings and say you don't want to have updates to this Tor Browser instance then this is already too late as the update mechanism starts right at start-up time.

"Restart later" doesn't mean "No". Read the window carefully. You can change automatic updates in Preferences, but I don't know how to stop it the first time after installing.

I have to restore from tarball and [lose] many links

In case you aren't able to solve the problem... Before you restore, you can try to recover bookmarks by backing up these files from the tor-browser folder:
.\Browser\TorBrowser\Data\Browser\profile.default\bookmarks.html
.\Browser\TorBrowser\Data\Browser\profile.default\bookmarkbackups

The profile folder is structured as it is in Firefox, so you also can search the web for how to backup, restore, export, and import bookmarks in Firefox.
https://support.mozilla.org/en-US/kb/export-firefox-bookmarks-to-backup…
https://support.mozilla.org/en-US/kb/restore-bookmarks-from-backup-or-m…
http://kb.mozillazine.org/Backing_up_and_restoring_bookmarks_-_Firefox

Thanks, I'll write a script to restore the bookmarks. I've been looking into that a little, but so many things have changed in the past five years (I've been offline that long). But preventing the updates is best. Let me know how to hold my jaw just right so that it understands "no", and it would be appreciated. It seems that if a new release is made, then I have trouble. If it is old, it may work. With the old Tor I can access my centurylink e-mail, until Tor updates, then it breaks. Actually, if the updated Tor worked on my e-mail *that* would be best. Right now the account is messed up and I can't use Tor at all, and have to use Mozilla Thunderbird in the clear. --Iyyov

Anonymous

anonymous (not verified) said:

May 01, 2019

Permalink

I move the profile of the standard Firefox before I start Tor. For the first time, I suddenly had a request from the standard Firefox 'where is the profile'. The Standard Firefox start was hidden. It happened already for the second time. If the profile had not moved, it wouldn't have been noticed. A short initialized standard Firefox, which maybe sends a ping to an address and then immediately closed again. No idea how the standard Firefox was started, did not happen on the same website. Maybe a Html5 script inside one or more websites infiltrated by 'Mad Max'. Hopefully not implemented in Tor, but then surely without Torproject's knowledge. In any case, that happened twice now. The user would be finished.

Anonymous

Some sort of r… (not verified) said:

May 03, 2019

Permalink

Tor Browser all of a sudden disabled all the extensions, after I opened it today.

NoScript could not be verified for use in Tor Browser and has been disabled
NoScript 10.6.1 (disabled)

P.S. why does Tor Browser allow all the extensions/add-ons to update automatically?

Anonymous

Anonymous (not verified) said:

May 03, 2019

Permalink

Noscript addon just disabled itself in Tor Browser for Linux. It's showing under Legacy Extensions in Addons Manager, and says in red "Noscript could not be verified for use in Tor Browser and has been disabled".

Anonymous

Jaf (not verified) said:

May 03, 2019

Permalink

Tor browser 8.0.6
Functions that were working yesterday quit working today.

"These extensions do not meet current Tor Browser standards so they have been deactivated."
"NoScript could not be verified for use in Tor Browser and has been disabled."

The FAQ said there's no backdoor in Tor Browser.

Anonymous

Anonymous (not verified) said:

May 03, 2019

Permalink

After opening the TorBrowser, I get the following message: "NoScript could not be verified for use in the Torbrowser and has been disabled."

I`m using macOS Mojave 10.14.4

Anonymous

Anonymous (not verified) said:

May 03, 2019

Permalink

first i just checked for extension updates and some extensions got disabled,
then i did a fresh install with TBB 808 and the first i saw:
NoScript could not be verified for use in Tor Browser and has been disabled.

Anonymous

Anonymous (not verified) said:

May 04, 2019

Permalink

if your add-ons are disabled now > about:config > xpinstall.signatures.required ; false
TBB is phoning home, isn't it?

[after the message is sent this blog is in a reload loop]

Anonymous

Anonymous (not verified) said:

May 04, 2019

Permalink

Bad news. This looks like a serious security problem. Mozilla has disabled Noscript 10.2.4 in TBB 8.0.8 today; "Noscript could not be verified for use in Tor Browser and has been disabled" (found in hamburger menu under Add-ons>Extensions>Show legacy extensions). The Noscript button has disappeared from the browser. I've reinstalled TBB 8.0.8, but get the same result. As a consequence, the security slider is not protecting. It slides, but scripts are allowed on "Safest". Yikes. I hope this can be fixed with Giorgio Maone’s help, soon. Thank you.

Anonymous

No Name (not verified) said:

May 04, 2019

Permalink

Noscript has been deactivated since 4-May-2019 in Tor Browser. Some said it was a bug and will be fixed by Firefox. Is there any comment and solution for this problem?

Anonymous

Anonymous (not verified) said:

May 04, 2019

Permalink

My NoScript add on was disabled by tor for "no reason", and when i try to reinstall it it says it cant cause its corrupt... Any solution ? i'm not an expert in this though

Anonymous

Anonymous (not verified) said:

May 04, 2019

Permalink

//https://habr.com/ru/post/450478/
//https://www.ghacks.net/2019/05/04/your-firefox-extensions-are-all-disab…
//https://www.ghacks.net/2015/06/19/how-to-disable-the-firefox-40-add-on-…
//https://www.opennet.ru/opennews/art.shtml?num=50623
//https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Distribution#S…
//https://www.reddit.com/r/firefox/comments/bkcjoa/all_of_my_addons_got_d…
user_pref("xpinstall.signatures.required", false);

alegedly - it works only for Linux FF.... My TBB is on windows - thus the solution does not help.

Seems like Mozilla almost eliminated privacy for many Tor (TBB) users. How such situations may

be avoided in the future? Is it the extra attacking vector of TBB-users?

Anonymous

Anonymous (not verified) said:

May 04, 2019

Permalink

# User Preferences

// https://tor.stackexchange.com/questions/12660/tor-browser-updates-itsel…
user_pref("app.update.auto", false);
user_pref("app.update.enabled", false);
// https://2019.www.torproject.org/docs/torbutton/en/design/
user_pref("extensions.update.enabled", false);
user_pref("extensions.update.autoUpdateDefault", false);

Now I see why old instances\installations of TBB works - I used (temporary for sure!!!) disabled updates. I guess you may use it as workaround, meanwhile Mozilla working on "Bug 1548973 (armagadd-on-2.0)".

P.S. Are all armagedons heppen on Friday->Sutterday?

Anonymous

Anonymous (not verified) said:

May 04, 2019

Permalink

Today NoScript 10.6.1 stops working, Maximum protection for your browser: NoScript allows active content only for trusted domains of your choice to prevent exploitation.

Anonymous

Followup from … (not verified) said:

May 04, 2019

Permalink

I forgot to clarify in my comment yesterday, that TB [Tor Browser] had opened and worked fine for about 4-5 minutes, and then all of a sudden all the extensions were disabled. Subsequent restarts of the browser haven't fixed it.

So I made a clean install of TB in a separate folder & still the same thing happened! As soon as I started TB, it disabled all the extensions again, even NoScript. Just shows an error: NoScript could not be verified for use in Tor Browser and has been disabled.

Well, so then I tried opening TB on my Android device [build 8.5a11, I believe] and the exact same thing happened [all the extensions were disabled].

I'm stumped. As I do not know what to do next...

Anonymous

Philipps (not verified) said:

May 04, 2019

Permalink

noscript 10.2.4 dont work tor browser 8.0.8

An error message in the plugin

NoScript could not be verified for use in Tor Browser and has been disabled

NoScript 10.2.4 (Disabled)

Anonymous

Ho[ (not verified) said:

May 04, 2019

Permalink

https://www.reddit.com/r/linux/comments/bkgihr/expired_certificate_disa… <- armagaddon 2.0

Suddenly, every add-on in Firefox broke because of an expired cert.

Tor Browser 8.0.8 is also affected. Disabling uMatrix and NoScript (*not* loading and executing stuff should be core functionality of any browser, not add on, anyway!!!) rips a huge hole into browser security. Seriously, please considerr ditching Mozilla in the short to mid term, they love antifeatures and this was the last straw.

Anonymous

Iyyov (not verified) said:

May 05, 2019

Permalink

Hi. Only my laptop has audio, and it is a major pain to type on, so I'm trying to use X11 to display on my main desktop from the laptop. This works okay, except no audio. I've tried running Tor on the laptop and displaying on the desktop, no joy. I've tried running Tor on the Desktop and displaying on the laptop, no joy. Running both on the laptop I get audio. However, the laptop starts overheating and will shutdown if I let the temperature get too hot, especially if playing a video too. (No money for new equipment.) In theory, running Tor on the laptop and displaying on X11 on the desktop should provide audio. Is there a workaround for this? It is a major pain. (Yes, installing an audio card in the desktop/router would will work once somebody throws some money my way. Until then.....) Any ideas will be appreciated. One more thing. The "Troubleshooting" page says the audio is "remote" when running on the laptop, but displaying on the desktop. When both are on laptop, the Media doesn't say "remote" but displays the audio chip of my laptop. I'm a retired Technician, but have been offline for about 5 years. I'm retired. Thanks in advance.
--Iyyov

This is Tor Project, not audio X11 project. Your comment was accepted, so I will answer, but in the future ask elsewhere like on stackexchange or your OS help sites.

Get a male-male audio cable and plug the audio line-out of your desktop into the mic/line-in on your laptop. Then, configure laptop to play audio from laptop mic/line-in. Play video on desktop, and send audio to laptop. If desktop has no audio line-out port, web search how to stream audio on a LAN. Maybe IceCast or obsproject.com or Music Player Daemon. If desktop cannot generate audio, laptop by itself is best choice. Select low resolution video files. X11 is video only. PulseAudio Volume Control and ALSA are audio only. Good luck.

Anonymous

Stephen Evans (not verified) said:

May 17, 2019

Permalink

I can't seem to access anything with .onion. Does any one have any ideas? thanks Steve