New Release: Tor Browser 8.0.9

by boklm | May 06, 2019

Tor Browser 8.0.9 is now available from the Tor Browser Download page and also from our distribution directory.

This release fixes the issue which caused NoScript and all other Firefox extensions signed by Mozilla to be disabled.

If you used the workaround mentioned in our previous blog post, don't forget to set the xpinstall.signatures.required entry in about:config back to true after installing this update.

Note: We did not bump the Firefox version number to be able to build faster, thus it will still show 60.6.1esr as the Firefox version.

The full changelog since Tor Browser 8.0.8 is:

  • All platforms
    • Update Torbutton to 2.0.13
      • Bug 30388: Make sure the updated intermediate certificate keeps working
    • Backport fixes for bug 1549010 and bug 1549061
      • Bug 30388: Make sure the updated intermediate certificate keeps working
    • Update NoScript to 10.6.1
      • Bug 29872: XSS popup with DuckDuckGo search on about:tor
Tags
tor browser
tbb
tbb-8.0
Anonymous

anon (not verified) said:

May 07, 2019

Permalink

Great job fixing the desktop version!

Keep in mind that the android version of the Guardian Projects Fdroid repository was not updated yet and still contains this certificate problem.

Certainly not asking this with any entitlement or expectation, please only answer if you have the time, but is there an outlook on the alpha release update? I'm very fond of the noscript preference retention in that! :-)

Anonymous

PLEASE FIX THE… (not verified) said:

May 07, 2019

Permalink

Hi Tor Developers

How is your progress against fixing the ddos issue within the tor onion services?

The ddos attack against all tor networks is going very strong.
Please fix it as soon as possible or it will all be over soon...

Anonymous

Anonymous (not verified) said:

May 07, 2019

Permalink

Thanks so much to everyone who helped respond so quickly to this emergency!

TP was placed in a really bad position by Mozilla's goof and handled it pretty well I think.

Anonymous

Anonymous (not verified) said:

May 07, 2019

Permalink

Does this release use the new Mozilla certificate or did you seize the opportunity and create your own?

Anonymous

cajhk2 (not verified) said:

May 07, 2019

Permalink

How are jobs to prevent DDOS attacks on Tor's onion servers.
You visit a TOR Onion site, and tomorrow it is closed because of the Onion attacks.
If nothing is done, I see that soon everything will end.

Anonymous

Anonymous (not verified) said:

May 07, 2019

Permalink

Ugh, the absolute state of firefox.

Does tor browser have any plan to change from firefox to chrome?

Anonymous

Anonymous (not verified) said:

May 07, 2019

Permalink

Has anyone used Tor Browser on a 4K monitor? (1000x1000 window size, I mean)

Is it a problem if I change Tor Browser's font size? (I never use JavaScript)

Anonymous

bob (not verified) said:

May 07, 2019

Permalink

Hi, can som1 from tor , give us any info on the DDoS fix or even if its possible as this is a major topic right now , The ATTACKS have definitely got worse as even clearnet sites are being hit now bad . So looks even more of an issue than before

Anonymous

mimicri (not verified) said:

May 07, 2019

Permalink

8.0.x
Update to: Tor Browser does not terminate correctly (2019-04-26).
https://blog.torproject.org/comment/280960#comment-280960

Setup of Tor Browser 7.56, 8.0 ... 8.09 x32 and x64 inside a fresh Win81x64 VMware WS guest. No config changes, no antivirus, no firewall. Just launching the browser an then closing.
Results: Tor Browser 7.56 works without any problems.
All 8.0x (32/64) versions do not close properly. About 60s ore more after closing a system error message appears.
With Process explorer one can track the increasing memory consumption.
No problems with linux version in a Debian 9 guest on the same host.

Anonymous

Feeling Isolated (not verified) said:

May 07, 2019

Permalink

Can someone explain why TBB says Win32 for System Info but TAILS says Linux?

I thought you folks would be synchronized in that sense but it appears not. The complaint is an obvious one regarding fingerprinting. Any help in keeping your Sys Info the same across platforms?

Anonymous

Anonymous (not verified) said:

May 07, 2019

Permalink

All of the different suggestions to change assorted settings can't be hygienic for the user base. I think it would help everyone if there was publicity for a permanent guide on the Tor Project website or wiki for how to do a backup and clean install.

Anonymous

Anonymous (not verified) said:

May 07, 2019

Permalink

Why did the creator of JavaScript and co-founder of Mozilla abandon Firefox and its engine Gecko and chose Chromium and its engines (Blink and V8) for his Brave browser? Maybe the reality is, Mozilla has become a MESS and the Google engines became better over time, and now they are the best. We hate it because we don't want to admit that something coming from Google is the best, even if it's open source. I don't know, but if people don't trust Mozilla anymore, they won't trust Tor either. Tor might die in the next five years. It's sad, really. I guess people expect a serious project like Tor to have its own browser and features should be part of such browser. Relying on third-party solutions like engines is ok, but on browsers and "extensions" seems a cheap solution for such serious project.

Anonymous

Anonymous (not verified) said:

May 07, 2019

Permalink

Good to see the sigs are back on the download page! Thank you for great work on tor browser!

Anonymous

Anonymous (not verified) said:

May 07, 2019

Permalink

Mozilla has had improper handling his signing infrastructure for addons in the past,
unbelievable handling this thing for webextensions in present, i'am waiting for the future mozilla is .....handling this.
May delete the user can change "xpinstall.signatures.required" for, mozilla will say,
more security. This is dangerous.

Anonymous

MICIO (not verified) said:

May 07, 2019

Permalink

On Android don't Is possible installing addons. Always corrupted files noticed from admin of circuit. BTW. Is not possible setting up excluding Country and or nodes in setting. Bad. Best old Orbot and Orfox. I am sorry.

Anonymous

tormac (not verified) said:

May 08, 2019

Permalink

There is also a problem obtaining bridges via Email. when sending a request for obs4 bridges to bridges@bridges.torproject.org I get the below response.

Here are your bridges:

(no bridges currently available)

To enter bridges into Tor Browser, first go to the Tor Browser download
page [0] and then follow the instructions there for downloading and starting
Tor Browser.

When the 'Tor Network Settings' dialogue pops up, click 'Configure' and follow
the wizard until it asks:

Does your Internet Service Provider (ISP) block or otherwise censor connections
to the Tor network?

Select 'Yes' and then click 'Next'. To configure your new bridges, copy and
paste the bridge lines into the text input box. Finally, click 'Connect', and
you should be good to go! If you experience trouble, try clicking the 'Help'
button in the 'Tor Network Settings' wizard for further assistance.

[0]: https://www.torproject.org/projects/torbrowser.html

COMMANDs: (combine COMMANDs to specify multiple options simultaneously)
get bridges Request vanilla bridges.
get transport [TYPE] Request a Pluggable Transport by TYPE.
get help Displays this message.
get key Get a copy of BridgeDB's public GnuPG key.
get ipv6 Request IPv6 bridges.

Currently supported transport TYPEs:
fte
obfs3
obfs4
scramblesuit

--
<3 BridgeDB

Anonymous

an0nym0u5 (not verified) said:

May 08, 2019

Permalink

Hi, can somone from tor , give us any info on the DDoS fix or even if its possible as this is a major topic right now , The ATTACKS have definitely got worse as even clearnet sites are being hit now bad . So looks even more of an issue than before. PLEASE ANSWER ME. Thanks in advance...

Anonymous

Anonymous (not verified) said:

May 08, 2019

Permalink

Hey guys. Every time I input a captcha answer on an onion link it fails and reloads a new onee to completevery time. Any idea why?

Anonymous

Simon (not verified) said:

May 08, 2019

Permalink

Two days after mozilla-tor-noscript-"bugfix", the noscript-Icon is gone again and browser says "all firefox addons disabled. WTF??? Should we go back to "about:config-false"again?