Tor Browser Bundle 3.0alpha3 Released

The third alpha release in the 3.0 series of the Tor Browser Bundle is now available from the Tor Package Archive:

https://archive.torproject.org/tor-package-archive/torbrowser/3.0a3

This release includes important security updates to Firefox. Here is the complete ChangeLog:

All Platforms:

Update Firefox to 17.0.8esr

https://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html#…

Update Tor to 0.2.4.15-rc
Update HTTPS-Everywhere to 3.3.1
Update NoScript to 2.6.6.9
Improve build input fetching and authentication
Bug #9283: Update NoScript prefs for usability.
Bug #6152 (partial): Disable JSCtypes support at compile time
Update Torbutton to 1.6.1

Bug 8478: Change when window resize code fires to avoid rounding errors
Bug 9331: Hack a correct download URL for the next TBB release
Bug 9144: Change an aboutTor.dtd string so transifex will accept it

Update Tor-Launcher to 0.2.1-alpha

Bug #9128: Remove dependency on JSCtypes

Windows:

Bug #9195: Disable download manager AV scanning (to prevent cloud
reporting+scanning of downloaded files)

Mac:

As usual these binaries should be exactly reproducible by anyone with Ubuntu and KVM support (though there are some issues in LXC).
To build your own identical copies of these bundles from source code, check out the official repository and use git tag [geshifilter-code]<a href="https://gitweb.torproject.org/builders/tor-browser-bundle.git/tag/22456…] (commit [geshifilter-code]<a href="https://gitweb.torproject.org/builders/tor-browser-bundle.git/commit/49…]).

These instructions should explain things from there. If you notice any differences from the official bundles, I would love to hear about it!

Correct. Overwriting onto an

Correct. Overwriting onto an old TBB directory will sometimes give you mysterious and confusing behavior.

Can someone please write a

Can someone *please* write a blog post defining the steps to update TBB? There is *a lot* of confusion and disagreement on method [0].

Mike has written many times over the years that he suggests simply overwriting, and it was only one time (a big update a while ago) that he suggested otherwise. However, he now seems to be suggesting people delete their old TBB dir and start fresh with the new TBB.

There needs to be a straight forward answer. And, what about bookmarks?

Even Tor people don't agree on how best to update TBB [1,2,3].

Please, have someone (Mike, ideally) write a blog post about updating TBB. I mean, it's only the most important thing a user can do . . .

[0] "Recommended method for updating an existing TBB"
https://lists.torproject.org/pipermail/tor-talk/2013-June/028674.html

[1] Andrew: https://lists.torproject.org/pipermail/tor-talk/2013-June/028675.html

[2] Mike: https://lists.torproject.org/pipermail/tor-talk/2011-November/022263.ht…

[3] Mike: https://lists.torproject.org/pipermail/tor-talk/2011-October/021772.html

Alpha 3.x is using the

Alpha 3.x is using the flashproxy?

No. Use the Pluggable

No. Use the Pluggable Transport Browser Bundle if you want Flashproxy and Obfsproxy.

polish version of latest

polish version of latest torbuton is english version!

This looks reallyreally

This looks reallyreally bad.

Will it be possible to install Vidalia and let it control the tor-settings in TorBrowserBundle3?

Otherwise this update to TBB3 will be a big bad step backwards.... with this version I have no control which circuit I am using, I can't chosse a new identity, I can't modify the torrc-file...

Re: Vidalia I agree with the

Re: Vidalia
I agree with the 3 who have commented. A lot of people want to know through which nodes their traffic is passing and to be able to control it. For me, without Vidalia, Tor is unusable.
Pls reconsider Vidalia, or give explicit instructions (for non-technical people like me) on how to link Vidalia up with TBB3.

Thanks

Hi, I installed

Hi,

I installed 'tor-browser-linux64-3.0-alpha-3_en-US.tar.xz' to upgrade from previous release TBB-3.0-alpha-2.

After extraction when I ./start-tor-browser, it works and opens the torproject.org's congratulations page.

Then I copied my 'Data/profile' from previous version to the new Data/profile folder to restore last opened tabs and other settings.

Now TBB-3.0-alpha-3 fails to start the socks proxy at 127.0.0.1:9150,9151, and thus fails to connect to the internet.

The error I see is - The proxy server is refusing connections.

Is there a way to fix it?

Oh gawd! Why is Edit ->

Oh gawd!

Why is Edit -> Preferences -> General -> Show my windows and tabs from last time
option disabled?

How does one enable it and restore tabs from previous session?

*****************************

*********************************************************
Launching Tor Browser Bundle for Linux in /home/sistem/src/tor-browser_es-ES
XPCOMGlueLoad error for file /home/sistem/src/tor-browser_es-ES/App/Firefox/libxpcom.so:
libxul.so: cannot open shared object file: No such file or directory
Couldn't load XPCOM.
Tor Browser exited abnormally. Exit code: 255
*********************************************************

O_O ???

I usually disable JS in

I usually disable JS in noscript but out of curiosity I ran a test on ipcheck.info with JS on.
Even though I forbid all embeddings in noscript the results look really bad.
Tab name and local storage provide unique IDs which is not the case if I use the latest JondoBrowser with JS enabled.
No idea how relevant these leaks are but you might want to look into this.

Sorry if this is a newb

Sorry if this is a newb question, but will it be possible to use multiple Firefox profiles in TBB 3, and what would be the recommended way to do so? Without Vidalia's config files I don't see an easy way to launch the Firefox Profile Manager.

I note the official releases

I note the official releases of TBB have some significant security improvements to them. Will there be an update to 3 alpha soon covering these if applicable?

Soon, yes. Mike keeps

Soon, yes. Mike keeps finding and fixing new bugs.

I keep running into the same

I keep running into the same problem. I downloaded the tor-browser-2.3.25-13_en-US.
I run the vidalia.exe. It opens and runs until it connect to Tor. However, it closes a few
seconds after. Firefox does not open up at all. I checked my system crash reports and
found that there is a folder for every time I tried without success. But there is no report
inside the folders. I am running Windows 8, AMD processor. Any help will be greatly
appreciated.

You're posting a complaint

You're posting a complaint about 2.3.25 on a blog post about 3.0alpha3.

You might try the latest 3.0 alpha tbb and see if you like that more.