Pluggable transports bundles 2.4.15-beta-2-pt1 with Firefox 17.0.8esr

We've updated the Pluggable Transports Tor Browser Bundles with Firefox 17.0.8esr and Tor 0.2.4.15-beta-2. These correspond to the Tor Browser Bundle release of August 9 and contain important security fixes.

These bundles contain flash proxy and obfsproxy configured to run by default. If you want to use flash proxy, you will have to take the extra steps listed in the flash proxy howto.

These bundles contain the same hardcoded obfs2 bridge addresses as the previous bundles which may work for some jurisdictions but you are strongly advised to get new bridge addresses from BridgeDB.

These bundles are signed by David Fifield (0x5CD388E5) with this fingerprint.

Where is the FreeBSD build?

Where is the FreeBSD build? I'd really prefer to avoid using poorly and insecurely coded kernels when there are better options available.

I hear FreeBSD can run Linux

I hear FreeBSD can run Linux programs if you try hard enough.

Otherwise, the answer is "why haven't you made one for us yet?"

China here. Update works

China here. Update works fine. This is great.
Thank you very much.

can not run new plugged

can not run new plugged bridge in china

Shazam! Thank ya, thank ya,

Shazam! Thank ya, thank ya, thank ya!

What are the cool new

What are the cool new features in 2.4? ECDSA?

I just installed the OS X

I just installed the OS X version but the green onion keeps blinking, saying I should update.

I think I have witnessed the

I think I have witnessed the same behaviour on my linux machine earlier today. I downloaded it again just some minutes ago and this time I don't get the message. So my advice is to download it again, probably there was an update some hours ago.

Thank you!

From Iran: For the first

From Iran:
For the first time the connecting time for "Pluggable transports bundles 2.4.15-beta-2-pt1 with Firefox 17.0.8esr" is about 20 sec.
But the next time it length about 3 min or more.

2.4.16-beta-1 on the

2.4.16-beta-1 on the Pluggable Transports page. 2.4.15-beta-2 on the Blog page. Which one is correct?

The newer one. It has Tor

The newer one. It has Tor 0.2.4.16-rc, which is better.

It seems BridgeDB is no

It seems BridgeDB is no longer giving obfs proxy addresses?
the plain bridges work here in China... for a few minutes...
but its only giving 3 plain bridges, each repeated 3 times :P
and the obfs addresses i have from before are dying out 1 by one.

Aug xx xx:28:04.xxx [Warning] Problem bootstrapping. Stuck at 90%: Establishing a Tor circuit. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 20; recommendation warn)<br />
Aug xx xx:28:04.xxx [Warning] 19 connections have failed:<br />
Aug xx xx:28:04.xxx [Warning] 19 connections died in state connect()ing with SSL state (No SSL object)

Ummm which 19 exactly?

Seems there are no obfsproxy

Seems there are no obfsproxy is given in the BridgeDB, which are harder to block at least in Iran

九月 05 22:16:59.031

九月 05 22:16:59.031 [Notice] Tor v0.2.4.16-rc (git-889e9bd529297284) running on Windows XP with Libevent 2.0.21-stable and OpenSSL 1.0.0k.
九月 05 22:16:59.031 [Notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning
九月 05 22:16:59.140 [Notice] Read configuration file "C:\Proxy\tor-pluggable-transports-browser-2.4.16-beta-1-pt1_en-US\Data\Tor\torrc".
九月 05 22:16:59.140 [Notice] Opening Socks listener on 127.0.0.1:9150
九月 05 22:16:59.140 [Notice] Opening Control listener on 127.0.0.1:9151
九月 05 22:16:59.140 [Notice] Parsing GEOIP IPv4 file .\Data\Tor\geoip.
九月 05 22:16:59.359 [Notice] Parsing GEOIP IPv6 file .\Data\Tor\geoip6.
九月 05 22:17:06.015 [Notice] Bootstrapped 5%: Connecting to directory server.
九月 05 22:17:06.015 [Notice] Bootstrapped 10%: Finishing handshake with directory server.
……

九月 05 22:18:35.218 [Notice] Tor has successfully opened a circuit. Looks like client functionality is working.
九月 05 22:18:35.218 [Notice] Bootstrapped 100%: Done.
九月 05 22:18:36.859 [Warning] onion_skin_client_handshake failed.
九月 05 22:18:36.859 [Warning] circuit_finish_handshake failed.
九月 05 22:18:36.859 [Warning] connection_edge_process_relay_cell (at origin) failed.
九月 05 22:19:06.171 [Warning] onion_skin_client_handshake failed.
九月 05 22:19:06.171 [Warning] circuit_finish_handshake failed.
九月 05 22:19:06.171 [Warning] connection_edge_process_relay_cell (at origin) failed.

We need all this develpment

We need all this develpment for Chorme also.

Upcoming Events

December 12, 2019

Cebolizando (Campinas)

December 14, 2019 - December 15, 2019

Hackers Next Door (Brooklyn)

December 14, 2019

Criptobaile (Brasília)

See All Upcoming Events

Recent Updates

New Release: Tor 0.4.2.5 (also 0.4.1.7, 0.4.0.6, and 0.3.5.9)

Ater months of work, we have a new stable release series! If you build Tor from source, you can download the source code for 0.4.2.5 on the website. Packages should be available within the next several weeks, with a new Tor Browser around January 7.

This is the first stable release in the 0.4.2.x series. This series improves reliability and stability, and includes several stability and correctness improvements for onion services. It also fixes many smaller bugs present in previous series.

Per our support policy, we will support the 0.4.2.x series for nine months, or until three months after the release of a stable 0.4.3.x: whichever is longer. If you need longer-term support, please stick with 0.3.5.x, which will we plan to support until Feb 2022.

Today we are also releasing updates to our older series: 0.4.1.7 (changelog), 0.4.0.6 (changelog), and 0.3.5.9 (changelog), which you can download at dist.torproject.org. Note that the 0.4.0.x series and the 0.2.9.x series will become unsupported early next year, so if you're running one of those versions, you should plan to upgrade.

Below are the changes in 0.4.2.5, since 0.4.1.4-rc. For a complete list of only the changes since 0.4.2.4-rc, see the ChangeLog file.

Changes in version 0.4.2.5 - 2019-12-09

Major features (directory authorities):
- Directory authorities now reject relays running all currently deprecated release series. The currently supported release series are: 0.2.9, 0.3.5, 0.4.0, 0.4.1, and 0.4.2. Closes ticket 31549.
Major features (onion service v3, denial of service):
- Add onion service introduction denial of service defenses. Intro points can now rate-limit client introduction requests, using parameters that can be sent by the service within the ESTABLISH_INTRO cell. If the cell extension for this is not used, the intro point will honor the consensus parameters. Closes ticket 30924.