New Release: Tor Browser 10

Youtube is broken in this release. Is there a way to fix this? ty.

Norton stopped the latest download of Tor Update 10, saying unsafe. Now I cannot even access Tor. Please advise asap.

The browser up date was interrupted by my computer crashing due to printing a document. When I restarted the computer I can no longer open up Tor. I have tried many things including a backup restore. My question is, if I download the newest version of Tor, will it delete my bookmarks, etc. I really don't want everything gone. I can not find where to upgrade the browser bundle.

I updated, but it says "The bookmarks and history system will not be functional because one of Tor Browser's files is in use by another application. Some security software can cause this problem." I also can't browse on Tor anymore, and it always says "Secure Connection Failed An error occurred during a connection to [site]. security library failure. Error code: SEC_ERROR_LIBRARY_FAILURE"

Please help with the fix?

Starting with Tor Browser 10 on Ubuntu NoScript is now preventing videos from playing if they are visited directly e.g. https://example.com/video.mp4

NoScript ignores any attempt to allow the media to play and changing Tor Browser's security level has no effect.

This seams to only apply to directly linked media from a remote server, embedded media still play normally, and local files also play normally.

media.videocontrols.picture-in-picture.enabled; true

Picture-in-picture blue icon appears over the right side of videos played in safer mode. It never appeared in older versions. None of the bugs reference it. Is picture-in-picture considered safe now, or was it overlooked in this release?

You removed Enhanced Tracker Protection and DNT options from normal Firefox browser. This is very bad, allowing anyone to distinguish Firefox+Tor or TorBrowser.

Add back ETP like normal Firefox has.

Disable:

Always check if Tor Browser is your default browser
Recommend extensions as you browse
Recommend features as you browse
Show alerts about passwords for breached websites
Prevent accessibility services from accessing your browser

What is the UserAgent of TorBrowser Android?

https://tor.stackexchange.com/questions/21579/please-what-is-the-userag…

XML Parsing Error: undefined entity
Location: chrome://browser/content/browser.xhtml
Line Number 1317, Column 7:

Updated from 9.5.4 and browser no longer connects to the port set with TOR_CONTROL_PORT environment variable. Why is there no documentation of this change and how do I fix it?

On Windows 10, it's not possible to load any website. Absolutely everything returns the "Secure Connection Failed" error.

fullscreen mode of tube shows the real screen resolution, the letterboxing function doesn't work at this case.

Hello, it's not possible to post in the tails blog post however the title is wrong it says version 4.10 instead of 4.11, I hope any admin who sees my message will fix this.

We have detected that you have connected over Tor.There appears to be an issue with the exit node...
I get this massage constantly while using DDG Onion.
Is that a problem of DDG?
I am using the latest android version.

Does anybody else gets this message?

How do you get wayland to work? Seems to be x11 by default.

MOZ_ENABLE_WAYLAND=1 doesn't help

Letterboxing appears to still be producing temporary window sizes that don't comply to the divisible by 100 rule. For example while resizing a window, width and height can be all over the place. I expect this to leak information about the window manger in use.

Similar temporary sizes are produced when using "Find in This Page" (Ctrl+F), window menu (Alt), "Full Screen" (F11), or "Developer Tools".

<br />
window.onresize = function() {<br />
  document.body.innerHTML += "<br />" + Date.now() + ": " + window.innerWidth + " / " + window.innerHeight;<br />
  window.scrollTo(0, window.scrollMaxY);<br />
};<br />

How long OS X 10.9 will be supported? I wish it be the same as in 78 ESR

Google and YouTube display a pop-up on European exit nodes for Alphabet Inc. privacy switches. Those links open new tabs to other Alphabet domains where the switches are. Will customizing those switches backfire and identify us across domains? Does Tor Project recommend users avoid those switches, or do the default preferences in Tor Browser nullify that possibility of backfiring?

Picture-in-picture isn't working for me on macOS and linux. The button shows up (except on YouTube) and it expands when I hover over it but clicking does nothing. Is this known/is this supposed to happen?

What is the new official _desktop_ User Agent string now? Thanks!

One more thing to take care of. When Android version is released, make sure that intl.locale.requested and intl.accept_languages are set to default values or can be changed and stay changed. That's something currently Fenix nightly won't do.

just a heads-up; bug when browser is set to "Safest," javascript.enabled is still set to true in about:config. Tor Browser 10, non-alpha, linux

What´s up with https-everywhere?
It may be in a built-in addon in omni.ja now, but it doesn´t work apparently. So many sites now open as http and you have to manually change them to https and there´s nothing indicating https-everywhere is present, which also mean you can´t force encryption. Tried Tor 9.54 with https-everywhere removed and that works exactly the same way. So https-everywhere seems not to work in Tor 10. Also tried to install https-everywhere manually but it is being removed and the xpi-file gets deleted.

I can't remove HTTPS Everywhere since this new version, is there a reason to prohibit its removal? please add that option, I just removed NoScript tho.

Browser size is not rounding properly, it's slightly off both in width and height (x99 or x98 instead of x00). I've tested this with various sites, including AmIUnique and TorZillaPrint, and compared it to 9.5.4 release which is always rounded to multiples of 100.

AmIUnique also reports that my canvas is unique. The displayed canvas is not just white anymore like in previous releases but filled with RGB lines.

I've tried running a fresh copy of the browser as well (i.e. not upgraded from older release but unpacked from tarball), and the issues persist. I'm not sure if it's safe to use the new release in terms of anonymity anymore, so I'd appreciate an answer from the team.

Have you considered incorporating something similar to LocalCDN (but better), so people can use safest mode but also have websites work correctly? Thank you for this great release!