New Release: Tor Browser 10.0a1

by sysrqb | June 2, 2020

Tor Browser 10.0a1 is now available from the Tor Browser Alpha download page and also from our distribution directory.

Note: This is an alpha release, an experimental version for users who want to help us test new features. For everyone else, we recommend downloading the latest stable release instead.

This release updates Firefox to 68.9.0esr, and HTTPS-Everywhere to 2020.5.20. In addition, Snowflake is now available for testing on Android.

This release also includes important security updates to Firefox.

The Windows installer is now code signed with a new Authenticode certificate. Please report any issues you encounter with this version.

The full changelog since Tor Browser 9.5a13 is:

  • All Platforms
    • Update Firefox to 68.9.0esr
    • Update HTTPS-Everywhere to 2020.5.20
    • Translations update
  • Windows + OS X + Linux
    • Update Tor Launcher to 0.2.21.8
      • Translations update
    • Bug 34321: Add Learn More onboarding item
    • Bug 34347: The Tor Network part on the onboarding is not new anymore
    • Bug 33168: Setup new Authenticode certificate
  • Linux
    • Bug 34315: Avoid reading policies from /etc/firefox on Linux
  • Android
    • Bug 30318: Integrate snowflake into mobile Tor Browser
    • Bug 34219: Enable ZSTD support properly for Android
  • Build System
    • Windows
      • Bug 31128: Move Windows containers to Debian 10
    • Mac OS X
      • Bug 31129: Move macOS containers to Debian 10
    • Android
      • Bug 28672: Android reproducible build of Snowflake

Comments

Please note that the comment area below has been archived.

June 02, 2020

Permalink

Invalid string label
[06-03 04:04:14] Torbutton INFO: tor SOCKS: https://cdn.torproject.org/aus1/torbrowser/10.0a1/tor-browser-win64-9.5… via
--unknown--:9d1939807b405e471d9751fb32482be0
Invalid string label
[06-03 04:04:15] Torbutton INFO: tor SOCKS: https://cdn.torproject.org/aus1/torbrowser/10.0a1/tor-browser-win64-10… via
--unknown--:9d1939807b405e471d9751fb32482be0

When Tor Browser Alpha fails to download update, it offers to download stable version instead of new alpha.

June 02, 2020

Permalink

EFF (Full): A new ruleset bundle has been released, but it is older than the extension-bundled rulesets it replaces. Skipping. util.js:26:15

June 02, 2020

Permalink

[Exception... "Favicon at "https://blog.torproject.org/themes/tor_bootstrap/favicons/android-chrom…" failed to load: Not Found." nsresult: "0x80004005 (NS_ERROR_FAILURE)" location: "JS frame :: resource:///modules/FaviconLoader.jsm :: onStopRequest :: line 236" data: no] FaviconLoader.jsm:236:22
onStopRequest resource:///modules/FaviconLoader.jsm:236
[Exception... "Favicon at "https://blog.torproject.org/themes/tor_bootstrap/favicons/favicon-16x16…" failed to load: Not Found." nsresult: "0x80004005 (NS_ERROR_FAILURE)" location: "JS frame :: resource:///modules/FaviconLoader.jsm :: onStopRequest :: line 236" data: no] FaviconLoader.jsm:236:22
onStopRequest resource:///modules/FaviconLoader.jsm:236

June 03, 2020

Permalink

http://expyuzz4wqqyqhjn.onion

[Exception... "Component returned failure code: 0x805e0006 [nsIChannel.asyncOpen]" nsresult: "0x805e0006 ()" location: "JS frame :: resource:///modules/FaviconLoader.jsm :: load :: line 174" data: no] FaviconLoader.jsm:174:20
load resource:///modules/FaviconLoader.jsm:174
load resource:///modules/FaviconLoader.jsm:546
loadIcons resource:///modules/FaviconLoader.jsm:615
onPageShow resource:///modules/FaviconLoader.jsm:650
onHeadParsed resource:///actors/LinkHandlerChild.jsm:63
handleEvent resource:///actors/LinkHandlerChild.jsm:177
handleActorEvent resource://gre/modules/ActorManagerChild.jsm:153
handleActorEvent self-hosted:1047
Content Security Policy: The page’s settings blocked the loading of a resource at https://www.torproject.org/static/images/favicon/favicon.ico (“default-src”).

June 03, 2020

Permalink

Hello! snowflake! snowflake! snowflake! - Could anybody explain to me What is this "snowflake"? i.e. In what scenarios I can get benefits with this "snowflake"???

June 04, 2020

Permalink

New NS 11.0.29:
Invalid header array: [{name:"server", value:"nginx/1.12.1"}, {name:"date", value:"Thu, 04 Jun 2020 10:42:59 GMT"}, {name:"content-type", value:"text/html; charset=UTF-8"}, {name:"vary", value:"Accept-Encoding"}, {name:"x-clacks-overhead", value:"GNU Terry Pratchett"}, {name:"x-content-type-options", value:"nosniff"}, {name:"x-xss-protection", value:"1; mode=block"}, {name:"strict-transport-security", value:"max-age=31536000; includeSubDomains; preload"}, {name:"content-encoding", value:"gzip"}, {name:"X-Firefox-Spdy", value:"h2"}, {name:"content-security-policy", value:"report-uri https://noscript-csp.invalid/__NoScript_Probe__/;media-src http:"}, (void 0)] WebRequest.jsm:111
applyChanges resource://gre/modules/WebRequest.jsm:111
applyChanges resource://gre/modules/WebRequest.jsm:985
AsyncFunctionNext self-hosted:839

June 04, 2020

Permalink

TOR 9.5 (based on Mozilla Firefox 68.9.0esr) (64-bit)

Suddenly my browser has a grey bars on the bottom and sides when it opens. Site doesn't matter. Resizing the window changes the size of the bar. The bars cycle through small to big and repeat it as you change window from smallest to biggest.

June 08, 2020

Permalink

Invalid header array: [{name:"content-type", value:"text/html; charset=UTF-8"}, {name:"content-length", value:"8345"}, {name:"content-encoding", value:"gzip"}, {name:"etag", value:"W/\"1591598385\""}, {name:"strict-transport-security", value:"max-age=15768000; preload"}, {name:"accept-ranges", value:"bytes"}, {name:"server", value:"nginx"}, {name:"date", value:"Mon, 08 Jun 2020 07:47:52 GMT"}, {name:"cache-control", value:"max-age=1800, public"}, {name:"content-language", value:"en"}, {name:"expires", value:"Sun, 19 Nov 1978 05:00:00 GMT"}, {name:"last-modified", value:"Mon, 08 Jun 2020 06:39:45 GMT"}, {name:"x-content-type-options", value:"nosniff"}, {name:"x-drupal-cache", value:"MISS"}, {name:"x-drupal-dynamic-cache", value:"MISS"}, {name:"x-frame-options", value:"SAMEORIGIN"}, {name:"x-generator", value:"Drupal 8 (https://www.drupal.org)"}, {name:"x-pantheon-styx-hostname", value:"styx-fe2-a-5bcd6cdfcc-xk895"}, {name:"x-styx-req-id", value:"d77a5541-a952-11ea-831c-920e8b421cab"}, {name:"x-ua-compatible", value:"IE=edge"}, {name:"x-xss-protection", value:"1; mode=block"}, {name:"x-cache", value:"HIT, HIT"}, {name:"x-cache-hits", value:"1, 1"}, {name:"x-timer", value:"S1591599379.609576,VS0,VE1"}, {name:"vary", value:"Accept-Encoding, Cookie, Cookie, Cookie"}, {name:"age", value:"993"}, {name:"via", value:"HTTP/2.0 blog.torproject.org"}, {name:"x-cache-date", value:"Mon, 08 Jun 2020 06:56:18 GMT"}, {name:"x-cache-status", value:"HIT"}, {name:"X-Firefox-Spdy", value:"h2"}, {name:"content-security-policy", value:"report-uri https://noscript-csp.invalid/__NoScript_Probe__/;media-src http:"}, (void 0)] WebRequest.jsm:111
applyChanges resource://gre/modules/WebRequest.jsm:111
applyChanges resource://gre/modules/WebRequest.jsm:985
AsyncFunctionNext self-hosted:839

June 08, 2020

Permalink

[06-08 11:03:00] Torbutton WARN: Version check failed! JSON parsing error: SyntaxError: JSON.parse: expected ',' or ']' after array element at line 19 column 1 of the JSON data

June 08, 2020

Permalink

I am not able to view any webm videos saying "No video with supported format and MIME type found" and every download saying unknown time left

You may need additional codecs installed on your computer. The error message may specify which codecs are needed, and you can usually find more information about how to install that by searching online.

June 22, 2020

In reply to sysrqb

Permalink

I've run into this problem too. Specifically, on http://invidio.us, sometimes the video stops mid-stream, and it shows the MIME type error. When downloading (save video as...), the download will sometimes fail part way through, and the resulting media file shows the correct duration, but the video freezes at the point the download failed. This is on 9.5 and 9.0.10.

I think the server (or Firefox) attempts to automatically downgrade to a lower-quality format when it detects too much buffering. This sometimes results in the MIME type error. Maybe it could be downgrading from MP4 to webm, or from one codec to another, and not just a lower resolution? Could there be something wrong with the Accept: header? I've noticed with JS disabled, it sometimes causes the video to start over at the beginning in lower quality, presumably because there is no JS to seek to the right time in the video. Presumably this means the particular video is available in a lower-res format that happened to be supported, which might not always be the case? It doesn't seem to happen when you select the format and use the download button on invidious (instances where it's enabled), but I haven't tested it enough. I've also noticed it is much more likely to happen when you have the "proxy video" preference enabled on invidious, which is slower, and is enabled by default on some instances. You can probably reproduce it by watching some HD videos on invidious or other sites over a slow circuit.

I'm really not sure what we should do with this. VirusTotal doesn't say *why* System.dll is detected as malicious.

https://www.virustotal.com/gui/file/87bd6fe92f4b94f6922cd4a7c696899724b…

"2/72 Antivirus vendors marked dropped file "updater.exe" as malicious (classified as "malicious.moderate.ml" with 2% detection rate)"
"2/86 Antivirus vendors marked spawned process "firefox.exe" (PID: 3544) as malicious (classified as "Unsafe" with 2% detection rate)"

Huh?

June 09, 2020

In reply to sysrqb

Permalink

Fix bugs, no?
"firefox.exe" allocated memory in "\REGISTRY\USER\S-1-5-21-2092356043-4041700817-663127204-1001\Software\Microsoft\RestartManager\Session0000"
"firefox.exe" allocated memory in "\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap"
"tor.exe" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\TERMINAL SERVER"; Key: "TSUSERENABLED")
"firefox.exe" (Access type: "DELETEVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\ZONEMAP"; Key: "PROXYBYPASS")
CRC value set in PE header does not match actual value
"firefox.exe" wrote bytes "e739d777e1a6db772e71db77ee29db7785e2d6776da0db779064da773ad5e17726e4d677d16ddb77003dd977804bd97700000000ad371f778b2d1f77b6411f7700000000" to virtual address "0x75721000" (part of module "WSHIP6.DLL")
"firefox.exe" wrote bytes "fae6d677e1a6db772e71db77ee29db7785e2d6776da0db7726e4d677d16ddb77003dd977804bd97700000000ad371f778b2d1f77b6411f7700000000" to virtual address "0x75121000" (part of module "WSHTCPIP.DLL")
"firefox.exe" wrote bytes "c04ed9772054da77e065da77b538db770000000000d04c7700000000c5ea4c770000000088ea4c7700000000e968e9758228db77ee29db7700000000d269e975000000007dbb4c770000000009bee97500000000ba184c7700000000" to virtual address "0x77231000" (part of module "NSI.DLL")
"firefox.exe" wrote bytes "10990f7700000000b538db779051da7700000000e0c54c77fdfe4c77ee29db7700000000" to virtual address "0x6FED1000" (part of module "KSUSER.DLL")
"tor.exe" wrote bytes "c04ed9772054da77e065da77b538db770000000000d04c7700000000c5ea4c770000000088ea4c7700000000e968e9758228db77ee29db7700000000d269e975000000007dbb4c770000000009bee97500000000ba184c7700000000" to virtual address "0x77231000" (part of module "NSI.DLL")
"firefox.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\TOR.EXE")
"firefox.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\TOR.EXE")
"firefox.exe" (Access type: "CREATE"; Path: "HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS")

June 08, 2020

Permalink

Thank you for the new version!
Is there a way to change the GUARD node from the browser in this new version?
Last few days Tor is so slow. So slow, it makes using Tor impractical.
When I press "New Circuit for this site" button, nodes change with the exception of 62.210.148.97 (a Guard site in France). I suspect this node is the bottleneck. After pressing about 60 times, I was lucky to have another Guard node (in Germany) and I was able to have decent browsing. That lasted for a few minutes and I was back to the same French note.
How can I change guard node? How can I avoid a specific guard node? If there is no such facility please kindly consider providing it.
Thank you.

Unfortunately the browser does not have a good interface for this. If you quit Tor Browser and delete the file named 'state' within the "Client's Configuration" directory as described on the following page, then you should get a new Guard node when you restart the browser. Please be aware, that Guard nodes are used for protecting you, so only change it when necessary.

https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Platform_I…

June 10, 2020

Permalink

I used tor years ago and there was a software offered for windows users to become a relay. Why was this offering ended>? It seemed more simple to download the software and turn it on to make the relay go live. I have 50 to 100mb/second bandwith and will be on gigabit bandwidth soon. It would be easier to have that software again. can I use the old version from your downloads page?

June 11, 2020

In reply to sysrqb

Permalink

I think it was a separate app that ran independently of the tor browser. It was a relay only software. way more convenient to configure, You just turn it on, no adjustments were necessary,

June 11, 2020

Permalink

I want to use firefox screenshots in tor browser.
It's very useful.
Please enable it by default.
Are there any security or privacy problems?

Tor Browser versions increase by 0.5 between the "stable" series and the "alpha" series. In this case, the "stable" series moved from 9.0 to 9.5, and the alpha series moved from 9.5 to 10.0. Historically, Tor Browser versions ending with ".0" do not have many new Tor-specific features but they are based on a new Firefox ESR version (52esr, 60esr, 68esr). Tor Browser versions ending with ".5" usually include a few new Tor-specific features (or privacy protections). This pattern is mostly due to available developer time.