New Release: Tor Browser 8.5.3

Tor Browser 8.5.3 is now available from the Tor Browser Download page and also from our distribution directory.

This release includes an important security update in Firefox, a sandbox escape bug, which combined with additional vulnerabilities could result in executing arbitrary code on the user's computer.

Note: As part of our team is currently traveling to an event, we are unable to access our Android signing token, therefore the Android release is not yet available. We expect to be able to publish the Android release this weekend. In the meantime, Android users should use the safer or safest security levels. The security level on Android can be changed by going in the menu on the right of the URL bar and selecting Security Settings.

Update: The Android version is now available from the download page.

The full changelog since Tor Browser 8.5.2 is:

  • All platforms
    • Pick up fix for Mozilla's bug 1560192

Can you just reread my comment? Again, what file manager are you using? It's impossible to help you without some basic information. There should be a setting how to handle executable text files, change it.
Assuming Nautilus (GNOME's file manager): Hamburger menu > Preferences > Behaviour > Executable Text Files

Or just add a launcher, like described in the start-tor-browser.desktop file. To quote the relevant part (read the rest as well tho!):

You can also add Tor Browser to your desktop's application menu
by running ./start-tor-browser.desktop --register-app

as said above, it depends on your file manager.
try to make start-tor-browser.desktop executable > context menu (right click) > properties
or move it to your desktop and make it executable.

> it is opening by using terminal cd in the directory and then ./start-tor-browser.desktop and it is opening but when ever i am clicking on to start-tor-browser.desktop icon in the folder without using terminal it is only opening in text editor.

As I understand this, you open a terminal (AKA console or shell window), cd to the directory with the start script, and then type ./start-tor-browser.desktop in the terminal, which is what you should do (if you are using Linux at least), so Tor Browser starts up and begins connecting to the Tor network. But, you say, I think, you also tried "clicking" on the script--- when you were using the file manager?--- and that did not work. Did I get that right? What is your goal here-- are you trying to find the safest possible way of starting Tor Browser?

Anonymous

June 23, 2019

Permalink

it says the install is modifying my dll. it has never done this before. sometimes virustotal.com will flag the latest tor as a virus, but i ignore and install it anyways. so far no one has drained my bank account

Anonymous

June 24, 2019

Permalink

Why V3 .Onion sites(the long links) can't be opened using Tor browser?

They should. Maybe the website you are trying to reach is currently offline.

looks like we cannot connect in Iran; maybe government somehow blocks the connection. can they do it? I have 3 different tor clients and none works, this exactly happens to my friends.

Yes, that should be possible. Does it help if you use pluggable transports (see: https://tb-manual.torproject.org/transports/)? As far as I know at least meek should still work.

Got
----------------
Tor Browser 8.5.3
View Changelog
Something Went Wrong!

Tor is not working in this browser.
------------------

This https://blog.torproject.org/new-release-tor-browser-853 works however.

This is happened also with earlier versions sometimes.

-----------

verbose logging show nothing:

-------------------------------
Unable to update the static FcBlanks: 0x2029
Unable to update the static FcBlanks: 0xfff9
Unable to update the static FcBlanks: 0xfffa
Unable to update the static FcBlanks: 0xfffb
Jun 25 15:32:52.000 [notice] New control connection opened from 127.0.0.1.
Jun 25 15:32:52.000 [notice] New control connection opened from 127.0.0.1.
--------------------------------

Got now also "Owning controller connection has closed " on startup of
Tor Browser 8.5.3. This also was not immediately after boot (I tried Tor Browser 8.5a7 first).

Jun 26 16:27:28.000 [notice] Bootstrapped 100%: Done
Jun 26 16:27:28.000 [notice] New control connection opened from 127.0.0.1.
Jun 26 16:27:28.000 [notice] Owning controller connection has closed -- exiting now.
Jun 26 16:27:28.000 [notice] Catching signal TERM, exiting cleanly.

This is not new. Seen randomly on Tor Browser startup since 8.5

What OS do you use? Is your computer behind a firewall you do not maintain? Do you need a proxy to get onto the Internet? Are you by any chance running multiple instances of Tor Browser? Or more than one Tor client?

(For example, on my Debian system I have a Tor client which I use for updating from the onion mirrors of the Debian software repository, and I sometimes also run Tor Browser which could possibly sometimes lead to having two Tor processes getting in each other's way, although I do not think I have seen that.)

Hope at least one of these questions helps you sort things out!

> I have a Tor client..., and I sometimes also run Tor Browser which could possibly sometimes lead to having two Tor processes getting in each other's way

They won't if you leave the torrc files at default. Tor Browser and its tor communicate by localhost port 9150. The tor "expert bundle" package listens on localhost port 9050. 9150 != 9050.

Tor launcer(?) probably told

Unable to retrieve settings.

And then it was replaced with

Tor unexpectedly exited. ...

Control connection was closed:

Jul 04 05:31:17.000 [notice] Bootstrapped 100%: Done
Jul 04 05:31:35.000 [notice] New control connection opened from 127.0.0.1.
Jul 04 05:31:35.000 [notice] Owning controller connection has closed -- exiting now.
Jul 04 05:31:35.000 [notice] Catching signal TERM, exiting cleanly.

This is

Tor Browser 8.5.3

Tor launcer: (Window title: Connect to Tor)

Unable to retrieve tor settings.

Immediately replaced with

Tor unexpectedly exited....

Restarting Tor will not close your browser tabs.

There is now yet browser window or tabs opened.

Console tells:

Jul 06 16:07:59.000 [notice] Bootstrapped 100%: Done
Jul 06 16:07:59.000 [notice] New control connection opened from 127.0.0.1.
Jul 06 16:07:59.000 [notice] Owning controller connection has closed -- exiting now.
Jul 06 16:07:59.000 [notice] Catching signal TERM, exiting cleanly.

Okay, let me think a bit about how to track this further down. It sems Tor is bootstrapping fine but Tor Launcher has for some reason issues reading your Tor configuration and aborting the bootstrap process.

can you guys please add ublock origin in tor.It is better than no script and it can block more than scripts.

tor browser bad not accept linux dark theme always white

Just put link to homepage to about:tor

Do we still need to install orbot to use the current android version Tor browser?

No.

Noscript has begun to support Chrome. It's so nice and convenient. I hope Tor can remember the Noscript setting. I know there's a way, but basically supporting the setup will help a lot of people.

https://browserleaks.com/javascript

Visiting this site on Android Tor Browser with system language in Russian will show "ru" under "internationalization API" -> "locale"

Yes, we don't have added support for locale spoofing on Android yet, see: https://trac.torproject.org/projects/tor/ticket/30605.

Irrelevant to this discussion, but important - Apple Store offers what claims to be "using Tor system" browser called TOB, uses the logo too (which I hope is both copyrighted and tradearked, not to offend the Open Source, but to prevent fraud
.
Symantec has labeled TOB a dangerous fraud and I lack the ability to do anything to confirm/deny AFAK, authors have not commented. I beg the TOR community offer real TOR for the iPhone, or, lacking that, demand the fraud be removed, if indeed that is what it is.

Symantec labeled this thing a fraud, but Apple has not removed it? Yikes.

which is the best tor onion email provider?

Depends on what you need and who you trust. You can search for mail providers at We Support Tor.
For a free long-term webmail provider I recommend ProtonMail (clearnet / onion service) as of 2019. Check the security features: OpenPGP, zero-access, server within a nuclear bunker...

I am not affiliated with ProtonMail in any way.

It depends what you mean and what your requirements are. Some of them are webmail interface, IMAP, POP3, SMTP, SSL/TLS ratings, Tor to Tor providers, Tor<->clearnet providers, client-side encryption, no Javascript, alias addresses, inbox size, 2FA, logging, categories in EFF's "Who has your back", price,... But this site is for Tor Project and its software. Search the web. Ask on reddit or tech forums.

Yes, we are done here with Tor Browser 8.5.3 and 9.0a3 (even though the Firefox version is still shown as 60.7.0esr).

Greetings!
Please tell me specifically whether the traffic is encrypted on the way from the TOR client to the ingress node, and from the ingress node to the TOR client?
Does my provider see outgoing and incoming traffic?

Yes, the traffic between you and the guard node is encrypted. All you provider is seeing that you are talking to a server but not the content.

Scroll down to the images: https://2019.www.torproject.org/about/overview.html.en
https://tb-manual.torproject.org/about/
Set your shield icon security level to Safer or Standard. Scroll down, and click the 2 gray buttons: https://www.eff.org/pages/tor-and-https

Does the search engine download to Windows 10?

Could you rephrase your question? I am not sure I understand it.

Please can you add saving and restoring opened sites on Android application crash or restart.

That requires disk history being enabled and thus not being in private browsing mode by default. I think that won't happen by default anytime. Would it help you if it were possible to click on a bunch of options to be able save/restore opened sites? Or do you need this on by default?

You could save them as bookmarks. However, bookmarks are saved to disk, so if your phone is confiscated or stolen, your bookmarks are like your browsing history.

ticket https://trac.torproject.org/projects/tor/ticket/30441
The bridges are now providing 3 bridges instead of 1. However requesting obsf4 always provides the same 3 bridges which do not work when connecting. Also the other bridges FTE and obfs3 does not provide any bridges.

How to turn on function "always restore tabs"? Now it's not working.

What have you been doing to get this going?

Nothing. Function "restore tabs" not working. Bad english, sorry. What should I do to make it work?

I think for that to work you need to leave permanent private browsing mode. There might be other settings that need to get changed, not sure.

Join the discussion...

We encourage respectful, on-topic comments. Comments that violate our Code of Conduct will be deleted. Off-topic comments may be deleted at the discretion of the post moderator. Please do not comment as a way to receive support or report bugs on a post unrelated to a release. If you are looking for support, please see our support portal or ways to get in touch with us.

This question is for testing whether or not you are a human visitor and to prevent automated spam submissions.

3 + 9 =
Solve this simple math problem and enter the result. E.g. for 1+3, enter 4.