New Release: Tor Browser 9.0.4

by boklm | January 09, 2020

Tor Browser 9.0.4 is now available from the Tor Browser download page and also from our distribution directory.

This release fixes a critical security issue in Firefox: CVE-2019-17026.

The full changelog since Tor Browser 9.0.3 is:

  • All Platforms
    • Update Firefox to 68.4.1esr
Tags
tor browser
tbb
tbb-9.0
fake name

kfjjfre (not verified) said:

January 22, 2020

Permalink

Tor Browser android bug fix about:comfig -> browser.privatebrowsing.autostart ; true
good! -> browser.privatebrowsing.autostart ; false

fake name

Waldemar (not verified) said:

January 22, 2020

Permalink

Don't k3if this is 3bug or what but Tor update broke my computer. I allowed an update about a day ago and have not been able to access the internet since then. The ISP see my computer online sending and receiving, but I cannot access the internet. rebooting and resetting the computer and router doesn't help. I've run out of ideas about a possible solution.
Ii am now afraid to do any further Tor updates, which probably means I won't be able to use Tor.
I looked at the support portal but I don't see anything there that might help.

fake name

Anonymous (not verified) said:

January 24, 2020

Permalink

What is this?

Open: Options->Tor->Tor logs.
In Browser Console:
Tor WARN: Error replacing "X:\...\TorBrowser\Data\Tor\torrc": Permission denied

fake name

Anonymous (not verified) said:

January 24, 2020

Permalink

The 'Guard' IP doesn't change between Tor Browser (TB) restart or when clicking on 'New Identity' (NI) or keyboard shortcut Ctrl+Shift+U.

  1. So far I've re-installed 9.0.4 on top of the old 9.0.4, which didn't resolve the issue.
  2. Then I delete all the files and folders from Tor directory, except Profile directory, and re-installed 9.0.4. Still same problem

Last time this happened was during a 8.5.x (or maybe 8.4.x). I can't recall what was the solution (but I think someone suggested, just installing again over the old version), but that did resolve the problem, until now. I don't know which version of 9.0.x started this.

Thank you for the explanation. Do you know exactly which version and when, this was changed from the previous behavior of changing guard during every browser restart or with every 'New Identity'?

fake name

t.hanson (not verified) said:

January 27, 2020

Permalink

dispite that i have set security lvl to safest,i will get this when i enter a dark web site ; WARNING: You have javascript enabled in your browser! Disable this for your own safety!
Having Javascript enabled may result in having your private IP leaked and having your computer fingerprinted! so for now i will not use TOR for anything,you can roll back or fix it so script show allowed or default/denied too while you are at it

fake name

Pawel (not verified) said:

January 30, 2020

Permalink

hallo

fake name

John (not verified) said:

January 31, 2020

Permalink

The download function was broken. When it went to the last second of the download, it stopped and didn't complete. Please fix it.

fake name

Alen (not verified) said:

February 01, 2020

Permalink

The tor browser fails to start correctly at the first time I start it. I have to try it twice, three times. Please fix the problem.

fake name

Tor cirrcuit m… (not verified) said:

February 04, 2020

Permalink

Please add tor cirrcuit in browser...or simple gui function to user could chance exit nodes from browser..not from txt config file..
I thing you do big mistake to erase tor cirrcuit..this function was from years...
Many people are not happy from this change..to what direct tor browser is going now?? to the not transparanency ?
Tor cirrcuit schemat must be again..in tor browser.

fake name

Sailor Sam (not verified) said:

February 08, 2020

Permalink

Probably in order to sell their VPN services some companies are saying that IPV6 can leak your real IP.

I see that under about:config network.dns.disableIPv6 the default is false.

Would it not be better to have this changed to true or, for the security-minded user, should he/she change this setting to 'true'.

Your thoughts would be appreciated.

Thank you

fake name

tormac (not verified) said:

February 09, 2020

Permalink

When I requested a bridge it failed to connect to any site. the bridges used below
[bridges lines removed, please don't share bridges publicly]

fake name

weer (not verified) said:

February 10, 2020

Permalink

HTTPS Everywhere for some reason allows mixed - content sites.
Is there a way to block them?

Auto-play on youtube works for me. Media auto-plays except if I open it in a new tab in the *background* that was not the active tab I was looking at. Autoplay of media is disabled in tor browser on first opening a page (any page, not simply youtube) because autoplay lowers privacy. If you accept the risk to enable it, you can read Mozilla's help here:

https://support.mozilla.org/en-US/questions/1238033
https://developer.mozilla.org/en-US/docs/Web/Media/Autoplay_guide

That is, unless you are talking about Noscript's yellowish layer covering media you haven't allowed in Noscript. Make sure you are on Standard security level unless you know how to configure Noscript.

fake name

John (not verified) said:

February 11, 2020

Permalink

The new version of tor shrinked the window. It brings an awful user experience to me. Please give me an option to turn it off. How to off it.

fake name

Anonymous (not verified) said:

February 11, 2020

Permalink

when you maximize tor browser, there's a gray border around the content. I know that you're not supposed to maximize but I use tor for non-sensitive things to help those who do sensitive things and I'd really just like a proper browser window