New Release: Tor Browser 9.5a5

Tor Browser 9.5a5 is now available from the Tor Browser Alpha download page and also from our distribution directory.

Note: This is an alpha release, an experimental version for users who want to help us test new features. For everyone else, we recommend downloading the latest stable release instead.

This release features important security updates to Firefox.

This release updates Firefox to 68.5.0esr, NoScript to 11.0.13, and on desktop, Tor to 0.4.3.2-alpha. We also added a new default bridge.

The full changelog since Tor Browser 9.5a4 is:

  • All Platforms
    • Update Firefox to 68.5.0esr
    • Bump NoScript to 11.0.13
    • Translations update
    • Bug 30237: Control port module improvements for v3 client authentication
    • Bug 32891: Add new default bridges
    • Bug 31395: Remove inline script in aboutTor.xhtml
    • Bug 27268: Preferences clean-up in Torbutton code
    • Bug 32470: Backport fix for bug 1590538
    • Bug 32414: Make Services.search.addEngine obey FPI
    • Bug 32948: Make referer behavior consistent regardless of private browing mode status
    • Bug 22919: Improve the random number generator for the boundaries in multipart/form-data
  • Android
    • Bug 30767: Custom obfs4 bridge does not work on Tor Browser for Android
  • Windows + OS X + Linux
    • Update Tor to 0.4.3.2-alpha
    • Update Tor Launcher to 0.2.21.1
      • Translations update
      • Bug 30237: Add v3 onion services client authentication prompt
    • Bug 32870: Update version of pion-webrtc
    • Bug 32767: Remove Disconnect search
    • Bug 30237: Add v3 onion services client authentication prompt
  • Build System
    • Linux
    • OS X
      • Bug 33200: Fix permissions on bookmarks.html
Anonymous

February 14, 2020

Permalink

Refreshing about:tor gives:
[Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIDOMWindowUtils.removeSheetUsingURIString]" nsresult: "0x80004005 (NS_ERROR_FAILURE)" location: "JS frame :: resource://gre/modules/ExtensionCommon.jsm :: runSafeSyncWithoutClone :: line 75" data: no] 2 ExtensionCommon.jsm:75:12
runSafeSyncWithoutClone resource://gre/modules/ExtensionCommon.jsm:75
cleanup resource://gre/modules/ExtensionContent.jsm:403
close resource://gre/modules/ExtensionContent.jsm:913
destroyed resource://gre/modules/ExtensionContent.jsm:998
observe resource://gre/modules/ExtensionContent.jsm:1016

Anonymous

February 14, 2020

Permalink

> Bug 461204: Improve the random number generator for the boundaries in multipart/form-data
Hey, it was fixed for Firefox 74 only. You shouldn't point to Mozilla's bugs, point to your backporting ticket in Trac instead.

Anonymous

February 15, 2020

Permalink

addons.xpi WARN Error parsing extensions state: [Exception... "Component returned failure code: 0x8000ffff (NS_ERROR_UNEXPECTED) [amIAddonManagerStartup.readStartupData]" nsresult: "0x8000ffff (NS_ERROR_UNEXPECTED)" location: "JS frame :: resource://gre/modules/addons/XPIProvider.jsm :: loadExtensionState :: line 1403" data: no] Stack trace: loadExtensionState()@resource://gre/modules/addons/XPIProvider.jsm:1403
scanForChanges()@resource://gre/modules/addons/XPIProvider.jsm:1439
checkForChanges()@resource://gre/modules/addons/XPIProvider.jsm:2905
startup()@resource://gre/modules/addons/XPIProvider.jsm:2429
callProvider()@resource://gre/modules/AddonManager.jsm:215
_startProvider()@resource://gre/modules/AddonManager.jsm:651
startup()@resource://gre/modules/AddonManager.jsm:897
startup()@resource://gre/modules/AddonManager.jsm:3493
observe()@resource://gre/modules/addonManager.js:70

Anonymous

February 17, 2020

Permalink

When I try snowflake bridge in China, the connection to Tor network is stuck for the following reasons:
2/18/20, 02:41:46.904 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.
2/18/20, 02:41:49.606 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.
2/18/20, 02:41:49.606 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.
2/18/20, 02:41:49.606 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.
2/18/20, 02:41:49.607 [NOTICE] Opening Socks listener on 127.0.0.1:9150
2/18/20, 02:41:49.607 [NOTICE] Opened Socks listener on 127.0.0.1:9150
2/18/20, 02:41:50.870 [NOTICE] Bootstrapped 1% (conn_pt): Connecting to pluggable transport
2/18/20, 02:41:50.870 [NOTICE] Bootstrapped 2% (conn_done_pt): Connected to pluggable transport
2/18/20, 02:41:51.395 [NOTICE] Bootstrapped 10% (conn_done): Connected to a relay
2/18/20, 02:42:21.400 [WARN] Problem bootstrapping. Stuck at 10% (conn_done): Connected to a relay. (DONE; DONE; count 1; recommendation warn; host 2B280B23E1107BB62ABFC40DDCC8824814F80A72 at 0.0.3.0:1)
2/18/20, 02:42:21.401 [WARN] 1 connections have failed:
2/18/20, 02:42:21.401 [WARN] 1 connections died in state handshaking (TLS) with SSL state SSLv3/TLS write client hello in HANDSHAKE
2/18/20, 02:42:21.404 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150
2/18/20, 02:42:21.404 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.
2/18/20, 02:42:21.406 [WARN] Pluggable Transport process terminated with status code 0

Thanks for trying Snowflake. Unfortunately it is not very reliable yet, so you may have to try several times before you get a connection. If you see it get to 20% or higher, it means you got a Snowflake proxy.

If you want to try an experimental build that is supposed to be more reliable, try the experimental "Turbo Tunnel" Snowflake packages from https://lists.torproject.org/pipermail/anti-censorship-team/2020-Februa…. See https://bugs.torproject.org/33336#comment:11 for a summary of what you can expect. These packages are only experimental and they will stop working after 2020-04-15, but we would like to know if you have any feedback.

Anonymous

February 18, 2020

Permalink

When tabs are opened on Tor browser and we switch to another application on the phone and later come back to Tor browser, we find the tabs closed and are forced to restart the Tor browser.
Android 10, oneplus7

Tor Browser doesn't come with uBlock, and installing it isn't recommended. Tails developers installed uBlock in Tails.
https://support.torproject.org/tbb/tbb-14/
https://tb-manual.torproject.org/plugins/

Advanced users can put back NoScript's icon by opening the 3-bar menu > Customize > drag the icon to the toolbar. New users should not be invited to casually change NoScript unless they understand what it does and accept the warning that changes to it make their browser fingerprint stand out.

Anonymous

February 22, 2020

Permalink

The 2 latest updates of the Tor browser is really driving youtube (spyygle) crazy, or actually it is driving me crazy aswel because it complains waay too much about high traffic. Have to restart the entire browser like every 30 min. Really annoying since it is not enough to just renew the circuit like you could on the earlier versions. Why is that?

Users have known why many years before 2017, when that article was written. It should go without saying, but captchas are not sent to your normal browser if you use Tor. Captchas from Google reacting to traffic from tor are in Tor browser only. Google and other trackers you visit on Tor aren't able to learn about your non-Tor browsers unless you tell Google yourself or unless there is a security hole in Tor browser.

From the old FAQs that were moved in 2019:
https://2019.www.torproject.org/docs/faq.html.en#GoogleCAPTCHA
https://2019.www.torproject.org/docs/faq.html.en#GmailWarning
https://2019.www.torproject.org/docs/faq.html.en#Torisdifferent
https://2019.www.torproject.org/docs/faq-abuse.html.en#IrcBans
Or see the new and up-to-date Support site.

A basic understanding of the Tor network also implies the answer: The traffic they see from exit relays is like that of open proxies. Traffic patterns sometimes trigger a site's defenses.

Join the discussion...

We encourage respectful, on-topic comments. Comments that violate our Code of Conduct will be deleted. Off-topic comments may be deleted at the discretion of the post moderator. Please do not comment as a way to receive support or report bugs on a post unrelated to a release. If you are looking for support, please see our support portal or ways to get in touch with us.

This question is for testing whether or not you are a human visitor and to prevent automated spam submissions.

2 + 0 =
Solve this simple math problem and enter the result. E.g. for 1+3, enter 4.