New Tor Browser Bundles

The Tor Browser Bundles and other packages have all been updated to the latest Tor 0.2.2.36 stable version.

https://www.torproject.org/download

Tor Browser Bundle (2.2.36-1)

  • Update Tor to 0.2.2.36
  • Update NoScript to 2.3.4
  • Update HTTPS Everywhere to 2.0.5
Anonymous

June 05, 2012

Permalink

I downloaded Tor Browser 2.2.36-1 for Windows (which still has Torbutton 1.4.5.1)

The browser size starts as 1000x550 and after clicking new identity button, it becomes 1000x600 (when bookmarks toolbar is disabled) or 1000x500 (when boookmarks toolbar is enabled) every time.

After updating to Torbutton 1.4.6 my screen size became 950x550, while testing I've even seen 950x650 once.

I installed 1.4.5.1 back because my fingerprints were unique. But each time I start TBB, it starts toggled to non-Tor each time (which was another issue with the previous Torbutton or Torbrowser, I'm not sure)

So I had to reinstall the browser. I really get bored with the different screen size issues happening with every new versions

Anonymous

June 05, 2012

Permalink

Why don't you make ALL new bundles with the obfsproxy included?

A lot of people in Boratstan, Iran, now Ethiopia too, are cut off the TOR network because of DPI.

I am running an obfsproxy on a high capacity server which is only rarely used. I see normally less than 10 connections per day. My impression is that after the call for obfsproxies of Jake Appelbaum there are plenty of unused obfs proxies running out there.

Anonymous

June 05, 2012

Permalink

Please, update Tor Button in Vidalia bundles to version 1.4.5.1.
Vidalia from the Windows bundle doesn't show countries flags in the Network map.

Concerning the countries' flags: It seems as if the geoip file is in the wrong location - if you put it into AppData-Roaming-Tor in your user folder it works. Is that a bug?

Anonymous

June 05, 2012

Permalink

The fonts are still acting strange compared to 2.2.35-8. I have to change the default font to make web pages readable.

Windows 7. The default font for the Tor Browser is Times New Roman (size: 16). When using 2.2.35-8, there was no problem rendering web pages with the default font. Starting with 2.2.35-12 (the first upgrade I used after 2.2.35-8), web page fonts were changed and difficult to read on some websites so I changed the default font to Arial (size: 16). Now they're more readable but still it's not the same (specifically, not as large) as when using 2.2.35-8.

Anonymous

June 05, 2012

Permalink

Today I've installed Tor. Firefox looks strange. Minimize, enlarge and close buttons are not there. Is this normal or can I change this in the settings?

Anonymous

June 05, 2012

Permalink

Just right-click on the "+" on the right of the tabs and check the "Menu Bar". You'll have the menu visible, but hey, your buttons will be there too.

Anonymous

June 05, 2012

Permalink

>Update NoScript to 2.3.4

Shouldn't that be "2.4.3" ?

2.4.3 is the version of NoScript that I found in this new release of TBB-- 2.2.36-1 (GNU/Linux). (And no sooner than when I checked the version, it had already updated itself to 2.4.4 )

The changelong found in the "Docs" folder that is included in this new TBB also has this error: "2.3.4" for NoScript instead of "2.4.3".

Anonymous

June 05, 2012

Permalink

Is it OK to click update on the add-ons/extensions directly on the bundle browser ?

Also, Can you explain why this is an update when 2.2.35-12 already has those updated.

Anonymous

June 06, 2012

Permalink

Hi Erinn,

I suspect I have had erroneous messages at arrival at torproject.org. Sometimes I am told there is an update, thereafter not told that, even if I have not updated.

Today 6th of June, I had not updated since the 15th of May and then to tor-browser-gnu-linux-i686-2.2.35.12-dev-en-US.tar.gz. I see now, by accident, there is a "36.1" at least since yesterday, 5th of June. I used tor both today and yesterday and got no suggestion to update. How come?

My version of the changelog of "36.1" tells there was no updates between 35.12 and 36.1. Was there?

That is,
1. when should I have seen the suggestion to update to 36.1
2. have I been up-to-date with "35.12" since 15th of May?

B.w.
New lover of tor.

Currently 2.2.35-12 and 2.2.36-1 are both acceptable TBB versions to use on Linux. We try to only nag people to upgrade when there's a good reason -- after all, we nag people to upgrade often enough already.

See also
https://check.torproject.org/RecommendedTBBVersions

There will be a 2.2.37 package coming out pretty soon (with a workaround for a bug in openssl 1.0.1), and it's likely that one will mean we unrecommend both 2.2.35-12 and 2.2.36-1.

>Currently 2.2.35-12 and 2.2.36-1 are both acceptable TBB versions to use on Linux.

You mean I could have saved myself the trouble of downloading, verifying, unpacking and then configuring... ?

Now you tell me...

1.) Is there any reason, then, for someone already using the 2.2.35-12 GNU/Linux version of TBB to bother updating to 2.2.36-1 ?

2.) I would suggest, if there is truly no risk or other considerable downside to remaining with 2.2.35-12, that this be stated in the release announcement.

I take it that arma wrote this before being aware that Firefox 13 was released to fix multiple vulnerabilities in Fx 12?

How safe is it to continue using TBB (with Fx 12) at this point?

Anonymous

June 06, 2012

Permalink

hi bodies
this version have some security problems .please check it and fix as a new release
thanks
nnc from iran

Anonymous

June 06, 2012

Permalink

I tried installing the bundle for Mac OS X. I get an error that the configured proxy couldn't be started. Further investigation into /Applications/Vidalia.app/Contents/MacOS shows that the 'polipo' application no longer exists.

I downgraded to the previous version and the polipo app returns.

What do you mean "by default"? If you're asking why we don't make them more consistently, I agree (and we're working on achieving more consistent build automation). If you're asking why we don't turn every user into a bridge also, I think that would be rude.

Anonymous

June 06, 2012

Permalink

thankyou thankyou for Tor and Viddy! Polipo appears gone for (at least the) last two upgrades, confirmed for me, too ... i'm about to update to TBB 36-1, and see that NoScript changelog is showing 2.4.4 - first i'll do TBB and see wch NoScript comes along ...

now: BOOKMARKS! how about if importing were default-ok IF captured in Tor state when using prev TB? can i change about:config JUST until i get the previous Bookmarks imported, then change it back? i'm SO frustrated having to keep making new Bookmarks with EACH update, and many more times than for just updates 'cuz of my lunacy in installing the TBB IN Dwnloads folder after Upgrading to OS10.6.8 from 10.5.8 (pre-update Tors worked well with the latter), but now i've got pieces of TBBs all over ... i've thrown away at least 5 TBBs already, still getting errmsgs 'Two Vidalias possibly running', much grief, can't find her; can we get an Uninstall that looks in Apps and Downloads and removes ALL previous pcs it finds? (i'm only half-kidding - well, less than half) ... just about every day i have to throw away yesterday's TBB, then pop out another from the installer and it works perfectly until tomorrow when apparently the 'hidden' Viddy awakens and competes with tomorrow's Viddy ... each scans the bridges i bring 'them', so there are double entries for each in MsgLog ... and each time i throw the TBBs away, i lose the Bookmarks ... help? (i Saved two of Viddy's CrashLogs, if they'd be of interest to you WonderWorkers?)

Question: what's the difference between 'Tor software is running' and 'you are connected'? (one of the Viddys) thinks she's bootstrapped 100% and that Tor's connected to Network, and 'check.torproject' Congratulates me, but i only get 'Tor software is running', not the 'connected-to' confirm, in MsgLog/Basic ... do i believe her, or should i believe MsgLog/Basic?

as soon as things here stabilize re: my Wizard and his schizoid ControlQueen, i will be happy to serve as a relay, and will offer you wchever of my skills you think might best serve you amazing folks, thankyou SO very much for yr dedication and perseverence

Anonymous

June 06, 2012

Permalink

When you say "New Tor Browser Bundles" does that mean the Vidalia Bundle is updated as well? Please be clear about that cause not everyone here is an expert. I really do have problems to understand many things here. And there is no place to ask except for newsgroups I don't have access to.
Also version numbers on all the Bundles and its contents on the download page would help a ton.

And while we are on it, is there a way to use the Browser Bundle and make it so Firefox is NOT closed when I restart Vidalia? This annoys me to death.

i don't think beeing on the bleeding edge with firefox releases does help the security. On the contrary. It can introduce some new bugs.
/x

From what I've seen with firefox, each new version is closely followed by a quick and urgent patch. Not the best idea for Tor.

Anonymous

June 07, 2012

Permalink

Sorry, but what about vidalia-bundle-0.2.2.3, does it include polipo?!

That is interesting news, especially since it says on the download page:

"Contains Tor, Vidalia, Polipo, and Torbutton for installation on your system."

Simply removing polipo from the bundle breaks existing configs (as several commenters already observed).

Did you plan on telling us about this at some point?

Anonymous

June 07, 2012

Permalink

The tabs were supposed to be between the TorBrowser button and the minimise/maximise blackened out buttons. Yet, about two versions ago this changed and there is an empty line there and the tabs are wasting one extra line of screen. Can you fix that?

I think s/he is referring to the "Separator", or other like "Flexible Space", or "Space". I.e. when you can right-click on the top bar (next to where the tabs are, not on a tab), and select "Customize", you'll see those three icons (among many others). One can drag-and-drop them into the Firefox top bar, e.g., next to to the re-load button, or forward button, etc. The right-click meanu is also where many add-on icons can be found, and then moved around Firefox UI as the end-user pleases.

However, I didn't notice any difference wrt that person's description.

Anonymous

June 07, 2012

Permalink

Noscript is part useless. I enabled it. And there was only a list to allow. Permanently allow. I changed the options in the Appearance section of Noscript, yet there is no use. I can't have temporary allow or untrusted. So why bother? I disabled it as it's almost as not having it at all.

Nope. That's not the point. http://imageshack.us/photo/my-images/337/screenshot2ogs.png/ here's a screenshot of what I get by going to wordpress.com with a fresh install of TBB even after I tweak the menu options of NoScript.

http://imageshack.us/photo/my-images/525/screenshot3oa.png/ this is what I was expecting and what I get from a regular NoScript install on a regular Firefox

Anonymous

June 07, 2012

Permalink

I checked with Panopticlick the fingerprint. It starts fine. Than I make the browser full screen and start doing something. I click refresh on the Panopticlick as amusement. And here I am unique amongst 2+M. The key was the reported screen size which changed accordingly. Shouldn't that remain the same for all TOR browsers as a guarantee of anonimity?

Anonymous

June 07, 2012

Permalink

Please add RequestPolicy. It can be quite a lot more useful than NoScript when it comes to anonimity.