New Tor Browser Bundles with Firefox 17.0.8esr

All of the Tor Browser Bundles have been updated with Firefox 17.0.8esr which includes critical security fixes. All users are strongly encouraged to upgrade. To read more about which kinds of fixes are in this version of Firefox, please click here. This link is also included in the changelogs and we will continue to add it in the future versions of Tor Browser Bundle as well so that users can always be aware of major issues.

https://www.torproject.org/download/download-easy.html.en
https://www.torproject.org/projects/torbrowser.html.en#downloads

Tor Browser Bundle (2.3.25-11)

Tor Browser Bundle (2.4.15-beta-2)

Anonymous

August 09, 2013

Permalink

Your updates for Mac have not worked for several months because they're asking for a nonexistent Firefox settings file. It's possible that Macs with Firefox already installed have this file, but that's not the way Tor used to work.

Hey, thanks for letting us know -- this sounds like a new-to-us bug. Which version of OSX are you using? Do you know the name of the settings file it wants? Which was the last version of TBB that worked for you?

Anonymous

August 09, 2013

Permalink

In this latest TBB the Torbutton plugin incorrectly indicates that it is not up to date.

Anonymous

August 09, 2013

Permalink

Why doesn't check.torproject.org indicate 17.0.7 users that there is an update? Isn't that the whole purpose of that site?

Is it just me, or there is no link for beta version? I have been looking around in the archive.torproject but I can only find 2.3 regular and the alpha versions.
I want to download beta, can someone please help with the link?

Also, why is beta version, well, beta? I have been using it and it works like a charm! Also, https everywhere is more updated ;)

1 question why is noscript actually more updated in regular than beta?

I would like more ducmentation on the differences between regular stable, beta and alpha.

For now, I only really need the link.
THANKS

https://www.torproject.org/projects/torbrowser.html.en#downloads

(Oh hey, the torbrowser page has a new format! Yay.)

I've also added the link to the main blog post. Thanks.

Here you have latest stable versions + beta:
https://www.torproject.org/dist/torbrowser/

And here are alpha versions (latest 3.0a3):
https://archive.torproject.org/tor-package-archive/torbrowser/

Tor develeopers - you are doing great job. Tor user - but remember, trust no one. If you are new here and never change config in about:config - beware. Before you can safely use tor network you must disable a lot of options in Firefox. If you aware of seeing gore images, etc, disable images, disable http referrer, disable external fonts, forbid all embeddings in noscript, disable cookies, disable safebrowsing, disable cache. Then check ip-check.info. You are not on target by gov agencies but you're suspect because using anonumous network. If you're using it you have something to hide it, right? Well... that they think. Read and learn.

It's also advised not to use anything on a closed-source operating system such as Windows and Mac OSX.

Could you please give me a step by step , to set up the most secure way browsing,
with mountain lion thnks

no one does trust the TOR Project and FBI informer Mike Perry. Why do you think they switched java on and noscript off before the FBI injected malicious scripts to various FH sites? The TOR Project do not realise who is being paid to make alterations in this way.....take a look at each other as I know who is. What about the serial numbers embedded and being cross referenced against the download IP? The scripts you run to get a user ID to cross reference???
Need I say more about the way TOR has been ruined by greedy people involved.
Who wants to see a full list of named people and who is being paid, also who offered info for sale and who the FBI Informants are?
How about a recording of the meeting in which the TOR browser bundle was arranged for the FBI. Can I upload audio here?

The Tor Project people can NOT be trusted. You are being tracked every time you use TOR.

HI Anonymous, actually altering the default settings of TBB can put you in a reduced anonymity set. A good way of seeing this is if you visit panopticlick.eff.org

I have complained about this before, but since the problem persists I post the previous message one more time here:

My Linux Live CD still uses gtk+ 2.16.5 which is the reason why none of the TBBs after 2.3.25-2 have worked for me. Vidalia and Tor start up and connect to the Tor network but Firefox won't start ...

> libxul.so: undefined symbol: gtk_widget_set_can_focus

... and I'm wondering why? Shouldn't TBB work in the greatest possible number of environments? I can see no good reason why you are using a version of gtk+ that leaves some of your users behind. Firefox 17.0.8esr works perfectly on my computer. If Mozilla can do it, why can't the Tor-Project? Others have complained about the same issue and apparently there's a ticket in the bug-tracker but nothing has happened over the past 7 months.

I think the Tor-Project should be using a well specified, standardized and dedicated build-box to produce its browser bundles so that the outcome no longer depends on who happens to run the build procedure. It would also be a good idea to publish minimum requirements along with the change log for each new TBB.

I agree on all counts. Can you try the TBB 3.0alpha and see if it works for you? If not, you should (help us) work on a patch to fix that.

I want to leave TBB 2.x (and its build process) behind as soon as we can.

I did try the latest TBB 3.0alpha, but had no luck with it either.
I'm the one who has posted the error message ...

> ./start-tor-browser: line 119: getconf: not found
> ./start-tor-browser: line 120: file: not found
> Wrong architecture? 32-bit vs. 64-bit.

... in the "3.0alpha3 Released" thread. Have a look. I've just
posted a short reply to your question regarding my
hardware platform.

Package version set incorrectly for 32-bit and 64-bit Mac TBB 2.3.25-11

The 32-bit Mac (TorBrowser-2.3.25-11-osx-i386-en-US.zip) and 64-bit Mac (TorBrowser-2.3.25-11-osx-x86_64-en-US.zip) versions of TBB appear to have their package version number set incorrectly.

Unziping and doing a Finder Get Info on TorBrowser_en-US.app in 32-bit Mac TBB reveals:

  1. <br />
  2. Created: August 8, 2013 9:36 AM<br />
  3. Modified: August 8, 2013 9:36 AM<br />
  4. Version: 2.3.25-10<br />
  5. Copyright: Tor Browser Bundle 2.3.25-10 Copyright 2010, 2011, 2012, 2013 The Tor Project

Similarly, 64-bit Mac TBB 2.3.25-11 reveals:

  1. <br />
  2. Created: August 8, 2013 9:41 AM<br />
  3. Modified: August 8, 2013 9:41 AM<br />
  4. Version: 2.3.25-10<br />
  5. Copyright: Tor Browser Bundle 2.3.25-10 Copyright 2010, 2011, 2012, 2013 The Tor Project

Note that for both the Finder reports 2.3.25-10, not 2.3.25-11. However, the FireFox version reported by the browser included in both is 17.0.8, so Mac TBB 2.3.25-11 doesn't actually contain 2.3.25-10.

I've just opened https://trac.torproject.org/projects/tor/ticket/9435

Please keep an eye on it and help us make sure we fix it correctly.

Thanks!

in russian bundle tor-browser-2.3.25-11_ru.exe language pack not availible
please fix it

Looks like the language packs are missing for all languages. We've filed a ticket:
https://trac.torproject.org/projects/tor/ticket/9436

Please help us keep track of it and make sure it gets fixed. Thanks!

I have a suggestion.

Could Tor developers/staff move all discussions on this website to http://torforum.org which I believe is the forum for Tor users.

Posting comments here make the website very untidy. It also looks very disorganized. I always thought IT and software programmers to be people with good organizational skills.

Just have a look at the number of posts to the article "Tor security advisory: Old Tor Browser Bundles vulnerable". At the time of writing, there are 633 posts. Non-IT users like me have a hard time trying to sift out information that is useful to me.

I answered you over here:
https://blog.torproject.org/blog/tails-020-out#comment-33419

In short, "yes but there is no forum, and that one isn't the forum either."

Hi arma, the search box of this blog seems not working and tells me
"You must include at least one positive keyword with 3 characters or more."
even if I'm searching longer words. I'm not sure about "positive keyword" meaning maybe I'm doing it wrong.

Yeah, it looks like the search feature on the blog is broken. Sorry. Try a search engine. :)

Glad to see I wasn't the only one!

Thanks for posting.

!!!ERROR!!!

The NoScript version in alpha is 2.6.7 and NoScript version in stable is 2.6.6.9

Alpha is supposed to be later than stable.
And "7" is later than "6". (The digit immediately following the 2nd dot in each case).

What is your issue?

Actually, I think they were supposed to be the same version. Should be fixed in the next release. Please let us know if not.

Why have you removed Vidalia bundle ?

Because we don't have enough build engineers, and also we have no maintainer for Vidalia.

Hello.

I have been having this error since TBB 2.3.25-8:

TBB unpacks correctly and the Vidalia shows that apparently I am connected to TOR. The problem is when FF loads.

Tor Button shows as disabled and you're unable to navigate the TOR network, the same happens if I try any clearnet address.

I've been using 2.3.25-8 for months.. Now I just tried the new release and the problem persist.

I'm running old Win XP Pro no system updates for over 1 year.
I have Encryption installed (T. C.) and running a system based firewall known as Zone Alarm Pro(an old release).

Any suggestions on how to solve this problem without having to do a clean reinstall or having to update to Win7/8?

Thanks!!

Try TBB 3.x?

Or try Linux. :)

the latest tbb is broken (tor-browser-2.3.25-11_en-US.exe). or no-script is, one of the two. its only giving me the option to temporarily allow all on this page or allow scripts globally. theres no option for allowing individual pages.

Anonymous, have you tried Options -> Appearance? There you should be able to tweak the contextual menu.

I use the newest TBB and cannot set my preferred lanuages for displaying internet pages. That is, I can set them but FF doesn't remember my preferences. I'm sure the older version I used before did this. I am aware that changing my language preferences to anything other than US-English makes me less anonymous, but I would like to decide that for myself and not make FF decide that for me.

See https://trac.torproject.org/projects/tor/ticket/9436

Should be fixed in the next release.

Anonymous

August 11, 2013

In reply to by arma

Permalink

Thanks for your answer, but I think the ticket #9436 deals with the language pack, i.e. the language that is used for the menu etc. What I mean is the preferred language to display internet pages in. You can set that under Edit -> Preferences -> Content. Some pages are available in several languages, and by this setting you can make the page show in the language you prefer. Those are two different things: Language pack for the browser environment, preferred language for the content, and they don't necessarily have to be the same.

I can set my preferred language(s), but on the next browser start the settings are gone.

Let us know if the upcoming release is still broken.

I just downloaded the latest version (ending on .12), and yes, it's still an issue. It's a little better now, because the German language pack is now included correctly, thus the "preferred website languages" include German by default. But if I add a language manually - say, Dutch, because I'd rather read a site in Dutch than in English if it is available in that language, the Tor Browser still doesn't remember that setting. In the about:config section it is the parameter "intl.accept_languages".

I do realize that I make myself a lot less anonymous by adding unusual languages in that section, but I would still like to do it an have my settings remembered.

All the same, I want to say a big Thank You for all the hard work you folks put in on our behalf. It is much appreciated!

In Tor FAQ one can read, that JavaScript should be allowed by default:

https://www.torproject.org/docs/faq.html.en#TBBJavaScriptEnabled

Jacob Appelbaum commends to disable JavaScript:

https://twitter.com/ioerror/status/364171837434904576

What is right?

I updated the FAQ entry to explain things more.

when i download Tor bundle, i have the same 17.0.7 version again. WHY?

Are you downloading it wrong? Or looking at the wrong file afterwards?

"Works for me"

blabla...and where i have to download the latest version?