Pluggable transports bundles 2.4.15-beta-2-pt1 with Firefox 17.0.8esr

We've updated the Pluggable Transports Tor Browser Bundles with Firefox 17.0.8esr and Tor 0.2.4.15-beta-2. These correspond to the Tor Browser Bundle release of August 9 and contain important security fixes.

These bundles contain flash proxy and obfsproxy configured to run by default. If you want to use flash proxy, you will have to take the extra steps listed in the flash proxy howto.

These bundles contain the same hardcoded obfs2 bridge addresses as the previous bundles which may work for some jurisdictions but you are strongly advised to get new bridge addresses from BridgeDB.

These bundles are signed by David Fifield (0x5CD388E5) with this fingerprint.

Where is the FreeBSD build?

Where is the FreeBSD build? I'd really prefer to avoid using poorly and insecurely coded kernels when there are better options available.

I hear FreeBSD can run Linux

I hear FreeBSD can run Linux programs if you try hard enough.

Otherwise, the answer is "why haven't you made one for us yet?"

China here. Update works

China here. Update works fine. This is great.
Thank you very much.

can not run new plugged

can not run new plugged bridge in china

Shazam! Thank ya, thank ya,

Shazam! Thank ya, thank ya, thank ya!

What are the cool new

What are the cool new features in 2.4? ECDSA?

I just installed the OS X

I just installed the OS X version but the green onion keeps blinking, saying I should update.

I think I have witnessed the

I think I have witnessed the same behaviour on my linux machine earlier today. I downloaded it again just some minutes ago and this time I don't get the message. So my advice is to download it again, probably there was an update some hours ago.

Thank you!

From Iran: For the first

From Iran:
For the first time the connecting time for "Pluggable transports bundles 2.4.15-beta-2-pt1 with Firefox 17.0.8esr" is about 20 sec.
But the next time it length about 3 min or more.

2.4.16-beta-1 on the

2.4.16-beta-1 on the Pluggable Transports page. 2.4.15-beta-2 on the Blog page. Which one is correct?

The newer one. It has Tor

The newer one. It has Tor 0.2.4.16-rc, which is better.

It seems BridgeDB is no

It seems BridgeDB is no longer giving obfs proxy addresses?
the plain bridges work here in China... for a few minutes...
but its only giving 3 plain bridges, each repeated 3 times :P
and the obfs addresses i have from before are dying out 1 by one.

Aug xx xx:28:04.xxx [Warning] Problem bootstrapping. Stuck at 90%: Establishing a Tor circuit. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 20; recommendation warn)<br />
Aug xx xx:28:04.xxx [Warning] 19 connections have failed:<br />
Aug xx xx:28:04.xxx [Warning] 19 connections died in state connect()ing with SSL state (No SSL object)

Ummm which 19 exactly?

Seems there are no obfsproxy

Seems there are no obfsproxy is given in the BridgeDB, which are harder to block at least in Iran

九月 05 22:16:59.031

九月 05 22:16:59.031 [Notice] Tor v0.2.4.16-rc (git-889e9bd529297284) running on Windows XP with Libevent 2.0.21-stable and OpenSSL 1.0.0k.
九月 05 22:16:59.031 [Notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning
九月 05 22:16:59.140 [Notice] Read configuration file "C:\Proxy\tor-pluggable-transports-browser-2.4.16-beta-1-pt1_en-US\Data\Tor\torrc".
九月 05 22:16:59.140 [Notice] Opening Socks listener on 127.0.0.1:9150
九月 05 22:16:59.140 [Notice] Opening Control listener on 127.0.0.1:9151
九月 05 22:16:59.140 [Notice] Parsing GEOIP IPv4 file .\Data\Tor\geoip.
九月 05 22:16:59.359 [Notice] Parsing GEOIP IPv6 file .\Data\Tor\geoip6.
九月 05 22:17:06.015 [Notice] Bootstrapped 5%: Connecting to directory server.
九月 05 22:17:06.015 [Notice] Bootstrapped 10%: Finishing handshake with directory server.
……

九月 05 22:18:35.218 [Notice] Tor has successfully opened a circuit. Looks like client functionality is working.
九月 05 22:18:35.218 [Notice] Bootstrapped 100%: Done.
九月 05 22:18:36.859 [Warning] onion_skin_client_handshake failed.
九月 05 22:18:36.859 [Warning] circuit_finish_handshake failed.
九月 05 22:18:36.859 [Warning] connection_edge_process_relay_cell (at origin) failed.
九月 05 22:19:06.171 [Warning] onion_skin_client_handshake failed.
九月 05 22:19:06.171 [Warning] circuit_finish_handshake failed.
九月 05 22:19:06.171 [Warning] connection_edge_process_relay_cell (at origin) failed.

We need all this develpment

We need all this develpment for Chorme also.

Upcoming Events

January 25, 2019

Tor Meetup (Athens)

February 02, 2019

Tor Meetup (Berlin)

February 02, 2019 - February 03, 2019

FOSDEM (Brussels)

February 06, 2019 - February 08, 2019

IT Defense (Stuttgart)

March 23, 2019 - March 24, 2019

LibrePlanet (Boston)

See All Upcoming Events

Recent Updates

New Release: Tor 0.4.0.1-alpha

There's a new alpha release available for download. If you build Tor from source, you can download the source code for 0.4.0.1-alpha from the usual place on the website. Packages should be available over the coming weeks, with a new alpha Tor Browser release likely by the end of the month.

Remember, this is an alpha release: you should only run this if you'd like to find and report more bugs than usual.

Tor 0.4.0.1-alpha is the first release in the new 0.4.0.x series. It introduces improved features for power and bandwidth conservation, more accurate reporting of bootstrap progress for user interfaces, and an experimental backend for an exciting new adaptive padding feature. There is also the usual assortment of bugfixes and minor features, all described below.

Changes in version 0.4.0.1-alpha - 2019-01-18

Major features (battery management, client, dormant mode):
- When Tor is running as a client, and it is unused for a long time, it can now enter a "dormant" state. When Tor is dormant, it avoids network and CPU activity until it is reawoken either by a user request or by a controller command. For more information, see the configuration options starting with "Dormant". Implements tickets 2149 and 28335.
- The client's memory of whether it is "dormant", and how long it has spent idle, persists across invocations. Implements ticket 28624.
- There is a DormantOnFirstStartup option that integrators can use if they expect that in many cases, Tor will be installed but not used.
Major features (bootstrap reporting):
- When reporting bootstrap progress, report the first connection uniformly, regardless of whether it's a connection for building application circuits. This allows finer-grained reporting of early progress than previously possible, with the improvements of ticket 27169. Closes tickets 27167 and 27103. Addresses ticket 27308.
- When reporting bootstrap progress, treat connecting to a proxy or pluggable transport as separate from having successfully used that proxy or pluggable transport to connect to a relay. Closes tickets 27100 and 28884.

Strength in Numbers: The Final Count Is In

One of the Tor Project’s ongoing goals has been to diversify our funding sources.

New Releases: Tor 0.3.5.7, 0.3.4.10, and 0.3.3.11

Tor 0.3.5.7 is the first stable release in its series; it includes compilation and portability fixes, and a fix for a severe problem affecting directory caches. Tor 0.3.4.10 and 0.3.3.11 are also released today; please see the official announcements for those releases if you are tracking older stable versions.

The Tor 0.3.5 series includes several new features and performance improvements, including client authorization for v3 onion services, cleanups to bootstrap reporting, support for improved bandwidth- measurement tools, experimental support for NSS in place of OpenSSL, and much more. It also begins a full reorganization of Tor's code layout, for improved modularity and maintainability in the future. Finally, there is the usual set of performance improvements and bugfixes that we try to do in every release series.

There are a couple of changes in the 0.3.5 that may affect compatibility. First, the default version for newly created onion services is now v3. Use the HiddenServiceVersion option if you want to override this. Second, some log messages related to bootstrapping have changed; if you use stem, you may need to update to the latest version so it will recognize them.

We have designated 0.3.5 as a "long-term support" (LTS) series: we will continue to patch major bugs in typical configurations of 0.3.5 until at least 1 Feb 2022. (We do not plan to provide long-term support for embedding, Rust support, NSS support, running a directory authority, or unsupported platforms. For these, you will need to stick with the latest stable release.)

Below are the changes since 0.3.5.6-rc. For a complete list of changes since 0.3.4.9, see the ReleaseNotes file.

Changes in version 0.3.5.7 - 2019-01-07

Major bugfixes (relay, directory):
- Always reactivate linked connections in the main loop so long as any linked connection has been active. Previously, connections serving directory information wouldn't get reactivated after the first chunk of data was sent (usually 32KB), which would prevent clients from bootstrapping. Fixes bug 28912; bugfix on 0.3.4.1-alpha. Patch by "cypherpunks3".
Minor features (compilation):
- When possible, place our warning flags in a separate file, to avoid flooding verbose build logs. Closes ticket 28924.

Strength in Numbers: Library Freedom Is Intellectual Freedom

Photo by Janko Ferlič on