Tor Browser 3.5.1 is released

The 3.5.1 release of the Tor Browser Bundle is now available on the Download page. You can also download the bundles directly from the distribution directory.

Please see the FAQ listing for any issues you may have before contacting support or filing tickets.

This release features an update to OpenSSL to fix a denial of service condition, and to fix the NoScript whitelist to remove addons.mozilla.org.

This release also features Tor 0.2.4.20, as well as a support for screen readers for the blind on Windows.

Here is the list of changes since 3.5.1. The 3.x ChangeLog is also available.

All Platforms
- Bug 10447: Remove SocksListenAddress to allow multiple socks ports.
- Bug 10464: Remove addons.mozilla.org from NoScript whitelist
- Bug 10537: Build an Arabic version of TBB 3.5
- Update Torbutton to 1.6.5.5
  - Bug 9486: Clear NoScript Temporary Permissions on New Identity
  - Include Arabic translations
- Update Tor Launcher to 0.2.4.3
  - Include Arabic translations
- Update Tor to 0.2.4.20
- Update OpenSSL to 1.0.1f
- Update NoScript to 2.6.8.12
- Update HTTPS-Everywhere to 3.4.5
Windows
- Bug 9259: Enable Accessibility (screen reader) support
Mac
- misc: Update bundle version field in Info.plist (for MacUpdates service)

Because they come with

Because they come with Firefox, and we're trying to minimize the number of patches that we have to maintain (and reapply every time Firefox changes).

I guess another answer is that there's no way we'd get consensus on which ones to remove. :)

What is the current opinion about fonts? In the past we have been told not to turn them off (i.e. maintain them as readable) since if they are turned off, we become visible.
Is this still the guidance?
Thanks for all your work. It is appreciated, though it may sometimes not seem to be!

From my perspective, I'd say

From my perspective, I'd say it's still an open research question.

You could find Mike Perry at a conference, and ask him his current opinion.

Or you could help research what the better answers should be.

Step one is to read https://www.cosic.esat.kuleuven.be/fpdetective/

I know it has been mentioned

I know it has been mentioned before, but since about a week or two ago I can't access any .onion sites via TOR... I tried the Hidden Wiki and multiple others pretty much a few times a day every day and they just won't open... Any idea what might be the case? Thanks in advance

Try

Try http://duskgytldkxiuqc6.onion/

If it works, hidden services are working fine for you (you just have bad taste in hidden services).

If it doesn't work, try fixing your clock/timezone/date, upgrading to the latest TBB, etc.

Thank you Tor Project team.

Thank you Tor Project team. Thank you for the good work that you do; your tools are important and valuable, and used mostly by good people, to do good.

From the many other "comments" on this page, it's obvious a few people lack basic courtesy. How shameful and disgraceful that they come here making demands, or using ugly entitled tones to complain.

A message to those delusional rude complainers: CONTRIBUTE TO THE TOR Project, with YOUR resources, be they intellectual and/or otherwise.

Don't just sit there expecting others to freely give to you, don't expect others to freely do everything perfectly for you.

And before you make any demand or complaint, HAVE THE DECENCY to express a MODICUM OF GRATITUDE for the kindly good (and often difficult) work that so many have done to help you... so obviously often without even a perfunctory "thanks."

Hear hear. We need to get

Hear hear.

We need to get better at helping everybody understand that Tor is a community of people both working to build and analyze tools to defeat surveillance / censorship, and working to teach everybody in the world what that means and why it's important.

Please help!

An important project by fine

An important project by fine people.

Is this for real...? Ho and

Is this for real...? Ho and please tell me how can i get rid of the NSA code in my windows .......i get this persistent processes running and i am NOT Allowd to do anything......What the Hell

I'm sorry, was this related

I'm sorry, was this related to Tor in any way? Or did you get infected by a virus? Or are you just concerned about the security of Windows in general?

That sounds like generic

That sounds like generic malware. It's very unlikely that it's made by the NSA, otherwise you wouldn't even be able to see the process (it'd hide itself). There *is* "NSA" code in Windows, that's true (technically it may not be the NSA's code, but there are some pretty extreme vulnerabilities that only the NSA is allowed to know about, and very likely legit backdoors as well), and the only way to get rid of that is to switch to something like Linux (note that Linux is not impervious, it can still be hacked, it's just more secure, and more trustworthy). Also, there are many Linux distros ("types") out there which are designed to present a comfortable environment for Windows users (for example, Kubuntu, or Linux Mint).

I suggest you look up the process name on Google (or preferably Startpage), and take action from there. I do NOT recommend using the computer until it is free of this malware. If you have to, just backup your (non executable) files that you may need, and do a fresh re-install (if you are unwilling to switch to Linux, that is).

I was vacationing from

I was vacationing from before Jan. 27 until today (Feb. 3) and so hadn't known about the new release until now. I'm using 3.5, but the welcome page did not inform me about the 3.5.1 update (I just happened to check this blog to see what's new and found out that way). I know there is usually some lag between when a release comes out and when TBB informs users about it, but a week seems like rather a long time. Is this worth opening a ticket about?

https://check.torproject.org/

https://check.torproject.org/RecommendedTBBVersions
still lists 3.5 as well. So Mike hasn't yet chosen to have all the 3.5 users get told to upgrade.

Me too I was deceived by

Me too I was deceived by this, because the new version contains fixes to security issues, it _should_ be advertised to the TBB user as soon as possible.

And BTW there is already a ticket for this, though it seems it was ignored: https://trac.torproject.org/projects/tor/ticket/9915

installed 3.5.1 browser

installed 3.5.1 browser bundle, however when I click on 'start tor browser' a firefox error window appears saying "couldn't load XPCOM"
I've uninstalled firefox and reinstalled it, deleted the tor folder and reinstalled the bundle multiple times... help?

Tor browser bundle hangs for

Tor browser bundle hangs for certain web sites
Here's one, and there are more:

[geshifilter-code]http://www.linkedin.com/company/sephora/careers?trk=top_nav_careers[/ge…]

Symptom:
Tor Browser immediately gets very slow. After 50 minutes, it runs out of memory.

info output:
Could not check applicable rules for about:tor
Could not check applicable rules for about:blank
###!!! ABORT: OOM: file ../../dist/include/nsTHashtable.h, line 172
###!!! ABORT: OOM: file ../../dist/include/nsTHashtable.h, line 172
Feb 03 12:20:51.000 [notice] Owning controller connection has closed -- exiting now.
Segmentation fault (core dumped)
Tor Browser exited abnormally. Exit code: 139

(I don't know how to open a ticket)

I use this thing 24/7:

The one feature you could implement for me would be multiple cookie sessions, so I can log in to the same site, using different identities, concurrently. I believe firefox is unable to do multiple instances.

Could we please have an

Could we please have an urgent response from Erinn regarding the allegation that 3.5.1 contains a trojan?
We are told that we should have the latest Tor version, but I am sure that a lot of users are still using 3.5 for fear that there really is a trojan in the latest version.
I too would like to express my gratitude for all the hard work that you do on our joint behalf.
Thanks

Copying from a comment I

Copying from a comment I wrote above --

Here is the virustotal analysis, which says it's clean:
https://www.virustotal.com/en/file/68d00d64b8919db0d18593fee0dbcc9ff80d…

We looked into it (including a malware analyst) and found it to be clean. A list of AV vendors was also contacted about it and the responsive ones also found it clean. Can you update your anti-virus software and let me know if you are still encountering problems?

Tor seems to connect to

Tor seems to connect to ports other than 443 or 80. Doesn't this give away its presence? I mean instead of subtlety or confusion to observers before, now Tor seems to use completely different ports. Please note that I'm just trying to understand.

Anyone has experienced this?

Anyone has experienced this? My system osx 10.9.1. I want to use TBB when I need anonymity. I download TBB for osx on an intelmac and start to use TBB straight away. it works very well. Thank you.

But I notice in the Finder window where it is located The Date Modified is shown as "1 January 2000". Is this correct? I click on the Torbutton icon and on to its preferences to do a 'Test Settings": The result is "Tor proxy test successful".

I transfer the TBB zip file to a Macbook Air using a USB drive. I want to be able to use TBB on it too. The same "1 January 2000" appears in the Finder window. I double click the zip file and TBB launches successfully with the green screen congratulation that everything is fine and I can start using TBB.

But the problem is it will not take me on to the internet as on the intelmac. Every address I use ends up with "problem loading page". I do a "Test Settings" and the result this time is INTERNAL ERROR which is strange because I am using the SAME application on both computers.

I remove the USB key and download TBB straight from the tor projects website. The result is the same - INTERNAL ERROR.

Anyone can assist me to be able to use TBB on the laotop also. Thank you in advance. I am not a technical person & step by step instructions would be greatly appreciated. Thanks again.

Shouldn't you update the

Shouldn't you update the TorBrowser since Mozilla updated FF?
Thanks alot.

Looks like 3.5.2 is in

Looks like 3.5.2 is in testing:
https://gitweb.torproject.org/builders/tor-browser-bundle.git/blob/HEAD…

Where can we download it?

Where can we download it? please.

Link please

Be patient, it should be out

Be patient, it should be out real-soon-now.

1/2-offtopic but

1/2-offtopic but important:
PROBLEM with Expert Bundle. CAN NOT install on older windows(Windows 98SE). Problem not only on my pc. 0.3.25 was working.
torproject.org/download/download.html.en says
Expert Bundle
Windows 8, 7, Vista, XP, 2000, 2003 Server, ME, and Windows 98SE

Is this normal? Can anyone from Tor distributors solve this?
It's important.
Thanks for reading.

Windows 98, eh? Isn't that

Windows 98, eh? Isn't that unsupported by Microsoft?

This is a "patches happily accepted" sort of situation.

"Windows 98, eh? Isn't that

"Windows 98, eh? Isn't that unsupported by Microsoft?
This is a "patches happily accepted" sort of situation."

right but not the point.
Old or not it would be really nice if it would run on this.

Erinn Re the possibility of

Erinn

Re the possibility of a virus in 3.5.1

Thanks a lot for putting our collective minds at ease.

what is the easiest way to

what is the easiest way to transfer bookmarks to a new release? Thanks.

Bookmarks->Show->Import/Expor

Bookmarks->Show->Import/Export
No onion sites available for me either including: http://duskgytldkxiuqc6.onion/.

Hi to the TOR Team and great

Hi to the TOR Team and great thanks to your neverending work and patience first of all!

But today I have a severe problem: After I've downloaded the current version I see that it is somehow bugged, because in the Windows 7 systray I can't find the TOR-Icon anymore after the program has loaded. Wouldn't be a problem, as long as it is usually running fine for some time anyway.
But as we know, from time to time the connections breaks down and you have to click the "request a new identity" option in the systray to reenable a connection.

With this bug that doesn't show the tray icon you would otherwise have to restart the whole TOR / browser bundle, which isn't a real option when you have several tabs openend and don't want to relad them all manually each 20 or so minutes.

So can someone tell me please, if there is another way to demand a new /re-connection to the network without closing the whole browser? I really need this workaround until the thing with the tray icon is fixed, because I really can't reload the whole prog all the time.

Thank you in advance!

I don't see vadalia anymore

I don't see vadalia anymore with the new update . How do access it without interrupting any processes in the new browser ?

https://trac.torproject.org/p

https://trac.torproject.org/projects/tor/wiki/doc/TorBrowserBundle3FAQ#…

The only reason I asked what

The only reason I asked what happened to vidalia is because I'm trying to know is there any way to choose which country you can have your network on ? For example, using only US ip addresses

Thank you Tor Thanks for the

Thank you Tor
Thanks for the time,efforts,and skills to date :-)

Thank you TOR for the lives

Thank you TOR for the lives you've helped change,
overcoming my own challenges would have been impossible without the work of the TP, and everyone who has contributed to it.

One Question: On the latest update of TOR (3.5.1) the onion icon is not appearing in my systray, my tor browser opens and confirms I am using TOR, when I try to open another concurrently to test if the vidallia warning would pop up it doesn't, instead it says firefox is running.

It seems we did away with Vidallia this update and I'm wondering if this is a normal change. Thanks.