Tor Browser 3.6 is released

The Tor Browser Team is proud to announce the first stable release of the 3.6 series. Packages are available from the Tor Browser Project page and also from our distribution directory.

For users upgrading from Tor Browser 3.5.x, the 3.6 series features fully integrated Pluggable Transport support, including an improved Tor Launcher UI for configuring Pluggable Transport bridges. The Pluggable Transport code is also fully disabled for users who do not configure them. The 3.6 series also changes the MacOS archive format from zip to DMG, which should improve installation usability for Mac users.

This release also includes important security updates to Firefox.

Please see the TBB FAQ listing for any issues you may have before contacting support or filing tickets. In particular, the TBB 3.x section lists common issues specific to the Tor Browser 3.x series. We also maintain a list of frequently encountered known issues in our bugtracker.

Here is the complete changelog since TBB 3.5.4:

  • All Platforms
    • Update Firefox to 24.5.0esr
    • Include Pluggable Transports by default:
      • Obfsproxy3 0.2.4, Flashproxy 1.6, and FTE 0.2.13 are now included
    • Bug 11586: Include license files for component software in Docs directory.
    • Bug 9010: Add Turkish language support.
    • Bug 9387 testing: Disable JS JIT, type inference, asmjs, and ion.
    • Update NoScript to 2.6.8.20
    • Update Tor Launcher to 0.2.5.4
      • Bug 9665: Localize Tor's unreachable bridges bootstrap error
      • Bug 10418: Provide UI configuration for Pluggable Transports
      • Bug 10604: Allow Tor status & error messages to be translated
      • Bug 10894: Make bridge UI clear that helpdesk is a last resort for bridges
      • Bug 10610: Clarify wizard UI text describing obstacles/blocking
      • Bug 11074: Support Tails use case (XULRunner and optional customizations)
      • Bug 11482: Hide bridge settings prompt if no default bridges.
      • Bug 11484: Show help button even if no default bridges.
    • Update Torbutton to 1.6.9.0:
      • Bug 11242: Fix improper "update needed" message after in-place upgrade.
      • Bug 10398: Ease translation of about:tor page elements
      • Bug 9901: Fix browser freeze due to content type sniffing
      • Bug 10611: Add Swedish (sv) to extra locales to update
      • Bug 7439: Improve download warning dialog text.
      • Bug 11384: Completely remove hidden toggle menu item.
    • Backport Pending Tor Patches:
      • Bug 9665: Report a bootstrap error if all bridges are unreachable
      • Bug 11200: Prevent spurious error message prior to enabling network.
      • Bug 5018: Don't launch Pluggable Transport helpers if not in use
      • Bug 9229: Eliminate 60 second stall during bootstrap with some PTs
      • Bug 11069: Detect and report Pluggable Transport bootstrap failures
      • Bug 11156: Prevent spurious warning about missing pluggable transports
  • Mac:
    • Bug 4261: Use DMG instead of ZIP for Mac packages
    • Bug 9308: Prevent install path from leaking in some JS exceptions on Mac and Windows
  • Linux:
    • Bug 11190: Switch linux PT build process to python2
    • Bug 10383: Enable NIST P224 and P256 accel support for 64bit builds.
  • Windows:
    • Bug 9308: Prevent install path from leaking in some JS exceptions on Mac and Windows

Here is the changelog since the 3.6-beta-2:

  • All Platforms
    • Update Firefox to 24.5.0esr
    • Update Tor Launcher to 0.2.5.4
      • Bug 11482: Hide bridge settings prompt if no default bridges.
      • Bug 11484: Show help button even if no default bridges.
    • Update Torbutton to 1.6.9.0
      • Bug 7439: Improve download warning dialog text.
      • Bug 11384: Completely remove hidden toggle menu item.
    • Update NoScript to 2.6.8.20
    • Update fte transport to 0.2.13
    • Backport Pending Tor Patches:
      • Bug 11156: Additional obfsproxy startup error message fixes
    • Bug 11586: Include license files for component software in Docs directory.
  • Windows and Mac:
    • Bug 9308: Prevent install path from leaking in some JS exceptions on Mac and Windows builds

Tails left out the patch about disabling js jit and so on for the 1.0 release, to see if it worked out well in TBB first. Expect it in the next Tails release.

Anon

May 02, 2014

Permalink

Upgrading on OS X 10.6.8 from 2.3.25-14 (which works fine, not an option to go back obviously); connecting to Tor network claims to be successful but browsing all connections time out. Tried obvious settings things, not figuring it out here.

Anon

May 02, 2014

Permalink

Hi i downloaded the update for my Tor browser but wen i try to open it, i get this msg " This app can't run on your pc, please check with the software publisher for a compatible version" I'm using windows 8.1 on my Toshiba Dynabook.
Can you advise please....

Anon

May 03, 2014

Permalink

GK

Screen size

I can understand that you are busy but I am disappointed that I have not yet had a reply to my post of the 16th of last month.

As I reported, I tried to comply with your: “Could you test the latest .xpi attached there and report back whether it fixed your issue?” but I got the results that I reported in the said post.

I accept that I may not have done things correctly but, quite frankly, I don’t know how to “test the latest xpi”. I would like to do so but, as I suspect would be the case with many people who use Tor, without instructions, I don’t know how to.

As one other user also reported that he cannot get a ‘rounded’ screen-size, it seems that I am not alone.

Without your help I will not be able to solve the problem I have and, indirectly, help the Tor developers to decide if there is a bug in the programme.

Thank you

I am sorry about this. But these blog comments are probably the worst way to keep in contact. I'd suggest using Trac as I get notified when a bug gets updated. That said reading your old comment I think you did everything correctly. Sad that it did not work. I might find some time until the next release comes out to implement a better stopgap. A proper solution is not possible without patching Firefox.

Anon

May 03, 2014

Permalink

Where are the public keys downloads for Tor 0.2.41 and Tor 0.2.5.4-alpha?

Since the public keys are necessary for installation to verify the signing, why is their location a state secret?

The installation instructions for Linux for Tor-0.2.4.21.tar.gz on the Tor wiki doesn't even mention the words public key or verify.

There should multiple servers to download the public key files.

And no, I don't trust key servers in the wild.

Anon

May 03, 2014

Permalink

Pluggable transports don't start, Vidalia log reports warning "Failed to create child process Tor/Pluggable Transports/obfsproxy". I know it's because of firewall, but you understand that advice "Turn off firewall at all" can't be a decision. Tell about the detailes of launch: which process is parent for obfsproxy, if only obfsproxy needs allowing policies, should I provide to obfsproxy the access to defined registry keys, libraries, etc.
It would be nice if you tested the bundles with most popular security software on different systems and published resulting rulesets.

Anon

May 04, 2014

Permalink

Tor is suck
Update process difficult not without problems

after update can't connection :(
"Unacceptable option value: You have configured more than one proxy
type. (Socks4Proxy|Socks5Proxy|HTTPSProxy|ClientTransportPlugin)
"
HELPPPPPPPPPPPPP

Anon

May 05, 2014

Permalink

Unacceptable option value: You have configured more than one proxy type. (Socks4Proxy|Socks5Proxy|HTTPSProxy|ClientTransportPlugin)

Anon

May 07, 2014

Permalink

[Bug Report]

It would seem that GeoIP in TBB 3.6 is mis-configured to be located in the sytem folder (windows 7).

"[WARN] Failed to open GEOIP file C:\Users\USERNAME\AppData\Roaming\tor\geoip6. We've been configured to use (or avoid) nodes in certain countries, and we need GEOIP information to figure out which ones they are."

The following torrc setting is ignored:

GeoIPFile C:\Users\USERNAME\Desktop\Tor Browser\Data\Tor\geoip

Regards,

Anon

May 07, 2014

Permalink

after downloaded Tor B.B. everything looks good,but i can´t open the sites i would like too...i dont know what to do,i am really not good with computers!!! It was easy to download the "old" Tor browser...

Anon

May 07, 2014

Permalink

Hi, apparently there's already a version 3.6.1 today. No changelog for it? Also, how come my torbutton didn't have that blinking warning thingy that used to alert me when there is a new version available? TIA

Anon

May 11, 2014

Permalink

Downloaded the new release but Vidalia is not part of it. No Vidalia control panel, nothing. Tor starts but what happened to Vidalia. Is this a fake Tor?

Anon

May 16, 2014

Permalink

Hi guys, just now I tried to log in to Gmail, then the yellow "untrusted connection" page appears on Firefox. So please post feedback on google community forums everywhere to complain.

Why are normal users not allowed to use tor to log in?

Well, it's possible somebody actually was man-in-the-middle-ing your connection to gmail -- that could have been at the Tor exit relay, or at Google, or anywhere in between. I recommend not logging in if this happens. :)

Anon

May 16, 2014

Permalink

Hi, I'd like to report 2 things
1) About Tor Browser Bundle v3.6.1
When I go to: TorBrowser --> Help --> About TorBrowser and click on "Tor Project", instead of taking me to the home page ot the Tor Project (https://www.torproject.org/) it opens the mozilla's home page (www.mozilla.org)
A similar thing happens when I click on: TorBrowser --> Help, it takes me to https://support.mozilla.org/1/firefox/24.5.0/WINNT/en-US/firefox-help intead of a similar Tor's destination

2) About Tor's website
At https://www.torproject.org/ in "Our Projects" section where it says "Tails", there is still the old icon of Tails (sorry for reporting this here, I just didn't know where else to post it)

"At https://www.torproject.org/ in "Our Projects" section where it says "Tails", there is still the old icon of Tails"

Not to suggest that pointing this out is not legit, but I would be far more concerned about either of the following two points-- both apparent contradictions-- (and both at least tangentially on-topic here):

1.) The apparent contradiction that Tails is listed under the "Our Projects" heading of the official web site of the Tor Project, while the Tails devs insist that they are a completely separate entity from and not affiliated with the Tor Project. (At least that's what "Tails" would say in the former forum at tails.boum.org.)

2.) The discrepancy that persists to this day between TBB and Tails with regard to the AdBlock Plus add-on.

Tails includes it in the browser, TBB does not. This, when the overall general trend, from what I can see, has been to MINIMIZE the differences between TBB and the browser within Tails as much as possible.

This would appear to only make sense, wouldn't it? Tor users are already such a small minority of the total number of Internet users that the last thing we should want to do is to divide ourselves into even smaller, more easily fingerprintable sub-groups. And yet, this is exactly the effect of having Tails users browse with ABP while TBB users browse without ABP.

As has been pointed-out before (many times, in fact), there are valid reasons for including an ad-blocker. There are valid reasons for NOT including an ad-blocker. And there may even be valid reasons/arguments -- /in and of themselves/-- for Tails to do one way in this regard and TBB to do the other. But whatever such arguments may be, are they not clearly outweighed by the arguments for uniformity?

Anon

May 20, 2014

Permalink

Thanks another time, one most popular O.S from Tails.

Great creation, I always used this.

Anon

May 23, 2014

Permalink

I am rather new to all of this, I just found out a deep web existed today. I'm not looking to conduct any criminal ways, only to explore for my own curiosity. Would you recommend that I get this browser? And if so what would I do to set it up properly so that any site i access is anonymous? Thank you

Anon

May 23, 2014

Permalink

I have tor 3.6.1 on mac 10.9.3, i updated 2 days ago and i keep getting connection timed out when i try to access any websites. I also tried older version of tor, 3.5.4 and still no luck.

any help will be appreciated

Anon

May 26, 2014

Permalink

Running Mac OS X version 10.7.5

Downloaded TOR, installed it, opened it.

Cannot connect to the internet; I get a time-out message after a while.

Previous versions of TOR worked fine on my machine.

Any suggestions?