Tor Browser 6.0.2 is released

Tor Browser 6.0.2 is now available from the Tor Browser Project page and also from our distribution directory.

Tor Browser 6.0.2 is a fixup release to address the most pressing issues we found after switching to Firefox 45.2.0esr.

In particular, we resolved a possible crash bug visible e.g. on Faceboook or mega.nz and we fixed the broken PDF download button in the PDF reader.

Note: In version 6.0 we started code signing the OS X bundle for Gatekeeper support. A side effect of this signature is that it makes it harder to compare the bundles we ship with the bundles produced using reproducible builds, therefore we plan to post instructions for removing the OS X code signing parts on our website soon. An other effect is that the incremental update will not be working for users who installed the previous version using the .dmg file, due to bug 19410. The internal updater should still work, though, doing a complete update.

Update (June 23, 12:38 UTC): We have still some users that report crashes on Facebook and mega.nz. We suspect this happens because those users are not using Tor Browser in its default configuration but have left the Private Browsing Mode. There are at least two workarounds for this: 1) Using a clean new Tor Browser 6.0.2 (including a new profile) solves the problem. 2) As files cached by those websites in the Tor Browser profile are causing the crashes, deleting them helps as well. See bug 19400 for more details in this regard.

Here is the full changelog since 6.0.1:

  • All Platforms
    • Update Torbutton to 1.9.5.5
    • Bug 19401: Fix broken PDF download button
    • Bug 19411: Don't show update icon if a partial update failed
    • Bug 19400: Back out GCC bug workaround to avoid asmjs crash
  • Windows
    • Bug 19348: Adapt to more than one build target on Windows (fixes updates)
  • Linux
    • Bug 19276: Disable Xrender due to possible performance regressions
Anonymous

June 21, 2016

Permalink

Thanks!

Anonymous

June 21, 2016

Permalink

Thanks, one question though.

Don't these auto updates make it so people will differ more and more from each other? Because if people won't ever have to reinstall their browser, the browser will differ more and more as time progresses because of modifcation to the browser, like installing addons or changing preferences in about:config

Yes, installing addons or changing preferences in about:config could make your browser differ from others. So you should be careful with what addons you are installing and what preferences you are changing.

I understand how certain extensions might leak data or reveal your location, but can anyone explain why modifying preferences in such a way that your config differs from other people's is a bad thing? how does it matter? For example let's say you alter the flag that enables javascript so that it is completely off. A website could identify that you have done this. But how is this in any way compromising to you? Thank you.

Anonymous

June 21, 2016

Permalink

Just done the software update, from 6.0.1 (Linux), got this in the update popup window:

The Update could not be installed (patch apply failed)

And this in /Browser/updated/TorBrowser/UpdateInfo/updates/last-update.log

ensure_copy_recursive: path doesn't exist: (mypath)/Browser/TorBrowser/Data/Browser/profile.default/cache2/entries/C766
12B110C8942421772C3322A6CB5351A75AE0, rv: -1, err: 2
failed: 6
calling QuitProgressUI

When the updater is preparing to patch your copy if Tor Browser, it tries to recursively copy your entire Browser directory. It looks like a file in the browser cache was deleted during the recursive copy (the err: 2 in the log means errno 2 which is ENOENT, aka "No such file or directory"). I am not sure what to do about this, but this kind of problem will disappear when we fix https://bugs.torproject.org/18369

Anonymous

June 21, 2016

Permalink

good

Anonymous

June 21, 2016

Permalink

I don't use raw TBB. I use it with system Tor installed on my Linux machine. So, in preferences I selected "check for updates, but let me choose whether to install them". In this case when update happens, I see a lot of notifications. First, I see small window notifying my that new release appeared. OK, good. Second, few minutes later I see big window where I can choose only "ask later". I want but I cannot cancel update in this window permanently. If I press "ask later" this annoying window later (after few minutes) appears again and again ad infinitum, while I'll not update my TBB manually (I always do so). Can I disable this crap? I am glad to see notification but only once, I don't need dozens of popped up windows annoying me every few minutes when new update arrives.

Will TBB check that new version is appeared in this case? Will I receive notification from TBB? I don't want to disable this functionality completely.

Anonymous

June 21, 2016

Permalink

Thanks for everything guys. And people who said 'slow browser', i think u still dont know how work Tor...

Anonymous

June 21, 2016

Permalink

Hi there. Thanks for your hard work. I am a Mac OS X 10.11.5 (El Capitan) user and have just installed the Tor Browser using the default "Connect" method. The error "Something went wrong, TOR is not working in this browser" occurs. Can you kindly offer any advice?
Kind regards.

Anonymous

June 21, 2016

Permalink

Hi friend, i am use "orbot" on my andriod mobile device and when i use e-mail it still is showing my local header's idk what to do? ANY HELP OUT THERE???

Do you have your mail client properly set up to go through Orbot? Or do you have root to force it through Tor? You might have to manually set up Orbot as a proxy in your mail client, if it has that option. Or you could try another mail program and see if that goes through Tor correctly.

Anonymous

June 21, 2016

Permalink

thanks , but integrated more privacy tool and cryptography software / crypt currency wallet would be better ,

Are you talking about in the browser bundle?? Because I think Tails had Electrum bitcoin client built in last time I checked. (Including anything that actually download the blockchain would probably be annoying for the majority of users that don't use it because of the massive amount of disk space).

I would like to see an integrated adblocker like Ublock, though.... but I know that's another component that they'd have to audit and keep up with that not all users would even want.

"like to see an integrated adblocker"
most web pages use javascript to inject ads and noscript is part of tor browser bundle.
using 'static' ad is probably useless to the web site, because they cannot quantify the ad's effectiveness and so they cannot bill for the ad.

Anonymous

June 21, 2016

Permalink

Does Tails have the standard Tor Browser or the hardened Tor Browser? And if regular, then why not hardened?

Please tell us more about your situation. (Anything you can share safely.) What country are you in? What kind of firewall is there? What does the Tor log say (click the button that says "Copy Tor log to clipboard")?

meek-google stopped working on May 13, 2016; see this link. But meek-azure and meek-amazon should still be working.

I tried the Meek transports again on July-19 from a Mcdonald's restaraunt public IP 38.108.87.20. None worked. Reinstalled TBB for the Mac SHA256 vaule: 228ab076c62ee2918d5aaff96369bb92862b3a4161b4d2c883ca66dbf4273620

Same results. The browser returns "The connection has timed out"