Tor Browser 6.0.2 is released

Tor Browser 6.0.2 is now available from the Tor Browser Project page and also from our distribution directory.

Tor Browser 6.0.2 is a fixup release to address the most pressing issues we found after switching to Firefox 45.2.0esr.

In particular, we resolved a possible crash bug visible e.g. on Faceboook or mega.nz and we fixed the broken PDF download button in the PDF reader.

Note: In version 6.0 we started code signing the OS X bundle for Gatekeeper support. A side effect of this signature is that it makes it harder to compare the bundles we ship with the bundles produced using reproducible builds, therefore we plan to post instructions for removing the OS X code signing parts on our website soon. An other effect is that the incremental update will not be working for users who installed the previous version using the .dmg file, due to bug 19410. The internal updater should still work, though, doing a complete update.

Update (June 23, 12:38 UTC): We have still some users that report crashes on Facebook and mega.nz. We suspect this happens because those users are not using Tor Browser in its default configuration but have left the Private Browsing Mode. There are at least two workarounds for this: 1) Using a clean new Tor Browser 6.0.2 (including a new profile) solves the problem. 2) As files cached by those websites in the Tor Browser profile are causing the crashes, deleting them helps as well. See bug 19400 for more details in this regard.

Here is the full changelog since 6.0.1:

All Platforms
- Update Torbutton to 1.9.5.5
  - Bug 19417: Clear asmjscache
- Bug 19401: Fix broken PDF download button
- Bug 19411: Don't show update icon if a partial update failed
- Bug 19400: Back out GCC bug workaround to avoid asmjs crash
Windows
- Bug 19348: Adapt to more than one build target on Windows (fixes updates)
Linux
- Bug 19276: Disable Xrender due to possible performance regressions

very slow browser

Very...Very slow

very very slow

relax, it's not a browser

Very, very...very

Very, very...very slow....browser.....very..........slow.

I love yooou

Thanks!

Thanks, one question though.

Don't these auto updates make it so people will differ more and more from each other? Because if people won't ever have to reinstall their browser, the browser will differ more and more as time progresses because of modifcation to the browser, like installing addons or changing preferences in about:config

Yes, installing addons or

Yes, installing addons or changing preferences in about:config could make your browser differ from others. So you should be careful with what addons you are installing and what preferences you are changing.

Thanks for your reply, but I

Thanks for your reply, but I think it must be made easier to reset your Tor Browser.
Like adding a "Reset Tor Browser" option in the Tor Button menu.

That'd be much appreciated

I understand how certain

I understand how certain extensions might leak data or reveal your location, but can anyone explain why modifying preferences in such a way that your config differs from other people's is a bad thing? how does it matter? For example let's say you alter the flag that enables javascript so that it is completely off. A website could identify that you have done this. But how is this in any way compromising to you? Thank you.

Thank you! Bugs related to

Thank you!

Bugs related to asmjs were security or privacy risk related?

These are privacy related.

These are privacy related. The main bug still open now is https://bugs.torproject.org/19417.

EXCELENT PROGRAM

Thanks to all the Tor team.

Thanks to all the Tor team. We appreciate all your hard work.

Great ! Thanks a lot for

Great ! Thanks a lot for staying anonymous.

Just done the software

Just done the software update, from 6.0.1 (Linux), got this in the update popup window:

The Update could not be installed (patch apply failed)

And this in /Browser/updated/TorBrowser/UpdateInfo/updates/last-update.log

ensure_copy_recursive: path doesn't exist: (mypath)/Browser/TorBrowser/Data/Browser/profile.default/cache2/entries/C766
12B110C8942421772C3322A6CB5351A75AE0, rv: -1, err: 2
failed: 6
calling QuitProgressUI

Is that for the incremental

Is that for the incremental update? And does a full update work?

FYI, I repeated the update

FYI, I repeated the update process and this time everything went OK.

When the updater is

When the updater is preparing to patch your copy if Tor Browser, it tries to recursively copy your entire Browser directory. It looks like a file in the browser cache was deleted during the recursive copy (the err: 2 in the log means errno 2 which is ENOENT, aka "No such file or directory"). I am not sure what to do about this, but this kind of problem will disappear when we fix https://bugs.torproject.org/18369

good

I don't use raw TBB. I use

I don't use raw TBB. I use it with system Tor installed on my Linux machine. So, in preferences I selected "check for updates, but let me choose whether to install them". In this case when update happens, I see a lot of notifications. First, I see small window notifying my that new release appeared. OK, good. Second, few minutes later I see big window where I can choose only "ask later". I want but I cannot cancel update in this window permanently. If I press "ask later" this annoying window later (after few minutes) appears again and again ad infinitum, while I'll not update my TBB manually (I always do so). Can I disable this crap? I am glad to see notification but only once, I don't need dozens of popped up windows annoying me every few minutes when new update arrives.

You can disable

You can disable notifications by setting app.update.silent in about:config:
http://kb.mozillazine.org/App.update.silent

Will TBB check that new

Will TBB check that new version is appeared in this case? Will I receive notification from TBB? I don't want to disable this functionality completely.

Thanks for everything guys.

Thanks for everything guys. And people who said 'slow browser', i think u still dont know how work Tor...

Yes, I think it would be

Yes, I think it would be better to use TBB installed locally. In my experience browsing is no slower than without Tor.

very good

VERY GOOD THANKS

very good

Hi there. Thanks for your

Hi there. Thanks for your hard work. I am a Mac OS X 10.11.5 (El Capitan) user and have just installed the Tor Browser using the default "Connect" method. The error "Something went wrong, TOR is not working in this browser" occurs. Can you kindly offer any advice?
Kind regards.

You downloaded it from our

You downloaded it from our website and installed it? Where did you put Tor Browser? Does it work if you just drag Tor Browser do your desktop and start it from there?

the best pro

Hi friend, i am use "orbot"

Hi friend, i am use "orbot" on my andriod mobile device and when i use e-mail it still is showing my local header's idk what to do? ANY HELP OUT THERE???

Do you have your mail client

Do you have your mail client properly set up to go through Orbot? Or do you have root to force it through Tor? You might have to manually set up Orbot as a proxy in your mail client, if it has that option. Or you could try another mail program and see if that goes through Tor correctly.

thanks , but integrated more

thanks , but integrated more privacy tool and cryptography software / crypt currency wallet would be better ,

Are you talking about in the

Are you talking about in the browser bundle?? Because I think Tails had Electrum bitcoin client built in last time I checked. (Including anything that actually download the blockchain would probably be annoying for the majority of users that don't use it because of the massive amount of disk space).

I would like to see an integrated adblocker like Ublock, though.... but I know that's another component that they'd have to audit and keep up with that not all users would even want.

Current Tails does indeed

Current Tails does indeed offer Electrum Wallet under the Internet menu.

Go, Tails Project! And Tor Project too! <8

"like to see an integrated

"like to see an integrated adblocker"
most web pages use javascript to inject ads and noscript is part of tor browser bundle.
using 'static' ad is probably useless to the web site, because they cannot quantify the ad's effectiveness and so they cannot bill for the ad.