Tor Browser 6.0.6 is released

Tor Browser 6.0.6 is now available from the Tor Browser Project page and also from our distribution directory.

This release features important security updates to Firefox.

This release is updating Firefox to 45.5.0esr. Moreover, other components got an update as well: Tor to 0.2.8.9, HTTPS-Everywhere to 5.2.7, and OpenSSL to 1.0.1u.

We fixed a lot of usability bugs, some caused by Apple's macOS Sierra (meek did not work anymore and windows could not be dragged either). We moved directly to DuckDuckGo as our search engine avoiding a roundtrip to Disconnect.me first. Finally, we added a donation banner shown in some localized bundled starting on Nov 23 in order to point to our end-of-the-year 2016 donation campaign.

Here is the full changelog since 6.0.5:

  • All Platforms
    • Update Firefox to 45.5.0esr
    • Update Tor to 0.2.8.9
    • Update OpenSSL to 1.0.1u
    • Update Torbutton to 1.9.5.12
      • Bug 20414: Add donation banner on about:tor for 2016 campaign
      • Translation updates
    • Update Tor Launcher to 0.2.9.4
      • Bug 20429: Do not open progress window if tor doesn't get started
      • Bug 19646: Wrong location for meek browser profile on OS X
    • Update HTTPS-Everywhere to 5.2.7
    • Update meek to 0.25
      • Bug 19646: Wrong location for meek browser profile on OS X
      • Bug 20030: Shut down meek-http-helper cleanly if built with Go > 1.5.4
    • Bug 19838: Add dgoulet's bridge and add another one commented out
    • Bug 20296: Rotate ports again for default obfs4 bridges
    • Bug 19735: Switch default search engine to DuckDuckGo
    • Bug 20118: Don't unpack HTTPS Everywhere anymore
  • Windows
    • Bug 20342: Add tor-gencert.exe to expert bundle
  • OS X
    • Bug 20204: Windows don't drag on macOS Sierra anymore
    • Bug 20250: Meek fails on macOS Sierra if built with Go < 1.7
  • Build system
    • All platforms
Anonymous

November 23, 2016

Permalink

NoScript today has started detecting a cross-scripting issue (XSS) with StartPage and DuckDuckGo used from the search box, and instead of searching directs to the search engine's home page.

I presume a temporary issue. But, if not, how does one correct that? Or is it a NoScript issue? Still works fine with Yahoo search.

Yesterday, this was not a problem. Unsure if the search engines have changed something.

Anonymous

November 24, 2016

Permalink

It is possible to install some dictionary from others localized versions of Tor Browser?
For example adding spanish and chinese dictionaries to english Tor Browser.
If yes: I have to manually update those dictionaries installed by me when a new version of Tor Browser is ready?

It is considered insecure or at anonymization risk? Or what else...

Thank you

Anonymous

November 26, 2016

Permalink

Oh,I am very very excitted.thanks your browser.

Anonymous

November 27, 2016

Permalink

Log says:
1/27/2016 17:50:54.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.

I thereafter thoughtlessly ran
sudo apt install gnome-system-monitor

AND SU'CCEEDED.

Isn't something wrong? Shouldn't apt have been blocked from the net. I know I failed using wget to download stuff before. And had to install torsocks to get it working.

Not sure how you have configured your package updates/installation but, no, Tor does not automatically tunnel all your network activity. You have to configure every application to do that.

So something is wrong. This is a vanilla TB6.0.6 under ubuntu 16.04 (live-cd) on an old Toshiba Satellite. I burnt a fresh TB after I got suspicious against the old usb I had used so far. The new thing that happened was a slight delay. A first attempt to start now allways fails, independent of the configuration I choose. But after a short while it works fine even with the config that failed to begin with. Communication is very slow, like 60k instead of the 200k I have had recently.

Basically the problem remains, but by setting Privacy and Security settings to HIGH. and then in NoScript allowing all in the site I can even view video shows there, otherwise nogo.
These Privacy etc. settings do the work with more than NoScript?_

Anonymous

November 27, 2016

Permalink

Hi Tor team.

You sure you didn't flip some switch by accident? Because now Youtube videos don't autoplay with NoScript off (you need to manually allow first the audio and then the video, maybe this isn't THAT bad now that I think about it, but it sure is irksome) and Vimeo videos that used to play now don't at all.

Anonymous

December 07, 2016

Permalink

Why are we updating OpenSSL when there's LibreSSL freely available now: https://www.libressl.org/

It's 2016, nearly 2017. Trump's won and four horsemen start saddling up while China hardens its defense through economic infiltration and Russia tries to pull itself together before Armageddon. People like to look to the EU for online privacy and the EFF lawyer brain trust for some sort of digital freedom, because the truth is too much to bear: the US owns the English world, China and India own almost everything else and Russia clings to it's ever-dwindling lines on the map of what was once a much bigger USSR. At times like this we maybe look to the liberals at the UN. Ha, ha, ha. Good joke, Funny. Everybody laugh. Maybe there's a god you can pray to before this abscess of a civilization finally bursts and all the blood, muck, and puss come broiling out in an horrific eruption violence versus oppression in the Chaos Versus Order War that will have some people who once preached liberal values begging for the first dictator who will protect them from the very masses they once spilled all those liberal tears for. Meanwhile the system continues to turn, Quantum Phenox lives on, ushering in the Next Age (an age of totalitarianism) as the sun sets on the Old Era (the one, one of liberalism). And don't think you'll be safe. There's no anonymity left, not truly. TBB is just a way of keeping commercial interests at bay, not governments. They can only be held back by the best of hackers, neither you nor I (or we wouldn't be on this site, downloading prepackaged, pre-configured TOR with browser).

Anonymous

December 17, 2016

Permalink

my TOR BROWER 6.0.6 wont use my choice of default Search engine which is Start Page- Why is that. I cannot tolerate DuckDuckGo.It is too slow and doesn't give me good results. Start Page is MUCH better in all ways I am aware of