Tor Browser 7.0.2 is released

Tor Browser 7.0.2 is now available from the Tor Browser Project page and also from our distribution directory.

This release features an important security update to Tor.

We are updating Tor to version 0.3.0.9, fixing a path selection bug that would allow a client to use a guard that was in the same network family as a chosen exit relay. This release also updates HTTPS-Everywhere to 5.2.19.

Here is the full changelog since 7.0.1:

  • All Platforms
    • Update Tor to 0.3.0.9, fixing bug #22753
    • Update HTTPS-Everywhere to 5.2.19

> Users shouldn't be installing additional addons anyway.

Doesn't stop a lot of people from doing unwise things.

> So all Tor Browser users should look the same.

To a highly intrusive metrics package?

> So there shouldn't be any issue.

As a matter of principle, having analytics running in an `about:` page without being explicitly opt-in is scummy behavior at best.

Someone went and filed: https://trac.torproject.org/projects/tor/ticket/22900

I went and filed/fixed: https://trac.torproject.org/projects/tor/ticket/22899

> Maybe you could remove this in the upcoming releases since you are already heavily altering the FF code?

This is hard, because it's server side behavior. For what it's worth git master of the Linux sandbox now "solves" this by totally breaking the `about:addons` "Get Addons" pane unless users explicitly (and unwisely) choose to allow Tor Browser to write to the extensions directory.

Anonymous

July 12, 2017

Permalink

Tor browser cannot be downloaded and installed from the Ubuntu store because of validation error. Is the best way to install Ubuntu torbrowser still from your site?

> Tor browser cannot be downloaded and installed from the Ubuntu store because of validation error.

That sounds like the following very common issue. https://github.com/micahflee/torbrowser-launcher/issues/263

Note: tor-browser-launcher isn't maintained by the Tor Project, but it does seem to be a pretty good program. All it does is download the latest Tor Browser from torproject.org and install it for you.

> Is the best way to install Ubuntu torbrowser still from your site?

Yes.

Anonymous

July 14, 2017

Permalink

Version 7.0.2 - Linux (64-Bit) at the startup the proxy settings are failed to build the connection.

Anonymous

July 14, 2017

Permalink

Hi,
With the recent update on Tor, i noticed sites that used to be secure are now unsecure. Is there a setting i am missing?

Thanks

Anonymous

July 14, 2017

Permalink

Since this update, Tor browser fails to launch on Windows 10. The Status window appears saying that it's connecting, and within a couple seconds, Windows reports that Tor Browser has stopped working. Deleting my custom torrc file seemed to help to actually get to the stage where the browser opens, but even so, tabs crash within seconds and display the tab has crashed message.

Do you have an antivirus/firewall software installed? If so, please uninstall it (disabling is often not enough) and check whether that fixes your issue. We have a bunch of reports matching yours of users having Trusteer products installed and the problem in this case is that Trusteer software is interfering with Tor Browser, crashing it.

Never heard of Trusteer and it's not installed. I have Comodo Firewall 10.0.1.6209, Malwarebytes 3.1.2 and Eset AV 10.0.390.0 installed. Tor Browser has functioned as expected with these products installed up until now. I tried disabling them, but no difference. The hassle of uninstalling them to test is too much for me. Is there something in particular that Trusteer is doing/modifying that you know is causing this?

Could you try whitelisting Tor Browser's firefox.exe and tor.exe in your firewall/antimaleware tools somehow?

What they do depends on the actual tool being used. Most of them are scanning and analyzing traffic in order to look for patterns they deem malicious. Others are injecting own code into the Tor Browser related processes often causing crashes.

Unfortunately, whitelisting Firefox/Tor or disabling the softwares made no difference. With every attempt to launch, Tor browser would crash as usual, sometimes offering to start in Safe Mode. I also tried renaming my torrc file again so Tor browser would create a new one, it too seemed to make no difference, so I reverted that change.

After having re-enabled the system protection and removed whitelists, I was attempting again and thought to try and get the Tor Status window's Open Settings button to press before it would normally crash and I succeeded. I then proceeded to click Configure and run through that wizard. After completing it, Tor browser opened and stayed open. Having closed and reopened Tor Browser many times now, it seems fixed. No more crashing, connecting every time.

Seems I spoke too soon. The browser is still crashing, but spamming the Open Settings button to get the Configure wizard option seems a pretty reliable way to actually get Tor browser to launch without it instantly crashing. I type my response via Tor right now, though the Firefox tabs still crash fairly often, but it's at least somewhat usable.

Anonymous

August 13, 2017

In reply to by Anonymous (not verified)

Permalink

Things seem to be fixed now. Not sure if it was the recent update to Tor that fixed it or a change to whichever software was conflicting.

Anonymous

July 14, 2017

Permalink

Am I able to change my identity in TBB 7.0.2 and if so, how? Thanks in advance for any feedback!

Anonymous

July 15, 2017

Permalink

Ver 7 requires the use of pulseaudio, which is not usable on my system. Perhaps this is the time to consider another browser for Tor-Browser? In order for me to use Tor-Browser I have to stay with an insecure 6.5 version, if I wish to have audio. The fact that the auto-update choice is "not-a-choice" does not help the situation, but that is
a bug that was not found and therefore did not get fixed. I have had to resort to editing the update ini files, and setting the sticky bit, on order to stop the auto-updating.

Hmm... pulseaudio has always seemed to me to be rather dangerous. At least on Debian systems it uses /dev/shm (shared memory) and as far as I can tell from the developer's blogs, it records everything by default, and one has to trust in systemd if one wants to disable it.

I notice that Tails 3.0.1 does not appear to run pulseaudio by default, which may or may not reflect similar security concerns from the Tails Project.

An audio daemon using shared memory by default for IPC is entirely unsurprising. If it bothers you that much, it's optional, though it will come at a performance/latency hit.

> enable-shm= Enable data transfer via POSIX or memfd shared memory. Takes a boolean argument, defaults to yes. The --disable-shm command line argument takes precedence.
>
> enable-memfd=. Enable memfd shared memory. Takes a boolean argument, defaults to yes.

Anonymous

July 16, 2017

Permalink

Since 7.0 was release, every saved image gets downloaded twice. Every time I click an image thumbnail to open it in a new tab, it downloads the image and displays it. Fine and good. But starting with 7.0 if I choose to save the image while it's still open inside the tab, it downloads the file again again rather than just copying it from the local cache like it used to. This is a big deal for people like myself with very small data plans. Is this a bug or new feature? I'm seriously considering rolling back to a previous version. PLZ FIX.

Anonymous

July 16, 2017

Permalink

I would like to know how to run Tor on the newest version of Adobe Flash Player (26.0.0.137). Because I need the newest version to play

Anonymous

July 16, 2017

Permalink

thank sooooooooooooooooooooooooooooooooooooooooooooooooooooo

Anonymous

July 16, 2017

Permalink

I downloaded tor 7.0.2 (linux x32) and i can't connect to the tor network. It freezes at 'establishing a tor circuit' but when i launch old version 7.0.1 everything is ok. What's wrong? How to solve this issue?

Hm. There are no big changes between 7.0.1 and 7.0.2 (mainly a new tor got added containing security fixes). Could you show us the debug output you get when launching Tor Browser from the command line with ./start-tor-browser.desktop --debug?

Anonymous

July 17, 2017

Permalink

my tor has problems loading URL sites, is this caused by an older version of tor being run when there is newer?

Anonymous

July 20, 2017

Permalink

I can't use Tor at all. No matter what site I try to access, I get the "Bad Gateway 502" message. I'm open to suggestion. What do I do? My internet connection is Comcast Broadband, I'm using Windows Firewall and Avast Free AV. Do I have to tell Windows Firewall to allow Tor to connect to the Internet? I didn't have to do that with Firefox, Chrome, or Windows Internet Explorer.

Anonymous

July 21, 2017

Permalink

First of all, nice upgrade of the blog layout and design. However this light/white background makes my eyes hurt.
is there any way to make background dark?

Ok, let's get down to business! this is no big issue really but i still find it kinda annoying.
everytime i do pick (new identity) the window restarts on opposite side of the screen of where it was when was restarted. for example if it was on the right side it will jump to the left side and other way around.

why this sudden change? and is there a way to keep it still? lol

Anonymous

July 21, 2017

Permalink

If I get it correctly, if I watch a playlist on youtube, the path streams will change after each videos ? Which would explain why sometimes the first video is perfect and the next one is a hell beacuse of bad relays.
Can someone confirm please, thanks

Anonymous

July 22, 2017

Permalink

None of 7.0.1, 7.0.2 nor 7.5a2 (all en-US) launches on my Windows 10 system.

Faulting application name: firefox.exe, version: 52.2.0.6242, time stamp: 0x00000000
Faulting module name: KERNELBASE.dll, version: 10.0.14393.1378, time stamp: 0x594a13be
Exception code: 0xc06d007f
Fault offset: 0x000da9f2
Faulting process id: 0x1ddc
Faulting application start time: 0x01d302e83a892015
Faulting application path: C:\[MY-CUSTOM-PATH]\Tor Browser\Browser\firefox.exe
Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
Report Id: a552d7dc-1f95-41ac-abb9-859ca7348a44
Faulting package full name:
Faulting package-relative application ID:

Thanks for all you do.

That looks like you have some Trusteer product installed that is interfering with Tor Browser. Unfortunately, there is currently no better solution than to uninstall that one in order to get Tor Browser running.