Tor Browser 7.0.5 is released
Tor Browser 7.0.5 is now available from the Tor Browser Project page and also from our distribution directory.
This release makes HTTPS-Everywhere compatible with Tor Browser on higher security levels and ensures that browser windows on macOS are properly rounded.
The full changelog since Tor Browser 7.0.4 is:
- All Platforms
- Update Torbutton to 1.9.7.6
- Bug 22989: Fix dimensions of new windows on macOS
- Translations update
- Update HTTPS-Everywhere to 2017.8.31
- Update NoScript to 5.0.9
- Bug 23166: Add new obfs4 bridge to the built-in ones
- Bug 23258: Fix broken HTTPS-Everywhere on higher security levels
- Bug 21270: NoScript settings break WebExtensions add-ons
- Update Torbutton to 1.9.7.6
Why does Tor Browser keep …
Why does Tor Browser keep "exiting unexpectedly" since the version previous to the current one?
You mean since 7.0.4? When…
You mean since 7.0.4? When does this happen? On start-up? If you close tabs? If you load websites? Or...?
I have the same problem,…
I have the same problem, when i start Tor Browser it stops working, but it doesn't close the window. The browser itself works, but it doesn't load any tab.
Can you open about:config in…
Can you open about:config in one tab and, if so, flip the browser.tabs.remote.autostart.2 preference (which means setting it to false) and restart? Does it still not work for you?
Why after posting a comment…
Why after posting a comment on this page does the page keep constantly refreshing forcing you to restart Tor Browser? The 'old' Tor Blog page had no such issue.
And why does Tor Browser have such a high start-up load - unlike any other browser?
On which security slider…
On which security slider level is this happening? If on "high" it is https://trac.torproject.org/projects/tor/ticket/22530.
Not sure where exactly you are seeing the high start-up load but unlike any other browser Tor Browser ships with Tor and it is starting it first. Until you have a working Tor circuit no browser window will open.
Is https://trac.torproject…
Is https://trac.torproject.org/ getting DDoSed? I get service unavailable all time I try to visit it,
Not that we know of but Trac…
Not that we know of but Trac is having stability problems after the last update it seems. We are investigating currently.
Could you provide a bit more…
Could you provide a bit more information? Like what operating system you are using? What "does not work" means? Which error messages you get etc. Anything that could help us investigate your issue.
Please someone tell me what…
Please someone tell me what is better 704 with working HTTPS Everywhere or 705 wihout it?
tor7.0.4 worked very well…
tor7.0.4 worked very well.
new identity, tor circuit worked.
with 7.0.5 tor circuit always same first relay, any time delete and reinstall, re download, and install, this occur, first relay is set to the same relay node IP. ( on windows version )
this is not good.
I like to use Tor Browser to…
I like to use Tor Browser to surf politically sensitive issues. I'm using 7.0.5. In the past, I had been able to search YouTube, see the videos in a playlist, but not all the uploads in a channel. I had been able to read the description. The first few lines would be visible, but I could select the text by dragging from above it to below the missing comments, copying, and pasting in another application. I was able to watch the videos by installing Video DownloadHelper and downloading (I checked for direct access by watching in URLSnooper2, and I saw no unencrypted accesses.)
Recently, about a week or two before this update, YouTube quit displaying correctly. The main screen had only a faint line across the top. Video pages had only a list of URL's. I had no way to search. I could still download videos. Then, video downloading quit working.
With this update, video downloading works again. When I installed it, I got a YouTube page to display correctly. I thought it was working as described in the first paragraph again. After that, I haven't gotten another Youtube page to display correctly - thus I cannot search, see playlists, etc. Disabling HTTPS Everywhere does not fix the problem.
I thought with HTML5, we would be able to watch videos again, and we used to be able to. I surmise that YouTube is intentionally breaking their site for Tor. They easily could get SOME sort of site for non-Javascript browsers. I don't know if the problem is that recent changes in the Tor Browser keep even a semblance of a YouTube page from displaying, or if YouTube has been breaking things intentionally recently.
YouTube is an important site for users of the Tor Browser. Could anybody tell me if my anonymity would be at anything more than a theoretical risk by dropping down to Medium security? I would hope some of you Tor Browser guys would study the issue, and either get it working a little better under High Security, tell us what settings we need to make with plugins, or put up a blog post explaining why getting a YouTube page to display at all in the TB is just not feasible.
Here's a fun issue. I go to post this comment, and hit Preview. I get a window with the text in a box, and Save and Preview buttons. I hit Preview again, and it goes into a loop of eternal loading. I had to drop down to Medium security to even post this comment, or else I got an eternal page load loop again! I'm running on Win7.
The loop you are…
The loop you are experiencing is a bug in our blog, see: https://trac.torproject.org/projects/tor/ticket/22530 The Youtube issues might be due to recent changes on Youtube, see: https://trac.torproject.org/projects/tor/ticket/22129 and related tickets. So, yes, setting the slider to higher than "low" risks breaking sites which is not a bug in this case.
You're asking Tor Browser to…
You're asking Tor Browser to disable certain functionality in the browser. Youtube wants to use that functionality, and has decided to just fail if it isn't there. I don't think there's an easy way around that one. :(
The problem here is that Tor…
The problem here is that Tor Browser reports to Youtube that it supports SVG, but actually disables it.
That's an interesting theory…
That's an interesting theory. Do you care to elaborate? Like, how do we indicate that we support SVG and does not indicating that fixes the problem?
Check that https:/…
Check that https://browserleaks.com/features detects some SVG on High (JS on).
"Could anybody tell me if my…
"Could anybody tell me if my anonymity would be at anything more than a theoretical risk by dropping down to Medium security?"
No one should be lulled into dropping protections which exist for very good reasons in order to use a site. Yes, it appears YouTube is now broken for Tor users who care about their privacy.
I won't drop my drawers for javascript.
Correct testing -littlebit…
Correct testing -littlebit tired,no coffee:
with javascript ON, Security slider High,
-GUI seems normal, BUT
-"Block all unencrypted requests" ISN'T working, can't click it ON
-no counting.
Not good.
Make a clean new…
Make a clean new installation, then test.
But that HTTPSE is really a hole! It bypasses unencrypted images on encrypted pages even when you can click that checkbox!
It won't connect and opens…
It won't connect and opens oddly sised and placed windows. Then it usually crashes.
I'm using the 64 bit version on Linux. The tarball checks out - md5 is
dd94e0655818035d3129028c88b1bc31
This is the first time tor browser has actually not worked for me.
You got that one from our…
You got that one from our download website? Which language are you using? That happens with a clean, new Tor Browser 7.0.5?
After posting that, I worked…
After posting that, I worked out the problem only occurs if I also have Firefox running. Maybe one is not supposed to but I generally do, and have not seen this with previous versions.
Yes - the EN_US version, freshly downloaded and untarred. I tried several times before finding the connection with running another Firefox instance.
Which Firefox version is…
Which Firefox version is that? If not 52, does that happen with a Firefox 52 ESR as well? (you can find bundles for testing here: https://www.mozilla.org/en-US/firefox/organizations/all/.
You mean for Windows? Yes…
You mean for Windows? Yes. Later this year we hope to have it in our alpha series.
12:53:13.424 [Exception... …
12:53:13.424 [Exception... "Component returned failure code: 0x80040111 (NS_ERROR_NOT_AVAILABLE) [nsIHttpChannel.suspend]" nsresult: "0x80040111 (NS_ERROR_NOT_AVAILABLE)" location: "JS frame :: resource://gre/modules/WebRequest.jsm :: maybeSuspend :: line 601" data: no] 1 (unknown)
maybeSuspend resource://gre/modules/WebRequest.jsm:601:7
HttpObserverManager.applyChanges< resource://gre/modules/WebRequest.jsm:749:24
next self-hosted:1120:9
TaskImpl_run resource://gre/modules/Task.jsm:319:42
TaskImpl resource://gre/modules/Task.jsm:277:3
createAsyncFunction/asyncFunction resource://gre/modules/Task.jsm:252:14
runChannelListener resource://gre/modules/WebRequest.jsm:738:12
observe resource://gre/modules/WebRequest.jsm:504:9
how come every time since an…
how come every time since an upload to an .onion site the first tor relay is always ROMANIA 185.100.84.212?
even reinstalled tor from the old 7.0.1 and updated
still romania 185.100.84.212
every time.
do i have to entirely delete tor from the machine and run from the ISO 7.0.5? instead?
can someone through a relay sniff the traffic, and change tor relay settings so that the aforementioned relay is always first, set.
Because that's how Tor works…
Because that's how Tor works.
Hi, will tails users be…
Hi, will tails users be affected by this update? On tails 3.1 the browser is version 7.0.4, and it did not automatic upgrade me, I can not manually upgrade either.
Please help.
7.0.4 on Tails is fine. 7.0…
7.0.4 on Tails is fine. 7.0.5 is no security update and the Tails developers decided to not release a new Tails version with 7.0.5.
Hi the TOR browser in Tails…
Hi the TOR browser in Tails 3.1 is still at 7.0.4, it does not automatically upgrade, and I can not manually upgrade it from within Tails 3.1.
Is this a security concern?
7.0.4 on Tails is fine. 7.0…
7.0.4 on Tails is fine. 7.0.5 is no security update and the Tails developers decided to not release a new Tails version with 7.0.5.
Can i use 7.0.4 on MSWindows…
Can i use 7.0.4 on MSWindows without problems, too?
There is no essential change in 7.0.5? And the broken HTTPS-Everywhere 2017.8.31, no "unencrypted requests" blocking -that shouldn't happen, is a problem here.
There is no other simple way to stop HTTP requests?)-:
Webextensions are working with javascript only ? -would be a problem.
Yes, cou can stay on 7.0.4…
Yes, cou can stay on 7.0.4. 7.0.5 is no security release. As to the broken "unencrypted-requests-blocking" I am not sure it seems to work for me on my Linux box. Does this happen with an unmodified, clean Tor Browser?
I have the same problem with…
I have the same problem with HTTPS-Everywhere2017.8.31 in TBB 7.0.5.
"happen with an unmodified, clean Tor Browser?"
I can not testing yet but when H-E2017.8.31 in TBB 7.0.6 will working
like TBB 7.0.4 WITHOUT javascript, that would be very good and necessary.
The drop down list of relays…
The drop down list of relays connected through have disappeared???
I don't think there is any…
I don't think there is any change in 7.0.5 that could cause this. Can you reproduce that? If so, how?
09:37:39.462 TypeError: this…
09:37:39.462 TypeError: this.globals.get(...) is undefined 1 ExtensionContent.jsm:1035:5
I hope developers can…
I hope developers can reassess the capacity of the great firewall of china in the furture, the last article on this subject is at least a few years ago.
Ever since July this year, connection to Tor network can be routinely and effectively blocked by GFW, regardless of what type of bridges I'm using. I'm able to get past GFW by forcing Tor to use a free/commercial VPN, even the effectiveness of this workaround is diminishing now.
Don't get me wrong, the fact that such a small development team is able to challenge the world's most sophisticated censorship is a huge accomplishment. I appreciate Tor team's effort in ending censorship and promoting online privacy. If there's anything I can do that will help Tor(and not get me killed in the process), let me know.
hi, had a bit of trouble…
hi, had a bit of trouble during the verification. several outputs looked quite different to what is mentioned on your verification guide. can you please help me on this? sorry, i'm new to gpg.
1)
after i imported the public key, I ran gpg --fingerprint 0x4E2C6E8793298290 and it gave me:
pub rsa4096 2014-12-15 [C] [expires: 2020-08-24]
EF6E 286D DA85 EA2A 4BA7 DE68 4E2C 6E87 9329 8290
uid [ unknown] Tor Browser Developers (signing key)
sub rsa4096 2016-08-24 [S] [expires: 2018-08-24]
key fingerprint is correct, but why does the rsa key only say "4096" while it should say "4096R/93298290"? And why is the uid line tagged "unknown"?
2)
when trying to verify the tar.xz and tar.xz.asc files, it gave me:
gpg: Signature made Mo 04 Sep 2017 00:37:26 CEST
gpg: using RSA key D1483FA6C3C07136
gpg: Good signature from "Tor Browser Developers (signing key) " [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7 DE68 4E2C 6E87 9329 8290
Subkey fingerprint: A430 0A6B C93C 0877 A445 1486 D148 3FA6 C3C0 7136
Fingerprints are correct, but is there a new RSA key? It differs from what is shown on the verification guide ("RSA key ID D40814E0" is mentioned there). Also, why is something regarding the signature "unknown"?
Is there a reason to be concerned? Would be very thankful for your help
Hello all,I hope all is…
Hello all,I hope all is right in every ones world.I am new to all this like many on here,went from a good working Tor to "After the Update"not so much.But we as a legion have not only the means but the sheer multitude of almost unlimited human knowledge.So i have tweaked my settings here and there and not yet perfect but i have learned a lot.So thank all of you who have spent untold hours,days and weeks in the development of Tor.And free say it with me free,who are these crazy lovable people who do this for $0.00 you have my respect and thanks.And i feel honored to part of this History.
Sincerely the ghost
So what is the right…
So what is the right browserwindow dimension then?
No one is mentioning that.
There is no single one that…
There is no single one that is right. All dimensions that are a multiple of 200x100px are okay currently.
This be all soooo funny! …
This be all soooo funny!
Support for 32 bit systems by Mozilla was announced as ending in September 2017 yet i now see that Mozilla has decided to continue with the current series ad infinitum due to the millions of 32 bit systems still happily grinding away
Never mind. I blew $US 260 recently on acquiring the home version of Win 10 and I'm slowly setting it up for Lubuntu and Tor. Yes, when the project is complete I'll somehow network my XP home to this Linux OS so that I can continue with the XP and use the Linux as an up-to-date browser.
The good news is that my total expenditure on laptops and ancillaries since 2004 is still less than $US 750 - or $US 58 per year. Viva Linux!
"about:config" : 2…
"about:config" : 2
- TRUE = network.IDN_show_punycode
- FALSE = browser.urlbar.trimURLs
"searchengine" : 4
- UNCHECKED : google, tweeter, yahoo, youtube
that's the settings i recommended.