New Release: Tor Browser 10.0.1

by sysrqb | October 14, 2020

Tor Browser 10.0.1 is now available from the Tor Browser download page and also from our distribution directory.

This release updates NoScript to 11.1.1 and fixes some bugs, including the issue of watching Youtube videos on Windows.

The full changelog since Tor Browser 10.0 is:

  • Windows + OS X + Linux
    • Update NoScript to 11.1.1
    • Update Tor Launcher to 0.2.26
    • Bug 31767: Avoid using intl.locale.requested pref directly
    • Bug 40013: End of year 2020 Fundraising campaign
    • Bug 40016: Fix onion pattern for LTR locales
    • Bug 40139: Update Onboarding icon for 10.0
    • Bug 40148: Disable Picture-in-Picture until we investigate and possibly fix it
    • Translations update
  • Windows
    • Bug 40140: Videos stop working with Tor Browser 10.0 on Windows
  • Build System
    • Windows + OS X + Linux
      • Bump Go to 1.14.9
      • Bump openssl to 1.1.1h
    • Windows

Comments

Please note that the comment area below has been archived.

October 14, 2020

Permalink

"Picture-in-Picture" is gone for me from the menu that appears when you right-click on videos, but the blue button is still there. Still does nothing though. On Linux.

October 14, 2020

Permalink

I had a previous version of Tor Browser. After I launched that version of Tor Browser, it was indicated that updates were being downloaded or that updates had been downloaded. Subsequently, I closed Tor Browser and relaunched the application. I got a message with a progress bar indicating that Tor Browser was being updated, and then Tor Browser launched as expected. Something different was that the initial page in the Tor Browser window had a black background, instead of the expected purple background, and there wasn't any message about "Use A Mask, Use Tor". On subsequent launches, the initial Tor Browser window has a black background and a "Use A Mask, Use Tor" message.

Is the black background part of the 10.0.1 update? (One of the things mentioned in the release notes is a fundraising campaign.)
Was the lack of the "Use A Mask, Use Tor" message when Tor Browser was launched for the first time after being updated to 10.0.1 normal?

Your example does not open for me. Notice "expire" in the URL.

Did you try changing your security level to Standard?
Did you try turning on media for both the first-party site and the third-party embedded domain at the same time? (if the video was embedded)
Did noscript auto-update when you were watching that video? When noscript auto-updates, it resets settings.

October 14, 2020

Permalink

i can never login in to servers like discord cause it says my computer may be sending automated queries is this normal ,can you fix this

That message comes from Google, whom Discord have deputized as gatekeeper for their service. There is nothing Tor Browser developers can do to alleviate this.

Yes this will happen as the tor nodes and relays are used by thousands of users which are flagged by websites such as discord that block them to prevent bot and spam accounts.

October 14, 2020

Permalink

Please I need help. I have downloaded the latest versión and I still have the messages "Tor launcher does not exist"

October 14, 2020

Permalink

re: Bug 40148: Disable Picture-in-Picture, when watching youtube in tbb 10.0.1 on linux, i still have firefox's blue Picture-in-Picture button on the right side of the video. (Clicking it, however, just pauses or unpauses the video.)

Props to your "resist the surveillance pandemic" message on the default page! I really dig how this subtly has simultaneous appeal to the covid-cautious demographic ("wear a mask") and the covid-truther crowd ("resist the ... pandemic") and the blue-no-matter who demographic ("resist"!). It is some really artful messaging. Cheers!

October 14, 2020

Permalink

Tor downloaded and updated to 10.0.1 this morning. It ran once, and then failed to open again. It reported an error that the file was in use by another application. Task Manager does not show Tor running, and rebooting the system fails to clear the problem. I had a copy of the previous version so I rolled back. That works fine.

October 14, 2020

Permalink

It would be nice if Tor would give users the option to hide their OS info in the about:config settings,allowing users to edit the strings and it to actually work properly. There is no sense in using Tor to be Anonymous when your OS is exposed to who ever wants to peak in at you?

October 14, 2020

Permalink

Linux is still treated like shit. There is no justification for phone-like portrait dimensions on a full HD monitor.
Shaking and crying rn.

October 15, 2020

Permalink

Hello!
Using "TrackHostExits" brings extra Middle-node to the chain (Guard->Mid->Mid->ExitNode) - so we have 4 nodes!
(REPRO: 1) "TrackHostExits .youtube.com,.youtu.be,.googlevideo.com,.ytimg.com,.ggpht.com" to torrc 2) Start TBB and open www.youtube.com 3) Press Ctrl+Shift+L to generate "new chain for this site" 4) see the chain - there are 4 nodes! )
Is it by design?
Same time - initially (before Ctrl+Shift+L) - these are only 3 nodes as usual.
Is this by design TOO? Could you clarify please the state of the feature? It is not clear should TrackHostExits - bring 3 or 4 nodes? Why there are only 3 if there should be 4?

The answer depends on the specific project(s). For the anti-censorship projects (obfs4, snowflake, etc.) this is developer preference and existing tooling was already written in Go.

October 15, 2020

Permalink

I've been having problems running tor with Sandboxie for quite some time now. Is this an issue with tor or with Sandboxie?

October 16, 2020

Permalink

I don't think I'll ever be competent enough to run Whonix in a VM under Qubes, and my PC is now probably too weak to run Tails, so thank you for TBB.

October 17, 2020

Permalink

The new fundraising message on TBB homepage, "Use a mask, use Tor: avoid the surveillance pandemic" is in poor taste. The COVID-19 pandemic is an ongoing serious disaster that has killed a lot of people and caused a lot of hardship. Would you make a Tor fundraising message with comparisons to the Holocaust or something similar? It's terribly insensitive. (Also, it's not even a good comparison because a face mask is for protection of the surrounding community not for the person wearing it, whereas Tor protects the person using it.)

Using Tor protects you, yes, and it also helps to make other people who use Tor stand out less. The more people who use Tor, the better. Using Tor can be an act of community care the same way wearing a mask is an act of community care.

October 17, 2020

Permalink

I'd like to have the wallpaper of the main page of the browser. Is there a way to download it?

Do you mean about:tor? It is not one image. Right-click --> Inspect Element. The block letters are actually fonts, the green computer seems to be an SVG file, and the row of circles or onion pattern along the bottom is actually generated from CSS code. If you know how to use an image editor, e.g. GIMP, you could take a screenshot and edit out the parts you don't want, and then resize it to your display size.

Other visuals:
https://styleguide.torproject.org/
https://community.torproject.org/training/resources/

October 18, 2020

Permalink

Why is SSH port 22 prevented from going through TOR? I received the following error when trying to open a SSH.
"This address uses a network port which is normally used for purposes other than Web browsing. Firefox has canceled the request for your protection.
"
I am using Mac TOR browser sha256:979e373caeb7d38d7fd8cdb4eac83307bbddb32ea3256410b1665085305ade83

Pro tip: When you encounter an error message, paste in a search engine the text of the message inside quotation marks.

Short answer: Use an SSH client.

Tor Browser is a web browser based on Firefox. Firefox attempts to connect using the HTTP or HTTPS protocol by default. It does not support or understand connecting by the SSH protocol. Firefox by default blocks requests to servers on port 22, the default port of the SSH protocol. You could open about:config, create the variable network.security.ports.banned.override, and set it to 22, but that simply means if you specify :22 in the address bar, the browser will attempt to connect to port 22 by speaking the HTTP or HTTPS protocols, not by speaking SSH. The standard ports for web servers are 80, 443, and sometimes 8080. A website administrator can configure their web server to run on port 22, or an SSH administrator can configure their SSH server to run on port 80, but it would be extremely uncommon and not recommended. If you are that administrator, consider an ephemeral port or port knocking instead.

MacOS comes with an ssh client command in Terminal, or you can install an SSH client such as PuTTY. In the Terminal window, try typing "man ssh" to read the manual, and then q to quit the manual, or search for help on the web. It is similar to the default ssh client in Linux.

Configuring an SSH client or any application to connect through the Tor network, called Torifying, is an advanced procedure but not a panacea. Some applications do not protect your privacy even if you torify them.