New Tor Browser Bundles

by erinn | June 5, 2012

The Tor Browser Bundles and other packages have all been updated to the latest Tor 0.2.2.36 stable version.

https://www.torproject.org/download

Tor Browser Bundle (2.2.36-1)

  • Update Tor to 0.2.2.36
  • Update NoScript to 2.3.4
  • Update HTTPS Everywhere to 2.0.5

Comments

Please note that the comment area below has been archived.

Anonymous (not verified) said:

June 05, 2012

Permalink

I downloaded Tor Browser 2.2.36-1 for Windows (which still has Torbutton 1.4.5.1)

The browser size starts as 1000x550 and after clicking new identity button, it becomes 1000x600 (when bookmarks toolbar is disabled) or 1000x500 (when boookmarks toolbar is enabled) every time.

After updating to Torbutton 1.4.6 my screen size became 950x550, while testing I've even seen 950x650 once.

I installed 1.4.5.1 back because my fingerprints were unique. But each time I start TBB, it starts toggled to non-Tor each time (which was another issue with the previous Torbutton or Torbrowser, I'm not sure)

So I had to reinstall the browser. I really get bored with the different screen size issues happening with every new versions

Anonymous (not verified) said:

June 05, 2012

Permalink

Why don't you make ALL new bundles with the obfsproxy included?

A lot of people in Boratstan, Iran, now Ethiopia too, are cut off the TOR network because of DPI.

Anonymous (not verified) said:

June 09, 2012

Permalink

I am running an obfsproxy on a high capacity server which is only rarely used. I see normally less than 10 connections per day. My impression is that after the call for obfsproxies of Jake Appelbaum there are plenty of unused obfs proxies running out there.

Anonymous (not verified) said:

June 05, 2012

Permalink

Please, update Tor Button in Vidalia bundles to version 1.4.5.1.
Vidalia from the Windows bundle doesn't show countries flags in the Network map.

Concerning the countries' flags: It seems as if the geoip file is in the wrong location - if you put it into AppData-Roaming-Tor in your user folder it works. Is that a bug?

Anonymous (not verified) said:

June 05, 2012

Permalink

The fonts are still acting strange compared to 2.2.35-8. I have to change the default font to make web pages readable.

Anonymous (not verified) said:

June 05, 2012

Permalink

Windows 7. The default font for the Tor Browser is Times New Roman (size: 16). When using 2.2.35-8, there was no problem rendering web pages with the default font. Starting with 2.2.35-12 (the first upgrade I used after 2.2.35-8), web page fonts were changed and difficult to read on some websites so I changed the default font to Arial (size: 16). Now they're more readable but still it's not the same (specifically, not as large) as when using 2.2.35-8.

Anonymous (not verified) said:

June 05, 2012

Permalink

Today I've installed Tor. Firefox looks strange. Minimize, enlarge and close buttons are not there. Is this normal or can I change this in the settings?

Anonymous (not verified) said:

June 05, 2012

Permalink

Just right-click on the "+" on the right of the tabs and check the "Menu Bar". You'll have the menu visible, but hey, your buttons will be there too.

Anonymous (not verified) said:

June 05, 2012

Permalink

>Update NoScript to 2.3.4

Shouldn't that be "2.4.3" ?

2.4.3 is the version of NoScript that I found in this new release of TBB-- 2.2.36-1 (GNU/Linux). (And no sooner than when I checked the version, it had already updated itself to 2.4.4 )

The changelong found in the "Docs" folder that is included in this new TBB also has this error: "2.3.4" for NoScript instead of "2.4.3".

Anonymous (not verified) said:

June 06, 2012

Permalink

Thanks.

I would think that at least this announcement post could be edited to note the error and correct it.

Anonymous (not verified) said:

June 05, 2012

Permalink

Is it OK to click update on the add-ons/extensions directly on the bundle browser ?

Also, Can you explain why this is an update when 2.2.35-12 already has those updated.

Anonymous (not verified) said:

June 06, 2012

Permalink

Hi Erinn,

I suspect I have had erroneous messages at arrival at torproject.org. Sometimes I am told there is an update, thereafter not told that, even if I have not updated.

Today 6th of June, I had not updated since the 15th of May and then to tor-browser-gnu-linux-i686-2.2.35.12-dev-en-US.tar.gz. I see now, by accident, there is a "36.1" at least since yesterday, 5th of June. I used tor both today and yesterday and got no suggestion to update. How come?

My version of the changelog of "36.1" tells there was no updates between 35.12 and 36.1. Was there?

That is,
1. when should I have seen the suggestion to update to 36.1
2. have I been up-to-date with "35.12" since 15th of May?

B.w.
New lover of tor.

Currently 2.2.35-12 and 2.2.36-1 are both acceptable TBB versions to use on Linux. We try to only nag people to upgrade when there's a good reason -- after all, we nag people to upgrade often enough already.

See also
https://check.torproject.org/RecommendedTBBVersions

There will be a 2.2.37 package coming out pretty soon (with a workaround for a bug in openssl 1.0.1), and it's likely that one will mean we unrecommend both 2.2.35-12 and 2.2.36-1.

Anonymous (not verified) said:

June 06, 2012

Permalink

>Currently 2.2.35-12 and 2.2.36-1 are both acceptable TBB versions to use on Linux.

You mean I could have saved myself the trouble of downloading, verifying, unpacking and then configuring... ?

Now you tell me...

1.) Is there any reason, then, for someone already using the 2.2.35-12 GNU/Linux version of TBB to bother updating to 2.2.36-1 ?

2.) I would suggest, if there is truly no risk or other considerable downside to remaining with 2.2.35-12, that this be stated in the release announcement.

Anonymous (not verified) said:

June 06, 2012

Permalink

I take it that arma wrote this before being aware that Firefox 13 was released to fix multiple vulnerabilities in Fx 12?

How safe is it to continue using TBB (with Fx 12) at this point?

Anonymous (not verified) said:

June 07, 2012

Permalink

After posting I realized I should have checked the online changelog. But .. where is it?
The new lover

Anonymous (not verified) said:

June 06, 2012

Permalink

hi bodies
this version have some security problems .please check it and fix as a new release
thanks
nnc from iran

Anonymous (not verified) said:

June 06, 2012

Permalink

I tried installing the bundle for Mac OS X. I get an error that the configured proxy couldn't be started. Further investigation into /Applications/Vidalia.app/Contents/MacOS shows that the 'polipo' application no longer exists.

I downgraded to the previous version and the polipo app returns.

What do you mean "by default"? If you're asking why we don't make them more consistently, I agree (and we're working on achieving more consistent build automation). If you're asking why we don't turn every user into a bridge also, I think that would be rude.

Anonymous (not verified) said:

June 06, 2012

Permalink

thankyou thankyou for Tor and Viddy! Polipo appears gone for (at least the) last two upgrades, confirmed for me, too ... i'm about to update to TBB 36-1, and see that NoScript changelog is showing 2.4.4 - first i'll do TBB and see wch NoScript comes along ...

now: BOOKMARKS! how about if importing were default-ok IF captured in Tor state when using prev TB? can i change about:config JUST until i get the previous Bookmarks imported, then change it back? i'm SO frustrated having to keep making new Bookmarks with EACH update, and many more times than for just updates 'cuz of my lunacy in installing the TBB IN Dwnloads folder after Upgrading to OS10.6.8 from 10.5.8 (pre-update Tors worked well with the latter), but now i've got pieces of TBBs all over ... i've thrown away at least 5 TBBs already, still getting errmsgs 'Two Vidalias possibly running', much grief, can't find her; can we get an Uninstall that looks in Apps and Downloads and removes ALL previous pcs it finds? (i'm only half-kidding - well, less than half) ... just about every day i have to throw away yesterday's TBB, then pop out another from the installer and it works perfectly until tomorrow when apparently the 'hidden' Viddy awakens and competes with tomorrow's Viddy ... each scans the bridges i bring 'them', so there are double entries for each in MsgLog ... and each time i throw the TBBs away, i lose the Bookmarks ... help? (i Saved two of Viddy's CrashLogs, if they'd be of interest to you WonderWorkers?)

Question: what's the difference between 'Tor software is running' and 'you are connected'? (one of the Viddys) thinks she's bootstrapped 100% and that Tor's connected to Network, and 'check.torproject' Congratulates me, but i only get 'Tor software is running', not the 'connected-to' confirm, in MsgLog/Basic ... do i believe her, or should i believe MsgLog/Basic?

as soon as things here stabilize re: my Wizard and his schizoid ControlQueen, i will be happy to serve as a relay, and will offer you wchever of my skills you think might best serve you amazing folks, thankyou SO very much for yr dedication and perseverence

Anonymous (not verified) said:

June 06, 2012

Permalink

When you say "New Tor Browser Bundles" does that mean the Vidalia Bundle is updated as well? Please be clear about that cause not everyone here is an expert. I really do have problems to understand many things here. And there is no place to ask except for newsgroups I don't have access to.
Also version numbers on all the Bundles and its contents on the download page would help a ton.

And while we are on it, is there a way to use the Browser Bundle and make it so Firefox is NOT closed when I restart Vidalia? This annoys me to death.

i don't think beeing on the bleeding edge with firefox releases does help the security. On the contrary. It can introduce some new bugs.
/x

From what I've seen with firefox, each new version is closely followed by a quick and urgent patch. Not the best idea for Tor.

Anonymous (not verified) said:

June 08, 2012

Permalink

That is interesting news, especially since it says on the download page:

"Contains Tor, Vidalia, Polipo, and Torbutton for installation on your system."

Simply removing polipo from the bundle breaks existing configs (as several commenters already observed).

Did you plan on telling us about this at some point?

Anonymous (not verified) said:

June 07, 2012

Permalink

The tabs were supposed to be between the TorBrowser button and the minimise/maximise blackened out buttons. Yet, about two versions ago this changed and there is an empty line there and the tabs are wasting one extra line of screen. Can you fix that?

Anonymous (not verified) said:

June 08, 2012

Permalink

I think s/he is referring to the "Separator", or other like "Flexible Space", or "Space". I.e. when you can right-click on the top bar (next to where the tabs are, not on a tab), and select "Customize", you'll see those three icons (among many others). One can drag-and-drop them into the Firefox top bar, e.g., next to to the re-load button, or forward button, etc. The right-click meanu is also where many add-on icons can be found, and then moved around Firefox UI as the end-user pleases.

However, I didn't notice any difference wrt that person's description.

Anonymous (not verified) said:

June 07, 2012

Permalink

Noscript is part useless. I enabled it. And there was only a list to allow. Permanently allow. I changed the options in the Appearance section of Noscript, yet there is no use. I can't have temporary allow or untrusted. So why bother? I disabled it as it's almost as not having it at all.

Anonymous (not verified) said:

June 07, 2012

Permalink

I checked with Panopticlick the fingerprint. It starts fine. Than I make the browser full screen and start doing something. I click refresh on the Panopticlick as amusement. And here I am unique amongst 2+M. The key was the reported screen size which changed accordingly. Shouldn't that remain the same for all TOR browsers as a guarantee of anonimity?

Anonymous (not verified) said:

June 07, 2012

Permalink

Please add RequestPolicy. It can be quite a lot more useful than NoScript when it comes to anonimity.

Anonymous (not verified) said:

June 08, 2012

Permalink

Sorry. This might come out as blunt. And you are all so nice and helpful. But what is the point of losing a few extra kilobytes of bandwidth with each download to pack NoScript if it is disabled by default?

It's not disabled by default. It is enabled, and configured to block plugin launches. It's a second layer of defense in case there are ways to trick your Tor Browser into running Skype, Flash, Java, Adobe stuff, etc.

(It *is* configured to allow javascript, which I assume is what's confusing you. That's not what we use it for.)

Anonymous (not verified) said:

June 08, 2012

Permalink

Thank you arma. I have been bombarding you with questions and oppinions lately. But I finally discovered there is a Tor mailing list and I'm about to join it. I went browsing through the archives and minutes before checking for your reply I discovered the answer: https://lists.torproject.org/pipermail/tor-talk/2012-May/024196.html

Stupid me. I always take the time to go through all the tabs of the NoScript config once I install it on a new browser. Heck, I don't recall well, but it's probably Tor the reason why I use NoScript today. But, can you believe it? It never clicked that blocking scripts based on the name of the server hosting the file it's ONLY the tip of the iceberg. I read about all the other wonderful features, I set them up, yet the daily use of the button to allow and block scripts on newly found sites totally erased the rest of the functionality.

I'm an idiot. But, maybe there are a few others like me. Would it be too much effort to put a notice somewhere along the TBB pages to point this out in clear terms?

Now I'm off to put back NoScript.

What kind of a question is that?! Geeze.

Please, use a bit of decorum. And I would suggest the ignorant one (that's NOT the same as "stupid") here isn't among the Tor devs, or most Tor aficionados, it's the person that doesn't have a clue about the current state of a Tor forum ... note: YOU need only to look in the mirror.

A mailing list is just as helpful. And it takes a lot less overhead. Just head over to lists.torproject.org I too was unable to find it at first. There you have quite a few options.

I doubt very much stupid people could do what they do... If I can remember correctly it's because existing forum software is not very good privacy/anonymity wise, but I could be mistaken.

Anonymous (not verified) said:

June 10, 2012

Permalink

What happened to Polipo, I had to pull it and the config file from the previous install file. Is anything else missing we should know about?

Anonymous (not verified) said:

June 11, 2012

Permalink

Howdee
Im the anon from June 8th, 2012 that had the problem with the annoying torbutton alert
I found how to remove it, just add this line to the prefs.js :

user_pref("extensions.torbutton.prompt_torbrowser", false);

and it does the job !

Hi. you said that you just add this line to the prefs.js: user_pref("extensions.torbutton.prompt_torbrowser", false)
That sounds a good way to remove it. I had the same problem with the torbutton alert. The only problem is that I can't find the prefs.js. Where is this file located? Tkx a million.

Anonymous (not verified) said:

June 12, 2012

Permalink

Does anyone else have problems with savings files to the hard disk with "Save Link As" ???

When you click on a link in Tor Browser that leads to a file, Tor Browser warns you:

"An External Application is Needed to Handle: XXXX. External applications are NOT Tor safe by default and can unmask you. IF THIS FILE IS UNTRUSTED, YOU SHOULD EITHER SAVE IT OR VIEW IT OFFLINE WHILE IN A VM..."

Ironically when I then Right-Click on the link and choose "Save link as" (to save the file to my computer) it shows the exact same message as above.

Bug?

Anonymous (not verified) said:

June 13, 2012

Permalink

what does this message mean, pls, and what if anything should i do about it? i think it happens when i shut off my WiFi to go offline if i want to read a .pdf or open something else that i've downloaded:

Jun 11 22:53:34.776 [Warning] Weighted bandwidth is 0.000000 in node selection for rule weight as guard

sometimes i've seen it on single lines interspersed with Vidalia's regular 'working lines', and occasionally there's a chunk of it one after the other repeating for 10-15 lines in the Log ... is there something critical happening, or is turning my WiFi back on sufficient? i didn't catch it until 2hrs after it happened, so am not sure if shutting off Airport/WiFi is related to this message ...

also: at Shutdown, i have Vidalia 'Stop Tor', then 'Exit' ... should i do the same before putting computer into Sleep, or if i walk away from computer and get hung up and computer goes to sleep on its own?
thankyou kindly

PS: the sig-confirm file for the newest of the new TBBs leads to a 404 / 'URL /dist/torbrowser/osx/TorBrowser-2.2.37-1-osx-x86_64-en-US.zip.asc was not found on this server'

Anonymous (not verified) said:

June 22, 2012

Permalink

Hi. Appreciate what you are all doing, always appreciate open code.

But really can't understand the new settings of
-Torbutton is now always enabled
and
-Disable button and hotkeys to prevent accidental toggle

So upon each browser startup now, tor proxy is automatically enabled and there is no visible button to disable it? I have to go into browser add-on option just to get around this?? Seems an inconvenient combination of settings personally. Just wondering why this way now.