Tor Messenger 0.1.0b6 is released

by sukhbir | April 6, 2016

We are pleased to announce another public beta release of Tor Messenger. This release features important security updates to Instantbird. All users are highly encouraged to upgrade.

Mozilla's ESR cycle

This release of Tor Messenger is the first release based on Mozilla's ESR cycle. As with Tor Browser, all future releases will continue to pair with this cycle.

Secure Updater

We are well aware of the current pain in upgrading Tor Messenger and are actively working towards porting Tor Browser's updater patches (#14388) so that keeping Tor Messenger up to date is as seamless and easy as possible. We continue to apologize for the inconvenience.

Before upgrading, back up your OTR keys

Before upgrading to the new release, you will need to back up your OTR keys or simply generate new ones. Please see the following steps to back them up.

Downloads

Please note that Tor Messenger is still in beta. The purpose of this release is to help test the application and provide feedback. At-risk users should not depend on it for their privacy and safety.

sha256sums.txt
sha256sums.txt.asc

The sha256sums.txt file containing hashes of the bundles is signed with the key 0x6887935AB297B391 (fingerprint: 3A0B 3D84 3708 9613 6B84 5E82 6887 935A B297 B391).

Changelog

Here is the complete changelog since v0.1.0b5:

Tor Messenger 0.1.0b6 -- April 06, 2016

All Platforms
- Use the THUNDERBIRD_45_0b3_RELEASE tag on mozilla-esr45
- Use the THUNDERBIRD_45_0b3_RELEASE tag on comm-esr45
- Bug 18533: Disable sending fonts or colors as part of messages
- ctypes-otr
  - GH 68: Don't close notification bar until verification succeeds (patch by Elias Rohrer)
  - GH 71: Improve verifying from the fingerprint manager (patch by Vu Quoc Huy)
  - GH 72: Generate keys automatically after account creation (patch by Vu Quoc Huy)

Comments

Please note that the comment area below has been archived.

Little bit off-topic but

Little bit off-topic but OpenSSL:

An Analysis of OpenSSL's Random Number Generator
https://eprint.iacr.org/2016/367
In this work we demonstrate various weaknesses of the random number generator (RNG) in the OpenSSL cryptographic library.

Way off topic.

Way off topic. https://trac.torproject.org/projects/tor/ticket/17799 will fix this, though I owe it another round of review.

why would i need to install

why would i need to install this on my macbook pro if there is nothing i can't use this site for

Following the instructions

Following the instructions for migrating my key and I've run into a problem:

On the old version for OS X, the filepath Tor Messenger.app/Contents/TorMessenger/Data/Browser/[profile].default/
worked, but now Tor Messenger.app/Contents and Tor Messenger.app/TorMessenger/ are both folders within the original directory, so I can't follow the original filepath—it doesn't exist any longer, apparently.

Please advise.

I posted an earlier comment

I posted an earlier comment asking for help & filepaths, but I figured it out. You have to open Tor Messenger first, and connect with your acct (I only tried it with Jabber/XMPP), then close it and you can move your otr.fingerprints and otr.private_key files back in.

Thank you very much for TOR

Thank you very much for TOR !!!!!

Just a quick question (and I

Just a quick question (and I think it would be worth to include that info with such release announcements, at least during this alpha/beta phase): can it be used along Tor Browser without conflicts?

Yes.

So you release a software to

So you release a software to the public and say you can use instant messengers one of them being Facebook, as you guys said in the description for this software and now, its NOT SHOWING the Facebook protocol, it shows everything else but not the Facebook protocol like you said! Nothing like getting my hopes up to talk to all of my FB contacts more securely, Not.

From the blog post on 9

From the blog post on 9 March 2016 announcing the last release:
" Facebook support dropped

"Facebook has long officially deprecated their XMPP gateway, and it doesn't appear to work anymore. We had multiple reports from users about this issue and decided that it was best to remove support for Facebook from Tor Messenger.

"We hear that an implementation of the new mqtt based protocol is in the works, so we hope to restore this functionality in the future."
https://blog.torproject.org/blog/tor-messenger-010b5-released
"

This sounds like it's more facebook's fault than the Tor Messenger devs.

ok i need help i am using

ok i need help i am using android and cant figure out how to get to the wiki