😱 HOP INTO THIS AWESOME DEAL!
69% OFF! SAVE BIG NOW!
Days
Days
Hours
Hrs
Minutes
Mins
Seconds
secs
69% OFF! SAVE BIG NOW!
Jump to content

Invite Scene - #1 to Buy, Sell, Trade or Find Free Torrent Invites

#1 TorrentInvites Community. Buy, Sell, Trade or Find Free Torrent Invites for Every Private Torrent Trackers. HDB, BTN, AOM, DB9, PTP, RED, MTV, EXIGO, FL, IPT, TVBZ, AB, BIB, TIK, EMP, FSC, GGN, KG, MTTP, TL, TTG, 32P, AHD, CHD, CG, OPS, TT, WIHD, BHD, U2 etc.

LOOKING FOR HIGH QUALITY SEEDBOX? EVOSEEDBOX.COM PROVIDES YOU BLAZING FAST & HIGH END SEEDBOXES | STARTING AT $5.00/MONTH!

Tor Browser 4.0 is released

amazinghorse

By amazinghorse
in Security Hive

 Share

Recommended Posts

amazinghorse Newbie

amazinghorse

Posted
Posted

Fx7dGBp.jpg

The first release of the 4.0 series is available from the Tor Browser Project page and also from our distribution directory.

This release features important security updates to Firefox. Additionally, due to the POODLE attack, we have also disabled SSLv3 in this release.

 

The primary user-facing change since the 3.6 series is the transition to Firefox 31-ESR.

More importantly for censored users who were using 3.6, the 4.0 series also features the addition of three versions of the meek pluggable transport.

In fact, we believe that both meek-amazon and meek-azure will work in China today, without the need to obtain bridge addresses. Note though that we still need to improve meek's performance to match other transports, though. so adjust your expectations accordingly. See tickets #12428, #12778, and #12857 for details.

 

This release also features an in-browser updater, and a completely reorganized bundle directory structure to make this updater possible. This means that simply extracting a 4.0 Tor Browser over a 3.6.6 Tor Browser will not work. Please also be aware that the security of the updater depends on the specific CA that issued the www.torproject.org HTTPS certificate (Digicert), and so it still must be activated manually through the Help ("?") "about browser" menu option. Very soon, we will support both strong HTTPS site-specific certificate pinning (ticket #11955) and update package signatures (ticket #13379). Until then, we do not recommend using this updater if you need stronger security and normally verify GPG signatures.

 

There are also a couple behavioral changes relating to NoScript since 3.6. In particular, by default it now enforces script enable/disable for all sub-elements of a page, so you only need to enable scripts once for a page to work, rather than enabling many sub-scripts. This will hopefully make it possible for more people to use the "High Security" setting in our upcoming Security Slider, which will have Javascript disabled globally via NoScript by default. While we do not recommend per-element whitelisting due to fingerprinting, users who insist on keeping this functionality may wish to check out RequestPolicy.

 

Note to MacOS users: We intend to deprecate 32bit OSX bundles very soon. If you are still using 32bit OSX 10.6, you soon will need to either update your OS to a later version, or begin using the Tails live operating system.

 

 

Here is the changelog since 4.0-alpha-3:

  • All Platforms
    • Update Firefox to 31.2.0esr
    • Update Torbutton to 1.7.0.1
      • Bug 13378: Prevent addon reordering in toolbars on first-run.
      • Bug 10751: Adapt Torbutton to ESR31's Australis UI.
      • Bug 13138: ESR31-about:tor shows "Tor is not working"
      • Bug 12947: Adapt session storage blocker to ESR 31.
      • Bug 10716: Take care of drag/drop events in ESR 31.
      • Bug 13366: Fix cert exemption dialog when disk storage is enabled.
    • Update Tor Launcher to 0.2.7.0.1
      • Translation updates only
    • Udate fteproxy to 0.2.19
    • Update NoScript to 2.6.9.1
    • Bug 13027: Spoof window.navigator useragent values in JS WebWorker threads
    • Bug 13016: Hide CSS -moz-osx-font-smoothing values.
    • Bug 13356: Meek and other symlinks missing after complete update.
    • Bug 13025: Spoof screen orientation to landscape-primary.
    • Bug 13346: Disable Firefox "slow to start" warnings and recordkeeping.
    • Bug 13318: Minimize number of buttons on the browser toolbar.
    • Bug 10715: Enable WebGL on Windows (still click-to-play via NoScript)
    • Bug 13023: Disable the gamepad API.
    • Bug 13021: Prompt before allowing Canvas isPointIn*() calls.
    • Bug 12460: Several cross-compilation and gitian fixes (see child tickets)
    • Bug 13186: Disable DOM Performance timers
    • Bug 13028: Defense-in-depth checks for OCSP/Cert validation proxy usage
    • Bug 13416: Defend against new SSLv3 attack (poodle).

Here is the list of all changes in the 4.0 series since 3.6.6:

  • All Platforms
    • Update Firefox to 31.2.0esr
    • Udate fteproxy to 0.2.19
    • Update Tor to 0.2.5.8-rc (from 0.2.4.24)
    • Update NoScript to 2.6.9.1
    • Update Torbutton to 1.7.0.1 (from 1.6.12.3)
      • Bug 13378: Prevent addon reordering in toolbars on first-run.
      • Bug 10751: Adapt Torbutton to ESR31's Australis UI.
      • Bug 13138: ESR31-about:tor shows "Tor is not working"
      • Bug 12947: Adapt session storage blocker to ESR 31.
      • Bug 10716: Take care of drag/drop events in ESR 31.
      • Bug 13366: Fix cert exemption dialog when disk storage is enabled.
    • Update Tor Launcher to 0.2.7.0.1 (from 0.2.5.6)
      • Bug 11405: Remove firewall prompt from wizard.
      • Bug 12895: Mention @riseup.net as a valid bridge request email address
      • Bug 12444: Provide feedback when “Copy Tor Log†is clicked.
      • Bug 11199: Improve error messages if Tor exits unexpectedly
      • Bug 12451: Add option to hide TBB's logo
      • Bug 11193: Change "Tor Browser Bundle" to "Tor Browser"
      • Bug 11471: Ensure text fits the initial configuration dialog
      • Bug 9516: Send Tor Launcher log messages to Browser Console
    • Bug 13027: Spoof window.navigator useragent values in JS WebWorker threads
    • Bug 13016: Hide CSS -moz-osx-font-smoothing values.
    • Bug 13356: Meek and other symlinks missing after complete update.
    • Bug 13025: Spoof screen orientation to landscape-primary.
    • Bug 13346: Disable Firefox "slow to start" warnings and recordkeeping.
    • Bug 13318: Minimize number of buttons on the browser toolbar.
    • Bug 10715: Enable WebGL on Windows (still click-to-play via NoScript)
    • Bug 13023: Disable the gamepad API.
    • Bug 13021: Prompt before allowing Canvas isPointIn*() calls.
    • Bug 12460: Several cross-compilation and gitian fixes (see child tickets)
    • Bug 13186: Disable DOM Performance timers
    • Bug 13028: Defense-in-depth checks for OCSP/Cert validation proxy usage
    • Bug 4234: Automatic Update support (off by default)
    • Bug 11641: Reorganize bundle directory structure to mimic Firefox
    • Bug 10819: Create a preference to enable/disable third party isolation
    • Bug 13416: Defend against new SSLv3 attack (poodle).
  • Windows:
    • Bug 10065: Enable DEP, ASLR, and SSP hardening options
  • Linux:
    • Bug 13031: Add full RELRO hardening protection.
    • Bug 10178: Make it easier to set an alternate Tor control port and password
    • Bug 11102: Set Window Class to "Tor Browser" to aid in Desktop navigation
    • Bug 12249: Don't create PT debug files anymore

The list of frequently encountered known issues is also available in our bug tracker.

 

https://blog.torproject.org/blog/tor-browser-40-released

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
 Share
Go to topic listing

  • Check out what our members are saying

    Amon123
    10/10 services. Very fast will trade again
    renatoibes
    Very informative and pleasant demeanour. Response time was impressive. Certainly lives up to his legacy as well hassle-free transaction all around.
    linrase
    I was nervous spending so much money on an invite at first and there has been some delay due to how hard the access to empornium.me is. But I remained calm and waited for the ve…
    zte3jl
    I highly recommend doing business with this user. He was very quick to answer and deliver when other users couldn't. 10/10 would do business again.
    DirtyW
    fast and good service i rly recomend this one
    test1231
    Great Service, very prompt reply and solving queries. 
    ravens2000
    I would highly recommend anyone looking to find torrents to use this site  
    PastNoon
    Hi everyone, I am presenting a thought after purchasing an Invite from this site.  Inviter was super instantaneous to get back to me after I had questioned if he had any avai…
    Ōru Maito
    Wanted an invite and got a fast and nice price from Inviter. Everything went smoothly and I'm very happy with my purchase. I'll definitely make my next purchase with him. 100% r…
    JunkyRoss
    Awsome service i love it thanks alot
    DMcanelo
    Definitely, you can trust him. Fast and efficient. 
    YeeNaw
    A remarkable man, a pleasing seller, super patient, explained everything to me, discounted me, each and everything. I enjoyed the purchase with him, I received everything immedia…
    GeraldReite
    Speedy and responsive, excellent rates, have ordered my invites and have not had any issues! 10/10 recommend!
    Escanor1234
    great service
    Zheltyy
    Got 2 accounts for a good price. Everything worked after the first try. Thank you @Inviter. Good job. Best regards, Zheltyy  
    zeaqh
    Everything went well, serious , very fast and pleasant seller . i recommend him all days  
    cnstradu
    Fairness, speed, professionalism, reasonable price and especially trustworthy. I bought it from you and I will do it again. Thank you.
    kenpark
    Prefect and always a great communicator from start to finish will use again A+ for service and support 
    Skavv
    First exchange I made, reasonable price, convenient payment method, simple and instant reactivity, no problem at all.
    letus101
    I recently purchased an invite to LF from Inviter, and it was an outstanding experience! The process was smooth, quick, and hassle-free. Inviter provided excellent customer servi…
    Shalimar122
    Extremely professional seller. No fuss deal. Very friendly and his after-sales service and advice is truly unparalleled. Buy with full confidence. And even if he does take a few…
    messiah4you
    Very happy and satisfied with this site. Bough a legit invite to a very hard to get tracker. The process all in all took about 24 hours but that because the process is very secu…
    lizwan
    Don't know how he does it, but @Inviter delivers! Had a smooth transaction, no hiccups!
    linlinkin
    very communicative, fast responses!
    Silverstacy
    Excellent - Very reliable and honest trade - Quick service was provided - much appreciated. Thank you @Inviter for a great service.
    meJedi
    Inviter was very punctual in replying to all of my questionings and supervised me through the purchasing process. Everything worked just as he agreed, and there were no issues wi…
    nathan8174
    Ordered 2 torrent invites and the support shown and the speed at which it was done was fantastic. Really happy I found this place. When I need more torrents I know where to come.…
    Serrak
    It's the first time I ever bought an invite for a private tracker, but after seeing as how certain private trackers are impossible to get into unless you know somehow or have so…

  • Our picks

    View All
×
×
  • Create New...