设为首页收藏本站

LUPA开源社区

 找回密码
 注册
文章 帖子 博客
LUPA开源社区 首页 业界资讯 软件追踪 查看内容

Tor Browser 4.0发布,转向Firefox 31-ESR

2014-10-17 15:33| 发布者: joejoe0332| 查看: 1856| 评论: 0|原作者: oschina|来自: oschina

摘要:   Tor Browser 4.0 发布,此版本现已提供在 Tor Browser Project page 和 distribution directory。  Tor Browser 4.0 主要包括 Firefox 重要的安全更新,因为 POODLE 攻击,禁用了 SSLv3。  跟 3.6 系列相比 ...

  Tor Browser 4.0 发布,此版本现已提供在 Tor Browser Project pagedistribution directory


  Tor Browser 4.0 主要包括 Firefox 重要的安全更新,因为 POODLE 攻击,禁用了 SSLv3。


  跟 3.6 系列相比,最主要的改进是转向了 Firefox 31-ESR。


  此版本加入了 3 个版本的 meek 插件运输。事实上, meek-amazon 和 meek-azure 都能在中国很好的运行,不需要获取 bridge 地址。(See tickets #12428, #12778, and #12857 for details)


  MacOS 用户请注意:Tor Browser 打算忽略 32 位的 OS X 绑定。如果你在使用 32 位 的 OSX 10.6,请尽快升级你的操作系统。


自 4.0-alpha-3 以来的改进内容:

  • All Platforms

    • Translation updates only

    • Bug 13378: Prevent addon reordering in toolbars on first-run.

    • Bug 10751: Adapt Torbutton to ESR31's Australis UI.

    • Bug 13138: ESR31-about:tor shows "Tor is not working"

    • Bug 12947: Adapt session storage blocker to ESR 31.

    • Bug 10716: Take care of drag/drop events in ESR 31.

    • Bug 13366: Fix cert exemption dialog when disk storage is enabled.

    • Update Firefox to 31.2.0esr

    • Update Torbutton to 1.7.0.1

    • Update Tor Launcher to 0.2.7.0.1

    • Udate fteproxy to 0.2.19

    • Update NoScript to 2.6.9.1

    • Bug 13027: Spoof window.navigator useragent values in JS WebWorker threads

    • Bug 13016: Hide CSS -moz-osx-font-smoothing values.

    • Bug 13356: Meek and other symlinks missing after complete update.

    • Bug 13025: Spoof screen orientation to landscape-primary.

    • Bug 13346: Disable Firefox "slow to start" warnings and recordkeeping.

    • Bug 13318: Minimize number of buttons on the browser toolbar.

    • Bug 10715: Enable WebGL on Windows (still click-to-play via NoScript)

    • Bug 13023: Disable the gamepad API.

    • Bug 13021: Prompt before allowing Canvas isPointIn*() calls.

    • Bug 12460: Several cross-compilation and gitian fixes (see child tickets)

    • Bug 13186: Disable DOM Performance timers

    • Bug 13028: Defense-in-depth checks for OCSP/Cert validation proxy usage

    • Bug 13416: Defend against new SSLv3 attack (poodle).


  与 3.6.6 相比,不同之处:

  • All Platforms

    • Bug 11405: Remove firewall prompt from wizard.

    • Bug 12895: Mention @riseup.net as a valid bridge request email address

    • Bug 12444: Provide feedback when “Copy Tor Log” is clicked.

    • Bug 11199: Improve error messages if Tor exits unexpectedly

    • Bug 12451: Add option to hide TBB's logo

    • Bug 11193: Change "Tor Browser Bundle" to "Tor Browser"

    • Bug 11471: Ensure text fits the initial configuration dialog

    • Bug 9516: Send Tor Launcher log messages to Browser Console

    • Bug 13378: Prevent addon reordering in toolbars on first-run.

    • Bug 10751: Adapt Torbutton to ESR31's Australis UI.

    • Bug 13138: ESR31-about:tor shows "Tor is not working"

    • Bug 12947: Adapt session storage blocker to ESR 31.

    • Bug 10716: Take care of drag/drop events in ESR 31.

    • Bug 13366: Fix cert exemption dialog when disk storage is enabled.

    • Update Firefox to 31.2.0esr

    • Udate fteproxy to 0.2.19

    • Update Tor to 0.2.5.8-rc (from 0.2.4.24)

    • Update NoScript to 2.6.9.1

    • Update Torbutton to 1.7.0.1 (from 1.6.12.3)

    • Update Tor Launcher to 0.2.7.0.1 (from 0.2.5.6)

    • Bug 13027: Spoof window.navigator useragent values in JS WebWorker threads

    • Bug 13016: Hide CSS -moz-osx-font-smoothing values.

    • Bug 13356: Meek and other symlinks missing after complete update.

    • Bug 13025: Spoof screen orientation to landscape-primary.

    • Bug 13346: Disable Firefox "slow to start" warnings and recordkeeping.

    • Bug 13318: Minimize number of buttons on the browser toolbar.

    • Bug 10715: Enable WebGL on Windows (still click-to-play via NoScript)

    • Bug 13023: Disable the gamepad API.

    • Bug 13021: Prompt before allowing Canvas isPointIn*() calls.

    • Bug 12460: Several cross-compilation and gitian fixes (see child tickets)

    • Bug 13186: Disable DOM Performance timers

    • Bug 13028: Defense-in-depth checks for OCSP/Cert validation proxy usage

    • Bug 4234: Automatic Update support (off by default)

    • Bug 11641: Reorganize bundle directory structure to mimic Firefox

    • Bug 10819: Create a preference to enable/disable third party isolation

    • Bug 13416: Defend against new SSLv3 attack (poodle).

  • Windows:

    • Bug 10065: Enable DEP, ASLR, and SSP hardening options

  • Linux:

    • Bug 13031: Add full RELRO hardening protection.

    • Bug 10178: Make it easier to set an alternate Tor control port and password

    • Bug 11102: Set Window Class to "Tor Browser" to aid in Desktop navigation

    • Bug 12249: Don't create PT debug files anymore


  Tor Browser Bundle 是一个基于 Firefox ESR (Firefox with extended support) 的 Web 浏览器,默认配置通过 Tor 和 Vidalia 实现了个人隐私保护和匿名。该版本包括三个扩展:Torbutton, NoScript and HTTPS-Everywhere.


酷毙

雷人

鲜花

鸡蛋

漂亮
  • 快毕业了,没工作经验,
    找份工作好难啊?
    赶紧去人才芯片公司磨练吧!!

最新评论

关于LUPA|人才芯片工程|人才招聘|LUPA认证|LUPA教育|LUPA开源社区 ( 浙B2-20090187 浙公网安备 33010602006705号   

返回顶部