Re: [tor-bugs] #31160 [Applications/Tor Browser]: Turn off automatic updates by default for installed add-ons

[Tor Bug Tracker & Wiki]

#31160: Turn off automatic updates by default for installed add-ons
--+--
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  enhancement   | Status:  closed
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:  wontfix
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by gk):

 Replying to [comment:4 cypherpunks]:
 > I mean it's not even breaking any functionality, it would just be
 providing a safe default for people who install extensions. Since those
 extensions can't be considered security critical,

 I am not sure what you mean by that but I think it is fair to assume that
 any extension added to the browser is a risk both security- and privacy-
 wise as it is running priviledged code and has the availability to do way
 more harm than a website, especially in the Tor Browser context. That is
 the reason why we don't recommend installing additional extensions to
 begin with. And disabling the update mechanism without any process in
 place to check for potential security issues of any installed extension
 (yes, there are thousands!) does not seem to be the responsible thing to
 do.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #31164 [Circumvention]: Set up default bridge at Karlstad University

[Tor Bug Tracker & Wiki]

#31164: Set up default bridge at Karlstad University
---+-
 Reporter:  phw|  Owner:  phw
 Type:  project| Status:  assigned
 Priority:  Medium |  Milestone:
Component:  Circumvention  |Version:
 Severity:  Normal |   Keywords:  tbb-bridges
Actual Points: |  Parent ID:
   Points:  0.5|   Reviewer:
  Sponsor: |
---+-
 We're running low on
 [https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/DefaultBridges
 default bridges].  Tobias, a professor at Karlstad University, showed
 interest in running a default bridge at his university. Let's use this
 ticket to coordinate this effort and eventually get the bridge into tor-
 browser-launcher.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #31163 [Core Tor/Tor]: A flag to use hostname than IP as relay

[Tor Bug Tracker & Wiki]

#31163: A flag to use hostname than IP as relay
--+--
 Reporter:  cyberbot  |  Owner:  (none)
 Type:  enhancement   | Status:  new
 Priority:  Medium|  Component:  Core Tor/Tor
  Version:  Tor: unspecified  |   Severity:  Normal
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
 Though we can add a hostname in the `Address` field in torrc, it finally
 resolves the name time to time and pushes the descriptor.
 However, that hurts the dynamic IP relays. If tor could work on pure
 hostnames (yes, that'd cause a resolving overhead on every connection)
 then a whole range of dynamic IP relays could come into the picture which
 might strengthen the Tor network.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31160 [Applications/Tor Browser]: Turn off automatic updates by default for installed add-ons

[Tor Bug Tracker & Wiki]

#31160: Turn off automatic updates by default for installed add-ons
--+--
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  enhancement   | Status:  closed
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:  wontfix
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by cypherpunks):

 I mean it's not even breaking any functionality, it would just be
 providing a safe default for people who install extensions. Since those
 extensions can't be considered security critical, there's no reason to be
 checking for their updates and sending a list of installed extensions to
 Mozilla is equal to telling users, "I told you not to install anything,
 your fault" when that could be easily fixed. Fortunately I know how to
 disable it, too bad for those that don't, they should have known better
 not to install anything

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31160 [Applications/Tor Browser]: Turn off automatic updates by default for installed add-ons

[Tor Bug Tracker & Wiki]

#31160: Turn off automatic updates by default for installed add-ons
--+--
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  enhancement   | Status:  closed
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:  wontfix
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by cypherpunks):

 Why not? Is Mozilla/NSA considered a trusted organization to take good
 care of this data?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31142 [Applications/Tor Browser]: One tab crashed and transformed the other tab to about:newtab with no history!

[Tor Bug Tracker & Wiki]

#31142: One tab crashed and transformed the other tab to about:newtab with no
history!
--+---
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-crash |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---

Comment (by gk):

 Replying to [comment:3 cypherpunks]:
 > Hah, indeed, that's reproducible by opening a lot of tabs with Trac
 tickets and killing child processes one by one on Windows 7.

 What is lots here? 5? 10? And how are you killing those processes?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31140 [Applications/Tor Browser]: Tor Browser for Android 60.8.0 crash on aarch64

[Tor Bug Tracker & Wiki]

#31140: Tor Browser for Android 60.8.0 crash on aarch64
--+--
 Reporter:  j3tracey  |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  High  |  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-mobile, tbb-crash |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by cypherpunks):

 Where did you find TBA in https://search.f-droid.org/?q=tor=en?

 Are you sure it's `tor` and not `Gecko`?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31141 [Applications/Tor Browser]: font.system.whitelist value typo?

[Tor Bug Tracker & Wiki]

#31141: font.system.whitelist value typo?
-+-
 Reporter:  Thorin   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:  new
 Priority:  Medium   |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-fingerprinting-fonts,|  Actual Points:
  TorBrowserTeam201907   |
Parent ID:  #18097   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by cypherpunks):

 https://trac.torproject.org/projects/tor/ticket/23317#comment:6

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31149 [Core Tor/Tor]: Tor is stuck at "Loading Network Status"

[Tor Bug Tracker & Wiki]

#31149: Tor is stuck at "Loading Network Status"
--+
 Reporter:  bornadx   |  Owner:  (none)
 Type:  defect| Status:  new
 Priority:  High  |  Milestone:  Tor: 0.4.2.x-final
Component:  Core Tor/Tor  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+
Changes (by gk):

 * cc: gk (added)


Comment:

 For a bit more context see:
 https://blog.torproject.org/comment/283049#comment-283049 where the same
 problem got reported.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31140 [Applications/Tor Browser]: Tor Browser for Android 60.8.0 crash on aarch64

[Tor Bug Tracker & Wiki]

#31140: Tor Browser for Android 60.8.0 crash on aarch64
--+--
 Reporter:  j3tracey  |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  High  |  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-mobile, tbb-crash |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by sisbell):

 I have a Pixel3a (Android 10) that I'm testing with. Its armv8 and does
 not crash.

 As gk mentioned, the same 32 bit binary is in both 32 bit and 64 bit
 directories (this is something we do need to solve). However, the device
 should be able to fallback to 32 bit if 64 bit doesn't load but it sounds
 like its not doing that. This is likely going to be a Android version
 and/or device issue.

 Which device is this failing on? That may give us a better starting point
 to see if there is a workaround.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31142 [Applications/Tor Browser]: One tab crashed and transformed the other tab to about:newtab with no history!

[Tor Bug Tracker & Wiki]

#31142: One tab crashed and transformed the other tab to about:newtab with no
history!
--+---
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-crash |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---

Comment (by cypherpunks):

 Hah, indeed, that's reproducible by opening a lot of tabs with Trac
 tickets and killing child processes one by one on Windows 7.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30126 [Applications/Tor Browser]: Make Tor Browser on macOS compatible with Apple's notarization

[Tor Bug Tracker & Wiki]

#30126: Make Tor Browser on macOS compatible with Apple's notarization
+--
 Reporter:  gk  |  Owner:  tbb-team
 Type:  task| Status:  new
 Priority:  Very High   |  Milestone:
Component:  Applications/Tor Browser|Version:
 Severity:  Normal  | Resolution:
 Keywords:  tbb-security, TorBrowserTeam201907  |  Actual Points:
Parent ID:  | Points:
 Reviewer:  |Sponsor:
+--

Comment (by gk):

 Replying to [comment:8 tom]:
 > If you have questions; :haik spent a considerable time investigating and
 deploying this for Mozilla.

 Good idea! mcs/brade could you follow up on that with a particular focus
 on our signing requirements, so we get the remaining questions we have
 answered and have a clearer picture on our constraints.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31155 [Applications/Tor Browser]: Privacy with TOR

[Tor Bug Tracker & Wiki]

#31155: Privacy with TOR
--+---
 Reporter:  Webster   |  Owner:  tbb-team
 Type:  defect| Status:  closed
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:  not a bug
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---
Changes (by gk):

 * status:  new => closed
 * resolution:   => not a bug


Comment:

 Sounds like WordPress changed something on their end? Maybe they count Tor
 users not as unique users anymore? Hard to say. AS it stands I don't see
 this being a Tor Browser bug. If you disagree, please provide more
 information so we can investigate. Like, what makes you believe this is a
 Tor Browser issue? On which operating system does that happen? (and
 anything else that could help us here investigating)

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #29955 [Applications/Tor Browser]: Final Orfox update

[Tor Bug Tracker & Wiki]

#29955: Final Orfox update
-+-
 Reporter:  sysrqb   |  Owner:  tbb-
 |  team
 Type:  task | Status:  new
 Priority:  Medium   |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  ux-team, tbb-mobile, tbb-8.5,|  Actual Points:
  TorBrowserTeam201907   |
Parent ID:  #27399   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * cc: emmapeel (added)


Comment:

 Replying to [comment:35 n8fr8]:
 > I've implemented the OrfoxRIP migration app and pushed it here as the
 default branch:
 > https://github.com/guardianproject/Orfox
 >
 > The GPlay click opens Google Play to the TBA listing.
 >
 > The Fdroid link opens to the guardianproject repo.
 >
 > The APK link opens to the torproject.org download link/page.
 >
 > We just need to localize the few strings and we are ready to go!

 Nice! emmapeel: how could we move forward with that? Or is this handled by
 the Guardian Project, n8fr8?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31142 [Applications/Tor Browser]: One tab crashed and transformed the other tab to about:newtab with no history!

[Tor Bug Tracker & Wiki]

#31142: One tab crashed and transformed the other tab to about:newtab with no
history!
--+---
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-crash |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---
Changes (by gk):

 * status:  new => needs_information


Comment:

 Is that reproducible? If so, how? On which platform and version?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31142 [Applications/Tor Browser]: One tab crashed and transformed the other tab to about:newtab with no history!

[Tor Bug Tracker & Wiki]

#31142: One tab crashed and transformed the other tab to about:newtab with no
history!
--+--
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-crash |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by gk):

 * keywords:   => tbb-crash


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31141 [Applications/Tor Browser]: font.system.whitelist value typo?

[Tor Bug Tracker & Wiki]

#31141: font.system.whitelist value typo?
-+-
 Reporter:  Thorin   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:  new
 Priority:  Medium   |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-fingerprinting-fonts,|  Actual Points:
  TorBrowserTeam201907   |
Parent ID:  #18097   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * keywords:  tbb-fingerprinting-fonts => tbb-fingerprinting-fonts,
 TorBrowserTeam201907
 * parent:   => #18097


Comment:

 Hm, I guess you are right. Nice catch! Let this get fixed for the next
 release.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31140 [Applications/Tor Browser]: Tor Browser for Android 60.8.0 crash on aarch64

[Tor Bug Tracker & Wiki]

#31140: Tor Browser for Android 60.8.0 crash on aarch64
--+--
 Reporter:  j3tracey  |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  High  |  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-mobile, tbb-crash |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by gk):

 IIRC there is no real 64bit tor available that could be part of the
 problem.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31140 [Applications/Tor Browser]: Tor Browser for Android 60.8.0 crash on aarch64 (was: Tor Browser for Android 60.8.0 crash)

[Tor Bug Tracker & Wiki]

#31140: Tor Browser for Android 60.8.0 crash on aarch64
--+--
 Reporter:  j3tracey  |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  High  |  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-mobile, tbb-crash |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by gk):

 * keywords:  tbb-mobile => tbb-mobile, tbb-crash
 * priority:  Medium => High
 * cc: sisbell (added)


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31140 [Applications/Tor Browser]: Tor Browser for Android 60.8.0 crash

[Tor Bug Tracker & Wiki]

#31140: Tor Browser for Android 60.8.0 crash
--+--
 Reporter:  j3tracey  |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-mobile|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by gk):

 sisbell, can you take a look?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #28708 [Applications/Tor Browser]: TBA 8.5a5 - about:tor is not the default homepage after upgrade

[Tor Bug Tracker & Wiki]

#28708: TBA 8.5a5 - about:tor is not the default homepage after upgrade
-+-
 Reporter:  sysrqb   |  Owner:  tbb-
 |  team
 Type:  defect   | Status:  closed
 Priority:  Medium   |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:  fixed
 Keywords:  tbb-mobile, TBA-a3,  |  Actual Points:
  TorBrowserTeam201902   |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
 |  Sponsor8
-+-

Comment (by gk):

 Replying to [comment:7 ilf]:
 > It is intentional to reset the homepage to about:tor on every upgrade?
 As a user, I find this highly annoying, especially since "also use for new
 tabs" is *also* reset to enabled.
 >
 > IMHO, if a user changes these values, an upgrade should not reset them.
 As TBB desktop does.

 I agree this sounds like a bug. Could you open a new ticket? This one is
 closed for months and a slightly unrelated issue. Thanks!

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31133 [Applications/Tor Browser]: Build Tor Browser with PGO enabled on Linux

[Tor Bug Tracker & Wiki]

#31133: Build Tor Browser with PGO enabled on Linux
--+--
 Reporter:  gk|  Owner:  tbb-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-rbm, tbb-performance  |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by gk):

 Replying to [comment:1 cypherpunks]:
 > That's really amazing! But what about MinGW?

 There are no PGO profiles available for Windows which should be fixed
 soon. I guess we could then think about using PGO there as well.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31160 [Applications/Tor Browser]: Turn off automatic updates by default for installed add-ons

[Tor Bug Tracker & Wiki]

#31160: Turn off automatic updates by default for installed add-ons
--+--
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  enhancement   | Status:  closed
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:  wontfix
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by gk):

 * status:  new => closed
 * resolution:   => wontfix


Comment:

 Yes, we plan to disable auto-updating from the extensions *we ship* and
 that still require external updates. However, we *won't* do that for
 extensions the user installs themselves.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31152 [Applications/Tor Browser]: Disqus broken again

[Tor Bug Tracker & Wiki]

#31152: Disqus broken again
--+
 Reporter:  mwolfe|  Owner:  tbb-team
 Type:  defect| Status:  closed
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:  worksforme
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+
Changes (by gk):

 * status:  new => closed
 * resolution:   => worksforme


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31158 [Applications/Tor Browser]: #31152 new defect Cannot make comments on Disqus

[Tor Bug Tracker & Wiki]

#31158: #31152 new defect Cannot make comments on Disqus
--+
 Reporter:  mwolfe|  Owner:  tbb-team
 Type:  defect| Status:  closed
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:  worksforme
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+
Changes (by gk):

 * owner:  (none) => tbb-team
 * status:  new => closed
 * component:  - Select a component => Applications/Tor Browser
 * resolution:   => worksforme


Comment:

 Glad it got solved!

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31152 [Applications/Tor Browser]: Disqus broken again

[Tor Bug Tracker & Wiki]

#31152: Disqus broken again
--+--
 Reporter:  mwolfe|  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by mwolfe):

 Replying to [comment:1 cypherpunks]:
 > How to test properly:
 > 1. Delete everything.
 > 2. Make a new installation of Tor Browser Alpha.
 > 3. Test.
 > If it doesn't work, enable 3rd-party cookies, restart, test.
 > If it doesn't work, disable NoScript, restart, test.
 > If it doesn't work, remove NoScript, restart, test.
 > If it doesn't work, report here.

 The problem was that my copy of OSX 10.11.6 somehow got corrupted, and the
 way it was corrupted prevented tabs from communicating in TorBrowser 8.0
 and above, even with all cookies accepted. I could still comment in
 TorBrowser 7.5, because tabs communicate in a different way.

 After deleting TorBrower from Applications and reinstalling several times,
 I still could not comment.

 So I tried re-installing OSX, and now the tabs can communicate and I can
 comment in Disqus.

 I have no idea what actually got corrupted, the only solution was to re-
 install OSX.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31158 [- Select a component]: #31152 new defect Cannot make comments on Disqus

[Tor Bug Tracker & Wiki]

#31158: #31152 new defect Cannot make comments on Disqus
--+
 Reporter:  mwolfe|  Owner:  (none)
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  - Select a component  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+

Comment (by mwolfe):

 My copy of OSX got corrupted. The means by which TorBrowser 8.5 allows
 tabs to communicate stopped working. TorBrowser 7.5 worked, because it
 uses a different method, but the method used by TorBrower 8 is different,
 and somehow, whatever was corrupted in OSX 10.11.6 would not allow tabs to
 communicate.

 I reinstalled OSX, and now I can comment on Disqus.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #19409 [Circumvention/Snowflake]: Make a deb of snowflake and get into Debian

[Tor Bug Tracker & Wiki]

#19409: Make a deb of snowflake and get into Debian
-+
 Reporter:  adrelanos|  Owner:  (none)
 Type:  enhancement  | Status:  new
 Priority:  High |  Milestone:
Component:  Circumvention/Snowflake  |Version:
 Severity:  Major| Resolution:
 Keywords:   |  Actual Points:
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+

Comment (by cypherpunks):

 Any update on this ticket?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #31162 [Applications/Tor Browser]: Web Compatibility should work and override RFP, but investigation is needed

[Tor Bug Tracker & Wiki]

#31162: Web Compatibility should work and override RFP, but investigation is 
needed
-+--
 Reporter:  cypherpunks  |  Owner:  tbb-team
 Type:  defect   | Status:  new
 Priority:  Medium   |  Component:  Applications/Tor Browser
  Version:   |   Severity:  Normal
 Keywords:  ff68-esr |  Actual Points:
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+--
 Chrome-ish future...
 https://www.ghacks.net/2019/07/15/firefox-68-aboutcompat-launches/

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #31161 [Applications/Tor Browser]: Document usage and setup of Android signing token

[Tor Bug Tracker & Wiki]

#31161: Document usage and setup of Android signing token
--+
 Reporter:  gk|  Owner:  tbb-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal|   Keywords:
  |  TorBrowserTeam201907
Actual Points:|  Parent ID:
   Points:|   Reviewer:
  Sponsor:|
--+
 We have documentation in ´tor-browser-spec` about setting up our Windows
 signing token and should do the same for the Android one.

 We could add the relevant instructions for using the whole setup on our
 actual signing machine in a separate commit within this ticket's scope.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #28860 [Core Tor/Tor]: Increased DNS failure rate when using ServerDNSResolvConfFile with tor 0.3.4.9 (as opposed to 0.3.3.x)

[Tor Bug Tracker & Wiki]

#28860: Increased DNS failure rate when using ServerDNSResolvConfFile with tor
0.3.4.9 (as opposed to 0.3.3.x)
-+-
 Reporter:  nusenu   |  Owner:  (none)
 Type:  defect   | Status:  new
 Priority:  Medium   |  Milestone:  Tor:
 |  unspecified
Component:  Core Tor/Tor |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tor-dns, regression, |  Actual Points:
  040-deferred-20190220  |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by cypherpunks):

 DNS:
 {{{
 Tor Exit Failures

 Average probability-weighted failure rate: 7.1%

 Test ran at 2019-07-12 12:14:00 UTC
 }}}
 7.1%!!!

 Top-5 bad exits are on Tor 0.4.0.5!
 {{{
 failure_rateconnection_time nicknamefingerprint as_name
 country_namecontact platformbandwidth_rate  exit_probability
 80.00.8471200466156006  renewablefreedom
 CA94704217260E7483DA88719CACD7A94C564D5CZwiebelfreunde e.V.
 Germany https://www.torservers.net/donate.html   Tor 0.4.0.5 on Linux524288000.005871822
 80.00.7933343648910522  iVPN
 A2534EF23390CAE079B1586F0FDF9CE11F556062Zwiebelfreunde e.V.
 Germany https://www.torservers.net/donate.html   Tor 0.4.0.5 on Linux524288000.0056790924
 80.00.8955183029174805  RSFPressFreedom
 A2DB293FFC5A76A718863BF1AEDBC8DFB1CB1097Zwiebelfreunde e.V.
 Germany Exit by Reporters without Borders via https://www.torservers.net/
 Tor 0.4.0.5 on Linux524288000.0055955765
 80.00.8538782596588135  AnosognosiaRedux
 D6D6B6614C9EF2DAD13AC0C94487AD8ED3B6877FZwiebelfreunde e.V.
 Germany https://www.torservers.net/donate.html   Tor 0.4.0.5 on Linux524288000.005524909
 90.01.153367280960083   HSLtor
 E43A346CB81DDF364B6FF68235AFADBA0E8692B8Zwiebelfreunde e.V.
 Germany https://www.torservers.net/donate.html   Tor 0.4.0.5 on Linux314572800.0048182346
 70.03.1669646898905435  dorrisdeebrown
 FDAED15C98CFE7A416E5676F614254F78406105CZwiebelfreunde e.V.
 Germany https://www.torservers.net/donate.html   Tor 0.4.0.5 on Linux524288000.0060902485
 }}}

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30753 [Applications/Tor Browser]: Think about using DNS over HTTPS for Tor Browser 9

[Tor Bug Tracker & Wiki]

#30753: Think about using DNS over HTTPS for Tor Browser 9
--+--
 Reporter:  gk|  Owner:  tbb-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ff68-esr  |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by cypherpunks):

 Relevant: #28955.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31160 [Applications/Tor Browser]: Turn off automatic updates by default for installed add-ons

[Tor Bug Tracker & Wiki]

#31160: Turn off automatic updates by default for installed add-ons
--+--
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  enhancement   | Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by cypherpunks):

 It looks like a duplicate of some ticket about disabling add-ons auto
 updating. But, indeed, the time has come.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30753 [Applications/Tor Browser]: Think about using DNS over HTTPS for Tor Browser 9

[Tor Bug Tracker & Wiki]

#30753: Think about using DNS over HTTPS for Tor Browser 9
--+--
 Reporter:  gk|  Owner:  tbb-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ff68-esr  |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by cypherpunks):

 Tor Browser needs DoT (DNS over Tor network), i.e. not DNS
 server/proxy/cache on Tor client as it was before, but DNS service,
 provided by the Tor network itself (like consensus, etc).
 DoH (DNS over HTTPS) might be useful for exit nodes (to exclude MiTM in
 exit<->DNS server), but as you mentioned you'd like to move the trust zone
 out of the Tor network (exit nodes), then we'd really have problems with
 trust! Moving it to SPoF like Google/CF/etc is not an option.
 DoO (DNS over Onion) which was mentioned by cpunk above has similar
 drawbacks.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #31160 [Applications/Tor Browser]: Turn off automatic updates by default for installed add-ons

[Tor Bug Tracker & Wiki]

#31160: Turn off automatic updates by default for installed add-ons
-+--
 Reporter:  cypherpunks  |  Owner:  tbb-team
 Type:  enhancement  | Status:  new
 Priority:  Medium   |  Component:  Applications/Tor Browser
  Version:   |   Severity:  Normal
 Keywords:   |  Actual Points:
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+--
 Installing add-ons for Tor Browser is not recommended, however if someone
 does install add-ons, the browser by default should not check for updates
 for those extensions, which might be used to track specific users' or
 groups' Tor Browser usage over time. If someone isn't concerned about
 that, they can manually turn on automatic updates after installing those
 extensions.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30777 [Community/Outreach]: Run a "set up new bridges" campaign

[Tor Bug Tracker & Wiki]

#30777: Run a "set up new bridges" campaign
-+
 Reporter:  phw  |  Owner:  (none)
 Type:  project  | Status:  assigned
 Priority:  High |  Milestone:
Component:  Community/Outreach   |Version:
 Severity:  Normal   | Resolution:
 Keywords:  anti-censorship-roadmap  |  Actual Points:
Parent ID:   | Points:  3
 Reviewer:   |Sponsor:  Sponsor30-must
-+

Comment (by phw):

 Replying to [comment:9 phw]:
 > Replying to [comment:8 gaba]:
 > > Sounds good. Adding #30708 as a ticket then and we come back here once
 that is done.
 > [[br]]
 > We're done with the docker container and added instructions to our setup
 guide. We can now move forward with this ticket.
 [[br]]
 Actually, let's wait until #31153 is done as it will make bridge setup
 significantly easier. We hope to have the package in Debian stable by mid-
 September.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs