Tor Browser Bundle 1.2.9 Released

by phobos | September 12, 2009

Tor Browser Bundle 1.2.9 is released today. It updates Firefox and Pidgin Instant Messaging client to address the security issues in the older versions, and includes the latest and greatest Vidalia.

TBB can be downloaded from https://decvnxytmk.oedi.net/torbrowser.

The details of the changes are:

  • update Vidalia to 0.2.4
  • update Qt to 4.5.2
  • update Pidgin to 2.6.2
  • update Firefox to 3.0.14

Comments

Please note that the comment area below has been archived.

Anonymous (not verified) said:

September 12, 2009

Permalink

Sorry for offtopic, but i am using Vidalia 0.2.3, and i found that there is a lot requests to non mapped IP 69.164.192.183:443 (callisto.vidalia-project.net). What is this?

It's the server we use to update the geoip database on your client. You anonymously connect over Tor to the server, get database updates to download, and then locate servers around the world. If you disable this feature, you'll notice the network map has no country flags next to the relays.

Anonymous (not verified) said:

September 14, 2009

Permalink

Why do you force people to update this database, in previous versions it worked with a non "updated" database.

My configuration is quite strict so newest version is not working as it should, have to use older ones until this new "feature" is fixed or clearly explained how to get it working !!!

What IPs do i have to enable in torrc for this to work with latest bundle ?

Do i have to enable this IP: 69.164.192.183:443(in TORRC, firewall or both?), do i have to do that only once, or every time i start vidalia or even every X hours ???

People like to see where the relays exist in the world. The geoip lookups are completely anonymously over Tor. You shouldn't have to allow anything in your firewall at all.

Perhaps we should have a config option in vidalia to disable geoip lookups of relays.

Anonymous (not verified) said:

September 24, 2009

Permalink

My point is this:
Previous versions of vidalia bundle works and shows country flags on map, this version is not working, not shownig any country flags on map and are allowing circuits that is blocked by my torrc configuration, so once again

" My configuration is quite strict so newest version is not working as it should, have to use older ones until this new "feature" is fixed or clearly explained how to get it working !!!

What IPs do i have to enable in torrc for this to work with latest bundle ? "

Yoav (not verified) said:

September 13, 2009

Permalink

The torbutton is incompatible with this release of Firefox, nor does it work with firefox 3.5.3.

Question:
why not use firefox 3.5.3 on the TOR browser?

We don't recommend using torbutton with Firefox 3.5.x at all. While it may appear to work, Firefox 3.5 is a major rewrite of the codebase. We're in the middle of a month of analyzing the firefox 3.5 codebase and adapting torbutton to work with it.

Torbutton was designed for Firefox 3.0.x. This is why we don't ship firefox 3.5.x in the Tor Browser Bundles, it's not safe to do so.

yoav (not verified) said:

September 13, 2009

Permalink

OK, thanks for the answer. Please note that the TOR button does not work with firefox 3.0.0.14 as well.

Anonymous (not verified) said:

September 23, 2009

Permalink

Is the official statement still that you have to abandon the Firefox browser in the future when version 3.5.x is the only alternative/updated version because of the severe security issues that's impossible to solve with it
Or is it that you are to completely rewrite your own version of it.

If so what alternative browser(s) that are considered safe if any to replace firefox with ?

>The torbutton is incompatible with this release of Firefox,

Hmmm. The release of FF included with the copy of this bundle that I downloaded is 3.0.13 and it is working just fine. Perhaps I misunderstood what you were trying to say?

Anonymous (not verified) said:

September 13, 2009

Permalink

what? On your dowloads page it say "Want Tor to really work?....We recommend you use Firefox with the Torbutton extension." and you link to mozilla's latest version of firefox (3.5.3) Now you say not to?
And torbutton also say it works fine to firefox 3.6a1pre. some very unclear ambiguity going on here and worrying stuff too.

Re: "On your dowloads page it say "Want Tor to really work?....We recommend you use Firefox with the Torbutton extension." and you link to mozilla's latest version of firefox (3.5.3)"

The url behind that link is "http://www.mozilla.org/firefox" which is obsolete (predates the restructuring of the Mozilla project and domains mozilla.org & mozilla.com) Mozilla.org itself redirects that page request to "http://www.mozilla.com/en-US/firefox/upgrade.html" which will always (absent more restructuring in the future) have the downloads for latest production version(s) of FF. The link on the Tor page should be fixed or deactivated, but it isn't as if Tor were intentionally linking you to an inappropriate version of FF.

Re: "torbutton also say it works fine to firefox 3.6a1pre" I am unable to find such a claim on the Tor download page. Got link?

Anonymous (not verified) said:

September 15, 2009

Permalink

I never examined the Torbutton settings in the browser bundles until I saw allegations in this thread that it was not working. Now that I have looked, I am a bit confused. I recently read a statement dated 8/25/2009 by Andrew Lewman in a reply to a user question that "The Tor Browser Bundle, aka the portable bundle, doesn't include
Privoxy. It includes Polipo instead." (see: http://www.mail-archive.com/or-talk@freehaven.net/msg11474.html). However (I am using TBB 1.2.9), on the Proxy tab of the Torbutton add-in, both "use the recommended settings for my version of Firefox" *and* "Use Privoxy" are selected. Mr. Lewman's statement and the settings are confusing, and seem to be contradictory. Is the "Use Privoxy" nomenclature in Torbutton deprecated or otherwise misleading? If not, please enlighten me as to what important concept I have missed here. Thank you.

Anonymous (not verified) said:

September 15, 2009

Permalink

"until I saw allegations in this thread that it was not working." - "it" being Torbutton, if that was unclear.

phobos

phobos said:

September 15, 2009

Permalink

It's a nomenclature bit. The Tor Browser Bundle does not include Privoxy. Torbutton could just as well state "Use Fluffy Bunnies" and point the browser at localhost:8118 correctly.

You do raise a fine point that torbutton needs to be updated.

Anonymous (not verified) said:

September 16, 2009

Permalink

Thanks, I thought that might be the answer, but I thought it was worth asking. With security and privacy tools, it really does seem to me that the only stupid questions are the ones that do not get asked :-)

sortanew (not verified) said:

September 16, 2009

Permalink

Can't give email because connection now fails. Wikileaks submit also failed. Added this latest update after being new at this and at least succeeding at getting to my anon email. Doesn't seem to work so well for me. No one here to help.

Anonymous (not verified) said:

September 18, 2009

Permalink

Tor was up and running, but would not connect to urls, today it did connect to email url that failed the other day. For one site that failed I was told I need a US exit node, but don't know how to do that. No one here to tell me how.

Anonymous (not verified) said:

September 22, 2009

Permalink

Whether it's FF 3.5x or previous versions, when enabling Tor Button, it automatically resizes my browser window to various sizes, usually bigger than my screen itself. To make it worse, when I'm done using it and disable it, it doesn't revert back to it's original dimensions. I'd prefer my browser size be left completely alone, and let me resize it myself if/when needed. Why does it do this? is there a logic behind it that I'm unaware of?

Second question, I just read about it not being compatible with 3.5.x. What's unsafe? does it leak your real IP address? When I've checked so far at ipchicken.com, it always seems to show an IP that isn't mine?

Anonymous (not verified) said:

September 23, 2009

Permalink

Is is possible to update the Tor Browser Bundle (including Pidgin) without uninstalling and then installing the new version?

Anonymous (not verified) said:

September 24, 2009

Permalink

is there anyway to use adobe while tor is enabled ?

Repressed Canadian (not verified) said:

September 24, 2009

Permalink

So... for some odd reason my Tor stopped working midway through loading a page today. It can now no longer connect. I'm using the 0.1.15 Vidalia, 0.2.0.35 Tor, 4.3.5 QT, Tor button was a seperate tack on.

I know its an old version, but it took me 4 days last week to look for a working mirror for the browser bundle - since most sites link to the Tor Project. however, I'm running a MAC, and unfortunately Torproject.org is blocked by China. *sighs*

What are my options?

American in China (not verified) said:

September 24, 2009

Permalink

I have the same problem as the previous poster. As of 09-24-2009 at around 5PM, I can not connect to any TOR relays. None at all - I'm not sure what happened. After the problem, I started looking on the net (Unfortunately I can not connect to torproject.org) and found that I may be using incompatible versions. FF = 3.5.3 and Vidalia-bundle-0.2.0.35-0.1.15. But it worked great until yesterday!

Can anyone give me any advice on how to connect again, and mirror sites to download the needed versions (or even e-mail me the versions that I need).

Any help would be greatly appreciated, especially if it were clear enough for a 5 year old to understand! The only SOCKS I know about smell bad! I don't really need to be anonymous because of anything I'm doing on-line, I just want to get access to blocked websites like facebook.

Harmonized Fre… (not verified) said:

September 24, 2009

Permalink

Every popular breach in the GFW has been filled. Popular free and paid vpn and even tor's bridges are all but blocked in Beijing. Just a week before the 60th anniversary of China, the timing leaves no doubt that they want to have complete and utter control over the internet before the celebrations. Previous anniversaries and important national events are usually the occasion to tighten security measures, both on the street and online, but to date I think this is the first time that tor completely stopped working here in Beijing.
This is not likely to change after oct. 8, so unless the TOR team can come up with a workaround, we people living in China will have to embrace censorship and enjoy harmonious web browsing with Chinese characteristics (or resort to those annoying web proxies).

Harmonized Fre… (not verified) said:

September 24, 2009

Permalink

Every popular breach in the GFW has been filled. Popular free and paid vpn and even tor's bridges are all but blocked in Beijing. Just a week before the 60th anniversary of China, the timing leaves no doubt that they want to have complete and utter control over the internet before the celebrations. Previous anniversaries and important national events are usually the occasion to tighten security measures, both on the street and online, but to date I think this is the first time that tor completely stopped working here in Beijing.
This is not likely to change after oct. 8, so unless the TOR team can come up with a workaround, we people living in China will have to embrace censorship and enjoy harmonious web browsing with Chinese characteristics (or resort to those annoying web proxies).

Dead in the Water (not verified) said:

September 24, 2009

Permalink

Can someone please post a new bridge here for me to use? Tor isn't replying for my request for a bridge - plus I can't get to the published list of bridges on Tor's page. If a couple people reply with new bridges, I think I'd be in good shape. E-mail might be better to keep them confidential - dave7822@aol.com

gopu mathew (not verified) said:

September 28, 2009

Permalink

Can I replace the Firefox in the bundle with a portable Firefox 3.5.3?

PETER (not verified) said:

November 08, 2009

Permalink

Nov 08 12:03:39.958 [Notice] No current certificate known for authority ides; launching request.Please fix this thing. Any updates for TBB?. if so when will be the other version is going 2 be released?

Anonymous (not verified) said:

September 03, 2010

Permalink

Hi, I installed TOR last week and upon running it, it told me there is a newer version available. I downloaded it and attempted to uninstall the older version so as to install the newer version be the uninstall didn't complete the process and as such I couldn't install the new version as it keeps giving error messages.

Can I get an uninstaller to enable me complete the process or can I repair the damaged one?

Felix.

Anonymous (not verified) said:

January 29, 2011

Permalink

I have the same problem, was told to upgrade, couldn't uninstall the previous version, installed new version, now nothing works :((((.

Anonymous (not verified) said:

April 14, 2011

Permalink

when I,ll watch youtube by tor I cant do it and it sey to me that install adobe flash player.how can I install it on tor.I use ubuntu OS 0.4