Tor Messenger 0.4.0b3 is released

by sukhbir | June 12, 2017

We are pleased to announce another public beta release of Tor Messenger. This release features important improvements to the stability and security of Tor Messenger. All users are encouraged to upgrade.

Mozilla ESR52 Update

We are working on the update to ESR 52 and it should follow shortly after this release.

Downloads

Please note that Tor Messenger is still in beta. The purpose of this release is to help test the application and provide feedback. At-risk users should not depend on it for their privacy and safety.

sha256sums-signed-build.txt

sha256sums-signed-build.txt.asc

The sha256sums-signed-build.txt file containing hashes of the bundles is signed with the key 0xB01C8B006DA77FAA (fingerprint: E4AC D397 5427 A5BA 8450 A1BE B01C 8B00 6DA7 7FAA). Please verify the fingerprint from the signing keys page on Tor Project's website.

Changelog

Tor Messenger 0.4.0b3 -- June 13, 2017

All Platforms
- Use the tor-browser-45.9.0esr-6.5-1-build3 tag on tor-browser
- Update tor-browser to 6.5.2
- Add some missing localization for Twitter's actions
- Trac 21736: Hide the timestamp and account from message selection templates

Comments

Please note that the comment area below has been archived.

Thanks for your work! Will…

Thanks for your work! Will the switch to ESR52 bring content sandboxing?

It was announced, that the…

It was announced, that the Torbutton/tbb supports Unix domain ports, is this through for the Tor Messenger, too? (Just asking because their is no sandboxed version of Tor Messenger and it might be a good idea to use it in combination with firejail to disable its network access)

Thank you!

What is up with orbot n…

What is up with orbot n,orfox new update wanting intrusive permissions n doesnt even start now? We need a true tor app for android.plz help us ppl who have android n cant afford a pc

Is there a github for the…

Is there a github for the actual source. I wouldn't mind taking a crack at those bugs.

Yes: https://gitweb…

Yes: https://gitweb.torproject.org/tor-messenger-build.git/tree/

What's with the sudden lack …

What's with the sudden lack (apparently) of functioning secure sockets in TOR on most onion sites that use passwords? Since the last update, many onion web sites don't show up with the green padlock icon now (the one that tells you that you are safe). Click inside of the password text box and you see -

This connection is not secure.
Logins entered here could be compromised.
Learn More

Yeah, this is a terrible UI…

Yeah, this is a terrible UI problem.

The new Firefox has a new feature that tries to scare you when you're on an http page and you're about to input text into something that looks like a password prompt. Trouble is, onion sites are generally http, and the browser doesn't know what they're special.

See this ticket for progress:
https://bugs.torproject.org/21321

How does one erase past…

How does one erase past conversations automatically?

I set up two Tor Messengers,…

I set up two Tor Messengers, and two XMPP accounts, under Windows 8 and 10 for testing. Each install adds the contact from the other install and then they verify each other. Conversations are secured. I don't understand some behaviors:

1) On both computers, once I add the contact from the other computer, the status is always showing as "unknown" even when that contact is online and shows Available locally on their install.

2) On the Windows 10 install, I can manually "rename" the contact to anything I want without affecting the ability of Tor Messenger to connect to that contact using the real underlying address. On Windows 8 install, if I rename the contact, then it breaks. I am no longer able to connect to that contact and the only fix for this is to rename the contact back to the long-name form "userid@server.com". Then everything works again.

Any ideas on how to fix either of these?

The key success of apps like…

The key success of apps like WhatsApp has been the ability to easily send files, photos, and walkie-talkie type voice messages with a few button presses. I would love to see you duplicate those three items at minimum, when you implement encrypted file-sending.

In the longer term, do you plan to implement voice or video calling?