tbb-dev

tbb-dev@lists.torproject.org

447 discussions

New Signing PGP Subkey
by Matthew Finkel 14 Dec '21

14 Dec '21

Hello everyone, Please be aware that a new PGP subkey will be used for signing Tor Browser packages beginning with Tor Browser 11.5a1. Please refresh your keychain from keys.openpgp.org, as needed. You may download it from https://keys.openpgp.org/vks/v1/by-fingerprint/EF6E286DDA85EA2A4BA7DE684E2C….

2 2

Request for help with TBB functionality implementation in nyxt browser
by Jacob Hrbek 14 Nov '21

14 Nov '21

See https://github.com/atlas-engineer/nyxt/issues/1514 Any relevant information is appreciated -- Jacob "Kreyren" Hrbek Sent with ProtonMail Secure Email.

1 0

Tor Browser weekly meeting time, Standard Time planning
by Matthew Finkel 25 Oct '21

25 Oct '21

Hello everyone, Next week ends Daylight Savings / Summer time in (most of) Europe, and then (most of) North America follows one week later. Let's continue meeting at 1500 UTC next Monday, and we can discuss moving our meeting time to 1600 UTC at that meeting. Thanks, Matt

1 0

Timeline for 11.* (Linux)?
by intrigeri 18 Oct '21

18 Oct '21

Hi, I see tbb-11.0a9-build1 was tagged 2 days ago, woohoo! Do you have any idea when we can expect a 11.0a9 release that we can use to start our migration work at Tails? (The release schedule documents dates in the past, hence my question.) Thanks in advance, cheers!

2 3

killall tor.real
by Jeff Burdges 28 Sep '21

28 Sep '21

It’s always been common that Tor Browser hangs when reconnecting after wifi reconnects. In the past, one fixed this with `killall tor.real` which forced a fresh tor process, but avoided resetting Tor browser state, like logins. This was expected behaviour on both Linux and Mac for ages. This stopped working maybe 6 months ago, now Tor Browser hangs indefinitely when forced to restart tor. Is there any new process for safely forcing a tor restart *without* killing TBB information? Best, Jeff

1 0

Attn: Beginning 91esr transition, expect Nightly breakage
by Matthew Finkel 30 Aug '21

30 Aug '21

Hello everyone, Tor Browser's transition from Firefox 78esr to Firefox 91esr is in progress. Please expect Nightly breakage (and sorry for any inconvenience this causes). Please open issues on Gitlab [0] when you experience new bugs and regressions. Thanks, Matthew [0] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/new

1 0

Disabling JITs in the Tor Browser
by sanketh 05 Aug '21

05 Aug '21

Hello, Edge Vuln Research just dropped the amazing named "Super Duper Secure Mode" [1]---an interesting albeit slightly provocative statement they make in the announcement is that JITs may not be worth it for security-sensitive users, since they account for about half the bugs in V8 (Chromium's JS engine) and their new research shows that disabling JITs, despite the huge performance regressions in traditional JS benchmarks, is rarely noticeable in real-life. I don't think tbb is new to clamping down JS (for security-sensitive users), but this idea of disabling JITs might be interesting to look into*. First, taking a step back, recall that modern browsers execute JS by converting it into bytecode and then using an interpreter to execute, and functions that are "hot" (executed many times) are recompiled using a JIT to produce faster code. This is super simplified, see [2] for a more technical overview of how this works in Firefox. I think this idea can be used to improve the Tor Browser, 1. we can disable JITs in "Safer" mode which would reduce usability but improve security; and 2. we can enable JS and disable JITs in "Safest" mode which would reduce significantly improve usability but degrade security. On a more meta note, this wouldn't be hard to implement, Firefox has prefs to enable and disable this stuff, and @freddyb's tweet [3] seems to confirm this intuition. What do y'all think? Best, Sanketh *disabling JITs was discussed in the tor issue tracker 4 years ago [4] but most of the then concerns (like changing build settings) seem to have been resolved and JITs are now enabled across the browser (they were not enabled for content back then) and so this, I feel, can use fresh eyes. [1]: https://microsoftedge.github.io/edgevr/posts/Super-Duper-Secure-Mode/ [2]: https://hacks.mozilla.org/2020/11/warp-improved-js-performance-in-firefox-8… [3]: https://twitter.com/freddyb/status/1423020386560712705?s=20 [4]: https://gitlab.torproject.org/legacy/trac/-/issues/21011

2 2

buildconf/num_procs inside RBM.pm?
by David Fifield 26 Jul '21

26 Jul '21

I noticed that the "Resolving deltas" step of git clones was using a maximum of 3 threads. I thought about altering the command line in git_clone_fetch_chdir to include something like: '--config', 'pack.threads=' . config('buildconf/num_procs') (See https://git-scm.com/docs/git-config#Documentation/git-config.txt-packthreads and https://git-scm.com/docs/git-index-pack#Documentation/git-index-pack.txt---….) But it looks like nothing inside RBM itself uses 'buildconf/num_procs', or even just 'buildconf'. It's only used by tor-browser-build files. Is there a way to use this information inside RBM, or does what I'm trying to do not make sense? rbm.conf passes a buildconf.num_procs hash into the "c" function when computing the build_id, but I was not able to find where it might be used in the template expansion. build_id: '[% sha256(c("var/build_id_txt", { buildconf => { num_procs => 4 } })).substr(0, 6) %]' https://gitweb.torproject.org/builders/tor-browser-build.git/tree/rbm.conf?…

2 2

Updated Tor Browser Signing Key
by Matthew Finkel 14 Jun '21

14 Jun '21

Hello everyone, The Tor Browser OpenPGP signing key expired on 12 June. We extended the expiration of the subkey again, due to the pandemic. We hope this is the last time that will be necessary. The valid key should be available from keys.openpgp.org now. The key is attached, as well.

1 0

Release schedule update
by intrigeri 19 May '21

19 May '21

Hi, Mozilla has updated their release schedule [1] recently, and the Tor Browser release schedule [2] does not match anymore. Can I safely assume that the Tor Browser release schedule will be updated to match Mozilla's? [1] https://wiki.mozilla.org/Release_Management/Calendar [2] https://gitlab.torproject.org/tpo/applications/tor-browser/-/wikis/Release_… Cheers!

2 4

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

tbb-dev