August 2020 - tor-commits - lists.torproject.org

[tor/release-0.4.4] Bump to 0.4.4.4-rc-dev
by nickm＠torproject.org 13 Aug '20

13 Aug '20

commit 26b257757bf0e97da17c5e00ada166fdf2b68875 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Aug 13 09:43:54 2020 -0400 Bump to 0.4.4.4-rc-dev --- configure.ac | 4 ++-- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/configure.ac b/configure.ac index 5b3a40fa70..697a302bf3 100644 --- a/configure.ac +++ b/configure.ac @@ -4,7 +4,7 @@ dnl Copyright (c) 2007-2019, The Tor Project, Inc. dnl See LICENSE for licensing information AC_PREREQ([2.63]) -AC_INIT([tor],[0.4.4.4-rc]) +AC_INIT([tor],[0.4.4.4-rc-dev]) AC_CONFIG_SRCDIR([src/app/main/tor_main.c]) AC_CONFIG_MACRO_DIR([m4]) @@ -16,7 +16,7 @@ configure_flags="$*" # version number changes. Tor uses it to make sure that it # only shuts down for missing "required protocols" when those protocols # are listed as required by a consensus after this date. -AC_DEFINE(APPROX_RELEASE_DATE, ["2020-08-11"], # for 0.4.4.4-rc +AC_DEFINE(APPROX_RELEASE_DATE, ["2020-08-13"], # for 0.4.4.4-rc-dev [Approximate date when this software was released. (Updated when the version changes.)]) # "foreign" means we don't follow GNU package layout standards diff --git a/contrib/win32build/tor-mingw.nsi.in b/contrib/win32build/tor-mingw.nsi.in index f626c7c51c..2d7c54b7eb 100644 --- a/contrib/win32build/tor-mingw.nsi.in +++ b/contrib/win32build/tor-mingw.nsi.in @@ -8,7 +8,7 @@ !include "LogicLib.nsh" !include "FileFunc.nsh" !insertmacro GetParameters -!define VERSION "0.4.4.4-rc" +!define VERSION "0.4.4.4-rc-dev" !define INSTALLER "tor-${VERSION}-win32.exe" !define WEBSITE "https://www.torproject.org/" !define LICENSE "LICENSE" diff --git a/src/win32/orconfig.h b/src/win32/orconfig.h index bb8eb4c769..9957ad1abc 100644 --- a/src/win32/orconfig.h +++ b/src/win32/orconfig.h @@ -217,7 +217,7 @@ #define USING_TWOS_COMPLEMENT /* Version number of package */ -#define VERSION "0.4.4.4-rc" +#define VERSION "0.4.4.4-rc-dev" #define HAVE_STRUCT_SOCKADDR_IN6 #define HAVE_STRUCT_IN6_ADDR

1 0

[tpo/master] 0.4.4.4-rc is released.
by nickm＠torproject.org 13 Aug '20

13 Aug '20

commit 7a05cb17539b932380c56176ff5e859b9fbc202d Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Aug 13 09:25:29 2020 -0400 0.4.4.4-rc is released. --- databags/versions.ini | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/databags/versions.ini b/databags/versions.ini index 64381e8e..d70788e1 100644 --- a/databags/versions.ini +++ b/databags/versions.ini @@ -15,6 +15,6 @@ version = 10.0a4 version = 0.4.3.6 [tor-alpha] -version = 0.4.4.3-alpha +version = 0.4.4.4-rc

1 0

[tor-browser/tor-browser-78.1.0esr-10.0-1] Bug 40073: Disable remote Public Suffix List fetching
by gk＠torproject.org 13 Aug '20

13 Aug '20

commit d2c3d8f23856de0a6d1057202ea75742790c60a9 Author: Alex Catarineu <acat(a)torproject.org> Date: Thu Aug 13 11:05:03 2020 +0200 Bug 40073: Disable remote Public Suffix List fetching In https://bugzilla.mozilla.org/show_bug.cgi?id=1563246 Firefox implemented fetching the Public Suffix List via RemoteSettings and replacing the default one at runtime, which we do not want. --- browser/components/BrowserGlue.jsm | 5 ----- 1 file changed, 5 deletions(-) diff --git a/browser/components/BrowserGlue.jsm b/browser/components/BrowserGlue.jsm index 43565440dd17..0d7de1dc7d4f 100644 --- a/browser/components/BrowserGlue.jsm +++ b/browser/components/BrowserGlue.jsm @@ -695,7 +695,6 @@ XPCOMUtils.defineLazyModuleGetters(this, { PluralForm: "resource://gre/modules/PluralForm.jsm", PrivateBrowsingUtils: "resource://gre/modules/PrivateBrowsingUtils.jsm", ProcessHangMonitor: "resource:///modules/ProcessHangMonitor.jsm", - PublicSuffixList: "resource://gre/modules/netwerk-dns/PublicSuffixList.jsm", RemoteSettings: "resource://services-settings/remote-settings.js", RemoteSecuritySettings: "resource://gre/modules/psm/RemoteSecuritySettings.jsm", @@ -2579,10 +2578,6 @@ BrowserGlue.prototype = { this._addBreachesSyncHandler(); }, - () => { - PublicSuffixList.init(); - }, - () => { RemoteSecuritySettings.init(); },

1 0

[tor-browser-build/master] Bug 40039: Remove version_path in nss project
by gk＠torproject.org 13 Aug '20

13 Aug '20

commit e7d0ada804cff79b101a0b4b7517133c80f25f31 Author: Nicolas Vigier <boklm(a)torproject.org> Date: Thu Aug 13 09:47:06 2020 +0200 Bug 40039: Remove version_path in nss project Instead we generate the string from the version. --- projects/nss/config | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/projects/nss/config b/projects/nss/config index e2b875e..b260e77 100644 --- a/projects/nss/config +++ b/projects/nss/config @@ -3,8 +3,6 @@ filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/buil # The required versions for application-services can be found at the respective # commit in libs/build-all.sh version: 3.54 -# XXX: maybe that's extractable automatically from `version` somehow? -version_path: 3_54 nspr_version: 4.26 var: container: @@ -19,7 +17,7 @@ input_files: project: '[% c("var/compiler") %]' - name: ninja project: ninja - - URL: 'https://ftp.mozilla.org/pub/security/nss/releases/NSS_[% c("version_path") %]_RTM/src/nss-[% c("version") %]-with-nspr-[% c("nspr_version") %].tar.gz' + - URL: 'https://ftp.mozilla.org/pub/security/nss/releases/NSS_[% c("version") | replace("\\.", "_") %]_RTM/src/nss-[% c("version") %]-with-nspr-[% c("nspr_version") %].tar.gz' name: nss sha256sum: e0e81f0ff264d810f130d3cd9334722f7f883c752430483131d1ca5ac62d3f70 - filename: configure.patch

1 0

[tor-browser/tor-browser-78.1.0esr-10.0-1] squash! TB3: Tor Browser's official .mozconfigs.
by gk＠torproject.org 13 Aug '20

13 Aug '20

commit 618b2a814ab057f1cc94ed44072b395fd9fc2134 Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Thu Aug 6 11:26:45 2020 -0400 squash! TB3: Tor Browser's official .mozconfigs. Bug 40061: Omit the Windows default browser agent from the build --- .mozconfig-mingw | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.mozconfig-mingw b/.mozconfig-mingw index 6a9d3749b2ec..29c58d8fdab2 100644 --- a/.mozconfig-mingw +++ b/.mozconfig-mingw @@ -28,4 +28,4 @@ ac_add_options --enable-proxy-bypass-protection # Disable telemetry ac_add_options MOZ_TELEMETRY_REPORTING= - +ac_add_options --disable-default-browser-agent

1 0

[tor-browser/tor-browser-78.1.0esr-10.0-1] squash! TB4: Tor Browser's Firefox preference overrides.
by gk＠torproject.org 13 Aug '20

13 Aug '20

commit f86772d1641216abb98128dd3870928c8c1c1d7c Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Thu Aug 6 11:22:27 2020 -0400 squash! TB4: Tor Browser's Firefox preference overrides. Bug 40061: Omit the Windows default browser agent from the build --- browser/app/profile/000-tor-browser.js | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js index eae29579ded6..7e29c788b720 100644 --- a/browser/app/profile/000-tor-browser.js +++ b/browser/app/profile/000-tor-browser.js @@ -90,6 +90,11 @@ pref("datareporting.policy.dataSubmissionEnabled", false); pref("toolkit.telemetry.unified", false); pref("toolkit.telemetry.enabled", false); pref("toolkit.telemetry.updatePing.enabled", false); // Make sure updater telemetry is disabled; see #25909. +#ifdef XP_WIN +// Defense-in-depth: ensure that the Windows default browser agent will +// not ping Mozilla if it is somehow present (we omit it at build time). +pref("default-browser-agent.enabled", false); +#endif pref("identity.fxaccounts.enabled", false); // Disable sync by default pref("services.sync.engine.prefs", false); // Never sync prefs, addons, or tabs with other browsers pref("services.sync.engine.addons", false);

1 0

[tor-browser/tor-browser-78.1.0esr-10.0-1] fixup! TB4: Tor Browser's Firefox preference overrides.
by gk＠torproject.org 13 Aug '20

13 Aug '20

commit bad0647c6b70b20a336f8c643a57e80fc3e62cf2 Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Thu Aug 6 10:12:51 2020 -0400 fixup! TB4: Tor Browser's Firefox preference overrides. --- browser/app/profile/000-tor-browser.js | 48 ++++++++++++++++++++++++++- mobile/android/app/000-tor-browser-android.js | 3 ++ 2 files changed, 50 insertions(+), 1 deletion(-) diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js index 3be6e460b628..eae29579ded6 100644 --- a/browser/app/profile/000-tor-browser.js +++ b/browser/app/profile/000-tor-browser.js @@ -100,13 +100,50 @@ pref("browser.search.region", "US"); // The next two prefs disable GeoIP search pref("browser.search.geoip.url", ""); pref("browser.fixup.alternate.enabled", false); // Bug #16783: Prevent .onion fixups // Make sure there is no Tracking Protection active in Tor Browser, see: #17898. +pref("privacy.trackingprotection.enabled", false); pref("privacy.trackingprotection.pbmode.enabled", false); +pref("privacy.trackingprotection.annotate_channels", false); +pref("privacy.trackingprotection.cryptomining.enabled", false); +pref("privacy.trackingprotection.fingerprinting.enabled", false); +pref("privacy.trackingprotection.socialtracking.enabled", false); +pref("privacy.socialtracking.block_cookies.enabled", false); +pref("privacy.annotate_channels.strict_list.enabled", false); + // Disable the Pocket extension (Bug #18886 and #31602) pref("extensions.pocket.enabled", false); pref("network.http.referer.hideOnionSource", true); -// Disable ServiceWorkers by default +// Disable use of WiFi location information +pref("browser.region.network.scan", false); +pref("browser.region.network.url", ""); + +// Don't load Mozilla domains in a separate tab process +pref("browser.tabs.remote.separatedMozillaDomains", ""); + +// Avoid DNS lookups on search terms +pref("browser.urlbar.dnsResolveSingleWordsAfterSearch", 0); + +// Disable about:newtab and "first run" experiments +pref("messaging-system.rsexperimentloader.enabled", false); +pref("trailhead.firstrun.branches", ""); + +// Clear the list of trusted recursive resolver services +pref("network.trr.resolvers", ""); + +// Disable crlite +pref("security.pki.crlite_mode", 0); + +// Disable website password breach alerts +pref("signon.management.page.breach-alerts.enabled", false); +pref("extensions.fxmonitor.enabled", false); + +// Remove mobile app tracking URLs +pref("signon.management.page.mobileAndroidURL", ""); +pref("signon.management.page.mobileAppleURL", ""); + +// Disable ServiceWorkers and push notifications by default pref("dom.serviceWorkers.enabled", false); +pref("dom.push.enabled", false); // Fingerprinting pref("webgl.disable-extensions", true); @@ -298,6 +335,15 @@ pref("browser.download.panel.shown", true); // Treat .onions as secure pref("dom.securecontext.whitelist_onions", true); +// Disable special URL bar behaviors +pref("browser.urlbar.suggest.topsites", false); +pref("browser.urlbar.update1.interventions", false); +pref("browser.urlbar.update1.searchTips", false); + +// Skip checking omni.ja and other files for corruption since the result +// is only reported via telemetry (which is disabled). +pref("corroborator.enabled", false); + // Onboarding. pref("browser.onboarding.tourset-version", 5); pref("browser.onboarding.newtour", "welcome,privacy,tor-network-9.0,circuit-display,security,expect-differences,onion-services,learn-more"); diff --git a/mobile/android/app/000-tor-browser-android.js b/mobile/android/app/000-tor-browser-android.js index 23fd39beac77..61c8a0cd7fa1 100644 --- a/mobile/android/app/000-tor-browser-android.js +++ b/mobile/android/app/000-tor-browser-android.js @@ -30,6 +30,9 @@ pref("media.realtime_decoder.enabled", false); // Enable touch events on Android (highlighting text, etc) pref("dom.w3c_touch_events.enabled", 2); +// Ensure that pointer events are disabled +pref("dom.w3c_pointer_events.multiprocess.android.enabled", false); + // No HLS support for now due to browser freezing, see: #29859. pref("media.hls.enabled", false);

1 0

[tor-browser/tor-browser-78.1.0esr-10.0-1] Merge remote-tracking branch 'gitlab/merge-requests/29' into tor-browser-78.1.0esr-10.0-1
by gk＠torproject.org 13 Aug '20

13 Aug '20

commit 236b57124c5bad238ff78d91c62d734cf387aca3 Merge: 8ebe00420de7 bad0647c6b70 Author: Georg Koppen <gk(a)torproject.org> Date: Thu Aug 13 08:46:51 2020 +0000 Merge remote-tracking branch 'gitlab/merge-requests/29' into tor-browser-78.1.0esr-10.0-1 browser/app/profile/000-tor-browser.js | 48 ++++++++++++++++++++++++++- mobile/android/app/000-tor-browser-android.js | 3 ++ 2 files changed, 50 insertions(+), 1 deletion(-)

1 0

[translation/support-portal] https://gitweb.torproject.org/translation.git/commit/?h=support-portal
by translation＠torproject.org 13 Aug '20

13 Aug '20

commit cea3d768662615011f3fc239e62c0c4f96743a52 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Aug 13 07:18:24 2020 +0000 https://gitweb.torproject.org/translation.git/commit/?h=support-portal --- contents+es.po | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/contents+es.po b/contents+es.po index 069fcc2b26..a147d226d0 100644 --- a/contents+es.po +++ b/contents+es.po @@ -6,10 +6,10 @@ # Andrea Bras, 2020 # erinm, 2020 # David Figuera <dfb(a)fastmail.com>, 2020 -# Emma Peel, 2020 # Joaquín Serna <bubuanabelas(a)cryptolab.net>, 2020 # Fred Shen <niclored(a)hotmail.com>, 2020 # Zuhualime Akoochimoya, 2020 +# Emma Peel, 2020 # msgid "" msgstr "" @@ -17,7 +17,7 @@ msgstr "" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2020-04-15 19:40+CET\n" "PO-Revision-Date: 2018-10-02 22:41+0000\n" -"Last-Translator: Zuhualime Akoochimoya, 2020\n" +"Last-Translator: Emma Peel, 2020\n" "Language-Team: Spanish (https://www.transifex.com/otf/teams/1519/es/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" @@ -148,7 +148,7 @@ msgstr "Paquetes RPM de Tor" #: https//support.torproject.org/misc/menu/ #: (content/misc/menu/contents+en.lrquestion.description) msgid "Abuse FAQs" -msgstr "Preguntas Más Frecuentes sonre Abusos" +msgstr "Preguntas Más Frecuentes sobre Abusos" #: https//support.torproject.org/glossary/add-on-extension-or-plugin/ #: (content/glossary/add-on-extension-or-plugin/contents+en.lrword.term) @@ -10142,7 +10142,7 @@ msgid "" " way to maintain trust with our community." msgstr "" "Creemos que hablar claramente sobre quienes nos financian y nuestro modelo " -"de financiación es la mejor forma de mantener la confianza con nuestra " +"de financiación es la mejor forma de conservar la confianza de nuestra " "comunidad." #: https//support.torproject.org/misc/misc-3/ @@ -12526,7 +12526,7 @@ msgid "" "Download Tor Browser to experience real private browsing without tracking, " "surveillance, or censorship." msgstr "" -"Descarga Navegador Tor para experimentar navegación privada real sin " +"Descarga el Navegador Tor para experimentar la navegación privada real sin " "rastreo, vigilancia ni censura." #: lego/templates/footer.html:35 templates/footer.html:35 @@ -12542,7 +12542,7 @@ msgid "" msgstr "" "Promover los derechos humanos y las libertades mediante la creación y " "despliegue de tecnologías de anonimato y privacidad libres y de código " -"abierto, el apoyo a su disponibilidad y utilización sin restricciones y el " +"abierto, apoyando su disponibilidad y utilización sin restricciones y el " "fomento de su comprensión científica y popular." #: lego/templates/footer.html:64 lego/templates/footer.html:66 @@ -12554,7 +12554,7 @@ msgstr "Dona Ahora" #: lego/templates/footer.html:73 templates/footer.html:73 msgid "Subscribe to our Newsletter" -msgstr "Suscríbete a nuestra lista de correo" +msgstr "Suscríbete a nuestro Boletín de Noticias" #: lego/templates/footer.html:74 templates/footer.html:74 msgid "Get monthly updates and opportunities from the Tor Project:"

1 0

[translation/tor_outreach_md_completed] https://gitweb.torproject.org/translation.git/commit/?h=tor_outreach_md_completed
by translation＠torproject.org 13 Aug '20

13 Aug '20

commit d5ec03ab43b2bff4e98285ad99be32282097d952 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Aug 13 07:18:03 2020 +0000 https://gitweb.torproject.org/translation.git/commit/?h=tor_outreach_md_com… --- tor-outreach2019-2020-es.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/tor-outreach2019-2020-es.md b/tor-outreach2019-2020-es.md index 80ead12f6b..fc6dff5afb 100644 --- a/tor-outreach2019-2020-es.md +++ b/tor-outreach2019-2020-es.md @@ -70,9 +70,9 @@ Estaba tan agotado que la primera vez que apareció en su navegador el mensaje " Tras intentarlo una y otra vez, se dio cuenta de que su proveedor de correo electrónico, un sitio web de noticias y muchas aplicaciones no estaban disponibles. -He had heard that this country censors the internet and wondered if that was happening. -How could he contact his family from behind this impenetrable wall? -After doing some web searches, he found a forum and read about VPNs, private services that allow you to connect to another uncensored network. +Había oído que en este país se censuraba a internet y se preguntaba si era eso lo que sucedía. +¿Cómo podría ponerse en contacto con su familia con ese muro impenetrable? +Después de hacer algunas búsquedas en la red, encontró un foro y leyó sobre VPN, servicios privados que te permiten conectarte a otra red sin censura. Jean se pasó media hora tratando de averiguar qué VPN barata sería mejor. @@ -107,9 +107,9 @@ Otras aplicaciones, como SecureDrop y OnionShare, usan Tor para proteger a sus u Amal quiere visitar la web de Bekele en privado, así que abre el Tor Browser. -Tor Browser selects a random circuit of three relays, which are computers all over the world configured to route traffic over the Tor network. +El Navegador Tor selecciona un circuito aleatorio de tres relays, que son ordenadores de todo el mundo configurados para enrutar el tráfico a través de la red Tor. -Tor Browser then encrypts her website request three times and sends it to the first Tor relay in her circuit. +El Navegador Tor a continuación encripta la solicitud del sitio web tres veces y la envía al primer repetidor de Tor del circuito. The first relay removes the first encryption layer but doesn't learn that the destination is Bekele’s website.

1 0