Hi!
I've updated the very outdated tor-browser package in pkgsrc (on
NetBSD). I used the patches we have for firefox-60esr and one
additional one (see later in this mail).
I have a couple of questions.
There are no tarballs. Please provide some! :)
I used the git tag 'tor-browser-60.5.1esr-8.5-1-build2' but I'm not
sure to which tor-browser version that corresponds. "8.5"? What is the
"-1"? What is the "-build2"? What version should I call that? Is there
a different tag I should have used instead?
tor-browser defaults to using socks port 9150, but tor defaults to
port 9050. Why is that so? Is there an intended way (configure flag?)
to change the tor-browser default?
I've inherited the attached patch from the previous version of the
package. It changes the default directory to one in the user's home,
which makes more sense to me on a Unix system where the program is
installed in a public path. Would this patch be acceptable for
inclusion, or what do you suggest?
I've tested the package by browsing random webpages, some onion sites
and check.torproject.org. Is there anything else I can do test that
the tor-browser package is functional and doesn't leak stuff it
shouldn't?
Thanks for any feedback!
Thomas
Vanguards v0.3.1 is tagged on github at
https://github.com/mikeperry-tor/vanguards. The tag is signed with the
gpg key that signed this mail, and all of my other mails.
Version 0.3.1 fixes a serious issue where sending a SIGHUP to Tor
caused Vanguards to get disabled. Additionally, some false positive WARN
messages were demoted to INFO and NOTICE, and given appropriate Tor bug
numbers in those logs. Here is the changelog for 0.3.1:
- Workaround for dropped cell WARNS due to Tor bugs #29699, #29700,
#29786, and #29927. These cases are now logged at INFO/NOTICE, with
specific Tor bug number for each case. #37
- Re-apply vanguard config params upon SIGHUP. #40.
The addon requires Tor 0.3.3.x or above, and Tor 0.3.5.x is preferred.
Please set dependencies and repository placement accordingly.
The preferred interpreter for vanguards is pypy, with stem v1.7.0 or
above.
Please let me know if vanguards is available for repositories for your
distribution, or in ppa's or alternate sources. I plan to make a release
announcement on the Tor Blog and Twitter account soon, and I would like
to provide install instructions for your favorite distribution(s).
--
Mike Perry