Testing: TorBrowser-4.5.2-osx64_en-US.dmg System Version: OS X 10.10.3 (14D136) Kenel Version: Darwin 14.3.0 Processor: 2.3GHz Intel Core i7 Memory: 16 GB 1600 MHz DDR3 Graphics: Intel Iris Pro & NVIDIA GeForce GT 750M 2048 MB Display: 15-inch (2880 x 1800 Retina)
TBB Launches successfully: yes Connects to the Tor network: yes Browser toolbars and menus work, tab dragging works: yes
All extensions are present and functional: yes - HTTPS-Everywhere 5.0.5 - NoScript 2.6.9.26 - TorButton 1.9.2.6 - TorLauncher 0.2.7.4
Web browsing works as expected - HTTP, HTTPS, .onion browsing works (https://facebookcorewwwi.onion/) - HTML5 videos work on http://videojs.com/ and YouTube - http://ip-check.info/?lang=en - ok - https://panopticlick.eff.org/ - only one in 2,425 , 11.24 bits of identifying information - https://weakdh.org/ - Safe
SOCKS/external apps work as expected: yes (Torbirdy)
SSL client is bad according to https://www.howsmyssl.com/. “Session tickets are not supported in your client. Without them, services will have a harder time making your client's connections fast. Generally, clients with ephemeral key support get this for free.” “Your client supports cipher suites that are known to be insecure: TLS_ECDHE_ECDSA_WITH_RC4_128_SHA: This cipher use RC4 which has insecure biases in its output. TLS_ECDHE_RSA_WITH_RC4_128_SHA: This cipher use RC4 which has insecure biases in its output. TLS_RSA_WITH_RC4_128_MD5: This cipher use RC4 which has insecure biases in its output. TLS_RSA_WITH_RC4_128_SHA: This cipher use RC4 which has insecure biases in its output.”
No other noticeable misbehavior.
Georg Koppen:
Hi,
Tor Browser 4.5.2-build1 is up at for testing:
https://people.torproject.org/~gk/builds/4.5.2-build1/
This release provides a fix for the Logjam attack (https://weakdh.org/) and updates a number of Tor Browser components: Tor to version 0.2.6.8, Torbutton to version 1.9.2.6, NoScript to version 2.6.9.26 and HTTPS-Everywhere to version 5.0.5. Moreover, it fixes a possible crash on Linux and avoids breaking the Add-ons page if Torbutton is disabled.
Here is the full change log:
Tor Browser 4.5.2 -- June 12 2015
- All Platforms
- Update Tor to 0.2.6.8
- Update HTTPS-Everywhere to 5.0.5
- Update NoScript to 2.6.9.26
- Update Torbutton to 1.9.2.6
- Bug 15984: Disabling Torbutton breaks the Add-ons Manager
- Bug 14429: Make sure the automatic resizing is disabled
- Translation updates
- Bug 16130: Defend against logjam attack
- Bug 15984: Disabling Torbutton breaks the Add-ons Manager
- Linux
- Bug 16026: Fix crash in GStreamer
- Bug 16083: Update comment in start-tor-browser
Georg
tor-qa mailing list tor-qa@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-qa