Georg Koppen:

Hi,

we are about to start a hardened Tor Browser series and the first nightly for it is ready to get tested (on 64bit Linux systems):

https://people.torproject.org/~gk/testbuilds/tor-browser-linux64-tbb-nightly... https://people.torproject.org/~gk/testbuilds/tor-browser-linux64-tbb-nightly...

Very nice!

Are there any plans on a 32-bit Linux build soon? Nightly? We're quite interested trying this out in Tails which, sadly, only has a 32-bit user land (although it ships a 64-bit kernel, too).

Any way I tried it briefly on Debian Jessie with much success:

* Watching cats videos on YouTube in 720p without stuttering: Check! :) * Done!

Seriously, though, I subjectively did notice some slowdowns on bloaty, ad-heavy sites (think: news papers). I guess that is to be expected. Also, when I exited I got:

ASAN:SIGSEGV ================================================================= ==8134==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x000000000000 bp 0x7ff4e4eeeffa sp 0x7ffdad284918 T0) ==8134==Hint: pc points to the zero page.

AddressSanitizer can not provide additional info.

and then ~a minute of nothing with the process still running, and then:

ASAN:SIGSEGV ==8294==AddressSanitizer: while reporting a bug found another one. Ignoring.

and then ~another minute of nothing, and then the process exited (code = 1). I can reproduce this every time.

Cheers!

Georg Koppen:

3. the locales we ship/support are included in one bundle allowing to

choose the locale for Tor Browser on start-up

[...]

P.S.: One bug I already found is related to the fact that the set of locales we include in the nightlies is not the same as Tor Launcher is assuming. Thus, 3) only works properly while choosing one of en-US, ar, ru, ja and zh-CN (and having the OS locale be one of them, too). This is bug 17399.

I noticed a locale-related bug that will be relevant for Tails, but perhaps not the vanilla Tor Browser.

Background: in Tails we will run the Tor Browser without Tor Launcher, and with intl.locale.matchOS = true so the locale that the user picked in our Greeter is used. So we won't have the language selection dialog, and the user can pick a locale that isn't available in that dialog.

When an unsupported locale is used, about:tor is broken:

XML Parsing Error: undefined entity Location: jar:file:///XXX/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/extensions/torbutton@torproject.org.xpi!/chrome/content/aboutTor/aboutTor.xhtml Line Number 207, Column 3: <form action="&aboutTor.searchDCPost.link;" method="post"> --^

This happens, for instance, with these locales:

export LANG="fi_FI.UTF-8" export LANG="fur_IT.UTF-8" export LANG="wx_YZ.UTF-8"

So I'm not sure if this is somehow related to #17399 (or #17344). Should I report this as a new bug?

Cheers!

Georg Koppen:

Hi,

we are about to start a hardened Tor Browser series and the first nightly for it is ready to get tested (on 64bit Linux systems):

https://people.torproject.org/~gk/testbuilds/tor-browser-linux64-tbb-nightly... https://people.torproject.org/~gk/testbuilds/tor-browser-linux64-tbb-nightly...

Its major features are:

1. expensive hardening for tor (ASan, UBSan...)
2. ASan for the browser
3. the locales we ship/support are included in one bundle allowing to

choose the locale for Tor Browser on start-up

We plan to have something like 3) for the regular alpha and stable series in the (near) future as well. Thus, testing it and providing feedback is extra welcome.

Works well with my standard suite of tests. Does seem a little slow, though. I can't quantify it, but it "feels" slow. Using external apps with torsocks seems OK, so it's probably FF and not Tor.

I'm seeing a lot (dozens) of these errors when using --debug:

(firefox:675): GLib-GObject-WARNING **: /tmp/buildd/glib2.0-2.42.1/./gobject/gsignal.c:3410: signal name 'text-remove::system' is invalid for instance '0x61d002479000' of type 'MaiAtkType27'

(firefox:675): GLib-GObject-WARNING **: /tmp/buildd/glib2.0-2.42.1/./gobject/gsignal.c:3410: signal name 'text-insert::system' is invalid for instance '0x61d002479000' of type 'MaiAtkType27'

(firefox:675): GLib-GObject-WARNING **: /tmp/buildd/glib2.0-2.42.1/./gobject/gsignal.c:3410: signal name 'text-remove::system' is invalid for instance '0x61d002f070a0' of type 'MaiAtkType27'

Also seeing occasional:

(firefox:675): GLib-GObject-WARNING **: /tmp/buildd/glib2.0-2.42.1/./gobject/gsignal.c:3410: signal name 'text_selection_changed' is invalid for instance '0x61d002479000' of type 'MaiAtkType27'

Running on Debian 8.2