[urgent] new packages available for Tor 0.2.3.25 and 0.2.4.6-alpha

Hi everyone, Due to a variety of reasons these packages have been very delayed, but they're available now and I would sincerely appreciate if I could get feedback about them as soon as possible. I will be releasing them tomorrow, Dec. 3, around 20:00 UTC unless I hear about showstopper bugs by then. The 0.2.3.25 packages have a new Tor stable release (yay!), as well as a new Vidalia 0.2.21 and the latest Firefox 10.0.11esr. Please pay special attention to any interaction between Tor and Vidalia and run things for a while to make sure nothing funny happens. Packages: https://people.torproject.org/~erinn/qa/stable/2.3.25-1/ sha256sums: https://people.torproject.org/~erinn/qa/stable/2.3.25-1/sha256sums-0.2.3.25.... There's also a bunch of new alpha packages and I'd love if people could make sure the obfsproxy bundles still work as well as the old ones: Packages: https://people.torproject.org/~erinn/qa/alpha/2.4.6-alpha/ sha256sums: https://people.torproject.org/~erinn/qa/alpha/2.4.6-alpha/sha256sums-0.2.4.6... Thanks, Erinn

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
sha256sums: https://people.torproject.org/~erinn/qa/stable/2.3.25-1/sha256sums-0.2.3.25....
Where
can I find the sha256sums-0.2.3.25.txt containing the actual SHA256sums, or am I misunderstanding something here?
sha256sums: https://people.torproject.org/~erinn/qa/alpha/2.4.6-alpha/sha256sums-0.2.4.6... -----BEGIN PGP SIGNATURE-----
iF4EAREKAAYFAlC7wg4ACgkQyM26BSNOM7Z9/gEAqoG0pexXpo8w2nguqD8tEyky +T4VDKu/2M21NnVMWrsA/RK2Wjh7gjx6f6W0exlYd+xvIr6JkxLXQk4mBh/nw1vz =dxb+ -----END PGP SIGNATURE-----

* tagnaq <tagnaq@gmail.com> [2012:12:02 22:03 +0100]:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
sha256sums: https://people.torproject.org/~erinn/qa/stable/2.3.25-1/sha256sums-0.2.3.25....
Where
can I find the sha256sums-0.2.3.25.txt containing the actual SHA256sums, or am I misunderstanding something here?
My mistake -- I accidentally signed them the way I sign packages instead of clearsigning like I meant to. It should be fixed now.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Erinn Clark:
Hi everyone,
Due to a variety of reasons these packages have been very delayed, but they're available now and I would sincerely appreciate if I could get feedback about them as soon as possible. I will be releasing them tomorrow, Dec. 3, around 20:00 UTC unless I hear about showstopper bugs by then.
The 0.2.3.25 packages have a new Tor stable release (yay!), as well as a new Vidalia 0.2.21 and the latest Firefox 10.0.11esr. Please pay special attention to any interaction between Tor and Vidalia and run things for a while to make sure nothing funny happens.
Packages: https://people.torproject.org/~erinn/qa/stable/2.3.25-1/ sha256sums: https://people.torproject.org/~erinn/qa/stable/2.3.25-1/sha256sums-0.2.3.25....
There's also a bunch of new alpha packages and I'd love if people
could make sure the obfsproxy bundles still work as well as the old ones:
Packages: https://people.torproject.org/~erinn/qa/alpha/2.4.6-alpha/ sha256sums: https://people.torproject.org/~erinn/qa/alpha/2.4.6-alpha/sha256sums-0.2.4.6...
Thanks, Erinn
_______________________________________________ tor-qa mailing list tor-qa@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-qa
Testing: tor-browser-gnu-linux-x86_64-2.3.25-1-dev-en-US.tar.gz Platform: Fedora 17 Processor: Intel(R) Core(TM) i5-2450M CPU @ 2.50GHz TBB Launches successfully - OK Connects to the Tor network - OK Browser toolbars and menus work. Tab dragging works. - OK DNS - No leaks observed (wireshark) All extensions are present and functional - OK - HTTPS-Everywhere 3.0.4 - NoScript 2.6.2 - TorButton 1.4.6.3 WebBrowsing works as expected - OK - HTTP, HTTPS, .onion browsing works - HTML5 videos work - ip-check.info - OK - samy.pl/evercookie - OK (new identity clears cookie) - html5demos.com/web-socket - Not Connected / Socket Closed Other Issues: Docs/README-TorBrowserBundle states the NoScript version is 2.6.1 - -- - -Phoul -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBAgAGBQJQu8+uAAoJEJ01Zvx7KO7YfrcP/1ALnyMgvAjqKzX1iNfse3C7 Xi8W8HPPmaY4imbMpdq0p9Zb0locS69+UXtQkMXxNsCnQIUnsBLAoOWUWCTs5X+s 6h9lD5OLpCYBtu9bRfh99LUa/9UOu0BvXcU329Rz5PRv7yccZfG3epEmKYVkezaw eqiefcqw7RSzsuBoTDt5BzpdalOmqx2FAU60F6tHR31fbdO3nuTM73SSL7DM+2uv CmKTndzTT7vPl2WnrzbcsvoqY4nsIKt1k+5QFRBaSTm4Ao4FCKj4LVyAdPsRY6gK TCrWspfAtFkBWpvSwfgiO+NMr+F1Wpn+KMrhqUvDWQZpEf9RLsNyK1V9clKc/gPA M3R25dlEeIJVxpQoTk9lKBFPZi2PyUh1gUq+nXLsVaofy3YkJ7lsnm9JBFkaE0XE rUSo15O+zHHPekGWDZ8WK+XY0XNezclAQ3bbrLYAc9N5eguYlqFrHAST6jZ7oPOE FaI2jqmvKNPj2LpUuLseBFDrAHPNonlUc1/W+I89/PFV9xKvqWK9LE0v9W0611UI owT75DLm+vibzx5/J4tvaps+x6lidyYGFPpQlqrGU+a07gq0yAXNvQxaM2V5YNFI rVOYt/gSq5xiIpMH3wUkpQeLnL5OsgCX4pXlL/ttrTSAoXr4sndu9EYXdNSnZFSv pDoMydHk1l2coYitMw/k =scGs -----END PGP SIGNATURE-----

On 12/02/2012 03:32 PM, Erinn Clark wrote:
Hi everyone,
Due to a variety of reasons these packages have been very delayed, but they're available now and I would sincerely appreciate if I could get feedback about them as soon as possible. I will be releasing them tomorrow, Dec. 3, around 20:00 UTC unless I hear about showstopper bugs by then.
The 0.2.3.25 packages have a new Tor stable release (yay!), as well as a new Vidalia 0.2.21 and the latest Firefox 10.0.11esr. Please pay special attention to any interaction between Tor and Vidalia and run things for a while to make sure nothing funny happens.
Packages: https://people.torproject.org/~erinn/qa/stable/2.3.25-1/ sha256sums: https://people.torproject.org/~erinn/qa/stable/2.3.25-1/sha256sums-0.2.3.25....
There's also a bunch of new alpha packages and I'd love if people could make sure the obfsproxy bundles still work as well as the old ones:
Packages: https://people.torproject.org/~erinn/qa/alpha/2.4.6-alpha/ sha256sums: https://people.torproject.org/~erinn/qa/alpha/2.4.6-alpha/sha256sums-0.2.4.6...
Thanks, Erinn
_______________________________________________ tor-qa mailing list tor-qa@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-qa
Hi Erinn, Testing: tor-browser-gnu-linux-x86_64-2.3.25-1-dev-en-US.tar.gz OS: Gentoo Linux Processor: Intel(R) Core(TM)2 Duo CPU T9500 @ 2.60GHz Functionality: Successfully launches Connects to Tor network Browser menus and toolbars appear to work Tab dragging works All extensions are present and appear to be functional Documentation: Docs/changelog - has not been updated Docs/README-TorBrowserBundle - Vidalia version has not been updated Tor version has not been updated Test Pages: Single state testing: Decloak.net - Connection timed out deanonymizer.com - Blank page ip-check.info - Bad ratings: Cache (E-Tags) Tab name Privacy Analyzer - Nothing seemed to have leaked, but I'm not sure if I should have looked for something specific. Mr. T - Nothing seemed to have leaked, but I'm not sure if I should have looked for something specific. Also "Derived Information: It appears you are not using Tor" - Something must be broken in their test Torbutton Tests - Passed all tests TorCheck - "Your IP is identified to be a Tor-EXIT. So you are using Tor successfully to reach the web!" EverCookie - Removed on 'New Identity' HTML5demos - Not Connected / Socket Closed Youtube - Successfully plays on click DnsLeaksTest - All listed DNS servers appeared to be those used by the exit node BrowserLeaks - Passed all Thanks for packaging this bundle! - Matt

Erinn Clark:
Hi everyone,
Due to a variety of reasons these packages have been very delayed, but they're available now and I would sincerely appreciate if I could get feedback about them as soon as possible. I will be releasing them tomorrow, Dec. 3, around 20:00 UTC unless I hear about showstopper bugs by then.
The 0.2.3.25 packages have a new Tor stable release (yay!), as well as a new Vidalia 0.2.21 and the latest Firefox 10.0.11esr. Please pay special attention to any interaction between Tor and Vidalia and run things for a while to make sure nothing funny happens.
Packages: https://people.torproject.org/~erinn/qa/stable/2.3.25-1/ sha256sums: https://people.torproject.org/~erinn/qa/stable/2.3.25-1/sha256sums-0.2.3.25....
Testing: tor-browser-gnu-linux-x86_64-2.3.25-1-dev-en-US.tar.gz Platform: Debian 6.0.6 Processor: Intel(R) Pentium(R) CPU B950 @ 2.10GHz TBB Launches successfully - OK Connects to the Tor network - OK Browser toolbars and menus work. Tab dragging works - OK All extensions are present and functional - OK - HTTPS-Everywhere 3.0.4 - NoScript 2.6.2 - TorButton 1.4.6.3 WebBrowsing works as expected - HTTP, HTTPS, .onion browsing works - HTML5 videos work (http://videojs.com/) - http://ip-check.info/?lang=en - OK - https://panopticlick.eff.org/ - Your browser fingerprint appears to be unique among the 2,546,691 tested so far, 21.28 bits of identifying information Vidalia settings - Use static control/SOCKS port - OK -- kat

On 12/02/2012 03:32 PM, Erinn Clark wrote:
Hi everyone,
Due to a variety of reasons these packages have been very delayed, but they're available now and I would sincerely appreciate if I could get feedback about them as soon as possible. I will be releasing them tomorrow, Dec. 3, around 20:00 UTC unless I hear about showstopper bugs by then.
The 0.2.3.25 packages have a new Tor stable release (yay!), as well as a new Vidalia 0.2.21 and the latest Firefox 10.0.11esr. Please pay special attention to any interaction between Tor and Vidalia and run things for a while to make sure nothing funny happens.
Packages: https://people.torproject.org/~erinn/qa/stable/2.3.25-1/ sha256sums: https://people.torproject.org/~erinn/qa/stable/2.3.25-1/sha256sums-0.2.3.25....
There's also a bunch of new alpha packages and I'd love if people could make sure the obfsproxy bundles still work as well as the old ones:
Packages: https://people.torproject.org/~erinn/qa/alpha/2.4.6-alpha/ sha256sums: https://people.torproject.org/~erinn/qa/alpha/2.4.6-alpha/sha256sums-0.2.4.6...
Thanks, Erinn
_______________________________________________ tor-qa mailing list tor-qa@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-qa
Testing: tor-browser-2.3.25-1-en-US.exe OS: Windows Vista SP2 32-bit Processor: AMD Turion 64 X2 Mobile Technology TL-56 1.80GHz Functionality: Successfully launches Connects to Tor network Browser menus and toolbars appear to work Tab dragging works All extensions are present and appear to be functional Documentation: Docs/changelog - has not been updated Docs/README-TorBrowserBundle - Vidalia version has not been updated Tor version has not been updated Test Pages: Single state testing: Decloak.net - Connection timed out deanonymizer.com - Blank page ip-check.info - Bad ratings: Cache (E-Tags) Tab name Privacy Analyzer - No cookies, no leaks Mr. T - No leaks Generic browser details No Firefox plugin detected No history available Torbutton Tests - Passed all tests TorCheck - "Your IP is identified to be a Tor-EXIT. So you are using Tor successfully to reach the web!" EverCookie - Removed on 'New Identity' HTML5demos - Not Connected / Socket Closed Youtube - Successfully plays on click DnsLeaksTest - No leaks in wireshark dump BrowserLeaks - Passed all Thanks for packaging this bundle! - Matt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Erinn Clark:
Hi everyone,
Due to a variety of reasons these packages have been very delayed, but they're available now and I would sincerely appreciate if I could get feedback about them as soon as possible. I will be releasing them tomorrow, Dec. 3, around 20:00 UTC unless I hear about showstopper bugs by then.
The 0.2.3.25 packages have a new Tor stable release (yay!), as well as a new Vidalia 0.2.21 and the latest Firefox 10.0.11esr. Please pay special attention to any interaction between Tor and Vidalia and run things for a while to make sure nothing funny happens.
Packages: https://people.torproject.org/~erinn/qa/stable/2.3.25-1/ sha256sums: https://people.torproject.org/~erinn/qa/stable/2.3.25-1/sha256sums-0.2.3.25....
There's also a bunch of new alpha packages and I'd love if people could make sure the obfsproxy bundles still work as well as the old ones:
Packages: https://people.torproject.org/~erinn/qa/alpha/2.4.6-alpha/ sha256sums: https://people.torproject.org/~erinn/qa/alpha/2.4.6-alpha/sha256sums-0.2.4.6...
Thanks, Erinn
_______________________________________________ tor-qa mailing list tor-qa@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-qa
Testing: tor-obfsproxy-browser-gnu-linux-x86_64-2.4.6-alpha-1-dev-en-US.tar.gz tor-browser-gnu-linux-x86_64-2.4.6-alpha-1-dev-en-US.tar.gz Platform: Fedora 17 Processor: Intel(R) Core(TM) i5-2450M CPU @ 2.50GHz TBB Launches successfully - OK Connects to the Tor network - OK Browser toolbars and menus work. Tab dragging works. - OK DNS - No leaks observed (wireshark) All extensions are present and functional - OK - HTTPS-Everywhere 4.0development.2 - NoScript 2.6.2 - TorButton 1.4.6.3 WebBrowsing works as expected - OK - HTTP, HTTPS, .onion browsing works - HTML5 videos work - ip-check.info - OK - samy.pl/evercookie - OK (new identity clears cookie) - html5demos.com/web-socket - Not Connected / Socket Closed Other Issues: Docs/README-TorBrowserBundle lists HTTPS-Everywhere version as 3.0.4 Docs/README-TorBrowserBundle lists Tor version as 0.2.3.25 - -- - -Phoul -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBAgAGBQJQvMIlAAoJEJ01Zvx7KO7Y6xQQAMCsMcXO5smoGcwuQeeGD7+C xgK1PrKuvJZvjLHECnW8NoGhoaimEAC6rWKvc51XCHFszdNDyjTKXX1MUHbNvlCD KsumKlwhi7UrpOiPlzE4NWd4lWaNCNRZvao1GKd+1kdHiHvArntVZk7hAiDH3t7Z Hp3dx7miJSUHbs3Et8xE+Fgs74r3Dzt/Ao0qoV48RQx6QEKybHAxGZQ4/6Iey4ld c78G8HtpsSaiEe6vtzxoZfU+wq96p18lqYQMpQ9HJAipqrEjyhA/bpAUuZn/8SER rUdK+Oog98EKycLu/5rta3qC42tRAPFOyBDaQkbmKX4CkpEjiXQKABIdej3qQR6F 0+UAD6HIBt2NWh5GewFOm5fmtx0hiSGqNbjAO8d1Gki/lc6Zo8kTynwvXtyFGX5d gNtZMRIqbuJ25lqvyAoKRqIXBuYfKJqeYa8XmsMDeV2k4mvE18mq2AINrURStEKl IbtCMMSGEF3lcwD2cCxtics8Gm0R0q0EePn5v1qXKQxbGR7u0iuuFbcxWg/+SYCl kYdAvNLy6nBCv/QMZFUUSZflScG/F5+xUe52+aFUixdwLPLlJ95EFpGjn3hU78/u affyRtu3CEz69TiqYEnFYztcEF/hpBR1NjIxCTIlHR1V2Njvsw3iD1EmvaLpufdT Bpxp/wkuSpedhRgkEJrw =NmWK -----END PGP SIGNATURE-----

* Colin C. <admin@insecure-complexity.com> [2012:12:03 09:15 -0600]:
Other Issues: Docs/README-TorBrowserBundle lists HTTPS-Everywhere version as 3.0.4 Docs/README-TorBrowserBundle lists Tor version as 0.2.3.25
Thanks for catching this, Colin and Matthew. I've committed an update that will make the bundles use the right files and will rebuild. I don't think we need further testing afterwards.
participants (5)
-
Colin C.
-
Erinn Clark
-
Katya Titov
-
Matthew Finkel
-
tagnaq