[tor-qa] 3.5.4-meek-1 (meek bundles with browser TLS camouflage)

[Wilton Gorske]

David Fifield:
> Please try these bundles, which are configured to run the meek transport
> automatically. What's different about these than past meek bundles, is
> that they use a web browser extension to make the HTTPS requests, so
> that the TLS layer looks like Firefox. They are built on top of the
> recent 3.5.4 release so they have the OpenSSL Heartbleed fix.
> 
> https://people.torproject.org/~dcf/pt-bundle/3.5.4-meek-1/
> 
> With luck, the bundles will work for you without any special
> configuration. If you look at your network traffic while you are using
> them, you will see some HTTPS connections to www.google.com, and nothing
> to any Tor bridge or any protocol other than HTTPS.
> 
> The bundle should take care of starting up the extension and killing it
> when it is done. If it doesn't, it is a bug. There is a known bug
> (#11429), which is that on Mac you will see two dock icons. The second
> one is the one that is running the extension.
> 
> David Fifield
> _______________________________________________
> tor-qa mailing list
> tor-qa at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-qa
> 

Testing: TorBrowserBundle-3.5.4-meek-1-osx32_en-US.zip
Platform: Mac OS X 10.9.2 (13C64)
Processor: 2.3GHz Intel Core i7
Memory: 16 GB 1600 MHz DDR3
Graphics: NVIDIA GeForce GT 750M 2048 MB
Display: 15-inch (2880 x 1800 Retina)

TBB Launches successfully: yes, *****but launches two browsers?
Connects to the Tor network: yes
Browser toolbars and menus work, tab dragging works: yes

All extensions are present and functional: yes
 - HTTPS-Everywhere 3.4.5
 - NoScript 2.6.8.17 *****Older version?
 - TorButton 1.6.7.0 *****Older version?
 - TorLauncher 0.2.5.1 *****Older version?

WebBrowsing works as expected
 - HTTP, HTTPS, .onion browsing works
 - HTML5 videos work on http://videojs.com/ and YouTube
 - http://ip-check.info/?lang=en - ok
 - https://panopticlick.eff.org/ - only one in 674,172 , 19.36 bits of
                                   identifying information
 - html5demos.com/web-socket - Not Connected / Socket Closed

SOCKS/external apps work as expected: yes (Torbirdy, Bitcoin-QT)

Noticeably slower.
SSL Client is bad according to https://www.howsmyssl.com/.
Connections to google.com, evintl-oscp.versigin.com, and
calendar.google.com.