[tor-qa] 3.5.4-meek-1 (meek bundles with browser TLS camouflage)

[Colin C.]

On Fri, Apr 11, 2014 at 02:45:56PM -0700, David Fifield wrote:
> Please try these bundles, which are configured to run the meek transport
> automatically. What's different about these than past meek bundles, is
> that they use a web browser extension to make the HTTPS requests, so
> that the TLS layer looks like Firefox. They are built on top of the
> recent 3.5.4 release so they have the OpenSSL Heartbleed fix.
> 
> https://people.torproject.org/~dcf/pt-bundle/3.5.4-meek-1/
> 
> With luck, the bundles will work for you without any special
> configuration. If you look at your network traffic while you are using
> them, you will see some HTTPS connections to www.google.com, and nothing
> to any Tor bridge or any protocol other than HTTPS.
> 
> The bundle should take care of starting up the extension and killing it
> when it is done. If it doesn't, it is a bug. There is a known bug
> (#11429), which is that on Mac you will see two dock icons. The second
> one is the one that is running the extension.
> 
> David Fifield
> _______________________________________________
> tor-qa mailing list
> tor-qa at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-qa
Testing: tor-browser-linux64-3.5.4-meek-1_en-US.tar.xz
Platform: Debian Wheezy
Processor: Intel(R) Core(TM) i5-2450M CPU @ 2.50GHz

TBB Launches successfully - OK
Connects to the Tor network - OK
Browser toolbars and menus work. Tab dragging works. - OK
DNS - No leaks observed (wireshark)

OpenSSL - 1.0.1g

All extensions are present and functional -  OK
 - HTTPS-Everywhere 3.4.5
 - NoScript 2.6.8.17
 - Torbutton 1.6.7.0
 - TorLauncher 0.2.5.1

WebBrowsing works as expected - OK
 - HTTP, HTTPS, .onion browsing works
 - HTML5 videos work
 - ip-check.info - OK
 - samy.pl/evercookie - OK (new identity clears cookie)
 - phoul.github.io - websocket enabled

Other notes:
 - HTTPS-Everywhere & NoScript both auto-updated.