{"id":102530,"date":"2021-12-09T15:36:49","date_gmt":"2021-12-09T13:36:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor"},"modified":"2021-12-09T15:36:49","modified_gmt":"2021-12-09T13:36:50","slug":"vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor","title":{"rendered":"Release of Tor Browser 11.0.2. Tor site blocking extension. Possible attacks on Tor.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

The release of the specialized Tor Browser 11.0.2 has been introduced, focusing on anonymity, security, and privacy. When using Tor Browser, all traffic is routed exclusively through the Tor network, making direct access through the system's regular network connection impossible, which prevents tracking the user's real IP address (in case of a browser breach, attackers could gain access to network system parameters, hence products like Whonix should be used to fully block potential leaks). Builds of Tor Browser are prepared for Linux, Windows, and macOS. <\/p>\n

To provide additional security, the Tor Browser includes the HTTPS Everywhere add-on, which enables traffic encryption on all sites where possible. To reduce the risk from JavaScript attacks and to block plugins by default, the NoScript add-on is also included. Alternative transports are used to combat traffic blocking and inspection. To prevent the exposure of visitor-specific features, APIs such as WebGL, WebGL2, WebAudio, Social, SpeechSynthesis, Touch, AudioContext, HTMLMediaElement, MediaStream, Canvas, SharedWorker, WebAudio, Permissions, MediaDevices.enumerateDevices, and screen.orientation are disabled or restricted, as well as telemetry sending tools, Pocket, Reader View, HTTP Alternative-Services, MozTCPSocket, 'link rel=preconnect', and the modified libmdns. <\/p>\n

The new version is synchronized with the codebase of Firefox 91.4.0, which fixes 15 vulnerabilities, 10 of which are marked as critical. Seven vulnerabilities are related to memory handling issues, such as buffer overflows and access to already freed memory areas, potentially allowing an attacker to execute malicious code by opening specially crafted pages. Some TTF fonts that disrupted text rendering in interface elements on Fedora Linux have been removed from the Linux build. The 'network.proxy.allow_bypass' setting, which controls the activity of the protection against improper use of the Proxy API in add-ons, has been disabled. A new gateway, 'deusexmachina', is now used by default for obfs4 transport. <\/p>\n

Meanwhile, the story of the Tor block in the Russian Federation continues. Roskomnadzor has changed the mask of blocked websites in its registry. domains<\/a> from 'www.torproject.org' to '*.torproject.org' and has expanded the list of blocked IP addresses. As a result of this change, most subdomains of the Tor project have been blocked, including blog.torproject.org, gettor.torproject.org, and support.torproject.org. The forum.torproject.net, hosted on Discourse infrastructure, remains accessible. Gitlab.torproject.org and lists.torproject.org are partially available, initially inaccessible but later restored, likely after an IP address change (gitlab is now directed to the host gitlab-02.torproject.org). <\/p>\n

At the same time, no blocks were noted for the Tor network gateways and nodes, as well as for the host ajax.aspnetcdn.com (Microsoft CDN), used in the meek-asure transport. Apparently, experiments with blocking Tor nodes were halted after the Tor website was blocked. A complex situation arises with the mirror tor.eff.org, which continues to operate. The thing is, the mirror tor.eff.org is tied to the same IP address<\/a>, which is used for the domain eff.org of the EFF (Electronic Frontier Foundation), so blocking tor.eff.org would lead to a partial blockage of the well-known human rights organization's website.

\"Release<\/center> <\/p>\n

Additionally, it is worth mentioning the release of a new report on possible attempts to conduct de-anonymization attacks on Tor users, linked to the KAX17 group, identified by specific dummy contact emails in the node parameters. During September and October, the Tor project blocked 570 potentially malicious nodes. At its peak, the KAX17 group managed to bring the number of controlled nodes in the Tor network to 900, hosted by 50 different providers, which accounts for approximately 14% of the total number of relays (in comparison, in 2014, attackers managed to gain control of nearly half of the Tor relays, and in 2020, 23.95% of exit nodes).

\"Release<\/center> <\/p>\n

The placement of a large number of nodes controlled by a single operator allows for the de-anonymization of users using a Sybil attack. This can be conducted if attackers have control over the first and last nodes in the anonymity chain. The first node in the Tor chain knows the user's IP address, while the last knows the IP address of the requested resource, which enables de-anonymization of the request by adding a specific hidden label in the packet headers on the entry node side, which remains unchanged throughout the entire anonymity chain, and analyzing this label on the exit node side. If attackers control exit nodes, they can also modify unencrypted traffic, for instance, by removing redirects to HTTPS versions of sites and intercepting unencrypted content. <\/p>\n

According to representatives of the Tor network, most of the remote nodes that were removed in the fall were used only as intermediate nodes, not for processing incoming and outgoing requests. Some researchers note that the nodes belonged to all categories, and the probability of encountering an entry node controlled by the KAX17 group was 16%, while for an exit node, it was 5%. However, even if this is true, the overall likelihood of a user simultaneously connecting to both an entry and an exit node from the 900 nodes controlled by KAX17 is estimated at 0.8%. There is no direct evidence of KAX17 nodes being used to carry out attacks, but such attacks cannot be ruled out.
\n
Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Tor Browser 11.0.2, \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0441\u0442\u0438, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0441\u0442\u0438. \u041f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 Tor Browser \u0432\u0435\u0441\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u044c Tor, \u0430 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u0448\u0442\u0430\u0442\u043d\u043e\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0447\u0442\u043e \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0439 IP-\u0430\u0434\u0440\u0435\u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f (\u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c \u0441\u0435\u0442\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":102531,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102530","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Release of Tor Browser 11.0.2. Extension for blocking Tor sites. Possible attacks on Tor | ProHoster","description":"The release of the specialized Tor Browser 11.0.2 has been presented, focusing on ensuring anonymity, security, and privacy.","canonical_url":"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Tor Browser 11.0.2. \u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0441\u0430\u0439\u0442\u043e\u0432 Tor. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 Tor | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Tor Browser 11.0.2, \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0441\u0442\u0438, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-12-09T13:36:50+00:00","article:modified_time":"2021-12-09T13:36:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102530","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-12-09 13:38:05","updated":"2026-02-11 11:12:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/102530","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=102530"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/102530\/revisions"}],"predecessor-version":[{"id":160563,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/102530\/revisions\/160563"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media\/102531"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=102530"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=102530"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=102530"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}