An samar da wani gagarumin sakin mashigar mai bincike na musamman Tor Browser 11.0, inda aka canza sheka zuwa reshen ESR na Firefox 91. Mai binciken yana mai da hankali kan tabbatar da rashin sanin suna, tsaro da sirri, duk zirga-zirgar ababen hawa ana karkatar da su ne kawai ta hanyar hanyar sadarwar Tor. Ba shi yiwuwa a tuntuɓar kai tsaye ta hanyar daidaitattun hanyar sadarwa na tsarin na yanzu, wanda baya ba da izinin bin diddigin adireshin IP na ainihi na mai amfani (idan an yi kutse mai bincike, maharan na iya samun damar yin amfani da sigogin cibiyar sadarwar tsarin, don haka samfuran kamar Whonix yakamata a yi amfani da su. don toshe gaba ɗaya yiwuwar leaks). An shirya ginin Tor Browser don Linux, Windows da macOS. Ci gaban sabon sigar Android ya jinkirta.
Don samar da ƙarin tsaro, Tor Browser ya haɗa da HTTPS ko'ina add-on, wanda ke ba ku damar amfani da ɓoyayyen hanya akan duk rukunin yanar gizon inda zai yiwu. Don rage barazanar hare-haren JavaScript da toshe plugins ta tsohuwa, an haɗa ƙarar NoScript. Don magance hana zirga-zirga da dubawa, ana amfani da fteproxy da obfs4proxy.
Don tsara hanyar sadarwar rufaffiyar hanyar sadarwa a cikin mahallin da ke toshe duk wani zirga-zirga ban da HTTP, ana ba da shawarar jigilar jigilar kayayyaki, wanda, alal misali, ba ku damar ketare yunƙurin toshe Tor a China. Don karewa daga bin diddigin motsin mai amfani da takamaiman fasali na baƙo, WebGL, WebGL2, WebAudio, Social, SpeechSynthesis, Touch, AudioContext, HTMLMediaElement, Mediastream, Canvas, SharedWorker, WebAudio, Izini, MediaDevices.enumerateNa'urori, da ƙayyadaddun APIs an kashe su ko iyakancewar allo. daidaitawa, da naƙasassun kayan aikin aika telemetry, Aljihu, Duba Karatu, Sabis na Alternative HTTP, MozTCPSocket, “link rel=preconnect”, libmdns da aka gyara.
A cikin sabon sigar:
- Canji zuwa Firefox 91 ESR codebase da sabon reshe na tor 0.4.6.8 an yi.
- Ƙididdigar mai amfani tana nuna mahimman canje-canjen ƙira da aka tsara a Firefox 89. An sabunta gumakan gumaka, an haɗa salon abubuwa daban-daban, an sake fasalin palette mai launi, an canza ƙirar mashigin shafin, an sake fasalin menu. , An cire menu na "..." da aka gina a cikin adireshin adireshin, an canza zane-zane na bayanan bayanan, da kuma maganganun maganganu tare da gargadi, tabbatarwa da buƙatun.
Daga cikin canje-canjen mu'amala na musamman ga Tor Browser, mun lura da sabunta ƙirar allon haɗin yanar gizo zuwa cibiyar sadarwar Tor, nunin zaɓaɓɓun sarƙoƙi na nodes, ƙirar zaɓin matakin tsaro, da shafuka masu kurakurai yayin sarrafa haɗin albasa. An sake tsara shafin "about:torconnect".
- An aiwatar da sabon tsarin TorSettings, wanda ya haɗa da ayyuka da ke da alhakin canza takamaiman saitunan Tor Browser a cikin mai daidaitawa (game da: fifiko #tor).
- Taimakon tsofaffin sabis na albasa bisa tsarin yarjejeniya na biyu, wanda aka ayyana cewa ya daina aiki shekara daya da rabi da suka gabata, ya daina. Lokacin da kuke ƙoƙarin buɗe tsohuwar adireshin albasa mai haruffa 16, kuskuren “Adreshin Gidan yanar gizon Albasa mara inganci” yanzu za a nuna. An haɓaka sigar yarjejeniya ta biyu game da shekaru 16 da suka gabata kuma, saboda amfani da tsoffin algorithms, ba za a iya ɗaukar lafiya a yanayin zamani ba. Shekaru biyu da rabi da suka gabata, a cikin sakin 0.3.2.9, an ba masu amfani da sigar ta uku na ka'idar don sabis na albasa, sananne don canzawa zuwa adiresoshin haruffa 56, ƙarin amintaccen kariya daga leaks ɗin bayanai ta hanyar sabar directory, ingantaccen tsari na zamani. da kuma amfani da SHA3, ed25519 da curve25519 algorithms maimakon SHA1, DH da RSA-1024.
source: budenet.ru