An samar da wani gagarumin saki na ƙwararrun burauzar Tor Browser 13.0, inda aka yi sauye-sauye zuwa reshen ESR na Firefox 115. Mai binciken yana mai da hankali kan tabbatar da rashin sanin suna, tsaro da sirri, duk zirga-zirgar ababen hawa ana jujjuya su ne kawai ta hanyar hanyar sadarwar Tor. Ba shi yiwuwa a tuntuɓar kai tsaye ta hanyar daidaitattun hanyar sadarwa na tsarin na yanzu, wanda baya ba da izinin bin diddigin adireshin IP na ainihi na mai amfani (idan an yi kutse mai bincike, maharan na iya samun damar yin amfani da sigogin cibiyar sadarwar tsarin, don haka samfuran kamar Whonix yakamata a yi amfani da su. don toshe gaba ɗaya yiwuwar leaks). An shirya ginin Tor Browser don Linux, Android, Windows da macOS.
Don samar da ƙarin tsaro, Tor Browser ya haɗa da saitin “HTTPS Only”, wanda ke ba ka damar yin amfani da ɓoyayyen ɓoyayyiyar hanya a duk rukunin yanar gizon inda zai yiwu. Don rage barazanar hare-haren JavaScript da toshe plugins ta tsohuwa, an haɗa ƙarar NoScript. Don magance hana zirga-zirga da dubawa, ana amfani da fteproxy da obfs4proxy.
Don tsara hanyar sadarwar rufaffiyar hanyar sadarwa a cikin mahallin da ke toshe duk wani zirga-zirga ban da HTTP, ana ba da shawarar jigilar jigilar kayayyaki, wanda, alal misali, ba ku damar ketare yunƙurin toshe Tor a China. Don karewa daga bin diddigin motsin mai amfani da takamaiman fasali na baƙo, WebGL, WebGL2, WebAudio, Social, SpeechSynthesis, Touch, AudioContext, HTMLMediaElement, Mediastream, Canvas, SharedWorker, WebAudio, Izini, MediaDevices.enumerateNa'urori, da ƙayyadaddun APIs an kashe su ko iyakancewar allo. daidaitawa, da naƙasassun kayan aikin aika telemetry, Aljihu, Duba Karatu, Sabis na Alternative HTTP, MozTCPSocket, “link rel=preconnect”, libmdns da aka gyara.
A cikin sabon sigar:
- Canzawa zuwa Firefox 115 ESR codebase da bargaren tor 0.4.8.7 an yi. A lokacin sauye-sauye zuwa sabon sigar Firefox, an gudanar da binciken sauye-sauyen da aka yi tun bayan bayyanar reshen ESR na Firefox 102, kuma an kashe facin da ake tambaya ta fuskar tsaro da sirri. Daga cikin wasu abubuwa, an maye gurbin lambar canza kirtani-zuwa-biyu, aikin musayar hanyoyin haɗin gwiwar kwanan nan an kashe shi, API don adana PDF an kashe shi, sabis da keɓancewa don ɓoye banners na tabbatar da Kuki an cire su. kuma an cire ma'anar gane rubutu.
- An sabunta gumakan kuma an tace tambarin aikace-aikacen, yayin da ake ci gaba da sanin su.
- An gabatar da sabon aiwatar da shafin gida ("game da: tor"), sananne don ƙarin tambari, ƙayyadaddun ƙira da barin sandar bincike kawai da maɓallin "albasa" don samun damar DuckDuckGo ta hanyar sabis na albasa. Mayar da shafi na gida ya inganta tallafi ga masu karanta allo da fasalulluka masu isarwa. An kunna nuna alamar alamar shafi. An warware matsala tare da "jajen allo na mutuwa" wanda ya faru saboda gazawar yayin duba haɗin yanar gizon Tor.
Ya zama:
Ya kasance:
- Girman sabbin windows an haɓaka kuma yanzu ya ɓace zuwa yanayin yanayin da ya fi dacewa ga masu amfani da allo. Don hana bayanan girman allo da yabo, Tor Browser yana amfani da hanyar akwatin akwatin wasiƙa wanda ke ƙara ƙarar abubuwan cikin shafukan yanar gizo. A cikin nau'ikan da suka gabata, yayin da taga ya canza girman, wurin da ke aiki zai yi girma a cikin 200x100 pixel increments, amma an iyakance shi zuwa matsakaicin ƙuduri na 1000x1000, wanda saboda ƙarancin girmansa ya haifar da matsala tare da wasu rukunin yanar gizon da ke nuna madaidaicin gungurawa ko nuna kwamfutar hannu. sigar da na'urorin hannu. Don magance wannan matsala, an ƙara matsakaicin ƙuduri zuwa 1400x900 kuma an canza madaidaicin matakin mataki-mataki.
- An yi sauyi zuwa sabon tsarin sawa fakitin da ya yi daidai da tsarin "${ARTIFACT}-${OS}-${ARCH}-${VERSION}.${EXT}". Misali, an tura ginin macOS a baya azaman “TorBrowser-12.5-macos_ALL.dmg” kuma yanzu shine “tor-browser-macos-13.0.dmg”.
- Lokacin zabar yanayin "Mafi Aminci" don bincika ta DuckDuckGo, shafin yanzu ana samun dama ba tare da JavaScript ba.
- Ingantacciyar kariya daga leaks ta hanyar WebRTC.
- An kunna share sigogin URL da aka yi amfani da su don bin diddigin motsi (misali, ma'aunin mc_eid da fbclid da ake amfani da su lokacin ana cire hanyoyin haɗin yanar gizo daga shafukan Facebook).
- An cire saitin javascript.options.large_arraybuffers.
- An kashe saitin browser.tabs.searchclipboardfor.middleclick akan dandalin Linux.
source: budenet.ru