Bayan watanni 8 na ci gaba, an gabatar da gagarumin sakin mai bincike na musamman na Tor Browser 11.5, wanda ke ci gaba da ci gaba da aiki bisa ga reshen ESR na Firefox 91. Mai binciken yana mayar da hankali ga tabbatar da rashin sani, tsaro da sirri, duk zirga-zirgar zirga-zirgar ana tura su kawai ta hanyar hanyar sadarwar Tor. Ba shi yiwuwa a shiga kai tsaye ta hanyar daidaitattun hanyar sadarwa na tsarin na yanzu, wanda baya ba da izinin bin diddigin ainihin IP na mai amfani (idan an yi kutse mai bincike, maharan na iya samun damar yin amfani da sigogin cibiyar sadarwar tsarin, don haka samfuran kamar Whonix ya kamata a yi amfani da su. gaba daya toshe yiwuwar leaks). An shirya ginin Tor Browser don Linux, Windows da macOS.
Don samar da ƙarin tsaro, Tor Browser ya haɗa da HTTPS ko'ina add-on, wanda ke ba ku damar amfani da ɓoyayyen hanya akan duk rukunin yanar gizon inda zai yiwu. Don rage barazanar hare-haren JavaScript da toshe plugins ta tsohuwa, an haɗa ƙarar NoScript. Don magance hana zirga-zirga da dubawa, ana amfani da fteproxy da obfs4proxy.
Don tsara hanyar sadarwar rufaffiyar hanyar sadarwa a cikin mahallin da ke toshe duk wani zirga-zirga ban da HTTP, ana ba da shawarar jigilar jigilar kayayyaki, wanda, alal misali, ba ku damar ketare yunƙurin toshe Tor a China. Don karewa daga bin diddigin motsin mai amfani da takamaiman fasali na baƙo, WebGL, WebGL2, WebAudio, Social, SpeechSynthesis, Touch, AudioContext, HTMLMediaElement, Mediastream, Canvas, SharedWorker, WebAudio, Izini, MediaDevices.enumerateNa'urori, da ƙayyadaddun APIs an kashe su ko iyakancewar allo. daidaitawa, da naƙasassun kayan aikin aika telemetry, Aljihu, Duba Karatu, Sabis na Alternative HTTP, MozTCPSocket, “link rel=preconnect”, libmdns da aka gyara.
A cikin sabon sigar:
- An ƙara hanyar haɗin haɗin kai don sarrafa saitin keɓance hanyar toshe hanyar sadarwar Tor. A baya can, idan an tantance zirga-zirga, mai amfani dole ne ya samu da hannu ya kunna nodes ɗin gada a cikin saitunan. A cikin sabon sigar, toshe hanyar wucewa ana saita ta atomatik, ba tare da canza saituna da hannu ba - idan akwai matsalolin haɗin gwiwa, ana la'akari da abubuwan toshewa a cikin ƙasashe daban-daban kuma an zaɓi mafi kyawun hanyar ketare su. Dangane da wurin mai amfani, ana ɗora nauyin saitin saitin da aka shirya don ƙasarsa, ana zaɓin madadin jigilar aiki, kuma ana haɗa haɗin kai ta nodes na gada.
Don ɗora lissafin nodes ɗin gada, ana amfani da kayan aikin moat, wanda ke amfani da dabarar “yanki fronting”, ainihin abin shine tuntuɓar ta HTTPS wanda ke nuna ma'aikacin ƙirƙira a cikin SNI kuma a zahiri yana watsa sunan mai masaukin da aka nema a cikin HTTP Mai watsa shiri a cikin zaman TLS (misali, zaku iya amfani da abun ciki na isar da saƙo don ketare toshewa).
- An canza ƙirar sashin daidaitawa tare da saituna don sigogin cibiyar sadarwar Tor. Canje-canjen ana nufin sauƙaƙe tsarin tsarin toshewa a cikin mai daidaitawa, wanda ana iya buƙata idan akwai matsaloli tare da haɗin kai ta atomatik. Sashen saitin Tor an sake masa suna zuwa “Connection settings”. A saman shafin saituna, ana nuna halin haɗin kai na yanzu kuma ana ba da maɓalli don gwada aikin haɗin kai tsaye (ba ta Tor ba), yana ba ku damar tantance tushen matsalolin haɗin gwiwa.
An canza ƙirar katunan bayanai tare da bayanan kumburin gada, waɗanda za ku iya adana gadoji masu aiki da musanya su tare da sauran masu amfani. Baya ga maɓallan yin kwafi da aika taswirar node ɗin gada, an ƙara lambar QR da za a iya bincika a cikin nau'in Android na Tor Browser.
Idan akwai taswirori da yawa da aka adana, an haɗa su cikin ƙaramin lissafi, waɗanda abubuwan da aka faɗaɗa lokacin da aka danna su. Gadar da ake amfani da ita tana da alamar "✔ Haɗe". Don rarrabe sigogi na gadoji na gani, ana amfani da hotuna "emoji". An cire dogon jerin filaye da zaɓuɓɓuka don nodes ɗin gada; hanyoyin da ake da su don ƙara sabon gada an ƙaura zuwa wani shinge na daban.
- Babban tsarin ya haɗa da takaddun shaida daga shafin tb-manual.torproject.org, wanda akwai hanyoyin haɗin kai daga mai daidaitawa. Don haka, idan akwai matsalolin haɗin kai, yanzu akwai takaddun layi a layi. Hakanan za'a iya duba takaddun ta menu "Menu na Aikace-aikacen> Taimako> Manual Browser" da shafin sabis "game da: manual".
- Ta hanyar tsoho, ana kunna yanayin HTTPS-Only, wanda duk buƙatun da aka yi ba tare da ɓoyewa ana tura su kai tsaye zuwa amintattun sigogin shafi (“http://” an maye gurbinsu da “https://”). An cire HTTPS-Ko'ina add-on, da aka yi amfani da shi don turawa zuwa HTTPS, daga sigar Desktop na Tor Browser, amma ya kasance a cikin nau'in Android.
- Ingantattun tallafin rubutu. Don karewa daga gano tsarin ta hanyar bincike ta hanyoyin da ake da su, Tor Browser na jigilar kaya tare da kafaffen saitin rubutu, kuma an toshe damar yin amfani da fonts na tsarin. Wannan ƙayyadaddun ya haifar da rushewar nunin bayanai akan wasu rukunin yanar gizon ta amfani da tsarin font ɗin da ba a haɗa su cikin saitin rubutun da aka gina a cikin Tor Browser ba. Don magance matsalar, a cikin sabon sakin an faɗaɗa ginanniyar saitin rubutun, musamman, an ƙara fonts daga dangin Noto zuwa abun da ke ciki.
source: budenet.ru