An samar da wani gagarumin sakin mashigar mai bincike na musamman Tor Browser 12.0, inda aka canza sheka zuwa reshen ESR na Firefox 102. Mai binciken yana mai da hankali kan tabbatar da rashin sanin suna, tsaro da sirri, duk zirga-zirgar ababen hawa ana karkatar da su ne kawai ta hanyar hanyar sadarwar Tor. Ba shi yiwuwa a tuntuɓar kai tsaye ta hanyar daidaitattun hanyar sadarwa na tsarin na yanzu, wanda baya ba da izinin bin diddigin adireshin IP na ainihi na mai amfani (idan an yi kutse mai bincike, maharan na iya samun damar yin amfani da sigogin cibiyar sadarwar tsarin, don haka samfuran kamar Whonix yakamata a yi amfani da su. don toshe gaba ɗaya yiwuwar leaks). An shirya ginin Tor Browser don Linux, Windows da macOS. Ci gaban sabon sigar Android ya jinkirta.
Don samar da ƙarin tsaro, Tor Browser ya haɗa da HTTPS ko'ina add-on, wanda ke ba ku damar amfani da ɓoyayyen hanya akan duk rukunin yanar gizon inda zai yiwu. Don rage barazanar hare-haren JavaScript da toshe plugins ta tsohuwa, an haɗa ƙarar NoScript. Don magance hana zirga-zirga da dubawa, ana amfani da fteproxy da obfs4proxy.
Don tsara hanyar sadarwar rufaffiyar hanyar sadarwa a cikin mahallin da ke toshe duk wani zirga-zirga ban da HTTP, ana ba da shawarar jigilar jigilar kayayyaki, wanda, alal misali, ba ku damar ketare yunƙurin toshe Tor a China. Don karewa daga bin diddigin motsin mai amfani da takamaiman fasali na baƙo, WebGL, WebGL2, WebAudio, Social, SpeechSynthesis, Touch, AudioContext, HTMLMediaElement, Mediastream, Canvas, SharedWorker, WebAudio, Izini, MediaDevices.enumerateNa'urori, da ƙayyadaddun APIs an kashe su ko iyakancewar allo. daidaitawa, da naƙasassun kayan aikin aika telemetry, Aljihu, Duba Karatu, Sabis na Alternative HTTP, MozTCPSocket, “link rel=preconnect”, libmdns da aka gyara.
A cikin sabon sigar:
- Canzawa zuwa Firefox 102 ESR codebase da bargaren tor 0.4.7.12 an yi.
- Ana samar da gine-ginen harsuna da yawa - a baya dole ne ku zazzage wani gini daban don kowane harshe, amma yanzu an samar da ginin duniya, yana ba ku damar canza yaruka akan tashi. Don sababbin shigarwa a cikin Tor Browser 12.0, harshen da ya dace da saitunan gida a cikin tsarin za a zaba ta atomatik (za a iya canza harshen yayin aiki), kuma lokacin da ake motsawa daga reshen 11.5.x, harshen da aka yi amfani da shi a baya a Tor Browser zai kasance. a kiyaye. Gina harsuna da yawa yana ɗaukar kusan MB 105.
- A cikin sigar dandamalin Android, yanayin HTTPS-Only yana kunna ta tsohuwa, wanda duk buƙatun da aka yi ba tare da ɓoyewa ana tura su ta atomatik zuwa sigogin shafi masu tsaro (“http: //” ana maye gurbinsu da “https://”). A cikin gine-gine don tsarin tebur, an kunna irin wannan yanayin a cikin babban sigar da ta gabata.
- A cikin sigar dandali na Android, an ƙara saitin “Prioritize .onion sites” zuwa sashin “Sirri da Tsaro”, wanda ke ba da tura kai tsaye zuwa rukunin albasa lokacin ƙoƙarin buɗe gidajen yanar gizo waɗanda ke ba da taken “Onion-Location” HTTP. , yana nuna kasancewar bambancin rukunin yanar gizo akan hanyar sadarwar Tor.
- Ƙara fassarorin mu'amala zuwa cikin Albaniyanci da Ukrainian.
- An sake fasalin ɓangaren tor-launcher don ba da damar ƙaddamar da Tor don Tor Browser.
- Ingantacciyar aiwatar da tsarin akwatin wasiƙa, wanda ke ƙara ɗorawa kewaye abubuwan shafukan yanar gizo don toshe ganewa ta girman taga. An ƙara ikon kashe akwatin wasiƙa don amintattun shafuka, cire iyakoki guda-pixel kusa da bidiyon cikakken allo, da kuma kawar da yuwuwar leaks ɗin bayanai.
- Bayan binciken, an kunna tallafin tura HTTP/2.
- Hana yaɗuwar bayanai game da yanki ta hanyar Intl API, launukan tsarin ta hanyar CSS4, da katange tashoshin jiragen ruwa (network.security.ports.banned).
- An kashe Gabatarwar API da MIDI na Yanar Gizo.
- An shirya taruka na asali don na'urorin Apple tare da guntuwar Apple Silicon.
source: budenet.ru