Tor Browser 8.5 ndi mtundu woyamba wokhazikika wa Tor Browser wa Android zilipo

Pambuyo pa miyezi khumi ya chitukuko anapanga kumasulidwa kwakukulu kwa msakatuli wodzipereka Wotembenuza Tor Torani 8.5, momwe chitukuko cha ntchito zochokera ku nthambi ya ESR chikupitirira Firefox 60. Msakatuli amayang'ana kwambiri pakupereka kusadziwika, chitetezo ndi zinsinsi, magalimoto onse amangotumizidwa kudzera pa netiweki ya Tor. Ndikosatheka kulumikiza mwachindunji kudzera pa intaneti yolumikizira dongosolo lapano, lomwe sililola kutsatira IP yeniyeni ya wogwiritsa ntchito (ngati msakatuli wathyoledwa, owukira amatha kupeza magawo a netiweki, kuti aletse kutayikira komwe mungathe kugwiritsa ntchito. mankhwala monga Whonix). Tor Browser imapangidwa kukonzekera kwa Linux, Windows, macOS ndi Android.

Zimaphatikizapo zowonjezera zowonjezera chitetezo HTTPS kulikonse, kukulolani kuti mugwiritse ntchito kabisidwe ka traffic pamasamba onse ngati nkotheka. Chowonjezera chikuphatikizidwa kuti muchepetse chiwopsezo cha JavaScript ndikutsekereza mapulagini mwachisawawa NoScript. Pofuna kuthana ndi kutsekereza ndi kuyang'anira magalimoto, amagwiritsa ntchito fteproxy и obfs4proxy.

Kukonza njira yolumikizirana yobisika m'malo omwe amaletsa magalimoto ena kupatula HTTP, njira zina zoyendera zimaperekedwa, zomwe, mwachitsanzo, zimakulolani kuti mudutse kuyesa kuletsa Tor ku China. Kuti muteteze kutsata kalondolondo wa wogwiritsa ntchito komanso mawonekedwe apadera a alendo, WebGL, WebGL2, WebAudio, Social, SpeechSynthesis, Touch, AudioContext, HTMLMediaElement, Mediastream, Canvas, SharedWorker, Permissions, MediaDevices.enumerateDevices, ndi screen.orientation API kapena zochepa ndizozimitsa. ndipo munayimitsanso zida zotumizira ma telemetry, Pocket, Reader View, HTTP Alternative-Services, MozTCPSocket, "link rel=preconnect", zosinthidwa libmdns.

M'kutulutsa kwatsopano:

• Gululi lakonzedwanso ndipo chosavuta kufikira pachiwonetsero chachitetezo, chomwe chili patsamba la Torbutton pagawo lalikulu. Batani la Torbutton lasunthidwa kumanja kwa gululo. Mwachikhazikitso, zizindikiro za HTTPS Kulikonse ndi NoScript zowonjezera zachotsedwa pagawo (zikhoza kubwezeredwa mu mawonekedwe a zoikamo).
  

  Chizindikiro cha HTTPS Kulikonse chachotsedwa chifukwa sichimapereka chidziwitso chothandiza ndipo kutumiziranso ku HTTPS kumangogwiritsidwa ntchito mwachisawawa. Chizindikiro cha NoScript chachotsedwa chifukwa msakatuli amalola kusinthana pakati pa magawo oyambira achitetezo, ndipo batani la NoScript nthawi zambiri limasocheretsa ndi machenjezo omwe amabwera chifukwa cha makonda omwe amatengedwa mu Tor Browser. Batani la NoScript limaperekanso mwayi wofikira zoikamo zambiri, popanda kumvetsetsa mwatsatanetsatane zomwe, kusintha makonda kungayambitse mavuto achinsinsi komanso kusagwirizana ndi gawo lachitetezo lomwe lili mu Tor Browser. Kuletsa kuletsa kwa JavaScript pamawebusayiti ena kumatha kuchitika kudzera mugawo lowonjezera lazilolezo mu menyu adilesi ya adilesi (batani la "i");

  

• Kalembedwe kasinthidwa ndipo Tor Browser ikugwirizana ndi mapangidwe atsopano a Firefox, okonzedwa ngati gawo la polojekitiyi "Photon". Mapangidwe a tsamba loyambira la "about:tor" asinthidwa ndikulumikizana pamapulatifomu onse;
  

• Ma logo atsopano a Tor Browser adayambitsidwa.
  

• Zosinthidwa za msakatuli:
  Firefox 60.7.0esr, Torbutton 2.1.8, HTTPS Kulikonse 2019.5.6.1, kapena OpenSSL 1.0.2r, Tor Launcher 0.2.18.3;

• Misonkhano imapangidwa ndi mbendera "MOZILLA_OFFICIAL", amagwiritsidwa ntchito pomanga a Mozilla.
• Kutulutsidwa kokhazikika kwa mtundu wamtundu wa Tor Browser wa nsanja ya Android kwakonzedwa, komwe kumamangidwa pama code a Firefox 60.7.0 a Android ndipo amalola kugwira ntchito kudzera pa netiweki ya Tor, kutsekereza zoyesayesa zilizonse kukhazikitsa netiweki yachindunji. kulumikizana. Zowonjezera za HTTPS kulikonse ndi Tor Button zikuphatikizidwa. Pankhani ya magwiridwe antchito, kope la Android likadali kumbuyo kwa desktop, koma limapereka pafupifupi mulingo wofanana wachitetezo ndi zinsinsi.

  Mtundu wapa foni zatumizidwa pa Google Play, komanso zilipo mu mawonekedwe a phukusi la APK kuchokera patsamba la polojekiti. Kusindikizidwa mu kalozera wa F-droid kukuyembekezeka posachedwa. Imathandizira kugwira ntchito pazida zomwe zili ndi Android 4.1 kapena mtundu watsopano wa nsanja. Madivelopa a Tor akuwona kuti sakufuna kupanga mtundu wa Tor Browser wa iOS chifukwa cha zoletsa zomwe Apple adayambitsa ndikupangira msakatuli omwe akupezeka kale ndi iOS. Anyezi Msakatuli, yopangidwa ndi polojekitiyi Guardian.

  

Kusiyana kwakukulu pakati pa Tor Browser ya Android ndi Firefox ya Android:

• Khodi yotsekera kuti muzitsatira mayendedwe. Tsamba lililonse limakhala lotalikirana ndi zopempha zingapo, ndipo ma Cookies onse amachotsedwa gawolo likatha;
• Chitetezo ku kusokonezedwa kwa magalimoto ndi kuyang'anira ntchito za ogwiritsa ntchito. Kuyanjana konse ndi dziko lakunja kumachitika kudzera pa netiweki ya Tor, ndipo ngati kuchuluka kwa magalimoto pakati pa wogwiritsa ntchito ndi woperekayo kulumikizidwa, wowukirayo amatha kuwona kuti wogwiritsa ntchito akugwiritsa ntchito Tor, koma sangathe kudziwa malo omwe wogwiritsa ntchitoyo akutsegula. Kutetezedwa ku kusokonezedwa kumakhala kofunikira makamaka ngati ogwiritsira ntchito mafoni am'nyumba saona kuti ndi zochititsa manyazi kulowera mumsewu wa HTTP wosadziwika ndikuwonetsa ma widget awo (Beeline) kapena zikwangwani zotsatsa (Tele2 и Megaphone);
• Kutetezedwa kuti zisazindikiritse zomwe alendo amakumana nazo komanso kutsatira njira zotsata ogwiritsa ntchito obisika chizindikiritso ("zosindikiza zala msakatuli"). Ogwiritsa ntchito onse a Tor Browser amawoneka ofanana kuchokera kunja ndipo samadziwika mukamagwiritsa ntchito njira zapamwamba zozindikiritsa.
  Mwachitsanzo, kuwonjezera pa kusunga chizindikiritso kudzera pa Cookie ndi API yosungira deta yapafupi, mndandanda wazomwe wayikapo. zowonjezera, zone ya nthawi, mndandanda wamitundu yothandizidwa ya MIME, zosankha zowonekera, mndandanda wamafonti omwe alipo, zinthu zakale popereka chinsalu ndi WebGL, magawo pamitu HTTP / 2 и HTTPS, njira yogwirira ntchito ndi kiyibodi и mbewa;

• Kugwiritsa ntchito multilevel encryption. Kuphatikiza pa chitetezo cha HTTPS, kuchuluka kwa ogwiritsa ntchito podutsa mu Tor kumasinthidwanso katatu (kachitidwe kambiri-layer encryption scheme, momwe mapaketi amakutidwa ndi zigawo zingapo pogwiritsa ntchito makiyi achinsinsi, pomwe node iliyonse ya Tor siteji yake yokonza imasonyeza gawo lotsatira ndipo amadziwa gawo lotsatira la kufalitsa, ndipo node yomaliza yokha ingathe kudziwa adiresi yopita);
• Kutha kupeza zinthu zomwe zatsekedwa ndi omwe amapereka kapena malo omwe ali pakati. Wolemba ziwerengero ya polojekiti ya Roskomsvoboda, 97% ya malo omwe atsekedwa panopa ku Russian Federation amatsekedwa mosaloledwa (iwo ali m'magulu omwewo omwe ali ndi zida zotsekedwa). Mwachitsanzo, ma adilesi a IP a Digital Ocean a 358, ma adilesi 25 sauzande a Amazon WS ndi ma adilesi 59 sauzande a CloudFlare adatsekedwabe. Pansi pa kutsekereza kosaloledwa, kuphatikiza kugwa pansi mapulojekiti ambiri otseguka kuphatikiza bugs.php.net, bugs.python.org, 7-zip.org, powerdns.com ndi midori-browser.org.

Source: opennet.ru