Kutulutsidwa kwa msakatuli wapadera, Tor Browser 11.0.2, kwawonetsedwa, kumayang'ana kwambiri kuwonetsetsa kuti anthu sakudziwika, otetezeka komanso achinsinsi. Mukamagwiritsa ntchito Tor Browser, magalimoto onse amangotumizidwa kudzera pa netiweki ya Tor, ndipo sizingatheke kuti mulowe mwachindunji kudzera pa intaneti yolumikizira dongosolo lomwe lilipo, zomwe sizilola kutsatira adilesi yeniyeni ya IP (ngati msakatuli wabedwa, owukira). Mutha kupeza magawo a netiweki yamakina, kotero kuti kuti mutseke kutayikira komwe kungatheke, muyenera kugwiritsa ntchito zinthu monga Whonix). Zomangamanga za Tor Browser zakonzedwa pa Linux, Windows ndi macOS.
Kuti mupereke chitetezo chowonjezera, Tor Browser imaphatikizapo zowonjezera za HTTPS kulikonse, zomwe zimakupatsani mwayi wogwiritsa ntchito kubisa kwamagalimoto pamawebusayiti onse ngati kuli kotheka. Kuti muchepetse chiwopsezo cha kuukira kwa JavaScript ndikutsekereza mapulagini mwachisawawa, chowonjezera cha NoScript chikuphatikizidwa. Pofuna kuthana ndi kutsekeka kwa magalimoto ndikuwunika, njira zina zoyendera zimagwiritsidwa ntchito. Kuti mutetezedwe kuti musamawonetsere mawonekedwe apadera a alendo, WebGL, WebGL2, WebAudio, Social, SpeechSynthesis, Touch, AudioContext, HTMLMediaElement, Mediastream, Canvas, SharedWorker, WebAudio, Permissions, MediaDevices.enumerateDevices, ndi screen.orientation APIs ndi ma API ochepetsa zida zotumizira telemetry, Pocket, Reader View, HTTP Alternative-Services, MozTCPSocket, "link rel=preconnect", zosinthidwa ndi libmdns.
Mtundu watsopanowu umagwirizana ndi code base ya Firefox 91.4.0 kumasulidwa, yomwe idakhazikitsa ziwopsezo 15, zomwe 10 zidadziwika kuti ndizowopsa. Zowonongeka za 7 zimayamba chifukwa cha zovuta zamakumbukidwe, monga kusefukira kwa buffer ndi mwayi wofikira malo okumbukira omwe adamasulidwa kale, ndipo zitha kubweretsa kuphatikizika kwa code yowukira mukatsegula masamba opangidwa mwapadera. Mafonti ena a ttf sanaphatikizidwe pamapangidwe a nsanja ya Linux, kugwiritsa ntchito komwe kudapangitsa kuti kusokonezedwa kwa mawu mu mawonekedwe a Fedora Linux. Zokonda za "network.proxy.allow_bypass" ndizozimitsidwa, zomwe zimayang'anira ntchito yoteteza motsutsana ndi kugwiritsa ntchito molakwika Proxy API pazowonjezera. Pazoyendera za obfs4, chipata chatsopano "deusexmachina" chimayatsidwa mwachisawawa.
Panthawiyi, nkhani yoletsa Tor ku Russian Federation ikupitiriza. Roskomnadzor inasintha chigoba cha madera otsekedwa mu registry ya malo oletsedwa kuchoka ku "www.torproject.org" kupita ku "*.torproject.org" ndikukulitsa mndandanda wa ma adilesi a IP omwe atsekedwa. Kusinthaku kudapangitsa kuti madera ambiri a Tor project atsekedwe, kuphatikiza blog.torproject.org, gettor.torproject.org, ndi support.torproject.org. forum.torproject.net, yochitidwa pa Discourse infrastructure, ikupezekabe. Opezeka pang'ono ndi gitlab.torproject.org ndi lists.torproject.org, kumene mwayi unatayika poyamba, koma kenako unabwezeretsedwa, mwinamwake mutasintha ma adilesi a IP (gitlab tsopano yalunjikitsidwa kwa gitlab-02.torproject.org).
Nthawi yomweyo, zipata ndi ma node a Tor netiweki, komanso wolandila ajax.aspnetcdn.com (Microsoft CDN), omwe amagwiritsidwa ntchito pamayendedwe ofatsa, sanatsekedwenso. Mwachiwonekere, kuyesa kuletsa ma node a Tor network pambuyo poletsa tsamba la Tor kwasiya. Mkhalidwe wovuta umabwera ndi galasi la tor.eff.org, lomwe likupitiriza kugwira ntchito. Chowonadi ndi chakuti galasi la tor.eff.org limangirizidwa ku adilesi ya IP yomwe imagwiritsidwa ntchito pa eff.org domain ya EFF (Electronic Frontier Foundation), kotero kutsekereza tor.eff.org kudzetsa kutsekereza pang'ono kwa malo a bungwe lodziwika bwino loona za ufulu wa anthu.
Kuphatikiza apo, titha kuzindikira kusindikizidwa kwa lipoti latsopano lokhudza zoyeserera zotheka kuti aletse ogwiritsa ntchito Tor omwe amagwirizana ndi gulu la KAX17, omwe amadziwika ndi maimelo abodza okhudzana ndi magawo a node. Mu Seputembala ndi Okutobala, Tor Project idatseka ma 570 omwe angakhale oyipa. Pachimake, gulu la KAX17 linatha kuonjezera chiwerengero cha ma node olamulidwa mu Tor netiweki mpaka 900, yoyendetsedwa ndi opereka 50 osiyanasiyana, omwe amafanana ndi pafupifupi 14% ya chiwerengero chonse cha ma relay (poyerekeza, mu 2014, owukira adakwanitsa. landirani kuwongolera pafupifupi theka la ma Tor relay, ndipo mu 2020 pamwamba pa 23.95% ya node zotulutsa).
Kuyika ma node ambiri omwe amayendetsedwa ndi wogwiritsa ntchito m'modzi kumapangitsa kuti anthu asatchule dzina la ogwiritsa ntchito pogwiritsa ntchito gulu la Sybil, lomwe lingathe kuchitika ngati owukira ali ndi mphamvu pa node yoyamba ndi yomaliza mu unyolo wosadziwika. Node yoyamba mu unyolo wa Tor imadziwa adilesi ya IP ya wogwiritsa ntchito, ndipo womaliza amadziwa adilesi ya IP ya zomwe akufunsidwa, zomwe zimapangitsa kuti zitheke kubisa pempholo powonjezera chizindikiro chobisika pamitu ya paketi. mbali ya mfundo yolowetsa, yomwe imakhalabe yosasinthika mu unyolo wonse wosadziwika, ndikuwunika chizindikiro ichi pambali pa mfundo zotulutsa. Ndi malo otuluka oyendetsedwa, owukira amathanso kusintha ma traffic omwe sanabisike, monga kuchotsa zolozera kumasamba a HTTPS ndikulowetsa zomwe sizinalembedwe.
Malinga ndi oimira ma network a Tor, ma node ambiri omwe adachotsedwa pakugwa adagwiritsidwa ntchito ngati ma node apakatikati, osagwiritsidwa ntchito pokonza zopempha zomwe zikubwera komanso zotuluka. Ofufuza ena amawona kuti mfundozo zinali zamagulu onse ndipo mwayi wopita kumalo olowera omwe amayendetsedwa ndi gulu la KAX17 anali 16%, ndi kutulutsa - 5%. Koma ngakhale zili choncho, ndiye kuti kuthekera konse kwa wogwiritsa ntchito nthawi imodzi kugunda zolowetsa ndi zotulutsa za gulu la 900 node olamulidwa ndi KAX17 akuyerekeza 0.8%. Palibe umboni wachindunji wa ma node a KAX17 omwe amagwiritsidwa ntchito popanga ziwawa, koma kuukira kofananako sikungathetsedwe.
Source: opennet.ru