Bahlahisi ba marang-rang a sa tsejoeng a Tor ba phatlalalitse liphetho tsa tlhahlobo ea Tor Browser le OONI Probe, rdsys, BridgeDB le lisebelisoa tsa Conjure tse ntlafalitsoeng ke morero, tse sebelisetsoang ho qoba ho etsa lipatlisiso. Tlhahlobo e entsoe ke Cure53 ho tloha ka Pulungoana 2022 ho fihlela Mmesa 2023.
Nakong ea liphuputso, ho ile ha hlokomeloa bofokoli ba 9, ba babeli ba bona ba khetholloa e le kotsi, e mong a abeloa boemo bo bohareng ba kotsi, 'me ba 6 ba khetholloa e le mathata a nang le boemo bo fokolang ba kotsi. Hape ho motheo oa khoutu, ho ile ha fumanoa mathata a 10 a neng a khetholloa e le liphoso tse sa amaneng le ts'ireletso. Ka kakaretso, khoutu ea Tor Project e hlokomeloa hore e tsamaisana le mekhoa e sireletsehileng ea mananeo.
Kotsi ea pele e kotsi e ne e le teng ka morao ho sistimi e ajoang ea rdsys, e netefatsang ho tlisoa ha lisebelisoa tse joalo ka manane a baemeli le likhokahano tsa ho jarolla ho basebelisi ba hlahlobiloeng. Kotsi e bakoa ke khaello ea netefatso ha o kena ho motho ea sebetsang ngoliso ea lisebelisoa mme o lumelletse mohlaseli ho ingolisa lisebelisoa tsa hae tse lonya hore li romelloe ho basebelisi. Ts'ebetso e fella ka ho romela kopo ea HTTP ho mohlokomeli oa rdsys.
Kotsi ea bobeli e kotsi e fumanoe ho Tor Browser mme e bakiloe ke khaello ea netefatso ea signature ea dijithale ha ho khutlisoa lethathamo la li-node tsa borokho ka rdsys le BridgeDB. Kaha lenane le kentsoe ho sebatli sethaleng pele o hokahana le marang-rang a sa tsejoeng a Tor, ho hloka netefatso ea signature ea dijithale e lumelletse mohlaseli ho nka sebaka sa litaba tsa lenane, mohlala, ka ho thibela khokahano kapa ho qhekella seva. eo lenane le ajoang ka yona. Ha ho ka ba le tlhaselo e atlehileng, mohlaseli a ka hlophisa hore basebelisi ba hokahane ka node ea bona ea borokho e senyehileng.
Ho na le ts'oaetso e matla e mahareng e ne e le teng ka har'a rdsys subsystem ho script ea deployment mme a lumella mohlaseli ho phahamisa litokelo tsa hae ho tloha ho motho ea se nang mosebelisi ho ea ho mosebelisi oa rdsys, haeba a na le phihlello ea seva le bokhoni ba ho ngolla bukana ka nakoana. lifaele. Ho sebelisa monyetla oa ho ba kotsing ho kenyelletsa ho khutlisa faele e phethiloeng e fumanehang ho /tmp directory. Ho fumana litokelo tsa basebelisi ba rdsys ho lumella mohlaseli ho etsa liphetoho ho lifaele tse phethiloeng tse hlahisitsoeng ka rdsys.
Bofokoli bo fokolang bo bakiloe haholo-holo ke tšebeliso ea litšepe tse siiloeng ke nako tse nang le bofokoli bo tsejoang kapa monyetla oa ho haneloa tšebeletsong. Bofokoli bo fokolang ho Tor Browser bo kenyelletsa bokhoni ba ho feta JavaScript ha boemo ba ts'ireletso bo behiloe boemong bo phahameng ka ho fetisisa, ho haella ha lithibelo ho khoasolla lifaele, le ho lutla ho ka bang teng ha tlhahisoleseling ka leqephe la lehae la mosebelisi, ho lumella basebelisi ho lateloa lipakeng tsa ho qala bocha.
Hajoale, bofokoli bohle bo lokisitsoe; har'a lintho tse ling, netefatso e kentsoe ts'ebetsong bakeng sa bohle ba sebetsanang le rdsys le ho lekola manane a kentsoeng ho Tor Browser ka signature ea dijithale e kentsoe.
Ho feta moo, re ka hlokomela ho lokolloa ha Tor Browser 13.0.1. Tokollo e hokahantsoe le Firefox 115.4.0 ESR codebase, e lokisang bofokoli ba 19 (13 e nkuoa e le kotsi). Litokiso tsa tlokotsi tse tsoang lekaleng la Firefox 13.0.1 li fetiselitsoe ho Tor Browser 119 bakeng sa Android.
Source: opennet.ru