Inguqulo entsha ye-Tor Browser iyatholakala ukuze ilandwe kusuka kusuka esizeni esisemthethweni, inguqulo lwemibhalo kanye ne-Google Play. Inguqulo ye-F-Droid izotholakala ezinsukwini ezizayo.
Isibuyekezo sihlanganisa okubucayi ukulungiswa kwezokuphepha Firefox.
Ukugcizelelwa okuyinhloko enguqulweni entsha kukuthuthukisa ukunethezeka nokwenza kube lula ukusebenza ngezinsizakalo zika-anyanisi.
Amasevisi we-Tor onion angenye yezindlela ezidume kakhulu nezilula zokusungula uxhumano olubethelwe. Ngosizo lwabo, umlawuli uyakwazi ukunikeza ukufinyelela okungaziwa kuzisetshenziswa futhi afihle imethadatha kusibukeli sangaphandle. Ngaphezu kwalokho, izinsizakalo ezinjalo zikuvumela ukuthi unqobe ukucwaninga ngenkathi uvikela ubumfihlo bomsebenzisi.
Manje, lapho wethula i-Tor Browser okokuqala ngqa, abasebenzisi bazoba nenketho yokukhetha ukusebenzisa ikheli lika-anyanisi elizenzakalelayo uma isisetshenziswa esikude sinikeza ikheli elinjalo. Ngaphambilini, ezinye izinsiza zaziqondise kabusha abasebenzisi ngokuzenzakalelayo ekhelini lika-anyanisi lapho kutholwa i-Tor, okwakusetshenziselwa ubuchwepheshe i-alt-svc. Futhi nakuba ukusetshenziswa kwezindlela ezinjalo kusabalulekile nanamuhla, uhlelo olusha lokukhetha okuthandwayo luzovumela abasebenzisi ukuthi baziswe mayelana nokutholakala kwekheli lika-anyanisi.
I-Anyanisi Locator
Abanikazi bezinsiza ze-inthanethi banethuba lokwazisa mayelana nokutholakala kwekheli lika-anyanisi kusetshenziswa unhlokweni okhethekile we-HTTP. Isikhathi sokuqala lapho umsebenzisi one-Onion Locator enikwe amandla evakashela insiza enalesi sihloko futhi ethi .anyanisi iyatholakala, umsebenzisi uzothola isaziso esimvumela ukuthi ancamele okuthi .anyanisi (bona isithombe).
Ukugunyazwa anyanisi
Abaphathi bezinsizakalo zika-anyanisi abafuna ukukhulisa ukuphepha nokugcinwa kuyimfihlo kwekheli labo banganika amandla ukugunyazwa kukho. Abasebenzisi be-Tor Browser manje bazothola isaziso esicela ukhiye lapho bezama ukuxhuma kumasevisi anjalo. Abasebenzisi bangagcina futhi baphathe okhiye abafakiwe kokuthi mayelana:okuncanyelwayo#ithebhu yobumfihlo esigabeni sokuqinisekisa Izinkonzo zika-anyanisi (bona. isibonelo isaziso)
Isistimu yesaziso sokuvikeleka ethuthukisiwe kubha yekheli
Ngokwesiko, iziphequluli zimaka ukuxhumana kwe-TLS ngesithonjana se-padlock esiluhlaza. Futhi kusukela maphakathi no-2019, ukukhiya esipheqululini seFirefox sekumpunga ukuze kudonse ukunaka kwabasebenzisi kangcono hhayi ekuxhumekeni okuzenzakalelayo okuvikelekile, kodwa ezinkingeni zokuphepha (imininingwane eyengeziwe lapha). Isiphequluli se-Tor enguqulweni entsha silandela isibonelo se-Mozilla, ngenxa yalokho manje sekuzoba lula kakhulu kubasebenzisi ukuqonda ukuthi ukuxhumeka kuka-anyanisi akuphephile (uma ulanda okuqukethwe okuxubile kunethiwekhi "evamile" noma ezinye izinkinga, isibonelo lapha)
Hlukanisa amakhasi ephutha lokulanda amakheli ka-anyanisi
Ngezikhathi ezithile, abasebenzisi bahlangabezana nezinkinga zokuxhuma kumakheli ka-anyanisi. Ezinguqulweni ezedlule ze-Tor Browser, uma kube nezinkinga zokuxhuma ku-.onion, abasebenzisi babone umlayezo wephutha ojwayelekile weFirefox ongachazanga nganoma iyiphi indlela isizathu sokungatholakali kwekheli lika-anyanisi. Inguqulo entsha yengeza izaziso ezifundisayo mayelana namaphutha ohlangothini lomsebenzisi, ohlangothini lweseva kanye nenethiwekhi ngokwayo. Isiphequluli se-Tor manje sibonisa okulula ishadi uxhumano, olungasetshenziswa ukwahlulela imbangela yezinkinga zokuxhuma.
Amagama ka-anyanisi
Ngenxa yokuvikelwa kwe-cryptographic yezinsizakalo zika-anyanisi, amakheli ka-anyanisi kunzima ukukhumbula (qhathanisa, isibonelo, https://torproject.org и http://expyuzz4wqqyqhjn.onion/). Lokhu kwenza ukuzulazula kube nzima kakhulu futhi kwenza kube nzima kubasebenzisi ukuthola amakheli amasha futhi babuyele kwakudala. Abanikazi bamakheli ngokwabo ngaphambilini baxazulule inkinga ngendlela eyodwa noma enye, kodwa kuze kube manje besingekho isisombululo esilungele bonke abasebenzisi. I-Tor Project ibhekane nenkinga ngenye indlela: kulokhu kukhululwa, ibambisene ne-Freedom of the Press Foundation (FPF) kanye ne-HTTPS Yonke indawo (Electronic Frontier Foundation) ukuze bakhe amakheli okuqala e-SecureDrop anengqondo afundeka umuntu (bona ngezansi). lapha). Izibonelo:
I-Intercept:
- http://theintercept.securedrop.tor.onion/
- http://xpxduj55x2j27l2qytu2tcetykyfxbjbafin3x4i3ywddzphkbrd3jyd.onion/
Lucy Parsons Labs:
I-FPF iqinisekise ukubamba iqhaza kwenani elincane lezinhlangano zabezindaba ocwaningweni, futhi i-Tor Project kanye ne-FPF ngokuhlanganyela bazokwenza izinqumo zesikhathi esizayo ngalolu hlelo ngokusekelwe empendulweni yalo mbono.
Uhlu olugcwele lwezinguquko:
- Kubuyekezwe I-Tor Launcher yaba ngu-0.2.21.8
- I-NoScript ibuyekezelwe enguqulweni engu-11.0.26
- IFirefox ibuyekezelwe ku-68.9.0esr
- I-HTTPS-Yonke indawo ibuyekezelwe kunguqulo 2020.5.20
- I-Tor router ebuyekeziwe yaba yinguqulo engu-0.4.3.5
- goptlib ibuyekezelwe ku-v1.1.0
- I-Wasm ikhutshaziwe kusalindwe ukuhlolwa okufanele
- Kukhishwe izinto zezilungiselelo ze-Torbutton eziphelelwe yisikhathi
- Kukhishwe ikhodi engasetshenziswanga ku-torbutton.js
- Kukhishwe ukuvumelanisa kwe-insulation kanye nezilungiselelo zezigxivizo zeminwe (fingerprinting_prefs) ku-Torbutton
- Imojula yembobo yokulawula ithuthukisiwe ukuze ihambisane nokugunyazwa kuka-anyanisi we-v3
- Izilungiselelo ezizenzakalelayo zihanjiswe kufayela elithi 000-tor-browser.js
- torbutton_util.js ihanjiswe kumamojula/utils.js
- Ikhono lokunika amandla ukunikezwa kwamafonti e-Graphite kuzilungiselelo zokuphepha libuyisiwe.
- Kukhishwe umbhalo osebenzisekayo ku-aboutTor.xhtml
- libevent ibuyekezwe ku-2.1.11-stable
- Ukuphathwa okukhethekile okulungisiwe ku-SessionStore.jsm
- Ukuhlukaniswa kwenkampani yokuqala kumakheli e-IPv6
- Services.search.addEngine ayisakuziba ukuhlukaniswa kwe-FPI
- I-MOZ_SERVICES_HEALTHREPORT ikhutshaziwe
- Ukulungiswa kweziphazamisi kuthuthiwe 1467970, 1590526 и 1511941
- Kulungiswe iphutha lapho kukhishwa isengezo sokunqamula sosesho
- Kulungiswe iphutha 33726: IsPotentiallyTrustworthyOrigin for .anyanisi
- Isiphequluli esilungisiwe asisebenzi lapho siyihambisa kolunye uhla lwemibhalo
- Ukuziphatha okuthuthukisiwe letterboxing
- Nqamula injini yokusesha isusiwe
- Usekelo olunikwe amandla lwesethi yemithetho ye-SecureDrop ku-HTTPS-Yonke indawo
- Imizamo ehleliwe yokufunda /etc/firefox
Source: linux.org.ru