Ngemva kwezinyanga ezingu-8 zokuthuthukiswa, kwethulwa ukukhululwa okubalulekile kwesiphequluli esikhethekile i-Tor Browser 11.5, eqhubeka nokuthuthukiswa kokusebenza okusekelwe egatsheni le-ESR le-Firefox 91. Isiphequluli sigxile ekuqinisekiseni ukungaziwa, ukuphepha kanye nobumfihlo, yonke ithrafikhi iqondiswa kabusha. kuphela ngenethiwekhi ye-Tor. Akunakwenzeka ukufinyelela ngokuqondile ngoxhumano lwenethiwekhi olujwayelekile lwesistimu yamanje, olungakuvumeli ukulandelela i-IP yangempela yomsebenzisi (uma isiphequluli sigqekeziwe, abahlaseli bangakwazi ukufinyelela kumapharamitha wenethiwekhi yesistimu, ngakho imikhiqizo efana ne-Whonix kufanele isetshenziselwe vimba ngokuphelele ukuvuza okungenzeka). Ukwakhiwa kwe-Tor Browser kulungiselelwe i-Linux, iWindows ne-macOS.
Ukuze unikeze ukuvikeleka okwengeziwe, Isiphequluli Se-Tor sihlanganisa isengezo se-HTTPS Yonke indawo, esikuvumela ukuthi usebenzise ukubethela kwethrafikhi kuwo wonke amasayithi lapho kungenzeka khona. Ukuze unciphise usongo lokuhlaselwa kwe-JavaScript futhi uvimbe ama-plugin ngokuzenzakalela, isengezo se-NoScript sifakiwe. Ukulwa nokuvinjwa nokuhlolwa kwethrafikhi, i-fteproxy ne-obfs4proxy ziyasetshenziswa.
Ukuhlela ishaneli yokuxhumana ebethelwe ezindaweni ezivimba noma iyiphi ithrafikhi ngaphandle kwe-HTTP, kuhlongozwa ezinye izinto zokuthutha, isibonelo, ezikuvumela ukuthi udlule imizamo yokuvimba i-Tor e-China. Ukuze uvikele ekulandeleni ukunyakaza komsebenzisi nezici eziqondene nesivakashi, iWebGL, WebGL2, WebAudio, Social, SpeechSynthesis, Touch, AudioContext, HTMLMediaElement, Mediastream, Canvas, SharedWorker, WebAudio, Permissions, MediaDevices.enumerateDevices, kanye nama-API esikrinini ayacisha. .ukuqondisa, namathuluzi okuthumela i-telemetry akhutshaziwe, Iphakethe, I-Reader View, I-HTTP Alternative-Services, MozTCPSocket, “link rel=preconnect”, modified libmdns.
Enguqulweni entsha:
- I-Connection Assist interface yengeziwe ukuze kwenziwe ngokuzenzakalelayo ukusetha kokudlula ukuvinjwa kokufinyelela kunethiwekhi ye-Tor. Ngaphambilini, uma ithrafikhi ihloliwe, umsebenzisi bekumele azitholele mathupha futhi enze amanodi ebhuloho asebenze kuzilungiselelo. Enguqulweni entsha, i-block bypass ilungiswa ngokuzenzakalelayo, ngaphandle kokushintsha izilungiselelo - uma kwenzeka kuba nezinkinga zokuxhuma, izici zokuvimba emazweni ahlukene ziyacatshangelwa futhi indlela efanele yokuyidlula ikhethiwe. Kuye ngendawo yomsebenzisi, isethi yezilungiselelo ezilungiselelwe izwe lakhe iyalayishwa, enye indlela yokuthutha esebenzayo iyakhethwa, futhi uxhumano luhlelwa ngamanode ebhuloho.
Ukulayisha uhlu lwamanodi ebhuloho, kusetshenziswa ikhithi yamathuluzi e-moat, esebenzisa indlela "yokukhombana kwesizinda", umongo wayo owukuxhumana nge-HTTPS okubonisa umsingathi ongelona iqiniso ku-SNI futhi empeleni kudluliselwa igama lomsingathi oceliwe ku- Isihloko se-HTTP Sokusingatha ngaphakathi kweseshini ye-TLS (isibonelo, ungasebenzisa okuqukethwe kwamanethiwekhi okulethwa ukuze udlule ukuvinjwa).
- Idizayini yesigaba se-configurator enezilungiselelo zamapharamitha wenethiwekhi ye-Tor ishintshiwe. Izinguquko zihloselwe ukwenza lula ukucushwa okubhaliwe kwe-block bypass ku-configurator, okungase kudingeke uma kunezinkinga ngokuxhumeka okuzenzakalelayo. Isigaba sezilungiselelo ze-Tor siqanjwe kabusha ngokuthi "Izilungiselelo zokuxhuma". Phezulu kwethebhu yezilungiselelo, isimo samanje sokuxhuma siyaboniswa futhi inkinobho inikezwa ukuhlola ukusebenza kokuxhumana okuqondile (hhayi nge-Tor), okukuvumela ukuthi uhlole umthombo wezinkinga zokuxhuma.
Ukuklanywa kwamakhadi olwazi anedatha ye-bridge node kushintshiwe, ongagcina ngawo amabhuloho asebenzayo futhi uwashintshe nabanye abasebenzisi. Ngaphezu kwezinkinobho zokukopisha nokuthumela imephu yendawo yebhuloho, ikhodi ye-QR yengeziwe engaskenwa enguqulweni ye-Android ye-Tor Browser.
Uma kunamamephu amaningana agciniwe, ahlanganiswa abe uhlu oluhlangene, izakhi zazo ezinwetshwayo lapho uchofozwa. Ibhuloho elisetshenziswayo limakwe ngophawu oluthi “✔ Connected”. Ukuze uhlukanise ngokubonakalayo amapharamitha amabhuloho, kusetshenziswa izithombe ze-"emoji". Uhlu olude lwezinkambu nezinketho zamanodi amabhuloho kususiwe; izindlela ezikhona zokwengeza ibhuloho elisha zihanjiswe endaweni ehlukile.
- Isakhiwo esiyinhloko sihlanganisa imibhalo evela kusayithi elithi tb-manual.torproject.org, lapho kukhona izixhumanisi ezivela kumhleli. Ngakho, uma kuba nezinkinga zokuxhuma, imibhalo isiyatholakala ungaxhunyiwe ku-inthanethi. Amadokhumenti angabuye abukwe ngemenyu ethi “Imenyu Yohlelo > Usizo > Imanuwali Yesiphequluli Se-Tor” kanye nekhasi lesevisi elithi “mayelana:manuwali”.
- Ngokuzenzakalela, imodi ye-HTTPS-Only ivuliwe, lapho zonke izicelo ezenziwe ngaphandle kokubethela ziqondiswa kabusha ngokuzenzakalelayo kuzinguqulo zekhasi elivikelekile (“http://” ithathelwa indawo ngokuthi “https://”). Isengezo se-HTTPS-Yonke indawo, ebesisetshenziselwa ukuqondisa kabusha ku-HTTPS, sikhishiwe enguqulweni yedeskithophu ye-Tor Browser, kodwa sihlala siyinguqulo ye-Android.
- Ukusekelwa kwefonti okuthuthukisiwe. Ukuze uvikele ekuhlonzweni kwesistimu ngokusesha amafonti atholakalayo, i-Tor Browser ithumela ngesethi yamafonti angashintshi, futhi ukufinyelela kumafonti esistimu kuvinjiwe. Lo mkhawulo uholele ekuphazanyisweni kokuboniswa kolwazi kwamanye amasayithi kusetshenziswa amafonti esistimu abengafakwanga kusethi yefonti eyakhelwe ku-Tor Browser. Ukuze kuxazululwe inkinga, ekukhishweni okusha isethi yamafonti eyakhelwe ngaphakathi yanwetshwa, ikakhulukazi, amafonti avela emndenini wakwaNoto engezwe ekuqanjweni.
Source: opennet.ru