The recommended way to upgrade, unfortunately, is to export your bookmarks et al, unpack the new TBB into a new directory, and import your bookmarks there.
Most of the time it is safe to just unpack the new TBB over the old one, but every once in a while it will break things in a confusing way (for example, the last breakage changed the SocksPort and since ...
"... and user tracking should be a simple matter to remove."
That's the tricky part. It's rather impossible than simple.
There are several fingerprinting and privacy related bugs which seem to be impossible to patch.
For more detailed info see: https://trac.torproject.org/projects/tor/wiki/doc/ImportantGoogleChromeBugs
Websites can request several configuration settings from your browser in order to help them printing the best page format for you.
But by requesting your browser's specific abilities (here canvas is used for graphical rendering), websites could fingerprint your browser (if you have a unique configuration) across multiple sites.
This is related to the ...
Exporting your bookmarks and importing them into the new version is currently the easiest method for maintaining bookmarks between releases of the Tor Browser Bundle.
As for installing additional addons, this is not recommended (or supported).
This isn't Firefox option per se, but consider clicking Use new identity after every task you do using Tor.
This will ensure it looks like you are connecting to Tor for first time, and no one will be able to match your new connections to older ones.
Except for reading through all of the plugin's or the extension's source code, there is unfortunately no way to make sure it is safe.
And some believed-to-be-safe extensions like AdBlock Plus will still reduce your anonymity somewhat compared to other Tor users, by creating a more unique network fingerprint ("this user is the one that doesn't download the ...
By default, Tor Browser forgets about permissions when you close it. You can easily check it by revisiting Youtube (and see if it asks for permission again).
If permissions.memory_only preference is set to false (default is true), Tor Browser stores permissions in a file named permissions.sqlite in the profile directory.
If you have this file and it's ...
The worst thing that can happen is that the add-on tries to access the internet and doesn't use Tor.
--> that will destroy your anonymity and release your real IP address!
Hopefully the worst thing will not happen, but what definitely happens is that you(r browser) will get more trackable with every additional add-on!
Here are some tests to see how unique ...
Another idea is to prevent the computer you run Tor on from knowing your external IP address by connecting it to the Internet via a NAT router. This helps mainly in combination with something like Tails which prevents Internet access except via Tor.
Even if your Firefox gets compromised it won't be able to send out requests directly to the Internet (due to ...
Downloading the file isn't what this warning is about. You don't need an external application to download the file.
It's about the application you use to open the file. That application isn't configured to use Tor and thus sends information from your actual IP if it opens an internet connection.
If you're sure your PDF viewer doesn't leak information about ...
"Launch application" is a misnomer. This dialog box pops up any time you click on a link to a file that Torbrowser (Firefox) doesn't know how to display on its own, regardless of whether you intend to use an external app or not; unfortunately, it pops up before Firefox gives you the chance to specify what to do with the file in question, and I think this ...
Plugins, like Flash, are supposed to be disabled because they can bypass Tor and harm your anonymity. Whenever you install or update Flash this should have no effect on any browser that is not installed and it should not affect the TorBrower, because it even seeks to prevent Flash from loading.
Since some releases of the Tor Browser Bundle 2.x the control ports for Tor relays and the Tor Browser Bundle are different. The socks port is different, too.
There should be no problems with running a Tor relay (or bridge) while using Tor Browser Bundle for browsing.
The 3.x series of Tor Browser Bundle has Vidalia replaced with Tor Launcher so there ...
This might be a dumb question, but are you actually running tor? I don't think torbutton itself does this, you need something like Torlauncher to run tor as a standalon service by itself and then you proxy your browser through it.
Edit: I should add, to simplify things you could run tor using the full tor browser bundle and then just (close the torbrowser ...
I think the easiest is to quote the wikipedia entry:
Canvas consists of a drawable region defined in HTML code with height
full set of drawing functions similar to those of other common 2D
APIs, thus allowing for dynamically generated graphics. Some
anticipated uses of canvas ...
You have to disable Torbutton.
At the top of the connection settings dialog, it indicates this: "Disable Torbutton to change these settings."
In about:addons you can disable Torbutton and TorLauncher and then quit/relaunch the browser. Then you can set your own proxy settings or none in the network connection settings.
Edit to add: If you don't use a ...
Try going to the Firefox options menu and configuring Tor as a proxy. This will mean that you have to start Tor in the background but I did it with Chrome and it worked fine.
Menu > Options > Advanced > Network > Connection > Manual Proxy Configuration:
SOCKS Host is 'localhost' or '127.0.0.1' and port is 9150.
Make sure 'Remote DNS' is ticked
https://blog.torproject.org/blog/tor-weekly-news-%E2%80%94-november-6th-2013 warns that
Using Firefox and Tor Browser Bundle at the same time is not a great idea because the two interfaces are almost identical, and it is easy to get the two browsers mixed up, even if you know what you are doing.
If you still feel it is convenient to have both browsers ...
Firstly, I agree with mrphs' answer; enabling any plugins would be a very bad idea. Unless you have analyzed the sources/behavior of the VLC plugin in detail (I haven't!), you should not assume that you understand the implications of enabling it. For example, it may be possible to use the plugin to fingerprint your machine, based on the codecs you have ...
Installing any sort of plugins on TBB is a bad idea.
The best way to watch a video (if HTML5 player not available) is to download the video, disconnect from Internet and watch it offline. Otherwise it may try to make a connection over internet and ruin your anonymity.
This looks like a duplicate of Tor Browser Bundle Showing Error "Firefox is Already Running" on Mac. I just posted my answer there, which is that there seemed to be permission/ownership problem on the Tor installed app (because of the way it happened to get installed on my system).
(In short, if you haven't actually started Firefox elsewhere, ...
For the transparent proxy functionality of Tor to work you also need to set Tor as your DNS server, normally by setting the DNSPort torrc option to 53 and changing your /etc/resolv.conf. See the TransPort instructions for more hints. Without altering your resolver settings, DNS requests will go out to the Internet – not only leaking DNS but also failing to ...
I came across this and think that best describes the situation
This was from https://lists.torproject.org/pipermail/tor-talk/2014-July/033969.html
As of https://superuser.com/questions/137931/can-websites-see-my-firefox-addons, there is no default API to detect addons, as there is for plugins. As stated, malicious addons can certainly decloak you, but normal, heavily-used addons should have received some vetting, so should be a bit more trustworthy.
I have not examined the addons you listed, though.