How do I control the things that Vidalia did?(bridges, start and stop tor)
Starting the TorBrowser starts (launches) Tor and closing the TorBrowser closes (exits) Tor.
All traffic from the TorBrowser is supposed to go through Tor.
Upon first launch of the extracted bundle you have two choices, either you connect to the Tor network directly or you change ...
From the Tor Blog's release post:
Vidalia is still available for download as Bridge/Relay/Exit bundles ...
The recommended way to upgrade, unfortunately, is to export your bookmarks et al, unpack the new TBB into a new directory, and import your bookmarks there.
Most of the time it is safe to just unpack the new TBB over the old one, but every once in a while it will break things in a confusing way (for example, the last breakage changed the SocksPort and since ...
Exporting your bookmarks and importing them into the new version is currently the easiest method for maintaining bookmarks between releases of the Tor Browser Bundle.
As for installing additional addons, this is not recommended (or supported).
For the time being the "manual" way is the officially proposed by the Tor Project and that's most users should follow.
Also note that the Tor Project is examining various Firefox-like updater options which may integrate to Tor Browser sooner or later
Nevertheless the procedure could be automated in other ways too and that is what Micah F Lee tries to ...
Actually, there is an onion address for Tor: http://expyuzz4wqqyqhjn.onion/
The Tor Project runs quite a few onion addresses: https://onion.torproject.org/
I can't confirm if the Tor Browser uses this onion address for updating though.
Development work for an autoupdate function within the Tor Browser Bundle is ongoing. The solution we give out to people right now involves following the link in the Tor Browser's Onion menu to https://www.torproject.org/download/download-easy.html.en, downloading the package, verifying the signature, then closing the Tor Browser, deleting your Tor Browser ...
As far as I see it, the package file brings its own version of the Tor Browser Bundle. So if you want to make sure that someone didn't change anything you'd have to check the integrity for yourself. If you don't do this the maintainer can inject arbitrary code into his TBB version.
A better way would be to download the TBB archive directly from torproject....
THIS IS HIGHLY INFORMATIVE...
-From the Tor Blog:
"Update (August 11, 10:04 UTC): Starting from a couple of hours ago Tor
Browser users might see a notification box in their browser claiming
that Firefox is too old providing a button to get a newer one. This is
both due to a server-side code change on Mozilla's side and an
oversight by us during ...
This is the 'pre-fetch' feature in Firefox, which starts downloads in the background for you - you see it as 'instant' because it already downloaded the file before you confirm the download.
You can disable it like this:
1) Type about:config in your Firefox address bar and press Enter.
2) Type network.prefetch-next in filter text box.
3) Change the ...
I am in the same boat. Have your seen this on the Tor site
"Windows users that are affected by Tor Browser crashes might try to
avoid this problem by opening "about:config" and setting the
preference "media.directshow.enabled" to "false". This is a workaround
reported to help while the investigation is still on-going."
So enter about:config into ...
This new feature is called, "Letterboxing"
Tor Browser, in its default mode, is starting with a content window
rounded to a multiple of 200px x 100px to prevent fingerprinting the
screen dimensions. The strategy here is to put all users in a couple
of buckets to make it harder to single them out. That worked until
users started to resize their ...
0.2.9.* is the current Long Term Support (LTS) series and is a perfectly fine series to be tracking.
The Tor Project's repositories will generally have versions in the newer stable series. Historically, Raspberry Pis had a CPU architecture that is incompatible with the "...
Tails Upgrader should run automatically when Tails connects to the Tor network after startup. There shouldn't be a need to check the version manually: Tails should keep itself up to date.
If, for whatever reason, your system was unable to connect to the Tor network at startup (e.g. if you didn't have a network connection), then you can run the upgrader ...
The latest release of Orbot (available through the Google Playstore or through FDroid from The Guardian Project's repo is based on the Firefox 52 series for Android.
If you are running the latest version from one of those sources, and the site still complains about the version number then either the sites user-agent detection is faulty or Orfox/Firefox for ...
It is best to update your Mac so you get all the latest security patches.
After you update your Mac to the latest stable version macOS 10.12.5
Tor Browser should start working.
Here are the latest security patches for macOS.
Also there are serious security bugs that have been fixed in the latest versions of Tor ...
As I understand it:
0.2.9.10 is the current stable release and will be what remains in stable releases.
0.3.x is the new stable and will be what it is included in the next stable Debian release (stretch) when it moves from testing to stable.
I wouldn't expect to see it hit Ubuntu or Debian repos until strech becomes stable and jessie becomes oldstable.
Why Run Supported Software
I agree with @canonizingironize, you are still going to be a target. There are so many people running out-of-date software that targeting them is lucrative. Also, let's not forget that you'll still be vulnerable to many of the newly discovered security issues. Many security holes are only found and fixed years after they were ...
The Orbot currently in Google's Play store appears to be based on Tor 0.2.8.9. Yes, this isn't the newest release of Tor, not even the newest version of the 0.2.8.x series (which is still supported.) The changelog tells me that Orbot is not missing any severe security issues, so you should be fine.
As to why Orbot isn't using the newest Tor version, ...
The list of recommended versions contains 0.2.7.6, so it is not officially outdated.
If you want to use a newer version of Tor with Ricochet, just copy or link the Tor binary to the directory where Ricochet lives and start the software. Below you see a screenshot of Ricochet's settings which tells you that it runs with Tor version 0.2.8.8. I used the method ...
The AUR package should stay pretty up to date. If you want to help keep it up, you can subscribe to one of the places that new releases are announced (I use the blog rss feed) and flag the package when a new release comes out.
By default, TBB will notify you on startup if your version is out of date. I have not checked the Arch version, but on my Mac I can ...
Replace Browser/TorBrowser/Data/Browser/profile.default/places.sqlite file with old one.
This link to the Tor Browser design document contains the following description of how the Tor developers have ensured the updates from the updater cannot be tampered with.
5.4. Update Safety
We make use of the Firefox updater in order to provide automatic updates to users. We make use of certificate pinning to ensure that update checks cannot be ...