The Tor Project issueshttps://gitlab.torproject.org/groups/tpo/-/issues2022-07-13T17:53:38Zhttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40627[Android] "share" selected text only works once2022-07-13T17:53:38Zpublicvoit[Android] "share" selected text only works onceAndroid Tor Browser 10.5.5 (91.2.0-Release) 2021-05-07T06:01:01
Android 11 (latest on Pixel 4a)
Summary: "share" selected text only works once: successive selection share processes only copy the initial first selection again.
# How to...Android Tor Browser 10.5.5 (91.2.0-Release) 2021-05-07T06:01:01
Android 11 (latest on Pixel 4a)
Summary: "share" selected text only works once: successive selection share processes only copy the initial first selection again.
# How to reproduce bug
1. Open up Tor Browser and show some web content
2. Select a text from the web content
3. Select "Share" from the pop-up dialog of the selected text
4. Confirm privacy warning with "OPEN"
5. Paste somewhere else and recognize the selected text as correct
6. Go back to the same Tor Browser session
7. Select a different text from the web content
8. Select "Share" from the pop-up dialog of the selected text
9. Confirm privacy warning with "OPEN"
10. Paste somewhere else and recognize the selected text as the first selected text and not the second selection
# What to expect instead
I would assume that in step 10 I would paste (and see) the text of the second selection (step 7) instead of the previous one (step 2).
# Workaround
Using "Copy" from the Tor Browser selection pop-up dialog, manually switching to a different app and pasting text works as expected.https://gitlab.torproject.org/tpo/core/tor/-/issues/32340[Android] FAIL src/test/test_process_slow.c:240: assert(smartlist_len(process...2023-01-31T15:37:26Zeighthave[Android] FAIL src/test/test_process_slow.c:240: assert(smartlist_len(process_data->stdout_data) OP_EQ 12): 2 vs 12Running the _test-slow_ suite fails every time with this error on 0.4.1.x, 0.4.2.x, and master:
```
slow/process/callbacks:
FAIL src/test/test_process_slow.c:240: assert(smartlist_len(process_data->stdout_data) OP_EQ 12): 2 vs 12
[...Running the _test-slow_ suite fails every time with this error on 0.4.1.x, 0.4.2.x, and master:
```
slow/process/callbacks:
FAIL src/test/test_process_slow.c:240: assert(smartlist_len(process_data->stdout_data) OP_EQ 12): 2 vs 12
[callbacks FAILED]
```
The full build/test log is here:
https://gitlab.com/eighthave/tor/-/jobs/336701282
To try this yourself, it'll be easiest using the Guardian Project fork, which is in sync on GitHub and GitLab:
* https://github.com/guardianproject/tor
* https://gitlab.com/guardianproject/tor
I looked into it a bit, but couldn't quite figure out what was being tested there. Is it Tor's "smartlist" functions? stdin/stdout/stderr have annoying, arbitrary restrictions in Android, so it could be related to that. For example, "native" code loaded from a shared library will have stdin/stdout/stderr redirected to /dev/null, while in Java code, it is reachable. There is a related example on legacy/trac#32036https://gitlab.torproject.org/tpo/web/community/-/issues/263[Bridges] Add dnstt instructions2022-03-27T16:09:26ZGus[Bridges] Add dnstt instructionsAs volunteers will be able to run bridges with dnstt pluggable transport, we will need to update bridges documentation.
Since it's a go binary, maybe we should have one page with instructions instead of doing platform specific.
As dnstt...As volunteers will be able to run bridges with dnstt pluggable transport, we will need to update bridges documentation.
Since it's a go binary, maybe we should have one page with instructions instead of doing platform specific.
As dnstt bridges is still under development, we should follow this ticket timeline:
https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/trac/-/issues/40001#note_2788292https://gitlab.torproject.org/tpo/core/tor/-/issues/40422[CircuitPadding] circpad_add_matching_machines() should be called when a cir...2023-06-09T13:26:45ZJaym[CircuitPadding] circpad_add_matching_machines() should be called when a circuit has opened.### Summary
The circuit padding framework supports negotiating padding upon various events. Among them, CIRCPAD_CIRC_OPENED states that a given padding machine should be applied to a circuit when a circuit has opened.
However, no code ...### Summary
The circuit padding framework supports negotiating padding upon various events. Among them, CIRCPAD_CIRC_OPENED states that a given padding machine should be applied to a circuit when a circuit has opened.
However, no code seems to trigger this mechanism. When a circuit has built, the function circpad_machine_event_circ_built() is called and checks whether some machine may be removed/added to the circuit. However, at this stage of the circuit building process, the circuit has built but is not marked as open yet.
### Bug
If some machine uses `client_machine->conditions.apply_state_mask = CIRCPAD_CIRC_OPENED;` the machine would only be applied when another event than a circ building/opening triggers the function circpad_add_matching_machines() (e.g., ap conn links a stream, or the circ purpose changes from general to something else).
### What is the expected behavior?
When circuituse.c calls circuit_has_opened(), it should also call the circpad module; e.g., a new function circpad_machine_event_circ_opened() that checks for adding machine to the circuit.
### Environment
Running a version forked from 0.4.5.7
### Relevant logs and/or screenshots
Contains some logs showing a call to circpad_machine_event_circ_built() while the circuit is still marked as building. Also contains custom logs:
```Jun 30 11:23:50.000 [info] circuit_finish_handshake(): Finished building circuit hop:
Jun 30 11:23:50.000 [info] internal (high-uptime) circ (length 3, last hop test000a): $22BA781A60C0CBB7FFAEA8858128427F67F60038(open) $7684DE04DCBB44538554E2CD1D14CDF836D5AF4D(open) $C7ADB1DBCE99F0B2ED2812B1953E4986EE9846DB(open)
Jun 30 11:23:50.000 [debug] dispatch_send_msg_unchecked(): Queued: ocirc_cevent (<gid=7 evtype=2 reason=0 onehop=0>) from or, on ocirc.
Jun 30 11:23:50.000 [debug] dispatcher_run_msg_cbs(): Delivering: ocirc_cevent (<gid=7 evtype=2 reason=0 onehop=0>) from or, on ocirc:
Jun 30 11:23:50.000 [debug] dispatcher_run_msg_cbs(): Delivering to btrack.
Jun 30 11:23:50.000 [debug] btc_cevent_rcvr(): CIRC gid=7 evtype=2 reason=0 onehop=0
Jun 30 11:23:50.000 [debug] circuit_build_times_add_time(): Adding circuit build time 43
Jun 30 11:23:50.000 [debug] circpad_machine_conditions_apply(): Checking circuit purpose, 5
Jun 30 11:23:50.000 [debug] circpad_machine_conditions_apply(): Checking condition state mask 21 vs condition: 2
Jun 30 11:23:50.000 [debug] circpad_machine_conditions_apply(): Checking circuit purpose, 5
Jun 30 11:23:50.000 [debug] circpad_machine_conditions_apply(): Checking circuit purpose, 5
Jun 30 11:23:50.000 [debug] circpad_machine_event_circ_built(): Circpad module event circ built -- circ state: 0
Jun 30 11:23:50.000 [debug] circpad_machine_conditions_apply(): Checking circuit purpose, 5
Jun 30 11:23:50.000 [debug] circpad_machine_conditions_apply(): Checking condition state mask 21 vs condition: 2
Jun 30 11:23:50.000 [debug] circpad_machine_conditions_apply(): Checking circuit purpose, 5
Jun 30 11:23:50.000 [debug] circpad_machine_conditions_apply(): Checking circuit purpose, 5
Jun 30 11:23:50.000 [debug] invoke_plugin_operation_or_default(): Plugin found for caller calling a plugin in the circpad module when a circuit has built
Jun 30 11:23:50.000 [info] circpad_dropmark_activate_when_built(): Looks like the client_dropmark_def machine does not exist over this circuit
Jun 30 11:23:50.000 [debug] plugin_run(): Plugin execution returned -2147483648
Jun 30 11:23:50.000 [debug] plugin_run(): vm error message: (null)
Jun 30 11:23:50.000 [info] entry_guards_note_guard_success(): Recorded success for primary confirmed guard test002r ($22BA781A60C0CBB7FFAEA8858128427F67F60038)
Jun 30 11:23:50.000 [debug] dispatch_send_msg_unchecked(): Queued: ocirc_state (<gid=7 state=4 onehop=0>) from or, on ocirc.
Jun 30 11:23:50.000 [debug] dispatcher_run_msg_cbs(): Delivering: ocirc_state (<gid=7 state=4 onehop=0>) from or, on ocirc:
Jun 30 11:23:50.000 [debug] dispatcher_run_msg_cbs(): Delivering to btrack.
Jun 30 11:23:50.000 [debug] btc_state_rcvr(): CIRC gid=7 state=4 onehop=0
Jun 30 11:23:50.000 [info] circuit_build_no_more_hops(): circuit built!
Jun 30 11:23:50.000 [info] pathbias_count_build_success(): Got success count 3.000000/3.000000 for guard test002r ($22BA781A60C0CBB7FFAEA8858128427F67F60038)
Jun 30 11:23:50.000 [debug] circuit_has_opened(): calling circuit_has_opened()
```
### Possible fixes
Add a new function circpad_machine_event_circ_opened() called from circuituse.c when the circuit has opened.Tor: 0.4.8.x-freezeMike PerryMike Perryhttps://gitlab.torproject.org/tpo/web/community/-/issues/31[Content] Guide for a Safe Web2021-01-19T17:36:49ZPili Guerra[Content] Guide for a Safe WebContent here: https://storm.torproject.org/grain/nsZxs67hFDCBqAYQzTzJwrContent here: https://storm.torproject.org/grain/nsZxs67hFDCBqAYQzTzJwrhttps://gitlab.torproject.org/tpo/web/community/-/issues/7[Content] Tier 1 and Tier 2 languages2024-03-13T00:06:58ZPili Guerra[Content] Tier 1 and Tier 2 languageshttps://torpat.ch/manual-localeshttps://torpat.ch/manual-localesemmapeelemmapeelhttps://gitlab.torproject.org/tpo/web/community/-/issues/112[Content][Mirrors] Move howto for running mirrors2022-01-20T19:12:23Zemmapeel[Content][Mirrors] Move howto for running mirrorsThe howto for running a website mirror https://2019.www.torproject.org/docs/running-a-mirror.html needs to be updated, and moved to the new website.
A mirror maintaner offered to help with the setup fresh in their mind.The howto for running a website mirror https://2019.www.torproject.org/docs/running-a-mirror.html needs to be updated, and moved to the new website.
A mirror maintaner offered to help with the setup fresh in their mind.https://gitlab.torproject.org/tpo/web/community/-/issues/188[content][types of relays] Mentions to unexisting section are confusing2022-01-20T19:12:23Zemmapeel[content][types of relays] Mentions to unexisting section are confusingIn the page https://community.torproject.org/relay/types-of-relays/ , in the Exit relay section, we mention the 'legal considerations section' twice.
One is linked to https://community.torproject.org/relay/community-resources , but the ...In the page https://community.torproject.org/relay/types-of-relays/ , in the Exit relay section, we mention the 'legal considerations section' twice.
One is linked to https://community.torproject.org/relay/community-resources , but the other is unlinked, and there are no sections called 'legal considerations'.
> Exit relays have the greatest legal exposure and liability of all the relays. For example, if a user downloads copyrighted material while using your exit relay, you, the operator may receive a DMCA notice. Any abuse complaints about the exit will go directly to you (via your hoster, depending on the WHOIS records). Generally, most complaints can be handled pretty easily through template letters, which we'll discuss further in the **legal considerations section**.
> Because of the legal exposure that comes with running an exit relay, you should not run a Tor exit relay from your home. Ideal exit relay operators are affiliated with some institution, like a university, a library, a hackerspace or a privacy related organization. An institution can not only provide greater bandwidth for the exit, but is better positioned to handle abuse complaints or the rare law enforcement inquiry.
> If you are considering running an exit relay, please read the **section on legal considerations** for exit relay operators.
We should rephrase, mention the current name of the section, and also add a link where there is none.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41184[Crash] Changing wallpaper on android 12 closes browser2022-09-01T22:30:17Zdoalupnetwork[Crash] Changing wallpaper on android 12 closes browserOperating System: Lineageos 19.1 (Android 12L)
Tor browser version: 11.5
Tor Browser Security Level: Independent (Any)
Step by step of how to the reproduce the issue:
1. Open brwowser
2. Connect to tor
3. Open any website
4. Go home ...Operating System: Lineageos 19.1 (Android 12L)
Tor browser version: 11.5
Tor Browser Security Level: Independent (Any)
Step by step of how to the reproduce the issue:
1. Open brwowser
2. Connect to tor
3. Open any website
4. Go home and change the wallpaper
5. (on my device, I have to lock and unlock the device for material you to change the device theme)
6. Once the device theme is changed, open the browser again
7. You can see the browser is now at the starting position (asking you to connect to tor network), same behaviour as pressing the close button
I can't reproduce this on mozilla firefox for android or any of its forks, seems to be a tor browser only bug
I've also tested on a OneUi 2.5 (android 10) device, doesn't crash there
Edit: while testing to reproduce the bug on my other(android 10) device, I found that changing device theme between dark and light also closes the browser (same behaviour), this also happens on my android 12L devicehttps://gitlab.torproject.org/tpo/web/manual/-/issues/84[Edit] Browser Add-ons2022-01-20T19:16:08Zkulsoom.zahrakulsoomzahra24@gmail.com[Edit] Browser Add-onsOn the [PLUGINS, ADD-ONS AND JAVASCRIPT](https://tb-manual.torproject.org/plugins/) page
![image](/uploads/41c0bfe7b361814bfed8edd587324654/image.png)
"It is highly NOT recommended to install add-ons because doing so will make your Tor...On the [PLUGINS, ADD-ONS AND JAVASCRIPT](https://tb-manual.torproject.org/plugins/) page
![image](/uploads/41c0bfe7b361814bfed8edd587324654/image.png)
"It is highly NOT recommended to install add-ons because doing so will make your Tor Browser's fingerprint unique, thus compromising your privacy and security even when using the Tor Browser."
These lines can be added to explain our users **why** installing add-ons on TB is discouraged.https://gitlab.torproject.org/tpo/web/community/-/issues/89[FAQ Trainer] Can I use the tor network to browse normal https websites?2022-05-11T21:12:45ZNah[FAQ Trainer] Can I use the tor network to browse normal https websites?Actions:
- [x] Merge f.a.q phase 1 and 2
- [x] Cross reference with the support portal
- [ ] Improve or Answer question
- [ ] Upload to website and close ticket
**Child questions:**
* Can I browse http sites?
* What happens if I use a p...Actions:
- [x] Merge f.a.q phase 1 and 2
- [x] Cross reference with the support portal
- [ ] Improve or Answer question
- [ ] Upload to website and close ticket
**Child questions:**
* Can I browse http sites?
* What happens if I use a page without https?
* So the https make it secure? They know the website that you’re visiting?
* About DNS over TLS how does it contrast? When someone is using Tor with HTTPS, does the DNS still knows where you will go?Community Portal: Public Launchhttps://gitlab.torproject.org/tpo/web/community/-/issues/97[FAQ Trainer] Can I use Tor for everything or would I be spending Tor resources?2022-05-11T21:02:04ZNah[FAQ Trainer] Can I use Tor for everything or would I be spending Tor resources?Actions:
- [x] Merge f.a.q phase 1 and 2
- [x] Cross reference with the support portal
- [ ] Improve or Answer question
- [ ] Upload to website and close ticket
**Child questions:**
* When to use Tor?
* Should I use Tor for everything o...Actions:
- [x] Merge f.a.q phase 1 and 2
- [x] Cross reference with the support portal
- [ ] Improve or Answer question
- [ ] Upload to website and close ticket
**Child questions:**
* When to use Tor?
* Should I use Tor for everything or just some things?
* Can I use Tor as my fulltime browser?Community Portal: Public Launchhttps://gitlab.torproject.org/tpo/web/community/-/issues/87[FAQ Trainer] Does Tor protects all my Internet traffic?2022-05-11T21:01:23ZNah[FAQ Trainer] Does Tor protects all my Internet traffic?Actions:
- [x] Merge f.a.q phase 1 and 2
- [x] Cross reference with the support portal
- [ ] Improve or Answer question
- [ ] Upload to website and close ticket
I think it should also answer the following.
**Child questions:**
* Can T...Actions:
- [x] Merge f.a.q phase 1 and 2
- [x] Cross reference with the support portal
- [ ] Improve or Answer question
- [ ] Upload to website and close ticket
I think it should also answer the following.
**Child questions:**
* Can Tor help you against viruses?
* Will Tor help me if my computer is infected with malware? Is Tor browser the same as anti-malware?
* How does Tor articulate with apps that track our data, as whatsapp, etc? #98
* Does it protect against Bots? Does it also prevents adds on social media? And pop-ups? #98
* If someone is watching my traffic, they can see anything suspicious?
* Can Tor protect my whatsapp identity on my phone? #98Community Portal: Public Launchhttps://gitlab.torproject.org/tpo/web/community/-/issues/88[FAQ Trainer] Does using Tor with VPN make it more secure for me?2022-05-11T21:01:47ZNah[FAQ Trainer] Does using Tor with VPN make it more secure for me?Actions:
- [x] Merge f.a.q phase 1 and 2
- [x] Cross reference with the support portal
- [ ] Improve or Answer question
- [ ] Upload to website and close ticket
**Child questions:**
* Using an VPN with Torify is ok?
* Difference between...Actions:
- [x] Merge f.a.q phase 1 and 2
- [x] Cross reference with the support portal
- [ ] Improve or Answer question
- [ ] Upload to website and close ticket
**Child questions:**
* Using an VPN with Torify is ok?
* Difference between VPN and TorCommunity Portal: Public Launchhttps://gitlab.torproject.org/tpo/web/community/-/issues/94[FAQ Trainer] Is it normal that is slower?2022-05-11T21:02:12ZNah[FAQ Trainer] Is it normal that is slower?Actions:
- [x] Merge f.a.q phase 1 and 2
- [x] Cross reference with the support portal
- [ ] Improve or Answer question
- [ ] Upload to website and close ticket
**Child questions:**
* Is Tor slower because it is running from a common di...Actions:
- [x] Merge f.a.q phase 1 and 2
- [x] Cross reference with the support portal
- [ ] Improve or Answer question
- [ ] Upload to website and close ticket
**Child questions:**
* Is Tor slower because it is running from a common directory on the computer?
* I used Tor for about 2 months, but the connection is slow, it’s kinda discouraging, you know? Is there a way to make it faster?
* The speed in the Browser is a little slow comparing to VPN – which one consumes more data?
* Why is Tor so slow?Community Portal: Public Launchhttps://gitlab.torproject.org/tpo/web/community/-/issues/90[FAQ Trainer] Is it possible to find out the path that a client is taking on ...2022-05-11T21:16:57ZNah[FAQ Trainer] Is it possible to find out the path that a client is taking on the Tor Network?Actions:
- [x] Merge f.a.q phase 1 and 2
- [ ] Cross reference with the support portal
- [ ] Improve or Answer question
- [ ] Upload to website and close ticket
**Child questions:**
* Can exit nodes eardrop on communication?
* Tor will ...Actions:
- [x] Merge f.a.q phase 1 and 2
- [ ] Cross reference with the support portal
- [ ] Improve or Answer question
- [ ] Upload to website and close ticket
**Child questions:**
* Can exit nodes eardrop on communication?
* Tor will never allow to know our localization? Then our information will always be safe?
* Is it possible for Tor to know who is using Tor? I mean, can you do it independently if you aren’t going to do it?
* It doesn’t stock information – the information just passes through it?Community Portal: Public Launchhttps://gitlab.torproject.org/tpo/web/community/-/issues/98[FAQ Trainer] Is it possible to use Facebook on Tor?2022-05-11T21:01:53ZNah[FAQ Trainer] Is it possible to use Facebook on Tor?Actions:
- [x] Merge f.a.q phase 1 and 2
- [x] Cross reference with the support portal
- [ ] Improve or Answer question
- [ ] Upload to website and close ticket
**Child questions:**
* Is it possible to use whatsapp within Tor?
* I have ...Actions:
- [x] Merge f.a.q phase 1 and 2
- [x] Cross reference with the support portal
- [ ] Improve or Answer question
- [ ] Upload to website and close ticket
**Child questions:**
* Is it possible to use whatsapp within Tor?
* I have free Whatsapp and Facebook in my 4G(LTE) plan. If I use Tor, it will consume my data?
* Whatsapp is free on my plan, what does happen if i use it over Tor?
* If I want to use social media, can I use it with Tor without paying taxes?Community Portal: Public Launchhttps://gitlab.torproject.org/tpo/web/community/-/issues/99[FAQ Trainer] Is it possible to use Tor as a encrypted Network in a case of I...2022-05-11T21:02:00ZNah[FAQ Trainer] Is it possible to use Tor as a encrypted Network in a case of Internet Shutdown?Actions:
- [x] Merge f.a.q phase 1 and 2
- [x] Cross reference with the support portal
- [ ] Improve or Answer question
- [ ] Upload to website and close ticketActions:
- [x] Merge f.a.q phase 1 and 2
- [x] Cross reference with the support portal
- [ ] Improve or Answer question
- [ ] Upload to website and close ticketCommunity Portal: Public Launchhttps://gitlab.torproject.org/tpo/web/community/-/issues/92[FAQ Trainer] What is the deepweb?2022-05-11T21:02:22ZNah[FAQ Trainer] What is the deepweb?Actions:
- [x] Merge f.a.q phase 1 and 2
- [x] Cross reference with the support portal
- [ ] Improve or Answer question
- [ ] Upload to website and close ticket
**Child questions:**
* Is Tor and Deep Web the same thing? Is it safe?
* Wh...Actions:
- [x] Merge f.a.q phase 1 and 2
- [x] Cross reference with the support portal
- [ ] Improve or Answer question
- [ ] Upload to website and close ticket
**Child questions:**
* Is Tor and Deep Web the same thing? Is it safe?
* Why is it important to use and no to use Tor? Can you access Deep Web when using Tor?
* why we don't do anything against porn on the network and other illegal/bad thingsCommunity Portal: Public Launchhttps://gitlab.torproject.org/tpo/web/community/-/issues/91[FAQ Trainer] Why doesn't the ISP just block Tor?2022-05-11T21:07:16ZNah[FAQ Trainer] Why doesn't the ISP just block Tor?Actions:
- [x] Merge f.a.q phase 1 and 2
- [ ] Cross reference with the support portal
- [ ] Improve or Answer question
- [ ] Upload to website and close ticket
**Child questions:**
* Does my ISP know if i'm using Tor?
* Can Tor be bloc...Actions:
- [x] Merge f.a.q phase 1 and 2
- [ ] Cross reference with the support portal
- [ ] Improve or Answer question
- [ ] Upload to website and close ticket
**Child questions:**
* Does my ISP know if i'm using Tor?
* Can Tor be blocked?
* If a company bans you from using Tor, what can you do to continue using?Community Portal: Public Launch