Trac issueshttps://gitlab.torproject.org/legacy/trac/-/issues2020-06-21T18:05:19Zhttps://gitlab.torproject.org/legacy/trac/-/issues/17141GetTor obsolete mirror list2020-06-21T18:05:19ZcypherpunksGetTor obsolete mirror listIt seems that in case of email rejection due to attachment size limit, the GetTor bot sends an email that links to old and broken mirrors of TBB, Specifically, those two addresses:
https://www.oignon.net/dist/torbrowser/
https://tor.beme...It seems that in case of email rejection due to attachment size limit, the GetTor bot sends an email that links to old and broken mirrors of TBB, Specifically, those two addresses:
https://www.oignon.net/dist/torbrowser/
https://tor.beme-it.de/dist/torbrowser/
They should obviously be replaced by updated links from the mirror list:
https://www.torproject.org/getinvolved/mirrors.html.en
I learned of this bug from the Transifex translation project, where user "runasand" added this notification for translation about two years ago. Since it was two years ago, it is possible that the problem is not actually in GetTor (english version) but rather with the Transifex coordination team that isn't updating the links routinely. Anyway, it seems right now GetTor at least in all languages except english gives these broken links.Sukhbir SinghSukhbir Singhhttps://gitlab.torproject.org/legacy/trac/-/issues/3383GetTor response repeats “Thank you for your request.”2020-06-21T18:04:46ZRobert RansomGetTor response repeats “Thank you for your request.”```
Hello, This is the "GetTor" robot.
Thank you for your request.
Thank you for your request.
It was successfully understood. Your request is currently being processed.
Your package should arrive within the next ten minutes.
``````
Hello, This is the "GetTor" robot.
Thank you for your request.
Thank you for your request.
It was successfully understood. Your request is currently being processed.
Your package should arrive within the next ten minutes.
```https://gitlab.torproject.org/legacy/trac/-/issues/15101Use env in the shebang of the start script2020-06-16T01:27:46ZcypherpunksUse env in the shebang of the start scriptUsing /usr/bin/env bash instead of /bin/bash in the shebang line of the start script improves portability to some Unix-derivates (e.g. BSDs where the bash is usually in /usr/local/bin/bash).
However, there are also systems where env is n...Using /usr/bin/env bash instead of /bin/bash in the shebang line of the start script improves portability to some Unix-derivates (e.g. BSDs where the bash is usually in /usr/local/bin/bash).
However, there are also systems where env is not in /usr/bin/env but in /bin/env, so its a tradeoff.
As I know, tor browser is not running on BSDs so far, but hopefully it will sooner or later and then the shebang will be an issue.
Thanks, for your great work!https://gitlab.torproject.org/legacy/trac/-/issues/31581KDE Desktop file error2020-06-16T01:25:40ZTracKDE Desktop file errorThe freedesktop spec for .desktop files requires the '\' char be escaped. In your desktop file, the Exec= command contains a continuation char with the rest of the command on the next line. Kwinini flags that as an error, no '='.
To fix...The freedesktop spec for .desktop files requires the '\' char be escaped. In your desktop file, the Exec= command contains a continuation char with the rest of the command on the next line. Kwinini flags that as an error, no '='.
To fix, replace the end of the Exec command with "\\" which escapes the bash continuation char.
Tor v8.5.4
**Trac**:
**Username**: Psnarfhttps://gitlab.torproject.org/legacy/trac/-/issues/33520'hacking Tor' web page has a few problems2020-06-16T01:11:29ZTrac'hacking Tor' web page has a few problemsThe page https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Hacking#WaystoBuildTorBrowser for building just the browser has a couple of problems.
The first is that the origin/Master branch doesn't build using those instructi...The page https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Hacking#WaystoBuildTorBrowser for building just the browser has a couple of problems.
The first is that the origin/Master branch doesn't build using those instructions. The 'mach configure' line's first option throws an error. Remove that option and you get ValueError in build/moz.configure/init.configure split-triplet.
I went to branch tor-browser-68.5.0esr-9.5-1 and these went away. The page should point people to either 'oldest branch that builds' or just say use the latest if you're going to hack.
With this version, the steps are good except it misses one. It says that tor-launcher needs to be in browser/extensions. It doesn't say that torbutton needs to be in toolkit/torproject.
I know they are small, but they might save someone else some time.
**Trac**:
**Username**: drjohnson1984https://gitlab.torproject.org/legacy/trac/-/issues/31791disable alt key toggling the menu bar2020-06-16T01:07:38ZThorindisable alt key toggling the menu barFollowing the discussion at https://trac.torproject.org/projects/tor/ticket/31512#comment:10 where I suspect changes to the inner window are happening. Of the plethora of things that can alter the inner window measurements....
`ui.key.m...Following the discussion at https://trac.torproject.org/projects/tor/ticket/31512#comment:10 where I suspect changes to the inner window are happening. Of the plethora of things that can alter the inner window measurements....
`ui.key.menuAccessKey` = `0` will disable the alt key toggling the menu bar on and off
Letterboxing solves this issue, but it can also be very annoying if your letterboxed height keeps jumping sizes. It's not the only thing that can alter your height, but it is something that users can inadvertently trigger (I have fat thumbs, 10 of them, and it really annoys me: hence I set this myself in Firefox)
I'll leave it up to you. If the threat is mitigated, then why remove functionality. Feel free to close... or action ...https://gitlab.torproject.org/legacy/trac/-/issues/31556Tor Browser stack trace2020-06-16T01:06:50ZcypherpunksTor Browser stack trace```
Process: firefox [1585]
Path: /Applications/Tor Browser.app/Contents/MacOS/firefox
Identifier: firefox
Version: 8.5.4 (6019.3.7)
Code Type: X86-64 (Native)
Parent Pr...```
Process: firefox [1585]
Path: /Applications/Tor Browser.app/Contents/MacOS/firefox
Identifier: firefox
Version: 8.5.4 (6019.3.7)
Code Type: X86-64 (Native)
Parent Process: ??? [1]
Responsible: firefox [1585]
User ID: 501
Date/Time: 2019-08-29 __:__:__.___ +____
OS Version: Mac OS X 10.14.6 (18G87)
Report Version: 12
Anonymous UUID: ________-____-____-____-____________
Sleep/Wake UUID: ________-____-____-____-____________
Time Awake Since Boot: 140000 seconds
Time Since Wake: 110000 seconds
System Integrity Protection: enabled
Crashed Thread: 62 Dispatch queue: NSOperationQueue 0x12ebd5480 (QOS: UNSPECIFIED)
Exception Type: EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000008
Exception Note: EXC_CORPSE_NOTIFY
Termination Signal: Segmentation fault: 11
Termination Reason: Namespace SIGNAL, Code 0xb
Terminating Process: exc handler [1585]
VM Regions Near 0x8:
-->
__TEXT 00000001087ae000-00000001087b0000 [ 8K] r-x/rwx SM=COW /Applications/Tor Browser.app/Contents/MacOS/firefox
```
```
Thread 62 Crashed:: Dispatch queue: NSOperationQueue 0x12ebd5480 (QOS: UNSPECIFIED)
0 com.apple.CoreFoundation 0x00007fff35350239 -[__NSSetM addObject:] + 431
1 com.apple.AppKit 0x00007fff32dc731a -[_NSSavePanelTagSetter _checkAndSetTagsForURL:usingAttributeCache:] + 270
2 com.apple.AppKit 0x00007fff32dc7eda -[_NSSavePanelPrefixWatchingTagSetter _checkAndSetTagsForURL:usingAttributeCache:] + 80
3 com.apple.AppKit 0x00007fff32dc768d -[_NSSavePanelTagSetter presentedSubitemDidChangeAtURL:] + 24
4 com.apple.Foundation 0x00007fff3783d81b __74-[NSFilePresenterXPCMessenger _makePresenter:observeChangeWithSubitemURL:]_block_invoke + 49
5 com.apple.Foundation 0x00007fff3781e2ba __95-[NSOperationQueue(NSFileCoordinationSupport) _fc_addUncancellableOperationForReactorID:block:]_block_invoke + 127
6 com.apple.Foundation 0x00007fff375df4ac __NSBLOCKOPERATION_IS_CALLING_OUT_TO_A_BLOCK__ + 7
7 com.apple.Foundation 0x00007fff375df3b4 -[NSBlockOperation main] + 68
8 com.apple.Foundation 0x00007fff375b512d -[__NSOperationInternal _start:] + 685
9 com.apple.Foundation 0x00007fff375df0e7 __NSOQSchedule_f + 227
10 libdispatch.dylib 0x00007fff612495f8 _dispatch_call_block_and_release + 12
11 libdispatch.dylib 0x00007fff6124a63d _dispatch_client_callout + 8
12 libdispatch.dylib 0x00007fff6124cde6 _dispatch_continuation_pop + 414
13 libdispatch.dylib 0x00007fff6124c4a3 _dispatch_async_redirect_invoke + 703
14 libdispatch.dylib 0x00007fff612583bc _dispatch_root_queue_drain + 324
15 libdispatch.dylib 0x00007fff61258b46 _dispatch_worker_thread2 + 90
16 libsystem_pthread.dylib 0x00007fff6148a6b3 _pthread_wqthread + 583
17 libsystem_pthread.dylib 0x00007fff6148a3fd start_wqthread + 13
```https://gitlab.torproject.org/legacy/trac/-/issues/31501NoScript doesnt remember site settings2020-06-16T01:06:43ZTracNoScript doesnt remember site settingsNoScript doesnt keep track of trusted sites. I selected very low priority because this might be a feature.
My Settings:
- Remember history.
- Delete cookies on exit.
**Trac**:
**Username**: protoruserNoScript doesnt keep track of trusted sites. I selected very low priority because this might be a feature.
My Settings:
- Remember history.
- Delete cookies on exit.
**Trac**:
**Username**: protoruserhttps://gitlab.torproject.org/legacy/trac/-/issues/31421Empty Select Field in Help Menu of Tor Browser2020-06-16T01:06:30ZTracEmpty Select Field in Help Menu of Tor BrowserTor Browser 8.5.4 (20190307050101)
There is a hidden empty selection field in the help menu of the browser. If the cursor is placed under "About Tor Browser" the hidden field is highlighted. Selecting the field has no visual effect.
**...Tor Browser 8.5.4 (20190307050101)
There is a hidden empty selection field in the help menu of the browser. If the cursor is placed under "About Tor Browser" the hidden field is highlighted. Selecting the field has no visual effect.
**Trac**:
**Username**: Bronamihttps://gitlab.torproject.org/legacy/trac/-/issues/29254open multiple urls on commandline2020-06-16T01:00:42ZTracopen multiple urls on commandlineAccording to https://tor.stackexchange.com/questions/84/how-do-i-create-a-launcher-script-that-opens-an-url-in-torbrowser-from-the-bu there's been a script running around to allow us to open torbrowser tabs from the commandline...but tha...According to https://tor.stackexchange.com/questions/84/how-do-i-create-a-launcher-script-that-opens-an-url-in-torbrowser-from-the-bu there's been a script running around to allow us to open torbrowser tabs from the commandline...but that was over 5 years ago now, with no sign of whether or not there's a flaw in that approach.
Currently attempts to run
torbrowser-launcher URL
result in
"Tor Browser is already running, but is not responding. To open a new window, you must first close the existing Tor Browser process, or restart your system."
What should happen is the URL should open in a new tab. This allows for scripted opening of multiple tabs.
(I looked for an existing ticket for this but couldn't find one)
**Trac**:
**Username**: themusicgod1https://gitlab.torproject.org/legacy/trac/-/issues/28022Use "/usr/bin/env bash" instead of "/bin/bash" in Browser/execdesktop2020-06-16T00:52:02ZTracUse "/usr/bin/env bash" instead of "/bin/bash" in Browser/execdesktopSome Linux distributions (like mine) don't use the "standard/debian application paths". Normally "/usr/bin/env ${app}" does the trick on most obscure systems.
So changing the interpreter in Browser/execdesktop from "/bin/bash" to "/usr/...Some Linux distributions (like mine) don't use the "standard/debian application paths". Normally "/usr/bin/env ${app}" does the trick on most obscure systems.
So changing the interpreter in Browser/execdesktop from "/bin/bash" to "/usr/bin/env bash" would be the solution.
**Trac**:
**Username**: readingflowerhttps://gitlab.torproject.org/legacy/trac/-/issues/27957Wrong icon placement in Tor Browser 8 installer DMG for macOS2020-06-16T00:51:50ZTracWrong icon placement in Tor Browser 8 installer DMG for macOSAs shown in the attached image, the Tor icon is not placed in the correct position, i.e. the vertical placement is not in line with the Applications icon and covers the Tor lettering. Tested on macOS 10.13 (High Sierra) and 10.14 (Mojave...As shown in the attached image, the Tor icon is not placed in the correct position, i.e. the vertical placement is not in line with the Applications icon and covers the Tor lettering. Tested on macOS 10.13 (High Sierra) and 10.14 (Mojave).
Functionality is not impeded, this is a cosmetic issue.
**Trac**:
**Username**: Ralphhttps://gitlab.torproject.org/legacy/trac/-/issues/27660Investigate Gnuzilla as base for Tor Browser2020-06-16T00:51:05ZtraumschuleInvestigate Gnuzilla as base for Tor Browserhttps://www.gnu.org/software/gnuzilla/
> GNUzilla is the GNU version of the Mozilla suite, and GNU IceCat is the GNU version of the Firefox browser. Its main advantage is an ethical one: it is entirely free software. While the Firefox so...https://www.gnu.org/software/gnuzilla/
> GNUzilla is the GNU version of the Mozilla suite, and GNU IceCat is the GNU version of the Firefox browser. Its main advantage is an ethical one: it is entirely free software. While the Firefox source code from the Mozilla project is free software, they distribute and recommend non-free software as plug-ins and addons. Also their trademark license imposes requirements for the distribution of modified versions that make it inconvenient to exercise freedom 3.
> Privacy protection features
> LibreJS: GNU LibreJS aims to address the JavaScript problem described in Richard Stallman's article The JavaScript Trap.
>
> Https-Everywhere: Extension that encrypts your communications with many major websites, making your browsing more secure.
>
> SpyBlock: Blocks privacy trackers while in normal browsing mode, and all third party requests when in private browsing mode. Based on Adblock Plus.
>
> AboutIceCat: Adds a custom "about:icecat" homepage with links to information about the free software and privacy features in IceCat, and checkboxes to enable and disable the ones more prone to break websites.
>
> Fingerprinting countermeasures: Fingerprinting is a series of techniques allowing to uniquely identify a browser based on specific characterisics of that particular instance (like what fonts are available in that machine). Unlike cookies the user cannot opt-out of being tracked this way, so the browser has to avoid giving away that kind of hints.https://gitlab.torproject.org/legacy/trac/-/issues/24316Tor Browser doesn't filter ads anymore?2020-06-16T00:42:28ZcypherpunksTor Browser doesn't filter ads anymore?Tor Browser includes uBlock Origin. But TBB version 7.0.10 doesn't display the uBlock Origin button in the toolbar anymore. Furthermore, ads seem to not being blocked anymore. What's going on?Tor Browser includes uBlock Origin. But TBB version 7.0.10 doesn't display the uBlock Origin button in the toolbar anymore. Furthermore, ads seem to not being blocked anymore. What's going on?https://gitlab.torproject.org/legacy/trac/-/issues/23282Add option to permanently block resizes of the Tor Browser's default window 1...2020-06-15T23:46:56ZcypherpunksAdd option to permanently block resizes of the Tor Browser's default window 1000x600 sizeAdd option to permanently block resizes of the Tor Browser's default window 1000x600 size
On low resolution laptops it's easy to screw up things when moving the window close to the top bar (on debian) and it gets automatically maximized...Add option to permanently block resizes of the Tor Browser's default window 1000x600 size
On low resolution laptops it's easy to screw up things when moving the window close to the top bar (on debian) and it gets automatically maximized (same thing may happen on other systems such as Windows 7).
I'm aware this wouldn't be your top priority for now given your current agenda and priorities so I put `Very Low` currently.https://gitlab.torproject.org/legacy/trac/-/issues/23154TOR BROWSER USER INTERFACE ISSUE2020-06-15T23:46:36ZcypherpunksTOR BROWSER USER INTERFACE ISSUEall of the tab bar is colored #ebebea, while the outside curves of the current tab are colored #f2f2f2
tbb 7.0.3 on linuxall of the tab bar is colored #ebebea, while the outside curves of the current tab are colored #f2f2f2
tbb 7.0.3 on linuxhttps://gitlab.torproject.org/legacy/trac/-/issues/22942Empty menuitem below "About Tor Browser"2020-06-15T23:45:38ZcypherpunksEmpty menuitem below "About Tor Browser"the bottom of the help menu below the 'about tor browser' option is highlightable
not really criticalthe bottom of the help menu below the 'about tor browser' option is highlightable
not really criticalhttps://gitlab.torproject.org/legacy/trac/-/issues/21182Running multiple instances of Tor Browser2020-06-15T23:40:23ZcypherpunksRunning multiple instances of Tor BrowserSome of us are interested in running multiple Tor Browser instances at the same time; an answer on how to do that was posted here: http://tor.stackexchange.com/a/6401
1. Does the above method have any negative implications (security, an...Some of us are interested in running multiple Tor Browser instances at the same time; an answer on how to do that was posted here: http://tor.stackexchange.com/a/6401
1. Does the above method have any negative implications (security, anonymity, Tor network load, etc.)? Is there something missing or redundant in that method?
2. Default value of `extensions.torbutton.use_privoxy` is `true`, yet even a standard Tor Browser instance sets it to `false`. Is the default value a leftover from older Tor Button versions?https://gitlab.torproject.org/legacy/trac/-/issues/20447Tor Browser Spec is not accurate regarding Session IDs2020-06-15T23:38:57ZTom Rittertom@ritter.vgTor Browser Spec is not accurate regarding Session IDsOr at the least it's confusing. The doc says we clear Session IDs on New Identity, but then says we disable them.
Patch:
```
From 5f5ff04e17ffc45eb0c2889ce6a71c7b2a312da7 Mon Sep 17 00:00:00 2001
From: Tom <tom@ritter.vg>
Date: Mon, 2...Or at the least it's confusing. The doc says we clear Session IDs on New Identity, but then says we disable them.
Patch:
```
From 5f5ff04e17ffc45eb0c2889ce6a71c7b2a312da7 Mon Sep 17 00:00:00 2001
From: Tom <tom@ritter.vg>
Date: Mon, 24 Oct 2016 11:36:29 -0500
Subject: [PATCH] Clarify language about Session IDs (always disabled.)
---
design-doc/design.xml | 3 +--
1 file changed, 1 insertion(+), 2 deletions(-)
diff --git a/design-doc/design.xml b/design-doc/design.xml
index 4ea0bff..36fa33a 100644
--- a/design-doc/design.xml
+++ b/design-doc/design.xml
@@ -1258,8 +1258,7 @@ bar origin.
</para>
<para><command>Implementation Status:</command>
-We currently clear SSL Session IDs upon <link linkend="new-identity">New
-Identity</link>, we disable TLS Session Tickets via the Firefox Pref
+We disable TLS Session Tickets via the Firefox Pref
<command>security.enable_tls_session_tickets</command>. We disable SSL Session
IDs via a <ulink
url="https://gitweb.torproject.org/tor-browser.git/commit/?h=tor-browser-31.6.0esr-4.5-1&id=a01fb747d4b8b24687de538cb6a1304fe27d9d88">patch
--
2.10.1
```https://gitlab.torproject.org/legacy/trac/-/issues/20268Usuability of right-click search for startpage.com2020-06-15T23:38:15ZcypherpunksUsuability of right-click search for startpage.comStartpage.com is one of the preset search engines of the tbb but if one is using it as the default search engine, it isn't possible to use the right-click search function (for a marked expression) because tbb/NoScript will prompt a xss e...Startpage.com is one of the preset search engines of the tbb but if one is using it as the default search engine, it isn't possible to use the right-click search function (for a marked expression) because tbb/NoScript will prompt a xss error message.
As far as I see it, there is already an anti-xss exception rule for Yahoo!, maybe it would be a good idea to add something like
`^https://startpage\.com/do/dsearch`
`^https://startpage.com/rto/search`
as an anti-xss exception rule to NoScript---to improve the usability of startpage.com as default search engine.