Tor Browser issueshttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues2021-07-09T17:19:52Zhttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40478Onion alias url rewrite is broken2021-07-09T17:19:52ZMatthew FinkelOnion alias url rewrite is brokenThe urlbar is not re-written anymore. I tested nightlies from 15 May and it's broken there, too, so it's been broken for a while. I'm testing with `2600.securedrop.tor.onion`.The urlbar is not re-written anymore. I tested nightlies from 15 May and it's broken there, too, so it's been broken for a while. I'm testing with `2600.securedrop.tor.onion`.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/34389Multi-Account Container extension "corrupt" upon installation2021-07-09T17:23:48ZTracMulti-Account Container extension "corrupt" upon installationHi. I'm running TB 9.5 on Ubuntu 20.04. To further improve my privacy, I'd like to install Multi-Account Containers extension to have cookie (session) isolation between tabs. I've tried installing versions that I verified work in vanilla...Hi. I'm running TB 9.5 on Ubuntu 20.04. To further improve my privacy, I'd like to install Multi-Account Containers extension to have cookie (session) isolation between tabs. I've tried installing versions that I verified work in vanilla Firefox. All attempts fail with same error "The add-on downloaded from this site could not be installed because it appears to be corrupt." Screenshot here: https://i.imgur.com/zlCxx2I.png
**Trac**:
**Username**: TechyGruehttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/33854Spoof Network ID2021-07-09T17:19:52ZrichardSpoof Network IDMozilla 1561005 added a unique string identifier to `nsINetworkLinkService.idl`. It's at least partially based off of a hash of the user's IP and MAC address. It's not clear to me what it's used for, but we should probably stub out the i...Mozilla 1561005 added a unique string identifier to `nsINetworkLinkService.idl`. It's at least partially based off of a hash of the user's IP and MAC address. It's not clear to me what it's used for, but we should probably stub out the implementations.
Relevant ticket:
- https://bugzilla.mozilla.org/show_bug.cgi?id=1561005https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/33693snowflake's 0.0.3.0 dummy address means rate limits are skipped means BW cont...2023-05-02T02:20:52ZRoger Dingledinesnowflake's 0.0.3.0 dummy address means rate limits are skipped means BW controller events show no bandwidth usedSnowflake's default bridge pretends to be on 0.0.3.0. It's a dummy address since snowflake-client knows how to connect to the right bridge and ignores the address that Tor tells it.
But my Tor client still uses that bridge address to ma...Snowflake's default bridge pretends to be on 0.0.3.0. It's a dummy address since snowflake-client knows how to connect to the right bridge and ignores the address that Tor tells it.
But my Tor client still uses that bridge address to make decisions. For example, connection_is_rate_limited() decides "no, it isn't rate limited", because tor_addr_is_internal() says 0.0.3.0 is essentially part of localhost. And that choice has a cascading effect where when I attach my nyx to Tor Browser to graph bandwidth use (`nyx -i 9151`), the BW events all say "0 0" because my Tor hasn't sent or received any non-internal bytes.
The quick fix is to keep using a dummy address, but to pick one that isn't an internal address. I confirmed that if I change snowflake's dummy address to 11.0.3.0, then connection_is_rate_limited() decides it's external, my BW events work again, and nyx gives me graphs. That is, Tor is smart enough to know that even though the connection is from the Tor client to the localhost snowflake client, the connection is "really" to the (non-localhost) destination bridge address.
I confess that I don't know which "apparently routable but don't worry we won't actually connect to it, probably" address is the best choice here. :/
The longer term answer is to have some other way to signal that it's a dummy address, or to change the PT interface so we don't need the fake address. But I don't think we need to wait for the longer term answer here.
The reason I noticed this issue is because I am pondering lobbying for the Tor Browser folks to give me a tiny bandwidth graph (or activity spinner) somewhere in the browser, because I got a super slow snowflake, but I was still getting 5-10KBytes/s, and my page did load after like 90 seconds, but if I hadn't been staring at the
```
2020/03/23 09:33:05 Traffic Bytes (in|out): 9018 | 10981 -- (27 OnMessages, 24 Sends)
```
lines I would have assumed that it was wedged.Cecylia BocovichCecylia Bocovichhttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/32615New Fennec onboarding and activitystream conflicts2021-07-09T18:24:30ZMatthew FinkelNew Fennec onboarding and activitystream conflictsIn legacy/trac#32097, we reverted some changes in Fennec's Onboarding and activitystream UI. It seems like this isn't sustainable. Mozilla made more changes with 68.3.0. Let's take a different approach.In legacy/trac#32097, we reverted some changes in Fennec's Onboarding and activitystream UI. It seems like this isn't sustainable. Mozilla made more changes with 68.3.0. Let's take a different approach.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/32418Torbrowser tells on every start, that it can't update although it is newest2022-07-13T07:21:22ZTracTorbrowser tells on every start, that it can't update although it is newestTorbrowser 9.01/Windows 7 x86
Torbrowser tells on every start, that it can't update although it is newest
(I try to attach a screenshot, this seems to be difficult)
**Trac**:
**Username**: YetiTorbrowser 9.01/Windows 7 x86
Torbrowser tells on every start, that it can't update although it is newest
(I try to attach a screenshot, this seems to be difficult)
**Trac**:
**Username**: Yetihttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/32166Tor Browser (and Firefox) clobber my clipboard when I return to the window in...2021-07-09T17:23:48ZRoger DingledineTor Browser (and Firefox) clobber my clipboard when I return to the window in certain ways1) click-click the url in the url bar, so the url is highlighted
2) go to another application, highlight something new with your mouse, and then alt-tab back to the browser.
3) the browser will re-highlight the url for you, clobbering wh...1) click-click the url in the url bar, so the url is highlighted
2) go to another application, highlight something new with your mouse, and then alt-tab back to the browser.
3) the browser will re-highlight the url for you, clobbering whatever you highlighted in the other application.
This behavior is really frustrating because I have two common workflows:
a) highlight a thing in my browser and then paste it onto irc or into a terminal
b) highlight a thing from irc or a terminal and then go back to the browser, ctrl-t to get a new window, and paste it into the url bar of the browser
and if I have done action 'a' as my most recent browser interaction (which is common because one of the ways I finish a browser interaction is by wanting to paste a url into another application), then later when I try action 'b', I end up instead pasting the original url from my earlier browser interaction.
This is a change in the browser behavior compared to a year or two ago -- specifically, I believe step 3 didn't used to happen.
The bug impacts me on both Tor Browser (8.x and 9.x) and Firefox (60esr on Debian).https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/32125Using private obfs4 bridge does not show circuit display2023-10-17T16:14:20ZGusUsing private obfs4 bridge does not show circuit displayAfter providing some private obfs4 bridges, an user reported:
In the Tor Browser (stable and alpha 9.0a8), I cannot view my circuit or click to change my Tor circuit for a website while using a private obfs4.After providing some private obfs4 bridges, an user reported:
In the Tor Browser (stable and alpha 9.0a8), I cannot view my circuit or click to change my Tor circuit for a website while using a private obfs4.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/31888Create unit test in wine to validate widl's output when building IA2Accessibl...2022-05-17T22:51:59ZrichardCreate unit test in wine to validate widl's output when building IA2Accessible interfacesJust to make sure wine doesn't break us in the future. Number of points reflects both dev time and effort to get patch accepted.Just to make sure wine doesn't break us in the future. Number of points reflects both dev time and effort to get patch accepted.richardrichardhttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/31607App menu items stop working2020-07-14T22:25:21ZMark SmithApp menu items stop workingIn the ESR68-based Tor Browser on macOS, the App menu items are not working. For example, choosing `Quit` or pressing `Cmd+Q` has no effect. Same for `Preferences` and `Cmd+,`
I observed this problem while testing the es-ES and en-US bu...In the ESR68-based Tor Browser on macOS, the App menu items are not working. For example, choosing `Quit` or pressing `Cmd+Q` has no effect. Same for `Preferences` and `Cmd+,`
I observed this problem while testing the es-ES and en-US builds from the following location on an older macOS 10.11.6 system:
https://people.torproject.org/~gk/builds/9.0a6-build4/
I will re-test on a 10.14.x system to make sure it isn't specific to macOS 10.11.x.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/31564Android bundles based on ESR 68 are not built reproducibly anymore2021-07-09T18:24:30ZGeorg KoppenAndroid bundles based on ESR 68 are not built reproducibly anymoreI compared two builds on two different machines with what is very likely our toolchain to come (armv7) and it turns out the .apk files are nor built reproducibly anymore.I compared two builds on two different machines with what is very likely our toolchain to come (armv7) and it turns out the .apk files are nor built reproducibly anymore.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/31506Write up comprehensive advice to "Tor unexpectedly exited", and link to it fr...2022-07-09T10:41:45ZRoger DingledineWrite up comprehensive advice to "Tor unexpectedly exited", and link to it from inside Tor BrowserWe've been getting a steady stream of people who fail to run Tor Browser, who get the "Tor unexpectedly exited" error and they have no ideas what to do.
The internets are full of weird advices about what to do in this situation back in ...We've been getting a steady stream of people who fail to run Tor Browser, who get the "Tor unexpectedly exited" error and they have no ideas what to do.
The internets are full of weird advices about what to do in this situation back in 2014, few of which apply now, so people hunting in google are unlikely to solve this on their own.
I think the advice differs depending on the OS -- on Windows, the first step is about disabling antivirus and firewall; on OS X, the advice is...about finding the old tor process and killing it? Or something else?
We should write up a comprehensive "what the error means, what to do, in what order" explanation, and stick it on support.torproject.org so people can find it and so we can point people to it. And then we should link to it from inside Tor Browser, when the thing goes wrong, so there is a canonical place for users to read what they should do.
(And longer term, we should improve the automated handling of this error inside Tor Browser, but that can come later.)https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/31457disable per-installation profiles2022-12-22T11:55:14ZMark Smithdisable per-installation profilesFirefox ESR68 includes installation-specific profiles. See: https://bugzilla.mozilla.org/show_bug.cgi?id=1474285
With our current nightly builds, this causes an extra profile directory to be created and used (and probably our bundled br...Firefox ESR68 includes installation-specific profiles. See: https://bugzilla.mozilla.org/show_bug.cgi?id=1474285
With our current nightly builds, this causes an extra profile directory to be created and used (and probably our bundled browser profile is not be used on Linux and Windows).
We should figure out how to disable this feature or modify it to be compatible with the way we crate and use browser profiles).https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/31450Still use GCC for 64bit Linux debug builds after switch to 68 ESR2020-07-14T22:25:18ZGeorg KoppenStill use GCC for 64bit Linux debug builds after switch to 68 ESRWe switched to `clang` for our Linux builds as Mozilla did but we should still use `gcc` for our debug builds to have a chance of finding serious issues Mozilla missed with `clang` (which happened in the past).We switched to `clang` for our Linux builds as Mozilla did but we should still use `gcc` for our debug builds to have a chance of finding serious issues Mozilla missed with `clang` (which happened in the past).https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/31448gold and lld break linking 32bit Linux bundles we need to resort to bfd2020-07-14T22:25:17ZGeorg Koppengold and lld break linking 32bit Linux bundles we need to resort to bfdFor some reason both `gold`
```
40:57.34 toolkit/library/libxul.so
41:17.86 /var/tmp/dist/binutils/bin/ld.gold.real: internal error in relocate_section, at i386.cc:3684
```
and `lld`
```
40:55.77 toolkit/library/libxul.so
41:04.50 ld.lld...For some reason both `gold`
```
40:57.34 toolkit/library/libxul.so
41:17.86 /var/tmp/dist/binutils/bin/ld.gold.real: internal error in relocate_section, at i386.cc:3684
```
and `lld`
```
40:55.77 toolkit/library/libxul.so
41:04.50 ld.lld: error: dwarf.c:(.debug_info+0x20DE295A): has non-ABS relocation R_386_GOTOFF against symbol '.LC25'
```
fail when linking Firefox 68 in our build setup while `bfd` works.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/31395Remove inline <script> in aboutTor.xhtml2020-07-14T22:25:11ZAlex CatarineuRemove inline <script> in aboutTor.xhtmlWe should move the inline script in aboutTor.xhtml to some .js file so that we can remove the 'unsafe-inline' from about:tor CSP. See legacy/trac#31322.We should move the inline script in aboutTor.xhtml to some .js file so that we can remove the 'unsafe-inline' from about:tor CSP. See legacy/trac#31322.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/31308Sync mozconfig files used in tor-browser over to tor-browser-build for esr682020-07-14T22:25:16ZGeorg KoppenSync mozconfig files used in tor-browser over to tor-browser-build for esr68If we don't make sufficient progress on legacy/trac#23656 this time we should at least make sure all the `mozconfig` files we use for our official builds contain all the things they should contain (and only those) (the `--enable-proxy-by...If we don't make sufficient progress on legacy/trac#23656 this time we should at least make sure all the `mozconfig` files we use for our official builds contain all the things they should contain (and only those) (the `--enable-proxy-bypass-protection` option is one of them; the `MOZILLA_OFFICIAL` changes as well)https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/31293tor-android-service gradle failure when probing network interfaces2021-07-09T17:23:48ZMatthew Finkeltor-android-service gradle failure when probing network interfacesWhen building nightly android-aarch64 and android-x86 (I haven't tried the other platforms), the build fails on tor-android-service with:
```
Starting build: Tue Jul 30 16:12:53 2019
patching file build.gradle
patching file service/buil...When building nightly android-aarch64 and android-x86 (I haven't tried the other platforms), the build fails on tor-android-service with:
```
Starting build: Tue Jul 30 16:12:53 2019
patching file build.gradle
patching file service/build.gradle
patching file service/src/main/java/org/torproject/android/service/TorService.java
Hunk #2 succeeded at 99 (offset 3 lines).
FAILURE: Build failed with an exception.
* What went wrong:
Could not determine a usable local IP for this machine.
```
The failure is on the gradle command:
```
# Build Android Libraries and Apps
$GRADLE_HOME/gradle-4.1/bin/gradle --offline -P androidplugin=3.0.1 -P appcompatVersion=23.4.0 -P compileVersion=26 -P targetVersion=26 -P minVersion=16 assembleRelease -x lint
```https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/31286Include bridge configuration into about:preferences2021-12-17T13:52:51ZGeorg KoppenInclude bridge configuration into about:preferencesTorbutton as a standalone extension is going away (legacy/trac#10760) and while doing so we restructure our toolbar making it more usable by exposing New Identity directly on it (legacy/trac#27511). However, we need to find a new home fo...Torbutton as a standalone extension is going away (legacy/trac#10760) and while doing so we restructure our toolbar making it more usable by exposing New Identity directly on it (legacy/trac#27511). However, we need to find a new home for the bridge configuration as well if we want to remove the onion button from the toolbar. The current plan is to move it to `about:preferences` as a general setting. This ticket tracks that work.richardrichardhttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/31192TBA - Support x86_64 target2020-07-14T22:25:10ZcypherpunksTBA - Support x86_64 targethttps://bugzilla.mozilla.org/show_bug.cgi?id=1480834#c0https://bugzilla.mozilla.org/show_bug.cgi?id=1480834#c0