Bugs 15921+15922: Fix build errors during Mozilla Tryserver builds.Bug 15947: Support Ubuntu 14.04 LXC hosts via LXC_EXECUTE=lxc-execute env var.Bug 15872: Fix meek pluggable transport startup issue with Windows 7.Bug 13875: Improve the spoofing of vicePixelRatio.Bug 13670: Ensure OCSP requests respect URL bar domain isolation.Bug 1517: Reduce precision of time for Javascript.Bug 15899: Fix errors with downloading and displaying PDFs.Bug 15857: Fix file descriptor leak in updater that caused update failures.Bug 15933: Isolate by base (top-level) domain name instead of FQDN.Bug 15945: Disable NoScript's ClearClick protection for now.Bug 14429: Improved automatic window resizing.Bug 15915: Hide circuit display if it is disabled.Bug 15927: Force update of the NoScript UI when changing security level.Bug 15837: Show descriptions if unchecking custom mode. ![]() Here is the complete list of changes since Tor Browser 4.5: Hopefully you will have as much fun testing this defense as we will! Because this defense reduces the resolution of time available to Javascript to 100 milliseconds for all time sources, and to 250 milliseconds for keypress event timestamps, we are especially interested in hearing any reports about issues with HTML5 video, animation, or game sites. A handful of new attacks have been published recently that take advantage of Javascript's high-performance timers to determine hardware performance, perform keystroke fingerprinting, extract history information, and even steal sensitive data from memory. This release also introduces a new defense against various forms of performance fingerprinting and time-based side channel attacks. This defense can be disabled by setting the about:config pref _windows to false, but please first report any issues you encounter on the feature's trac ticket. In particular, this release re-enables the automatic window resizing fingerprinting defense that first appeared in 4.5a4. In addition to including all of the fixes that were present in the 4.5.1 release, this alpha release also features some additional privacy defenses. Tor Browser 5.0a1 is based on Firefox ESR 31.7.0, which features important security updates to Firefox. The first alpha release in the new 5.0 series of the Tor Browser is now available from our extended downloads page as well as the distribution directory.
0 Comments
Leave a Reply. |