发布于 2014-10-17 00:55:54 | 217 次阅读 | 评论: 0 | 来源: 网友投递
Tor
Tor的全称是“The Onion Router”是第二代洋葱路由（onion routing）的一种实现,用户通过Tor可以在因特网上进行匿名交流,是一个匿名代理服务器。最初该项目由美国海军研究实验室赞助。2004年後期，Tor成为电子前哨基金会的一个项目。2005年后期，EFF不再赞助Tor项目，但他们继续维持Tor的官方网站。
Tor Browser 4.0 发布，此版本现已提供在 Tor Browser Project page 和 distribution directory。
Tor Browser 4.0 主要包括 Firefox 重要的安全更新，因为 POODLE 攻击，禁用了 SSLv3。
跟 3.6 系列相比，最主要的改进是转向了 Firefox 31-ESR。
此版本加入了 3 个版本的 meek 插件运输。事实上， meek-amazon 和 meek-azure 都能在中国很好的运行，不需要获取 bridge 地址。（See tickets #12428, #12778, and #12857 for details）
MacOS 用户请注意：Tor Browser 打算忽略 32 位的 OS X 绑定。如果你在使用 32 位 的 OSX 10.6，请尽快升级你的操作系统。
自 4.0-alpha-3 以来的改进内容：
All Platforms
Translation updates only
Bug 13378: Prevent addon reordering in toolbars on first-run.
Bug 10751: Adapt Torbutton to ESR31's Australis UI.
Bug 13138: ESR31-about:tor shows "Tor is not working"
Bug 12947: Adapt session storage blocker to ESR 31.
Bug 10716: Take care of drag/drop events in ESR 31.
Bug 13366: Fix cert exemption dialog when disk storage is enabled.
Update Firefox to 31.2.0esr
Update Torbutton to 1.7.0.1
Update Tor Launcher to 0.2.7.0.1
Udate fteproxy to 0.2.19
Update NoScript to 2.6.9.1
Bug 13027: Spoof window.navigator useragent values in JS WebWorker threads
Bug 13016: Hide CSS -moz-osx-font-smoothing values.
Bug 13356: Meek and other symlinks missing after complete update.
Bug 13025: Spoof screen orientation to landscape-primary.
Bug 13346: Disable Firefox "slow to start" warnings and recordkeeping.
Bug 13318: Minimize number of buttons on the browser toolbar.
Bug 10715: Enable WebGL on Windows (still click-to-play via NoScript)
Bug 13023: Disable the gamepad API.
Bug 13021: Prompt before allowing Canvas isPointIn*() calls.
Bug 12460: Several cross-compilation and gitian fixes (see child tickets)
Bug 13186: Disable DOM Performance timers
Bug 13028: Defense-in-depth checks for OCSP/Cert validation proxy usage
Bug 13416: Defend against new SSLv3 attack (poodle).
与 3.6.6 相比，不同之处：
All Platforms
Bug 11405: Remove firewall prompt from wizard.
Bug 12895: Mention @riseup.net as a valid bridge request email address
Bug 12444: Provide feedback when “Copy Tor Log” is clicked.
Bug 11199: Improve error messages if Tor exits unexpectedly
Bug 12451: Add option to hide TBB's logo
Bug 11193: Change "Tor Browser Bundle" to "Tor Browser"
Bug 11471: Ensure text fits the initial configuration dialog
Bug 9516: Send Tor Launcher log messages to Browser Console
Bug 13378: Prevent addon reordering in toolbars on first-run.
Bug 10751: Adapt Torbutton to ESR31's Australis UI.
Bug 13138: ESR31-about:tor shows "Tor is not working"
Bug 12947: Adapt session storage blocker to ESR 31.
Bug 10716: Take care of drag/drop events in ESR 31.
Bug 13366: Fix cert exemption dialog when disk storage is enabled.
Update Firefox to 31.2.0esr
Udate fteproxy to 0.2.19
Update Tor to 0.2.5.8-rc (from 0.2.4.24)
Update NoScript to 2.6.9.1
Update Torbutton to 1.7.0.1 (from 1.6.12.3)
Update Tor Launcher to 0.2.7.0.1 (from 0.2.5.6)
Bug 13027: Spoof window.navigator useragent values in JS WebWorker threads
Bug 13016: Hide CSS -moz-osx-font-smoothing values.
Bug 13356: Meek and other symlinks missing after complete update.
Bug 13025: Spoof screen orientation to landscape-primary.
Bug 13346: Disable Firefox "slow to start" warnings and recordkeeping.
Bug 13318: Minimize number of buttons on the browser toolbar.
Bug 10715: Enable WebGL on Windows (still click-to-play via NoScript)
Bug 13023: Disable the gamepad API.
Bug 13021: Prompt before allowing Canvas isPointIn*() calls.
Bug 12460: Several cross-compilation and gitian fixes (see child tickets)
Bug 13186: Disable DOM Performance timers
Bug 13028: Defense-in-depth checks for OCSP/Cert validation proxy usage
Bug 4234: Automatic Update support (off by default)
Bug 11641: Reorganize bundle directory structure to mimic Firefox
Bug 10819: Create a preference to enable/disable third party isolation
Bug 13416: Defend against new SSLv3 attack (poodle).
Windows:
Bug 10065: Enable DEP, ASLR, and SSP hardening options
Linux:
Bug 13031: Add full RELRO hardening protection.
Bug 10178: Make it easier to set an alternate Tor control port and password
Bug 11102: Set Window Class to "Tor Browser" to aid in Desktop navigation
Bug 12249: Don't create PT debug files anymore
Tor Browser Bundle 是一个基于 Firefox ESR (Firefox with extended support) 的 Web 浏览器，默认配置通过 Tor 和 Vidalia 实现了个人隐私保护和匿名。该版本包括三个扩展：Torbutton, NoScript and HTTPS-Everywhere.