Silk Road forums
Discussion => Security => Topic started by: hornblower on February 19, 2013, 08:58 pm
-
I'm having a problem with Tor.
When I start it, there's a notice of a security update. When I got to the TorProject download page, I see that the latest version is the one that I'm currently running (tor-browser-2.3.25-2_en-US).
I tried 'New Identity' several times and I still get the notice to update TBB.
I then ran the executable to unpack to see if that made a difference, and the security update notice disappears after the first time I run TBB but then reappears every time after.
Can someone help me out here?
-
I noticed the same thing, seems really sketchy, think its best to wait and see.
-
seen that too if you look at there blog
it says that there i guess was a update before of a newer one then 2.3.25.2
it was a 2.3.25.3
and it says that its not safe and that they have changed all the downloads to a downgraded version for security ..
so the one ur running is ok ..
the one with the 3 at the end is the one that u dont want.. i think they put that up so that people running the newer one downgrade.. to 2.3.25.2
-
TOR seems to be pretty F'd right now... does running in linux actually improve speed?
-
Sub for easy eaxtract.
-
So is version 2.3.25-2 the latest? I went to the website and that was the one they had listed for download.
-
So is version 2.3.25-2 the latest? I went to the website and that was the one they had listed for download.
no they had a new one.. some people who just downloaded the software got it..
they found a bug in it..
so they reverted everyone back to that page to update to the older version .. if you are on that ur good
-
Ok im a little bit confused. Also saw the update notice, I don't see it when I open TOR but only when I open a new tab and click home.
When I try to see what version I'm using from the Vidalia control panel all I see is 0.2.3.25
cant see a 2 or 3 at the end so I'm not sure which one I'm using, have downloaded the update (tor-browser-2.3.25-2_en-US) but did not install.
Is there another way to check my version? and what the correct one is I should be using. Forgive my stupidity. Think Ive done the right thing by keeping the bundle I'm on now?
Just checked the TOR blog and it seems there is a new one posted Feb 22nd - Tor Browser Bundle (2.3.25-4)
Not sure what to do.
Edit:
From the blog:
Very important: if you've been using the Tor Browser Bundles with Firefox 10.0.x, you must not attempt to overwrite it with the new bundle. Open these into their own directory and do not copy any profile material from older TBB versions.
I am using firefox 10.0.12, so that would mean I need to delete TOR all together and install this new one if I was to update to 2.3.25-4 ?
I usually give these things more thought without asking but I'm sick and stressed out at the moment, from various other shit.
-
DUDUDUUDUDUDDDEEESS!!
DELETE THE FUCKING TOR BROWSER ..
THEN FUCKING INSTALL IT FROM THERE WEBSITE ALL OVER AGAIN..
YOU HAVE TO DELETE IT COMPLETELY IF YOU ACCIDENTLY OVER WROTE IT..
-
I didnt update it and its been demanding i do but now it doesnt anymore lol
-
God I hope these people really know what they're doing... sometimes they make me wonder.
-
Ok im a little bit confused. Also saw the update notice, I don't see it when I open TOR but only when I open a new tab and click home.
When I try to see what version I'm using from the Vidalia control panel all I see is 0.2.3.25
cant see a 2 or 3 at the end so I'm not sure which one I'm using, have downloaded the update (tor-browser-2.3.25-2_en-US) but did not install.
Is there another way to check my version? and what the correct one is I should be using. Forgive my stupidity. Think Ive done the right thing by keeping the bundle I'm on now?
Just checked the TOR blog and it seems there is a new one posted Feb 22nd - Tor Browser Bundle (2.3.25-4)
Not sure what to do.
Edit:
From the blog:
Very important: if you've been using the Tor Browser Bundles with Firefox 10.0.x, you must not attempt to overwrite it with the new bundle. Open these into their own directory and do not copy any profile material from older TBB versions.
I am using firefox 10.0.12, so that would mean I need to delete TOR all together and install this new one if I was to update to 2.3.25-4 ?
I usually give these things more thought without asking but I'm sick and stressed out at the moment, from various other shit.
i'm with this guy, mine also has 4 at the end so is that good ?
so what kind of a bug would it be I wonder ?
-
I don't think it's really all that critical, provided you don't use the TBB to surf the web as your usual, everyday browser. The version of Firefox ESR that the Tor project distributes as part of the bundle jumped from 10.x to 17.x -- about a year's worth of fixes, etc..
Again, personally I don't think it matters too much as long as you don't use it regularly. I did see something about rolling back an update to OpenSSL libs or something or other though, which is definitely disconcerting. Usually you don't downgrade something unless there's a pretty serious hole. I'm also clueless about this "can't use any of your old profile" thing. Makes very little sense to me, but it's their project... they should know, right.
-
Check out the blog on the Tor site for specifics. The short of it is that they posted a new release too early and it wasn't quite ready.
It now appears that all is fixed with the latest release so simply download it, erase the old version, and install the new one.
No worries. :)