[Pkg-anonymity-tools] Tor Browser Launcher 0.2.1 released

Micah Lee micah at micahflee.com
Fri Nov 6 06:19:01 UTC 2015


I've created a signed git tag v0.2.1 in upstream [1].

Here's the changelog:

* Stop using RecommendedTBBVersions and start using more reliable
"release" channel XML
* Converted settings file from pickle format to JSON
* Download tarball signatures to verify, rather than SHA256SUMS and
signature
* Implemented IPolicyForHTTPS to prevent twisted-related crashes in Debian
* Some AppArmor fixes

Sorry I've been so bad at paying attention to the TBL bugs in the Debian
bug tracker.

This release fixes a brand new critical bug related to the Tor changing
the format of the RecommendedTBBVersion file again, but this time
hopefully fixes it for good. It's no long checking that URL for the
latest version, but that it's checking the official "release" channel
XML file URL, the same place Tor Browser checks for updates.

When I first wrote TBL, Tor Browser didn't auto-update itself, but now
it does (and it has other features that TBL originally added, like a
.desktop file so you can open it from the GUI in Linux). I'm considering
handing over all of the update responsibilities to Tor Browser itself,
and TBL will just be responsible for downloading it and verifying its
sig on new systems that don't have it installed yet rather than checking
for updates every day. This release doesn't work that way yet though,
but probably the next release will. [2]

[1] https://github.com/micahflee/torbrowser-launcher/releases/tag/v0.2.1
[2] https://github.com/micahflee/torbrowser-launcher/issues/198

-- 
Micah Lee
OpenPGP: 927F 419D 7EC8 2C2F 149C  1BD1 403C 2657 CD99 4F73



More information about the Pkg-anonymity-tools mailing list