-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
Hi everyone,
We have uploaded new bundles [1] for OS X, Linux, and Windows. In addition to the new Tor, the bundles also have a new Firefox (10.0.5esr) and Vidalia 0.2.19. Please see Docs/changelog for details and make sure you test all the components.
You have until June 10th 2012 13:00 GMT to test and report back. Please email this list directly with results or if you have any questions. Keep in mind that an email saying "I tested TBB on Debian Wheezy and found no bugs" is just as useful as a list of issues.
We are working on building a manual TBB test suite for you to use. In the meantime, see #5292 [2], the BuildSignoff wiki page [3], and the TBB [4] design document for information about different types of tests you can perform.
Thank you for helping us make the Tor Browser Bundle even better. I will try to be more responsive during this test round than the previous one, so please don't hesitate to email if you have questions. If you have any suggestions on things we can do better, please let me know.
[1]: https://archive.torproject.org/tor-package-archive/tor-qa/tor-0.2.2.37/ [2]: https://trac.torproject.org/projects/tor/ticket/5292 [3]: https://trac.torproject.org/projects/tor/wiki/doc/build/BuildSignoff [4]: https://www.torproject.org/projects/torbrowser/design/#Testing
Thanks,
- -- Runa A. Sandvik
Hi,
Am 09.06.2012 um 15:09 schrieb Runa A. Sandvik:
You have until June 10th 2012 13:00 GMT to test and report back.
I've tested TorBrowser-2.2.37-1-osx-x86_64-de under Mac OS X 10.7.4 on an iMac with a 2.5 GHz Intel Core i5 CPU.
• "TBB Launches successfully": OK • "Connects to the Tor network": OK • "Browser toolbars and menus work. Tab dragging works.": OK • "All extensions are present and functional": OK - HTTPS-Everywhere 2.0.5 - NoScript 2.4.4 - Torbutton 1.4.6 • "Web browsing works as expected. See Test Pages." - HTTP, HTTPS, .onion browsing works - HTML5 videos (YT) works - http://html5demos.com/web-socket is either "not connected" or "Socket closed" - Evercookies remain (windowData mechanism) even after deleting the whole cache and using a new identity
Summary: no problems found so far. Evercookie might be a privacy issue.
Regards
Lutz
Thus spake Lutz Horn (tichodroma@posteo.de):
I've tested TorBrowser-2.2.37-1-osx-x86_64-de under Mac OS X 10.7.4 on an iMac with a 2.5 GHz Intel Core i5 CPU.
- Evercookies remain (windowData mechanism) even after deleting the whole cache and using a new identity
It turns out Lutz was using Vidalia's "New Identity" here rather than Torbutton's.
Technically I'd call that a dup of this UI/usability bug: https://trac.torproject.org/projects/tor/ticket/5277
Hopefully the TBB-alpha series will make mistakes like this less likely. If you have better ideas, commenting on tor-talk or tor-dev are probably the best places. Or file a new bug.
Testing: tor-browser-gnu-linux-x86_64-2.2.37-1-dev-en-US.tar.gz Platform: Fedora 16 Processor: AMD Phenom II X6 1090T Black
TBB Launches successfully — OK Connects to the Tor network — OK Browser toolbars and menus work. Tab dragging works. — OK All extensions are present and functional — OK Web browsing works as expected: (mixed results) decloak.net: Returned 200 OK and an empty response deanonymizer.com: Timed out (repeatedly) ip-test.info: OK ha.ckers.org/mr-t: Said I wasn't using Tor. Else OK html5demos.com/web-socket: OK (Socket closed) samy.pl/evercookie: OK (new identity clears cookie)
Other: Computer became unresponsive several times during TBB use. No definite pattern noticed. Also, I encountered a lot more timeouts than I have ever seen before (though this could just be Comcast having issues).
—Sam
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
Testing: tor-browser-gnu-linux-x86_64-2.2.37-1-dev-en-US.tar.gz Platform: Fedora 16 Processor: AMD Phenom II X6 1090T Black
TBB Launches successfully — OK Connects to the Tor network — OK Browser toolbars and menus work. Tab dragging works. — OK All extensions are present and functional — OK Web browsing works as expected: (mixed results) decloak.net: Returned 200 OK and an empty response deanonymizer.com: Timed out (repeatedly) ip-test.info: OK ha.ckers.org/mr-t: Said I wasn't using Tor. Else OK html5demos.com/web-socket: OK (Socket closed) samy.pl/evercookie: OK (new identity clears cookie)
Other: Computer became unresponsive several times during TBB use. No definite pattern noticed. Also, I encountered a lot more timeouts than I have ever seen before (though this could just be Comcast having issues).
—Sam
- -- Sam Whited pub 4096R/EC2C9934
SamWhited.com sam@samwhited.com 404.492.6008
Testing: tor-browser-gnu-linux-x86_64-2.2.37-1-dev-en-US.tar.gz Platform: OpenSUSE 12.1 Processor: Pentium(R) Dual-Core CPU T4300 @ 2.10GHz
TBB Launches successfully - OK Connects to the Tor network - OK Browser toolbars and menus work. Tab dragging works. - OK
All extensions are present and functional - OK - HTTPS-Everywhere 2.0.5 - NoScript 2.4.4 - TorButton 1.4.6
WebBrowsing works as expected - OK - HTTP, HTTPS, .onion browsing works - HTML5 videos work - ip-test.info - OK - samy.pl/evercookie - OK (new identity clears cookie) - html5demos.com/web-socket - Not Connected / Socket Closed
Summary: No issues found.
On Sat, Jun 9, 2012 at 8:09 AM, Runa A. Sandvik runa@torproject.org wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
Hi everyone,
We have uploaded new bundles [1] for OS X, Linux, and Windows. In addition to the new Tor, the bundles also have a new Firefox (10.0.5esr) and Vidalia 0.2.19. Please see Docs/changelog for details and make sure you test all the components.
You have until June 10th 2012 13:00 GMT to test and report back. Please email this list directly with results or if you have any questions. Keep in mind that an email saying "I tested TBB on Debian Wheezy and found no bugs" is just as useful as a list of issues.
We are working on building a manual TBB test suite for you to use. In the meantime, see #5292 [2], the BuildSignoff wiki page [3], and the TBB [4] design document for information about different types of tests you can perform.
Thank you for helping us make the Tor Browser Bundle even better. I will try to be more responsive during this test round than the previous one, so please don't hesitate to email if you have questions. If you have any suggestions on things we can do better, please let me know.
Thanks,
Runa A. Sandvik
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux)
iQIcBAEBCAAGBQJP00qaAAoJEOFf5ch5L7E4iwAP/3hH7hjrsl6PBfB4ADXmNso9 t6GaY6fOL6ZLodwJpguLDCOdAYb+ck63OszhS4RST1f2IJf4GMApN/ulAhUPxPpK bR59UoPmzdc0kCvs+bJ+ifubqAdSU0BzW897lOYD/ELnMyfXKjVrokrqI769bAS3 7clvSCf+nivsNyLEx2uTJLJH43I8L8nEMuqLbc7H4mlqAOOI6w9BfXz7MRud70yP CB+4Rm7ZTg1pbbU03Uh7kmbHi5/92rf1X/AhhJEVk3VNNu2A0B+dpO1zXAWPd+i8 WW+p2YOXxV0nQgYitz00Ru0OBivJhpLjbqKOgbbsdP6tr3gON3hq20QEh3B45oY0 XoEAMXHE5KC0Uuz6fmuUATTEQUn4fO+c07OyHVtgVrljq9kQHPD6gerGZloZiYGT iGFqV+xnCQyNVScGSiGtK9zrm5IwR4fNZtaO+Xleqs5xV9lJZhjepH0mvRz3/Xqu t8q8VP9l4vqHI+new/wfDghGO9v4lOU/lCHpOiAer/G6ZpK3B2pQaBWHtI4VUHmj h74/TNKMdJMlJ1s15Qb5DQMDUiIcCyOPCNVdMkc/cSlsNyrAjrwsAksYa10cWbRL m6PONxXAeTf4snBvKjGLDYByQyRIM6HvnjaXZlC2MoPKw0kx1YLIcLHyo/6s3yCM LtCQ37Ovo203zpxMCYYV =O/9s -----END PGP SIGNATURE----- _______________________________________________ tor-qa mailing list tor-qa@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-qa
Testing: tor-browser-gnu-linux-x86_64-2.2.37-1-dev-en-US.tar.gz Platform: Ubuntu 10.04 x86 Processor: Intel Pentium t4200
TBB Launches successfully --- OK Connects to the Tor network --- OK Browser toolbars and menus work. Tab dragging works. --- OK All extensions are present and functional - OK Web browsing works as expected. See Test Pages. - OK
Web browsing works as expected: (mixed results) decloak.net: Returned 200 OK and an empty response deanonymizer.com: Timed out (repeatedly) ip-test.info: OK ha.ckers.org/mr-t: Said I wasn't using Tor. Else OK html5demos.com/web-socket OK (Socket closed) samy.pl/evercookie: OK (new identity clears cookie + deleting history deletes cookie when trying to check if cookie is still there)
All extensions are present and functional - OK
HTTPS/HTTP - OK Onion browsing - OK Youtube HTML5 video - OK
Other: In the Torbrowser in the settings -> Privacy -> Tracking, "Tell websites I do not want to be tracked" is not checked? Qt: Session management error: None of the authentication protocols specified are supported <-- when ./start-tor-browser
Jurre
Thus spake Jurre van Bergen (drwhax@2600nl.net):
Testing: tor-browser-gnu-linux-x86_64-2.2.37-1-dev-en-US.tar.gz Platform: Ubuntu 10.04 x86
Other: In the Torbrowser in the settings -> Privacy -> Tracking, "Tell websites I do not want to be tracked" is not checked?
Not a bug: https://trac.torproject.org/projects/tor/ticket/5501#comment:23
Qt: Session management error: None of the authentication protocols specified are supported <-- when ./start-tor-browser
Known issue: https://trac.torproject.org/projects/tor/ticket/5261
Looks like it just needs someone to propose a merge-worthy branch. Seems like a simple fix.
P.S. I know I'm breaking the rules by replying here.. I think perhaps listing known bugs or filing new ones should be allowed replies to testing results, for ease of reference in the historical data.
Testing: tor-browser-gnu-linux-i686-2.2.37-1-dev-en-US.tar.gz Platform: Debian 6.0.5 Processor: Intel(R) Pentium(R) CPU B950 @ 2.10GHz
TBB Launches successfully - OK Connects to the Tor network - OK Browser toolbars and menus work. Tab dragging works. - OK
All extensions are present and functional - OK - HTTPS-Everywhere 2.0.5 - NoScript 2.4.4 - TorButton 1.4.6
WebBrowsing works as expected - OK - HTTP, HTTPS, .onion browsing works - HTML5 videos work (YouTube) - http://ip-check.info/?lang=en - OK - https://panopticlick.eff.org/ - one in 223,553, 17.77 bits of identifying information
Vidalia settings - Use static control/SOCKS port - OK
Summary: No issues found.
On Sat, 9 Jun 2012 14:09:58 +0100 "Runa A. Sandvik" runa@torproject.org wrote:
Hi everyone,
We have uploaded new bundles [1] for OS X, Linux, and Windows. In addition to the new Tor, the bundles also have a new Firefox (10.0.5esr) and Vidalia 0.2.19. Please see Docs/changelog for details and make sure you test all the components.
You have until June 10th 2012 13:00 GMT to test and report back. Please email this list directly with results or if you have any questions. Keep in mind that an email saying "I tested TBB on Debian Wheezy and found no bugs" is just as useful as a list of issues.
We are working on building a manual TBB test suite for you to use. In the meantime, see #5292 [2], the BuildSignoff wiki page [3], and the TBB [4] design document for information about different types of tests you can perform.
Thank you for helping us make the Tor Browser Bundle even better. I will try to be more responsive during this test round than the previous one, so please don't hesitate to email if you have questions. If you have any suggestions on things we can do better, please let me know.
[2]: https://trac.torproject.org/projects/tor/ticket/5292 [3]: https://trac.torproject.org/projects/tor/wiki/doc/build/BuildSignoff [4]: https://www.torproject.org/projects/torbrowser/design/#Testing
Thus spake Katya Titov (kattitov@yandex.com):
Testing: tor-browser-gnu-linux-i686-2.2.37-1-dev-en-US.tar.gz Platform: Debian 6.0.5 Processor: Intel(R) Pentium(R) CPU B950 @ 2.10GHz
I think people can leave off CPU. What we care about here is if you're using the x64 or i386 packages.
- https://panopticlick.eff.org/ - one in 223,553, 17.77 bits of identifying information
Great test url, Katya. We have issues with how Panopticlick is run, though. It has inherent bias against any change from established norms, even if that change is in the direction of uniformity amongst a population.
In particular, the largest sources of entropy in Panopticlick come from our solutions to fingerprinting issues. The largest source of bits (screen resolution) come from what is perhaps our most effective reduction in information available to the fingerprinter: https://trac.torproject.org/projects/tor/ticket/4810#comment:3
Perhaps we should ask EFF to provide us with the Panopticlick source code or so we can run a unique instance to evaluate TBB users only?
I've created this ticket for that: https://trac.torproject.org/projects/tor/ticket/6119
If you have any comments or suggestions wrt the above, please comment on the bugs or create a new tor-qa thread rather than reply here.
Testing: tor-browser-gnu-linux-i686-2.2.37-1-dev-en-US
Platform: Ubuntu 12.04 Precise Pangolin 32-bit
Processor: Intel Core 2 Duo CPU
Graphics: Intel Integrated Graphics Card
*
TBB Launches Successfully. -- SUCCESS
*
Connects to the Tor network. -- SUCCESS
*
Browser toolbars and menus work. Tab dragging works. -- SUCCESS
*
All extensions are present and functional. -- SUCCESS
*
Web browsing works as expected. HTTPS works. .onion sites work.
*
decloak.net -- When I click "Start Test", it takes me to a blank page where nothing happens.
*
deanonymizer.com -- Unable to establish a connection despite multiple tries.
*
*JonDos AnonTest *
*On the home page, I got this message with a Yellow Vidalia icon: "You are using *
*Tor, but your browser profile differs from the recommended `Tor Browser Bundle` *
*default profile." *
*
browserspy.dk -- OK
*
analyze.privacy.net -- OK
*
Mr T -- OK
*
TorCheck at Xenobite -- OK
*
Panopticlick -- My browser was unique among over two million tested so far. Conveying at least 21 bits of information, majority of those from Screen Size and Color Depth (~15 bits)
*
HTML5 Video Test -- The "Switch to Linux" video played after allowing it on NoScript
Unfortunately, I am not on a distro that has SELinux anymore so I will not be able to do the sandboxing tests.
--M
On 06/09/2012 08:09 AM, Runa A. Sandvik wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
Hi everyone,
We have uploaded new bundles [1] for OS X, Linux, and Windows. In addition to the new Tor, the bundles also have a new Firefox (10.0.5esr) and Vidalia 0.2.19. Please see Docs/changelog for details and make sure you test all the components.
You have until June 10th 2012 13:00 GMT to test and report back. Please email this list directly with results or if you have any questions. Keep in mind that an email saying "I tested TBB on Debian Wheezy and found no bugs" is just as useful as a list of issues.
We are working on building a manual TBB test suite for you to use. In the meantime, see #5292 [2], the BuildSignoff wiki page [3], and the TBB [4] design document for information about different types of tests you can perform.
Thank you for helping us make the Tor Browser Bundle even better. I will try to be more responsive during this test round than the previous one, so please don't hesitate to email if you have questions. If you have any suggestions on things we can do better, please let me know.
Thanks,
Runa A. Sandvik
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux)
iQIcBAEBCAAGBQJP00qaAAoJEOFf5ch5L7E4iwAP/3hH7hjrsl6PBfB4ADXmNso9 t6GaY6fOL6ZLodwJpguLDCOdAYb+ck63OszhS4RST1f2IJf4GMApN/ulAhUPxPpK bR59UoPmzdc0kCvs+bJ+ifubqAdSU0BzW897lOYD/ELnMyfXKjVrokrqI769bAS3 7clvSCf+nivsNyLEx2uTJLJH43I8L8nEMuqLbc7H4mlqAOOI6w9BfXz7MRud70yP CB+4Rm7ZTg1pbbU03Uh7kmbHi5/92rf1X/AhhJEVk3VNNu2A0B+dpO1zXAWPd+i8 WW+p2YOXxV0nQgYitz00Ru0OBivJhpLjbqKOgbbsdP6tr3gON3hq20QEh3B45oY0 XoEAMXHE5KC0Uuz6fmuUATTEQUn4fO+c07OyHVtgVrljq9kQHPD6gerGZloZiYGT iGFqV+xnCQyNVScGSiGtK9zrm5IwR4fNZtaO+Xleqs5xV9lJZhjepH0mvRz3/Xqu t8q8VP9l4vqHI+new/wfDghGO9v4lOU/lCHpOiAer/G6ZpK3B2pQaBWHtI4VUHmj h74/TNKMdJMlJ1s15Qb5DQMDUiIcCyOPCNVdMkc/cSlsNyrAjrwsAksYa10cWbRL m6PONxXAeTf4snBvKjGLDYByQyRIM6HvnjaXZlC2MoPKw0kx1YLIcLHyo/6s3yCM LtCQ37Ovo203zpxMCYYV =O/9s -----END PGP SIGNATURE----- _______________________________________________ tor-qa mailing list tor-qa@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-qa
On Sat, Jun 9, 2012 at 2:09 PM, Runa A. Sandvik runa@torproject.org wrote:
We have uploaded new bundles [1] for OS X, Linux, and Windows. In addition to the new Tor, the bundles also have a new Firefox (10.0.5esr) and Vidalia 0.2.19. Please see Docs/changelog for details and make sure you test all the components.
Did anyone test the Vidalia Bundles [1] and/or the standalone Tor [2] for Windows? If not, please do so now and get back to me as soon as possible.
[1]: https://archive.torproject.org/tor-package-archive/tor-qa/tor-0.2.2.37/vidal... [2]: https://archive.torproject.org/tor-package-archive/tor-qa/tor-0.2.2.37/win32...
Thanks,
Thus spake Runa A. Sandvik (runa@torproject.org):
On Sat, Jun 9, 2012 at 2:09 PM, Runa A. Sandvik runa@torproject.org wrote:
We have uploaded new bundles [1] for OS X, Linux, and Windows. In addition to the new Tor, the bundles also have a new Firefox (10.0.5esr) and Vidalia 0.2.19. Please see Docs/changelog for details and make sure you test all the components.
Did anyone test the Vidalia Bundles [1] and/or the standalone Tor [2] for Windows? If not, please do so now and get back to me as soon as possible.
Runa, Erinn, et al: Don't let this lack of testing block anything. If not enough people use the Windows Vidalia bundles to have a testing population for them, then they don't get tested. Release anyway on schedule, and we can later evaluate simply canceling these builds.
On Mon, Jun 11, 2012 at 8:25 AM, Mike Perry mikeperry@torproject.org wrote:
Thus spake Runa A. Sandvik (runa@torproject.org):
On Sat, Jun 9, 2012 at 2:09 PM, Runa A. Sandvik runa@torproject.org wrote:
We have uploaded new bundles [1] for OS X, Linux, and Windows. In addition to the new Tor, the bundles also have a new Firefox (10.0.5esr) and Vidalia 0.2.19. Please see Docs/changelog for details and make sure you test all the components.
Did anyone test the Vidalia Bundles [1] and/or the standalone Tor [2] for Windows? If not, please do so now and get back to me as soon as possible.
Runa, Erinn, et al: Don't let this lack of testing block anything. If not enough people use the Windows Vidalia bundles to have a testing population for them, then they don't get tested. Release anyway on schedule, and we can later evaluate simply canceling these builds.
I agree, not having the Vidalia Bundles and Tor tested is not a blocker. I don't know if Erinn is keeping an eye on this list, but I emailed her yesterday saying the same thing.
[TBB 2.2.37-1 on Win7 SP1 x64] 1. TBB Launches successfully - Success 2. Connects to the Tor network 3a. Browser toolbars and menus work - Success 3b. Tab dragging works - Success 4. All extensions are present and functional - Success 5. Web browsing works as expected 5a. http://samy.pl/evercookie - Success 5b. http://html5demos.com/web-socket - Failure 5c. http://www.youtube.com/watch?v=8LsxmQV8AXk - Success 5d. http://decloak.net/ - Failure: Can't establish connection 5e. http://deanonymizer.com/ - Failure: Can't establish connection 5f. https://ip-check.info/ - Success: Verified on Tor network 5g. http://analyze.privacy.net/ - Success: Verified on different IP 5h. http://ha.ckers.org/mr-t/ - Failure: "It appears you are not using Tor" 5i. http://pseudo-flaw.net/content/defcon/dc-17-demos/d.html - Success 5j. https://torcheck.xenobite.eu/index.php - Success: "Your IP is identified to be a Tor-EXIT."
[TBB 2.2.37-1 x86 on Ubuntu 12.04 LTS x86 VM] 1. TBB Launches successfully - Success 2. Connects to the Tor network 3a. Browser toolbars and menus work - Success 3b. Tab dragging works - Success 4. All extensions are present and functional - Success 5. Web browsing works as expected 5a. http://samy.pl/evercookie - Success 5b. http://html5demos.com/web-socket - Failure 5c. http://www.youtube.com/watch?v=8LsxmQV8AXk - Success 5d. http://decloak.net/ - Failure: Loads a blank page at http://decloak.net/decloak.html 5e. http://deanonymizer.com/ - Failure: Can't establish connection 5f. https://ip-check.info/ - Success: Verified on Tor network 5g. http://analyze.privacy.net/ - Success: Verified on different IP 5h. http://ha.ckers.org/mr-t/ - Failure: "It appears you are not using Tor" 5i. http://pseudo-flaw.net/content/defcon/dc-17-demos/d.html - Success 5j. https://torcheck.xenobite.eu/index.php - Success: "Your IP is identified to be a Tor-EXIT."
-
Colin C. -
Dominic Sim -
Jurre van Bergen -
Katya Titov -
Lutz Horn -
M R -
Mike Perry -
Runa A. Sandvik -
Sam Whited