Slashdot Mirror


Tor Browser Gets a Redesign, Switches To New Firefox Quantum Engine (zdnet.com)

The Tor Browser has rolled out a new interface with the release of v8. From a report: The Tor Browser has always been based on the Firefox codebase, but it lagged behind a few releases. Mozilla rolled out a major overhaul of the Firefox codebase in November 2017, with the release of Firefox 57, the first release in the Firefox Quantum series. Firefox Quantum came with a new page rendering engine, a new add-ons API, and a new user interface called the Photon UI. Because these were major, code-breaking changes, it took the smaller Tor team some time to integrate all of them into the Tor Browser codebase and make sure everything worked as intended. The new Tor Browser 8, released yesterday, is now in sync with the most recent version of Firefox, the Quantum release, and also supports all of its features. This means the Tor Browser now uses the same modern Photon UI that current Firefox versions use, it supports the same speed-optimized page rendering engine and has also dropped support for the old XUL-based add-ons system for the new WebExtensions API system used by Chrome, Opera, Vivaldi, Brave, and the rest of the Chromium browsers.

49 comments

  1. Isn't page render speed pretty irrelevant for Tor? by Anonymous Coward · · Score: 0

    You're going to sit forever anyway, waiting for the traffic to pass through multiple Tor nodes. It's not like a new page renderer is going to solve that.

  2. Tested today by Anonymous Coward · · Score: 1

    First impression is I like it. Video playback seems sluggish but overall positive. Hopefully any NSA addons did not make the cut.

  3. Re: Isn't page render speed pretty irrelevant for by Anonymous Coward · · Score: 1

    Not when you have the assets already cached. Most people donâ(TM)t just visit a site once. I was playing with it this morning. Itâ(TM)s a decent speed improvement even within the restraints of tor

    More impressively msmash posted an actual tech article not a biasedpolitical article for a change. Losing too many readers now I suspect

  4. Re:Isn't page render speed pretty irrelevant for T by Anonymous Coward · · Score: 0

    You miss the point entirely although yes the new engine is faster.

  5. Re:Isn't page render speed pretty irrelevant for T by Tough+Love · · Score: 3, Insightful

    It's not like a new page renderer is going to solve that.

    The point is to be synced up to the current Firefox codebase. Which by the way is awesome. I have all my favorite extensions running, in spite of all the FUD about the new Webextensions API.

    --
    When all you have is a hammer, every problem starts to look like a thumb.
  6. Good by Anonymous Coward · · Score: 0

    XUL-based extensions were insecure as hell and have no business being in a browser associated with Tor.

    And this time around, we're not going to have a handful of Slashdotters proclaiming that they're going to drop the broswer forever because their 20-year-old RSS reader add-on won't work anymore and something something Looks Like A Clone of Chrome.

  7. Tor is for criminals by Anonymous Coward · · Score: 0

    (says the FBI)

    ps: Tor Traffic on the Internet is visible as obvious Tor Traffic. No, the encrypted data can't necessarily be seen but the fact that you using Tor is. Simply by using Tor, you might get put on a "watch list".

    1. Re: Tor is for criminals by Anonymous Coward · · Score: 0

      So the US government are criminals then since they designed it and built it.

      They were criminals before and after tor,

    2. Re: Tor is for criminals by Anonymous Coward · · Score: 1

      Just like the Gov't said after the Gulf War broke out that there was a high demand for people that can speak Arabic languages and then turned around and put people on a watch-list for taking Arabic language classes. You just can't win.

    3. Re: Tor is for criminals by Anonymous Coward · · Score: 0

      We are all on watch lists. The only difference is keywords in a db.

  8. Who can afford to run a tor exit node ? by dargaud · · Score: 4, Interesting

    I really wonder that. I support tor. I've never actually used it because I don't have much to hide, but I understand that other do. So I ran a tor relay (not exit) as my way of supporting the project for a while; from my home adsl. After a while I noticed some weird stuff going on. Some websites (important ones) wouldn't load properly. Emails sent would bounce or simply never reach their destination. After looking at the problem I found that my IP was on some minor blacklists. I stopped the relay and after 2 days I was off the blacklists. Hence my question, if running a simple relay gets you blacklisted, what does running an exit point does to your other internet usage from that IP ? Who can afford separate IPs besides institutions ? So who is really really running them ? Certainly not private citizens...

    --
    Non-Linux Penguins ?
    1. Re:Who can afford to run a tor exit node ? by Anonymous Coward · · Score: 0, Troll

      I'm pretty sure the US government is running several tor exit nodes in order to undermine China's Great Firewall. See, Trump is a racist that hates yellow people, and he does everything he can to make things worse for the panfaces. This includes attempting to give the chinks the ability to access forbidden information. Trump probably also thinks that Chinese women have sideways, weird slanted vaginas. The racist cheeto needs to be impeached. Hillary is the real president. She won the popular election, NOT Donald Drumpf. Drumpf is such a stupid name.

    2. Re:Who can afford to run a tor exit node ? by Anonymous Coward · · Score: 0

      www.altaiza.com
      Altaiza
      Web Development Company Nagpur

    3. Re:Who can afford to run a tor exit node ? by Anonymous Coward · · Score: 1

      >So who is really really running them ? Certainly not private >citizens...

      Probably the same government entity that funded the development of TOR.

      I have a similar story with a VPN - connected to a VPN called "Big Ass Networks" with an exit node in Jacksonville, FL. Advertised "unlimited bandwidth, privacy, no restrictions" etc - I looked up the address of the "data center" and its inside the Jacksonville FL Federal Reserve Building. No joke. I noped the fuck right out of that trial offer and moved to another VPN provider.

    4. Re:Who can afford to run a tor exit node ? by Anonymous Coward · · Score: 0

      How much are you paid to troll Slashdot in an attempt to turn every comment into a flaming argument about Trump? I hope its worth it having to copypasta a similar comment like that on every article here. How many websites do you do this on?

    5. Re: Who can afford to run a tor exit node ? by Anonymous Coward · · Score: 0

      Don't feed the trolls.

    6. Re:Who can afford to run a tor exit node ? by ftobin · · Score: 2

      You can run something like a Linode instance pretty cheaply and get more IPs. I've run a highly restricted exit node in the past (low bandwidth, select ports), and I've had the same problems with you if I try to use my Linode as a web proxy. My most recent problem has been with Shut Up and Sit Down RSS feeds, which are blocking my host :-\

    7. Re:Who can afford to run a tor exit node ? by Anonymous Coward · · Score: 0

      I really wonder that. I support tor. I've never actually used it because I don't have much to hide, but I understand that other do.

      Wrong, wrong, wrong. In all counts.

      Did I mention you are wrong?

    8. Re:Who can afford to run a tor exit node ? by tlhIngan · · Score: 3, Informative

      You can run something like a Linode instance pretty cheaply and get more IPs. I've run a highly restricted exit node in the past (low bandwidth, select ports), and I've had the same problems with you if I try to use my Linode as a web proxy. My most recent problem has been with Shut Up and Sit Down RSS feeds, which are blocking my host :-\

      And that's just because no matter how noble the cause, idiots will just ruin it. You don't need a list of Tor exit nodes because if you run a reasonably popular website, you'll find out quite rapidly what they are and auto-blacklist t hem.

      It's why CDNs like CloudFlare block Tor - the abuse from Tor exit nodes ensures that whatever trigger you use, it'll be triggered and you'll end up blocking it. It's not like it's done deliberately - you don't have to seek out new Tor exit nodes. They just make themselves known.

      I'd even venture to say if you want to allow Tor traffic, you have to whitelist them specifically It's not that Tor is bad, it's just that it's got a bunch of bad actors that really do ruin it for those who need it.

    9. Re:Who can afford to run a tor exit node ? by Anonymous Coward · · Score: 0

      That would be the CIA. The CIA runs a host (pun not intended) of exit nodes to destabilize certain nations that are worthy of being destabilized.

    10. Re:Who can afford to run a tor exit node ? by Anonymous Coward · · Score: 0

      Presumably the blacklists scrape the list of tor relays, so you would need to run an unlisted relay instead (I guess tor calls this a bridge). It will be difficult to make it known to users without also making it known to blacklists.

    11. Re:Who can afford to run a tor exit node ? by ftobin · · Score: 1

      And that's just because no matter how noble the cause, idiots will just ruin it. You don't need a list of Tor exit nodes because if you run a reasonably popular website, you'll find out quite rapidly what they are and auto-blacklist t hem.

      I should mention that I don't and never did allow access on port 80 or 443, yet Shut up and Sit Down's RSS feed blocks me. There is no way my host was causing issues for their site, with the 20 KB/s of bandwidth I allowed. Additionally, I only allowed ports like IRC, DNS, and SMTP (+ ssl versions).

      Same with Steam community forums -- my host was blocked there too (and might still be).

      Don't forget that the GGP said he had a non-exit relay and was getting blocked.

    12. Re:Who can afford to run a tor exit node ? by Anonymous Coward · · Score: 0

      And that's just because no matter how noble the cause, idiots will just ruin it. You don't need a list of Tor exit nodes because if you run a reasonably popular website, you'll find out quite rapidly what they are and auto-blacklist t hem.

      So, Tor is what you get if Twitter were to suddenly stop moderating content? Like, every user would just spammed the first day and have a massive blackist?

    13. Re:Who can afford to run a tor exit node ? by bill_mcgonigle · · Score: 1

      Check out the Library Freedom Project.

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    14. Re:Who can afford to run a tor exit node ? by AHuxley · · Score: 1

      Governments.

      --
      Domestic spying is now "Benign Information Gathering"
    15. Re: Who can afford to run a tor exit node ? by Anonymous Coward · · Score: 0

      To be fair it's getting really hard to distinguish the trolls from the genuine idiots these days. Though it's not clear if that's an issue as cutting-edge trolling research seems to indicate that subterfuge is much less important in trolling than previously assumed.

    16. Re:Who can afford to run a tor exit node ? by Anonymous Coward · · Score: 0

      Governments.

      yes, but with the quantum engine you can both use that exit node and not use that exit node... just ask schödinger

  9. Re:Isn't page render speed pretty irrelevant for T by Tough+Love · · Score: 1

    It's not like a new page renderer is going to solve that.

    The point is to be synced up to the current Firefox codebase. Which by the way is awesome. I have all my favorite extensions running, in spite of all the FUD about the new Webextensions API.

    Why would anybody mod that comment troll?

    --
    When all you have is a hammer, every problem starts to look like a thumb.
  10. Brave by Anonymous Coward · · Score: 0

    Do any of you nerds have an opinion on the Tor tab feature that's built into the Brave Browser?

    1. Re:Brave by Anonymous Coward · · Score: 0

      Do any of you nerds have an opinion on the Tor tab feature that's built into the Brave Browser?

      Yeah. It's a trap.

    2. Re:Brave by AHuxley · · Score: 1

      NSA, CIA, GCHQ did not worry about anonymous communication.
      Police with lots of cash per investigation at a national level don't worry about anonymous communication anymore.

      --
      Domestic spying is now "Benign Information Gathering"
  11. Re: Isn't page render speed pretty irrelevant for by Anonymous Coward · · Score: 1

    Because your last line. It isn't FUD. Some extensions stopped working. Just because all yours work doesn't mean they all do.

  12. Re: Isn't page render speed pretty irrelevant for by Tough+Love · · Score: 0

    It is FUD. Firefox's extension ecology is as vibrant as ever, but far more secure. And if somebody disagrees, they should do so instead of taking the belly slither route.

    --
    When all you have is a hammer, every problem starts to look like a thumb.
  13. Do not use tor by Anonymous Coward · · Score: 0

    Do not install it. Do not even google it. The use of TOR is immediately detected and recorded and will put you on a watch list. Your life will undergo dramatic and unpleasant changes. Do not risk your well-being. It's not worth it.

    1. Re:Do not use tor by Anonymous Coward · · Score: 0

      Do not install it. Do not even google it. The use of TOR is immediately detected and recorded and will put you on a watch list. Your life will undergo dramatic and unpleasant changes. Do not risk your well-being. It's not worth it.

      I LOVE blacklists. Bring them ON!!!

    2. Re: Do not use tor by Anonymous Coward · · Score: 0

      Idiot.

  14. shitty reporting by Anonymous Coward · · Score: 0

    "but it lagged behind a few releases" is wrong.

    it's based on esr, an entirely valid release channel from mozilla for firefox. so, no it does not 'lag behind'. it's right on track... and they're really on the ball considering the current one that just came out was the jump for esr channel from 52 to 60, as per the published release schedule.

    1. Re:shitty reporting by Anonymous Coward · · Score: 0

      "but it lagged"

      FTFY.
      Note that this is released at the tail end of Firefox 52 support, such that even Firefox ESR users had moved on already if they wanted.
      This release still feels rushed, not quite a polished state but they squashed a few major show stopping bugs.
      So, congrats for the team getting it out the door.

  15. Re: Isn't page render speed pretty irrelevant for by Anonymous Coward · · Score: 0

    I did install a XUL extension a couple weeks ago. It's just a toolbar icon that replicates the View/Page Style menu. Of course it got disabled but it was nice to have while it lasted. Why have this? Pressing Alt and navigating to the menu and submenu is tiring. It's for reading pages without using CSS, so you can read some pages that are unreadable with javascript disabled or even bypass a few paywalls.

  16. Re: Isn't page render speed pretty irrelevant for by theweatherelectric · · Score: 1

    You can use the built-in Reader View for a lot of pages, but it's not available for all pages. It depends on the page structure.

  17. Re: Isn't page render speed pretty irrelevant for by Anonymous Coward · · Score: 1

    Or maybe they took away the API to do what the extension did and it can't work.

  18. Re:Isn't page render speed pretty irrelevant for T by Anonymous Coward · · Score: 0

    Have you tried Tor in the last few years? It's much better than it used to be. Yes, there'll always be *some* added latency, but a couple seconds isn't "waiting forever".

    It's probably worse if you enable JavaScript, but that's because the web in general is worse if you enable JavaScript.

  19. Re:Tor is for pedophiles by Anonymous Coward · · Score: 0

    Get your ass to Mars, Elon.

  20. Re:Isn't page render speed pretty irrelevant for T by Anonymous Coward · · Score: 0

    Moreover this gets rid of the horrible and old memory management of Firefox 52. I was at risk of horrible hard drive grinding, long lived and rarely recoverable, though that might be the 32bit version (default on Windows) breaking down at high RAM usage and some kind of vast mitigating operations were triggered. Why the swap? try Windows 10 on 4GB RAM. Figure out how long reads/writes on many hundreds megabytes of memory paged out to disk take, on a HDD around 2MB/s because of the random accesses. It often got irrecoverable so you either wait for the firefox.exes to crash or you kill it with task manager (within which switching a tab takes 5 seconds or more)

    Even though the number of firefox processes has tripled on my machine with the new tor browser, the memory use hasn't exploded, it seems smaller. Biggest process is ~700MB. That's 32-bit safe at least (64bit machine with 64bit OS, I'd rather have the tor browser bundle stay 32bit anyway until the RAM gets upgraded)

    tl;dr : as expected or better, this move to Firefox 60 made the browser faster and more stable. It means I don't need to upgrade a low end 3Ghz 2017 laptop anymore.

    Same deal as "normal", non-tor Firefox Quantum : this one was an improvement such that it removes the need for upgrading 10-year-old computers.

  21. Re: Isn't page render speed pretty irrelevant for by Anonymous Coward · · Score: 0

    I'll check its availability more, though I doubt it's available much on "misbehaving" pages. Some of them are entirely white when you go visit them, then you activate "Page Style/No Style" and *everything* is available, up from nothing. That is awesome.
    On occasion I did read a news story by reading the page source..

    Another site sometimes embed video. Kudos for using their own "CDN" and some HTML5 embedding of an .mp4 file but still doesn't work without javascript, or that easily. I can get to the .mp4 file directly from page source, and if playback sucks there's right-click and "save as". Wow, feels like 2004 again except back then the link to the video was directly on the site so downloading it was more trivial.

  22. Re: Isn't page render speed pretty irrelevant for by Tough+Love · · Score: 1

    It is FUD. Firefox's extension ecology is as vibrant as ever, but far more secure. And if somebody disagrees, they should do so instead of taking the belly slither route.

    I can't imagine anyone other than a Google employee modding that down. Sad to say, I can easily imagine a Google employee modding that down. How far they have fallen.

    --
    When all you have is a hammer, every problem starts to look like a thumb.