#Tor browser bundle same as browser update#
#Tor browser bundle same as browser code#
#Tor browser bundle same as browser free#

It's the Tor Project's position that the most important thing is immediate patching through direct mechanisms in Tor Browser. I actually conceive of the problem differently: no time to wait for PureOS, we must hand over the keys to the castle to upstream) bugs in Tor Browser, or do you find it equally important that we (as they become available) enable mechanisms for the Linux developers and GNOME developers and any other upstreams to address 0-days in their code? Is it in your opinion more important to fix immediately (i.e. Seems like the same amount of work with less payoff.īad idea to have TBB in a stable repo, for the reasons you state.

#Tor browser bundle same as browser update#

TBB also has an in-browser update mechanism / verification / warning system, so it would likely clash with a package manager at this point without modifications that I don't think anyone wants to be in charge of.īut I don't see why we would want to take the package from Debian contrib, when we can pull what we want from upstream TP repo. In my opinion, it's a very wise one given that Tor is targeted by powerful and sophisticated actors. Right, that is usually the stated reason. This isn't done anymore, likely for the reason you suggest. Here that means if PureOS supergreen need to include Tor Browser, then PureOS must somehow get a security team that can track it - because Debian security team does *not* track treating testing packages as stable.

#Tor browser bundle same as browser code#

On a related note (should be a filed as a separate issue if/when we want to discuss that further): In my opinion, PureOS should only expose its users to code that is security-tracked. If PureOS later creates a stable (supergreen?) branch, then in my opinion fast moving packages like Tor Browser should be omitted from that branch.

#Tor browser bundle same as browser free#

PureOS (in its current form as arolling release based on Debian testing) can make use of such package that is properly free but just changing too frequent to be suitable for Debian stable. My guess(!) to the reason that others chose to instead package a sidechannel _installer_ distributed in Debian contrib, is that Tor Browser is in nature fast-changing so not possible to reach stable Debian. r/tor is not managed or endorsed by The Tor Project.In my opinion, this issue should be solved by packaging Tor Browser for Debian main. /r/Namecoin – Namecoin, decentralized DNS./r/i2p – The Invisible Internet Project, anonymity system with similarities to Tor./r/PrivacyGuides – Helping you protect your data./r/privacy – privacy and freedom in the information age./r/netsec – security news and discussion./r/tails – the Tails operating system helps preserve anonymity./r/onions – all about Tor's hidden services.Tor Stack Exchange - question and answer site (blocks Tor).Donate - Your support is critical to the Tor Project's success.Community portal - Join the Tor Community.Tor's support portal with frequently asked questions.Please read the Tor Project FAQ for more information. The subreddit's name is incorrectly capitalized as 'TOR' and cannot be changed due to Reddit's technical limitations. The Tor Project recommends Onion Browser. Please see the Tor Wiki for more details. However, a VPN may help if Tor is censored by your network. You generally do not need to use a VPN in conjunction with Tor, and you may even hurt your anonymity by doing so. This is a very frequently asked question we see in this subreddit. Do not share bridges or refer to unofficial bridge distribution channels.Questions about installing Tails, for example, belong in /r/Tails. System-level questions about operating systems are off-topic.Articles that do not mention Tor are usually off-topic /r/Tor is not for general news about privacy or security.Do not use URL shortening services: always submit the real link.Do not ask for or offer assistance in private (PM).Do not ask for or give advice about using Tor for abusive purposes.Do not ask for or give advice about activity that may be illegal in most places.onion sites, or requesting or sharing links to onion sites – these belong in /r/onions. Please read our Frequently Asked Questions before posting. This subreddit is for news, questions, opinions and tips about Tor. Defend yourself against network surveillance and traffic analysis.