This release also will reset the permanent NoScript whitelist, due to an issue where previous NoScript updates had added certain domains to the whitelist during upgrade. Users who are interested in helping us improve them should try out 5.5a1. Regrettably, our new defenses for font and keyboard layout fingerprinting did not stabilize in time for this release. This release also contains defenses from the 5.0-alpha series for keystroke (typing) fingerprinting and some instances of performance/timing fingerprinting. In particular, more identifier sources that appeared in Firefox 38 (or were otherwise disabled previously) are now isolated to the first party (URL bar) domain. The release also features new privacy enhancements. Controversial and hard-to-audit binary components related to EME DRM were disabled, however. This release also brings us up to date with Firefox 38-ESR, which should mean improved support for HTML5 video on Youtube, as well as a host of other improvements. Regardless, we are also upgrading 5.0-alpha users to 5.5a1 today to fix the issue as well). (Incidentally: Users who are using the 5.0-alpha series are vulnerable to the PDF.js exploit, but not if they were using the 'High' security level. Note that the recent PDF.js exploit did not affect 4.5 users, but they should upgrade to this release immediately because numerous other potential security issues were fixed by Mozilla in this release. This release features important security updates to Firefox. This release is available from the Tor Browser Project page and also from our distribution directory. The Tor Browser Team is proud to announce the first stable release in the 5.0 series.
0 kommentar(er)
