Tor 0.2.8.5-rc 发布网络反监控软件

Tor 0.2.8.5-rc 发布了，Tor 是一个帮助你抵御流量分析的软件项目，流量分析是一种对网络的监视行为。Tor 将你的通信通过一个由遍及全球的志愿者运行的中继（relay）所组成的分布式网络转发，以此来保护你的安全：它令监视你的 Internet 连接的那些人无法知道你所访问的站点，它还令你所访问的站点无法知道你的物理位置。Tor 能与现有的许多应用程序配合工作，包括 Web 浏览器、即时通讯客户端、远程登录和基于 TCP 协议的其他应用程序。

该版本主要改进记录如下：

Directory authority changes:
- Urras is no longer a directory authority. Closes ticket 19271.
Major bugfixes (heartbeat):
- Fix a regression that would crash Tor when the periodic “heartbeat” log messages were disabled. Fixes bug 19454; bugfix on tor-0.2.8.1-alpha. Reported by “kubaku”.
Minor features (build):
- Tor now again builds with the recent OpenSSL 1.1 development branch (tested against 1.1.0-pre6-dev). Closes ticket 19499.
- When building manual pages, set the timezone to “UTC”, so that the output is reproducible. Fixes bug 19558; bugfix on 0.2.2.9-alpha. Patch from intrigeri.
Minor bugfixes (fallback directory selection):
- Avoid errors during fallback selection if there are no eligible fallbacks. Fixes bug 19480; bugfix on 0.2.8.3-alpha. Patch by teor.
Minor bugfixes (IPv6, microdescriptors):
- Don’t check node addresses when we only have a routerstatus. This allows IPv6-only clients to bootstrap by fetching microdescriptors from fallback directory mirrors. (The microdescriptor consensus has no IPv6 addresses in it.) Fixes bug 19608; bugfix on 0.2.8.2-alpha.
Minor bugfixes (logging):
- Reduce pointlessly verbose log messages when directory servers can’t be found. Fixes bug 18849; bugfix on 0.2.8.3-alpha and 0.2.8.1-alpha. Patch by teor.
- When a fallback directory changes its fingerprint from the hard- coded fingerprint, log a less severe, more explanatory log message. Fixes bug 18812; bugfix on 0.2.8.1-alpha. Patch by teor.
Minor bugfixes (Linux seccomp2 sandboxing):
- Allow statistics to be written to disk when “Sandbox 1″ is enabled. Fixes bugs 19556 and 19957; bugfix on 0.2.5.1-alpha and 0.2.6.1-alpha respectively.
Minor bugfixes (user interface):
- Remove a warning message “Service [scrubbed] not found after descriptor upload”. This message appears when one uses HSPOST control command to upload a service descriptor. Since there is only a descriptor and no service, showing this message is pointless and confusing. Fixes bug 19464; bugfix on 0.2.7.2-alpha.
Fallback directory list:
- Add a comment to the generated fallback directory list that explains how to comment out unsuitable fallbacks in a way that’s compatible with the stem fallback parser.
- Update fallback whitelist and blacklist based on relay operator emails. Blacklist unsuitable (non-working, over-volatile) fallbacks. Resolves ticket 19071. Patch by teor.
- Update hard-coded fallback list to remove unsuitable fallbacks. Resolves ticket 19071. Patch by teor.