15 outubro 2024 rede tor 2 min de leitura

Tor Browser 14 e além: o cenário atual de versões

Tor Browser 14 landed on a rebased Firefox 128 ESR in late 2024, and the release said a lot about how this project now ships software: quietly, predictably, and with the update pipeline mattering as much as the features.

Why the rebase mattered

Every Firefox ESR rebase drags years of upstream security work into tor browser at once. The version 14 rebase brought a long list of memory-safety fixes and engine hardening that had accumulated upstream, closing the window that attackers probe for whenever a privacy browser falls behind its parent codebase. The project has also gotten faster at the unglamorous part: patch turnaround. When Firefox ships a critical fix, tor users historically waited days. The current release cadence has narrowed that gap to hours in several cases, which is exactly what you want from a browser whose users are high-value targets.

Android stopped being second-class

The android build reached genuine parity during this generation - same engine, same security slider model, same update discipline. For a large share of the world, the phone is the only computer, and the Tor Project finally treats that as a first-class platform rather than a port.

What is next on the list

The roadmap centers on three things: keeping pace with ESR rebases as mozilla shortens its support cycles, shipping the new connection-assist UX for censored regions by default, and continuing the slow migration of components toward rust - a process that mirrors the arti work happening on the network side. None of this is flashy. That is the point. A privacy browser wins by being boring, current and hard to exploit - and version 14 was the most boring, current and hard-to-exploit release yet.

A caixa de entrada de um relay de saída: notificações DMCA, chamadas de intimidação e culpa por endereço IP

Os relays de saída carregam o endereço IP de cada usuário de Tor que passa por eles, então os operadores colhem as reclamações: notificações DMCA, relatos de spam, sinalizações de fraude e, de vez em quando, uma intimação. A própria documentação do Tor trata esse e-mail como rotina - e é grande parte da razão pela qual os relays de saída seguem sendo o nível mais escasso da rede.

O roteiro de aposentadoria do C tor: datas de desligamento, estado da Arti e o que os operadores devem acompanhar

Tor 0.4.8 e versões anteriores deixarão de funcionar na rede depois de 1 de setembro de 2026, um corte de compatibilidade ligado à migração para a Arti. A Arti está completa como cliente, mas o suporte a retransmissores, autoridades de diretório e serviços onion permanece experimental ou em fase de teste.