[tbb-bugs] #21326 [Applications/Tor Browser]: Sec. "Using a system-installed Tor process with Tor Browser" in start-tor-browser needs update

[Tor Bug Tracker & Wiki]

#21326: Sec. "Using a system-installed Tor process with Tor Browser" in start-tor-
browser needs update
------------------------------------------+-------------------------------
     Reporter:  cypherpunks               |      Owner:  tbb-team
         Type:  defect                    |     Status:  new
     Priority:  Medium                    |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:  start-tor-browser
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+-------------------------------
 Starting from TBB 6.5 the Sec. "Using a system-installed Tor process with
 Tor Browser" in `start-tor-browser` script is no longer valid. The old
 recommendations were:

 `# SETTING NAME                            VALUE`
 `# extensions.torbutton.banned_ports
 [...],<SocksPort>,<ControlPort>`
 `# extensions.torbutton.block_disk         false`
 `# extensions.torbutton.custom.socks_host  127.0.0.1`
 `# extensions.torbutton.custom.socks_port  <SocksPort>`
 `# extensions.torbutton.inserted_button    true`
 `# extensions.torbutton.launch_warning     false`
 `# extensions.torbutton.loglevel           2`
 `# extensions.torbutton.logmethod          0`
 `# extensions.torbutton.settings_method    custom`
 `# extensions.torbutton.socks_port         <SocksPort>`
 `# extensions.torbutton.use_privoxy        false`
 `# extensions.torlauncher.control_port      <ControlPort>`
 `# extensions.torlauncher.loglevel          2`
 `# extensions.torlauncher.logmethod         0`
 `# extensions.torlauncher.prompt_at_startup false`
 `# extensions.torlauncher.start_tor         false`

 I cannot comment on `torlauncher` options, because I don't use tor
 launcher. As concerns torbutton options:

 Instead of `extensions.torbutton.banned_ports` we now have option
 `network.security.ports.banned`. Isn't it? If yes, we should replace.

 Option `extensions.torbutton.block_disk` is absent in `about:config`.

 Instead of old 6 options:
 `extensions.torbutton.custom.socks_host`
 `extensions.torbutton.custom.socks_port`
 `extensions.torbutton.socks_host`
 `extensions.torbutton.socks_port`
 `network.proxy.socks`
 `network.proxy.socks_port`
 which had to be adjusted accordingly, now we have only
 `network.proxy.socks` and `network.proxy.socks_port` in `about:config`.
 So, these options should be used instead of options
 `extensions.torbutton.custom.socks_host`,
 `extensions.torbutton.custom.socks_port`, and
 `extensions.torbutton.socks_port` in `start-tor-browser` script.

 Option `extensions.torbutton.settings_method` is absent in `about:config`,
 it seems to be not necessary anymore.

 Option `extensions.torbutton.use_privoxy` is absent in `about:config`.

 Somebody should check new configuration and these my suggestions.

 If somebody is managing TBB with system-installed Tor without TBB access
 to `ControlPort` (Tor chains must be restarted manually when needed), now
 the configuration is pretty simple:
  1. Remove `tor-launcher at torproject.org.xpi` file.
  2. Start TBB: `$ cd tor-browser_en-US/Browser ; ./start-tor-browser
 --debug`
  3. Go to Edit -> Preferences -> Advanced -> Network. Change host and port
 for SOCKS proxy (if needed).
  4. Disable automatic updates in Edit -> Preferences -> Advanced ->
 Updates (if you check PGP signatures and update TBB manually).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21326>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online