/src/Changelog
#! | 931 lines | 844 code | 87 blank | 0 comment | 0 complexity | eb56f4df34fa201339e4d483851b8363 MD5 | raw file
- 3.0.4 (2012-11-9)
- * Fixes:
- ACLU, Amazon, Barnes & Noble, CharityNavigator, Cloudfront/Turntable.fm,
- Coursera, itella.fi, posti.fi, Uservoice
- https://trac.torproject.org/projects/tor/ticket/7336
- https://trac.torproject.org/projects/tor/ticket/7273
- https://trac.torproject.org/projects/tor/ticket/7227
- * Disable broken:
- Asterisk, Boston Globe (separated out from NYTimes.com), Extabit, Gawker,
- Google Services (Followers widget), NPR, SF.se, SonyMusic, Statcounter, WebType
- https://trac.torproject.org/projects/tor/ticket/7270
- https://trac.torproject.org/projects/tor/ticket/7243
- https://trac.torproject.org/projects/tor/ticket/7361
- https://trac.torproject.org/projects/tor/ticket/7120
- https://trac.torproject.org/projects/tor/ticket/7278
- https://trac.torproject.org/projects/tor/ticket/7363
- https://trac.torproject.org/projects/tor/ticket/7294
- * No longer cacert: lawblog.de
- * Offer the SSL Observatory popup to a larger cohort of users
- * Update translations: Spanish, Russian, Turkish, Swedish
- chrome-2012.10.31
- * The "ghosts and goblins" chromium alpha
- * Work around a nasty bug that was affecting some high-volume Live Youtube streams
- (but not other live YouTube streams)
- https://trac.torproject.org/projects/tor/ticket/7127
- * Other Fixes:
- AdaCore, Akamai/MTV3 Katsomo, Akamai/HP, Atlassian, Bahn.de, MySQL, NPR, PBS,
- Phronoix Media/Openbenchmarking, SSRN, Spoki
- https://trac.torproject.org/projects/tor/ticket/7219
- https://trac.torproject.org/projects/tor/ticket/7180
- https://trac.torproject.org/projects/tor/ticket/7135
- https://trac.torproject.org/projects/tor/ticket/7206
- https://trac.torproject.org/projects/tor/ticket/7198
- * Disable broken/buggy:
- CBS/Last.fm, Citibank Australia, Bytename, HP, NIFTY, Microchip, MyOpenID, NttDocomo
- https://trac.torproject.org/projects/tor/ticket/6587
- https://trac.torproject.org/projects/tor/ticket/7226
- https://trac.torproject.org/projects/tor/ticket/7111
- https://trac.torproject.org/projects/tor/ticket/7161
- https://trac.torproject.org/projects/tor/ticket/7114
- https://trac.torproject.org/projects/tor/ticket/7138
- https://trac.torproject.org/projects/tor/ticket/7107
-
- 3.0.3 (2012-10-25)
- * Work around a nasty bug that was affecting some high-volume Live Youtube streams
- (but not other live YouTube streams)
- https://trac.torproject.org/projects/tor/ticket/7127
- * Other Fixes:
- AdaCore, Akamai/MTV3 Katsomo, Akamai/HP, Atlassian, Bahn.de, DemocracyNow, MySQL, NuGet,
- PBS, Phronoix Media/Openbenchmarking, SSRN, Spoki
- https://trac.torproject.org/projects/tor/ticket/7219
- https://trac.torproject.org/projects/tor/ticket/7180
- https://trac.torproject.org/projects/tor/ticket/7135
- https://trac.torproject.org/projects/tor/ticket/7206
- https://trac.torproject.org/projects/tor/ticket/7198
- * Disable broken/buggy:
- CBS/Last.fm, Citibank Australia, Bytename, HP, NIFTY, Microchip, MyOpenID, NttDocomo
- https://trac.torproject.org/projects/tor/ticket/6587
- https://trac.torproject.org/projects/tor/ticket/7226
- https://trac.torproject.org/projects/tor/ticket/7111
- https://trac.torproject.org/projects/tor/ticket/7161
- https://trac.torproject.org/projects/tor/ticket/7114
- https://trac.torproject.org/projects/tor/ticket/7138
- https://trac.torproject.org/projects/tor/ticket/7107
- * Updated translations:
- Greek, Russian, Latvian
- * New translation:
- Turkish
- * Offer the SSL Observatory popup to a larger cohort of users
- 4.0development.2 (2012-10-25)
- * Ship 67 new rulesets
- * Fix broken logouts from non-US Google accounts:
- https://mail1.eff.org/pipermail/https-everywhere-rules/2012-October/001347.html
- * Other fixes:
- Microsoft (Bing login button), ZeniMax, Ubuntuone, TrueCrypt, Springer,
- Optical Society, IMDB, Facebook, EzineArticles, Broadband Reports, Apache,
- Akamai (exclude Zynga content to prevent breakage of some Zynga games),
- Costco, Atlassian, Akamai/MTV3 Katsomo
- * Disable broken/buggy:
- HP, Bytename, NIFTY, Microchip, NttDocomo
- * Updated translations:
- Greek, Russian, Latvian
- * New translation:
- Turkish
- chrome-2012.10.18
- * The "even more perfect" chromium alpha
- * Fixes from the last two Firefox releases:
- Microsoft (Bing login button), ZeniMax, Ubuntuone, TrueCrypt, Springer,
- Optical Society, IMDB, Facebook, EzineArticles, Broadband Reports, Apache,
- Akamai (exclude Zynga content to prevent breakage of some Zynga games),
- Costco Akamai/SVTplay.se, Bahn.de, European Southern Observatory, IEEE,
- Indeed, Java, Librivox, Pinterest, New York Times, Springer, Vimeo,
- Shannon Health, O'Reilly Media
- * Also fix: DemocracyNow, NuGet
- * Disable: NIFTY
- 3.0.2 (2012-10-16)
- * Some fixes that should have shipped in 3.0.1, but actually didn't:
- European Southern Observatory, Indeed, LibriVox
- * New fixes:
- Microsoft (Bing login button), ZeniMax, Ubuntuone, TrueCrypt, Springer
- (fix / reenable), Optical Society, IMDB, Facebook, EzineArticles,
- Broadband Reports, Apache, Akamai (exclude Zynga content to prevent
- breakage of some Zynga games), Costco
- 4.0development.1 (2012-10-11)
- * Merge the 4.0 branch, which ships 884 new rulesets and expands
- hundreds of others
- 3.0.1 and 4.0development.1:
- * Fixes: adition.com, Akamai/SVTplay.se, Bahn.de, European Southern Observatory,
- IEEE, Indeed, Java, Librivox, Pinterest, New York Times, Springer, Vimeo,
- Shannon Health, O'Reilly Media
- https://trac.torproject.org/projects/tor/ticket/7080
- https://mail1.eff.org/pipermail/https-everywhere/2012-October/001583.html
- https://mail1.eff.org/pipermail/https-everywhere-rules/2012-October/001339.html
- https://mail1.eff.org/pipermail/https-everywhere-rules/2012-October/001343.html
- * Disable broken: Springer
- https://mail1.eff.org/pipermail/https-everywhere-rules/2012-October/001340.html
- * Updated translations: Basque, Hungarian, Traditional Chinese
- chrome-2012.10.9
- * The "prepare for liftoff" chromium alpha
- * Add an experimental Spanish translation!
- * Fixes:
- Akamai/CNN, GO.com/ABC, AWS/Amazon Zeitgeist MP3 player, AWS/Spiegel.tv,
- Technology Review, Cloudfront/Tunein, Akamai/Discovery Channel, Beyond
- Security, OCaml, Gentoo, Nokia, Widgetbox.com, Squarespace, 1and1
- Internet, American Physical Society, Baker and Taylor, Barnes and Noble,
- Cloudfront, Trustguard, IEEE, Mozilla, Nrelate, OpenDNS, RFC Editor,
- Symantec, Valve, Zenimax-Media
- * Disable buggy: Web.de, AJC.com, Feross, Bestofmedia, Grooveshark, Gearhog
- 3.0 (2012-10-04)
- * Since version 2.x:
- * 1,455 new active rulesets
- * UI improvements:
- - right-click to view ruleset source in the config window
- - translate some untranslated menus
- - better icons in a few places (breaking/redirecting rules,
- context button)
- * Numerous improvements to the SSL Observatory internals, including cached
- submissions on hostile networks, better Tor and Convergence integration,
- and a new setting to control self-signed cert submission
- * New translations: Basque, Czech, Danish, French, Greek, Hungarian,
- Italian, Korean, Malaysian, Polish, Slovak, Turkish,
- Traditional Chinese
- * Relative to 3.0development.8:
- * Only promote the Decentralized SSL Observatory to 5% of non-Tor users
- * Update the SSL Observatory whitelist of common cert chains
- * Fixes, mostly in the CDN/media playback department:
- Akamai/CNN, GO.com/ABC, AWS/Amazon Zeitgeist MP3 player,
- AWS/Spiegel.tv, Technology Review, Cloudfront/Tunein,
- Akamai/Discovery Channel, Beyond Security, OCaml, Gentoo,
- Nokia, Widgetbox.com, Squarespace
- https://trac.torproject.org/projects/tor/ticket/4199
- https://trac.torproject.org/projects/tor/ticket/6871
- https://trac.torproject.org/projects/tor/ticket/6992
- https://trac.torproject.org/projects/tor/ticket/7000
- https://trac.torproject.org/projects/tor/ticket/7020
- https://mail1.eff.org/pipermail/https-everywhere-rules/2012-October/001324.html
- * Disable buggy: Web.de, AJC.com, Feross, Bestofmedia
- * Remove a lot of off-by-default rulesets from the code, since they have
- some costs in terms of startup speed and RAM usage
- 3.0development.8 (2012-10-03)
- * 3.0 stable release candidate 1
- * Fixes: AOL, 1and1 Internet, American Physical Society, Antispam.de, BBC,
- Baker and Taylor, Barnes and Noble, BitTorrent, CacheFly,
- CheezBurger, Cleverbridge, Cloudfront, Facebook, Trustguard,
- IEEE, Link Plus Catalog, Microsoft, Mozilla, News Corp, Nrelate,
- OpenDNS, PassThePopcorn, Pidgin, Piriform, RFC Editor, Symantec,
- Telegraph, Transmission, Valve, Zenimax-Media,
- kirjoitusalusta.fi, uTorrent
- * Reenable: CodingTeam
- * Disable broken: GrooveShark, Gearhog, Paper.li, Soton.ac.uk, SVT.se
- * Various translation improvements
- * Support a new platform="mixedcontent" attribute
- * Switch to the actual HTTPS Everywhere logo for the context menu button
- chrome-2012.9.21
- * Workaround for breakage in Amazon Look Inside the Book (via Cloudfront)
- https://trac.torproject.org/projects/tor/ticket/6848
- * Replace jsURI with URI.js, fixing a number of bugs in the Chrome port
- - https://trac.torproject.org/projects/tor/ticket/6197
- - Also breakage on other random pages like
- http://venturebeat.com/2012/09/13/how-do-not-track-could-destroy-the-internet-as-you-know-it/
- * Fixes: AOL, Antispam.de, BBC, BitTorrent, Facebook, Gearhog, LinkPlus
- Catalog, Microsoft, Mother Jones, Mozilla, Office.co.uk, OpenDNS,
- PassThePopcorn, Piriform, WhatCD, uTorrent
- * Disable broken: Paper.li, SVT.se, Soton.ac.uk
- * Reenable: Referly
-
- chrome-2012.9.10
- * The "just add eleven" chromium alpha
- * Time to test the updating mechanism from direct -> Chrome Web Store
- installs
- * Ruleset changes in addition to those in FF 3.0dev7:
- * Fixes: News Corp, Cheezburger, CacheFly, Cleverbridge, Nrelate,
- Pidgin, Telegraph
- * Improvements: Global Marketing Strategies
- 3.0development.7 (2012-09-07)
- * Add a cleanup routine for profiles affected by a 2.2 defaults bug:
- https://mail1.eff.org/pipermail/https-everywhere/2012-August/001511.html
- * Make Decentralized SSL Observatory-Tor interactions saner in the wake of
- Torbutton transitioning to "always on" (we now detect a local Tor instance
- on port 9050 and use it)
- https://trac.torproject.org/projects/tor/ticket/6541
- * Fix some other bugs in the Observatory proxy-wrangling code
- * Disable broken/buggy rulesets: Voxel, Mapquest, Imgur, Justin.tv,
- F-Secure, Valve, SpringFiles, openDesktop, syllabushare, Playboy, FAZ
- * Fixes / Improvements: Eloqua, OpenDNS, Mashable, News Corp, Sony, Yahoo!,
- Examiner.com, FBI, Adtechus, Mozilla, Dreamhost, Lenovo / Thinkpad, Pirate
- Party, Scribd
- * New Czech translation
- 3.0development.6 (2012-08-16)
- * Prevent ruleset bugs from crashing the UI
- https://trac.torproject.org/projects/tor/ticket/6280
- * Fix a lack-of-translation bug in the context menu
- https://trac.torproject.org/projects/tor/ticket/6516
- (although coverage will probably be patchy for a while)
- * Add hooks to use our new Firefox internal rewrite API, if the browser
- has it (this should address
- https://trac.torproject.org/projects/tor/ticket/5477
- https://trac.torproject.org/projects/tor/ticket/3190
- )
- * Fixes: OpenStreetMap, Okcupid, Yandex, Valve, Atlantic Media, AWS,
- XDA developers, Tumblr, MetaPress, Mixpanel, VideoLAN, JBoss,
- Yourhosting, Pypi, QT, Imgur, Scientific American,
- Chronicle, ISOC, Wikimedia, Xmission, Tumblr, OpenDNS
- Mobygames, Telegraph Media, Dailymotion, RFC-editor, US gov,
- Discogs, Costco, Brightcove, PirateParty, BrownPaperTickets
- * Improvements: Apple, MIT
- * Disable buggy/broken: ZDNet, Globe and Mail, Malwarebytes, Plenty of Fish,
- Raymond.CC, Blip.tv, Governo Portugês, adf.ly,
- McAfee :( :( :(
- * New translations: Italian, Turkish, Traditional Chinese, Korean
- * Numerous updated translations
- chrome-2012.8.16
- * The "exponential bifurcation" alpha
- * Change the update URI to the specific one blessed by the Chrome Web Store
- (they tell us that, despite appearances, the request will actually be
- https)
- chrome-2012.8.15
- * The "Happiness in the Cloud" Alpha
- * We still suffer from the horrible Appcache bug, so this is still an alpha:
- https://trac.torproject.org/projects/tor/ticket/5585
- https://code.google.com/p/chromium/issues/detail?id=121325
- * Enslave ourselves to the Chrome Web Store, because Google has made it
- very tricky to install .crx files in Chrome version 21
- https://code.google.com/p/chromium/issues/detail?id=133818
- https://code.google.com/p/chromium/issues/detail?id=128748
- * Do a better job of displaying the context menu, especially for error pages:
- https://trac.torproject.org/projects/tor/ticket/6085
- (should be fixed for real this time)
- * Fancier Chrome context menus by Jay Weisskopf
- * Fixes: OpenStreetMap, Okcupid, Yandex, Valve, Atlantic Media, AWS,
- XDA developers, Tumblr, MetaPress, Mixpanel, VideoLAN, JBoss,
- Yourhosting, Pypi, QT, Imgur, Scientific American,
- Chronicle, ISOC, Wikimedia, Xmission, Tumblr, OpenDNS
- Mobygames, Telegraph Media, Dailymotion, RFC-editor, US gov,
- Discogs, Costco, Brightcove, PirateParty, BrownPaperTickets,
- * Improvements: Apple, MIT
- * Disable buggy/broken: ZDNet, Globe and Mail, Malwarebytes, Plenty of Fish,
- Raymond.CC, Blip.tv, Governo Portugês, adf.ly
- McAfee :( :( :(
- 3.0development.5 (2012-06-26)
- * Fix the enable/disable button in Firefox 15
- https://trac.torproject.org/projects/tor/ticket/6212
- * Fixes: GetFirebug, Gentoo, Ebay, Yandex (extensive), Maxmind, Blogger, HP,
- Jottit
- * Disable broken: Project Syndicate, Alton Towers, Network for Good
- https://trac.torproject.org/projects/tor/ticket/6222
- * The Decentralized SSL Observatory client now saves up some certificates if
- the network blocks or MITMs attempts to submit them.
- chrome-2012.6.21
- * The Autonomous Greenland Beta Release
- * Allow rulesets to be toggled when the page breaks completely
- https://trac.torproject.org/projects/tor/ticket/6085
- * Fixes: Github, Gentoo, HP, Maxmind, Orange
- * Disable broken: Alton Towers, Project Syndicate
- * Only ship 1 new ruleset (we're in a freeze)
- 3.0development.4 (2012-06-18)
- * Fix compatibility bug with Firefox 15:
- https://trac.torproject.org/projects/tor/ticket/5893
- * Ship 217 new rulesets (frozen; new rulesets now have to wait until 4.0
- development)
- * Fixes: numerous, including: Boxee, CiteULike, MozillaMessaging,
- Yandex, Demonoid, Pirate Party, Gentoo, NYTimes, Microsoft,
- Wikipedia, Lenovo, MyWOT
- https://trac.torproject.org/projects/tor/ticket/5912
- https://trac.torproject.org/projects/tor/ticket/6091
- https://trac.torproject.org/projects/tor/ticket/5703
- https://trac.torproject.org/projects/tor/ticket/5931
- https://trac.torproject.org/projects/tor/ticket/5958
- https://mail1.eff.org/pipermail/https-everywhere-rules/2012-June/001189.html
- https://mail1.eff.org/pipermail/https-everywhere-rules/2012-June/001190.html
- https://mail1.eff.org/pipermail/https-everywhere-rules/2012-May/001186.html
- https://mail1.eff.org/pipermail/https-everywhere/2012-May/001433.html
- * Disable broken: MarketWatch, Disqus, Magento, Lavasoft,
- Typepad/Say Media, Thomas Cook, Thomson Reuters clients,
- Science Daily, BinRev, Ikea, Interpol
- https://trac.torproject.org/projects/tor/ticket/5899
- https://trac.torproject.org/projects/tor/ticket/5496
-
- chrome-2012.6.18
- * The Divisible By Six Chromium Beta Release
- * Ship 444 new Rulesets
- * Fixes: numerous, including: Boxee, omgubuntu, Microsoft
- https://trac.torproject.org/projects/tor/ticket/5899
- https://trac.torproject.org/projects/tor/ticket/5703
- https://trac.torproject.org/projects/tor/ticket/5931
- https://trac.torproject.org/projects/tor/ticket/5958
- * Disable broken: Disqus, uTorrent, Thomas Cook, Thomson Reuters clients,
- Science Daily, Say Media, BinRev, Ikea, Interpol
- * Not fixed:
- The horrible appcache / CSS bug:
- https://trac.torproject.org/projects/tor/ticket/5585
- Occasional extension compatibility glitches:
- https://trac.torproject.org/projects/tor/ticket/5731
- 3.0development.3 (2012-05-11)
- * Ship 361 new rulesets
- * Do a better job of disabling CACert rulesets by default on non-CAcert
- platforms
- * Fix for compatibility with some other Firefox extensions:
- https://trac.torproject.org/projects/tor/ticket/5682
- * Fixes: Wordpress stylesheets, USENIX, Mozilla, Opera, Valve, and many
- others
- https://mail1.eff.org/pipermail/https-everywhere-rules/2012-April/001105.html
- https://trac.torproject.org/projects/tor/ticket/5831
- * Disable broken: Pandora, Miranda IM, Pastebin.ca
- https://trac.torproject.org/projects/tor/ticket/5804
- https://trac.torproject.org/projects/tor/ticket/5776
- * Testing our new more automated release process
- chrome-2012.5.1
- * The May Day Chromium Beta Release
- * Ship 886 new rulesets (thanks mostly to Negres!)
- * Fix two downgrade attacks that might allow attackers to deny HTTPS
- Everywhere protection for cookies on some domains.
- https://trac.torproject.org/projects/tor/ticket/5676
- https://trac.torproject.org/projects/tor/ticket/2199
- * More efficient ruleset storage shrinks the .crx download by a factor of
- about 4 (thanks fauxfaux)
- https://trac.torproject.org/projects/tor/ticket/5275
- * Disable buggy rulesets: IBM, Scribd, Wunderground, ReadWriteWeb,
- Pastebin.ca
- https://trac.torproject.org/projects/tor/ticket/5344
- https://trac.torproject.org/projects/tor/ticket/5435
- https://trac.torproject.org/projects/tor/ticket/5630
- * Ruleset fixes: Debian, Kohls, Malwarebytes, Yandex, Wikipedia, Mises.org,
- OpenDNS, Wizards of the Coast, Lenovo, Barnes and Noble,
- Pastebin.ca
- https://trac.torproject.org/projects/tor/ticket/5509
- https://trac.torproject.org/projects/tor/ticket/5491
- https://trac.torproject.org/projects/tor/ticket/5303
- * Numerous other improvements, fixes, and exciting new bugs :)
- 3.0development.2 (2012-04-26)
- * License change: the tree now includes some code from Convergence, which
- is GPL v3+. Other code remains licensable as GPLv2+
- * Ship 696 new rulesets (!!!), thanks to a lot of amazing work by Negres
- * Fix a downgrade attack that might allow attackers to deny HTTPS
- Everywhere protection for cookies on some domains.
- https://trac.torproject.org/projects/tor/ticket/5676
- * Fix a weird wrong DOM-origin bug that occurred while redirects were in
- progress (this might have security implications, although we are unsure
- if it was exploitable).
- https://trac.torproject.org/projects/tor/ticket/5477
- * Ruleset fixes: Debian, Kohls, Malwarebytes, Yandex, Wikipedia, Mises.org,
- OpenDNS, Wizards of the Coast, Lenovo, Barnes and Noble
- https://trac.torproject.org/projects/tor/ticket/5509
- https://trac.torproject.org/projects/tor/ticket/5491
- https://trac.torproject.org/projects/tor/ticket/5303
- * Stumble across more horrible security holes in the Verizon website:
- https://mail1.eff.org/pipermail/https-everywhere-rules/2012-February/001003.html
- * Disable the Gentoo ruleset on non-CAcert platforms
- * Disable buggy rulesets: IBM, Scribd, Wunderground, ReadWriteWeb :( :( :(
- https://trac.torproject.org/projects/tor/ticket/5344
- https://trac.torproject.org/projects/tor/ticket/5435
- https://trac.torproject.org/projects/tor/ticket/5630
- * Better cohabitation between the Decentralized SSL Observatory and
- Convergence
- * Separate Observatory option to control self-signed cert submission
- * Numerous other ruleset enhancements, fixes, and probably exciting new bugs
- in Negres's ruleset changes
-
- 3.0development.1 (2012-03-14)
- * By default, use https://google.co.cctld instead of
- encrypted.google.com
- https://trac.torproject.org/projects/tor/ticket/5152
- * Add an optional ruleset to use https://www.google.com
- instead of encrypted.google.com, too
- * Add a new context menu in the rulesets list:
- - toggle a ruleset
- - reset it to the default
- https://trac.torproject.org/projects/tor/ticket/3762
- - view the ruleset source
- https://trac.torproject.org/projects/tor/ticket/5237
- * Show the Observatory popup to all users once, not just TorButton users
- * Four new translations: Basque, French, Polish, Slovak
- * Ship 125 new rulesets
- chrome-2012.3.14
- * Ship 109 new rulesets since the last Chromium release
- * Add an optional ruleset to search on https://www.google.com
- instead of encrypted.google.com
- * Switch non-US google searches to country sites by default
- * Better chrome context UI
- 2.2.3 (2012-09-25)
- * Workaround for breakage in Amazon Look Inside the Book (via Cloudfront)
- https://trac.torproject.org/projects/tor/ticket/6848
- * Fix logout for AOL users
- * Other fixes: PassThePopcorn, WhatCD, Antispam.de, RFCeditor,
- Weatherspark / GoogleMaps
- * Disable broken: SVT.se
-
- 2.2.1 (2012-08-17)
- * Fix a configuration-parsing bug in 2.2 that would
- ignore default_off rules if this was a first install
- https://mail1.eff.org/pipermail/https-everywhere/2012-August/001511.html
- * Add a cleanup routine for profiles affected by that bug.
- 2.2 (2012-08-15)
- * Prevent ruleset bugs from crashing the UI
- https://trac.torproject.org/projects/tor/ticket/6280
- * Fix the enable/disable button in Firefox 14
- https://trac.torproject.org/projects/tor/ticket/6212
- * Fix a nasty bug in the optional "Search www.google.com" ruleset:
- https://gitweb.torproject.org/https-everywhere.git/commitdiff/50ca41a1e189ef8383781f803e51ec7a06688a3b
- * Disable buggy/broken: ZDNet, Globe and Mail, Blip.tv, Governo Portugês,
- Alton Towers, McAfee :( :( :(
- * Fixes: Yandex, Wikipedia, PirateParty, JBoss, Gentoo
- * Hopefully the last 2.x release before 3.0 stable
- 2.1 (2012-06-18)
- * Fix context menu breakage when URIs lack a host
- * Fixes: CiteULike, MozillaMessaging, Yandex, Demonoid, Pirate Party,
- Gentoo, NYTimes, Microsoft, Wikipedia, Lenovo
- https://mail1.eff.org/pipermail/https-everywhere-rules/2012-June/001189.html
- https://trac.torproject.org/projects/tor/ticket/6091
- https://mail1.eff.org/pipermail/https-everywhere-rules/2012-June/001190.html
- https://mail1.eff.org/pipermail/https-everywhere-rules/2012-May/001186.html
- https://mail1.eff.org/pipermail/https-everywhere/2012-May/001433.html
- * Disable broken: MarketWatch, Disqus, Magento, Lavasoft, Project Syndicate,
- Typepad/Say Media
- https://trac.torproject.org/projects/tor/ticket/5899
- https://trac.torproject.org/projects/tor/ticket/5496
- 2.0.5 (2012-05-16)
- * Rebuild 2.0.4 without a bug in the release scripts that prevented all the
- rulesets from being absent
-
- 2.0.4 (2012-05-16)
- * Fix for compatibility with some other Firefox extensions:
- https://trac.torproject.org/projects/tor/ticket/5682
- * Fixes: Wordpress stylesheets, USENIX, Mozilla, Opera, Indymedia
- https://trac.torproject.org/projects/tor/ticket/5905
- https://mail1.eff.org/pipermail/https-everywhere-rules/2012-April/001105.html
- * Disable broken: Pandora, Miranda IM, Pastebin.ca, PaidContent
- https://trac.torproject.org/projects/tor/ticket/5804
- https://trac.torproject.org/projects/tor/ticket/5776
- 2.0.3 (2012-04-26)
- * Fix a downgrade attack that might allow attackers to deny HTTPS
- Everywhere protection for cookies on some domains.
- https://trac.torproject.org/projects/tor/ticket/5676
- * Minor redirection mechanism fixes
- * Fixes: WordPress, Yandex, OpenDNS, Via.me/AWS
- * Improvements: Mozilla
- * Disable broken: ReadWriteWeb
- 2.0.2 (2012-04-19)
- * Fix a weird wrong DOM-origin bug that occurred while redirects were in
- progress (this might have security implications, although we are unsure
- if it was exploitable).
- https://trac.torproject.org/projects/tor/ticket/5477
- * By default, use https://google.co.cctld instead of
- encrypted.google.com
- https://trac.torproject.org/projects/tor/ticket/5152
- * Add an optional ruleset to use https://www.google.com
- instead of encrypted.google.com, too
- * Ruleset fixes: Debian, Kohls, Malwarebytes, Yandex, Wikipedia, Mises.org,
- OpenDNS, Wizards of the Coast, Lenovo, Barnes and Noble
- https://trac.torproject.org/projects/tor/ticket/5509
- https://trac.torproject.org/projects/tor/ticket/5491
- https://trac.torproject.org/projects/tor/ticket/5303
- * Stumble across more horrible security holes in the Verizon website:
- https://mail1.eff.org/pipermail/https-everywhere-rules/2012-February/001003.html
- * Disable the Gentoo ruleset on non-CAcert platforms
- * Disable buggy rulesets: IBM, Scribd, Wunderground :( :( :(
- https://trac.torproject.org/projects/tor/ticket/5344
- https://trac.torproject.org/projects/tor/ticket/5435
- https://trac.torproject.org/projects/tor/ticket/5630
- 2.0.1 (2012-02-27)
- * 2.0 is now Stable!
- * Fix tiny settings window on some versions of Windows:
- https://trac.torproject.org/projects/tor/ticket/5197
- * Fix drop down menu bug for the non-English versions of the UI
- * Added Farsi and Arabic translations
- * Disable Netflix, which was demonstrating a lot of breakage
- * Improvements: Wikipedia
- * Fixes: Google, Samba
- * Ship 4 new rulesets since 2.0development.6
- (404 new rulesets since 1.2.2!)
- * Check ruleset grammaticity with xmllint/RelaxNG
- chrome-2012.2.27
- * Split Google Translate out of the Google APIs rule, and turn it off by
- default on Chrome only:
- Fixes https://trac.torproject.org/projects/tor/ticket/5196
- * Ship 19 new rulesets since last Chromium release
- chrome-2012.2.9
- * make <exclusion pattern> rulesets elements work in the Chrome version
- https://trac.torproject.org/projects/tor/ticket/5042
- (also disable the LinkedIn ruleset)
- * Support for Google Sorry
- * 6 new rulesets
- 2.0development.6 (2012-02-08)
- * Fix a nasty UI crash bug on Windows
- https://trac.torproject.org/projects/tor/ticket/5020
- * Ruleset fixes: Google Video, Yandex, LDS
- https://trac.torproject.org/projects/tor/ticket/5026
- https://trac.torproject.org/projects/tor/ticket/5042
- * Disable problematic LinkedIn ruleset
- * An experimental ruleset for the Google "Sorry" page
- * Improved Nederlands translation
- * Ship 6 new rulesets
- chrome-2012.02.06{,.01}
- * First "Official" EFF alpha Chrome release
- (Thanks to Mike Perry and Aaron Swartz for leading the porting effort!)
- * Installable on Chrome|Chromium 18+
- * Two point versions, to test the autoupdating mechanism
- 2.0development.5 (2012-02-02)
- * Fix some data structure inefficiencies that should reduce RAM consumption
- by 25-75MB (!)
- https://trac.torproject.org/projects/tor/ticket/4804
- * Global enable / disable option
- https://trac.torproject.org/projects/tor/ticket/4060
- * Google Cache is back! :)
- * Ship 126 new rulesets
- * Fixes: Wikipedia, Identi.ca, Verizon, CCC.de, UserScripts, Yandex,
- Hidemyass, Mozilla, Pogo, Google, Google Images, Google Video,
- The Pirate Bay, AK Vorrat, JBoss
- * Improvements: EFF, Flickr, RedHat, Diaspora, PrivatePaste, KDE,
- Portugese Govt
- * Disable broken: NSF.gov, WHO.int, Economist
- * New experimental Yahoo! ruleset (off by default)
- * New translations: Spanish, Nederlands
- 2.0development.4 (2011-11-15)
- * The translations actually work
- * Add new translations: Chinese, Russian
- * Ship 37 new rulesets
- * Exclude Userscript paths as an insecure workaround for the Greasemonkey
- and Scriptish instances of this bug:
- https://trac.torproject.org/projects/tor/ticket/3190
- * Fixes: Java.com, Yandex, Wordpress, Wikipedia, Bahn.de, UNSW, Apache,
- DuckDuckGo, Google Images
- * Improvements: Debian, Tumblr, Apple, Facebook, VeriSign, Google Services,
- Flickr, Youtu.be
- * Disable broken: Target, OpenUniversity, TV.com, Radio Shack,
- Yahoo Mail :( :(,
- Google Cache coverage in Google Services :( :( :(
- 2.0development.3 (2011-10-19)
- * Selectively reenable nsIContentPolicy::shouldLoad()
- Fixes: https://trac.torproject.org/projects/tor/ticket/4194
- Fixes: https://trac.torproject.org/projects/tor/ticket/4149
- * Crazy experimental IOUtils hacks from NoScript
- https://bugzilla.mozilla.org/show_bug.cgi?id=677643#c75
- (Appears to fix
- https://mail1.eff.org/pipermail/https-everywhere/2011-October/001208.html,
- which is probably a general redirection bug)
- * Secure cookies set by JavaScript as well as those set by HTTP
- Fixes: https://trac.torproject.org/projects/tor/ticket/3766
- * Perform initialisation synchronously, reducing races during startup
- Fixes: https://trac.torproject.org/projects/tor/ticket/3533
- * Ship 9 new rulesets
- * Disable: MikeWest
- * Improvements: YouTube, Google Images
- 2.0development.2 (2011-10-05)
- * Enable YouTube by default
- (also closes https://trac.torproject.org/projects/tor/ticket/4032)
- * Merge nsIContentPolicy disablement from stable
- (closes https://trac.torproject.org/projects/tor/ticket/3882)
- * Context menu should work on error pages
- (https://trac.torproject.org/projects/tor/ticket/3815)
- * Fix the ASN setting button in the observatory prefs
- (https://trac.torproject.org/projects/tor/ticket/4170)
- * Make the Observatory much more efficient
- * Ship 46 new rulesets
- * Update for new Wikipedia HTTPS deployment
- * Ruleset Fixes and Enhancements: Yandex, Identica, SBB, Polldaddy, XKCD,
- Statcounter, Caltech, UCSD, FlickR, Android
- * Disable broken: LastPass, Avast, EPEAT, Bloglines
- * Improve the state of our translations-in progress
- * Fancy new Python build scripts
- 2.0development.1 (2011-09-15)
- * Begin alpha testing for the Decentralized SSL Observatory!
- (currently opt-in, with a popup prompt if you have Tor Button installed)
- * Ship 164 new rulesets
- * Enable Google Maps by default
- * Pending translations: Arabic, Dutch, German, Portugese, Latvian, Russian,
- Swedish
- * Fixes: OpenDNS, WordPress, Flickr
- * Expansions & Improvements: Google Services, Twitter, Gowalla, Apple, Bit.ly
- AdBlock Plus, KLM, Adobe, UCSD, Heroku, Wikipedia
- * Disable broken rulesets: Deviantart, Bandcamp, Securityfocus
- * Improved build scripts
- 1.2.2 (2012-01-09)
- * Google Cache is back!
- * Fixes: Wikipedia, Identi.ca, Verizon, CCC.de, UserScripts,
- Yandex
- * Improvements: EFF
- * Disable broken: NSF.gov, WHO.int
- 1.2.1 (2011-10-15)
- * Google Cache is broken, remove it from GoogleServices :( :( :(
- * Fix for the Google Image Search homepage
- * Exclude help.duckduckgo.com:
- https://trac.torproject.org/projects/tor/ticket/4399
- * Disable Yahoo! Mail:
- https://trac.torproject.org/projects/tor/ticket/4441
- * Installable on Firefox 10
- 1.2 (2011-10-14)
- * Fixes: WordPress, Statcounter, Java, Bahn.de, SICS.se
- * Improvements: use fancy new HTTPS Wikipedia
- * Disable broken: OpenUniversity, TV.com, Random.org, kb.CERT
- 1.1 (2011-10-19)
- * Further tweaks to internals, will hopefully fix a number of weird issues:
- https://trac.torproject.org/projects/tor/ticket/4194
- https://trac.torproject.org/projects/tor/ticket/4149
- https://mail1.eff.org/pipermail/https-everywhere/2011-October/001208.html
- * YouTube is enabled by default!
- * Fixes: Yandex, Statcounter, Polldaddy, SBB.ch
- * Improvements: Facebook+
- * Disable broken: Bloglines, EPEAT
- 1.0.3 (2011-09-26)
- * Mozilla is about to release Firefox 7, the stable branch needs to be
- installable there!
- * Disabling nsIContentPolicy callbacks should fix this crash bug:
- https://trac.torproject.org/projects/tor/ticket/3882
- https://bugzilla.mozilla.org/show_bug.cgi?id=677643
- It /might/ cause us to fail to rewrite requests in obscure corner cases.
- We haven't found any in testing, but vigilance will be required.
- * Support for Google Maps
- * Fixes: WordPress, Lenovo, OpenDNS, Avast, Ripe.net, TV.com, 38.de
- * Disable broken: Seagate
- 1.0.2 (2011-09-20)
- * Major improvements to the Wikipedia ruleset
- * Disable broken/buggy rulesets: DeviantArt, eHow, About.me, Bandcamp,
- StudiVZ, Securityfocus, BankofAmerica :( :( :(
- * Small fixes: OpenDNS, WordPress, links in the "About" page
- * Declare incompatibility with Firefox 7 & 8 until Mozilla fixes this:
- https://bugzilla.mozilla.org/show_bug.cgi?id=677643
- 1.0.1 (2011-08-10)
- * Disable some rulesets with partial compatibility issues: Reddit,
- StumbleUpon, Heroku
- * Small Yandex fix
- * Fix/improvement for Google Instant outside the US
- 1.0.0 (2011-08-04)
- * Release 1.0 into the stable branch!
- * Improve toolbar UI for error pages somewhat (it still isn't perfect)
- * Bugfixes: Microsoft, Dropbox, Netflix, MySQL
- * Disable a couple of broken rules
- 1.0.0development.5: (2011-07-13)
- * Ship rulesets as a single "default.rulesets" file, shrinking the .xpi from
- ~370 kB to ~120kB and speeding Firefox startup:
- https://trac.torproject.org/projects/tor/ticket/3404
- * Fix an ephemeral bug where disabled-by-default rules would be briefly
- enabled when first installed
- * Wikipedia shows up in the toolbar/context menu
- * Fixes to netflix & netzpolitik
- * Toolbar/context menu can be opened with left or right click
- 1.0.0development.4: (2011-07-06)
- * Fix a bug with Google Translate
- * Unbreak the Netflix blog
- * Toolbar button now looks OK in Seamonkey
- * Declare compatibility with the next round of Firefox alphas
- 1.0.0development.3: (2011-07-04)
- * Do not show a bizarre popup when people click the HTTPS toolbar button on
- error pages
- * Fix a GoogleServices bug that broke logout from non-US google accounts :(
- 1.0.0development.2: (2011-07-01)
- * Fix bugs that arose when trying to move the toolbar menu icon:
- https://trac.torproject.org/projects/tor/ticket/3497
- * Handle usernames and passwords in URIs more explicitly
- https://trac.torproject.org/projects/tor/ticket/2199
- * By default, move context menu from toolbar to addons bar
- * Ship 22 new rulesets
- * Add support for Google Plus, Accounts and AdWdords
- * Improvements to Microsoft, Twitter and Gitorious
- 1.0.0development.1: (2011-06-27)
- * Add a context menu to let users toggle rulesets that are/might be
- applicable to the current page (we can now stabilise the dev branch!)
- * Ship 42 new rulesets
- * Support for Google Image Search (except the very first landing page :/)
- * Fixes: Netflix, Plone
- * Improvements: Google APIs, Google Services, Mediawiki
- * Disable broken rules: OKCupid, Surveymonkey
- * Declare compatibility with recent Seamonkey releases
- 0.9.9.development.6:
- * Optimistically declare compatibility with Firefoxes up to v 7.*
- * Ship 193 new rulesets
- * Fixes & Improvements: Wikipedia, AmazonAWS, Google Images, Microsoft,
- Mozilla, Netflix, Google User Content, Twitter, Gitorious, AdBlock Plus,
- Youtube, he.net, Bitcoin
- * Remove broken rules: Match.com
- 0.9.9.development.5:
- * Compatible with Firefox 4.0.1+
- * New ruleset management UI (thanks to katmagic and Stefan Tomanek)
- * Ship 136 new rulesets
- * Fixes: reCAPTCHA, Google Images, Gentoo, Gitorious
- * Improvements: Bit.ly, Yahoo, Nokia
- * Disable: WashingtonPost :(, Doubleclick, OpenSSL.org (!)
-
- 0.9.9.development.4:
- * Ship 117 new rulesets
- * Fixes: MySQL, GroupOn, country-specific Google news sites,
- * Improvements: mail.com, WordPress
- * Leave WashingtonPost ruleset on in the hope that it gets fixed soon :/
- * Disable broken rules: HTC, I2P ...
- 0.9.9.development.3:
- * In the settings dialogue, offer "Reset defaults" instead of "Enable all"
- * Merge fixes from NoScript that avoid some torbutton bugs
- * Ship 56 new rulesets
- * Numerous tweaks + fixes, including NYTimes and AddThis
- 0.9.9.development.2:
- * Prevent the preferences window from swallowing the screen on OS X / Windows
- * Stop the StartCom rule from breaking StartCom OCSP/CRLs (which can't be HTTPS)
- * Attempt to do the same for for CAcert
- * Fixes to: Reddit, Drupal.org
- * Disable some problematic rulesets: Cisco, Opera
- * Enable: Reddit
- * Ship another 62 rulesets
- 0.9.9.development.1:
- * The efficient ruleset checking implementation should now hopefully be...
- efficient
- * Ship all the rulesets (!!!)
- * Except the ones that cause cert warnings, which are there but off by default
- * Build scripts attempt to validate rulesets before making a .xpi
- 0.9.7:
- * Support firefox 5 and 6 betas
- * Numerous improvements and fixes to Google and GoogleServices support
- * Fixes to AmazonAWS
- * Secure j.mp via bit.ly
- * Fix gentoo bugs
- 0.9.6:
- * Support firefox 4.0.1
- * Unbreak recaptcha
- * Disable google.com/jsapi (which was breaking some embedded maps, though
- that bug *might* have been fixed)
- 0.9.5:
- * WashingtonPost is broken and seems to be staying that way; disable it :(
- * Replace "Enable All" with "Reset Defaults"
- * Fixes & Improvements to WordPress + Mozilla
- 0.9.4:
- * Significant performance improvements
- * Disable Cisco by default
- * Fixes & improvements to: NYTimes, WashingtonPost, Cisco, WordPress
- * Support Google Code
- * Disable Google Custom Search Engines (they don't work)
- * Support global installation for OS distributions (thanks dm0)
- 0.9.3:
- * Significant performance improvements
- * Disable Cisco by default
- * Fixes & improvements to: NYTimes, WashingtonPost, Cisco, WordPress
- * Support Google Code
- * Disable Google Custom Search Engines (they don't work)
- * Support global installation for OS distributions (thanks dm0)
- 0.9.2:
- * Fix a bug in our redirection loop detection that was causing touble with
- some parts of NYTimes, Facebook, and other sites
- (closes: https://trac.torproject.org/projects/tor/ticket/2217)
- 0.9.1:
- * Unbreak the "all x news articles" links in Google News
- * Exclude nytimes.com/roomfordebate, since it's broken in https.
- 0.9.0:
- * This is our "Firesheep" release. It has numerous anti-firesheep
- improvements!
- * Split the stricter parts of the Facebook rule into a "Facebook+" rule.
- It's what's required to protect Facebook from Firesheep and similar cookie
- theft attacks, but it may break apps, because apps.facebook.com currently
- has the wrong cert.
- * Allow rulesets to specify that the secure flag should be set on some
- cookies even if the site operator failed to do so
- * Ship rules for:
- - Amazon S3 (AWS)
- - Github
- - Bit.ly
- - Dropbox
- - Evernote
- - Cisco
- * Extensive improvements (including secure cookies) in the Twitter and
- Facebook rules
- * Support for full Live / Hotmail encryption
- * Significant performance optimisation decreases CPU load
- Fixes:
- https://trac.torproject.org/projects/tor/ticket/1656
- https://trac.torproject.org/projects/tor/ticket/2194
- * Rearrange our Channel Replacement code!
- Fixes https://trac.torproject.org/projects/tor/ticket/1684
- https://bugzilla.mozilla.org/show_bug.cgi?id=548102
- Thanks to Giorgio Maone and Boris Zbarsky!
- * Add scrollbars if there are a lot of rules present in the Preferences
- dialog (may still be somewhat buggy...)
- * Optimise GoogleServices.xml and support Google code search
- * Patch for future compatiability with Request Policy:
- https://trac.torproject.org/projects/tor/ticket/1574
- * Support for the Firefox 4 API
- * The Amazon rule was causing a lot of glitches; it is now off by default
- * Control log verbosity with an about:config variable
- * Numerous minor rule improvements
- 0.2.2:
- * Fix a glitch in the Content Policy path that may or may not have been
- responsible for these bugs:
- https://trac.torproject.org/projects/tor/ticket/1700
- https://trac.torproject.org/projects/tor/ticket/1672
- https://trac.torproject.org/projects/tor/ticket/1673
- The patch breaks toolbar search suggestions. And who knows what else?
- * Don't send some country homepages to https://www.google.com/webhp?hl= ;
- use https://encrypted.google.com instead
- * Cleanup and refactor the URI replacement and rewriting code. Should
- hopefully fix https://trac.torproject.org/projects/tor/ticket/1649
- * Add a Google APIs rule
- * Remove some Extremely Nasty code that would delete malformed rulesets (!)
- (it was pasted from Torbutton's cookie handling logic...)
- * Add code.google.com to Google Services
- * The client=firefox* workaround is no longer necessary once we're sending
- non-US users to encrypted.google.com rather than www.google.com
- * Better coverage for GMX, Google services, Twitter
- * Scroogle homepage in HTTPS
- * Add rules for
- - Mail.com logins
- - Microsoft (limited coverage)
- * Fix a nasty Google/Wikipedia bug within 0.2.2.development.{1,2}
- 0.2.1:
- * Although google said https://www.google.com would continue to work, that
- wasn't absolutely true.
- * The new encyrpted.google.com seems to require queries to be #q=thing
- rather than search?q=thing, at least some of the time. So let's do that.
- 0.2.0:
- * Work around the fact that Google does not allow client=firefox* HTTPS
- searches from outside the US, by rewriting those URIs
- * Add rules for:
- - Amazon
- - GMX
- - Live.com (Hotmail logins)
- - Meebo
- - the Netherlands Government
- - Wordpress.com
- - Zoho
- * Remove the assumption that non-US searches would always start with an hl=
- language parameter
- * Handle searches to the google.com/firefox script better
- * Remove accidental duplicates of a couple of rules!
- * Bump maxVersion into the future so we're compatible with Firefox alphas
- * Fix more legacy eff.org bugs
- 0.1.2:
- * Apparently, we are not actually compatible with Firefox 2.0.0.x, so don't
- install with it!
- * Further generalisation of Wikimedia rules
- * Fix bugs in the handling of obscure parts of eff.org and torproject.org
- * A bug in a user rules file should produce an error, rather than causing all
- rules to fail to load
- 0.1.1:
- * Generalise the Wikipedia rules to other Wikimedia services
- * In preferences window, add a link to instructions for writing one's own
- rules