Tor Browser 4.0 发布，此版本现已提供在 Tor Browser Project page 和 distribution directory。

Tor Browser 4.0 主要包括 Firefox 重要的安全更新，因为 POODLE 攻击，禁用了 SSLv3。

跟 3.6 系列相比，最主要的改进是转向了 Firefox 31-ESR。

此版本加入了 3 个版本的 meek 插件运输。事实上， meek-amazon 和 meek-azure 都能在中国很好的运行，不需要获取 bridge 地址。（See tickets #12428, #12778, and #12857 for details）

MacOS 用户请注意：Tor Browser 打算忽略 32 位的 OS X 绑定。如果你在使用 32 位 的 OSX 10.6，请尽快升级你的操作系统。

自 4.0-alpha-3 以来的改进内容：

• All Platforms

• Translation updates only

• Bug 13378: Prevent addon reordering in toolbars on first-run.

• Bug 10751: Adapt Torbutton to ESR31's Australis UI.

• Bug 13138: ESR31-about:tor shows "Tor is not working"

• Bug 12947: Adapt session storage blocker to ESR 31.

• Bug 10716: Take care of drag/drop events in ESR 31.

• Bug 13366: Fix cert exemption dialog when disk storage is enabled.

• Update Firefox to 31.2.0esr

• Update Torbutton to 1.7.0.1

• Update Tor Launcher to 0.2.7.0.1

• Udate fteproxy to 0.2.19

• Update NoScript to 2.6.9.1

• Bug 13027: Spoof window.navigator useragent values in JS WebWorker threads

• Bug 13016: Hide CSS -moz-osx-font-smoothing values.

• Bug 13356: Meek and other symlinks missing after complete update.

• Bug 13025: Spoof screen orientation to landscape-primary.

• Bug 13346: Disable Firefox "slow to start" warnings and recordkeeping.

• Bug 13318: Minimize number of buttons on the browser toolbar.

• Bug 10715: Enable WebGL on Windows (still click-to-play via NoScript)

• Bug 13023: Disable the gamepad API.

• Bug 13021: Prompt before allowing Canvas isPointIn*() calls.

• Bug 12460: Several cross-compilation and gitian fixes (see child tickets)

• Bug 13186: Disable DOM Performance timers

• Bug 13028: Defense-in-depth checks for OCSP/Cert validation proxy usage

• Bug 13416: Defend against new SSLv3 attack (poodle).

与 3.6.6 相比，不同之处：

• All Platforms

• Bug 11405: Remove firewall prompt from wizard.

• Bug 12895: Mention @riseup.net as a valid bridge request email address

• Bug 12444: Provide feedback when “Copy Tor Log” is clicked.

• Bug 11199: Improve error messages if Tor exits unexpectedly

• Bug 12451: Add option to hide TBB's logo

• Bug 11193: Change "Tor Browser Bundle" to "Tor Browser"

• Bug 11471: Ensure text fits the initial configuration dialog

• Bug 9516: Send Tor Launcher log messages to Browser Console

• Bug 13378: Prevent addon reordering in toolbars on first-run.

• Bug 10751: Adapt Torbutton to ESR31's Australis UI.

• Bug 13138: ESR31-about:tor shows "Tor is not working"

• Bug 12947: Adapt session storage blocker to ESR 31.

• Bug 10716: Take care of drag/drop events in ESR 31.

• Bug 13366: Fix cert exemption dialog when disk storage is enabled.

• Update Firefox to 31.2.0esr

• Udate fteproxy to 0.2.19

• Update Tor to 0.2.5.8-rc (from 0.2.4.24)

• Update NoScript to 2.6.9.1

• Update Torbutton to 1.7.0.1 (from 1.6.12.3)

• Update Tor Launcher to 0.2.7.0.1 (from 0.2.5.6)

• Bug 13027: Spoof window.navigator useragent values in JS WebWorker threads

• Bug 13016: Hide CSS -moz-osx-font-smoothing values.

• Bug 13356: Meek and other symlinks missing after complete update.

• Bug 13025: Spoof screen orientation to landscape-primary.

• Bug 13346: Disable Firefox "slow to start" warnings and recordkeeping.

• Bug 13318: Minimize number of buttons on the browser toolbar.

• Bug 10715: Enable WebGL on Windows (still click-to-play via NoScript)

• Bug 13023: Disable the gamepad API.

• Bug 13021: Prompt before allowing Canvas isPointIn*() calls.

• Bug 12460: Several cross-compilation and gitian fixes (see child tickets)

• Bug 13186: Disable DOM Performance timers

• Bug 13028: Defense-in-depth checks for OCSP/Cert validation proxy usage

• Bug 4234: Automatic Update support (off by default)

• Bug 11641: Reorganize bundle directory structure to mimic Firefox

• Bug 10819: Create a preference to enable/disable third party isolation

• Bug 13416: Defend against new SSLv3 attack (poodle).

• Windows:

• Bug 10065: Enable DEP, ASLR, and SSP hardening options

• Linux:

• Bug 13031: Add full RELRO hardening protection.

• Bug 10178: Make it easier to set an alternate Tor control port and password

• Bug 11102: Set Window Class to "Tor Browser" to aid in Desktop navigation

• Bug 12249: Don't create PT debug files anymore

Tor Browser Bundle 是一个基于 Firefox ESR (Firefox with extended support) 的 Web 浏览器，默认配置通过 Tor 和 Vidalia 实现了个人隐私保护和匿名。该版本包括三个扩展：Torbutton, NoScript and HTTPS-Everywhere.