Skip to content

v1.11.9

Choose a tag to compare

@breadnone breadnone released this 11 Sep 02:46
· 10 commits to main since this release
  • Apps list lifecycle rework — the process list clears when the window hides (tray) and rebuilds fresh on restore. No more stale/dead rows accumulating unseen; single-flight rebuilds, duplicates impossible by construction.
  • Frozen static brushes — all shared theme brushes are now frozen Freezables: cheaper rendering, safe cross-thread reads.
  • Readable selectors — the bridge-mode and exit-region dropdowns had a white-on-white selection box (stock template ignores Background). Both now use a full dark template: dark box + popup, light text, highlighted active mode.
  • Filter-list adblocking removed entirely. It was breaking legitimate domains (microsoft.com, mozilla.org, copilot… — path-scoped and cosmetic rules promoted to whole-domain DNS blocks). Only your manual Blocked Domains list remains. Leftover list caches delete themselves on boot.
  • PAC/auto-config fix. Windows silently prefers a PAC script over our manual proxy, so routing did nothing with zero errors on affected machines. PAC/auto-detect is now backed up, paused while routing, and restored on stop (compare-before-restore, like everything else). Rescue script mirrors it.
  • Bootstrap gate. Routing flipped on at control-port auth — seconds into Tor's life, long before it could carry traffic ("bootstrapped but nothing routes until toggle"). Routing now engages at bootstrap 100%, with honest per-mode timeouts; a stalled bootstrap fails loudly instead of stranding you.
  • Browser Secure-DNS checklist (Config). Explains the Edge-works/Firefox-doesn't split: reads Firefox/Edge/Chrome DoH settings read-only and flags forced-DoH profiles (fatal under lockdown, leaky without it).
  • Event-driven tor stop. SIGNAL SHUTDOWN over control + Exited-event wait — already-dead returns in ~0ms, dying daemons return the instant they go. The CloseMainWindow placebo (3s burned every stop) is gone; wedged daemons still get a bounded SIGKILL fallback.
  • Exit hardening. Timestamped exit-trace.log (%AppData%\PTor) of every shutdown step, no-latch teardown (no failure can brick future exits), invisible-dialog fallback, 90s force-exit failsafe on all exit paths.
    Death pact. tor.exe + transports live in a kill-on-close Job Object — a hard crash can never orphan them again. Stale-sweep + atomic settings/health/checkpoint saves cover the rest.
  • Single instance with --takeover-from handover for restart/elevate flows.
  • Tor log viewer (Config) — last 300 daemon lines, so 1st-boot failures say why.
  • Uninstall.exe — stops PTor, restores proxy/env/DNS, deletes our registry keys, removes only our WinDivert service, wipes %AppData%\PTor + %ProgramData%\PTor, offers program-folder removal, and enforces a reboot (--dry-run / --yes / --no-reboot / --log supported).
  • rescue-internet.bat + README rescue ladder (restart PTor → rescue bat → Uninstall + reboot).