The Tor Project has shipped Tor Browser 16.0, and the headline change is a security one: it is the first stable release of the privacy-focused browser built on Firefox ESR 153. According to LWN.net, the update also brings official Linux support for 64-bit Arm (aarch64) systems, a redesigned settings interface, a "generic window titles" feature designed to stop other applications from snooping on browser activity, Material Design 3 updates to the Android interface, and the end of 32-bit x86 Linux support.
The ESR rebase is the real security story
Tor Browser is a downstream fork of Firefox, which means every time Mozilla ships a new Extended Support Release, the Tor Project faces the recurring maintenance work of re-applying its privacy, anti-fingerprinting, and circuit-isolation patches onto the new upstream base. Rebasing on ESR 153 is therefore more than routine housekeeping: it determines how quickly Tor Browser users inherit Mozilla's own fixes for vulnerabilities disclosed in the wider Firefox ecosystem.
For users who rely on the browser specifically to stay safe, the lag between an upstream Mozilla advisory and a Tor Browser build containing that fix is a meaningful exposure window. Landing the first stable build on ESR 153 narrows that gap and resets the cycle for the releases to come.
Generic window titles close a local side channel
The anti-snooping feature may be the quietest addition in the changelog, but it addresses a class of leakage that Tor's network-level protections were never designed to stop. Window titles can be read by other running processes, accessibility APIs, and resident malware — revealing which site or page a user has open even when the traffic itself is encrypted and routed through the Tor network. A hardened network path means little if the desktop environment still advertises browsing context to everything else on the machine.
Wider reach on Arm hardware, narrower support on old x86
The Linux aarch64 build widens the browser's practical reach to users on Arm-based single-board computers, laptops, and servers — environments often chosen by activists, journalists, and researchers working in constrained or non-x86 settings. Those users now have an official aarch64 download offered directly by the project.
The flip side is the withdrawal of 32-bit x86 Linux builds. Anyone still running the browser on an older 32-bit distribution will need to move to a 64-bit system — or stay on an earlier release — to keep receiving updates. That is a user-affecting break, and worth flagging to anyone maintaining legacy machines.
Safer defaults, plainly arranged
The settings redesign reflects a principle the Tor Project has articulated before: a privacy tool that users misconfigure underperforms. Reorganising the interface so that the safer configuration is the obvious one is, in effect, security work — feature changes only help if people can actually find and keep them enabled. On Android, the move to Material Design 3 follows the same logic: a familiar, current interface lowers the friction of keeping the privacy features switched on.
Tor Browser 16.0 is available from the Tor Project's download page, with release details available via LWN.net.
Source: LWN.net, covering the Tor Browser 16.0 release.
Tor Project 已正式推出 Tor Browser 16.0，其中最受矚目的改動屬保安層面：這是該私隱優先瀏覽器首個基於 Firefox ESR 153 的 stable 版本。據 LWN.net 報道，是次更新同時加入對 64-bit Arm（aarch64）系統的官方 Linux 支援、重新設計的設定介面、一項旨在阻止其他應用程式窺探瀏覽器活動的「通用視窗標題」（generic window titles）功能、Android 介面的 Material Design 3 更新，以及停止對 32-bit x86 Linux 的支援。
重新基於 ESR 才是真正的保安重點
Tor Browser 是 Firefox 的下游 fork，這意味著每當 Mozilla 推出新版 Extended Support Release，Tor Project 都要面對一項重複出現的維護工作：把私隱、反指紋（anti-fingerprinting）及 circuit isolation 相關的 patch 重新套用到新的 upstream 基礎上。因此，重新基於 ESR 153 並非例行公事：這決定了 Tor Browser 用戶能多快繼承 Mozilla 自身針對 Firefox 生態系統中已披露漏洞的修復。
對於專門依賴此瀏覽器保障安全的用戶而言，上游 Mozilla 發出安全通告與包含相關修復的 Tor Browser 版本推出之間的時間差，是一個實質的風險窗口。首個基於 ESR 153 的 stable 建置縮窄了這道差距，也為接下來的版本重設了循環週期。
通用視窗標題堵塞本地側信道
這項反窺探功能雖可能是更新日誌中最不起眼的新增項目，卻針對了一類 Tor 網絡層保護從未打算堵截的洩漏途徑。視窗標題可被其他執行中的程序、accessibility API 及常駐惡意軟件讀取——即使流量本身已加密並經 Tor 網絡傳輸，仍會暴露用戶正在瀏覽哪個網站或頁面。若桌面環境仍向機器上其他一切廣播瀏覽上下文，再強化的網絡路徑也意義不大。
Arm 硬件覆蓋擴大，舊 x86 支援收窄
Linux aarch64 建置版本將瀏覽器的實際覆蓋擴展至 Arm 單板電腦、手提電腦及伺服器用戶——這類環境往往是社會運動人士、記者及研究人員在受限或非 x86 環境下的選擇。這些用戶現已可取得由項目直接提供的官方 aarch64 下載。
另一面則是撤回 32-bit x86 Linux 建置版本。仍然在較舊的 32-bit 發行版上運行此瀏覽器的用戶，將需要轉往 64-bit 系統——或停留在此前的版本——才能繼續接收更新。這是一項影響用戶的變更，值得向任何維護舊有機器的人士提醒。
更安全的預設設定，排列清晰明瞭
設定介面的重新設計體現了 Tor Project 此前多次闡述的原則：若用戶錯誤設定，私隱工具的效能便會大打折扣。將介面重新編排，使更安全的設定成為一目了然的選項，實際上本身已是一項保安工作——功能改動只有在用戶能真正找到並持續啟用時才能發揮作用。在 Android 上，轉用 Material Design 3 亦遵循同一邏輯：一個熟悉而合時的介面，可降低用戶持續啟用私隱功能的阻力。
Tor Browser 16.0 已可於 Tor Project 下載頁面取得，發布詳情可透過 LWN.net 獲取。
來源：LWN.net，報道 Tor Browser 16.0 發布。