Brave is available as a fast, free, secure web browser for your mobile devices. Complete with a built-in ad blocker that prevents tracking, and optimized for mobile data and battery life savings. Get the Brave Browser (mobile) for Android or iOS.
As is standard with the TBD, you may select different versions of the TBB for download. Did you try each of them? Sometimes only a limited amount of versions are downloadable at a given point in time.
After this bad experience I read about the topic and bought a new laptop and a connection. I verified the Whonix images by gpg4win with different signature files downloaded from different Tor circuits. I downloded gpg4win using the certificate from
May be I became paranoid but I had enough reasons. Before Whonix I wanted to install Qubes and decided to buy it from www.osdics.com by air-mail and I asked a question to Marek Marczykowski Gorecki about the trust level of that company. He said to me that the web page did not sell qubes and maybe someone wanted to send me a fake DVD. I checked it from a different computer and connection that yes! they were not selling Qubes! This is something like Postman-In-The-Middle-Attack.
Might indicate a very slow connection (for whatever reason, slow Tor entry guard or otherwise). To get around that you can try to increase the timeout. Currently only possible by manually editing with root rights.
I increased the value from 180sec to different values. At the end I used 14400sec and got an error message about partial file download (below). Does the Tor Browser Downloader use a different protocol for downloadig? I can download files using Iceweasel which uses the same Tor.
The instance of curl_download_max_time that you need to change is the one that defaults to 3600. This is the one related to the download of the package itself. (Or increase all of the timeouts. You can get a better idea of what is failing by running update-torbrowser in a terminal.)
I've been reading a lot on here about malicious downloads from browsing sites, drive by downloads, etc, but never heard talk about how the download happens, and how it would bypass the internal download of the browser. In most browsers you will be notified when you are downloading something, i.e., chrome shows all downloads at the bottom in it's own tray.
I've ran into a situation on someone I know's computer where they visited a site and they had additional extensions downloaded into their chrome browser that caused sketchy things such as a fake Google "new tab" page. So to me, it seems as if a lot of this can happen without the user allowing it (or they don't know they allowed it?).
Which doesn't exactly answer my question, but adds to it saying that a user would have to run a file, or malicious JS running, activeX, Java, etc, but I'm curious if there's a way around the downloaders, in that malicious code is downloaded to your machine. It also would seem the user might need to run it, but at the same time, maybe not... I guess it would depend on what the malicious code actually is, and what it's attacking you through? i.e., is it a file, or Java, or Adobe Flash, etc...
The important thing to understand here is that "browsing" as such is dangerous if your browser is vulnerable and you visit the wrong site. The problem has nothing (or little) to do with what most users call "downloading", i.e. the intentional download of a file in order to save it on disk for later use (like downloading a pdf, an exe, a picture or movie or whatever).
In order to understand what happens you need to think of what computer programs are. They are processes which run in memory. They accept input and produce output. I'm of course simplifying but you'll soon get the idea. Input is what you provide (mouse clicks, URL information, form data you fill in etc.). Output is mostly what is rendered in the browser window and what you consume through your eye and your brain.
Another input to the browser program is what the browser downloads from the site(s) you visited. Keep in mind that it can be hard to keep track of what is actually loaded from the site. The site might link hundreds of other sites in order to get pictures, styles, javascript, create ads, include facebook likes etc. etc.
Now how are computer programs compromised? Through malformed input in situations where programmers forgot to check input for correct format or made programming mistakes otherwise. In our case: If you visit the wrong site then it will send malformed html, css, malformed movie format, .... (whatever the hacker finds that can be exploited) to your browser hoping that you're using a vulnerable version. Then, in the browser process, a buffer overflow or similar happens and the hacker achieves RCE (remote code execution, which means he turns your browser into a tool of his will).
As a web developer, specifically a long-term maintainer of the download.js library (merely citing for relevance since i keep up with this stuff to keep it updated), i can assure you that downloads are NOT SUPPOSED to happen without consent. Sometimes they do:
user has chooses to download or open automatically a certain file type, but that should not include executables. This is the "Always open files of this type" option, which can get you with word macros and whatnot.
there is a flaw in a plugin, browser, or extension that allows the malicious page to use a non-regulated way of saving the file. Examples include old flash that could write directly to the hard drive, PDF exploits, and IE6's terrible "zone" system being mis-managed.
normally harmless files can be made malicious: word macros, pdf reader exploits, even ill-behaved zip and audio files. Sometimes extension show these file on-browser, leading to a compromise because the user was not asked if showing it is acceptable.
email-based attacks try to hook into OS-internal script handlers, bypassing the browser's protections and sandboxing. This is where a jscript or powershell script fetches a larger payload from http to the temp folder and runs it.
Problem is certain file types like text, jpg, pdf, etc. open inside browser window. How would I be able to implement content-type or content-disposition using client side scripting? Is that even possible?
.. and the browser will figure out what to do with the file. This works great for most files, such as .xls, .csv, etc, but keep in mind that this isn't full-proof because the user's MIME handler settings will determine what to do with the file... i.e. if it is a .txt file it will most likely just be displayed in the browser and will not be given a "file download" dialogue box.
Firefox was created by Mozilla as a faster, more private alternative to browsers like Internet Explorer, and now Chrome. Today, our mission-driven company and volunteer community continue to put your privacy above all else.
When I download an attachment in Asana 1.10.1 for Mac, it opens a new browser tab before downloading. This should just download the file directly into my Downloads folder without browser intervention.
upvote to fix this, I have to be logged into 2 different Asanas, one browser and one app for 2 clients and when I have to download from the app, I have to logout and login to the browser Asana, super annoying
Using Firefox have downloaded 7.4GB of a 7.9GB file. Resume continues the process and shows the duration remaining but after a few minutes it stops again with message "Failed - dropbox.com". Have repeated this for many days with no improvement. The target folder shows .part file with 7.49GB size. During the resume the shows with zero size. Have tried with IE also but with similar results. Am downloading to a local drive to avoid any LAN issues.
There definitely seems to be some sort of problem going on over the past few days with file transfers through the browser. For several days, I haven't been able to upload any file larger than 1MB to my online folders, either through the advanced uploader or the basic uploader. I very much doubt that it's an issue with my computer -- I have exactly the same internet speed now that I had in the past when Dropbox last performed as it should, I haven't noticed similar problems with other websites (since I'm able to download files from other sites), and I've performed a thorough tune-up on my computer (updated the operating system, updated the anti-virus software, scanned the computer for malware, cleared out the junk files, removed obsolete entries from the registry, defragmented the hard drive, etc.). I've submitted a help desk ticket to Dropbox but haven't heard back from anyone yet.
When I try to upload a file larger than 1MB, everything is fine for a couple of moments and the file seems to be uploading at a reasonable speed, but before it can finish uploading, the progress bar suddenly goes back to a much earlier period and the upload speed drops way down to the point that it initially says even a file just over 1MB will need more than ten minutes to upload (which is crazy, since that implies the upload speed has decreased to just bits rather than bytes per second). After a couple of rounds of this, the updater quits and gives me an error message saying "something went wrong with the advanced uploader" (no...really???). The basic uploader is no better -- it says that it's uploading the file but never finishes. It's ridiculous for Dropbox to need more than half an hour to upload a file of only 1.5MB...even a dial-up could do better than that.
Jeff, I'm having the exact same issue. I have a large folder cut into 2 gig rar pieces. Where previously, I could download 4-5 files simultaneously, I now can't seem to have more than one downloading, and even then sometimes the single file download fails at some point in the download process. Sometimes I can resume the download, other times I hit resume and it starts the download from the beginning again.
d3342ee215