0.9.5 包含针对一些问题和漏洞的修复与防护，这些问题和漏洞正由加州大学圣塔芭芭拉分校（UCSB）的研究人员进行调查。我们将继续与他们合作，推进更多改进。这也是一个提醒社区的好机会：尽管我们的网络仍在快速增长，但规模相对而言依然不大。可能存在多处弱点或缺陷，足以危及你的匿名性。请通过传播信息并在力所能及的地方贡献力量，帮助我们壮大网络。

在本次升级周期中，随机选取的 1% 的 routers（路由器）（以及所有运行开发版的 routers）将尝试通过 i2psnark 实现的实验性网络内 BitTorrent 方式进行更新。如果这不起作用，则应当回退到标准的网络内 HTTP 更新。

文件可在下载页面获取。

发布详情

Defenses and Bug Fixes

  • Fix router bug causing lockup when using iMule
  • Recognize, handle, reject duplicate tunnel IDs
  • Fix changing of the log file name
  • Prevent hashcode attack in session tags
  • Add build request throttler based on previous hop
  • Limit concurrent next-hop lookups
  • Catch exceptions storing nonces in console
  • Fix saving graph settings in console
  • Fix eepget generation of URLs when not proxied
  • Encrypt database lookup messages end-to-end when sent through exploratory tunnels
  • Don’t use multiple floodfills from the same /16 in a query
  • Randomize delay before verifying floodfill store
  • Increase number of floodfills

防御与缺陷修复

  • Improve support for mobile browsers
  • Partial defenses for UCSB attacks
  • Add announce list support to i2psnark
  • Jetty: upgrade Apache Tomcat to 6.0.36
  • Split router info files into multiple subdirectories
  • Add IP to hostname mapping option in SOCKS
  • Improve PRNG seeding
  • Translation updates: French, German, Hungarian, Italian, Norwegian, Polish, Portuguese, Russian, Swedish
  • Update GeoIP data (new installs and PPA only)
  • Update wrapper to 3.5.17 (new installs and PPA only)

其他

d904878f1feb758afb75cae31af52e3504b43b5ff531c060d902145a19eec56e  i2pinstall_0.9.5_windows.exe
af251596e034b751dc17b73bd35254b94f92d4a3121a6e96479c45c4d846ab30  i2pinstall_0.9.5.jar
441eac3cb7f25c03e7711c7d516626dc86ba6ad373145ab802d150848262c7c2  i2psource_0.9.5.tar.bz2
d20c3f3845c1f4a4cf734dc69cae7de72ff0874cea1382d03d8ac953c50fb139  i2pupdate_0.9.5.zip
06720a0f5067f4efdd1518f0dd1a2f7e65c78c76ae1e4dbd4b4ff72df65299ed  i2pupdate.su2
a14f5cfc3b50cbab73b7da8faba48f84e3afb91f112923c5249b6f053291e450  i2pupdate.sud