[tbb-bugs] #16617 [Tor Browser]: Potential security hole du to cache policy

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Jul 21 17:56:24 UTC 2015


#16617: Potential security hole du to cache policy
-----------------------------+-------------------------------
     Reporter:  gojul        |      Owner:  tbb-team
         Type:  defect       |     Status:  needs_information
     Priority:  normal       |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+-------------------------------

Comment (by gk):

 Replying to [comment:2 gojul]:
 > By looking at the content of the files (there can be HTML and so on) and
 deducing which websites were actually visited.

 Who is looking and where? Note that Tor Browser is not defending against
 an attacker who has access to your computer. Moreover, Tor Browser is
 disabling the on disk cache. How should the attack work you have in mind?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16617#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list