[tbb-bugs] #24421 [Applications/Tor Browser]: "Temporarily allow all this page" gets inherited when New Identity is chosen.

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Dec 18 13:51:59 UTC 2017

#24421: "Temporarily allow all this page" gets inherited when New Identity is
 Reporter:  cypherpunks                       |          Owner:  tbb-team
     Type:  defect                            |         Status:  new
 Priority:  High                              |      Milestone:
Component:  Applications/Tor Browser          |        Version:
 Severity:  Major                             |     Resolution:
 Keywords:  tbb-newnym, TorBrowserTeam201712  |  Actual Points:
Parent ID:                                    |         Points:
 Reviewer:                                    |        Sponsor:

Comment (by cypherpunks):

 Steps to reproduce for comment:5:

 1. Set High security setting (I was using that one, didn't bother to see
 if it affects other security settings).
 2. Go to the Bezos Washington Post Secure Drop: jcw5q6uyjioupxcc.onion
 (you can verify it here: securedrop.org/directory )
 3. Click on "Submit Documents".
 4. Click on "Use New Codename".
 5. Select some large file (we don't want the upload to finish so we don't
 waste the journalists' time wasting Bezos' money) like a Tor Browser
 6. Open your Gnome System Monitor and go to "Resources" and watch the
 network graph. You should see the upload at its peek values.
 7. Close the tab, you can see that the upload is still going.
 8. Click on New Identity, again, upload is still going.
 9. Close the Tor Browser, upload halts.

 It works for clearnet websites as well, you can test with
 https://catbox.moe/ following essentially the same procedure as the last
 ones above (i.e. 5-9).

Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24421#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

More information about the tbb-bugs mailing list