[tbb-bugs] #23664 [Applications/Tor Browser]: Deal with GUID for content sandbox temp folder on Windows

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Sep 26 13:22:10 UTC 2017


#23664: Deal with GUID for content sandbox temp folder on Windows
-----------------------------------------+--------------------------
 Reporter:  gk                           |          Owner:  tbb-team
     Type:  defect                       |         Status:  new
 Priority:  Medium                       |      Milestone:
Component:  Applications/Tor Browser     |        Version:
 Severity:  Normal                       |     Resolution:
 Keywords:  tbb-security, tbb-disk-leak  |  Actual Points:
Parent ID:  #23658                       |         Points:
 Reviewer:                               |        Sponsor:
-----------------------------------------+--------------------------
Description changed by gk:

Old description:

> comment:56:ticket:16010 mentioned:
> {{{
> Very important side issue is that the sandboxing feature adds
> `security.sandbox.content.tempDirSuffix` pref which is a 128-bit GUID
> that allows to uniquely identify your copy of Tor Browser. It is
> persistent and leaves unique traces on every machine you use in system
> %TEMP% folder.
> }}}
> We should find a good way dealing with that. Maybe as a first start is to
> set the pref, so that every Windows users has the same sandbox temp dir
> name

New description:

 comment:56:ticket:16010 mentioned:
 {{{
 Very important side issue is that the sandboxing feature adds
 `security.sandbox.content.tempDirSuffix` pref which is a 128-bit GUID that
 allows to uniquely identify your copy of Tor Browser. It is persistent and
 leaves unique traces on every machine you use in system %TEMP% folder.
 }}}
 We should find a good way dealing with that. Maybe a first start is to set
 the pref, so that every Windows user has the same sandbox temp dir name.

--

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23664#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list