[tbb-bugs] #29887 [Applications/Tor Browser]: Potential user activity data leak

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Mar 27 08:29:17 UTC 2019


#29887: Potential user activity data leak
--------------------------------------+--------------------------
 Reporter:  pf.team                   |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  tbb-disk-leak             |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by cypherpunks):

 I would argue hiding the browser's last run time wouldn't be very
 successful and both the profile creation time or last run time may be
 easily gathered from the browser's file/folder creation/modification
 timestamps.

 But at least resetting the value of
 browser.laterrun.bookkeeping.sessionCount seems to be a good idea.

 @pf.team bookmarkbackups folder can contain up to 15 backups from
 different dates with timestamps that will show exactly when the browser
 was used. You may consider regularly cleaning that or disabling the
 bookmark backups altogether.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/29887#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list