[tor-bugs] #5715 [TorBrowserButton]: "New Identity" has cache race conditions that temporarily allow evercookies

[Tor Bug Tracker & Wiki]

#5715: "New Identity" has cache race conditions that temporarily allow evercookies
---------------------------------+------------------------------------------
    Reporter:  guiseppe          |       Owner:  mikeperry      
        Type:  defect            |      Status:  closed         
    Priority:  critical          |   Milestone:                 
   Component:  TorBrowserButton  |     Version:                 
  Resolution:  fixed             |    Keywords:  MikePerry201205
      Parent:                    |      Points:  3              
Actualpoints:  3                 |  
---------------------------------+------------------------------------------

Comment(by mikeperry):

 I tested samy.pl repeatedly during the toggle model development, and again
 with New Identity development. We've had regressions on it before, and
 we'll probably have them again. As far as I know, it wasn't always broken,
 though. Also, in this case it was a race condition where evercookies only
 persisted for a short time after "New Identity", not a total break (at
 least with my testing on Linux). If some platforms were totally broken
 broken, please let me know.

 See #3846 and #5292 and consider helping out with testing new builds to
 prevent this from happening in the future.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5715#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online