[tor-bugs] #5715 [TorBrowserButton]: "New Identity" has cache race conditions that temporarily allow evercookies

[Tor Bug Tracker & Wiki]

#5715: "New Identity" has cache race conditions that temporarily allow evercookies
---------------------------------+------------------------------------------
    Reporter:  guiseppe          |       Owner:  mikeperry      
        Type:  defect            |      Status:  reopened       
    Priority:  critical          |   Milestone:                 
   Component:  TorBrowserButton  |     Version:                 
  Resolution:                    |    Keywords:  MikePerry201205
      Parent:                    |      Points:  3              
Actualpoints:  3                 |  
---------------------------------+------------------------------------------
Changes (by cypherpunks):

  * status:  closed => reopened
  * resolution:  fixed =>


Comment:

 Bad news from the evercookie frontierline.

 I have tested the new TBB (2.2.35-12).
 'samy.pl/evercookie' is still able to recover evercookies.

 Procedure to reproduce this:
 Go on the testing page, create an evercookie, click "New Identity", then
 return on the site and reactivate the evercookie.
 You will see: linkability is back!

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5715#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online