[tor-bugs] #8990 [Tor bundles/installation]: OS X per-user temp files contain traces of the Tor Browser Bundle

[Tor Bug Tracker & Wiki]

#8990: OS X per-user temp files contain traces of the Tor Browser Bundle
--------------------------------------+-------------------------------------
 Reporter:  runa                      |          Owner:  erinn
     Type:  defect                    |         Status:  new  
 Priority:  normal                    |      Milestone:       
Component:  Tor bundles/installation  |        Version:       
 Keywords:  tbb-disk-leak             |         Parent:       
   Points:                            |   Actualpoints:       
--------------------------------------+-------------------------------------
 A forensic analysis of the Tor Browser Bundle (version 2.3.25-6, 64-bit)
 on OS X 10.8 showed that per-user temp files contain traces of the Tor
 Browser Bundle.

 OS X stores per-user temporary files and caches in /var/folders/. The
 following files contain the path to the attached external drive, the path
 to the Tor Browser Bundle on the Desktop, and the path to the Tor Browser
 Bundle in the Trash:

  *
 /var/folders/fb/v5wqpgls029d8tp_pcjy0yth0000gn/C/com.apple.LaunchServices-036501.csstore
  *
 /var/folders/fb/v5wqpgls029d8tp_pcjy0yth0000gn/C/com.apple.QuickLook.thumbnailcache/index.sqlite
  *
 /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/C/com.apple.LaunchServices-0360.csstore
  *
 /var/folders/fb/v5wqpgls029d8tp_pcjy0yth0000gn/C/com.apple.QuickLook.thumbnailcache/thumbnails.data

 These files also contain strings such as org.torproject.torbrowserbundle,
 org.mozilla.torbrowser, torbrowser_en-us.app, torbrowser.app, net.vidalia-
 project.vidalia, and vidalia.app. I have not been able to open the last
 file, thumbnails.data but it might contain traces of the Tor Browser
 Bundle and/or the attached external drive.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8990>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online