[tor-bugs] #12455 [Tor bundles/installation]: Flash Player files sometimes start in background-using TB-without user action

[Tor Bug Tracker & Wiki]

#12455: Flash Player files sometimes start in background-using TB-without user
action
-------------------------------------+-------------------------------------
     Reporter:  joebt                |      Owner:  erinn
         Type:  defect               |     Status:  new
     Priority:  normal               |  Milestone:
    Component:  Tor                  |    Version:
  bundles/installation               |   Keywords:  plugin, Flash Player,
   Resolution:                       |  Tor Browser
Actual Points:                       |  Parent ID:
       Points:                       |
-------------------------------------+-------------------------------------

Comment (by joebt):

 Thanks.  I didn't mean it was a bug - specifically in TB, that when
 plugins like Flash (or others) are installed for using in Fx, that they
 show up in TB.  However, TB __allowing that to happen__ may be
 undesireable.

 But, if any plugin installs on a system basis -for vanilla Fx, it appears
 they may show up in TB.  And, the plugin may activate & carry out certain
 actions w/o users' knowledge - even if '''disabled''' in TB > Addon Mgr >
 Plugins.

 I'm not sure where you mean for screens from "Edit -> Preferences ->
 Applications."

 Don't see that (at this early hr).  AFAIK, no settings in the Flash
 Settings Manager have anything to do w/ when or under what circumstances
 it opens.

 On the page / question you linked, the replies were clueless (& wrong).
 Based on the fact that (apparently) the Flash .dll files are __actually
 running__ AND Process Explorer shows I/O read / write activity, they're
 doing something - not "just sitting."  What - I'm not sure, __except that
 Flash never actually plays anything__.  Something (whether Flash itself,
 or specific js on a page) is calling / notifying the Flash files to start.
 I'm NOT sure it ever happens if js is disable, but then most sites won't
 display the content to play, unless some js is allowed.

 Not sure what the TB plugin container has to do w/ Flash processes
 starting, if anything.  But the plugin container process is always shown
 running, whenever the Flash processes randomly appear.

 As for catching the Flash files running, '''it's not that easy.'''  I've
 kept both Process Explorer & TB open in partial pages before & watched for
 Flash to start when loading pages w/ Flash content.  So far, it's never
 started "while I'm watching."

 Once in a while I'll notice the Flash processes start times are recent
 (say, last 5 min.) & can link that time to a specific site (say, youtube)
 - but not necessarily the exact video.   Attempts to '''reproduce the
 cause''' of Flash starting have been unsuccessful.  E.G., closing Flash
 processes & going back to pages I visited, during the time shown that
 those processes started.  Leading one to believe __it's not "just any"
 page__ w/ Flash content that causes it to start in background.

 They don't start on every site / page with Flash content.  But they have
 started running even on youtube (I think), where html5 is set to run in TB
 - when available.  Whether there's a special way a small % of pages w/
 Flash content are configured that triggers Flash to start - even if
 disabled - not sure, but it's definitely sporadic.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12455#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online