[tor-bugs] #16856 [Tor Browser]: 'network.http.speculative-parallel-limit' default setting provides tracking-risk

[Tor Bug Tracker & Wiki]

#16856: 'network.http.speculative-parallel-limit' default setting provides
tracking-risk
-----------------------------+----------------------
     Reporter:  RickGeex_    |      Owner:  tbb-team
         Type:  defect       |     Status:  new
     Priority:  major        |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+----------------------
Changes (by gk):

 * keywords:  tor, tracking, default =>
 * version:  Tor: unspecified =>
 * milestone:  TorBrowserBundle 2.3.x-stable =>


Comment:

 What makes you sure we are susceptible to this risk given that

 a) We set `network.predictor.enabled` to `false`
 b) We are in Private Browsing Mode and "The seer does not record any data,
 nor does it take any action, when in private browsing mode."
 (https://wiki.mozilla.org/Privacy/Reviews/Necko)
 c) The seer should not be active at all given that we are using a proxy,
 see: https://gitweb.torproject.org/tor-
 browser.git/tree/netwerk/base/nsIOService.cpp?h=tor-
 browser-38.2.0esr-5.5-1#n1540)

 ?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16856#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online