[tor-bugs] #18382 [Tor Browser]: Private browsing retains state

[Tor Bug Tracker & Wiki]

#18382: Private browsing retains state
-------------------------+--------------------------
 Reporter:  cypherpunks  |          Owner:  tbb-team
     Type:  defect       |         Status:  reopened
 Priority:  Medium       |      Milestone:
Component:  Tor Browser  |        Version:
 Severity:  Normal       |     Resolution:
 Keywords:               |  Actual Points:
Parent ID:               |         Points:
  Sponsor:               |
-------------------------+--------------------------

Comment (by cypherpunks):

 Replying to [comment:4 cypherpunks]:
 > >No it's not. "New identity" is a browser restart and loses all open
 tabs/windows.
 > The list of open tabs is the state which can be detected, right?
 That shouldn't be possible.

 Let's say you perform a Google search, Google will set a cookie. You close
 close all Google tabs. Later on, you perform another search. The tab for
 that new search will have access to the initial cookies and browser cache
 (the cache can be abused as cookie), since it doesn't get cleared if the
 browser isn't restarted.

 So Google can link all your searches while you leave the browser running.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18382#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online