[tor-bugs] #32857 [Applications/Tor Browser]: File parts are being automatically downloaded to /tmp

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Dec 30 19:43:52 UTC 2019


#32857: File parts are being automatically downloaded to /tmp
--------------------------------------+--------------------------
 Reporter:  g4vin0leary               |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  High                      |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  torbrowser /temp          |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by g4vin0leary):

 Going down the trails of tickets that #7449 leads to, it seems pretty
 obvious that Mozilla is totally indifferent to this problem. They don't
 care at all that /tmp is a really bad place to store any kind of user
 data. What are user profiles for? Why do we use encryption on our home
 folder?

 This has been an issue for nearly 20 years and nobody cares. That, in
 itself, makes using the tor browser outside of a live cd session very
 hazardous. It makes using Firefox, for any normal sensitive activity that
 merely require basic security, such accessing personal document on
 governments, schools, insurance, etc. websites very insecure.

 This situation should be yelled from the rooftops. People should be
 talking about this in blogs, youtube videos, tech shows, wherever.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/32857#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list